last executing test programs: 1m11.111433445s ago: executing program 4 (id=25411): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r7}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m9.652422972s ago: executing program 4 (id=25432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1m9.434107688s ago: executing program 4 (id=25435): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m9.294235144s ago: executing program 4 (id=25437): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1m8.145705517s ago: executing program 4 (id=25445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1m7.300188716s ago: executing program 1 (id=25449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x448d0}, 0x44) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9086}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, 0x0, 0x1, 0x1, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf712}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff00}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000640)=0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000780)={r0, &(0x7f0000000680)='0000:00:10.0\x00', 0x101000, &(0x7f00000006c0)={@_ha_fsid={[0x4, 0x7]}, {0x7, 0x3, 0xbd31, 0x81}}, 0xd, &(0x7f0000000700), &(0x7f0000000740)=0x7}) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f00000007c0)="14fde7b8880a3f91194396dbb2e478162c2ce424c60361b690c0896ae05f80119dd414908cd67630cc6df3ad76fb308b812b0e770328d4b02f9c325cb62e8d840dab89b5261544eafc0cbe213b0dc826d9428854472daa1e337cd42493fa14dd7f53597c5e32e76b787a1624") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000840)) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x2a8, r3, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "f42ca03302811d438bc9dd24681130eeef9f1b24af55caf224643f0c3bda8d604ead6c4d21bcb1d66891d93387bc423ee50286b79e79f550e80039e734fcbec292761e154ecf902aa699568c1c1c7120c0ede258125eb7ea9764d9e2a6179b4f06406162fa428ad02d4e457e14336ed26408af3b01ce2d50247647bccb0da867a7fd44802a8cae03fbdf05ca9c17e8db3767cdc0e7cec7979dd110bdc74462e750328ac9fb5101"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x13, 0x5b, "9acd2a22509c670565a34b4ddef635"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "367a0abf1dfb7ad0cd230df59e2d4fb4adfc2192379c112d59f6a49d88db7c69ff75c669c1b09dab24262cdb2fe29f7cb88dde2eb52ea285007997385da478d66edecfdefce50c16bc22e2b3f670a9dcc40843b99da26a64d29981b1e76b20b3754f072ae98aa2bf03512d3bbc53d2e61811d42c015935ef5878d50a1daf5e5e4c9f4ae830cc8ca1ac93fe6a8b4c90aa923849ffa908ce2346d37229be66f1509651bb878c12edfe9ad983bc59"}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "39a1e4b9840b27f3ad2834e03d440600ee70b6d4e1bdce874fa2dc6229005d2015ccc948b6f6df76c8541e6193f76c358656a4d8b7715ac4ffdcdccbd467d4168596fdb6a47babde088d78fc7c7a2992943921d7ac7a66324529631bb5baf49c46cce522531256775422494b83318220b58c4b7a9181b27203cf6f46f4e3159acb3b54144c3eb033c02355ffab2eb917845b1ba059e94bbfde748f5d7dd541eb11cb92b9baa0906541c77622e344945037b83c6c2035418bb98bc010bbe35f97d395045a4aa72dd24f6ec0f6ed8ec1b8c959a18c377175bc60d4fad4c6707c8d3a874cf03cf7768523cf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0x2, 0x7, 0xc00, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000010c0)={0x0, r4, 0x3, 0xd, 0x1, 0xffffffffffffff68}) r5 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001100)={'veth1_to_bond\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10012000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)=@o_path={&(0x7f0000001380)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x6, &(0x7f0000001280)=@raw=[@ldst={0x3, 0x1, 0x2, 0x3, 0x4, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @generic={0x9, 0x1, 0x3, 0x7, 0x9}], &(0x7f00000012c0)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41100, 0x24, '\x00', r6, @fallback=0x19, r4, 0x8, &(0x7f0000001300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x2, 0x400, 0x8cdf}, 0x10, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="72a738af69141b355256972e6f60e7987e857679fbaff439a6b57c08a98f4c6357621d21c73c897a6a1d6b4e8929df26a37ea5ec31ff62af0fc410ab70da224a6c8413316ac0466407a482f70c582377dd76097b0add751797a1ca83963f48fa9e9c43b4255abd1e56cfc5293ec5562dc98eb727144522451c6a83a3beed4088d6e1030726adbef496f0d680ddda1ceed7", 0x91}, {&(0x7f0000001580)="f9c87267b94d008ee03832fc21e38c314a096c343693a18110243c9c03ad6c22a5e4da64c0620edc156480a0259e4d3d8a848a03ceceeae834cd43975aba1020de31607b86ec045b01d5336a6151473332467ca19d8a289a762c3dc84573162d19374ff74fe7f5c18885995e6b7f602bb2c3c98c081c873b52d9aad35bdc6d4f894828b03d7d65c8d838b86bcb2e04e74d04b12647e364f77599fd445f7ff0ce2975568ec73b60108de4b3ffba062a04c65c7af728b6e2e37349105d62e6ac9d9314528c4052b34b0b0fd24fa3af45e620d6c334a61189a006a0f51ee04eefc4decbc907c3", 0xe5}], 0x2, &(0x7f00000016c0)=[{0xa0, 0x0, 0x6, "8943bbc52e5a436fac27531a73d01cc8fd80249e03cba4c96bdb43e4ee54cd436d8e058a5a2a16d439816e945521e17cfd051b3f16619abd6ceb4df925368586dd23834ef7480c366133434a596781de648746856c939f2cedb9152ca9d1c615e432bd00cf7b1c98166272a3c57ee9ccaa8b38480d162a0977ecd7fb3767be912331df7d54b053888e04f43d81b6"}, {0x90, 0x10a, 0x8, "22b7c8e5d867f7ab8c3a8b8a944d3c66024a1d348de2310858004ecd8967e586dcb590c93f119700f191e2e4a0df0ad0d9080a68c9e24d6cae84a2950773db83049a9616b1af4aa5e2d78123abf2a850d41929419615106ae9221a323052034d81fd6fb600684633242f82668bad04c0613ca97b31c9a3995299ee2b9f"}], 0x130}, 0x40000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x18, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48880}, 0x20004800) syz_extract_tcp_res(&(0x7f0000001940), 0xfffffffb, 0x2) r8 = accept$inet(r4, &(0x7f0000001a00)={0x2, 0x0, @empty}, &(0x7f0000001a40)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001ac0)={r4, &(0x7f0000001980)="c20bb93ae6328bada87f05e83733d7a71739e27d9890958c60c7b89eb84a7d4f7a0a84ce93819ac4fac62f2af9f2e2aa008f08e6e7e6536b69393e764f3a34bd2c936e558835c0f46eb246365f71ea1f5fda60882248a05a5b645e737ed9017745473b574e4e198fcc2d9663cc71cc982c56f60e6f853f104b3eadbec78c", &(0x7f0000001a80)=@udp=r8, 0x4}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x81002000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1m7.205173818s ago: executing program 3 (id=25450): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78", 0x2c1}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x1c, 0x2c}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 1m6.733178968s ago: executing program 1 (id=25453): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x40, r2, 0x831b97362602f4f3, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe3cc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000004}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8841}, 0x20000090) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x111201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r4, @ANYRES8, @ANYRES32], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000726988ff64676500000c00028005002deb1f0000001ef540574773755e5e48ffffdb27390897ad7600921dbfc624177363d041a1d277a0385d7cb9d133c31251a0cd0ddbb60379d82f55ed4f485a28133748e3c270beb711070d7b52f804f613f73d7d2c7656722d398b99630dcc4f36cbe04f4fb06aac6fc323e86e43539e88ea3b6ba68e55f6a8537232e0bfe36952efae87ff50211fdfa1a05d32bb3c4abbe7a3740034b4a971f32fa3de77cd8db08c986a0f766f1a1144e3f8106134e5f2e5bc0bf85480ed180a25845949438d4bf49f1aac21cc5a9bb492adfc9feb642e353e60125e55f72023873d9b5038f10f034895e3642bcab0b97c1253d13c8f372348210be6989b17be08dba7aba191449156ea573750658500a70599ef3b85287654ce1ab7db34365034529848e243a0719efddc4041a3c19d258c2b860000000000000000000000000000000000bc3f0d8797eb1e790f1422ef696635abd456e583d11ead1abededc28acb63c0211a82bbc8981191e881604"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 1m6.117646375s ago: executing program 3 (id=25455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) r8 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) accept4(r8, &(0x7f0000000340)=@un=@abs, &(0x7f0000000400)=0x80, 0x80000) 1m5.549865156s ago: executing program 2 (id=25457): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000480)={0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) (fail_nth: 3) 1m4.821895683s ago: executing program 1 (id=25459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000300000080ff00000100000008000100020000002400048005000300020000000500030001000200050003000200000005000300010000000800020002"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20004080) 1m4.788339002s ago: executing program 0 (id=25460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0xfc, &(0x7f0000000000)="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", 0x41, 0x0, &(0x7f0000000140)="60cf6218ee59dbbe620c0da59ad7177c645069f14195eaca5eb42d96a0c9f6e0e6317d9a7c069551c4836b8a02e240a25a448a0f6a16dffc4323582dee184a18a4"}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f00000002c0)={0x0, 0x5e, 0x2, 0x7, 0x77be}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x0, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0xfffffffe, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d11, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0x7ff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffe, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0xfffffffc, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 1m4.712762681s ago: executing program 1 (id=25461): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000340)=""/4, 0x4}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m4.561476954s ago: executing program 2 (id=25462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c250000000000202020cb1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f0000008500a0007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) 1m4.48391415s ago: executing program 0 (id=25463): socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (fail_nth: 32) 1m4.392780639s ago: executing program 2 (id=25464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/243, 0xf3}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/152, 0x98}, {&(0x7f00000011c0)=""/233, 0xe9}], 0x4, &(0x7f0000001300)=""/49, 0x31}, 0xa}, {{&(0x7f0000001340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/80, 0x50}], 0x1, &(0x7f0000001480)=""/132, 0x84}, 0x9}], 0x2, 0xf0, 0x0) 1m4.125251115s ago: executing program 0 (id=25465): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="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", 0x2c1}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x1c, 0x2c}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 1m4.06367692s ago: executing program 2 (id=25466): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000340)=""/4, 0x4}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m2.542589063s ago: executing program 3 (id=25467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x4801) r2 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) 1m2.452251955s ago: executing program 3 (id=25468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x24008054) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf09}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x675ca373}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff5e8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2dd}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001500)={{r0, &(0x7f0000000300)='TIPCv2\x00', 0x120900, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x8]}, {0x4, 0x6d2e, 0x0, 0x3}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0xffffffff}, 0x2, &(0x7f00000014c0)=[{0x3, 0x8, &(0x7f0000000400)='[&)\x00', &(0x7f0000000440)="cb0fc4324b1104c834abaffe5519c4dcff9b2d7d1db3f777ede4cf2dad3622bc381d5a810f24c8d6", 0x28}, {0x2, 0x4, &(0x7f0000000480)='TIPCv2\x00', &(0x7f00000004c0)="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", 0x1000, 0x2}]}) sendmsg$nl_xfrm(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@flushpolicy={0x1c, 0x1d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x2400c8b0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, 0xffffffffffffffff, 0x14889) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001680)=[@in6={0xa, 0x4e24, 0x5, @local, 0x3}, @in6={0xa, 0x4e22, 0xfffffff5, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xc, @dev={0xfe, 0x80, '\x00', 0xa}, 0xf}], 0x64) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001700)) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000001740)={r1, 0x0, 0x8000000000000000, 0x6, 0xb56, 0xf}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001780)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000001940)={&(0x7f00000017c0)={0x1d, r5}, 0x10, &(0x7f0000001900)={&(0x7f0000001880)={0x2, 0x64, 0x3, {r6, r7/1000+60000}, {r8, r9/1000+60000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "be9c8d7f1af095f76376bb95046f30b1339a32f8ef0ffda346cfa01ca55193a78c583326d7de8001342f54a0dc0223960042513273147d4e52da10cc683d1561"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r1, 0x2edf0000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4b400448}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x104, r12, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcdab}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008040}, 0x2000c00) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000014) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000002100)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000001d40)={0x380, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1bc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @loopback, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @remote, 0x837}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcd}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c70d55f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a53419b0b4cb9a5cd7675bc35dfe93528c5e290e5c31"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7a29a7b0d21949a0fee9b61c82cfbb91c258ae3e3f3e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "844fe07fd005003aaec79c4e758d3aa8431052f32971caadb77bba9a324c63f8ccc0c244ddeb6ac18b7bad133c1ac60cd04e89c27377a6e4cbd8562467244b7b1dd0c0a8652e08025a8b89120625cb850a208037c060da9d16052f0fa93fdc58111811fb82095b3147c9162e799b8c23cddf51aa2658c5801c9c49cdad16c5a61c3c21404cfc3f316b03b1b5775cedc21b19cd300d8c857b1bfb84964a250b515dfa2af51dff2b7cc848086ad2fe47cc50"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4015}, 0xc004) syz_genetlink_get_family_id$wireguard(&(0x7f0000002140), r11) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000002180)={0x0, 0xfffffffffffffff2, 0x0, [0xe20, 0x5, 0x200000002, 0xf], [0x800, 0x324, 0x80000000, 0xe7, 0xfff, 0x3, 0x81, 0x1, 0x2, 0x0, 0x4, 0x8000000000000001, 0xe, 0x5, 0x8, 0x4, 0x3, 0x7, 0x401, 0x3, 0x7, 0x7, 0x2, 0x8, 0x8000000000000000, 0x7, 0x53a, 0x4, 0x7fffffffffffffff, 0x400, 0x7, 0x0, 0x2, 0x1ff, 0x9, 0x83, 0x8, 0xadc, 0x7, 0x8, 0x8, 0x8, 0x9, 0x7, 0x0, 0x765, 0x8000, 0x4, 0x8, 0x7, 0x8, 0xfffffffffffffffb, 0x1, 0x99, 0xffffffff923c14ea, 0x8, 0x80000001, 0x40, 0x1, 0x0, 0x8, 0x7, 0x8daa, 0x1800000000, 0x0, 0x3, 0xa6, 0x3, 0x7, 0x7, 0x10001, 0xdb3, 0x10, 0x2, 0x7, 0x1, 0x0, 0x401, 0x8d24, 0x800, 0xb8, 0x9, 0xfffffffffffffff8, 0x4, 0x8, 0x1, 0x0, 0x4, 0x8, 0x8, 0xfffffffffffffe00, 0x40, 0x101, 0x2, 0xb, 0xb5, 0x401, 0x6, 0x7, 0x7fffffff, 0x5, 0x4, 0x81, 0x80000000, 0x9, 0xfffffffffffffff8, 0x7, 0x13f, 0x2, 0x2, 0x0, 0xe, 0x0, 0x8, 0x8, 0x8000000000000001, 0xd, 0x1, 0x6a446ef8, 0x9, 0x1]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r13, 0x84009422, &(0x7f00000025c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r14, 0xc4009420, &(0x7f0000002dc0)={0x2, 0x3, {0x7, @struct={0x7, 0xe}, r15, 0x4, 0x8, 0x1000, 0x6, 0x7bd, 0x10, @usage=0x4, 0x9, 0x9, [0xab1, 0x8, 0x7, 0x8, 0x10, 0x1]}, {0x0, @struct={0x9, 0x6}, r16, 0xa8fa, 0x6000000000000, 0x7f, 0x8, 0x7fff, 0x42a, @struct={0x85f4, 0x6f82b158}, 0x3, 0x4, [0x3, 0xa, 0x1, 0xfffffffffffffff7, 0x7, 0xc10]}, {0x1, @usage=0x6, 0x0, 0x8c, 0x3, 0x5, 0xea1, 0x12c, 0x80, @struct={0x1, 0xb34}, 0x800, 0xffffffff, [0x0, 0x4000, 0x37d, 0x8]}, {0x1c000, 0x7, 0x3}}) 1m2.321379251s ago: executing program 4 (id=25469): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f00000000c0)='\x00', 0xc41, &(0x7f0000000140)={@align=0x1, {0x7, 0x1, 0x3, 0x100000000}}, 0x1, &(0x7f0000000180), &(0x7f00000001c0)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x1, 0x1, 0xfffff035}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004000)=ANY=[@ANYBLOB="140000001000010040000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffb080013"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket(0xb, 0x800, 0x3ff) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 1m2.247764298s ago: executing program 0 (id=25470): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, 0x0) unshare(0x2020000) close(r2) pread64(r0, &(0x7f0000000000), 0x0, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0xb2, 0x0, 0x80000000}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 1m2.074315181s ago: executing program 1 (id=25471): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) unshare(0x8000400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000004000000002300000000000018110000731b9318f97680e8d3ad806860b726c563d345040c006a53e3029678680119abe7717740e9c6ce41af743cdca54a3c0874bb94d060ebf845d6ce6a2e0c0907335a9cf2d5eefc03dca9b81bd6c03fe5692b1c23b5c2348f53558511383b7e12f6c4aa7f542207c898", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000cdaafcff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r4, 0x0, 0x0, 0x40001036, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="563f000018797465a20eab070004000523"], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800200002fd010000000008000100ac1414"], 0x44}}, 0x0) 1m1.953372246s ago: executing program 0 (id=25472): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000480)={0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) (fail_nth: 4) 1m1.711981519s ago: executing program 1 (id=25473): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1a}, @remote, 0x1, 0x2, [@remote, @dev={0xac, 0x14, 0x14, 0x13}]}, 0x18) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000700)={'geneve0\x00', {0x2, 0x4e23, @broadcast}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e40fe2ab36ece3e555380a0415dd42f53ed41aa8df1c5e81d9d02976fe228b5727cf6aeb92ddc84ae2564dd3e2c1913c5c17a095267609ff34088093a3f2e3418130b68e4fe0f25af528fc115c0b975cd9e3c96cde02c6f4e528a35e94b6f4"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00A\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000480)={0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) 1m1.42905913s ago: executing program 2 (id=25474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000600000000000000fd07000018010000756c6c24e5000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000002d000000ff7f00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702590fa4bd97449ee100000700000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) unshare(0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48850, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x300, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x30}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x604, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3a, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2525}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11}, &(0x7f0000000640), &(0x7f0000000680)=r12}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m1.428159502s ago: executing program 3 (id=25475): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (fail_nth: 3) 1m0.71721648s ago: executing program 3 (id=25476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) socket$kcm(0x23, 0xd, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f00000000c0)=0x81, 0x4) bind$inet6(r6, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}], 0x2, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 1m0.663743085s ago: executing program 2 (id=25477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x3, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000280)='GPL\x00', 0x56, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001ac0)=[{0x5, 0x5, 0x8, 0x3}], 0x10, 0x992}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001bc0)={0x2, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c00)={r2, 0x0, 0x25, 0x0, @val=@tracing={r3, 0x9}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="400200001000ffff28bd7000fbdbdf2500000080", @ANYRES32=0x0, @ANYBLOB="110a0500a3200000200012800b0001006272696467650000100002800a0014000180c20000030000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) unshare(0x200) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYRESOCT], 0x35c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 1m0.481343186s ago: executing program 0 (id=25478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x4801) r2 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) 0s ago: executing program 32 (id=25478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x4801) r2 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) kernel console output (not intermixed with test programs): tching+0x15/0xb0 [ 1738.650668][T22622] ? lock_release+0x4b/0x3c0 [ 1738.650690][T22622] ? __might_fault+0xcb/0x130 [ 1738.650711][T22622] __sys_sendmmsg+0x273/0x4d0 [ 1738.650746][T22622] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1738.650772][T22622] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1738.650799][T22622] ? ksys_write+0x242/0x270 [ 1738.650821][T22622] ? __pfx_ksys_write+0x10/0x10 [ 1738.650844][T22622] __x64_sys_sendmmsg+0xa0/0xc0 [ 1738.650865][T22622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.650882][T22622] do_syscall_64+0x174/0x580 [ 1738.650901][T22622] ? trace_irq_disable+0x3b/0x140 [ 1738.650922][T22622] ? clear_bhb_loop+0x40/0x90 [ 1738.650940][T22622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.650956][T22622] RIP: 0033:0x7f4e1939ce59 [ 1738.650972][T22622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.650986][T22622] RSP: 002b:00007f4e1a1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1738.651004][T22622] RAX: ffffffffffffffda RBX: 00007f4e19615fa0 RCX: 00007f4e1939ce59 [ 1738.651017][T22622] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000004 [ 1738.651028][T22622] RBP: 00007f4e1a1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.651038][T22622] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002 [ 1738.651048][T22622] R13: 00007f4e19616038 R14: 00007f4e19615fa0 R15: 00007fffc37eb6a8 [ 1738.651067][T22622] [ 1738.720109][T22627] netlink: 260 bytes leftover after parsing attributes in process `syz.2.24521'. [ 1738.754728][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1738.875389][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1738.922561][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24521'. [ 1738.943720][T22609] syzkaller0: entered promiscuous mode [ 1738.949457][T22609] syzkaller0: entered allmulticast mode [ 1738.958992][ T6674] hmó3)óÿ: left promiscuous mode [ 1738.990748][T22633] bond6: option min_links: invalid value (18446744073709551612) [ 1738.998627][T22633] bond6: option min_links: allowed values 0 - 2147483647 [ 1739.033164][T22641] netlink: 'syz.0.24522': attribute type 13 has an invalid length. [ 1739.041366][T22641] netlink: 'syz.0.24522': attribute type 17 has an invalid length. [ 1739.099320][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.113021][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24521'. [ 1739.259493][T22633] bond6 (unregistering): Released all slaves [ 1739.621598][T22512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.641728][T22512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.671920][T22512] bridge_slave_0: entered allmulticast mode [ 1739.689395][T22512] bridge_slave_0: entered promiscuous mode [ 1739.704016][T22512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.724007][T22512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.747002][T22512] bridge_slave_1: entered allmulticast mode [ 1739.759572][T22512] bridge_slave_1: entered promiscuous mode [ 1739.785779][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1739.838281][T22512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.850385][T22512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.919539][T22512] team0: Port device team_slave_0 added [ 1739.928812][T22512] team0: Port device team_slave_1 added [ 1739.980433][T22512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.995198][T22512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.008675][T22679] netlink: 'syz.0.24530': attribute type 32 has an invalid length. [ 1740.023053][T22512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.050865][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24530'. [ 1740.068074][T22512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.107506][T22512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.135696][T10881] Bluetooth: hci5: command tx timeout [ 1740.166562][T22512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.191575][T22679] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1740.355508][T22669] syzkaller1: entered promiscuous mode [ 1740.385141][T22669] syzkaller1: entered allmulticast mode [ 1740.456378][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1740.509068][T22512] hsr_slave_0: entered promiscuous mode [ 1740.533533][T22512] hsr_slave_1: entered promiscuous mode [ 1740.551865][T22512] debugfs: 'hsr0' already exists in 'hsr' [ 1740.566183][T22512] Cannot create hsr debugfs directory [ 1740.584971][ T6674] hsr_slave_0: left promiscuous mode [ 1740.606079][ T6674] hsr_slave_1: left promiscuous mode [ 1740.617928][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.636709][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.657747][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.670085][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.692914][ T6674] veth0_to_team: left promiscuous mode [ 1740.708333][ T6674] veth1_to_batadv: left promiscuous mode [ 1740.718604][ T6674] veth0_macvtap: left promiscuous mode [ 1740.735940][ T6674] veth1_vlan: left promiscuous mode [ 1740.752078][ T6674] veth0_vlan: left promiscuous mode [ 1740.755759][T22673] netlink: 'syz.4.24524': attribute type 13 has an invalid length. [ 1741.025307][ T6674] team0 (unregistering): Port device team_slave_1 removed [ 1741.039285][ T6674] team0 (unregistering): Port device team_slave_0 removed [ 1741.129150][T22708] syzkaller0: entered promiscuous mode [ 1741.135130][T22708] syzkaller0: entered allmulticast mode [ 1741.148252][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1741.172156][T22673] 0ªî{X¹¦: left allmulticast mode [ 1741.311065][T22673] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1741.348444][T22673] macvlan2: left promiscuous mode [ 1741.419612][T22718] geneve2: left promiscuous mode [ 1741.424610][T22718] geneve2: left allmulticast mode [ 1741.477963][ T9156] bridge0: entered promiscuous mode [ 1741.769205][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24541'. [ 1741.799246][T22736] xt_hashlimit: size too large, truncated to 1048576 [ 1741.815753][ C0] tc action pedit offset 150 out of bounds [ 1741.846957][T22512] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.919505][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24541'. [ 1741.966746][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24541'. [ 1742.180907][T22512] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.215671][T10881] Bluetooth: hci5: command tx timeout [ 1742.216526][T18704] net_ratelimit: 27 callbacks suppressed [ 1742.216542][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.239370][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1742.277862][ T6674] IPVS: stop unused estimator thread 0... [ 1742.357430][T22732] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1742.375643][ C1] tc action pedit offset 150 out of bounds [ 1742.388794][T18411] bond3: (slave bridge2): failed to get link speed/duplex [ 1742.453770][T22512] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.518859][T22762] lo: entered allmulticast mode [ 1742.545174][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1742.604240][T22512] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.669911][T22775] __nla_validate_parse: 4 callbacks suppressed [ 1742.669935][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.696141][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1742.709758][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.719425][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.733221][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.757481][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.778731][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1742.875282][T18411] bond3: (slave bridge2): failed to get link speed/duplex [ 1742.890886][T22512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1742.928356][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1742.949370][T22512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1742.987347][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.012307][T22512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1743.019743][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.037152][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24553'. [ 1743.061217][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1743.081919][T22512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1743.100353][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1743.215449][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1743.258323][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.285553][T22512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.329235][T22512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.361310][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.368476][T18424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.394942][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.402129][T18424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.445351][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1743.457691][T22819] validate_nla: 3 callbacks suppressed [ 1743.457720][T22819] netlink: 'syz.2.24557': attribute type 2 has an invalid length. [ 1743.531964][T22823] netlink: 'syz.0.24558': attribute type 1 has an invalid length. [ 1743.661843][T22823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1743.727006][T22829] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1743.773419][T22845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24562'. [ 1743.815352][ C0] tc action pedit offset 150 out of bounds [ 1743.833883][T22778] syzkaller0: entered promiscuous mode [ 1743.888392][T22778] syzkaller0: entered allmulticast mode [ 1743.937040][T22832] syzkaller0: left promiscuous mode [ 1743.942304][T22832] syzkaller0: left allmulticast mode [ 1744.001266][T22802] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1744.043257][T22823] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1744.060106][T22823] bond5: (slave batadv1): making interface the new active one [ 1744.078555][T22823] batadv1: entered promiscuous mode [ 1744.092206][T22823] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1744.129116][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24563'. [ 1744.142304][T18424] bond5: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 1744.298083][T10881] Bluetooth: hci5: command tx timeout [ 1744.324532][T22869] netlink: 'syz.0.24565': attribute type 13 has an invalid length. [ 1744.341587][T22869] netlink: 'syz.0.24565': attribute type 17 has an invalid length. [ 1744.621530][ T9156] tc action pedit offset 150 out of bounds [ 1744.715649][ T9022] tc action pedit offset 150 out of bounds [ 1744.794789][ T6674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1744.840824][T22512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1744.883921][T22899] FAULT_INJECTION: forcing a failure. [ 1744.883921][T22899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.912259][T18411] tc action pedit offset 150 out of bounds [ 1744.923944][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.0.24568 Not tainted syzkaller #0 PREEMPT(full) [ 1744.923969][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1744.923979][T22899] Call Trace: [ 1744.923986][T22899] [ 1744.923994][T22899] dump_stack_lvl+0xe8/0x150 [ 1744.924019][T22899] should_fail_ex+0x40c/0x560 [ 1744.924044][T22899] _copy_from_user+0x2d/0xb0 [ 1744.924066][T22899] ___sys_sendmsg+0x1c6/0x360 [ 1744.924094][T22899] ? __pfx____sys_sendmsg+0x10/0x10 [ 1744.924128][T22899] ? rcu_is_watching+0x15/0xb0 [ 1744.924146][T22899] ? lock_release+0x4b/0x3c0 [ 1744.924177][T22899] ? __might_fault+0xcb/0x130 [ 1744.924197][T22899] __sys_sendmmsg+0x273/0x4d0 [ 1744.924220][T22899] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1744.924244][T22899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1744.924274][T22899] ? ksys_write+0x242/0x270 [ 1744.924295][T22899] ? __pfx_ksys_write+0x10/0x10 [ 1744.924318][T22899] __x64_sys_sendmmsg+0xa0/0xc0 [ 1744.924339][T22899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.924355][T22899] do_syscall_64+0x174/0x580 [ 1744.924375][T22899] ? trace_irq_disable+0x3b/0x140 [ 1744.924396][T22899] ? clear_bhb_loop+0x40/0x90 [ 1744.924413][T22899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.924429][T22899] RIP: 0033:0x7f4e1939ce59 [ 1744.924445][T22899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.924459][T22899] RSP: 002b:00007f4e1a1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1744.924478][T22899] RAX: ffffffffffffffda RBX: 00007f4e19615fa0 RCX: 00007f4e1939ce59 [ 1744.924490][T22899] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000004 [ 1744.924501][T22899] RBP: 00007f4e1a1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1744.924512][T22899] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002 [ 1744.924522][T22899] R13: 00007f4e19616038 R14: 00007f4e19615fa0 R15: 00007fffc37eb6a8 [ 1744.924542][T22899] [ 1744.984367][T22512] veth0_vlan: entered promiscuous mode [ 1745.033843][T22902] xt_CT: No such helper "netbios-ns" [ 1745.139352][T22512] veth1_vlan: entered promiscuous mode [ 1745.176879][ T5736] tc action pedit offset 150 out of bounds [ 1745.212253][T18407] tc action pedit offset 150 out of bounds [ 1745.226477][T18407] tc action pedit offset 150 out of bounds [ 1745.297840][ T9156] tc action pedit offset 150 out of bounds [ 1745.452358][T22512] veth0_macvtap: entered promiscuous mode [ 1745.494300][T22512] veth1_macvtap: entered promiscuous mode [ 1745.550219][T22512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.570899][T22512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.803423][ T6674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.820163][ T6674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.836221][T22907] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1745.876106][ T6674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.916683][ T6674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.989248][T18411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.006010][T18411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.013623][T22937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24574'. [ 1746.051825][T22937] SET target dimension over the limit! [ 1746.063696][T18424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.082143][T18424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.197167][T22955] tcf_pedit_act: 7 callbacks suppressed [ 1746.197261][T22955] tc action pedit offset must be on 32 bit boundaries [ 1746.681604][T22979] bridge6: port 1(vlan2) entered blocking state [ 1746.691546][T22979] bridge6: port 1(vlan2) entered disabled state [ 1746.698914][T22975] xt_CT: No such helper "netbios-ns" [ 1746.712250][T22979] vlan2: entered allmulticast mode [ 1746.724575][T22979] bridge0: entered allmulticast mode [ 1746.734847][T22979] vlan2: entered promiscuous mode [ 1746.747769][T22968] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1746.841797][T22963] syzkaller0: entered promiscuous mode [ 1746.850324][T22963] syzkaller0: entered allmulticast mode [ 1746.962693][T22997] macvtap1: entered promiscuous mode [ 1746.989303][T22997] vlan0: entered promiscuous mode [ 1747.006123][T22997] vlan0: left promiscuous mode [ 1747.102734][ T6674] nci: nci_rx_work: unknown MT 0x1 [ 1747.109674][T22986] syzkaller0: entered promiscuous mode [ 1747.236080][T23007] syzkaller0: entered promiscuous mode [ 1747.241700][T23007] syzkaller0: entered allmulticast mode [ 1747.328141][T18424] net_ratelimit: 21 callbacks suppressed [ 1747.328159][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1747.417002][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.498501][T18424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.554239][T23026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1747.572218][T23025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1747.646147][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1747.660773][T23028] xt_CT: No such helper "netbios-ns" [ 1747.675297][T23031] __nla_validate_parse: 7 callbacks suppressed [ 1747.675314][T23031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24598'. [ 1747.736234][T22992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1747.758492][T23001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.768480][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1747.885193][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1747.923229][T23046] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1747.934590][T23046] bond6 (unregistering): Released all slaves [ 1747.995628][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1748.033698][T23058] netlink: 'syz.1.24608': attribute type 6 has an invalid length. [ 1748.105157][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1748.191731][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24615'. [ 1748.194907][T23076] bond6: entered allmulticast mode [ 1748.212874][T23080] ip6gre3: entered promiscuous mode [ 1748.218565][T23080] ip6gre3: entered allmulticast mode [ 1748.227705][T23080] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.228102][T18424] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.264115][ T9156] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.273256][T18424] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.529154][T23107] lo speed is unknown, defaulting to 1000 [ 1748.615461][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1748.847915][ T9156] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.857952][ T9156] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1748.881878][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24626'. [ 1748.895274][T23114] netlink: 260 bytes leftover after parsing attributes in process `syz.1.24627'. [ 1748.896330][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24626'. [ 1748.921070][T23112] tipc: Enabling of bearer rejected, failed to enable media [ 1749.152542][T23117] infiniband uyz0: set active [ 1749.157987][T23117] infiniband uyz0: added bridge_slave_1 [ 1749.172865][T23117] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1749.229938][T23117] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1749.250530][T23117] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1749.288133][T23117] RDS/IB: uyz0: added [ 1749.292333][T23117] smc: adding ib device uyz0 with port count 1 [ 1749.300785][T23117] smc: ib device uyz0 port 1 has no pnetid [ 1749.326047][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24633'. [ 1749.344587][T23131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24633'. [ 1749.348765][T23126] sctp: [Deprecated]: syz.0.24631 (pid 23126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1749.348765][T23126] Use struct sctp_sack_info instead [ 1749.668218][T23151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24636'. [ 1749.692629][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24639'. [ 1749.703690][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24639'. [ 1749.834827][T23159] FAULT_INJECTION: forcing a failure. [ 1749.834827][T23159] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.849700][T23159] CPU: 0 UID: 0 PID: 23159 Comm: syz.2.24642 Not tainted syzkaller #0 PREEMPT(full) [ 1749.849725][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1749.849744][T23159] Call Trace: [ 1749.849750][T23159] [ 1749.849763][T23159] dump_stack_lvl+0xe8/0x150 [ 1749.849787][T23159] should_fail_ex+0x40c/0x560 [ 1749.849807][T23159] should_failslab+0xa8/0x100 [ 1749.849831][T23159] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1749.849851][T23159] ? rcu_is_watching+0x15/0xb0 [ 1749.849868][T23159] ? __alloc_skb+0x1d7/0x7a0 [ 1749.849886][T23159] ? trace_irq_enable+0x3b/0x140 [ 1749.849908][T23159] __alloc_skb+0x1d7/0x7a0 [ 1749.849935][T23159] _sctp_make_chunk+0x59/0x290 [ 1749.849959][T23159] sctp_make_abort_user+0x9d/0x790 [ 1749.849977][T23159] ? rcu_is_watching+0x15/0xb0 [ 1749.849993][T23159] ? trace_irq_enable+0x3b/0x140 [ 1749.850013][T23159] ? __pfx_sctp_make_abort_user+0x10/0x10 [ 1749.850031][T23159] ? skb_dequeue+0x124/0x160 [ 1749.850048][T23159] ? sctp_queue_purge_ulpevents+0x14/0x130 [ 1749.850074][T23159] sctp_close+0x2a3/0x8d0 [ 1749.850099][T23159] ? __pfx_sctp_close+0x10/0x10 [ 1749.850120][T23159] ? down_write+0x16d/0x200 [ 1749.850141][T23159] ? ip_mc_drop_socket+0x25e/0x280 [ 1749.850237][T23159] inet_release+0x143/0x190 [ 1749.850257][T23159] sock_close+0xad/0x220 [ 1749.850274][T23159] ? __pfx_sock_close+0x10/0x10 [ 1749.850289][T23159] __fput+0x418/0xa50 [ 1749.850321][T23159] fput_close_sync+0x11f/0x240 [ 1749.850339][T23159] ? __pfx_fput_close_sync+0x10/0x10 [ 1749.850358][T23159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.850377][T23159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.850393][T23159] __x64_sys_close+0x7e/0x110 [ 1749.850412][T23159] do_syscall_64+0x174/0x580 [ 1749.850432][T23159] ? trace_irq_disable+0x3b/0x140 [ 1749.850451][T23159] ? clear_bhb_loop+0x40/0x90 [ 1749.850469][T23159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.850486][T23159] RIP: 0033:0x7f9e15f9ce59 [ 1749.850502][T23159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.850517][T23159] RSP: 002b:00007f9e16d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1749.850536][T23159] RAX: ffffffffffffffda RBX: 00007f9e16215fa0 RCX: 00007f9e15f9ce59 [ 1749.850548][T23159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1749.850558][T23159] RBP: 00007f9e16d74090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.850568][T23159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.850578][T23159] R13: 00007f9e16216038 R14: 00007f9e16215fa0 R15: 00007ffd697f32d8 [ 1749.850597][T23159] [ 1750.474851][T23177] netlink: 'syz.1.24649': attribute type 10 has an invalid length. [ 1750.488821][T23183] netlink: 'syz.0.24650': attribute type 32 has an invalid length. [ 1750.549161][T23183] bond6: Setting coupled_control to off (0) [ 1750.733024][T23201] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1750.834318][T23201] bond7 (unregistering): Released all slaves [ 1750.842071][T23206] netlink: 'syz.3.24658': attribute type 1 has an invalid length. [ 1750.933368][T23206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1750.959329][T23207] syzkaller0: entered promiscuous mode [ 1750.966961][T23207] syzkaller0: entered allmulticast mode [ 1750.985812][T23193] tipc: Enabled bearer , priority 0 [ 1751.083745][T23210] netlink: 'syz.3.24658': attribute type 10 has an invalid length. [ 1751.156366][T23196] tipc: Resetting bearer [ 1751.163308][T23196] tipc: Resetting bearer [ 1751.178020][T23206] bond4: (slave dummy0): making interface the new active one [ 1751.190981][T23206] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1751.250995][T23210] dummy0: entered promiscuous mode [ 1751.258729][T23210] bond4: (slave dummy0): Releasing active interface [ 1751.272839][T23211] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1751.299630][T23192] tipc: Resetting bearer [ 1751.328075][T23192] tipc: Disabling bearer [ 1751.335624][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1751.522109][T23227] xt_hashlimit: size too large, truncated to 1048576 [ 1751.698397][T23216] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1751.999439][T23247] netlink: 'syz.2.24673': attribute type 5 has an invalid length. [ 1752.215321][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1752.415240][T18400] net_ratelimit: 45 callbacks suppressed [ 1752.415260][T18400] bond3: (slave bridge2): failed to get link speed/duplex [ 1752.535315][T18400] bond3: (slave bridge2): failed to get link speed/duplex [ 1752.615757][ T3982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.616225][T23272] xt_hashlimit: size too large, truncated to 1048576 [ 1752.645782][T18400] bond3: (slave bridge2): failed to get link speed/duplex [ 1752.681356][T23255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1752.701020][T23270] __nla_validate_parse: 18 callbacks suppressed [ 1752.701041][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.719006][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.735576][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.746535][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.756433][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.768271][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24679'. [ 1752.795216][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1752.807957][T23276] netlink: 'syz.2.24680': attribute type 2 has an invalid length. [ 1752.863904][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24681'. [ 1752.882250][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24681'. [ 1752.919730][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24681'. [ 1752.933917][T23282] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24680'. [ 1752.945943][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1753.033854][T23286] xt_CT: No such helper "netbios-ns" [ 1753.058226][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1753.183537][T23296] syzkaller0: entered promiscuous mode [ 1753.208266][ T6674] bond3: (slave bridge2): failed to get link speed/duplex [ 1753.257316][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.302084][T23306] xt_hashlimit: size too large, truncated to 1048576 [ 1753.315014][T23304] atomic_op ffff888077dfa998 conn xmit_atomic 0000000000000000 [ 1753.327360][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1753.672308][T23327] 8021q: VLANs not supported on ip6_vti0 [ 1754.132689][T23344] xt_CONNSECMARK: invalid mode: 0 [ 1754.172748][T23341] xt_CT: No such helper "netbios-ns" [ 1754.204932][T23344] tun0: tun_chr_ioctl cmd 1074025680 [ 1754.239532][T23344] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1754.326222][T23351] tc action pedit unable to extract header offset for header type (0x4) [ 1754.364778][T23355] xt_hashlimit: size too large, truncated to 1048576 [ 1754.365922][T23284] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1754.676765][T23374] lo speed is unknown, defaulting to 1000 [ 1754.879021][T23378] netlink: 'syz.4.24711': attribute type 13 has an invalid length. [ 1754.889940][T23378] netlink: 'syz.4.24711': attribute type 17 has an invalid length. [ 1755.143250][T23390] xt_CT: No such helper "netbios-ns" [ 1755.280113][T23397] syzkaller0: entered promiscuous mode [ 1755.440483][T23410] xt_hashlimit: size too large, truncated to 1048576 [ 1755.693210][T23421] xt_CT: No such helper "netbios-ns" [ 1755.848405][T23432] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1755.939526][T23443] netlink: 'syz.4.24739': attribute type 1 has an invalid length. [ 1755.945635][T23432] bond7 (unregistering): Released all slaves [ 1755.983216][T23443] bond2: Removing last ns target with arp_interval on [ 1756.029219][T23448] netlink: 'syz.3.24740': attribute type 13 has an invalid length. [ 1756.235308][ T3982] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1756.300878][T18405] batadv1: left promiscuous mode [ 1756.350481][T23463] syzkaller0: entered promiscuous mode [ 1756.356899][T23463] syzkaller0: entered allmulticast mode [ 1756.371058][T23465] xt_CT: No such helper "netbios-ns" [ 1756.454909][T23461] syzkaller0: entered promiscuous mode [ 1756.461973][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1756.565357][ T3982] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1756.716158][T23493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 1756.874667][T23499] pim6reg1: entered promiscuous mode [ 1756.896456][T23499] pim6reg1: entered allmulticast mode [ 1756.942159][T23508] syzkaller0: entered allmulticast mode [ 1757.307601][T23542] syzkaller0: entered promiscuous mode [ 1757.313156][T23542] syzkaller0: entered allmulticast mode [ 1757.525259][T18407] net_ratelimit: 34 callbacks suppressed [ 1757.525280][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1757.645391][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1757.698482][T23565] netlink: 'syz.2.24781': attribute type 13 has an invalid length. [ 1757.707058][T23565] netlink: 'syz.2.24781': attribute type 17 has an invalid length. [ 1757.752712][T23565] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1757.771339][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1757.784236][T23566] netlink: 'syz.4.24782': attribute type 2 has an invalid length. [ 1757.818618][T23566] netlink: 'syz.4.24782': attribute type 2 has an invalid length. [ 1757.841686][T23571] tipc: Enabled bearer , priority 10 [ 1757.848050][T23570] tipc: Enabling of bearer rejected, already enabled [ 1757.889417][T23573] netlink: 'syz.2.24784': attribute type 30 has an invalid length. [ 1757.897768][ T3982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.915657][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1758.026584][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1758.109297][T23590] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1758.133669][T23591] sit0: Caught tx_queue_len zero misconfig [ 1758.155171][ T6674] bond3: (slave bridge2): failed to get link speed/duplex [ 1758.165245][T23595] __nla_validate_parse: 37 callbacks suppressed [ 1758.165262][T23595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24792'. [ 1758.269566][T23593] netlink: 'syz.0.24791': attribute type 1 has an invalid length. [ 1758.283207][T23595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24792'. [ 1758.291292][T23593] netlink: 88 bytes leftover after parsing attributes in process `syz.0.24791'. [ 1758.302441][T18407] bond3: (slave bridge2): failed to get link speed/duplex [ 1758.311838][T23593] netlink: 'syz.0.24791': attribute type 1 has an invalid length. [ 1758.321498][T23593] netlink: 638 bytes leftover after parsing attributes in process `syz.0.24791'. [ 1758.345982][T23593] netlink: 1 bytes leftover after parsing attributes in process `syz.0.24791'. [ 1758.388408][T23605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24794'. [ 1758.391950][T23593] veth1_to_batadv: entered promiscuous mode [ 1758.435245][T18400] bond3: (slave bridge2): failed to get link speed/duplex [ 1758.707099][T23612] FAULT_INJECTION: forcing a failure. [ 1758.707099][T23612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.723867][T23612] CPU: 1 UID: 0 PID: 23612 Comm: syz.0.24797 Not tainted syzkaller #0 PREEMPT(full) [ 1758.723899][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1758.723908][T23612] Call Trace: [ 1758.723916][T23612] [ 1758.723923][T23612] dump_stack_lvl+0xe8/0x150 [ 1758.723946][T23612] should_fail_ex+0x40c/0x560 [ 1758.723967][T23612] _copy_from_user+0x2d/0xb0 [ 1758.723988][T23612] ___sys_recvmsg+0x173/0x5a0 [ 1758.724014][T23612] ? __pfx____sys_recvmsg+0x10/0x10 [ 1758.724038][T23612] ? __fget_files+0x2a/0x420 [ 1758.724055][T23612] ? rcu_is_watching+0x15/0xb0 [ 1758.724079][T23612] ? rcu_is_watching+0x15/0xb0 [ 1758.724095][T23612] ? lock_release+0x4b/0x3c0 [ 1758.724118][T23612] ? __might_fault+0xcb/0x130 [ 1758.724138][T23612] do_recvmmsg+0x31a/0x7f0 [ 1758.724163][T23612] ? __pfx_do_recvmmsg+0x10/0x10 [ 1758.724189][T23612] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1758.724212][T23612] ? __fget_files+0x3a2/0x420 [ 1758.724233][T23612] __x64_sys_recvmmsg+0x198/0x250 [ 1758.724256][T23612] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1758.724280][T23612] ? rcu_is_watching+0x15/0xb0 [ 1758.724297][T23612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.724314][T23612] do_syscall_64+0x174/0x580 [ 1758.724335][T23612] ? clear_bhb_loop+0x40/0x90 [ 1758.724352][T23612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.724368][T23612] RIP: 0033:0x7f4e1939ce59 [ 1758.724383][T23612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.724396][T23612] RSP: 002b:00007f4e1a1ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1758.724415][T23612] RAX: ffffffffffffffda RBX: 00007f4e19615fa0 RCX: 00007f4e1939ce59 [ 1758.724427][T23612] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000006 [ 1758.724438][T23612] RBP: 00007f4e1a1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.724449][T23612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.724460][T23612] R13: 00007f4e19616038 R14: 00007f4e19615fa0 R15: 00007fffc37eb6a8 [ 1758.724479][T23612] [ 1759.036870][T18719] tipc: Node number set to 1322434795 [ 1759.203749][T23621] syzkaller0: entered promiscuous mode [ 1759.217457][T23621] syzkaller0: entered allmulticast mode [ 1759.285652][ T3982] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1759.374159][T23626] syzkaller0: entered promiscuous mode [ 1759.380835][T23626] syzkaller0: entered allmulticast mode [ 1759.443347][T23630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1759.942261][T23645] syzkaller0: entered promiscuous mode [ 1760.105451][T12085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1760.125977][T12085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1760.137541][T12085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1760.149360][T12085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1760.160201][T12085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1760.215569][ T3982] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1760.305215][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1760.508218][ T6674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.525542][ T6674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.568968][ T6674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.582610][ T6674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.622472][T23665] syzkaller0: entered promiscuous mode [ 1760.628401][T23665] syzkaller0: entered allmulticast mode [ 1760.651193][ T6674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.674587][ T6674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.758466][T23688] syzkaller0: entered promiscuous mode [ 1760.763975][T23688] syzkaller0: entered allmulticast mode [ 1760.791313][ T6674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.801878][ T6674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.874937][T23657] lo speed is unknown, defaulting to 1000 [ 1760.963991][ T6676] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1760.986812][ T6676] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1760.995982][ T6676] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1761.020988][ T6676] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1761.047204][ T6674] vlan2: left allmulticast mode [ 1761.054454][ T6674] geneve0: left allmulticast mode [ 1761.060468][ T6674] vlan2: left promiscuous mode [ 1761.069011][ T6674] bridge0: port 3(vlan2) entered disabled state [ 1761.181008][T23698] xt_hashlimit: size too large, truncated to 1048576 [ 1761.336082][ T6674] bond4 (unregistering): (slave ip6gretap0): Releasing active interface [ 1761.583997][ T6674] geneve0 (unregistering): left promiscuous mode [ 1761.649423][ T6674] bond0 (unregistering): Released all slaves [ 1761.662990][ T6674] bond1 (unregistering): Released all slaves [ 1761.684188][ T6674] bond2 (unregistering): Released all slaves [ 1761.707620][ T6674] bond3 (unregistering): Released all slaves [ 1761.730783][ T6674] bond4 (unregistering): Released all slaves [ 1761.752347][ T6674] bond5 (unregistering): (slave veth13): Releasing active interface [ 1761.761239][ T6674] batadv1: entered promiscuous mode [ 1761.784630][ T6674] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1761.799928][ T6674] bond5 (unregistering): Released all slaves [ 1761.816052][ T6674] bond6 (unregistering): Released all slaves [ 1761.832732][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24822'. [ 1761.850557][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24824'. [ 1761.952987][ T6674] tipc: Disabling bearer [ 1761.993231][ T6674] tipc: Left network mode [ 1762.167766][T23730] IPVS: length: 186 != 8 [ 1762.187474][T23731] xt_ecn: cannot match TCP bits for non-tcp packets [ 1762.218358][T12085] Bluetooth: hci3: command tx timeout [ 1762.221580][T23734] netlink: 'syz.1.24831': attribute type 2 has an invalid length. [ 1762.352478][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24832'. [ 1762.761763][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1762.904059][T23740] syzkaller0: entered promiscuous mode [ 1762.929184][ T6676] net_ratelimit: 23 callbacks suppressed [ 1762.929206][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1763.061031][T23789] netlink: 'syz.1.24843': attribute type 3 has an invalid length. [ 1763.117022][ T6674] hsr_slave_0: left promiscuous mode [ 1763.141983][ T6674] veth1_to_batadv: left promiscuous mode [ 1763.155547][ T6674] veth1_macvtap: left promiscuous mode [ 1763.165953][ T6674] veth0_macvtap: left promiscuous mode [ 1763.177312][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.187211][ T6674] veth1_vlan: left promiscuous mode [ 1763.202770][ T6674] veth0_vlan: left promiscuous mode [ 1763.691068][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1763.760999][T23657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.803994][T23657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.830660][T23657] bridge_slave_0: entered allmulticast mode [ 1763.848229][T23657] bridge_slave_0: entered promiscuous mode [ 1763.874218][T23657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.887004][T23657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.895681][T23657] bridge_slave_1: entered allmulticast mode [ 1763.907311][T23657] bridge_slave_1: entered promiscuous mode [ 1763.921120][T23833] __nla_validate_parse: 1 callbacks suppressed [ 1763.921139][T23833] netlink: 14 bytes leftover after parsing attributes in process `syz.1.24851'. [ 1763.939251][T18414] bond3: (slave bridge2): failed to get link speed/duplex [ 1764.073091][T23657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.117123][T18414] bond3: (slave bridge2): failed to get link speed/duplex [ 1764.182670][T23842] netlink: 'syz.3.24853': attribute type 13 has an invalid length. [ 1764.217119][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.258375][T23657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.300609][T18400] bond3: (slave bridge2): failed to get link speed/duplex [ 1764.307991][T12085] Bluetooth: hci3: command tx timeout [ 1764.316897][ T6674] IPVS: stop unused estimator thread 0... [ 1764.452969][T23854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24855'. [ 1764.476499][ T5736] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1764.488562][T23657] team0: Port device team_slave_0 added [ 1764.514840][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24853'. [ 1764.582561][T23657] team0: Port device team_slave_1 added [ 1764.631578][T23657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.648826][T23657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.698606][T23657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.711657][T23657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.719142][T23657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.749577][T23657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.776223][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.784368][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.803500][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1764.826015][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1764.842236][T23657] hsr_slave_0: entered promiscuous mode [ 1764.850071][T23657] hsr_slave_1: entered promiscuous mode [ 1764.859573][T23876] syzkaller0: entered promiscuous mode [ 1765.037847][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1765.071475][T23657] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.169510][T23657] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.271256][T23657] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.416690][ T9022] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1765.565879][T23657] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.770046][T23931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24872'. [ 1765.839089][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24871'. [ 1765.885600][ T5736] IPVS: starting estimator thread 0... [ 1765.972264][T23947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24871'. [ 1765.991066][T23657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1765.993490][T23940] IPVS: using max 49 ests per chain, 117600 per kthread [ 1766.024324][T23657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1766.045383][T23657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1766.139941][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24876'. [ 1766.238270][T23657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1766.260025][T23657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1766.301807][T23657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1766.327324][T23657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1766.327344][T23964] netlink: 'syz.1.24879': attribute type 13 has an invalid length. [ 1766.340413][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24876'. [ 1766.361571][T23657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.375659][T12085] Bluetooth: hci3: command tx timeout [ 1766.419732][ T6676] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1766.453682][ T6676] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1766.492749][ T6676] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1766.523089][ T6676] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1766.738677][T23657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.780526][T23657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.808588][T23988] lo speed is unknown, defaulting to 1000 [ 1766.815401][T18405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.823026][T18405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.866182][T18405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.873786][T18405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.932011][T23657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.977551][ T6674] net_ratelimit: 17 callbacks suppressed [ 1767.977583][ T6674] bond3: (slave bridge2): failed to get link speed/duplex [ 1768.050563][T23657] veth0_vlan: entered promiscuous mode [ 1768.093459][T23657] veth1_vlan: entered promiscuous mode [ 1768.113962][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24892'. [ 1768.130805][T24037] xt_hashlimit: size too large, truncated to 1048576 [ 1768.140316][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1768.180325][T23657] veth0_macvtap: entered promiscuous mode [ 1768.193391][T23657] veth1_macvtap: entered promiscuous mode [ 1768.242063][T23657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.267032][ T6674] bond3: (slave bridge2): failed to get link speed/duplex [ 1768.279874][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24892'. [ 1768.298675][T23657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.330272][T18405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.347625][T18400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.375988][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.391253][T18400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.401113][T18400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.416401][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1768.461577][T12085] Bluetooth: hci3: command tx timeout [ 1768.665522][T18424] bond3: (slave bridge2): failed to get link speed/duplex [ 1768.795919][T18405] bond3: (slave bridge2): failed to get link speed/duplex [ 1769.424005][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.500500][T24087] netlink: 'syz.4.24897': attribute type 6 has an invalid length. [ 1769.545692][T18414] bond3: (slave bridge2): failed to get link speed/duplex [ 1769.897012][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.960640][T18414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.007265][T18414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.051174][T18400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.066213][T18400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.258819][T24135] syzkaller0: entered promiscuous mode [ 1770.265278][T24135] syzkaller0: entered allmulticast mode [ 1770.429178][T24146] __nla_validate_parse: 6 callbacks suppressed [ 1770.429195][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24911'. [ 1770.469481][T24146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24911'. [ 1771.037058][T10881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1771.049215][T10881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1771.056666][T10881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1771.065669][T10881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1771.073164][T10881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1771.158935][T24168] lo speed is unknown, defaulting to 1000 [ 1771.544438][T24178] syzkaller0: entered promiscuous mode [ 1771.550226][T24178] syzkaller0: entered allmulticast mode [ 1772.119062][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24925'. [ 1772.277751][T24201] netlink: 'syz.1.24926': attribute type 13 has an invalid length. [ 1772.521198][T18424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.531975][T18424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43673 - 0 [ 1772.638675][T24203] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1772.651852][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24927'. [ 1772.686149][T18424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.699516][T18424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43673 - 0 [ 1772.814476][T24170] lo speed is unknown, defaulting to 1000 [ 1772.844860][T18424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.867813][T18424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43673 - 0 [ 1772.909529][T24216] syzkaller0: entered promiscuous mode [ 1772.918808][T24216] syzkaller0: entered allmulticast mode [ 1772.940847][T18424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.953410][T18424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43673 - 0 [ 1772.978164][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24929'. [ 1772.985232][ T6676] net_ratelimit: 18 callbacks suppressed [ 1772.985251][ T6676] bond3: (slave bridge2): failed to get link speed/duplex [ 1773.079679][ T6676] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.098952][T10881] Bluetooth: hci4: command tx timeout [ 1773.114716][ T6676] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.134408][ T6676] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.143084][ T6676] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.189870][T18424] vlan2: left allmulticast mode [ 1773.198299][T18424] bridge0: left allmulticast mode [ 1773.203690][T18424] vlan2: left promiscuous mode [ 1773.209119][T18424] bridge6: port 1(vlan2) entered disabled state [ 1773.253932][T18424] lo: left allmulticast mode [ 1773.502548][T18424] geneve0 (unregistering): left promiscuous mode [ 1773.535223][T18424] bond3 (unregistering): (slave bridge2): Removing an active aggregator [ 1773.544778][T18424] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1773.571557][T18424] bond0 (unregistering): Released all slaves [ 1773.578832][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.584057][T18424] bond1 (unregistering): Released all slaves [ 1773.600168][T18424] bond2 (unregistering): Released all slaves [ 1773.615734][T18424] bond3 (unregistering): Released all slaves [ 1773.628229][T18424] bond4 (unregistering): (slave veth5): Releasing active interface [ 1773.637919][T18424] bond4 (unregistering): Released all slaves [ 1773.649467][T18424] bond5 (unregistering): Released all slaves [ 1773.670151][T18424] bond6 (unregistering): Released all slaves [ 1773.765630][T18424] : left promiscuous mode [ 1773.808991][T18424] tipc: Left network mode [ 1773.863810][T18424] IPVS: stopping backup sync thread 19302 ... [ 1773.976265][T24242] ipt_ECN: cannot use operation on non-tcp rule [ 1774.154382][T24251] FAULT_INJECTION: forcing a failure. [ 1774.154382][T24251] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.173212][T24251] CPU: 1 UID: 0 PID: 24251 Comm: syz.0.24936 Not tainted syzkaller #0 PREEMPT(full) [ 1774.173238][T24251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1774.173248][T24251] Call Trace: [ 1774.173255][T24251] [ 1774.173262][T24251] dump_stack_lvl+0xe8/0x150 [ 1774.173286][T24251] should_fail_ex+0x40c/0x560 [ 1774.173305][T24251] should_failslab+0xa8/0x100 [ 1774.173328][T24251] __kmalloc_cache_node_noprof+0x8c/0x690 [ 1774.173351][T24251] ? page_pool_create_percpu+0x73/0xc70 [ 1774.173442][T24251] ? __kvmalloc_node_noprof+0x53d/0x890 [ 1774.173463][T24251] page_pool_create_percpu+0x73/0xc70 [ 1774.173480][T24251] ? page_pool_create+0xd/0x20 [ 1774.173497][T24251] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1774.173522][T24251] ? __mutex_unlock_slowpath+0x9f/0x8e0 [ 1774.173543][T24251] ? kasan_check_range+0x97/0x2c0 [ 1774.173567][T24251] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1774.173589][T24251] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1774.173620][T24251] ? 0xffffffffa0201658 [ 1774.173642][T24251] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1774.173664][T24251] ? _copy_from_user+0x94/0xb0 [ 1774.173685][T24251] ? bpf_test_init+0x113/0x150 [ 1774.173704][T24251] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1774.173727][T24251] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1774.173748][T24251] ? irqentry_exit+0x218/0x8f0 [ 1774.173771][T24251] ? rcu_is_watching+0x15/0xb0 [ 1774.173787][T24251] ? lock_release+0x4b/0x3c0 [ 1774.173809][T24251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1774.173833][T24251] ? __fget_files+0x2a/0x420 [ 1774.173853][T24251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1774.173874][T24251] bpf_prog_test_run+0x2c5/0x340 [ 1774.173897][T24251] __sys_bpf+0x643/0x950 [ 1774.173917][T24251] ? __pfx___sys_bpf+0x10/0x10 [ 1774.173943][T24251] ? ksys_write+0x242/0x270 [ 1774.173963][T24251] ? __pfx_ksys_write+0x10/0x10 [ 1774.173985][T24251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.174001][T24251] __x64_sys_bpf+0x7c/0x90 [ 1774.174019][T24251] do_syscall_64+0x174/0x580 [ 1774.174046][T24251] ? clear_bhb_loop+0x40/0x90 [ 1774.174062][T24251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.174077][T24251] RIP: 0033:0x7f60db99ce59 [ 1774.174091][T24251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.174105][T24251] RSP: 002b:00007f60dc83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1774.174122][T24251] RAX: ffffffffffffffda RBX: 00007f60dbc15fa0 RCX: 00007f60db99ce59 [ 1774.174133][T24251] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1774.174143][T24251] RBP: 00007f60dc83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.174153][T24251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.174162][T24251] R13: 00007f60dbc16038 R14: 00007f60dbc15fa0 R15: 00007ffc64953608 [ 1774.174181][T24251] [ 1774.615448][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.639081][T24264] syzkaller0: entered promiscuous mode [ 1774.644855][T24264] syzkaller0: entered allmulticast mode [ 1774.725614][T24170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.732816][T24170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.741787][T24170] bridge_slave_0: entered allmulticast mode [ 1774.749416][T24170] bridge_slave_0: entered promiscuous mode [ 1774.768768][T24276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24941'. [ 1774.769459][T24170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.787522][T24170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.795455][T24170] bridge_slave_1: entered allmulticast mode [ 1774.802555][T24170] bridge_slave_1: entered promiscuous mode [ 1774.818864][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1774.836635][T24274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24943'. [ 1774.914329][T24274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24943'. [ 1774.996891][T24170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.038688][T24170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.101501][T24170] team0: Port device team_slave_0 added [ 1775.113514][T24298] FAULT_INJECTION: forcing a failure. [ 1775.113514][T24298] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.121083][T24295] netlink: 'syz.0.24950': attribute type 2 has an invalid length. [ 1775.127728][T24298] CPU: 0 UID: 0 PID: 24298 Comm: syz.3.24949 Not tainted syzkaller #0 PREEMPT(full) [ 1775.127752][T24298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1775.127763][T24298] Call Trace: [ 1775.127770][T24298] [ 1775.127776][T24298] dump_stack_lvl+0xe8/0x150 [ 1775.127801][T24298] should_fail_ex+0x40c/0x560 [ 1775.127819][T24298] should_failslab+0xa8/0x100 [ 1775.127842][T24298] __kvmalloc_node_noprof+0x16e/0x890 [ 1775.127864][T24298] ? __kmalloc_cache_node_noprof+0x3dd/0x690 [ 1775.127883][T24298] ? page_pool_create_percpu+0x2ef/0xc70 [ 1775.127902][T24298] ? page_pool_create_percpu+0xa7/0xc70 [ 1775.127920][T24298] page_pool_create_percpu+0x2ef/0xc70 [ 1775.127939][T24298] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1775.127962][T24298] ? rcu_is_watching+0x15/0xb0 [ 1775.127979][T24298] ? lock_release+0x4b/0x3c0 [ 1775.128000][T24298] ? preempt_count_add+0x91/0x190 [ 1775.128022][T24298] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1775.128047][T24298] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1775.128076][T24298] ? 0xffffffffa020164c [ 1775.128101][T24298] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1775.128120][T24298] ? _copy_from_user+0x94/0xb0 [ 1775.128141][T24298] ? bpf_test_init+0x113/0x150 [ 1775.128159][T24298] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1775.128182][T24298] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1775.128202][T24298] ? lock_release+0x4b/0x3c0 [ 1775.128224][T24298] ? rcu_is_watching+0x15/0xb0 [ 1775.128239][T24298] ? lock_release+0x4b/0x3c0 [ 1775.128259][T24298] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1775.128283][T24298] ? __fget_files+0x2a/0x420 [ 1775.128301][T24298] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1775.128322][T24298] bpf_prog_test_run+0x2c5/0x340 [ 1775.128345][T24298] __sys_bpf+0x643/0x950 [ 1775.128365][T24298] ? __pfx___sys_bpf+0x10/0x10 [ 1775.128390][T24298] ? ksys_write+0x242/0x270 [ 1775.128411][T24298] ? __pfx_ksys_write+0x10/0x10 [ 1775.128430][T24298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.128446][T24298] __x64_sys_bpf+0x7c/0x90 [ 1775.128464][T24298] do_syscall_64+0x174/0x580 [ 1775.128482][T24298] ? trace_irq_disable+0x3b/0x140 [ 1775.128502][T24298] ? clear_bhb_loop+0x40/0x90 [ 1775.128523][T24298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.128538][T24298] RIP: 0033:0x7fc400b9ce59 [ 1775.128552][T24298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.128572][T24298] RSP: 002b:00007fc401984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1775.128591][T24298] RAX: ffffffffffffffda RBX: 00007fc400e15fa0 RCX: 00007fc400b9ce59 [ 1775.128602][T24298] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1775.128612][T24298] RBP: 00007fc401984090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.128623][T24298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.128632][T24298] R13: 00007fc400e16038 R14: 00007fc400e15fa0 R15: 00007fffef9a3c88 [ 1775.128650][T24298] [ 1775.128658][T24298] page_pool_create_percpu() gave up with errno -12 [ 1775.206170][T10881] Bluetooth: hci4: command tx timeout [ 1775.476251][T24170] team0: Port device team_slave_1 added [ 1775.541984][T24170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.552951][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.587321][T24170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.656930][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.665188][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.673288][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.695741][T24170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.714558][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.741218][T24170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.783510][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24952'. [ 1775.818688][T24310] lo speed is unknown, defaulting to 1000 [ 1775.893871][T24170] hsr_slave_0: entered promiscuous mode [ 1775.910279][T24170] hsr_slave_1: entered promiscuous mode [ 1775.925899][T24170] debugfs: 'hsr0' already exists in 'hsr' [ 1775.939539][T24170] Cannot create hsr debugfs directory [ 1776.161889][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1776.174767][T24170] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.317090][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1776.441616][T24170] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.663387][T24344] syzkaller0: entered promiscuous mode [ 1776.687998][T24344] syzkaller0: entered allmulticast mode [ 1776.696081][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.714487][T24327] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1776.760247][T24170] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.831110][T18424] hsr_slave_0: left promiscuous mode [ 1776.839649][T18424] hsr_slave_1: left promiscuous mode [ 1776.859344][T18424] veth1_macvtap: left promiscuous mode [ 1776.866992][T18424] veth0_macvtap: left promiscuous mode [ 1776.875821][T18424] veth1_vlan: left promiscuous mode [ 1776.881174][T18424] veth0_vlan: left promiscuous mode [ 1777.253050][T24355] netlink: 'syz.0.24958': attribute type 15 has an invalid length. [ 1777.331225][T24170] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.496485][T10881] Bluetooth: hci4: command tx timeout [ 1777.737259][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.772575][T24170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1777.802451][T24170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1777.824732][T24170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1777.869389][T24170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1777.892146][T24170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1777.938072][T24170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1777.966727][T24170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1778.080027][T24170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1778.131969][T24400] syzkaller0: entered promiscuous mode [ 1778.150685][T24400] syzkaller0: entered allmulticast mode [ 1778.172075][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24970'. [ 1778.260099][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24970'. [ 1778.289036][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24970'. [ 1778.312437][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24970'. [ 1778.369415][T24414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24971'. [ 1778.396787][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24971'. [ 1778.503645][T24170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.588017][T24170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1778.720904][T24170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1778.757136][T24170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1778.776166][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.794689][T18400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.801850][T18400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.823169][T18400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.830340][T18400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.986939][T24455] syzkaller0: entered promiscuous mode [ 1779.003706][T24455] syzkaller0: entered allmulticast mode [ 1779.354125][T24170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.368093][T24474] xt_CT: No such helper "netbios-ns" [ 1779.441682][T24170] veth0_vlan: entered promiscuous mode [ 1779.467837][T24170] veth1_vlan: entered promiscuous mode [ 1779.535522][T24170] veth0_macvtap: entered promiscuous mode [ 1779.544926][T24170] veth1_macvtap: entered promiscuous mode [ 1779.577606][T24488] netlink: 'syz.0.24985': attribute type 1 has an invalid length. [ 1779.579384][T10881] Bluetooth: hci4: command tx timeout [ 1779.599236][T24170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1779.693770][T24488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1779.728715][T24170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.752652][T24495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24986'. [ 1779.817481][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.938046][T24513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1779.956583][T24515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24986'. [ 1780.059164][T18400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.067640][T24520] netlink: 'syz.4.24987': attribute type 13 has an invalid length. [ 1780.076012][T18400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.076051][T18400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.076078][T18400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.246195][T24520] netlink: 'syz.4.24987': attribute type 17 has an invalid length. [ 1780.314953][T24537] xt_CT: No such helper "netbios-ns" [ 1780.473947][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.506761][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.569392][T18411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.583894][T18411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.659604][T24520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1780.720463][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24992'. [ 1780.741793][T24541] syzkaller0: entered promiscuous mode [ 1780.753200][T24541] syzkaller0: entered allmulticast mode [ 1780.856298][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.969552][T24572] geneve0: entered promiscuous mode [ 1780.983936][T24572] macvlan2: entered promiscuous mode [ 1781.067342][T24580] netlink: 'syz.2.24917': attribute type 1 has an invalid length. [ 1781.110727][T24585] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1781.140502][T24585] bond2 (unregistering): Released all slaves [ 1781.324355][T24598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25001'. [ 1781.380422][T24598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25001'. [ 1781.424353][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.432945][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.700015][T24608] bond1 (unregistering): Released all slaves [ 1781.895915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.989052][T24617] syzkaller0: entered promiscuous mode [ 1782.004279][T24617] syzkaller0: entered allmulticast mode [ 1782.067872][T24623] netlink: 'syz.3.25007': attribute type 13 has an invalid length. [ 1782.076336][T24623] netlink: 'syz.3.25007': attribute type 17 has an invalid length. [ 1782.139488][T24623] dummy0: left promiscuous mode [ 1782.297060][T24623] ip6gre3: left promiscuous mode [ 1782.297471][T24637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25013'. [ 1782.302065][T24623] ip6gre3: left allmulticast mode [ 1782.325367][T22208] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1782.373699][T24632] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1782.399419][T24632] bond1 (unregistering): Released all slaves [ 1782.482994][T24634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25013'. [ 1782.498848][T24644] syzkaller0: entered promiscuous mode [ 1782.505455][T24644] syzkaller0: entered allmulticast mode [ 1782.556864][ T6676] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1782.574400][ T6676] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1782.625640][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25017'. [ 1782.656228][T24651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25017'. [ 1782.791755][T24668] openvswitch: netlink: IP tunnel dst address not specified [ 1782.858405][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25021'. [ 1782.915840][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1782.935758][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.979392][T24627] lo speed is unknown, defaulting to 1000 [ 1783.505760][ T5736] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1783.606101][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25029'. [ 1783.639599][T24693] team1: entered promiscuous mode [ 1783.645654][T24693] team1: entered allmulticast mode [ 1783.651847][T24693] 8021q: adding VLAN 0 to HW filter on device team1 [ 1783.662272][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25029'. [ 1783.708248][T24695] team2: entered promiscuous mode [ 1783.714421][T24695] team2: entered allmulticast mode [ 1783.720962][T24695] 8021q: adding VLAN 0 to HW filter on device team2 [ 1783.901946][T24699] netlink: 'syz.3.25031': attribute type 1 has an invalid length. [ 1783.950673][T24699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1783.978707][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.019908][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25033'. [ 1784.102073][T24712] netlink: 'syz.3.25034': attribute type 4 has an invalid length. [ 1784.588768][T24722] openvswitch: netlink: VLAN attribute unexpected. [ 1784.699440][T24719] lo speed is unknown, defaulting to 1000 [ 1785.020405][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.111576][ T5736] IPVS: starting estimator thread 0... [ 1785.119898][T24763] xt_hashlimit: size too large, truncated to 1048576 [ 1785.181796][T24767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.216655][T24764] IPVS: using max 53 ests per chain, 127200 per kthread [ 1785.228453][T24768] netlink: 'syz.0.25047': attribute type 1 has an invalid length. [ 1785.229277][T24767] bridge_slave_0 (unregistering): left allmulticast mode [ 1785.284102][T24767] bridge_slave_0 (unregistering): left promiscuous mode [ 1785.293868][T24767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.601243][T24777] nbd: must specify a size in bytes for the device [ 1785.618568][T24777] nbd: couldn't find device at index 1 [ 1785.668353][T24777] Bluetooth: MGMT ver 1.23 [ 1786.059873][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.129910][T24796] xt_CT: No such helper "netbios-ns" [ 1786.229086][T24803] tipc: Started in network mode [ 1786.234469][T24803] tipc: Node identity ac1414aa, cluster identity 4711 [ 1786.244968][T24803] tipc: Enabled bearer , priority 10 [ 1786.496656][T24822] ip6erspan0: entered allmulticast mode [ 1786.522793][T24829] xt_CT: No such helper "netbios-ns" [ 1786.528585][T24822] __nla_validate_parse: 8 callbacks suppressed [ 1786.528613][T24822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25066'. [ 1786.537769][ T1325] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1786.843789][T24837] Cannot find add_set index 0 as target [ 1787.012097][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25070'. [ 1787.096338][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.137914][T24859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25074'. [ 1787.165765][T24859] netlink: 'syz.0.25074': attribute type 2 has an invalid length. [ 1787.176147][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.184727][T18424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.200217][T24859] netlink: 'syz.0.25074': attribute type 8 has an invalid length. [ 1787.237395][T24859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25074'. [ 1787.355242][ T5736] tipc: Node number set to 2886997162 [ 1787.382736][T24874] tipc: Started in network mode [ 1787.388243][T24874] tipc: Node identity ac14140f, cluster identity 4711 [ 1787.396353][T24874] tipc: Enabled bearer , priority 10 [ 1787.550856][T24885] ip6tnl2: entered allmulticast mode [ 1787.694728][T24892] syzkaller0: entered promiscuous mode [ 1787.733494][T24892] syzkaller0: entered allmulticast mode [ 1787.909021][T24907] netlink: 'syz.3.25093': attribute type 1 has an invalid length. [ 1787.957226][T24907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1787.987895][T24907] macvlan3: entered promiscuous mode [ 1787.993481][T24907] macvlan3: entered allmulticast mode [ 1787.999820][T24907] bond6: entered allmulticast mode [ 1788.009854][T24907] bond6: entered promiscuous mode [ 1788.017034][T24907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1788.027300][T24914] netlink: 'syz.3.25093': attribute type 1 has an invalid length. [ 1788.027941][T24907] team0: Port device macvlan3 added [ 1788.063378][T24917] macvlan4: entered promiscuous mode [ 1788.069951][T24917] macvlan4: entered allmulticast mode [ 1788.083395][T24917] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1788.092443][T24917] team0: Port device macvlan4 added [ 1788.135607][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.184161][T24922] xt_CT: No such helper "netbios-ns" [ 1788.239991][T24934] netlink: 220 bytes leftover after parsing attributes in process `syz.1.25101'. [ 1788.257470][T24934] netlink: 120 bytes leftover after parsing attributes in process `syz.1.25101'. [ 1788.267531][T24934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25101'. [ 1788.282799][T24934] vlan2: entered promiscuous mode [ 1788.288296][T24934] bridge0: entered promiscuous mode [ 1788.391572][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25102'. [ 1788.405345][ T9156] tipc: Node number set to 2886997007 [ 1788.441400][T24939] xt_hashlimit: size too large, truncated to 1048576 [ 1788.491273][T24944] netlink: 280 bytes leftover after parsing attributes in process `syz.0.25105'. [ 1788.514738][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25102'. [ 1788.526326][T12085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1788.539783][T12085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1788.551897][T12085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1788.564270][T12085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1788.574431][T12085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1788.668782][T24953] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 1788.966506][T24967] bond0: Caught tx_queue_len zero misconfig [ 1789.072450][T24946] lo speed is unknown, defaulting to 1000 [ 1789.113154][T24975] tc action pedit unable to extract header offset for header type (0x4) [ 1789.178203][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.408976][T24996] netlink: 'syz.2.25119': attribute type 7 has an invalid length. [ 1789.532967][T25005] xt_hashlimit: size too large, truncated to 1048576 [ 1789.702219][T25013] bond1: option resend_igmp: invalid value (2878) [ 1789.709270][T25013] bond1: option resend_igmp: allowed values 0 - 255 [ 1789.720271][T25013] bond1 (unregistering): Released all slaves [ 1789.773175][T24946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.783504][T24946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.792790][T24946] bridge_slave_0: entered allmulticast mode [ 1789.800734][T24946] bridge_slave_0: entered promiscuous mode [ 1789.810433][T25018] tipc: Enabled bearer , priority 0 [ 1789.824967][T24946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.832739][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.840245][T24946] bridge_slave_1: entered allmulticast mode [ 1789.847691][T24946] bridge_slave_1: entered promiscuous mode [ 1789.854909][T25018] syzkaller0: entered promiscuous mode [ 1789.880714][T25018] syzkaller0: entered allmulticast mode [ 1789.926905][T25020] bond2: option fail_over_mac: invalid value (127) [ 1789.937856][T25020] bond2 (unregistering): Released all slaves [ 1790.022679][T25025] netlink: 'syz.2.25126': attribute type 13 has an invalid length. [ 1790.035657][T24946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.044884][T25025] netlink: 'syz.2.25126': attribute type 17 has an invalid length. [ 1790.168263][T25031] syzkaller1: entered promiscuous mode [ 1790.174845][T25031] syzkaller1: entered allmulticast mode [ 1790.186442][T25037] tipc: Resetting bearer [ 1790.214095][T24946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.223690][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.256490][T25017] tipc: Resetting bearer [ 1790.264635][T25017] tipc: Disabling bearer [ 1790.316903][T24946] team0: Port device team_slave_0 added [ 1790.342124][T24946] team0: Port device team_slave_1 added [ 1790.407003][T24946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.408728][T25043] netlink: 'syz.1.25129': attribute type 49 has an invalid length. [ 1790.417407][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.457290][T24946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.496997][T24946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.506404][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.561242][T24946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.616568][T10881] Bluetooth: hci0: command tx timeout [ 1790.667269][T24946] hsr_slave_0: entered promiscuous mode [ 1790.684585][T24946] hsr_slave_1: entered promiscuous mode [ 1790.703119][T24946] debugfs: 'hsr0' already exists in 'hsr' [ 1790.716204][T24946] Cannot create hsr debugfs directory [ 1790.729401][T25061] xt_hashlimit: size too large, truncated to 1048576 [ 1790.756648][T25060] syzkaller0: entered promiscuous mode [ 1790.762177][T25060] syzkaller0: entered allmulticast mode [ 1791.024013][T24946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1791.044623][T24946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.196539][T24946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1791.214102][T24946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.258261][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.288912][T24946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1791.313894][T24946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.331223][T25040] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1791.352916][T25099] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1791.403301][T24946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1791.419576][T25104] netlink: 'syz.2.25143': attribute type 28 has an invalid length. [ 1791.428044][T25104] netlink: 'syz.2.25143': attribute type 3 has an invalid length. [ 1791.436252][T24946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.486716][T25095] lo speed is unknown, defaulting to 1000 [ 1791.522371][T25103] syzkaller0: entered promiscuous mode [ 1791.548478][T25103] syzkaller0: entered allmulticast mode [ 1791.661362][T24946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1791.677202][T24946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1791.691614][T24946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1791.709291][T24946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1791.724083][T24946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1791.743186][T24946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1791.761925][T25114] __nla_validate_parse: 28 callbacks suppressed [ 1791.761944][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25150'. [ 1791.779039][T24946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1791.788691][T24946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1791.831650][T25114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25150'. [ 1791.906038][T24946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.932396][T24946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.983484][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.990676][T18411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.001824][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.009037][T18411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.300226][T18400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.312033][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.588183][T25148] syzkaller0: entered promiscuous mode [ 1792.623837][T25148] syzkaller0: entered allmulticast mode [ 1792.696015][T10881] Bluetooth: hci0: command tx timeout [ 1792.936999][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.983252][T24946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.018298][T25161] xt_CT: No such helper "netbios-ns" [ 1793.083877][T24946] veth0_vlan: entered promiscuous mode [ 1793.094848][T25150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1793.112821][T24946] veth1_vlan: entered promiscuous mode [ 1793.166235][T24946] veth0_macvtap: entered promiscuous mode [ 1793.179604][T24946] veth1_macvtap: entered promiscuous mode [ 1793.209880][T24946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.226893][T25180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25169'. [ 1793.233085][T24946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.256052][T25181] syz_tun: entered allmulticast mode [ 1793.263154][T25180] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1793.282950][T25175] dvmrp8: entered allmulticast mode [ 1793.298941][T25173] syz_tun: left allmulticast mode [ 1793.311561][T18407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.332992][T18407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.345737][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.372551][T18407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.398392][T18407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.461163][T18411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.463137][T25187] syzkaller0: entered promiscuous mode [ 1793.473506][T18411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.487030][T25187] syzkaller0: entered allmulticast mode [ 1793.540621][T18407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.568127][T18407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.607404][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25175'. [ 1793.663296][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1793.672571][T25195] bond2: entered promiscuous mode [ 1793.677569][T25200] xt_hashlimit: size too large, truncated to 1048576 [ 1793.693311][T25195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1793.730520][T25201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1793.738910][T25201] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1793.751101][T25201] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 1793.781117][T25204] lo: Caught tx_queue_len zero misconfig [ 1793.795422][T25204] netlink: 'syz.1.25178': attribute type 14 has an invalid length. [ 1793.821996][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1793.874130][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1793.890398][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1793.909468][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1794.160738][T25221] netlink: 'syz.2.25184': attribute type 3 has an invalid length. [ 1794.177858][T25223] syzkaller0: entered promiscuous mode [ 1794.187340][T25223] syzkaller0: entered allmulticast mode [ 1794.319303][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25187'. [ 1794.382187][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.615081][T25254] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1897 [ 1794.729374][T25259] syzkaller0: entered promiscuous mode [ 1794.738123][T25259] syzkaller0: entered allmulticast mode [ 1794.775876][T10881] Bluetooth: hci0: command tx timeout [ 1794.947975][T25279] syzkaller0: entered promiscuous mode [ 1794.953970][T25279] syzkaller0: entered allmulticast mode [ 1794.972179][T25281] xt_hashlimit: size too large, truncated to 1048576 [ 1795.415577][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.729092][T25316] syzkaller0: entered promiscuous mode [ 1795.734714][T25316] syzkaller0: entered allmulticast mode [ 1795.826668][T25324] xt_hashlimit: size too large, truncated to 1048576 [ 1795.856415][T25328] syzkaller0: entered promiscuous mode [ 1795.863489][T25328] syzkaller0: entered allmulticast mode [ 1796.287042][T25354] syzkaller0: entered promiscuous mode [ 1796.301688][T25354] syzkaller0: entered allmulticast mode [ 1796.340429][T25357] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1796.353547][T25357] bond1 (unregistering): Released all slaves [ 1796.421945][T25362] syzkaller0: entered promiscuous mode [ 1796.427687][T25362] syzkaller0: entered allmulticast mode [ 1796.455376][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.536912][T25370] xt_hashlimit: size too large, truncated to 1048576 [ 1796.713694][T25382] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1796.748696][T25382] bond3 (unregistering): Released all slaves [ 1796.849975][T25385] netlink: 'syz.0.25246': attribute type 13 has an invalid length. [ 1796.860866][T25385] netlink: 'syz.0.25246': attribute type 17 has an invalid length. [ 1796.866861][T10881] Bluetooth: hci0: command tx timeout [ 1796.932730][T25395] __nla_validate_parse: 29 callbacks suppressed [ 1796.932759][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25247'. [ 1796.952912][T25385] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1797.050544][T25398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25248'. [ 1797.162695][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25249'. [ 1797.418596][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.499507][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.562798][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25254'. [ 1797.610279][T25416] bond0: Unable to set up delay as MII monitoring is disabled [ 1798.019783][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.049066][T25432] xt_hashlimit: size too large, truncated to 1048576 [ 1798.114258][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.140014][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.165929][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.215364][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.224495][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25257'. [ 1798.537890][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.571515][T25437] syzkaller0: entered promiscuous mode [ 1798.591419][T25437] syzkaller0: entered allmulticast mode [ 1798.697236][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.821803][T25440] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1798.901228][T25440] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1798.943252][T18405] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1799.157248][T25462] netlink: 'syz.0.25263': attribute type 13 has an invalid length. [ 1799.178764][T25462] netlink: 'syz.0.25263': attribute type 17 has an invalid length. [ 1799.388525][T25462] macvlan2: left promiscuous mode [ 1799.406464][T25462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1799.576694][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.696874][T25483] syzkaller0: entered promiscuous mode [ 1799.702589][T25483] syzkaller0: entered allmulticast mode [ 1800.129100][T25506] syzkaller0: entered promiscuous mode [ 1800.134676][T25506] syzkaller0: entered allmulticast mode [ 1800.617958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.655802][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.764845][T25444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1801.917357][T25516] syzkaller0: entered promiscuous mode [ 1801.928123][T25516] syzkaller0: entered allmulticast mode [ 1802.071701][T25524] __nla_validate_parse: 11 callbacks suppressed [ 1802.071721][T25524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25288'. [ 1802.104523][T25528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25287'. [ 1802.115949][T25524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25288'. [ 1802.165768][T25531] netlink: 72 bytes leftover after parsing attributes in process `syz.2.25290'. [ 1802.179432][T25529] netlink: 'syz.3.25289': attribute type 13 has an invalid length. [ 1802.190603][T25529] netlink: 'syz.3.25289': attribute type 17 has an invalid length. [ 1802.258776][T25537] netlink: 'syz.0.25292': attribute type 1 has an invalid length. [ 1802.331363][T25541] netlink: 'syz.2.25293': attribute type 2 has an invalid length. [ 1802.358549][T25541] netlink: 232 bytes leftover after parsing attributes in process `syz.2.25293'. [ 1802.370296][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25293'. [ 1802.382088][T25541] IPv6: NLM_F_CREATE should be specified when creating new route [ 1802.536407][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.569777][T25537] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1802.678066][T25543] syzkaller0: entered promiscuous mode [ 1802.692158][T25543] syzkaller0: entered allmulticast mode [ 1802.698213][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.710143][T25559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25299'. [ 1802.739641][T25559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25299'. [ 1802.754767][T25560] bridge2: entered allmulticast mode [ 1802.812563][T25562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.909393][T25570] macsec1: entered allmulticast mode [ 1802.914997][T25570] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1802.925722][T25570] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1802.934157][T25570] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1802.943359][T25570] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1803.008827][T25562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.038419][T18719] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1803.082821][T25568] geneve0: entered promiscuous mode [ 1803.093051][T25574] netlink: 3 bytes leftover after parsing attributes in process `syz.1.25301'. [ 1803.099291][T25568] geneve0: entered allmulticast mode [ 1803.111399][T25573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25304'. [ 1803.139317][T25574] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1803.148532][T25574] 0ªX¹¦À: entered allmulticast mode [ 1803.154455][T25574] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1803.345629][T25562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.437693][T25562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.581696][T25576] xt_hashlimit: size too large, truncated to 1048576 [ 1803.653117][T25585] syzkaller0: entered promiscuous mode [ 1803.709937][T18414] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.730393][T18405] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.739734][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.791709][T18414] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.807184][T25592] netlink: 'syz.2.25310': attribute type 13 has an invalid length. [ 1803.817700][T25597] C: renamed from veth1_to_team (while UP) [ 1803.819101][T25592] netlink: 'syz.2.25310': attribute type 17 has an invalid length. [ 1803.834694][T25597] netlink: 'syz.0.25312': attribute type 4 has an invalid length. [ 1803.843444][T25597] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1803.861599][T25596] netlink: 'syz.0.25312': attribute type 4 has an invalid length. [ 1803.873279][T25596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1803.894271][ T6676] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.978630][T12085] Bluetooth: hci2: command 0x0406 tx timeout [ 1804.047684][T25606] mac80211_hwsim hwsim257 wlan0: entered promiscuous mode [ 1804.054976][T25606] mac80211_hwsim hwsim257 wlan0: entered allmulticast mode [ 1804.139490][T25610] syzkaller0: entered promiscuous mode [ 1804.145802][T25610] syzkaller0: entered allmulticast mode [ 1804.224935][T25614] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1804.239792][T25614] bond3 (unregistering): Released all slaves [ 1804.264114][T25618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1804.399311][T25629] xfrm0: entered allmulticast mode [ 1804.578730][T25632] syzkaller0: entered promiscuous mode [ 1804.587308][T25632] syzkaller0: entered allmulticast mode [ 1804.709882][T25658] netlink: 'syz.2.25327': attribute type 13 has an invalid length. [ 1804.712152][T25654] xt_CT: No such helper "netbios-ns" [ 1804.718719][T25658] netlink: 'syz.2.25327': attribute type 17 has an invalid length. [ 1804.778754][ T9] net_ratelimit: 3 callbacks suppressed [ 1804.778773][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.830861][T25658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1805.357580][T25682] xt_hashlimit: size too large, truncated to 1048576 [ 1805.821481][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.927321][T25704] netlink: 'syz.2.25347': attribute type 13 has an invalid length. [ 1805.941033][T25704] netlink: 'syz.2.25347': attribute type 17 has an invalid length. [ 1806.223796][T25715] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1806.278087][T25715] bond2 (unregistering): Released all slaves [ 1806.538230][T25731] xt_CT: No such helper "netbios-ns" [ 1806.672782][T25741] lo speed is unknown, defaulting to 1000 [ 1806.857181][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.117480][T25765] __nla_validate_parse: 18 callbacks suppressed [ 1807.117499][T25765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25368'. [ 1807.169597][T25765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25368'. [ 1807.393980][T25776] xt_CT: No such helper "netbios-ns" [ 1807.445278][T25781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25373'. [ 1807.534708][T25785] syzkaller0: entered promiscuous mode [ 1807.553556][T25785] syzkaller0: entered allmulticast mode [ 1807.613867][T25785] xt_hashlimit: size too large, truncated to 1048576 [ 1807.651478][T25796] netlink: 'syz.2.25380': attribute type 1 has an invalid length. [ 1807.712493][T25796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1807.792784][T25804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25381'. [ 1807.807739][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25380'. [ 1807.856750][T25799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25380'. [ 1807.883536][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25381'. [ 1807.896255][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.054532][T25818] FAULT_INJECTION: forcing a failure. [ 1808.054532][T25818] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.067905][T25818] CPU: 1 UID: 0 PID: 25818 Comm: syz.2.25386 Not tainted syzkaller #0 PREEMPT(full) [ 1808.067932][T25818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.067942][T25818] Call Trace: [ 1808.067949][T25818] [ 1808.067956][T25818] dump_stack_lvl+0xe8/0x150 [ 1808.067982][T25818] should_fail_ex+0x40c/0x560 [ 1808.068001][T25818] should_failslab+0xa8/0x100 [ 1808.068025][T25818] ? skb_clone+0x212/0x3a0 [ 1808.068039][T25818] kmem_cache_alloc_noprof+0x87/0x650 [ 1808.068062][T25818] skb_clone+0x212/0x3a0 [ 1808.068075][T25818] ? llc_rcv+0x9f/0xcb0 [ 1808.068171][T25818] llc_rcv+0xc1/0xcb0 [ 1808.068187][T25818] __netif_receive_skb_core+0x2872/0x30b0 [ 1808.068208][T25818] ? kernel_text_address+0xa5/0xe0 [ 1808.068228][T25818] ? unwind_get_return_address+0x4d/0x90 [ 1808.068252][T25818] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1808.068277][T25818] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1808.068305][T25818] ? kasan_save_track+0x4f/0x80 [ 1808.068323][T25818] ? kasan_save_track+0x3e/0x80 [ 1808.068341][T25818] ? __kasan_slab_alloc+0x6c/0x80 [ 1808.068359][T25818] ? kmem_cache_alloc_bulk_noprof+0x49f/0x7c0 [ 1808.068382][T25818] __netif_receive_skb_list_core+0x24d/0x830 [ 1808.068405][T25818] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1808.068426][T25818] netif_receive_skb_list_internal+0x995/0xcf0 [ 1808.068446][T25818] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1808.068462][T25818] ? eth_type_trans+0x7c5/0x800 [ 1808.068505][T25818] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1808.068528][T25818] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 1808.068546][T25818] netif_receive_skb_list+0x55/0x450 [ 1808.068563][T25818] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 1808.068587][T25818] bpf_test_run_xdp_live+0x1875/0x1c20 [ 1808.068613][T25818] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1808.068638][T25818] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1808.068668][T25818] ? 0xffffffffa02016c8 [ 1808.068693][T25818] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1808.068712][T25818] ? _copy_from_user+0x94/0xb0 [ 1808.068731][T25818] ? bpf_test_init+0x113/0x150 [ 1808.068750][T25818] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1808.068772][T25818] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1808.068794][T25818] ? rcu_is_watching+0x15/0xb0 [ 1808.068820][T25818] ? rcu_is_watching+0x15/0xb0 [ 1808.068836][T25818] ? lock_release+0x4b/0x3c0 [ 1808.068859][T25818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1808.068882][T25818] ? __fget_files+0x2a/0x420 [ 1808.068903][T25818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1808.068923][T25818] bpf_prog_test_run+0x2c5/0x340 [ 1808.068948][T25818] __sys_bpf+0x643/0x950 [ 1808.068966][T25818] ? __pfx___sys_bpf+0x10/0x10 [ 1808.068989][T25818] ? ksys_write+0x242/0x270 [ 1808.069007][T25818] ? __pfx_ksys_write+0x10/0x10 [ 1808.069025][T25818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.069043][T25818] __x64_sys_bpf+0x7c/0x90 [ 1808.069061][T25818] do_syscall_64+0x174/0x580 [ 1808.069081][T25818] ? clear_bhb_loop+0x40/0x90 [ 1808.069097][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.069109][T25818] RIP: 0033:0x7f8e9c79ce59 [ 1808.069124][T25818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.069138][T25818] RSP: 002b:00007f8e9d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1808.069155][T25818] RAX: ffffffffffffffda RBX: 00007f8e9ca15fa0 RCX: 00007f8e9c79ce59 [ 1808.069166][T25818] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1808.069177][T25818] RBP: 00007f8e9d5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.069187][T25818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1808.069195][T25818] R13: 00007f8e9ca16038 R14: 00007f8e9ca15fa0 R15: 00007ffd1da84f88 [ 1808.069212][T25818] [ 1808.468349][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.584829][T25834] syzkaller0: entered promiscuous mode [ 1808.590652][T25834] syzkaller0: entered allmulticast mode [ 1808.757480][T25842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25393'. [ 1808.937169][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.993828][T25851] netlink: 'syz.3.25395': attribute type 13 has an invalid length. [ 1809.002048][T25851] netlink: 'syz.3.25395': attribute type 17 has an invalid length. [ 1809.120243][T25851] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1809.179880][T25851] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1809.210249][T25851] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1809.231326][T25851] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1809.402614][T25858] netlink: 'syz.4.25397': attribute type 13 has an invalid length. [ 1809.414038][T25858] netlink: 'syz.4.25397': attribute type 17 has an invalid length. [ 1809.660425][T25873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25405'. [ 1809.682983][T25874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25404'. [ 1809.837609][T25877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.854863][T25879] syzkaller0: entered promiscuous mode [ 1809.861171][T25879] syzkaller0: entered allmulticast mode [ 1809.910846][T25877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.990183][T25877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.003592][T18720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.044928][T25899] netlink: 'syz.4.25411': attribute type 1 has an invalid length. [ 1810.073376][T25899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1810.113342][T25877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.131972][T25904] geneve2: entered promiscuous mode [ 1810.138358][T25904] geneve2: entered allmulticast mode [ 1810.167875][T25899] bond3: (slave dummy0): making interface the new active one [ 1810.179616][T25899] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1810.220317][T18400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.299266][T18400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.331448][T18405] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.370402][T18400] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.401376][T18400] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.488706][T25916] xt_CT: No such helper "netbios-ns" [ 1810.672322][T25932] netlink: 'syz.1.25421': attribute type 16 has an invalid length. [ 1810.692947][T25932] netlink: 'syz.1.25421': attribute type 3 has an invalid length. [ 1810.732669][T25935] syzkaller0: entered promiscuous mode [ 1810.738368][T25935] syzkaller0: entered allmulticast mode [ 1811.015800][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.361109][T25951] bridge_slave_0: left allmulticast mode [ 1811.377009][T25951] bridge_slave_0: left promiscuous mode [ 1811.382830][T25951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.407962][T25951] bridge_slave_1: left allmulticast mode [ 1811.414373][T25951] bridge_slave_1: left promiscuous mode [ 1811.425629][T25951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.439946][T25951] bond0: (slave bond_slave_0): Releasing backup interface [ 1811.456110][T25951] bond0: (slave bond_slave_1): Releasing backup interface [ 1811.477632][T25951] team0: Port device team_slave_0 removed [ 1811.501253][T25951] team0: Port device team_slave_1 removed [ 1811.516425][T25951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.523920][T25951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.539934][T25951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.547972][T25951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.561945][T25951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1811.763108][T25978] syzkaller0: entered promiscuous mode [ 1811.769095][T25978] syzkaller0: entered allmulticast mode [ 1812.034775][T25987] FAULT_INJECTION: forcing a failure. [ 1812.034775][T25987] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.052548][T25987] CPU: 1 UID: 0 PID: 25987 Comm: syz.1.25438 Not tainted syzkaller #0 PREEMPT(full) [ 1812.052574][T25987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1812.052585][T25987] Call Trace: [ 1812.052592][T25987] [ 1812.052601][T25987] dump_stack_lvl+0xe8/0x150 [ 1812.052624][T25987] should_fail_ex+0x40c/0x560 [ 1812.052644][T25987] should_failslab+0xa8/0x100 [ 1812.052668][T25987] __kmalloc_noprof+0xe8/0x750 [ 1812.052689][T25987] ? tomoyo_encode+0x2ad/0x570 [ 1812.052710][T25987] tomoyo_encode+0x2ad/0x570 [ 1812.052728][T25987] tomoyo_realpath_from_path+0x5fa/0x640 [ 1812.052749][T25987] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1812.052770][T25987] tomoyo_path_number_perm+0x246/0x5f0 [ 1812.052791][T25987] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1812.052813][T25987] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1812.052834][T25987] ? preempt_count_add+0x91/0x190 [ 1812.052857][T25987] ? rcu_is_watching+0x15/0xb0 [ 1812.052876][T25987] ? hook_file_ioctl+0x1f0/0x5c0 [ 1812.052905][T25987] ? lock_release+0x4b/0x3c0 [ 1812.052930][T25987] ? __fget_files+0x2a/0x420 [ 1812.052947][T25987] ? __fget_files+0x3a2/0x420 [ 1812.052963][T25987] ? __fget_files+0x2a/0x420 [ 1812.052982][T25987] security_file_ioctl+0xc3/0x2a0 [ 1812.053003][T25987] __se_sys_ioctl+0x47/0x170 [ 1812.053022][T25987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.053040][T25987] do_syscall_64+0x174/0x580 [ 1812.053061][T25987] ? clear_bhb_loop+0x40/0x90 [ 1812.053079][T25987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.053094][T25987] RIP: 0033:0x7fa009d9ce59 [ 1812.053109][T25987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1812.053122][T25987] RSP: 002b:00007fa00acdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.053141][T25987] RAX: ffffffffffffffda RBX: 00007fa00a016180 RCX: 00007fa009d9ce59 [ 1812.053152][T25987] RDX: 0000200000000040 RSI: 0000000040107446 RDI: 0000000000000003 [ 1812.053163][T25987] RBP: 00007fa00acdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.053173][T25987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.053182][T25987] R13: 00007fa00a016218 R14: 00007fa00a016180 R15: 00007fff81808d28 [ 1812.053202][T25987] [ 1812.053273][T25987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1812.339735][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.397692][T25993] netlink: 'syz.3.25440': attribute type 13 has an invalid length. [ 1812.418571][T25993] netlink: 'syz.3.25440': attribute type 17 has an invalid length. [ 1812.637603][T25988] __nla_validate_parse: 18 callbacks suppressed [ 1812.637634][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25441'. [ 1812.772712][T25993] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1812.851224][T25993] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1812.962829][T25993] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1812.990481][T25993] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1813.617845][T26005] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1813.645697][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.062889][T26013] syzkaller0: entered promiscuous mode [ 1814.105588][T26013] syzkaller0: entered allmulticast mode [ 1814.185317][T26023] syzkaller0: entered promiscuous mode [ 1814.224569][T26023] syzkaller0: entered allmulticast mode [ 1814.799249][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.041045][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25454'. [ 1815.110284][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25454'. [ 1815.186960][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25454'. [ 1815.258830][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25454'. [ 1815.417792][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25454'. [ 1815.653095][T26045] FAULT_INJECTION: forcing a failure. [ 1815.653095][T26045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.720969][T26045] CPU: 1 UID: 0 PID: 26045 Comm: syz.2.25457 Not tainted syzkaller #0 PREEMPT(full) [ 1815.720996][T26045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1815.721006][T26045] Call Trace: [ 1815.721012][T26045] [ 1815.721020][T26045] dump_stack_lvl+0xe8/0x150 [ 1815.721044][T26045] should_fail_ex+0x40c/0x560 [ 1815.721064][T26045] _copy_from_user+0x2d/0xb0 [ 1815.721085][T26045] ppp_get_filter+0xa6/0x1d0 [ 1815.721228][T26045] ? __pfx_ppp_get_filter+0x10/0x10 [ 1815.721246][T26045] ? hook_file_ioctl+0x1f0/0x5c0 [ 1815.721273][T26045] ppp_ioctl+0xeb7/0x1b20 [ 1815.721299][T26045] ? __pfx_ppp_ioctl+0x10/0x10 [ 1815.721315][T26045] ? __fget_files+0x2a/0x420 [ 1815.721333][T26045] ? __fget_files+0x3a2/0x420 [ 1815.721349][T26045] ? __fget_files+0x2a/0x420 [ 1815.721367][T26045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1815.721391][T26045] ? __pfx_ppp_ioctl+0x10/0x10 [ 1815.721406][T26045] __se_sys_ioctl+0xfc/0x170 [ 1815.721427][T26045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.721445][T26045] do_syscall_64+0x174/0x580 [ 1815.721466][T26045] ? clear_bhb_loop+0x40/0x90 [ 1815.721484][T26045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.721500][T26045] RIP: 0033:0x7f8e9c79ce59 [ 1815.721515][T26045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.721530][T26045] RSP: 002b:00007f8e9d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1815.721548][T26045] RAX: ffffffffffffffda RBX: 00007f8e9ca15fa0 RCX: 00007f8e9c79ce59 [ 1815.721560][T26045] RDX: 0000200000000040 RSI: 0000000040107446 RDI: 0000000000000003 [ 1815.721570][T26045] RBP: 00007f8e9d5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.721580][T26045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.721590][T26045] R13: 00007f8e9ca16038 R14: 00007f8e9ca15fa0 R15: 00007ffd1da84f88 [ 1815.721610][T26045] [ 1816.218507][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.301307][T22208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.674341][T26053] netlink: 'syz.1.25461': attribute type 13 has an invalid length. [ 1816.722919][T26053] netlink: 'syz.1.25461': attribute type 17 has an invalid length. [ 1817.181031][T26053] 0ªX¹¦À: left allmulticast mode [ 1817.343841][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.535363][T26076] netlink: 'syz.2.25466': attribute type 13 has an invalid length. [ 1817.608297][T26076] netlink: 'syz.2.25466': attribute type 17 has an invalid length. [ 1817.921661][T18424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.262756][T26053] ip6tnl2: left allmulticast mode [ 1818.283299][T26053] vlan2: left promiscuous mode [ 1818.297367][T26053] bridge0: left promiscuous mode [ 1818.546233][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.849872][T26076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1818.924887][T26076] geneve2: left promiscuous mode [ 1818.956504][T26076] geneve2: left allmulticast mode [ 1819.149982][T26093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1819.157716][T26093] IPv6: NLM_F_CREATE should be set when creating new route [ 1819.181362][T26093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1819.209418][T26093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25471'. [ 1819.273315][T26095] FAULT_INJECTION: forcing a failure. [ 1819.273315][T26095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1819.344641][T26095] CPU: 1 UID: 0 PID: 26095 Comm: syz.0.25472 Not tainted syzkaller #0 PREEMPT(full) [ 1819.344667][T26095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.344678][T26095] Call Trace: [ 1819.344685][T26095] [ 1819.344693][T26095] dump_stack_lvl+0xe8/0x150 [ 1819.344717][T26095] should_fail_ex+0x40c/0x560 [ 1819.344737][T26095] _copy_to_user+0x31/0xb0 [ 1819.344759][T26095] simple_read_from_buffer+0xe1/0x170 [ 1819.344781][T26095] proc_fail_nth_read+0x1bb/0x230 [ 1819.344803][T26095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1819.344824][T26095] ? rw_verify_area+0x24a/0x4c0 [ 1819.344844][T26095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1819.344863][T26095] vfs_read+0x213/0xa80 [ 1819.344884][T26095] ? __pfx___mutex_lock+0x10/0x10 [ 1819.344905][T26095] ? __pfx_vfs_read+0x10/0x10 [ 1819.344927][T26095] ? __fget_files+0x3a2/0x420 [ 1819.344943][T26095] ? __fget_files+0x2a/0x420 [ 1819.344962][T26095] ksys_read+0x150/0x270 [ 1819.344982][T26095] ? __pfx_ksys_read+0x10/0x10 [ 1819.345001][T26095] ? __pfx_ppp_ioctl+0x10/0x10 [ 1819.345016][T26095] ? rcu_is_watching+0x15/0xb0 [ 1819.345035][T26095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.345049][T26095] do_syscall_64+0x174/0x580 [ 1819.345067][T26095] ? clear_bhb_loop+0x40/0x90 [ 1819.345085][T26095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.345100][T26095] RIP: 0033:0x7f60db95d68e [ 1819.345116][T26095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1819.345130][T26095] RSP: 002b:00007f60dc83cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1819.345150][T26095] RAX: ffffffffffffffda RBX: 00007f60dc83d6c0 RCX: 00007f60db95d68e [ 1819.345163][T26095] RDX: 000000000000000f RSI: 00007f60dc83d0a0 RDI: 0000000000000007 [ 1819.345173][T26095] RBP: 00007f60dc83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.345184][T26095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.345194][T26095] R13: 00007f60dbc16038 R14: 00007f60dbc15fa0 R15: 00007ffc64953608 [ 1819.345213][T26095] [ 1819.616208][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.630147][T26101] FAULT_INJECTION: forcing a failure. [ 1819.630147][T26101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1819.643389][T26101] CPU: 1 UID: 0 PID: 26101 Comm: syz.3.25475 Not tainted syzkaller #0 PREEMPT(full) [ 1819.643413][T26101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.643423][T26101] Call Trace: [ 1819.643430][T26101] [ 1819.643437][T26101] dump_stack_lvl+0xe8/0x150 [ 1819.643462][T26101] should_fail_ex+0x40c/0x560 [ 1819.643482][T26101] prepare_alloc_pages+0x230/0x650 [ 1819.643508][T26101] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1819.643532][T26101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1819.643556][T26101] ? __pfx_policy_nodemask+0x10/0x10 [ 1819.643578][T26101] ? rcu_is_watching+0x15/0xb0 [ 1819.643596][T26101] ? do_raw_spin_lock+0x12b/0x2f0 [ 1819.643618][T26101] alloc_pages_mpol+0x212/0x380 [ 1819.643642][T26101] alloc_pages_noprof+0xac/0x2a0 [ 1819.643665][T26101] __pmd_alloc+0x3a/0x5c0 [ 1819.643685][T26101] handle_mm_fault+0xe20/0x3080 [ 1819.643708][T26101] ? handle_mm_fault+0xec/0x3080 [ 1819.643728][T26101] ? __pfx_handle_mm_fault+0x10/0x10 [ 1819.643754][T26101] ? lock_mm_and_find_vma+0xa7/0x340 [ 1819.643776][T26101] do_user_addr_fault+0x744/0x1340 [ 1819.643799][T26101] exc_page_fault+0x6a/0xc0 [ 1819.643821][T26101] asm_exc_page_fault+0x26/0x30 [ 1819.643837][T26101] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1819.643856][T26101] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1819.643870][T26101] RSP: 0018:ffffc9000407fa38 EFLAGS: 00050206 [ 1819.643886][T26101] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1819.643897][T26101] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc9000407fac0 [ 1819.643909][T26101] RBP: ffffc9000407fc50 R08: ffffc9000407faf7 R09: 1ffff9200080ff5e [ 1819.643920][T26101] R10: dffffc0000000000 R11: fffff5200080ff5f R12: ffffc9000407fbc0 [ 1819.643932][T26101] R13: ffffc9000407fac0 R14: ffffc9000407fac0 R15: 00002000000004c0 [ 1819.643952][T26101] _copy_from_user+0x7a/0xb0 [ 1819.643974][T26101] ___sys_recvmsg+0x173/0x5a0 [ 1819.644000][T26101] ? __pfx____sys_recvmsg+0x10/0x10 [ 1819.644023][T26101] ? __fget_files+0x2a/0x420 [ 1819.644040][T26101] ? rcu_is_watching+0x15/0xb0 [ 1819.644062][T26101] ? __fget_files+0x3a2/0x420 [ 1819.644083][T26101] do_recvmmsg+0x31a/0x7f0 [ 1819.644108][T26101] ? __pfx_do_recvmmsg+0x10/0x10 [ 1819.644134][T26101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1819.644155][T26101] ? __fget_files+0x3a2/0x420 [ 1819.644176][T26101] __x64_sys_recvmmsg+0x198/0x250 [ 1819.644199][T26101] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1819.644230][T26101] ? rcu_is_watching+0x15/0xb0 [ 1819.644247][T26101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.644264][T26101] do_syscall_64+0x174/0x580 [ 1819.644282][T26101] ? trace_irq_disable+0x3b/0x140 [ 1819.644303][T26101] ? clear_bhb_loop+0x40/0x90 [ 1819.644321][T26101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.644337][T26101] RIP: 0033:0x7fee81b9ce59 [ 1819.644351][T26101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.644365][T26101] RSP: 002b:00007fee82aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1819.644381][T26101] RAX: ffffffffffffffda RBX: 00007fee81e15fa0 RCX: 00007fee81b9ce59 [ 1819.644393][T26101] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1819.644404][T26101] RBP: 00007fee82aba090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.644415][T26101] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 1819.644424][T26101] R13: 00007fee81e16038 R14: 00007fee81e15fa0 R15: 00007ffcdba99df8 [ 1819.644443][T26101] [ 1820.793207][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.380140][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1822.381345][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1824.080155][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.640706][ C0] sched: DL replenish lagged too much [ 1825.026151][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.103282][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.917549][T18409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.261745][ T1325] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1858.222197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.601977][T26122] netlink: 'syz.2.25477': attribute type 32 has an invalid length. [ 1870.609915][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25477'. [ 1879.063758][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.227142][T12085] Bluetooth: hci5: command 0x0406 tx timeout [ 1889.372023][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.661174][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.938418][ T1325] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1913.983096][T12085] Bluetooth: hci3: command tx timeout [ 1913.988532][T12085] Bluetooth: hci4: command 0x0406 tx timeout [ 1918.471349][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1919.102048][T26127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.167923][T12273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.507748][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1963.313635][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.129469][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.617766][ T1325] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1976.897474][T18719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.493487][ T30] INFO: task syz.2.25477:26120 blocked for more than 145 seconds. [ 1986.508911][ T30] Not tainted syzkaller #0 [ 1986.513888][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1988.726767][T14081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.493949][ T30] task:syz.2.25477 state:D stack:27568 pid:26120 tgid:26116 ppid:24170 task_flags:0x400040 flags:0x00080002