last executing test programs: 16.676096614s ago: executing program 0 (id=2952): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20004080, &(0x7f0000000040)={0xa, 0x4e20, 0x28b2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x10}, 0x1c) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r4}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) sendmmsg$inet_sctp(r0, &(0x7f0000002d40)=[{&(0x7f0000000180)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="016c11c8f7f2b3dc9439512f3faaa0e8e3572efbb4984d2d4ce536eb335406772e049eedb730625d9def697a091ba24122a5b6525b573608c39cccb8425e9a9ae3900e1d5496f1bb14307d52e0334668151b22", 0x53}, {&(0x7f0000000340)="23b309fce95b0ae68ecdea6ea5bfada7d4981b20e55e6a3f2505ef8bcb472d8096136dbd9367a21a2d64a73d7cbe89440f8f9f6d2baa58f5bfa35f89d298f03034ea396a5244b94445d225fa410f123af0937d3751ee6261c5455eb7cb7b1bdfb67f0fb3d651", 0x66}], 0x2, &(0x7f00000004c0)=[@sndinfo={0x20, 0x84, 0x2, {0x8001, 0x8204, 0x3f, 0x1, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x40, 0x4008091}, {&(0x7f0000000480)=@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="acf7b558bf9b2b4a33c90f8eaaf302235c6218d0e9ef3d535a90ae0d63755bdb465662188fa685cbc8d8529cfb68a38073904d755019dc057a526aae6b0ab765ba56ae744a57346f10b7fdf9a551471a588d81ee803587c4b47c901e0d4469e0c264d3f43cbc3fb9cb6fb8a860098b1fcb61fed2cde92e19d8d1e567d9bc095524775ad2a05a319b02d77d8916211fc3e180db0a31f0737a18f7a3f0c11ff05512f48f", 0xa3}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000000780)=@in6={0xa, 0x4e23, 0xfffffffa, @private0, 0x8}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f00000007c0)="0153fe2310b299d25506a4e5f34cc55380b625344197a56b763e947ba619bdc5cf87a3c6feb266286c786284bdd0e7fcc41386612abfac6aa25d58a50d3c4921dd7511774a2e7993deab4b84fe383d3b0fa41b73", 0x54}, {&(0x7f00000009c0)="7b4cce40ddedaec10b5e89a62cb33eefd071610767ab2f8b922b899c730a8b48447a9c43f6123d1fc0905cbd028885dd00cd86633f987851fa42aeaf9652abf87a2df3d01ba089dc71cb521021496240f29f16b2163a36592308a7f88172910effdf7c79b6bf29699e09beade5e05de9cf6bd0870b7d", 0x76}, {&(0x7f0000000a40)="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", 0xfe}, {&(0x7f0000000b40)="746d19f098c3a3251945d262b124b5b5946a09b025a07cfda8f5d9c547e71b92c9f955087b0a17fcc9f345f8c7fa89bb8d5b2fe71770af2c087663a16266ab5cc09e762119c7f68d4fc719a4d5c23b2347a40a22c60fd05c1a5e9213a6106c00c9cc571cd8c9bdaea77122e8e8862d00ddc4754faf31b38790d453e25cb2cbcc8cf4a148dbea074aabafde863f8aa534480fcc192119d16005830fded391f3148a40a11dc096ec8596816426a6d249ffd33ce2da09ae3e3637f75092ef34317520f97fec84a9cd8d6b4864cfcfd69dc983e6dfb9998d07344306dc5b1800d128dfc532e601d01b231d23b168cce93cc0", 0xf0}, {&(0x7f0000000c40)="b28676afe75068db7148522dab98ce4e7e325a", 0x13}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)='\x00\x00\x00\x00\x00\x00\x00', 0x7}, {&(0x7f0000001cc0)="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", 0xe00}], 0x8, 0x0, 0x0, 0x4000805}], 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008"], 0x50}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r9, 0x6, 0x52, 0x2}, &(0x7f0000000140)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socket$kcm(0xa, 0x5, 0x0) 15.593664775s ago: executing program 0 (id=2960): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x30006041) (async) r2 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000540)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) close(r2) (async) close(r1) 15.15033355s ago: executing program 0 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007faca974d63600070127bd7000fddbdf25017c00000c000700040000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r1, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x2000200b}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000018}) 14.422700243s ago: executing program 0 (id=2966): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/174, 0xae}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/14, 0xe}], 0x5, &(0x7f0000002380)=""/21, 0x15}, 0x2040) connect$can_bcm(r1, &(0x7f0000002400), 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002700)={&(0x7f0000002440), &(0x7f0000002480)=""/206, &(0x7f0000002580)="4c8330db5fbffd9f9ec65c56b2b7893b01fe3842642dca0b632e898f81ee01af1b5d5bf664ebbbe04eafbd0d0d578a57111500aeddceeb674e101c2ed0195b3b9118094651ec5a35a26e13b8658e0ce85459423d62fa98ac5e42925573adf67380fbd913546fcc3dc9edfd5a7e6897c057eba91afc69c8f2860c165e121d8091d5e98485149d3e3c3c5a46a46867bb5152e3723e12ea45e89cf7ab740a45b6cbeb98444398fbecc6a5515c83b8fb639cb1446669bf80eead87b05215fe9f639c6f92d1d595aa9ef0247aeb1d8ddad283b58275a041ed", &(0x7f0000002680)="b7daf08be9898065a954dd13d4567f50d0457429dab624f21493a3c41a4aca059c403c0cc5da0eafdb9ba5bb04a5599fdeebfe706c3d5d06d73f67f33d1da42f5c045d0b68a1850651559ed398929ec371a1e3e4ef25c3f859a011a0da14914dd0f756dab3a1abd6a6aef898290dce", 0xfffffff7}, 0x38) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0xf}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000029c0)={@in6={{0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x0, 0x0, 0x9, 0x0, "90e75666213afa16111bff51eacfa3e7a001269b70ac9ea7105d64f8e8f6eeb2d62fab9aed688e1c15847c3cb7a434ac33e31eba896ffc12633c9624765a9828e3723c7f2f8ee5a59fe9c651decc919c"}, 0xd8) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002ac0), &(0x7f0000002b00)=0x30) sendmsg$rds(r0, &(0x7f0000003280)={&(0x7f0000002b40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002b80)=""/204, 0xcc}, {&(0x7f0000002c80)=""/236, 0xec}], 0x2, &(0x7f0000003140)=[@mask_fadd={0x58, 0x114, 0x8, {{0xfffffff8, 0x56b3}, &(0x7f0000002dc0)=0x7, &(0x7f0000002e00)=0xffffffff00000000, 0x5, 0x2, 0xcf16, 0x551, 0x4, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x400}, {&(0x7f0000002e40)=""/102, 0x66}, &(0x7f0000003080)=[{&(0x7f0000002ec0)=""/113, 0x71}, {&(0x7f0000002f40)=""/23, 0x17}, {&(0x7f0000002f80)=""/203, 0xcb}], 0x3, 0xc, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x8000, 0x8f0}, &(0x7f00000030c0)=0x8, &(0x7f0000003100), 0x5, 0x41d4, 0x0, 0x1ff, 0x0, 0xf2a}}, @rdma_dest={0x18, 0x114, 0x2, {0x8001, 0x5}}], 0x110, 0x898}, 0x800) getsockname(r0, &(0x7f00000032c0)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000003340)=0x80) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x44, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000003500)={0x1, 0x7, 0x21, &(0x7f00000034c0)=""/33}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003540), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003800)={r5, 0x0, 0x71, 0x34, &(0x7f0000003580)="4635bcf66780c81ba0210a6840a4b15fedfeefb2d55f7c109ad88e97feeb36c375f48bd0e51f00aac82dc85f82fe96e17737947a8fbef04258f9a6c352e75e66a9d68ebfcedc3ccf46e1fd0c57a64f23553b7d4ff76a2a4be521d8fe9749bd15a4334876711b65b2c9d3de33914e171e4b", &(0x7f0000003600)=""/52, 0x6, 0x0, 0x88, 0xef, &(0x7f0000003640)="4d576956ca5d91cd241669ed3c8d778beedc4354c75835423aae50e3961d957832fa38f0c217384b2033c272ad95bf484b5b79ddccbee32b50fcbccf8124e925f070e18833de1171cb5541d8f6d20926c14f967622c22f211c7ad01128a007f090c62ba5c8e487c256f2a83f67738626917dd41e30682f0d7cabb0c389da43ddade4eb5c1a5d02b4", &(0x7f0000003700)="fb4f5739ac64e9090818d113b5e2e39467cea0db92178cbe888c0df3375a438a0def13af8357cde2b8cc618be45e60b754ff443d8266ffdc784d5b17d0dfee9a7dab5c58a33d29a0bc5ba01b78e2d3b7235d0c9c8f02caa685c01d81a1e424f1879c55df38e26662fb1f519d41961434b3a346477d51c081d5087c4f3cc0056678a83e560c399fa71b7522965135c15edb97d51d6dc33b762303ce5e1d187456e54241c736660e24b25a3218c1856c45212fbcff7b593d205d11012fdca8c5210a1afedbf5828183e54598d64da56dff169ab26689a60b3e45c8eccd9f7d266c965b51ca7041b6ddb2f6bd9e9a4acf", 0x2, 0x0, 0x4}, 0x50) setsockopt$sock_int(r4, 0x1, 0x55, &(0x7f0000003880)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000038c0)=0x7, 0x4) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000003900), &(0x7f0000003940)=0x4) writev(r1, &(0x7f0000004a80)=[{&(0x7f0000003980)="80de8ce21b185aebedffe3742f788da086c20661841e5842ae6e4b1103915d12df629cd2c37e1704d0a77c0672be0c347743a1012274e47637ce9d267114dd6e26b514df7cd10ea6005057624d3f10c9cc7ef5a8d1a2e4195e20fd0dc54bb1561f11fd2d2279d22ac4698b99783f4cae15829ea2cb631ac5cdafcb39568e7a8e32a0d1f7eb039a330ca7543fa82a5d64a9364d7a6f7787294debd74d43d666fa640f5b3ba4123e5566e95f05", 0xac}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="f7df00e2e204", 0x6}], 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004ac0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004b00)={r6, 0xffffffffffffffff}, 0x4) close(r7) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004e80)={&(0x7f0000004c40)="dddfdb46b7cdc6902e624ae94277f5ffeca4a2bbdfa88306d369a3c7d09b0f28c5b7f52e7c855e2f6cba88b5c780dc5b3a2386e99ec6c99909657654040338f30fee6864c490dbaf0aa47f3b98b29593e157225ae8b29740bdfcf7e72f5ab229f5888107f8cd3d024c4279a9ae2eb0bde9ca9d643f19d49484aa2c56dd9ec4055592803c139f6082243a771cd865bb862da84d0d26c82d6761b7d2b862ef445c746a5ec53687a08ea749", &(0x7f0000004d00)=""/32, &(0x7f0000004d40)="e5d0b70fe5e19599c1baf67d0ad17483f0604675b888b92a8e40f67bfbd62f021e7c979e728cdb5484b206a3ff3a8b1d9bc6bda3efaa61a889a2540262877c2f301a6d7b60fc57d464744c40d2e26a2dbce8c4d6d560dfb234cbfd42cbb22acb3fa34017c6a6d1b1a6fbf72a8a437f72aed856c874f630f321b9fa57f862bbc3dd1544222bf3674c0516ed7d2e1b6f909ae14e2ff801de914eba28dbcc9414b9331289d8b77c3189f93f8a71ab7c", &(0x7f0000004e00)="793fb01f6b51e14d3cc88ef710d11f60e971cc50ee7a70200a59a4d2a3e1bd6cbc07a330e64e9f29c32b5460c4d360ed58fae1ffaf794715dad1ea19acc5a32205cc49143e35c9f9b9fb7d0b0ad0f2e9e38ef6d2593de31312e4e351e9f21d4f09a2f6cd9e5c1b01d4ef91f6d225165f63dcf216d477b45e572a1209e6dc27e1", 0x9, r6, 0x4}, 0x38) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000004f40)={0x0, 0x4}, 0x8) 13.815419088s ago: executing program 0 (id=2970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x5, &(0x7f0000000380)=""/6, 0x6}, 0x2}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/221, 0xdd}], 0x2, &(0x7f0000000540)=""/158, 0x9e}, 0x4}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/139, 0x8b}], 0x3, &(0x7f0000001840)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002840)=@nfc, 0x80, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/156, 0x9c}], 0x2, &(0x7f0000002a80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a80)=""/8, 0x8}, {&(0x7f0000003ac0)=""/59, 0x3b}, {&(0x7f0000003b00)=""/208, 0xd0}], 0x3, &(0x7f0000003c40)=""/161, 0xa1}, 0xdd}, {{&(0x7f0000003d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003d80)=""/66, 0x42}, {&(0x7f0000003e00)=""/116, 0x74}, {&(0x7f0000003e80)=""/60, 0x3c}], 0x3, &(0x7f0000003f00)=""/182, 0xb6}, 0xf}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003fc0)=""/97, 0x61}, {&(0x7f0000004040)=""/163, 0xa3}, {&(0x7f0000004100)=""/51, 0x33}, {&(0x7f0000004140)=""/59, 0x3b}, {&(0x7f0000004180)=""/85, 0x55}], 0x5, &(0x7f0000004280)=""/89, 0x59}, 0x6}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004300)=""/67, 0x43}, {&(0x7f0000004380)=""/189, 0xbd}, {&(0x7f0000004440)=""/107, 0x6b}], 0x3, &(0x7f0000004500)=""/162, 0xa2}, 0x800}, {{&(0x7f00000045c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004640)=""/55, 0x37}, {&(0x7f0000004680)=""/112, 0x70}, {&(0x7f0000004700)=""/13, 0xd}, {&(0x7f0000004740)=""/71, 0x47}, {&(0x7f00000047c0)=""/66, 0x42}], 0x5, &(0x7f00000048c0)=""/13, 0xd}, 0x5}], 0x9, 0x10020, &(0x7f0000004b40)={0x0, 0x989680}) bind$inet6(0xffffffffffffffff, &(0x7f0000004b80)={0xa, 0x4e23, 0xf982, @dev={0xfe, 0x80, '\x00', 0x35}, 0x9}, 0x1c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000004bc0)={@multicast2, @multicast1, 0x1, "177011a06f2f16fce876450f0adec2eeab81ac4dc9433a4bf8ff9ad74f514245", 0x10000, 0x3ff, 0x3}, 0x3c) (async) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000004c00)="db7471ed92122631e22c51da93507b048ab89d74c2d068793de399b845a591967d912813132218f089a2bf9cb0de32c1244bcde4db4566f9a7c413b7b3ecc1795f18ab61ee58224a4b657424d8c02a34c431d67c62cc94acec36f47eb0d512beba44db38811d046613834239cecdae323b5343e9c789ff6133c55792d8507bba34de8a407c5743d6bd48f525c0ed1b2abd8e4f893ac5aee70d2f9d5fc64046e9542015cf7490de9a10bdf6416bef714b0677cc6ad6c5a0ebdaa0cb12c52616fe469d485cee697e9dcdb4060bb71de36e0ce3ac0dbccdd366") (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000004d00)='scalable', 0x8) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000004f00)={{r2, &(0x7f0000004d40)='scalable', 0x109840, &(0x7f0000004d80)={@_ha_fsid={[0x2, 0xf8000000]}, {0x800, 0x1000, 0x5, 0x6f7}}, 0x10, &(0x7f0000004dc0), &(0x7f0000004e00)=0xfffffffa}, {[0x64, 0x8, 0x5, 0x5]}, 0x1, 0xb3, &(0x7f0000004e40)=""/179}) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000004f80), 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000004fc0)=""/243, &(0x7f00000050c0)=0xf3) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000005100)={'pim6reg\x00', 0x2000}) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000005340)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005300)={&(0x7f0000005180)={0x180, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @multicast2}}}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000005380), r3) (async, rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f00000053c0)=0x8, 0x4) (rerun: 64) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = accept4(r3, &(0x7f0000005400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005480)=0x80, 0x80800) (async, rerun: 32) sendfile(r0, r2, &(0x7f00000054c0)=0x4def, 0x5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005500)={'veth0_to_batadv\x00'}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000005540), &(0x7f0000005580)=0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005600), r3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000005a40)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005a00)={&(0x7f0000005640)={0x3b0, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x46}}}}, [@NL80211_ATTR_IE={0x14c, 0x2a, [@random={0x3, 0xd4, "2a2b88561bb73d39aec6c5d5c7e0389e42de66f47fa544dce2c91582aa641e11cd8b71c693808bba997b1fb29482fba591e517e177766c2bd61fa30d8136003eec75494691716b8168b9069a6bcd1e8b8395ed1bf54212bbafe181970ecec4602d6ae85adb2d54f478144bccb4acf12802042d6400a9eebba2f510db90678a73325c266484f9935b79f0c6279ffec4ba5581176f54525f10c44d8aa3a925ac649ad0755d4532e16121054e13b474edc936a92a4281fcd7f833d113ec5bf296fc14eb1446a8e51ce6e7e262812ee8c80644504a5c"}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0xb, 0x0, @device_b, 0x5, 0xe8c, 0x3ff}}, @measure_req={0x26, 0x3d, {0x9, 0x7f, 0x7, "01ccf6c7af9ae5930a1e740ab8a953f6b036252ea59677c5939d8cd1d4537060fcc21db1f36a5c65302fe184503b9029fdf0f94d434b75839bf6"}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x0, 0x0, {0x1000, 0x1, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}, 0x400, 0xffffff81, 0x8}}]}, @NL80211_ATTR_IE={0x72, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x2, 0x5}}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x5b, "a322f15f243db3c384ee4c3825be4deff1b9de272a7444c8f86a863a2a6602f80594ceca2df9a147127cec5058dfe14576ca508201d42660d44eae567caf8148c033cd69f2ae54d4fa5b7af7faf9e144d9a34c1c3c11539da4d7f6"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x6}}]}, @NL80211_ATTR_IE={0xa0, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x45}, 0x4, 0x2d, @device_a, 0xfffffff9, 0x6}}, @tim={0x5, 0x22, {0x20, 0xcd, 0x2, "91ecc4428fff15ec5abccf736102fa73be11dcbb7514fde0cbb1c01c24a8f3"}}, @supported_rates={0x1, 0x7, [{0x1b}, {0x1}, {0x3, 0x1}, {0x30, 0x1}, {0x30}, {0x12, 0x1}, {0x36}]}, @peer_mgmt={0x75, 0x6, {0x0, 0xc, @val=0x9, @void, @void}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x30, 0xa}}, @mic={0x8c, 0x18, {0xd95, "00aa8eac6ee6", @long="8f9d38e94bd075eae220361139f87eee"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2, 0xa}}]}, @NL80211_ATTR_IE={0x24, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0xb6}}, @rann={0x7e, 0x15, {{0x1, 0x18}, 0x8, 0x3, @device_b, 0x9, 0x3, 0xcf02}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "c423b9227d45aaf8"}], @NL80211_ATTR_IE={0x42, 0x2a, [@prep={0x83, 0x1f, {{}, 0x2, 0x5, @device_b, 0xfffff801, @void, 0x9, 0x1000, @broadcast, 0x9}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x40, 0x7, 0x61}}, @link_id={0x65, 0x12, {@random="f6df5f750fbf", @device_b, @device_b}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x27, 0xfc, "663f53f53a742a9f21ef518f577a68247d7df5ed3cd77edbc0716a96b4ea1075183239"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "c92a0e9f76aa503c926c6fef71e9455f307ec4d86edcfa752b36e355fe9a81d9719a618171435478a8048df912b32030f82e99372931feee1110d3646d55eb361f9754c87cb2411e9abdc41188cde6da44b183bf29d023df3884bb1df104"}, @NL80211_ATTR_FILS_ERP_RRK={0x13, 0xfc, "fd53edfbc308d19f70d90e72917d7f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "7d0d0a2de4f490015ace334d211c"}]]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socketpair(0x8, 0x5, 0x3, &(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r7, &(0x7f0000005ac0)=@nfc_llcp={0x27, r1, 0x0, 0x4, 0xb, 0x4, "1007a1ef115153c5f054091422089c39d9cb1d564e467e08855824f7d0eb63a068c0a50d79f85ab5672ad5f3964f4373a3bbe64553aa3fd19f23927e9c8e62", 0x17}, 0x80) (async) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000005b40)='batadv0\x00') (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000005b80)={'bridge_slave_0\x00', @broadcast}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005c00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000006fc0)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006f80)={&(0x7f0000005c40)={0x131c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0ca}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x824c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x1144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "73217d44e0c2b96c02e5334caebd0d49bfe0d03aa6ff9b8a7110a5121bb514d708"}}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "56a4e04439ba6e58a2be84be4f54e21752b9f7d2b91a09027a9b60269398ba86029a84de0566031baa308eb72dedaf9464d6d058c7ccb32dd378bbc47def5ea37cb3af24109b456161fad0596aa9cf2b1592ba8e94908122ad7af7f9b466f4798fe68db7b09e7b95329ef3c59e40a9ae7dbeee36d540437c0c266cae1500db16270731aa9d157d424f8dde16d4f2752ceb472f45a47d0bd07a806c2e"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "371fc7fdc81eea475ce4a8c385e8e4a955cde80bb9bc553f8e25b494423b9909505d3f6a"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x439}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000007000)=0x2, 0x4) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000072c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) 2.850228821s ago: executing program 3 (id=3047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x121c22dd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000001c0)=0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 2.613531107s ago: executing program 3 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x13, 0x80, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}]}, 0x28}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="24000000210025512a1c0165ff00fcf03e7a6e2431c64035b23e62cc7e03c5020200000000100f000ee1000c08000b008b108811", 0x34) 2.416992969s ago: executing program 3 (id=3050): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00082dd6b57a5fd549427b2a00000800060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="180000000414010025bd7000fedbdf25080001000000000037b77103dbde96c515b481ff3424d044978e881e33b8d289e02c9f6625d47fc2d284ee824819e02712ab06cd54a8f7e2ec30d30c76fa9abf441c614d7de7c712b3a7ac7e8947ef82328bb3d1dc5c5569132c5ec3669170b525ecc03d36c6875ebbd7ed27a2a016c35ea54c72ffd4f8ecac713c99aa1762c218e42f96f5fad2a4558f2309e5cc34ea7cb97ed60586fc89cb0e31c531fcd5cb282ed5dc8b306bccd3f0ce5de3639c2f407575275dba10fffb79ded7abc97f"], 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r5, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r6, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f00000004000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000d0000000000000000009fc79303d4fe5a503695e87f22a21609153078c2ec9983eaa6b15786fcfc585a58b69b3b4989365673115ea25cb9d82f767bf6a3dd46572b44a3e8e4cb1a05248aa956c03935a01489b945ce12ce7818f2df10987b777cc83aa634b0576940f3e6debadd3aa48683bb81fdf92247887674f0e24d513b50a46342cc3e7ad358ea3bebb236f814"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r5, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) 2.360422797s ago: executing program 1 (id=3051): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x56}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x340c2b2b36e47079}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x801d577a6616009c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x1, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5a, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000880)=""/4081, 0x1a, 0xff1, 0x1, 0x6}, 0x28) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000080)=0x10000, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) (async) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x56}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x340c2b2b36e47079}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x801d577a6616009c) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x1, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5a, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000880)=""/4081, 0x1a, 0xff1, 0x1, 0x6}, 0x28) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000080)=0x10000, 0x4) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) 2.307337012s ago: executing program 4 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000090001f573797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) (async) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.121632861s ago: executing program 1 (id=3053): socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="340000003f000100010000000000000001020000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0xffffc39b, 0x0, 0x7, 0x80000000, 0x74, 0xe33, 0x80}, 0x0) 2.046613907s ago: executing program 3 (id=3054): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2c", @ANYRESDEC=r1, @ANYBLOB='E'], 0x4c}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510d416a6b09b00000200000085000000c400000095000000000000009500a5"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/150, &(0x7f00000000c0)=0x96) 2.037548618s ago: executing program 4 (id=3055): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c20000000800450000b0000000000011907864010101ac14142100f74e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996e7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x0, 0x29, 0x0, 0x1}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, 0x0, 0x0) readv(r3, &(0x7f0000000740)=[{0x0}], 0x1) sendfile(r4, r3, 0x0, 0xf03a0005) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0x22, 0x0, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES8=r9, @ANYRES64, @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf25030000000800010000000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="8aeb3976c9e33ace943ca27326b1bb235bcdf0837410016ceed2adc1db1013aeb51c81aa21f5fa6302e3772302793ee51615ea1d2849e34ce4a50113f85f1daa7e225f"], 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 1.813746487s ago: executing program 1 (id=3056): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300", @ANYRESHEX], 0x120}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r8, 0x1, 0x0, 0x8010, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xd, 0xff, 0x1ff, 'pptp\x00', 'syz0\x00', {0xc7d1}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000775f45bc3d41bf4fbf7a69b38ebdbea273153bb2a6a13ec58c4b88a902978a6b97c1c93ef53f38911bc9a6efe6058e2386006bb8845ab6ab2bbb118ba7f03c0d8fc28ac49e88c9d6920a0c86af14e238367d7e8ac4a239ad1b9921999cb800ce2c62d74e159c08a67922d30457986b77", @ANYBLOB="d668fbbb5b9e3242ae8f1d6e9d4f441859c7cdf17065ad9c48ded4010332e7fa6e53c34fe0ec65d20b9ab0a60210c22899325c748d8e63eeb7eee1d4c47e51f84fcbedcd0660f05b5ad8adca180ec94d9902e683aebbc42ab994c40513e1a2017c5de3c9df760587632068f8648996539dda9c264baba7efa18c23c7ef8905f52dd311d374af6c63bae43eaf08023234bba6fbec9bcc9a449be63f35241b81623a07984f70bbb0bf2ffa1aa86c49f7cd5bf88e985df9f60379b6247b782b0f2baaa0469a1ece6e59c43822ca", @ANYBLOB="270201000000000008000a00", @ANYRES32=r4, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) pread64(r6, &(0x7f0000001540)=""/127, 0x7f, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x8) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) recvmsg(r9, &(0x7f00000014c0)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000001440)=[{&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/10, 0xa}], 0x3, &(0x7f0000001480)=""/54, 0x36}, 0x10100) 1.698129814s ago: executing program 4 (id=3058): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020600"/24], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000240)='cg%\x00\x00\x00\x00?\x01\x00\x00\x00\x00\x00\x00up\x00', 0x100, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.61784356s ago: executing program 3 (id=3059): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x100800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x29, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0xfd, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0x240, 0x100089ff]}}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x3}, 0x4) sendto$inet6(r2, &(0x7f0000000040)="90b1e0460fcf85c03e51a5e424f779bcbeb977a47166092243532ad93b14213c12aec32c76bca9be79c800c11f03e120d2c95679e5563ce5cb320e6e8ae9b2d1d48954fbb9abec57f43cc8253cbbae1b89bbd653b6bfece0cf36", 0x5a, 0x24000001, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @empty}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.47447637s ago: executing program 2 (id=3060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) splice(r4, 0x0, r3, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045000078000000000601431d9890780a010102ac1414aa03019078010000004c0000000000000000110000e000000100000000440c0001ac1414bb4e210000443c000100000000000000000000000000000000ac141403000000000a010101000000000000000000000000ac1e000100000000ac1414fe00000000"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) (async) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) socket(0x6, 0x1, 0xf7b) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0xc0, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x0, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x1, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x821}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) accept4$bt_l2cap(r11, 0x0, 0x0, 0x800) (async) syz_emit_ethernet(0x86, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2e0800450000780000000000119078000000000000000000001b59006490780200000003000000000000000002000000753904030405a024f0dd00000000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a14a1d8c690000000000000000a46243bbf24fb753185983bfe89135ccb6f43c63d3e176666009b2cec37c91446f49835b8433137fb96471de0f6f23c14e50b536318558a102b99a8e8251a45e4a1bf0bbdeb9532f5406150dff5e8cc2b326ec1c2db30fa872cfc6c5f3e88fb0211ca4987989513af86ebba200ad37050fb232"], 0x0) 1.110959484s ago: executing program 2 (id=3061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fff80000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000089000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0xc1100, 0x10}, 0x94) 1.029484438s ago: executing program 1 (id=3062): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3, 0xfffd}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="180000000000000001000000040000002e0000000000000018"], 0x30}, 0xa854) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000024000100ffffff3e95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x1e00}, 0x94) 870.262903ms ago: executing program 2 (id=3063): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc"], 0x204) unshare(0x22020600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) 815.15708ms ago: executing program 4 (id=3064): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) (async) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001300edd0171d57c8006000600800a000014000280100014800c00068008", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 681.651027ms ago: executing program 1 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FICLONE(r1, 0x40049409, r0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r9, @ANYBLOB="140012800b00010062726964676500000400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x18}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000420646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14004000", @ANYRES16=r11, @ANYBLOB="01002abd7000475f00002e0000000a0001007770616e3000000005002b00000000000c0005000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x4040040) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 665.936634ms ago: executing program 2 (id=3066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x94, 0x10, 0x800, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x9811, 0x1313}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008890}, 0x40008c0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'netdevsim0\x00', {'pim6reg0\x00'}, 0xfff}) 493.757759ms ago: executing program 2 (id=3067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f0000000380)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x4, 0x10}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1846000008000000000e00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001845000005000000000000000000000018290000", @ANYRES32=r3, @ANYBLOB="00000000040000008510000001000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) 478.117016ms ago: executing program 3 (id=3068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1cf6ff00c86e434390f4aeafb4fb2ffa6f7ac3852f34e3b2b06f0f7d2b22222d2949d806e86d7627a20194167c0a7a0bdfca7a0654aa165f4535251dfd91795ba6ae4d26e366b8f279450744ec0acabaed0236b0c836a4d123b7b6791ba6bc6ecbc215fa08d5d09f537849b5f236125c9a077528c153d95a2e252a3d13d68e2cd18f1fc175e243f1d27120b85a740b8c4650eb591fa5804f3cbadca657ea117efd87e8097f439ca4375041f3c1a44802b0feee6b61f62055c162a032b55557c80400"/203, @ANYRES16=r2, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000080)={@empty, 0x1, 0x0, 0x70, 0x0, [{@remote}, {}, {@broadcast}, {@empty}, {@initdev}, {}, {@broadcast}]}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r8], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x208, 0x9, 0x1, r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) getsockopt$inet_buf(r11, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 345.83053ms ago: executing program 4 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r6, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7f, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 179.850213ms ago: executing program 1 (id=3070): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000240)='\x00', 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x8, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r10, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r10, 0x5) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 128.740816ms ago: executing program 2 (id=3071): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, 0x2e, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) socket$netlink(0x10, 0x3, 0x7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) listen(r0, 0x8) 18.402429ms ago: executing program 4 (id=3072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r2, r2, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)={@fallback=r3, r1, 0x2f}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r1, r4, 0x2f, 0x2038, 0x4, @void, @void, @value=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 0 (id=2974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000c00)="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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r7) r8 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbf5, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x859}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2ac1f96d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040000}, 0x44014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) kernel console output (not intermixed with test programs): 46751][ T9394] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 636.946856][ T9394] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 637.049114][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1894'. [ 637.064479][T13470] bond5: entered promiscuous mode [ 637.064509][T13470] geneve3: entered promiscuous mode [ 637.076194][T13470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.135513][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 637.135545][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 637.175611][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 637.251283][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 637.270581][T13478] vlan2: entered allmulticast mode [ 637.270612][T13478] bond0: entered allmulticast mode [ 637.273666][T13478] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 637.427838][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1901'. [ 637.952465][T13511] sctp: [Deprecated]: syz.4.1902 (pid 13511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.952465][T13511] Use struct sctp_sack_info instead [ 638.152218][T13518] netlink: 'syz.2.1905': attribute type 18 has an invalid length. [ 638.193045][T13518] netlink: 'syz.2.1905': attribute type 18 has an invalid length. [ 638.203903][ T9394] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.204054][ T9394] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.204163][ T9394] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.204256][ T9394] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.260324][T13518] netlink: 'syz.2.1905': attribute type 18 has an invalid length. [ 638.319672][T13518] netlink: 'syz.2.1905': attribute type 18 has an invalid length. [ 638.895914][T13544] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 638.914358][T13544] bond8 (unregistering): Released all slaves [ 639.338150][T13563] netlink: 'syz.0.1915': attribute type 11 has an invalid length. [ 640.165241][T13608] __nla_validate_parse: 67 callbacks suppressed [ 640.165268][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1927'. [ 640.332333][T13616] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 640.385613][T13621] 8021q: VLANs not supported on gre0 [ 640.557280][T13628] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 641.081007][T13643] netlink: 'syz.4.1933': attribute type 5 has an invalid length. [ 641.114500][T13647] netlink: 'syz.4.1933': attribute type 5 has an invalid length. [ 641.424890][T13657] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 641.906556][T13682] xt_policy: neither incoming nor outgoing policy selected [ 642.040566][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044164][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044218][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044249][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044279][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044307][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044333][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044360][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044389][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.044416][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.684490][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.684520][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.725771][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.725800][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.727682][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.727706][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.773204][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.773232][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 642.777590][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1944'. [ 644.725761][T13780] batadv_slave_1: entered promiscuous mode [ 644.925016][T13781] batadv_slave_1: left promiscuous mode [ 645.046067][T13794] openvswitch: netlink: Key type 288 is out of range max 32 [ 645.235188][T13803] __nla_validate_parse: 123 callbacks suppressed [ 645.235214][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1967'. [ 645.309980][T13805] netlink: 'syz.2.1968': attribute type 4 has an invalid length. [ 645.310008][T13805] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1968'. [ 645.311290][T13805] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 645.403585][T13809] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 645.455767][T13809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.658178][T13815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1970'. [ 645.713668][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1971'. [ 645.734192][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 645.734239][T13820] netlink: 'syz.0.1972': attribute type 21 has an invalid length. [ 645.759048][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'. [ 645.981191][T13821] lo: left promiscuous mode [ 645.981749][T13821] tunl0: left promiscuous mode [ 645.982182][T13821] gre0: left promiscuous mode [ 645.982696][T13821] gretap0: left promiscuous mode [ 645.983076][T13821] erspan0: left promiscuous mode [ 645.983486][T13821] ip_vti0: left promiscuous mode [ 645.983844][T13821] ip6_vti0: left promiscuous mode [ 645.984167][T13821] sit0: left promiscuous mode [ 645.984640][T13821] ip6tnl0: left promiscuous mode [ 645.984975][T13821] ip6gre0: left promiscuous mode [ 645.985310][T13821] syz_tun: left promiscuous mode [ 646.032998][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 646.041464][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.226146][T13821] macvlan3: left promiscuous mode [ 646.228016][T13821] bond2: left promiscuous mode [ 646.242225][T13821] bond3: left promiscuous mode [ 646.242690][T13821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 646.247642][T13821] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.285526][T13821] veth7: left promiscuous mode [ 646.287642][T13821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 646.316285][T13821] vlan2: left promiscuous mode [ 646.316318][T13821] bridge0: left promiscuous mode [ 646.317229][T13821] bond7: left promiscuous mode [ 646.317251][T13821] bridge1: left promiscuous mode [ 646.337604][ T9400] tipc: Subscription rejected, illegal request [ 646.360747][T13834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1975'. [ 646.558397][ T6209] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.676939][T13840] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 646.697907][ T9392] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 646.698332][ T9392] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 646.724780][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1979'. [ 646.736722][ T9392] bond4: (slave veth3): making interface the new active one [ 646.756150][ T9392] bond4: active interface up! [ 646.887523][T13840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 646.937427][T13843] bond6: (slave geneve4): making interface the new active one [ 646.948562][T13843] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 647.003487][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1979'. [ 647.125629][T13842] pim6reg: entered allmulticast mode [ 647.219643][T13842] pim6reg: left allmulticast mode [ 647.689468][T13863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.079437][ T31] audit: type=1804 audit(1790259023.580:5): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1986" name="/newroot/363/cgroup.controllers" dev="tmpfs" ino=1894 res=1 errno=0 [ 648.079499][ T31] audit: type=1800 audit(1790259023.580:6): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1986" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 648.955106][T13893] syzkaller0: entered promiscuous mode [ 648.955141][T13893] syzkaller0: entered allmulticast mode [ 648.958886][T13901] tipc: Enabling of bearer rejected, failed to enable media [ 649.166776][T13907] netlink: 'syz.1.1995': attribute type 7 has an invalid length. [ 650.379646][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 650.441337][T13947] __nla_validate_parse: 13 callbacks suppressed [ 650.441365][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2004'. [ 650.553987][ C1] TC_ACT_REPEAT abuse ? [ 654.003374][T13947] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 654.118298][T13953] veth5: entered allmulticast mode [ 654.210215][ T31] audit: type=1107 audit(1790259029.710:7): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';BùüKhH Éj“/¦âι±Dühî¹Pkמ`Ó4ÝãcÓ�«÷½¹´Ž——ê–7�øô¢‘ûçüèÝ7Ãðôj)ÿOœÚ‘>”~^å¶X啵Í<÷Á×Á[{Ew?Gd©˜¸„£†Õ(÷ ÿ<�g“.¶-¼1jcöÚüä™ôý¿¿w("†´RSpp:' [ 654.524508][T13973] bridge0: entered allmulticast mode [ 654.602877][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2010'. [ 655.492812][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 655.668102][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2021'. [ 655.680200][T14014] sctp: [Deprecated]: syz.1.2021 (pid 14014) Use of int in max_burst socket option. [ 655.680200][T14014] Use struct sctp_assoc_value instead [ 656.013018][T14026] ip_tables: iptables: counters copy to user failed while replacing table [ 656.118349][T14026] netlink: 'syz.0.2025': attribute type 16 has an invalid length. [ 656.118378][T14026] netlink: 'syz.0.2025': attribute type 17 has an invalid length. [ 656.154963][T14026] bridge0: left allmulticast mode [ 656.208434][T14026] xfrm0: left allmulticast mode [ 656.233899][T14026] veth1_macvtap: left promiscuous mode [ 656.260336][T14026] veth1_macvtap: entered promiscuous mode [ 656.338427][T14026] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 656.351157][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.352901][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.354523][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.389776][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.398523][T14026] gre1: left promiscuous mode [ 656.415639][T14026] bond1: left promiscuous mode [ 656.415672][T14026] bond1: left allmulticast mode [ 656.417640][T14026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.454016][T14026] team1: left promiscuous mode [ 656.454048][T14026] team1: left allmulticast mode [ 656.454509][T14026] 8021q: adding VLAN 0 to HW filter on device team1 [ 656.486793][T14026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.497022][T14026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.512438][T14026] ip6gre1: left promiscuous mode [ 656.512476][T14026] ip6gre1: left allmulticast mode [ 656.514247][T14026] syz_tun: entered promiscuous mode [ 656.515340][T14026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.545380][ T5793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.651331][T14026] vti0: left promiscuous mode [ 656.651363][T14026] vti0: left allmulticast mode [ 656.751345][T14026] vlan0: left promiscuous mode [ 656.751381][T14026] bridge0: left promiscuous mode [ 656.772685][T14047] SET target dimension over the limit! [ 656.774415][T14026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.191471][ T9400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.191512][ T9400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.191552][ T9400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.191577][ T9400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.191613][ T9400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.191641][ T9400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.191679][ T9400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.191707][ T9400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.277110][ T5793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.420279][ T9400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.420531][ T9400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.576519][T14070] openvswitch: netlink: Message has 12 unknown bytes. [ 657.612718][T14073] pim6reg: entered allmulticast mode [ 657.625135][T14078] pim6reg: left allmulticast mode [ 657.665962][T14080] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 657.704956][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 657.736743][T14080] bond8: entered promiscuous mode [ 657.736830][T14080] bond8: entered allmulticast mode [ 657.737249][T14080] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.800958][T14083] erspan1: entered allmulticast mode [ 657.818960][T14083] bond8: (slave erspan1): making interface the new active one [ 657.818992][T14083] erspan1: entered promiscuous mode [ 657.839003][T14083] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 657.978963][T14086] netlink: 'syz.0.2040': attribute type 3 has an invalid length. [ 658.000777][ T7938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.219435][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.352429][T14103] syzkaller1: entered promiscuous mode [ 658.352460][T14103] syzkaller1: entered allmulticast mode [ 658.690176][T14121] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2052'. [ 658.692087][T14120] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2052'. [ 658.795514][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 658.841420][T14126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 659.213406][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2056'. [ 659.389088][T14141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2056'. [ 659.527860][T14152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.828107][T14170] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 659.903782][T14159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.917124][ C1] TC_ACT_REPEAT abuse ? [ 659.934450][T14159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 659.947024][T14159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.970317][T14159] bond4: entered allmulticast mode [ 659.970347][T14159] bridge7: entered allmulticast mode [ 659.971340][T14159] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 659.973221][T14159] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 659.974661][T14159] bridge7: entered promiscuous mode [ 660.011949][ C1] TC_ACT_REPEAT abuse ? [ 660.156148][T14161] netlink: 'syz.4.2060': attribute type 3 has an invalid length. [ 660.158888][T14161] netlink: 'syz.4.2060': attribute type 3 has an invalid length. [ 660.298865][T14170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 660.449554][T14173] bond5: (slave gretap2): making interface the new active one [ 660.451936][T14173] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 661.492383][T14227] syzkaller0: entered promiscuous mode [ 661.492416][T14227] syzkaller0: entered allmulticast mode [ 661.499691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.562244][T14244] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 661.792624][T14259] netlink: 'syz.1.2086': attribute type 23 has an invalid length. [ 661.792651][T14259] netlink: 'syz.1.2086': attribute type 6 has an invalid length. [ 661.792668][T14259] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.798783][T14259] netlink: 'syz.1.2086': attribute type 23 has an invalid length. [ 661.798813][T14259] netlink: 'syz.1.2086': attribute type 6 has an invalid length. [ 661.956625][T14218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.546292][T14284] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 662.900321][T14297] ip_tables: iptables: counters copy to user failed while replacing table [ 663.137017][T14300] openvswitch: netlink: Duplicate or invalid key (type 0). [ 663.137076][T14300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.556044][T14244] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 666.587527][T14284] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 666.753665][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 667.475867][T14343] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 667.891582][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2105'. [ 668.181334][T14354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 668.188077][T14354] bridge0: port 1(bond8) entered blocking state [ 668.188320][T14354] bridge0: port 1(bond8) entered disabled state [ 668.188579][T14354] bond8: entered allmulticast mode [ 668.224543][T14354] bond8: entered promiscuous mode [ 668.228869][T14354] bridge0: port 1(bond8) entered blocking state [ 668.229017][T14354] bridge0: port 1(bond8) entered listening state [ 668.275158][ T9400] bridge0: port 1(bond8) entered disabled state [ 668.711738][T14373] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 668.902165][T14376] macvlan0: entered promiscuous mode [ 668.902197][T14376] macvlan0: entered allmulticast mode [ 668.902505][T14376] geneve1: entered promiscuous mode [ 668.902523][T14376] geneve1: entered allmulticast mode [ 668.996429][T14376] team0: Port device macvlan0 added [ 669.035923][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 669.739446][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.895332][T14407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 669.978764][T14408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.017988][T14421] sit0: entered promiscuous mode [ 670.045520][T14421] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 670.045551][T14421] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2126'. [ 670.492067][T14439] netlink: 3716 bytes leftover after parsing attributes in process `syz.4.2131'. [ 670.531301][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 670.531341][T14439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2131'. [ 670.533397][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 670.533430][T14439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2131'. [ 670.816315][T14449] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2134'. [ 671.578873][T14452] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 671.593319][T14452] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 671.800112][T14467] __nla_validate_parse: 2 callbacks suppressed [ 671.800156][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 671.945483][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 672.023731][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2146'. [ 672.045849][T14478] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2146'. [ 672.190333][T14494] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2149'. [ 672.288016][T14473] ip_tables: iptables: counters copy to user failed while replacing table [ 673.137179][T14502] Timeout policy `syz0' can only be used by L3 protocol number 512 [ 673.531805][T14526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2159'. [ 673.532155][T14518] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2156'. [ 673.696560][T14530] veth4: entered allmulticast mode [ 673.814165][T14530] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 673.836153][T14535] netlink: 'syz.3.2164': attribute type 7 has an invalid length. [ 673.836180][T14535] netlink: 'syz.3.2164': attribute type 3 has an invalid length. [ 673.836195][T14535] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2164'. [ 673.932645][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 674.037772][T14549] netlink: 'syz.4.2165': attribute type 7 has an invalid length. [ 674.114987][T14533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2162'. [ 674.219508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.454705][T14559] xt_CT: No such helper "netbios-ns" [ 675.428310][T14603] ipvlan0: entered promiscuous mode [ 675.438674][T14603] ipvlan0: left promiscuous mode [ 675.630886][T14608] bridge0: port 1(vlan0) entered blocking state [ 675.631137][T14608] bridge0: port 1(vlan0) entered disabled state [ 675.631328][T14608] vlan0: entered allmulticast mode [ 675.633012][T14608] geneve0: entered allmulticast mode [ 675.650840][T14608] vlan0: entered promiscuous mode [ 675.650921][T14608] geneve0: entered promiscuous mode [ 675.672775][T14610] vlan0: left promiscuous mode [ 675.672803][T14610] geneve0: left promiscuous mode [ 675.714745][T14616] syzkaller0: entered promiscuous mode [ 675.714777][T14616] syzkaller0: entered allmulticast mode [ 676.221635][T14633] rds_bind: 23 callbacks suppressed [ 676.221660][T14633] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma? [ 677.007155][T14666] tipc: Failed to remove unknown binding: 66,0,0/0:2112172089/2112172090 [ 677.008523][T14666] tipc: Failed to remove unknown binding: 66,0,0/0:2112172089/2112172090 [ 677.125152][T14668] netlink: 'syz.3.2196': attribute type 15 has an invalid length. [ 677.196117][T14671] __nla_validate_parse: 10 callbacks suppressed [ 677.196145][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 677.196172][T14671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2197'. [ 677.228705][T14675] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 677.298267][T14675] bond9: entered promiscuous mode [ 677.298988][T14675] 8021q: adding VLAN 0 to HW filter on device bond9 [ 677.465330][T14681] vlan0: entered allmulticast mode [ 677.465357][T14681] bond9: entered allmulticast mode [ 677.533474][T14675] bond9: (slave bridge8): making interface the new active one [ 677.533508][T14675] bridge8: entered promiscuous mode [ 677.533699][T14675] bridge8: entered allmulticast mode [ 677.535395][T14675] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 677.912862][T14682] syzkaller1: entered promiscuous mode [ 677.912885][T14682] syzkaller1: entered allmulticast mode [ 678.314618][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 678.396940][T14705] tap0: tun_chr_ioctl cmd 2148553947 [ 678.488663][T14725] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2210'. [ 678.794462][T14738] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2214'. [ 679.827913][T14768] syzkaller0: entered promiscuous mode [ 679.827952][T14768] syzkaller0: entered allmulticast mode [ 680.000381][T14782] netlink: 'syz.3.2222': attribute type 39 has an invalid length. [ 680.378988][T14798] can: request_module (can-proto-4) failed. [ 685.081900][T14831] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 685.081928][T14831] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2227'. [ 685.103801][T14833] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 685.103928][T14833] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2227'. [ 685.230490][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 685.322698][T14845] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2229'. [ 685.394139][T14843] netlink: 'syz.4.2228': attribute type 11 has an invalid length. [ 685.394166][T14843] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2228'. [ 685.394473][T14843] netlink: 'syz.4.2228': attribute type 11 has an invalid length. [ 685.394489][T14843] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2228'. [ 685.394712][T14843] netlink: 'syz.4.2228': attribute type 11 has an invalid length. [ 685.394728][T14843] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2228'. [ 685.395025][T14843] netlink: 'syz.4.2228': attribute type 11 has an invalid length. [ 685.395040][T14843] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2228'. [ 685.414864][T14847] netlink: 'syz.4.2228': attribute type 11 has an invalid length. [ 685.414947][T14847] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2228'. [ 685.751684][T14868] netlink: Unknown conntrack attr (0) [ 686.225619][T14883] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 686.386757][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 686.388336][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.592911][T14900] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2242'. [ 686.666776][T14903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 687.152110][T14920] netlink: 'syz.4.2248': attribute type 2 has an invalid length. [ 687.182339][T14920] : entered promiscuous mode [ 687.226894][T14924] ip_tables: iptables: counters copy to user failed while replacing table [ 688.401415][T13175] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967286. macoff=82 [ 688.801222][T14986] tipc: Enabled bearer , priority 2 [ 689.664464][T15008] bridge0: port 1(wlan1) entered blocking state [ 689.664660][T15008] bridge0: port 1(wlan1) entered disabled state [ 689.664870][T15008] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 689.706334][T15008] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 689.761727][T15020] mac80211_hwsim hwsim27 wlan1 (unregistering): left allmulticast mode [ 689.761767][T15020] mac80211_hwsim hwsim27 wlan1 (unregistering): left promiscuous mode [ 689.764741][T15020] bridge0: port 1(wlan1) entered disabled state [ 690.206461][T15036] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 690.227595][T15037] __nla_validate_parse: 8 callbacks suppressed [ 690.227617][T15037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2279'. [ 690.261368][T15037] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 690.261395][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2279'. [ 690.267791][T15038] netlink: 'syz.2.2279': attribute type 3 has an invalid length. [ 690.562964][T15048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 690.644780][T15050] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2282'. [ 690.788004][T15053] netlink: NAT attribute type 4 has unexpected length (0 != 4) [ 690.788047][T15053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.832986][T15058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2283'. [ 690.833020][T15058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2283'. [ 690.872089][T15058] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2283'. [ 690.872339][T15058] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 690.908078][T15058] 0ªX¹¦Dö»: entered allmulticast mode [ 690.924479][T15060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2286'. [ 690.964465][T15063] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2284'. [ 691.178555][T15069] x_tables: duplicate entry at hook 1 [ 691.313822][T15077] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2290'. [ 691.406491][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 691.575719][T15069] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 691.811531][T15094] Bluetooth: hci0: unsupported parameter 5135 [ 691.811558][T15094] Bluetooth: hci0: unsupported parameter 8192 [ 691.811574][T15094] Bluetooth: hci0: unsupported parameter 5135 [ 691.811588][T15094] Bluetooth: hci0: unsupported parameter 8192 [ 692.163541][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.273989][T15112] veth21: entered allmulticast mode [ 692.350508][T15119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.367289][T15119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.390123][T15121] ip_tables: iptables: counters copy to user failed while replacing table [ 692.526123][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.526350][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.526685][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.557080][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.559114][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.807244][T15135] IPv6: sit2: Disabled Multicast RS [ 692.810048][T15132] netlink: 'syz.3.2308': attribute type 9 has an invalid length. [ 693.095072][T15149] veth1_to_team: entered promiscuous mode [ 693.100250][T15149] veth1_to_team: left promiscuous mode [ 693.131754][T15144] veth1_to_team: entered promiscuous mode [ 693.133625][T15144] veth1_to_team: left promiscuous mode [ 693.278157][T15155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.535572][T15165] netlink: 'syz.0.2320': attribute type 9 has an invalid length. [ 694.445925][T15186] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 694.658494][T15186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 694.891263][T15212] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 694.921285][T15211] xt_connbytes: Forcing CT accounting to be enabled [ 694.946767][T15212] batadv_slave_0: entered promiscuous mode [ 695.102441][T15210] batadv_slave_0: left promiscuous mode [ 695.365054][T15229] __nla_validate_parse: 13 callbacks suppressed [ 695.365079][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 695.577921][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2339'. [ 695.622541][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 695.623925][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2339'. [ 695.777655][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 695.857642][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2344'. [ 695.989549][ C1] net_ratelimit: 23 callbacks suppressed [ 695.989578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.990581][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.083615][T15252] netlink: 'syz.0.2345': attribute type 1 has an invalid length. [ 696.155187][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.170617][T15252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 696.343113][T15263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.420385][ C0] TC_ACT_REPEAT abuse ? [ 696.517448][T15265] netlink: 884 bytes leftover after parsing attributes in process `syz.1.2349'. [ 696.574736][ T5772] openvswitch: cpu_id mismatch with handler threads [ 696.582746][T15273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2351'. [ 696.640301][ T6213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.019634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.022053][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 697.022087][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 697.180575][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.281387][T15297] netlink: 'syz.0.2359': attribute type 1 has an invalid length. [ 697.281416][T15297] NCSI netlink: No device for ifindex 0 [ 697.322436][T15300] tipc: Started in network mode [ 697.322478][T15300] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 697.322536][T15300] tipc: Enabling of bearer rejected, failed to enable media [ 697.341702][ C0] TC_ACT_REPEAT abuse ? [ 697.579684][ T5793] openvswitch: cpu_id mismatch with handler threads [ 697.932859][T15321] bridge_slave_1: left allmulticast mode [ 697.932895][T15321] bridge_slave_1: left promiscuous mode [ 697.933181][T15321] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.971193][T15321] bridge_slave_0: left allmulticast mode [ 697.971226][T15321] bridge_slave_0: left promiscuous mode [ 697.971482][T15321] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.059345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.229534][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.344914][T15338] batadv1: entered promiscuous mode [ 698.344945][T15338] batadv1: entered allmulticast mode [ 698.706618][T15352] sctp: [Deprecated]: syz.0.2374 (pid 15352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.706618][T15352] Use struct sctp_sack_info instead [ 700.622109][T15448] netlink: 'syz.0.2395': attribute type 9 has an invalid length. [ 701.024273][T15457] __nla_validate_parse: 8 callbacks suppressed [ 701.024299][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2398'. [ 701.102286][T13173] net_ratelimit: 250 callbacks suppressed [ 701.102316][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.131354][T15461] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2397'. [ 701.179394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.339802][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.422864][T15472] bond10: (slave bond_slave_1): Device is not bonding slave [ 701.422897][T15472] bond10: option active_slave: invalid value (bond_slave_1) [ 701.433000][T15472] bond10 (unregistering): Released all slaves [ 701.523230][T15478] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 701.925447][T15489] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 701.964153][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 701.964190][T15491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2409'. [ 702.046392][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 702.219575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.381707][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.384063][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.463360][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 703.259464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.419754][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.299806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.939854][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 705.376820][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 705.376860][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 705.376902][T15519] netlink: 'syz.3.2416': attribute type 18 has an invalid length. [ 705.451029][ T6213] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 2560 - 0 [ 705.535660][ T6213] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 2560 - 0 [ 705.691708][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2420'. [ 705.708734][T15529] tipc: Enabled bearer , priority 10 [ 705.718041][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2420'. [ 705.844748][T15528] tipc: Resetting bearer [ 705.904324][T15528] tipc: Disabling bearer [ 706.121242][T15546] net_ratelimit: 8 callbacks suppressed [ 706.121271][T15546] ip_tables: iptables: counters copy to user failed while replacing table [ 706.180597][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.181413][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.214595][ T5759] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.229541][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.236717][T15555] netlink: 'syz.3.2427': attribute type 6 has an invalid length. [ 706.236751][T15555] IPv6: NLM_F_CREATE should be specified when creating new route [ 706.266377][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.282112][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.379731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.386485][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 706.541980][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.600371][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2431'. [ 706.621801][T15568] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2431'. [ 706.670179][ T5759] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.721145][T15569] syz_tun: entered allmulticast mode [ 706.819968][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.857100][T15569] dvmrp8: entered allmulticast mode [ 706.958219][T15578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.092630][T15564] syz_tun: left allmulticast mode [ 707.758306][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 708.098733][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 708.193485][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 708.298937][T15632] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 708.546996][T15637] netlink: 'syz.2.2446': attribute type 32 has an invalid length. [ 708.739977][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 708.740010][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 708.776467][T15653] FAULT_INJECTION: forcing a failure. [ 708.776467][T15653] name failslab, interval 1, probability 0, space 0, times 0 [ 708.776517][T15653] CPU: 0 UID: 0 PID: 15653 Comm: syz.2.2451 Not tainted syzkaller #0 PREEMPT(full) [ 708.776544][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 708.776559][T15653] Call Trace: [ 708.776569][T15653] [ 708.776579][T15653] dump_stack_lvl+0xe8/0x150 [ 708.776622][T15653] should_fail_ex+0x410/0x560 [ 708.776655][T15653] should_failslab+0xa8/0x100 [ 708.776694][T15653] ? skb_clone+0x212/0x3a0 [ 708.776725][T15653] kmem_cache_alloc_noprof+0xa1/0x600 [ 708.776761][T15653] ? skb_clone+0x212/0x3a0 [ 708.776796][T15653] skb_clone+0x212/0x3a0 [ 708.776829][T15653] bpf_clone_redirect+0x170/0x4b0 [ 708.776860][T15653] ? bpf_test_run+0x1d1/0x830 [ 708.776895][T15653] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 708.776920][T15653] ? __kernel_text_address+0xd/0x30 [ 708.776950][T15653] ? arch_stack_walk+0xfb/0x150 [ 708.776982][T15653] ? __pfx___schedule+0x10/0x10 [ 708.777104][T15653] ? preempt_schedule_thunk+0x16/0x40 [ 708.777131][T15653] ? preempt_schedule_common+0x7f/0xd0 [ 708.777154][T15653] ? bpf_test_run+0x1d1/0x830 [ 708.777188][T15653] ? bpf_test_timer_continue+0x10c/0x320 [ 708.777212][T15653] bpf_test_run+0x354/0x830 [ 708.777268][T15653] ? __pfx_bpf_test_run+0x10/0x10 [ 708.777320][T15653] ? __kasan_krealloc+0xec/0x110 [ 708.777358][T15653] ? skb_dst_set+0x72/0x140 [ 708.777395][T15653] bpf_prog_test_run_skb+0xe35/0x2230 [ 708.777449][T15653] ? __fget_files+0x3a2/0x420 [ 708.777478][T15653] ? __fget_files+0x2a/0x420 [ 708.777511][T15653] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 708.777541][T15653] bpf_prog_test_run+0x2c5/0x340 [ 708.777572][T15653] __sys_bpf+0xa22/0xd90 [ 708.777607][T15653] ? __pfx___sys_bpf+0x10/0x10 [ 708.777646][T15653] ? __fget_files+0x2a/0x420 [ 708.777701][T15653] ? ksys_write+0x242/0x270 [ 708.777728][T15653] ? __pfx_ksys_write+0x10/0x10 [ 708.777756][T15653] __x64_sys_bpf+0xba/0xd0 [ 708.777774][T15653] do_syscall_64+0x166/0x520 [ 708.777794][T15653] ? trace_irq_disable+0x3b/0x140 [ 708.777811][T15653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.777828][T15653] ? clear_bhb_loop+0x70/0xc0 [ 708.777847][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.777863][T15653] RIP: 0033:0x7fb17759e159 [ 708.777879][T15653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.777893][T15653] RSP: 002b:00007fb1783fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.777912][T15653] RAX: ffffffffffffffda RBX: 00007fb177825fa0 RCX: 00007fb17759e159 [ 708.777923][T15653] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 708.777934][T15653] RBP: 00007fb1783fd090 R08: 0000000000000000 R09: 0000000000000000 [ 708.777943][T15653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.777953][T15653] R13: 00007fb177826038 R14: 00007fb177825fa0 R15: 00007ffd38620f18 [ 708.777978][T15653] [ 708.997286][T15645] tipc: Resetting bearer [ 710.065757][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 710.065801][T15676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2457'. [ 711.122119][T15645] bond4: left allmulticast mode [ 711.122143][T15645] bridge7: left allmulticast mode [ 711.122175][T15645] bridge7: left promiscuous mode [ 711.321752][ T9392] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.321796][ T9392] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.321846][ T9392] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.321874][ T9392] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.321910][ T9392] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.321943][ T9392] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.321981][ T9392] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.322005][ T9392] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.579397][ C1] net_ratelimit: 20 callbacks suppressed [ 711.579427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.739955][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.898512][T15698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.977276][T15699] ip_tables: iptables: counters copy to user failed while replacing table [ 711.981496][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.136867][T15693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.214308][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 712.216153][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.363780][T15713] bond10: entered allmulticast mode [ 712.375941][T15714] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 712.377287][T15714] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 712.630224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.786027][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.991001][T15733] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 713.173948][T15747] ip_tables: iptables: counters copy to user failed while replacing table [ 713.524860][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2479'. [ 713.726576][T15770] netlink: 'syz.1.2483': attribute type 2 has an invalid length. [ 713.726604][T15770] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 713.726619][T15770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2483'. [ 713.763272][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 713.999393][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2485'. [ 714.402873][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2488'. [ 714.579588][T15792] netlink: 'syz.4.2487': attribute type 10 has an invalid length. [ 714.615006][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2488'. [ 714.670335][T15803] syzkaller0: entered promiscuous mode [ 714.670368][T15803] syzkaller0: entered allmulticast mode [ 714.795349][T15802] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 714.923504][T15811] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 715.138732][T15822] netlink: 'syz.1.2495': attribute type 9 has an invalid length. [ 715.473035][T15828] syzkaller1: entered promiscuous mode [ 715.473073][T15828] syzkaller1: entered allmulticast mode [ 715.782286][T15842] netlink: 'syz.4.2504': attribute type 30 has an invalid length. [ 715.845403][T15844] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2503'. [ 716.329740][T15858] tipc: Invalid UDP bearer configuration [ 716.329790][T15858] tipc: Enabling of bearer rejected, failed to enable media [ 716.634266][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2511'. [ 716.779330][ C1] net_ratelimit: 1042 callbacks suppressed [ 716.782073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.940089][ T7953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.024401][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.363894][T15883] netlink: 'syz.4.2519': attribute type 3 has an invalid length. [ 717.389638][T15883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2519'. [ 717.587200][T15892] netlink: 'syz.0.2522': attribute type 12 has an invalid length. [ 717.647032][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 717.739431][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.979948][ T7953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.064670][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 718.084755][ T52] block nbd1: Receive control failed (result -1) [ 718.383428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.710874][T15918] netlink: 'syz.0.2529': attribute type 16 has an invalid length. [ 718.852737][T15925] ip_tables: iptables: counters copy to user failed while replacing table [ 718.853864][T15925] FAULT_INJECTION: forcing a failure. [ 718.853864][T15925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.853898][T15925] CPU: 0 UID: 0 PID: 15925 Comm: syz.2.2532 Not tainted syzkaller #0 PREEMPT(full) [ 718.853921][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 718.853935][T15925] Call Trace: [ 718.853943][T15925] [ 718.853953][T15925] dump_stack_lvl+0xe8/0x150 [ 718.853994][T15925] should_fail_ex+0x410/0x560 [ 718.854027][T15925] _copy_from_iter+0x1d3/0x1660 [ 718.854054][T15925] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.854085][T15925] ? __pfx_policy_nodemask+0x10/0x10 [ 718.854116][T15925] ? lock_acquire+0x115/0x350 [ 718.854140][T15925] ? __pfx__copy_from_iter+0x10/0x10 [ 718.854167][T15925] ? alloc_pages_mpol+0x256/0x390 [ 718.854201][T15925] copy_page_from_iter+0x219/0x2d0 [ 718.854230][T15925] tun_get_user+0x1c16/0x44d0 [ 718.854342][T15925] ? tun_get_user+0x70a/0x44d0 [ 718.854381][T15925] ? aa_file_perm+0x4ed/0x15f0 [ 718.854411][T15925] ? __pfx_tun_get_user+0x10/0x10 [ 718.854440][T15925] ? __lock_acquire+0x747/0x2de0 [ 718.854476][T15925] ? ref_tracker_alloc+0x341/0x4b0 [ 718.854501][T15925] ? lock_acquire+0x115/0x350 [ 718.854520][T15923] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 718.854523][T15925] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.854553][T15925] ? lock_acquire+0x115/0x350 [ 718.854574][T15925] ? tun_get+0x1c/0x2f0 [ 718.854603][T15925] ? tun_get+0x1c/0x2f0 [ 718.854625][T15925] ? tun_get+0x1c/0x2f0 [ 718.854651][T15925] tun_chr_write_iter+0x113/0x200 [ 718.854679][T15925] vfs_write+0x612/0xba0 [ 718.854722][T15925] ? __pfx_vfs_write+0x10/0x10 [ 718.854774][T15925] ? __fget_files+0x2a/0x420 [ 718.854813][T15925] ksys_write+0x150/0x270 [ 718.854848][T15925] ? __pfx_ksys_write+0x10/0x10 [ 718.854891][T15925] do_syscall_64+0x166/0x520 [ 718.854920][T15925] ? trace_irq_disable+0x3b/0x140 [ 718.854941][T15925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.854964][T15925] ? clear_bhb_loop+0x70/0xc0 [ 718.854991][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.855013][T15925] RIP: 0033:0x7fb17755e98e [ 718.855034][T15925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.855054][T15925] RSP: 002b:00007fb1783fcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.855079][T15925] RAX: ffffffffffffffda RBX: 00007fb1783fd6c0 RCX: 00007fb17755e98e [ 718.855096][T15925] RDX: 0000000000000036 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 718.855110][T15925] RBP: 00007fb1783fd090 R08: 0000000000000000 R09: 0000000000000000 [ 718.855123][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.855137][T15925] R13: 00007fb177826038 R14: 00007fb177825fa0 R15: 00007ffd38620f18 [ 718.855170][T15925] [ 719.042333][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.088580][T15930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2533'. [ 719.432802][T15943] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2537'. [ 719.435799][T15943] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2537'. [ 719.494740][T15948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.495137][T15948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.495345][T15948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.622163][T15974] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2544'. [ 720.713032][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 720.713059][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 720.713095][T15978] netlink: 'syz.3.2546': attribute type 18 has an invalid length. [ 720.998238][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 721.970241][T16036] ip6gretap1: entered allmulticast mode [ 722.070844][ T31] audit: type=1800 audit(1790259097.570:8): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2554" name="memory.events" dev="tmpfs" ino=2688 res=0 errno=0 [ 722.139852][ T7953] net_ratelimit: 1024 callbacks suppressed [ 722.139881][ T7953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.220529][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.233576][ T9392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.605103][T16057] pim6reg: entered allmulticast mode [ 722.616132][T16057] pim6reg: left allmulticast mode [ 722.907104][T16073] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 722.921408][T16073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.924884][T16073] team0: Port device netdevsim1 added [ 723.035793][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.036029][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.036192][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.064830][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.065073][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.065250][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.065438][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.175738][T16061] __nla_validate_parse: 6 callbacks suppressed [ 723.175769][T16061] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2564'. [ 723.253113][T16074] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 723.286982][T16074] team0: Port device netdevsim1 removed [ 723.308806][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 723.308866][T16080] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2568'. [ 723.390321][T16080] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2568'. [ 723.601048][T16090] netlink: 'syz.1.2571': attribute type 2 has an invalid length. [ 723.601076][T16090] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 723.601091][T16090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2571'. [ 723.876325][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 723.876469][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 724.042983][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 724.510350][T16121] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 724.510398][T16121] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 724.510444][T16121] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 724.553139][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2578'. [ 724.585113][T16121] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 724.898986][T16134] x_tables: duplicate entry at hook 1 [ 724.964934][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 724.991968][T16135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 725.012719][T16135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.131275][T16138] 8021q: VLANs not supported on nlmon0 [ 725.948575][T16173] atomic_op ffff88807f0c89e0 conn xmit_atomic 0000000000000000 [ 726.395799][T16188] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 726.596483][T16198] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 726.630863][T16198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.708208][T16206] netlink: 'syz.4.2602': attribute type 11 has an invalid length. [ 726.914071][T16215] syzkaller1: entered promiscuous mode [ 726.914101][T16215] syzkaller1: entered allmulticast mode [ 727.304195][T16227] syzkaller0: entered promiscuous mode [ 727.304229][T16227] syzkaller0: entered allmulticast mode [ 727.427256][T16240] IPVS: length: 77 != 24 [ 727.984517][ T9391] net_ratelimit: 1078 callbacks suppressed [ 727.984547][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.002965][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.548326][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.833958][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.605473][T16260] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 732.805991][T16268] ieee802154 phy0 wpan0: encryption failed: -22 [ 732.868518][T16265] __nla_validate_parse: 6 callbacks suppressed [ 732.868546][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 733.228459][T16282] netlink: 'syz.0.2625': attribute type 5 has an invalid length. [ 733.256960][T16282] netlink: 'syz.0.2625': attribute type 9 has an invalid length. [ 733.256987][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 733.360885][T16289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2627'. [ 733.458358][T16291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2628'. [ 733.680358][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 733.743481][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.747106][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.022938][T16305] netlink: 9900 bytes leftover after parsing attributes in process `syz.0.2633'. [ 734.078662][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 734.157704][T16305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.157744][T16305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.175991][T16305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.176089][T16305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.047091][T16332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2640'. [ 735.293912][T16340] netlink: zone id is out of range [ 735.293934][T16340] netlink: zone id is out of range [ 735.293944][T16340] netlink: zone id is out of range [ 735.293952][T16340] netlink: zone id is out of range [ 735.293961][T16340] netlink: zone id is out of range [ 735.293969][T16340] netlink: zone id is out of range [ 735.293983][T16340] netlink: zone id is out of range [ 735.293990][T16340] netlink: zone id is out of range [ 736.872642][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2643'. [ 738.887279][ T9391] net_ratelimit: 7 callbacks suppressed [ 738.887308][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.512644][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.772293][T16319] macsec2: entered promiscuous mode [ 739.934739][T16352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.117977][T16358] : left promiscuous mode [ 740.269102][T16366] ip_tables: iptables: counters copy to user failed while replacing table [ 740.637410][T16386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2653'. [ 740.771031][T16392] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2655'. [ 740.961682][T16402] tc_dump_action: action bad kind [ 741.075997][T16395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2657'. [ 741.420194][ T9392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.498657][T16424] netlink: zone id is out of range [ 741.498686][T16424] netlink: zone id is out of range [ 741.498697][T16424] netlink: zone id is out of range [ 741.498733][T16424] netlink: zone id is out of range [ 741.498743][T16424] netlink: zone id is out of range [ 741.615586][T16434] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 742.208579][ T31] audit: type=1804 audit(1790259117.710:9): pid=16453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2667" name="/newroot/496/cgroup.controllers" dev="tmpfs" ino=2578 res=1 errno=0 [ 742.208668][ T31] audit: type=1800 audit(1790259117.710:10): pid=16453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2667" name="cgroup.controllers" dev="tmpfs" ino=2578 res=0 errno=0 [ 742.237422][T16451] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸Š�Ÿ>úáÂN9Ü5äx×Ùhˉ½p¡�þàn [ 742.336273][T16453] No such timeout policy "syz0" [ 742.447961][T16461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 744.223623][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2682'. [ 744.430000][T16507] gre0: entered promiscuous mode [ 744.430034][T16507] gre0: entered allmulticast mode [ 744.619979][T13173] net_ratelimit: 10 callbacks suppressed [ 744.620004][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.719094][T16512] netlink: 'syz.2.2686': attribute type 1 has an invalid length. [ 744.778142][T16515] ip_tables: iptables: counters copy to user failed while replacing table [ 744.835048][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'. [ 744.916932][T16519] ip_tables: iptables: counters copy to user failed while replacing table [ 744.917753][T16519] FAULT_INJECTION: forcing a failure. [ 744.917753][T16519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.917789][T16519] CPU: 0 UID: 0 PID: 16519 Comm: syz.4.2688 Not tainted syzkaller #0 PREEMPT(full) [ 744.917824][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 744.917838][T16519] Call Trace: [ 744.917847][T16519] [ 744.917857][T16519] dump_stack_lvl+0xe8/0x150 [ 744.917898][T16519] should_fail_ex+0x410/0x560 [ 744.917932][T16519] _copy_from_iter+0x1d3/0x1660 [ 744.917959][T16519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 744.917993][T16519] ? __pfx_policy_nodemask+0x10/0x10 [ 744.918023][T16519] ? lock_acquire+0x115/0x350 [ 744.918047][T16519] ? __pfx__copy_from_iter+0x10/0x10 [ 744.918076][T16519] ? alloc_pages_mpol+0x256/0x390 [ 744.918115][T16519] copy_page_from_iter+0x219/0x2d0 [ 744.918147][T16519] tun_get_user+0x1c16/0x44d0 [ 744.918175][T16519] ? tun_get_user+0x70a/0x44d0 [ 744.918218][T16519] ? aa_file_perm+0x4ed/0x15f0 [ 744.918249][T16519] ? __pfx_tun_get_user+0x10/0x10 [ 744.918276][T16519] ? __lock_acquire+0x747/0x2de0 [ 744.918315][T16519] ? ref_tracker_alloc+0x341/0x4b0 [ 744.918342][T16519] ? lock_acquire+0x115/0x350 [ 744.918365][T16519] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 744.918417][T16519] ? lock_acquire+0x115/0x350 [ 744.918440][T16519] ? tun_get+0x1c/0x2f0 [ 744.918470][T16519] ? tun_get+0x1c/0x2f0 [ 744.918498][T16519] ? tun_get+0x1c/0x2f0 [ 744.918530][T16519] tun_chr_write_iter+0x113/0x200 [ 744.918558][T16519] vfs_write+0x612/0xba0 [ 744.918603][T16519] ? __pfx_vfs_write+0x10/0x10 [ 744.918647][T16519] ? __fget_files+0x2a/0x420 [ 744.918689][T16519] ksys_write+0x150/0x270 [ 744.918723][T16519] ? __pfx_ksys_write+0x10/0x10 [ 744.918768][T16519] do_syscall_64+0x166/0x520 [ 744.918796][T16519] ? trace_irq_disable+0x3b/0x140 [ 744.918826][T16519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.918846][T16519] ? clear_bhb_loop+0x70/0xc0 [ 744.918874][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.918896][T16519] RIP: 0033:0x7f58d635e98e [ 744.918917][T16519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.918936][T16519] RSP: 002b:00007f58d71c4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 744.918962][T16519] RAX: ffffffffffffffda RBX: 00007f58d71c56c0 RCX: 00007f58d635e98e [ 744.918979][T16519] RDX: 0000000000000042 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 744.918993][T16519] RBP: 00007f58d71c5090 R08: 0000000000000000 R09: 0000000000000000 [ 744.919007][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.919019][T16519] R13: 00007f58d6626038 R14: 00007f58d6625fa0 R15: 00007ffea3d20e98 [ 744.919053][T16519] [ 745.259766][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.305801][T16506] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 745.344064][T16512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.540485][T16516] bond11: (slave veth9): Enslaving as an active interface with a down link [ 745.665253][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 745.798928][T16521] bond11 (unregistering): (slave veth9): Releasing active interface [ 745.831904][T16521] bond11 (unregistering): Released all slaves [ 746.373180][T16563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2696'. [ 746.482829][T16568] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2698'. [ 746.495380][T16570] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2698'. [ 746.621832][T16533] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 746.627219][T16537] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 747.007735][T16588] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 747.020930][T16589] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 747.064717][T16588] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 747.078406][T16589] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 747.162933][T16594] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 747.180215][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.389860][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 747.454419][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2706'. [ 747.677493][T16595] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 747.831470][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.953523][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 748.461047][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.625480][T16632] netlink: 'syz.2.2714': attribute type 10 has an invalid length. [ 749.760174][T16613] veth1_vlan: left allmulticast mode [ 749.923976][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 749.938835][T16644] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 750.115055][T16649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2717'. [ 750.168194][ T10] s`z1: Port: 1 Link DOWN [ 750.171641][ T6209] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.171749][ T6209] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.171923][ T6209] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.172096][ T6209] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.172206][ T6209] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.172291][ T6209] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.172579][ T6209] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.172653][ T6209] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.400341][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.022935][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.278832][T16681] FAULT_INJECTION: forcing a failure. [ 751.278832][T16681] name failslab, interval 1, probability 0, space 0, times 0 [ 751.278872][T16681] CPU: 0 UID: 0 PID: 16681 Comm: syz.4.2722 Not tainted syzkaller #0 PREEMPT(full) [ 751.278898][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 751.278913][T16681] Call Trace: [ 751.278922][T16681] [ 751.278936][T16681] dump_stack_lvl+0xe8/0x150 [ 751.278979][T16681] should_fail_ex+0x410/0x560 [ 751.279011][T16681] should_failslab+0xa8/0x100 [ 751.279043][T16681] __kmalloc_cache_noprof+0xa3/0x600 [ 751.279069][T16681] ? rtnl_newlink+0x147/0x1c30 [ 751.279097][T16681] ? rtnl_newlink+0x147/0x1c30 [ 751.279125][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279153][T16681] rtnl_newlink+0x147/0x1c30 [ 751.279182][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279211][T16681] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.279237][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279263][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279294][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279333][T16681] ? lock_acquire+0x115/0x350 [ 751.279364][T16681] ? lock_acquire+0x115/0x350 [ 751.279397][T16681] ? is_bpf_text_address+0x26/0x2b0 [ 751.279431][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279462][T16681] ? __kernel_text_address+0xd/0x30 [ 751.279488][T16681] ? unwind_get_return_address+0x4d/0x90 [ 751.279515][T16681] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.279538][T16681] ? arch_stack_walk+0xfb/0x150 [ 751.279577][T16681] ? lock_acquire+0x115/0x350 [ 751.279600][T16681] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.279641][T16681] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.279667][T16681] rtnetlink_rcv_msg+0x802/0xc00 [ 751.279694][T16681] ? netlink_sendmsg+0x5d4/0xb40 [ 751.279720][T16681] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 751.279746][T16681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.279774][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.279816][T16681] netlink_rcv_skb+0x226/0x4a0 [ 751.279853][T16681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.279883][T16681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.279932][T16681] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.279965][T16681] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.280002][T16681] netlink_unicast+0x7bd/0x940 [ 751.280040][T16681] netlink_sendmsg+0x813/0xb40 [ 751.280069][T16681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.280097][T16681] ? apparmor_socket_sendmsg+0x98/0x360 [ 751.280124][T16681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.280143][T16681] sock_sendmsg_nosec+0x13a/0x180 [ 751.280169][T16681] ____sys_sendmsg+0x54e/0x850 [ 751.280206][T16681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.280243][T16681] ? import_iovec+0x73/0xa0 [ 751.280274][T16681] ___sys_sendmsg+0x2a5/0x360 [ 751.280300][T16681] ? __lock_acquire+0x747/0x2de0 [ 751.280325][T16681] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.280390][T16681] ? __fget_files+0x2a/0x420 [ 751.280422][T16681] ? __fget_files+0x3a2/0x420 [ 751.280462][T16681] __x64_sys_sendmsg+0x1b1/0x290 [ 751.280495][T16681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.280547][T16681] do_syscall_64+0x166/0x520 [ 751.280575][T16681] ? trace_irq_disable+0x3b/0x140 [ 751.280597][T16681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.280621][T16681] ? clear_bhb_loop+0x70/0xc0 [ 751.280648][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.280669][T16681] RIP: 0033:0x7f58d639e159 [ 751.280691][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.280710][T16681] RSP: 002b:00007f58d71a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.280735][T16681] RAX: ffffffffffffffda RBX: 00007f58d6626090 RCX: 00007f58d639e159 [ 751.280752][T16681] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000014 [ 751.280766][T16681] RBP: 00007f58d71a4090 R08: 0000000000000000 R09: 0000000000000000 [ 751.280779][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.280803][T16681] R13: 00007f58d6626128 R14: 00007f58d6626090 R15: 00007ffea3d20e98 [ 751.280838][T16681] [ 751.609879][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 751.730242][T16683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2723'. [ 752.218720][T16697] ip_tables: iptables: counters copy to user failed while replacing table [ 752.306011][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.415874][T16701] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 753.216042][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 753.257913][T16746] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 753.274327][T16746] bond8 (unregistering): Released all slaves [ 753.556296][T16751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2735'. [ 754.040897][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 754.040940][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 754.220311][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.527326][T16795] syzkaller0: create flow: hash 2729011342 index 2 [ 754.545886][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 754.562473][T16802] IPVS: stopping backup sync thread 13453 ... [ 754.599693][ T9400] syzkaller0: tun_net_xmit 76 [ 754.600991][ T9400] syzkaller0: tun_net_xmit 48 [ 754.640080][ T7953] syzkaller0: tun_net_xmit 76 [ 754.662923][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'. [ 754.689832][T15680] syzkaller0: tun_net_xmit 76 [ 754.793046][T16799] syzkaller0: delete flow: hash 2729011342 index 2 [ 754.840858][T15680] syzkaller0: tun_net_xmit 76 [ 754.952976][T16819] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 756.150658][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.793553][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.084221][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.527431][T16819] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 759.882197][T16842] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 759.882224][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2751'. [ 759.981243][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.361715][ T52] block nbd2: Receive control failed (result -32) [ 760.387580][T16863] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 760.412470][T16864] FAULT_INJECTION: forcing a failure. [ 760.412470][T16864] name failslab, interval 1, probability 0, space 0, times 0 [ 760.412512][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.2.2756 Not tainted syzkaller #0 PREEMPT(full) [ 760.412537][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 760.412552][T16864] Call Trace: [ 760.412561][T16864] [ 760.412572][T16864] dump_stack_lvl+0xe8/0x150 [ 760.412613][T16864] should_fail_ex+0x410/0x560 [ 760.412646][T16864] should_failslab+0xa8/0x100 [ 760.412678][T16864] __kvmalloc_node_noprof+0x176/0x820 [ 760.412714][T16864] ? alloc_netdev_mqs+0xa9/0x12a0 [ 760.412840][T16864] ? alloc_netdev_mqs+0xa9/0x12a0 [ 760.412883][T16864] alloc_netdev_mqs+0xa9/0x12a0 [ 760.412916][T16864] ? __pfx_snprintf+0x10/0x10 [ 760.412938][T16864] ? __pfx_vlan_setup+0x10/0x10 [ 760.413025][T16864] rtnl_create_link+0x321/0xd70 [ 760.413055][T16864] rtnl_newlink_create+0x258/0x7b0 [ 760.413096][T16864] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 760.413131][T16864] ? __pfx___mutex_lock+0x10/0x10 [ 760.413174][T16864] ? ns_capable+0x89/0xe0 [ 760.413210][T16864] rtnl_newlink+0x167a/0x1c30 [ 760.413255][T16864] ? __pfx_rtnl_newlink+0x10/0x10 [ 760.413281][T16864] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 760.413317][T16864] ? netlink_deliver_tap+0x19c/0x1b0 [ 760.413350][T16864] ? netlink_unicast+0x781/0x940 [ 760.413379][T16864] ? netlink_sendmsg+0x813/0xb40 [ 760.413398][T16864] ? sock_sendmsg_nosec+0x13a/0x180 [ 760.413419][T16864] ? ____sys_sendmsg+0x54e/0x850 [ 760.413447][T16864] ? ___sys_sendmsg+0x2a5/0x360 [ 760.413483][T16864] ? __x64_sys_sendmsg+0x1b1/0x290 [ 760.413511][T16864] ? do_syscall_64+0x166/0x520 [ 760.413538][T16864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.413603][T16864] ? kasan_quarantine_put+0xbb/0x1f0 [ 760.413628][T16864] ? lockdep_hardirqs_on+0x7b/0x110 [ 760.413661][T16864] ? nlmon_xmit+0xb0/0x100 [ 760.413722][T16864] ? kmem_cache_free+0x182/0x650 [ 760.413757][T16864] ? __lock_acquire+0x747/0x2de0 [ 760.413791][T16864] ? __dev_queue_xmit+0x29b/0x3820 [ 760.413829][T16864] ? __local_bh_enable_ip+0xd6/0x140 [ 760.413860][T16864] ? lockdep_hardirqs_on+0x7b/0x110 [ 760.413917][T16864] ? __pfx_rtnl_newlink+0x10/0x10 [ 760.413943][T16864] rtnetlink_rcv_msg+0x802/0xc00 [ 760.413976][T16864] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 760.414003][T16864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.414032][T16864] ? __copy_skb_header+0xa3/0x4a0 [ 760.414077][T16864] netlink_rcv_skb+0x226/0x4a0 [ 760.414112][T16864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.414141][T16864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.414191][T16864] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.414224][T16864] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.414265][T16864] netlink_unicast+0x7bd/0x940 [ 760.414309][T16864] netlink_sendmsg+0x813/0xb40 [ 760.414341][T16864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.414373][T16864] ? apparmor_socket_sendmsg+0x98/0x360 [ 760.414403][T16864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.414424][T16864] sock_sendmsg_nosec+0x13a/0x180 [ 760.414459][T16864] ____sys_sendmsg+0x54e/0x850 [ 760.414497][T16864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.414538][T16864] ? import_iovec+0x73/0xa0 [ 760.414571][T16864] ___sys_sendmsg+0x2a5/0x360 [ 760.414600][T16864] ? __lock_acquire+0x747/0x2de0 [ 760.414629][T16864] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.414700][T16864] ? __fget_files+0x2a/0x420 [ 760.414732][T16864] ? __fget_files+0x3a2/0x420 [ 760.414775][T16864] __x64_sys_sendmsg+0x1b1/0x290 [ 760.414809][T16864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.414865][T16864] do_syscall_64+0x166/0x520 [ 760.414892][T16864] ? trace_irq_disable+0x3b/0x140 [ 760.414916][T16864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.414939][T16864] ? clear_bhb_loop+0x70/0xc0 [ 760.414968][T16864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.414991][T16864] RIP: 0033:0x7fb17759e159 [ 760.415013][T16864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.415033][T16864] RSP: 002b:00007fb1783dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.415060][T16864] RAX: ffffffffffffffda RBX: 00007fb177826090 RCX: 00007fb17759e159 [ 760.415077][T16864] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000014 [ 760.415091][T16864] RBP: 00007fb1783dc090 R08: 0000000000000000 R09: 0000000000000000 [ 760.415105][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.415119][T16864] R13: 00007fb177826128 R14: 00007fb177826090 R15: 00007ffd38620f18 [ 760.415157][T16864] [ 760.673218][T16865] lo: entered promiscuous mode [ 760.949670][T16865] tunl0: entered promiscuous mode [ 760.953478][T16865] gre0: entered promiscuous mode [ 761.006354][T16865] gretap0: entered promiscuous mode [ 761.042715][T16865] erspan0: entered promiscuous mode [ 761.056453][T16865] ip_vti0: entered promiscuous mode [ 761.083090][T16865] ip6_vti0: entered promiscuous mode [ 761.088244][T16865] sit0: entered promiscuous mode [ 761.111708][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 761.111739][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 761.111774][T16870] netlink: 'syz.0.2759': attribute type 19 has an invalid length. [ 761.111790][T16870] netlink: 'syz.0.2759': attribute type 20 has an invalid length. [ 761.174293][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 761.174324][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 761.174359][T16871] netlink: 'syz.0.2759': attribute type 19 has an invalid length. [ 761.174376][T16871] netlink: 'syz.0.2759': attribute type 20 has an invalid length. [ 761.203044][T16865] ip6tnl0: entered promiscuous mode [ 761.379096][T16865] tipc: Resetting bearer [ 761.381916][T16865] tipc: Resetting bearer [ 761.382133][T16865] ip6gre0: entered promiscuous mode [ 761.474552][T16865] syz_tun: entered promiscuous mode [ 761.498595][T16865] ip6gretap0: entered promiscuous mode [ 761.517288][T16865] bridge0: entered promiscuous mode [ 761.517323][T16865] vlan0: entered promiscuous mode [ 761.517343][T16865] geneve0: entered promiscuous mode [ 761.900529][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.540555][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.857493][T16920] FAULT_INJECTION: forcing a failure. [ 762.857493][T16920] name failslab, interval 1, probability 0, space 0, times 0 [ 762.857533][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.0.2771 Not tainted syzkaller #0 PREEMPT(full) [ 762.857557][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 762.857571][T16920] Call Trace: [ 762.857580][T16920] [ 762.857590][T16920] dump_stack_lvl+0xe8/0x150 [ 762.857631][T16920] should_fail_ex+0x410/0x560 [ 762.857663][T16920] should_failslab+0xa8/0x100 [ 762.857693][T16920] ? skb_clone+0x212/0x3a0 [ 762.857737][T16920] kmem_cache_alloc_noprof+0xa1/0x600 [ 762.857776][T16920] ? skb_clone+0x212/0x3a0 [ 762.857813][T16920] skb_clone+0x212/0x3a0 [ 762.857845][T16920] bpf_clone_redirect+0x170/0x4b0 [ 762.857884][T16920] ? bpf_test_run+0x1d1/0x830 [ 762.857918][T16920] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 762.857944][T16920] ? __kernel_text_address+0xd/0x30 [ 762.857974][T16920] ? arch_stack_walk+0xfb/0x150 [ 762.858006][T16920] ? __pfx___schedule+0x10/0x10 [ 762.858047][T16920] ? preempt_schedule_thunk+0x16/0x40 [ 762.858074][T16920] ? preempt_schedule_common+0x7f/0xd0 [ 762.858099][T16920] ? bpf_test_run+0x1d1/0x830 [ 762.858137][T16920] ? bpf_test_timer_continue+0x10c/0x320 [ 762.858163][T16920] bpf_test_run+0x354/0x830 [ 762.858220][T16920] ? __pfx_bpf_test_run+0x10/0x10 [ 762.858270][T16920] ? __kasan_krealloc+0xec/0x110 [ 762.858306][T16920] ? skb_dst_set+0x72/0x140 [ 762.858342][T16920] bpf_prog_test_run_skb+0xe35/0x2230 [ 762.858398][T16920] ? __fget_files+0x3a2/0x420 [ 762.858428][T16920] ? __fget_files+0x2a/0x420 [ 762.858461][T16920] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 762.858495][T16920] bpf_prog_test_run+0x2c5/0x340 [ 762.858532][T16920] __sys_bpf+0xa22/0xd90 [ 762.858565][T16920] ? __pfx___sys_bpf+0x10/0x10 [ 762.858603][T16920] ? __fget_files+0x2a/0x420 [ 762.858653][T16920] ? ksys_write+0x242/0x270 [ 762.858689][T16920] ? __pfx_ksys_write+0x10/0x10 [ 762.858737][T16920] __x64_sys_bpf+0xba/0xd0 [ 762.858764][T16920] do_syscall_64+0x166/0x520 [ 762.858792][T16920] ? trace_irq_disable+0x3b/0x140 [ 762.858815][T16920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.858837][T16920] ? clear_bhb_loop+0x70/0xc0 [ 762.858865][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.858888][T16920] RIP: 0033:0x7f03bc59e159 [ 762.858910][T16920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.858929][T16920] RSP: 002b:00007f03bd3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 762.858953][T16920] RAX: ffffffffffffffda RBX: 00007f03bc825fa0 RCX: 00007f03bc59e159 [ 762.858969][T16920] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 762.858983][T16920] RBP: 00007f03bd3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 762.858997][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.859009][T16920] R13: 00007f03bc826038 R14: 00007f03bc825fa0 R15: 00007ffcd44a90d8 [ 762.859041][T16920] [ 763.104574][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.408137][T16901] lo speed is unknown, defaulting to 1000 [ 763.408305][T16901] lo speed is unknown, defaulting to 1000 [ 763.475153][T16901] lo speed is unknown, defaulting to 1000 [ 763.533061][T16901] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 763.533113][T16901] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 763.533158][T16901] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 763.631878][T16901] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 763.761010][T16901] lo speed is unknown, defaulting to 1000 [ 763.790918][T16901] lo speed is unknown, defaulting to 1000 [ 763.800199][T16901] lo speed is unknown, defaulting to 1000 [ 763.802225][T16901] lo speed is unknown, defaulting to 1000 [ 763.804216][T16901] lo speed is unknown, defaulting to 1000 [ 764.046165][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 764.046202][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 764.092930][T16942] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2776'. [ 764.096550][T16942] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2776'. [ 764.670642][T16953] tc_dump_action: action bad kind [ 764.673449][T16953] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2781'. [ 764.695907][T16957] ip_tables: iptables: counters copy to user failed while replacing table [ 764.892178][T16962] __nla_validate_parse: 2 callbacks suppressed [ 764.892204][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 765.334115][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 765.374077][T16980] syzkaller1: entered promiscuous mode [ 765.374106][T16980] syzkaller1: entered allmulticast mode [ 765.739793][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.857997][T16994] ip_tables: iptables: counters copy to user failed while replacing table [ 766.038356][T17000] vcan0: entered allmulticast mode [ 766.039765][T17000] vcan0: left allmulticast mode [ 766.163993][T17006] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20003 [ 766.387306][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 766.424726][T17012] netlink: 'syz.2.2802': attribute type 2 has an invalid length. [ 766.448161][T17012] : entered promiscuous mode [ 766.478743][T17014] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 766.583466][T17017] veth10: entered allmulticast mode [ 766.664276][T17019] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 766.769034][T17019] 8021q: adding VLAN 0 to HW filter on device bond9 [ 766.803947][T17022] 8021q: adding VLAN 0 to HW filter on device bond9 [ 766.804348][T17022] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 766.806678][T17022] bond9: (slave xfrm1): Error -95 calling set_mac_address [ 766.965903][T17022] ip_tables: iptables: counters copy to user failed while replacing table [ 767.228173][T17038] netlink: 'syz.3.2809': attribute type 1 has an invalid length. [ 767.228203][T17038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2809'. [ 767.414109][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'. [ 767.452522][T17048] ip_tables: iptables: counters copy to user failed while replacing table [ 767.560334][T17051] pimreg: entered allmulticast mode [ 767.630534][T17039] syzkaller0: entered promiscuous mode [ 767.630566][T17039] syzkaller0: entered allmulticast mode [ 767.636629][T17039] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 767.665904][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.884179][T17064] 8021q: VLANs not supported on vcan0 [ 767.979768][T17051] pimreg: left allmulticast mode [ 768.301571][ T9392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.584488][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2823'. [ 768.612047][T17099] bridge0: port 1(wlan1) entered blocking state [ 768.612228][T17099] bridge0: port 1(wlan1) entered disabled state [ 768.612446][T17099] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 768.614537][T17099] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 768.665377][T17099] mac80211_hwsim hwsim36 wlan1 (unregistering): left allmulticast mode [ 768.665416][T17099] mac80211_hwsim hwsim36 wlan1 (unregistering): left promiscuous mode [ 768.665553][T17099] bridge0: port 1(wlan1) entered disabled state [ 768.942594][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.309979][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 769.311646][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2828'. [ 769.330103][T17096] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 769.374217][T17129] syzkaller0: entered promiscuous mode [ 769.374246][T17129] syzkaller0: entered allmulticast mode [ 769.399412][ T6209] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.484194][ T6209] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.484248][ T6209] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.484286][ T6209] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.706645][T17135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2829'. [ 769.850913][T17142] Unsupported ieee802154 address type: 0 [ 770.013559][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 770.431595][T17171] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 770.558617][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.605570][T17171] team0: Port device netdevsim1 added [ 770.758402][T17182] syzkaller1: entered allmulticast mode [ 771.094741][T17200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2840'. [ 771.292497][T17208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.433760][T17213] ip6gretap2: entered allmulticast mode [ 771.492122][T17217] netlink: 'syz.1.2846': attribute type 25 has an invalid length. [ 771.501562][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.792641][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 771.912758][T17240] sctp: [Deprecated]: syz.1.2851 (pid 17240) Use of int in maxseg socket option. [ 771.912758][T17240] Use struct sctp_assoc_value instead [ 772.168982][T17243] lo speed is unknown, defaulting to 1000 [ 772.193082][T17245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.270287][T17255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.340478][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2855'. [ 772.497377][T17257] macvtap1: entered promiscuous mode [ 772.497409][T17257] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 772.497658][T17257] macvtap1: entered allmulticast mode [ 772.497677][T17257] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 772.626256][T17258] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 772.626294][T17258] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 772.626968][T17258] macvtap1: left promiscuous mode [ 772.626988][T17258] macvtap1: left allmulticast mode [ 772.699374][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 772.774772][T17269] syzkaller0: entered promiscuous mode [ 772.774804][T17269] syzkaller0: entered allmulticast mode [ 772.800105][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.422118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.651156][T17299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2866'. [ 773.706898][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.724087][ T4936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.750145][ T4936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.755448][ T4936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.758113][ T4936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 773.982132][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.079861][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.479056][T17326] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2870'. [ 774.509034][T17326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2870'. [ 774.811072][ T5664] tipc: Disabling bearer [ 774.872740][T17340] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2872'. [ 775.109052][T17345] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 775.185090][ T9400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.399646][ T9400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.582357][ T9400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.644334][T17297] lo speed is unknown, defaulting to 1000 [ 775.754006][ T9400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.899387][ T52] Bluetooth: hci5: command tx timeout [ 776.045988][T17375] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 776.456668][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 776.855157][ T9400] bond8: left allmulticast mode [ 776.855223][ T9400] bond8: left promiscuous mode [ 776.860693][ T9400] bridge0: port 1(bond8) entered disabled state [ 777.007239][ T9400] ±ÿ: left allmulticast mode [ 777.136393][T17421] ieee802154 phy0 wpan0: encryption failed: -90 [ 777.265559][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.989341][ T52] Bluetooth: hci5: command tx timeout [ 778.118776][ T9400] bond4 (unregistering): (slave bridge7): Releasing active interface [ 778.144040][ T9400] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 778.144076][ T9400] bridge8 (unregistering): left promiscuous mode [ 778.144102][ T9400] bridge8 (unregistering): left allmulticast mode [ 778.193971][ T9400] bond1 (unregistering): Released all slaves [ 778.211054][ T9400] bond2 (unregistering): Released all slaves [ 778.237870][ T9400] bond0 (unregistering): Released all slaves [ 778.257866][ T9400] bond3 (unregistering): Released all slaves [ 778.340970][ T9400] bond4 (unregistering): Released all slaves [ 778.358647][ T9400] bond5 (unregistering): Released all slaves [ 778.377779][ T9400] bond6 (unregistering): Released all slaves [ 778.394959][ T9400] bond7 (unregistering): Released all slaves [ 778.425713][ T9400] bond8 (unregistering): Released all slaves [ 778.446807][ T9400] bond9 (unregistering): Released all slaves [ 778.473797][ T9400] bond10 (unregistering): Released all slaves [ 778.493685][ T9400] bond11 (unregistering): Released all slaves [ 778.538736][T17406] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 778.638812][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 778.774751][T17297] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.774945][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.775090][T17297] bridge_slave_0: entered allmulticast mode [ 778.777061][T17297] bridge_slave_0: entered promiscuous mode [ 778.781657][T17297] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.781780][T17297] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.781935][T17297] bridge_slave_1: entered allmulticast mode [ 778.783708][T17297] bridge_slave_1: entered promiscuous mode [ 779.015411][T17297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.017803][ T9400] ´: left promiscuous mode [ 779.255278][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 779.282500][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 779.287415][T17457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2898'. [ 779.458677][T17297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.573694][ T9400] ovs-s: left promiscuous mode [ 779.665398][T17464] bridge4: entered promiscuous mode [ 779.696030][ T9400] tipc: Left network mode [ 779.805123][T17297] team0: Port device team_slave_0 added [ 779.825860][T10471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.042059][T17297] team0: Port device team_slave_1 added [ 780.067047][ T52] Bluetooth: hci5: command tx timeout [ 780.269958][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 780.471350][T17297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.471373][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.471404][T17297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.628318][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.664997][T17297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.665020][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.665051][T17297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.940775][T17511] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2907'. [ 781.110108][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.146079][T17297] hsr_slave_0: entered promiscuous mode [ 781.147276][T17297] hsr_slave_1: entered promiscuous mode [ 781.148205][T17297] debugfs: 'hsr0' already exists in 'hsr' [ 781.148226][T17297] Cannot create hsr debugfs directory [ 781.172797][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 781.450632][T17527] netlink: 'syz.0.2910': attribute type 11 has an invalid length. [ 781.502761][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 781.508453][T17527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2910'. [ 782.139825][ T52] Bluetooth: hci5: command tx timeout [ 782.852452][T17582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.855011][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 783.020687][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.663884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.664189][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.898756][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 784.325537][ T9400] hsr_slave_0: left promiscuous mode [ 784.328875][ T9400] hsr_slave_1: left promiscuous mode [ 784.386794][T17614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.148345][T17617] 8021q: VLANs not supported on nlmon0 [ 785.283952][T17624] bond9: option ad_user_port_key: invalid value (65535) [ 785.283984][T17624] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 785.288971][T17624] bond9 (unregistering): Released all slaves [ 785.443839][T17640] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 785.443839][T17640] Please contact the netfilter-devel mailing list or update your nftables rules. [ 785.479700][T17640] openvswitch: netlink: Missing valid actions attribute. [ 785.479750][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.480202][T17640] openvswitch: netlink: Missing valid actions attribute. [ 785.480237][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.481912][T17640] openvswitch: netlink: Missing valid actions attribute. [ 785.481951][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.482388][T17640] openvswitch: netlink: Missing valid actions attribute. [ 785.482423][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.482884][T17640] openvswitch: netlink: Missing valid actions attribute. [ 785.482923][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.488843][T17627] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2929'. [ 785.639943][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 785.640074][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 785.640184][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 785.640291][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 785.640399][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 785.640517][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 786.428808][ T9400] IPVS: stop unused estimator thread 0... [ 786.672512][T17678] __nla_validate_parse: 28 callbacks suppressed [ 786.672536][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2940'. [ 786.727559][T17297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.739620][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.744469][T17297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.771602][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.772644][T17297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.776843][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.777873][T17297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.811367][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.834429][T17679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 786.998511][T17297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.042607][T17297] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.063821][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.063935][T13172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.108733][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.108884][ T9392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.509210][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2943'. [ 787.615826][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2943'. [ 787.615858][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2943'. [ 787.916225][T17720] tipc: Enabling of bearer rejected, already enabled [ 788.471460][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 788.741009][T17297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.727344][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 789.803879][T17297] veth0_vlan: entered promiscuous mode [ 789.907048][T17297] veth1_vlan: entered promiscuous mode [ 790.091646][T17297] veth0_macvtap: entered promiscuous mode [ 790.123004][T17297] veth1_macvtap: entered promiscuous mode [ 790.185369][T17297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.229088][T17297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.409801][T13173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.433552][ T6215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.450293][ T6215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.450511][ T9395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.700085][T13172] net_ratelimit: 18 callbacks suppressed [ 790.700111][T13172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.894065][T10471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.894094][T10471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.971876][T17840] syzkaller0: entered promiscuous mode [ 790.971908][T17840] syzkaller0: entered allmulticast mode [ 791.107296][T10471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.107341][T10471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.981443][ T9392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.631202][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.105702][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.127150][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.128200][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.143626][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.168536][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.902627][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.561432][T17913] lo speed is unknown, defaulting to 1000 [ 794.690835][T17971] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2988'. [ 794.696086][T17972] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2988'. [ 794.724316][T17972] bridge0: left promiscuous mode [ 794.724512][T17972] vlan0: left promiscuous mode [ 794.724525][T17972] geneve0: left promiscuous mode [ 794.762763][T17972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2988'. [ 795.172869][T17986] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 795.231897][T17984] bond1: entered promiscuous mode [ 795.231970][T17984] bond1: entered allmulticast mode [ 795.232546][T17984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 795.261340][ T4936] Bluetooth: hci3: command tx timeout [ 795.298686][T17991] bond2: entered promiscuous mode [ 795.298721][T17991] bond2: entered allmulticast mode [ 795.314677][T17991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 795.615862][T18001] netlink: 'syz.1.2995': attribute type 4 has an invalid length. [ 795.648113][T17913] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.650013][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.650226][T17913] bridge_slave_0: entered allmulticast mode [ 795.654987][T17913] bridge_slave_0: entered promiscuous mode [ 795.695392][T17913] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.695583][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.696157][T17913] bridge_slave_1: entered allmulticast mode [ 795.700655][T18003] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2996'. [ 795.733061][T17913] bridge_slave_1: entered promiscuous mode [ 795.767188][T18006] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 795.823943][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.978063][T17913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.013642][T17913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.088265][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 796.218642][T17913] team0: Port device team_slave_0 added [ 796.269108][T17913] team0: Port device team_slave_1 added [ 796.398466][T17913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.398490][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.398521][T17913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.408687][T17913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.408741][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.408814][T17913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.650539][T17913] hsr_slave_0: entered promiscuous mode [ 796.657897][T17913] hsr_slave_1: entered promiscuous mode [ 796.658750][T17913] debugfs: 'hsr0' already exists in 'hsr' [ 796.658773][T17913] Cannot create hsr debugfs directory [ 796.963833][T18042] syzkaller0: entered promiscuous mode [ 796.963865][T18042] syzkaller0: entered allmulticast mode [ 797.020538][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.350012][ T4936] Bluetooth: hci3: command tx timeout [ 797.472739][T18060] FAULT_INJECTION: forcing a failure. [ 797.472739][T18060] name failslab, interval 1, probability 0, space 0, times 0 [ 797.472785][T18060] CPU: 1 UID: 0 PID: 18060 Comm: syz.2.3009 Not tainted syzkaller #0 PREEMPT(full) [ 797.472812][T18060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 797.472827][T18060] Call Trace: [ 797.472837][T18060] [ 797.472847][T18060] dump_stack_lvl+0xe8/0x150 [ 797.472890][T18060] should_fail_ex+0x410/0x560 [ 797.472923][T18060] should_failslab+0xa8/0x100 [ 797.472954][T18060] ? skb_clone+0x212/0x3a0 [ 797.472988][T18060] kmem_cache_alloc_noprof+0xa1/0x600 [ 797.473027][T18060] ? skb_clone+0x212/0x3a0 [ 797.473074][T18060] skb_clone+0x212/0x3a0 [ 797.473110][T18060] bpf_clone_redirect+0x170/0x4b0 [ 797.473144][T18060] ? bpf_test_run+0x1d1/0x830 [ 797.473180][T18060] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 797.473206][T18060] ? __kernel_text_address+0xd/0x30 [ 797.473237][T18060] ? arch_stack_walk+0xfb/0x150 [ 797.473269][T18060] ? __pfx___schedule+0x10/0x10 [ 797.473312][T18060] ? preempt_schedule_thunk+0x16/0x40 [ 797.473341][T18060] ? preempt_schedule_common+0x7f/0xd0 [ 797.473367][T18060] ? bpf_test_run+0x1d1/0x830 [ 797.473405][T18060] ? bpf_test_timer_continue+0x10c/0x320 [ 797.473432][T18060] bpf_test_run+0x354/0x830 [ 797.473491][T18060] ? __pfx_bpf_test_run+0x10/0x10 [ 797.473542][T18060] ? __kasan_krealloc+0xec/0x110 [ 797.473580][T18060] ? skb_dst_set+0x72/0x140 [ 797.473639][T18060] bpf_prog_test_run_skb+0xe35/0x2230 [ 797.473697][T18060] ? __fget_files+0x3a2/0x420 [ 797.473729][T18060] ? __fget_files+0x2a/0x420 [ 797.473765][T18060] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 797.473801][T18060] bpf_prog_test_run+0x2c5/0x340 [ 797.473835][T18060] __sys_bpf+0xa22/0xd90 [ 797.473870][T18060] ? __pfx___sys_bpf+0x10/0x10 [ 797.473908][T18060] ? __fget_files+0x2a/0x420 [ 797.473958][T18060] ? ksys_write+0x242/0x270 [ 797.473996][T18060] ? __pfx_ksys_write+0x10/0x10 [ 797.474035][T18060] __x64_sys_bpf+0xba/0xd0 [ 797.474062][T18060] do_syscall_64+0x166/0x520 [ 797.474097][T18060] ? trace_irq_disable+0x3b/0x140 [ 797.474121][T18060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.474145][T18060] ? clear_bhb_loop+0x70/0xc0 [ 797.474174][T18060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.474198][T18060] RIP: 0033:0x7fb17759e159 [ 797.474219][T18060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.474240][T18060] RSP: 002b:00007fb1783fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.474266][T18060] RAX: ffffffffffffffda RBX: 00007fb177825fa0 RCX: 00007fb17759e159 [ 797.474284][T18060] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 797.474299][T18060] RBP: 00007fb1783fd090 R08: 0000000000000000 R09: 0000000000000000 [ 797.474313][T18060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.474326][T18060] R13: 00007fb177826038 R14: 00007fb177825fa0 R15: 00007ffd38620f18 [ 797.474362][T18060] [ 798.239434][T17913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.239480][T17913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.388619][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.452325][T17913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.452371][T17913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.687470][T17913] team0: Port device netdevsim1 removed [ 798.703125][T17913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.703168][T17913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.928727][T18093] netlink: 'syz.4.3020': attribute type 4 has an invalid length. [ 798.980751][T18094] netlink: 'syz.4.3020': attribute type 4 has an invalid length. [ 799.000928][T17913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.000971][T17913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.022467][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.073216][T18099] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 799.073242][T18099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3021'. [ 799.073258][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 799.196325][T18104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 799.196672][T18104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 799.196965][T18104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 799.197268][T18104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 799.197542][T18104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 799.253020][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3023'. [ 799.253066][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3023'. [ 799.275394][T18107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3023'. [ 799.420280][ T4936] Bluetooth: hci3: command tx timeout [ 799.747207][T18123] lo: entered promiscuous mode [ 799.747235][T18123] lo: entered allmulticast mode [ 799.763715][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3026'. [ 799.763744][T18123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.856699][T18125] netlink: 'syz.3.3027': attribute type 21 has an invalid length. [ 800.068886][T17913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.144315][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.146791][T18130] team0: entered promiscuous mode [ 800.146878][T18130] team0: entered allmulticast mode [ 800.149088][T18130] team0: Cannot enslave team device to itself [ 800.191437][T17913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 800.214113][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.215176][T17913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 800.239376][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.240733][T17913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 800.264675][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.290333][T18137] netlink: 'syz.4.3030': attribute type 1 has an invalid length. [ 800.373086][T18147] syzkaller0: entered promiscuous mode [ 800.373113][T18147] syzkaller0: entered allmulticast mode [ 800.469666][T18154] FAULT_INJECTION: forcing a failure. [ 800.469666][T18154] name failslab, interval 1, probability 0, space 0, times 0 [ 800.469709][T18154] CPU: 0 UID: 0 PID: 18154 Comm: syz.2.3032 Not tainted syzkaller #0 PREEMPT(full) [ 800.469735][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 800.469750][T18154] Call Trace: [ 800.469759][T18154] [ 800.469770][T18154] dump_stack_lvl+0xe8/0x150 [ 800.469825][T18154] should_fail_ex+0x410/0x560 [ 800.469858][T18154] should_failslab+0xa8/0x100 [ 800.469887][T18154] ? skb_clone+0x212/0x3a0 [ 800.469920][T18154] kmem_cache_alloc_noprof+0xa1/0x600 [ 800.469967][T18154] ? skb_clone+0x212/0x3a0 [ 800.470006][T18154] skb_clone+0x212/0x3a0 [ 800.470041][T18154] bpf_clone_redirect+0x170/0x4b0 [ 800.470074][T18154] ? bpf_test_run+0x1d1/0x830 [ 800.470110][T18154] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 800.470142][T18154] ? __kernel_text_address+0xd/0x30 [ 800.470173][T18154] ? arch_stack_walk+0xfb/0x150 [ 800.470204][T18154] ? __pfx___schedule+0x10/0x10 [ 800.470246][T18154] ? preempt_schedule_thunk+0x16/0x40 [ 800.470271][T18154] ? preempt_schedule_common+0x7f/0xd0 [ 800.470304][T18154] ? bpf_test_run+0x1d1/0x830 [ 800.470341][T18154] ? bpf_test_timer_continue+0x10c/0x320 [ 800.470369][T18154] bpf_test_run+0x354/0x830 [ 800.470423][T18154] ? __pfx_bpf_test_run+0x10/0x10 [ 800.470473][T18154] ? __kasan_krealloc+0xec/0x110 [ 800.470508][T18154] ? skb_dst_set+0x72/0x140 [ 800.470543][T18154] bpf_prog_test_run_skb+0xe35/0x2230 [ 800.470598][T18154] ? __fget_files+0x3a2/0x420 [ 800.470631][T18154] ? __fget_files+0x2a/0x420 [ 800.470667][T18154] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 800.470702][T18154] bpf_prog_test_run+0x2c5/0x340 [ 800.470736][T18154] __sys_bpf+0xa22/0xd90 [ 800.470771][T18154] ? __pfx___sys_bpf+0x10/0x10 [ 800.470810][T18154] ? __fget_files+0x2a/0x420 [ 800.470868][T18154] ? ksys_write+0x242/0x270 [ 800.470902][T18154] ? __pfx_ksys_write+0x10/0x10 [ 800.470936][T18154] __x64_sys_bpf+0xba/0xd0 [ 800.470961][T18154] do_syscall_64+0x166/0x520 [ 800.470992][T18154] ? trace_irq_disable+0x3b/0x140 [ 800.471012][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.471034][T18154] ? clear_bhb_loop+0x70/0xc0 [ 800.471061][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.471083][T18154] RIP: 0033:0x7fb17759e159 [ 800.471102][T18154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.471120][T18154] RSP: 002b:00007fb1783fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.471145][T18154] RAX: ffffffffffffffda RBX: 00007fb177825fa0 RCX: 00007fb17759e159 [ 800.471168][T18154] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 800.471182][T18154] RBP: 00007fb1783fd090 R08: 0000000000000000 R09: 0000000000000000 [ 800.471197][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.471209][T18154] R13: 00007fb177826038 R14: 00007fb177825fa0 R15: 00007ffd38620f18 [ 800.471242][T18154] [ 800.918399][T17913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.000604][T18159] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3034'. [ 801.002384][T17913] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.055530][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.055650][ T6211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.114295][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.114415][ T6211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.268636][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.285851][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.346516][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.371730][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.371953][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.372203][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.372421][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.372732][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 801.499986][ T4936] Bluetooth: hci3: command tx timeout [ 801.582140][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.704063][T17913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.806910][T18181] openvswitch: netlink: EtherType 0 is less than min 600 [ 802.140507][T10481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.843107][T18217] smbdirect: ib_dev[s`z1] removed [ 803.040200][T18233] ovs-dp0: entered promiscuous mode [ 803.045899][T18233] ovs-dp0: left promiscuous mode [ 803.317063][T18240] block nbd0: reconnected socket [ 803.323114][ T4936] block nbd0: Receive control failed (result -32) [ 803.351770][T17913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.445752][T17913] veth0_vlan: entered promiscuous mode [ 803.472766][T17913] veth1_vlan: entered promiscuous mode [ 803.547066][T17913] veth0_macvtap: entered promiscuous mode [ 803.569727][T18248] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 803.753639][T18248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.804615][T17913] veth1_macvtap: entered promiscuous mode [ 803.945701][T17913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.994590][T17913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.091123][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.109919][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.109986][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.110022][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.155390][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.607550][T18283] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 804.691254][T18277] openvswitch: netlink: Flow key attr not present in new flow. [ 804.788715][T10481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.818945][T18283] 8021q: adding VLAN 0 to HW filter on device bond9 [ 804.842534][T18286] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 804.866238][T18297] netlink: 'syz.4.3069': attribute type 3 has an invalid length. [ 804.881843][T18290] bridge5: entered promiscuous mode [ 804.891678][T18290] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 804.897631][ T6211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.897675][ T6211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.026573][T10481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.026601][T10481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.164541][T18299] __nla_validate_parse: 36 callbacks suppressed [ 805.164567][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 805.278866][T18299] vlan2: entered allmulticast mode [ 805.278903][T18299] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 805.286012][T18299] bridge0: port 1(vlan2) entered blocking state [ 805.286130][T18299] bridge0: port 1(vlan2) entered disabled state [ 805.328623][T18299] vlan2: entered promiscuous mode [ 805.328671][T18299] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 805.356326][T18303] syzkaller0: entered promiscuous mode [ 805.356366][T18303] syzkaller0: entered allmulticast mode [ 805.477414][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.492535][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.493664][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.494652][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.498167][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.554316][ T4936] [ 805.556714][ T4936] ====================================================== [ 805.563820][ T4936] WARNING: possible circular locking dependency detected [ 805.570982][ T4936] syzkaller #0 Not tainted [ 805.575440][ T4936] ------------------------------------------------------ [ 805.582578][ T4936] kworker/u9:1/4936 is trying to acquire lock: [ 805.588781][ T4936] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 805.599550][ T4936] [ 805.599550][ T4936] but task is already holding lock: [ 805.606993][ T4936] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 805.616468][ T4936] [ 805.616468][ T4936] which lock already depends on the new lock. [ 805.616468][ T4936] [ 805.626940][ T4936] [ 805.626940][ T4936] the existing dependency chain (in reverse order) is: [ 805.636029][ T4936] [ 805.636029][ T4936] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 805.644224][ T4936] down_write+0x96/0x200 [ 805.649068][ T4936] kernfs_add_one+0x41/0x6f0 [ 805.654243][ T4936] kernfs_create_dir_ns+0x1a1/0x230 [ 805.660052][ T4936] internal_create_group+0x440/0x1180 [ 805.666069][ T4936] cpuhp_invoke_callback+0x434/0x810 [ 805.671954][ T4936] cpuhp_issue_call+0x3f0/0x750 [ 805.677488][ T4936] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 805.684150][ T4936] __cpuhp_setup_state+0x3f/0x60 [ 805.689680][ T4936] do_one_initcall+0x250/0x870 [ 805.695039][ T4936] do_initcall_level+0x10a/0x1a0 [ 805.700567][ T4936] do_initcalls+0x59/0xa0 [ 805.705473][ T4936] kernel_init_freeable+0x29d/0x3e0 [ 805.711252][ T4936] kernel_init+0x22/0x1d0 [ 805.716147][ T4936] ret_from_fork+0x514/0xb70 [ 805.721393][ T4936] ret_from_fork_asm+0x1a/0x30 [ 805.726722][ T4936] [ 805.726722][ T4936] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 805.734570][ T4936] [ 805.734570][ T4936] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 805.742421][ T4936] cpus_read_lock+0x42/0x160 [ 805.747572][ T4936] static_key_slow_inc+0x12/0x30 [ 805.753057][ T4936] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 805.759516][ T4936] nbd_genl_foreach_sock+0x265/0x450 [ 805.765348][ T4936] nbd_genl_reconfigure+0xbbb/0x1040 [ 805.771178][ T4936] genl_family_rcv_msg_doit+0x233/0x340 [ 805.777297][ T4936] genl_rcv_msg+0x614/0x7a0 [ 805.782361][ T4936] netlink_rcv_skb+0x226/0x4a0 [ 805.787763][ T4936] genl_rcv+0x28/0x40 [ 805.792400][ T4936] netlink_unicast+0x7bd/0x940 [ 805.797818][ T4936] netlink_sendmsg+0x813/0xb40 [ 805.803123][ T4936] sock_sendmsg_nosec+0x13a/0x180 [ 805.808697][ T4936] ____sys_sendmsg+0x54e/0x850 [ 805.814010][ T4936] ___sys_sendmsg+0x2a5/0x360 [ 805.819260][ T4936] __x64_sys_sendmsg+0x1b1/0x290 [ 805.824793][ T4936] do_syscall_64+0x166/0x520 [ 805.829973][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.836433][ T4936] [ 805.836433][ T4936] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 805.844347][ T4936] __mutex_lock+0x19d/0x1550 [ 805.849519][ T4936] nbd_queue_rq+0x373/0xff0 [ 805.854583][ T4936] blk_mq_dispatch_rq_list+0x499/0x1990 [ 805.860797][ T4936] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 805.867729][ T4936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 805.874262][ T4936] blk_mq_run_work_fn+0x16c/0x300 [ 805.879870][ T4936] process_scheduled_works+0xc3d/0x1630 [ 805.886012][ T4936] worker_thread+0xa47/0xfb0 [ 805.891275][ T4936] kthread+0x38b/0x480 [ 805.895911][ T4936] ret_from_fork+0x514/0xb70 [ 805.901067][ T4936] ret_from_fork_asm+0x1a/0x30 [ 805.906465][ T4936] [ 805.906465][ T4936] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 805.913735][ T4936] __mutex_lock+0x19d/0x1550 [ 805.918915][ T4936] nbd_queue_rq+0xc1/0xff0 [ 805.923897][ T4936] blk_mq_dispatch_rq_list+0x499/0x1990 [ 805.930026][ T4936] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 805.936945][ T4936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 805.943514][ T4936] blk_mq_run_work_fn+0x16c/0x300 [ 805.949130][ T4936] process_scheduled_works+0xc3d/0x1630 [ 805.955437][ T4936] worker_thread+0xa47/0xfb0 [ 805.960612][ T4936] kthread+0x38b/0x480 [ 805.965285][ T4936] ret_from_fork+0x514/0xb70 [ 805.970463][ T4936] ret_from_fork_asm+0x1a/0x30 [ 805.975798][ T4936] [ 805.975798][ T4936] -> #4 (set->srcu){.+.+}-{0:0}: [ 805.983038][ T4936] __synchronize_srcu+0xc9/0x2f0 [ 805.988519][ T4936] elevator_switch+0x1e8/0x7b0 [ 805.993907][ T4936] elevator_change+0x2fa/0x480 [ 805.999229][ T4936] elevator_set_default+0x375/0x440 [ 806.004996][ T4936] blk_register_queue+0x3f3/0x4e0 [ 806.010750][ T4936] __add_disk+0x6b8/0xdb0 [ 806.015657][ T4936] add_disk_fwnode+0x100/0x3a0 [ 806.021020][ T4936] nbd_dev_add+0x733/0xb60 [ 806.026027][ T4936] nbd_init+0x168/0x1f0 [ 806.030755][ T4936] do_one_initcall+0x250/0x870 [ 806.036120][ T4936] do_initcall_level+0x10a/0x1a0 [ 806.041620][ T4936] do_initcalls+0x59/0xa0 [ 806.046504][ T4936] kernel_init_freeable+0x29d/0x3e0 [ 806.052248][ T4936] kernel_init+0x22/0x1d0 [ 806.057139][ T4936] ret_from_fork+0x514/0xb70 [ 806.062274][ T4936] ret_from_fork_asm+0x1a/0x30 [ 806.067679][ T4936] [ 806.067679][ T4936] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 806.075525][ T4936] __mutex_lock+0x19d/0x1550 [ 806.080674][ T4936] elevator_change+0x1af/0x480 [ 806.085982][ T4936] elevator_set_none+0xb5/0x140 [ 806.091377][ T4936] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 806.097733][ T4936] nbd_start_device+0x189/0xb30 [ 806.103133][ T4936] nbd_genl_connect+0x167d/0x1cd0 [ 806.108699][ T4936] genl_family_rcv_msg_doit+0x233/0x340 [ 806.114803][ T4936] genl_rcv_msg+0x614/0x7a0 [ 806.119869][ T4936] netlink_rcv_skb+0x226/0x4a0 [ 806.125270][ T4936] genl_rcv+0x28/0x40 [ 806.129885][ T4936] netlink_unicast+0x7bd/0x940 [ 806.135301][ T4936] netlink_sendmsg+0x813/0xb40 [ 806.140608][ T4936] sock_sendmsg_nosec+0x13a/0x180 [ 806.146259][ T4936] ____sys_sendmsg+0x54e/0x850 [ 806.151593][ T4936] ___sys_sendmsg+0x2a5/0x360 [ 806.157086][ T4936] __x64_sys_sendmsg+0x1b1/0x290 [ 806.162573][ T4936] do_syscall_64+0x166/0x520 [ 806.167716][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.174161][ T4936] [ 806.174161][ T4936] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 806.182882][ T4936] blk_alloc_queue+0x544/0x690 [ 806.188202][ T4936] __blk_mq_alloc_disk+0x194/0x390 [ 806.193870][ T4936] nbd_dev_add+0x494/0xb60 [ 806.198847][ T4936] nbd_init+0x168/0x1f0 [ 806.203546][ T4936] do_one_initcall+0x250/0x870 [ 806.208872][ T4936] do_initcall_level+0x10a/0x1a0 [ 806.214392][ T4936] do_initcalls+0x59/0xa0 [ 806.219281][ T4936] kernel_init_freeable+0x29d/0x3e0 [ 806.225041][ T4936] kernel_init+0x22/0x1d0 [ 806.229938][ T4936] ret_from_fork+0x514/0xb70 [ 806.235089][ T4936] ret_from_fork_asm+0x1a/0x30 [ 806.240412][ T4936] [ 806.240412][ T4936] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 806.247650][ T4936] fs_reclaim_acquire+0x71/0x100 [ 806.253137][ T4936] kmem_cache_alloc_noprof+0x5f/0x600 [ 806.259154][ T4936] __kernfs_iattrs+0xdd/0x380 [ 806.264396][ T4936] kernfs_iop_setattr+0xe6/0x3f0 [ 806.269960][ T4936] notify_change+0xbba/0xea0 [ 806.275199][ T4936] do_truncate+0x1c2/0x250 [ 806.280173][ T4936] path_openat+0x15b5/0x1d60 [ 806.285308][ T4936] do_file_open+0x23e/0x4a0 [ 806.290349][ T4936] do_sys_openat2+0x115/0x200 [ 806.295576][ T4936] __x64_sys_openat+0x138/0x170 [ 806.300978][ T4936] do_syscall_64+0x166/0x520 [ 806.306126][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.312567][ T4936] [ 806.312567][ T4936] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 806.321203][ T4936] __lock_acquire+0x164c/0x2de0 [ 806.326622][ T4936] lock_acquire+0x115/0x350 [ 806.331670][ T4936] down_write+0x96/0x200 [ 806.336466][ T4936] kernfs_link_sibling+0x4c7/0x5a0 [ 806.342120][ T4936] kernfs_add_one+0x2db/0x6f0 [ 806.347425][ T4936] kernfs_create_dir_ns+0x1a1/0x230 [ 806.353166][ T4936] sysfs_create_dir_ns+0x12f/0x2a0 [ 806.358836][ T4936] kobject_add_internal+0x622/0xcd0 [ 806.364701][ T4936] kobject_add+0x163/0x240 [ 806.369674][ T4936] device_add+0x3fa/0xb80 [ 806.374822][ T4936] hci_conn_add_sysfs+0xd5/0x210 [ 806.380364][ T4936] hci_conn_complete_evt+0x8a8/0x1350 [ 806.386349][ T4936] hci_event_packet+0x6cd/0xf10 [ 806.391792][ T4936] hci_rx_work+0x3ee/0x1020 [ 806.396850][ T4936] process_scheduled_works+0xc3d/0x1630 [ 806.402954][ T4936] worker_thread+0xa47/0xfb0 [ 806.408101][ T4936] kthread+0x38b/0x480 [ 806.412728][ T4936] ret_from_fork+0x514/0xb70 [ 806.417888][ T4936] ret_from_fork_asm+0x1a/0x30 [ 806.423210][ T4936] [ 806.423210][ T4936] other info that might help us debug this: [ 806.423210][ T4936] [ 806.433468][ T4936] Chain exists of: [ 806.433468][ T4936] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 806.433468][ T4936] [ 806.447964][ T4936] Possible unsafe locking scenario: [ 806.447964][ T4936] [ 806.455792][ T4936] CPU0 CPU1 [ 806.461274][ T4936] ---- ---- [ 806.466668][ T4936] lock(&root->kernfs_rwsem); [ 806.471465][ T4936] lock(cpuhp_state_mutex); [ 806.478608][ T4936] lock(&root->kernfs_rwsem); [ 806.485944][ T4936] lock(&root->kernfs_iattr_rwsem); [ 806.491288][ T4936] [ 806.491288][ T4936] *** DEADLOCK *** [ 806.491288][ T4936] [ 806.499545][ T4936] locks held by kworker/u9:1/4936: 4, last CPU#1: [ 806.506148][ T4936] #0: ffff8880272fe140 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 806.517219][ T4936] #1: ffffc90006317c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 806.529282][ T4936] #2: ffff88803396c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 806.539176][ T4936] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 806.549081][ T4936] [ 806.549081][ T4936] stack backtrace: [ 806.554992][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 806.564575][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 806.574676][ T4936] Workqueue: hci1 hci_rx_work [ 806.579500][ T4936] Call Trace: [ 806.582802][ T4936] [ 806.585761][ T4936] dump_stack_lvl+0xe8/0x150 [ 806.590473][ T4936] print_circular_bug+0x2e2/0x300 [ 806.595547][ T4936] check_noncircular+0x12f/0x150 [ 806.600534][ T4936] __lock_acquire+0x164c/0x2de0 [ 806.605416][ T4936] ? __lock_acquire+0x747/0x2de0 [ 806.610472][ T4936] lock_acquire+0x115/0x350 [ 806.615001][ T4936] ? kernfs_link_sibling+0x4c7/0x5a0 [ 806.620316][ T4936] down_write+0x96/0x200 [ 806.624598][ T4936] ? kernfs_link_sibling+0x4c7/0x5a0 [ 806.629912][ T4936] ? __pfx_down_write+0x10/0x10 [ 806.634811][ T4936] ? kernfs_root+0x1c/0x230 [ 806.639388][ T4936] ? kernfs_root+0x1c/0x230 [ 806.643917][ T4936] ? kernfs_root+0x1c/0x230 [ 806.648441][ T4936] ? kernfs_root+0x1ea/0x230 [ 806.653049][ T4936] kernfs_link_sibling+0x4c7/0x5a0 [ 806.658221][ T4936] kernfs_add_one+0x2db/0x6f0 [ 806.662961][ T4936] kernfs_create_dir_ns+0x1a1/0x230 [ 806.668213][ T4936] sysfs_create_dir_ns+0x12f/0x2a0 [ 806.673369][ T4936] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 806.679057][ T4936] ? do_raw_spin_unlock+0xf5/0x200 [ 806.684208][ T4936] kobject_add_internal+0x622/0xcd0 [ 806.689477][ T4936] kobject_add+0x163/0x240 [ 806.693937][ T4936] ? __pfx_kobject_add+0x10/0x10 [ 806.698911][ T4936] ? get_device_parent+0x366/0x3a0 [ 806.704052][ T4936] device_add+0x3fa/0xb80 [ 806.708504][ T4936] hci_conn_add_sysfs+0xd5/0x210 [ 806.713503][ T4936] hci_conn_complete_evt+0x8a8/0x1350 [ 806.719038][ T4936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.725175][ T4936] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 806.731033][ T4936] ? skb_pull_data+0xf0/0x200 [ 806.735771][ T4936] hci_event_packet+0x6cd/0xf10 [ 806.740686][ T4936] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 806.746533][ T4936] ? __pfx_hci_event_packet+0x10/0x10 [ 806.751936][ T4936] ? audit_filter_rules+0x4f70/0x5d10 [ 806.757350][ T4936] ? hci_send_to_monitor+0xe2/0x590 [ 806.762675][ T4936] hci_rx_work+0x3ee/0x1020 [ 806.767215][ T4936] ? process_scheduled_works+0x97a/0x1630 [ 806.773055][ T4936] process_scheduled_works+0xc3d/0x1630 [ 806.778679][ T4936] ? __pfx_process_scheduled_works+0x10/0x10 [ 806.784759][ T4936] ? assign_work+0x3cf/0x5d0 [ 806.789412][ T4936] worker_thread+0xa47/0xfb0 [ 806.794071][ T4936] kthread+0x38b/0x480 [ 806.798172][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 806.803319][ T4936] ? __pfx_kthread+0x10/0x10 [ 806.807940][ T4936] ret_from_fork+0x514/0xb70 [ 806.812559][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 806.817709][ T4936] ? __switch_to+0xc89/0x1420 [ 806.822426][ T4936] ? __pfx_kthread+0x10/0x10 [ 806.827047][ T4936] ret_from_fork_asm+0x1a/0x30 [ 806.831863][ T4936] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 807.341060][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.683994][ T6211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.684038][ T6211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.760748][ T6211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.760793][ T6211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.873106][ T6211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.873139][ T6211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.932582][ T6211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.932625][ T6211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.980481][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.039848][ T6211] pimreg3: left allmulticast mode [ 808.244026][ T6211] bond8 (unregistering): (slave erspan1): Releasing active interface [ 808.244061][ T6211] erspan1 (unregistering): left promiscuous mode [ 808.264630][ T6211] bond5 (unregistering): (slave gretap1): Releasing active interface [ 808.312166][ T6211] geneve1 (unregistering): left allmulticast mode [ 808.314392][ T6211] team0: Port device macvlan3 removed [ 808.367616][ T6211] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 808.388549][ T6211] bond0 (unregistering): Released all slaves [ 808.402464][ T6211] bond1 (unregistering): Released all slaves [ 808.406477][T10481] smbdirect: ib_dev[syz1] removed [ 808.425542][ T6211] bond2 (unregistering): Released all slaves [ 808.444929][ T6211] bond3 (unregistering): Released all slaves [ 808.456281][ T6211] bond4 (unregistering): (slave veth3): Releasing active interface [ 808.457818][ T6211] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 808.458918][ T6211] bond4 (unregistering): Released all slaves [ 808.485746][ T6211] bond5 (unregistering): Released all slaves [ 808.495161][ T6211] bond6 (unregistering): Released all slaves [ 808.512950][ T6211] bond7 (unregistering): Released all slaves [ 808.517257][ T6211] bond8 (unregistering): Released all slaves [ 808.534901][ T6211] bond9 (unregistering): Released all slaves [ 808.545405][ T6211] bond10 (unregistering): Released all slaves [ 808.556135][ T6211] bond11 (unregistering): Released all slaves [ 808.568879][ T6211] bond12 (unregistering): Released all slaves [ 808.727931][ T6211] ovs-s!: left promiscuous mode [ 808.788595][ T6211] : left promiscuous mode [ 808.862245][ T6211] tipc: Disabling bearer [ 808.862339][ T6211] tipc: Left network mode [ 809.136081][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 809.486894][ T6211] hsr_slave_0: left promiscuous mode [ 809.487438][ T6211] hsr_slave_1: left promiscuous mode [ 809.501298][ T6211] veth1_vlan: left promiscuous mode [ 809.501359][ T6211] veth0_vlan: left promiscuous mode [ 809.600655][ T6211] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 809.775640][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 809.902336][T10481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.038581][ T6211] IPVS: stop unused estimator thread 0... [ 810.235692][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 810.556906][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.677242][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 810.739970][ T6211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.796442][ T6211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.852664][ T6211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.907323][ T6211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.997513][ T6211] bridge_slave_1: left allmulticast mode [ 810.997545][ T6211] bridge_slave_1: left promiscuous mode [ 810.997716][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.014056][ T6211] bridge_slave_0: left allmulticast mode [ 811.014191][ T6211] bridge_slave_0: left promiscuous mode [ 811.014772][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.098633][ T6211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.112252][ T6211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.114119][ T6211] bond0 (unregistering): Released all slaves [ 811.381906][ T6211] hsr_slave_0: left promiscuous mode [ 811.382687][ T6211] hsr_slave_1: left promiscuous mode [ 811.383151][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.383166][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.385228][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.385256][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.410839][ T6211] veth1_macvtap: left promiscuous mode [ 811.410937][ T6211] veth0_macvtap: left promiscuous mode [ 811.411173][ T6211] veth1_vlan: left promiscuous mode [ 811.411314][ T6211] veth0_vlan: left promiscuous mode [ 811.602245][ T6211] team0 (unregistering): Port device team_slave_1 removed [ 811.636346][ T6211] team0 (unregistering): Port device team_slave_0 removed [ 812.529625][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 812.817373][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 813.019684][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.106707][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 813.108029][T10481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.395161][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 815.022127][ T6211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog