last executing test programs: 7.601729268s ago: executing program 0 (id=7259): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r6, 0x1000) (async, rerun: 64) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc00000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd7000043500000a0001fd2000"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000000b000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000600000003c0012800bfe0000697036746e6c00002c000280140003002001000000000000000000000000000114008668fc0200"/68], 0x5c}}, 0x0) (rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) (async, rerun: 64) r14 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001"], 0x24}}, 0x0) 7.353595429s ago: executing program 0 (id=7262): r0 = socket$kcm(0xa, 0x15960c5053856f11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="02000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000de85ce03c16124640007010000f8ffffffb702000008000000b50afdff00000000f0b38e521e599d8612257af34c1de408f8b31aed0d95a4946483f30da34d920409943583d845eb2043a2d855d8fdfe6e0a755f946bdf5f4058811de3d3bfcba13f961201dc1860b54744873782686bc3744403a9de4e4c61ee8e437a4eef574108ecdc2c480e591e726165964a"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ca8004000180511a6259132c84e83370e831f65100a802a5fdb4142f273d4bbc55fdddc5eb09f86e3a2970736a5ee493389fee4f0c8991c1ff0ac553dc1d24dc87c0e11db7b2744a1740c4692936c1e8c4dc43d84faf747b92034b6a06e52f19510e69d8b63a6be15acc24fe3fed1d9ca6edddf8464105f54da9e58e481be73d1679acf623b65c8c218e77c959c7d4a0c14dc92aadae59732d4483eb762a9add822f0ef4d0f5c5d18d33e181fe424a8d3e674a394cc9f0cdaac9d21cdda6863bc957fdffff00000cab5e1d0aa67326deabb378bb86df50805e4ca121d235164d353778e1910d2c72ba4eebf7a35fd6a39c859b06f42dd84b45d7727441f099ecd382cd1d8770889111bf3493e4df4323509554f61d1b036a93cbae1c4f2650a042"], 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x8, @private0, 0x85, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x20040062) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x40010) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000000406010100000000000000001daa5679c2d4480e0000090900020073797a30000000000900020073797a31000000000900020073797a3000000000050001000700001f6f7fd68af4463832000900020073"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040020) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 6.782292525s ago: executing program 0 (id=7270): pipe(&(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000700001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 3.770155807s ago: executing program 3 (id=7274): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604"], 0x0, 0x37}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.473259123s ago: executing program 3 (id=7277): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32=0xffffffffffffffff], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0x108, 0x130, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000a00000a0900010073787a310000000020000000080a0102000026e718d80000000000050900010073797a3100000000140000001100010000000000000000000000000a"], 0x68}}, 0xc010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000340)="448f84c64fe5", 0x6}], 0x2}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x4, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') 3.348758324s ago: executing program 0 (id=7279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000120001050000000000000000000000000000000000000000000000000000000000400100"/56, @ANYRES32, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 3.182631176s ago: executing program 4 (id=7284): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100002400010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0xfffffffffffffff2, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x108, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}, @IFLA_PORT_SELF={0x44, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "8cd152cea4e31138e1f7576ff395ee3f"}, @IFLA_PORT_VF={0x0, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket(0x10, 0x5, 0x7) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000040)=0x3, 0x4) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)}], 0x1}}], 0x2, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet6_int(r8, 0x29, 0x18, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000000c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) 2.604035103s ago: executing program 0 (id=7291): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010025bd708f27f9035b0e858895", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000", @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4040000) (async) r2 = accept(r0, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) sendmsg$nl_generic(r2, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x370, 0x3e, 0x10, 0x70bd2c, 0x25dfdbff, {0xb}, [@generic="81957f47e7768859643a9cc496c736d18824c9600e7a9821e4b48ff6853881423aa9c7a13c03fcf26c6fd2a96fcc0af673aea88a0190d2bb7488d0b152296f6b73cc205d8afba3c2ba8490cf3866d35efea3", @generic="d3c4c25a7d124453c4b7f6eef5c9517ea0cb70abf6a5a276cda1bc2141b909be501dc5171fc8186c107a7a4afcb87c5db39a795ac2e33b79682bdf24cb1aba9fb6daa4509695c2d8f1765b04c37d5b177b0c3b96d9c54d8149a3470989410ed953ab05742b4a8378fd57b5a92181ec2171dbdebb4065ad9d2e7d8894b207db9b168d56e1c393041b4489f061e82b7d22c3e158ebbbd94029c919b1a2298f554f24394630a387b83c", @typed={0xc, 0xd7, 0x0, 0x0, @u64=0x1}, @nested={0xd2, 0x4f, 0x0, 0x1, [@typed={0x6, 0x47, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x103}, @generic="146bd8518750c122496ff77624c99ae625d435dd320d1605301bb43469abb9b06874d26b09eab610b3a944ee2d60cb1459730785b7973a21b654b08b4861c3763992c45358e65c09f99510c60107d4e7780e53cb4d5e00722785f7c6819f44ac123bfe6f470c0352cf44b0606c8b5e15b0dbc447959be2fea3b44d4795e088da0963d7e0cf5e02261314b35d5578", @generic="b50d03ef0803a64a2bd27959f56979a9cf0ecdeb7ea0a66159045283afa43f45e82a6606003dcd12b38d164e2f8b4b94f1556366"]}, @nested={0x10, 0x136, 0x0, 0x1, [@nested={0x4, 0x35}, @typed={0x4, 0xdb}, @nested={0x4, 0x87}]}, @nested={0x16f, 0x10d, 0x0, 0x1, [@generic="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", @nested={0x4, 0x14b}, @typed={0x7, 0x83, 0x0, 0x0, @str='x#\x00'}, @generic="a924ab4046890978ede2f7bfce59ef95b101f69a56c83bc19991b4ed6afdcb439b270266b23d7ee8ca4421a6e5b323b64a05075c70f37ce1ec79db7121bbfaebbe85473ac2751d62646378ff6491dd1112347cfe879a", @nested={0x4, 0x8c}, @nested={0x4, 0xe2}, @nested={0x4, 0x110}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 2.513059088s ago: executing program 3 (id=7292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000040009"], 0x174}}, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYRES8=r2], 0x58}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x7bca, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000001c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="0108000300", @ANYRESHEX=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x2, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f0000000280)={0x6, 0x3, 0x7, 0xffff, 0x7, 0x2cb, 0xeea, 0x3}, &(0x7f0000000300)={0x8, 0xf, 0x97d, 0x100, 0x6, 0x3, 0x2, 0x8}, &(0x7f0000000340)={0x6, 0x9, 0x10001, 0x8000, 0x3, 0x4, 0x20000000000000, 0x9}, &(0x7f0000000880)={0x0, 0x0}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x52e]}, 0x8}) setsockopt$packet_int(r13, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000002580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa02004}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYRES16=r11, @ANYRES16=r14, @ANYRES64=r4], 0x112c}, 0x1, 0x0, 0x0, 0xc1}, 0x200cc086) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="040126bd7000fca0a746be1f3bd2baa4e5dbdf250e00000008", @ANYRES32=r10, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4004050}, 0x884) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYBLOB="00002cbd7000fddbdf250100000008000300", @ANYRES32=r15, @ANYRESOCT=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000040) 2.189460051s ago: executing program 4 (id=7293): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x5082}], 0x1, 0x0, 0x0, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0xfd, 0x7}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[], 0xfdef) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x30048080}, 0x48051) 2.000587278s ago: executing program 2 (id=7295): r0 = socket(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r0, 0xff00, 0x34, 0x0, &(0x7f0000000100)=0x2) 1.880308768s ago: executing program 2 (id=7296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008015850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000b40)={&(0x7f0000000080)=0x2, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b00)}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10010, 0x1004}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xcf89, 0x90e, 0x1, 0x88a8}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844) 1.648134074s ago: executing program 2 (id=7297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r2 = accept(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/134, 0x65}], 0x1}}], 0x1, 0x101a0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x850}, 0x4040845) recvmmsg$unix(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001780)=""/4085, 0xff5}, {&(0x7f0000000140)=""/84, 0x54}], 0x2}}], 0x1, 0x100, 0x0) 1.483956197s ago: executing program 3 (id=7299): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002f00)={&(0x7f0000000d40)="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", &(0x7f0000001d40)=""/184, &(0x7f0000001e00)="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", &(0x7f0000002e00)="3972dbba3df6e9fe09df3ccba4d3dfcdc5425d3ec639d6c63be86d7d91ba86cbf355125cf9ee134b14fa6a6032f031315eb4ad91caa10e45e32a81aaa7266a2c68b06f0332cc069d1fa5a7f43c4e2943fd5792d51153590bfc6e79ac7589d7125a23603e7b15313e0a96bab8124e8e7441ab82ef4f54161a4ea8cf5335e6d3bb0f039a38d330225d9cec1404940ba6030f5ef6974d7d61e0622ee7d2596265aa14f53f7fda755c6247ed7818358ddfb68e1559d9cecc593e5bb727e1ba13311a417cbf0641e3caca30031ce4a8542557ab709b9c006916f38ce54380e0f8ffa74c93e709", 0xa, r1, 0x4}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000007000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt(r3, 0x80, 0x2711, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0xffff5257, 0x22e2e, 0x100, 0x0, 0x3, 0x0, 0x0, 0xffff}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={&(0x7f0000000140)="7fc586d8bc11f96ffd2e7cd933f9b8878d4c8d2ad94527", &(0x7f00000001c0)=""/186, &(0x7f0000000500)="80ab5e992fa1e0dadf86bf35d4a2b5cce494c35db9d1a73e350b859db1e87e5f3c57515f730f8940e04fa84b7184c74ff9eb4a1bd81b916f3f73808b149c600e9ddf6e58f323f4dd6bc43e4c2915917a0ae7b355eedcff27dc68ee46b483ce3218c4473dbc3e78368922ff943f2b6c8a680869b74785e1b6b9432dbeb381bcb883cd5597e5c4cc5bc49c9667695f232ff835d836c3e7ca27649adc6ad824dbf1dbd7f45a025a6b163c492e4f9cafe4cbdb4f51fa5cd9a97843ac1f80dc637498f99f1455f4d4ee31d58920dc2913", &(0x7f0000000600)="d36e8f402a2295995409f2e0125e5cfcd6383edf85fd5518efd30b9dcae34fb99f4310adf4c7f545fb9829addfa8b61cc6729e5eb1f4468f5fc382e74118d70c7b904fa959a83619e8ecdc37801aaa7672ffbdaf22f74a1f3c0dbcdb9dccb8", 0x7, r1, 0xa7875792470af6cf}, 0x38) 1.455841902s ago: executing program 4 (id=7300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) (async) r1 = socket(0x2d, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) (async, rerun: 64) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0xf, 0x0, 0xc}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.446951695s ago: executing program 2 (id=7301): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000d0ff07040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.033457675s ago: executing program 1 (id=7302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "febda439f24a1892", "54bf8702b49662104741b8d716c7927a", "a0485b41", "340624cf15862148"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000000c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 995.018412ms ago: executing program 1 (id=7303): r0 = socket(0x848000000015, 0x805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000100)='gre0\x00', 0x30b500, &(0x7f0000000140)={@align=0x258e54bd, {0x6, 0xdca6, 0x9, 0x1}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x10000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) (async) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'gre0\x00', 0x0, 0x7, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0xc}, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 992.708841ms ago: executing program 3 (id=7304): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000640400022cbd7000fddbdf251a5e2038e0d94ee0a4e2fcb179b523b84b90ed2eb4fe655502063e2e2a603987a142116ddcbc266e1c72194c7d053b5909ebfb34a33fdbe93dac07f5f6ff9be7a5088109a4eba99b479d179d79e1fe68bf84f0e8eb3dbe1c0368d96bdf5defce51f84ae54321259792a5b79ee2de1c5c6340000028ed43578683b149f1f806aa352bf9bdf6483e02b7839e886e1bc4231198c36e8b6e83fb7e8b9cac8d05909e34d45566743cd8c4be"], 0x84}, 0x1, 0x0, 0x0, 0x40840}, 0x2008081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x80000080, 0xe) write(r0, &(0x7f0000000240)="ab87c97207d1", 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff0000000004000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r3}, 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @remote}, 0x1e}, 0x1c) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa321", 0x2a}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="01002bbd7000fddbdf25070000000c000180060001000200"], 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x51}, 0x40044) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x15) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 944.063399ms ago: executing program 2 (id=7305): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x3, 0x4, 0x6}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x5, 0x2f, @private1, @loopback, 0x20, 0x7800, 0x6, 0xe25}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006002e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x64}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8090}, 0x91) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8d, 0xd4, 0x8, 0x5, 0x101, 0x7, 0x8, 0x8001, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4050}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0xf, {{0x29, 0x4, 0x3, 0x1, 0xa4, 0x68, 0x0, 0x4, 0x0, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x7, [{@multicast1, 0x401}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@broadcast, 0x49}]}, @generic={0x88, 0x9, "1692c17d451486"}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x7, [{@broadcast, 0x7e}, {@remote, 0xf1d}, {@rand_addr=0x64010102, 0xffffffff}]}, @rr={0x7, 0x1f, 0xba, [@private=0xa010100, @broadcast, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xf4, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @ssrr={0x89, 0x1f, 0x11, [@empty, @remote, @multicast1, @rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000000) 889.288401ms ago: executing program 1 (id=7306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001", @ANYBLOB="bf408ca7a0a2826442210182d6b7f98b969a06f6113a1f2314e276ceeab910bed852d448fdb0ec8ad8da19ecee3d3f5ce705af9eafeb0e426f7f381e2a8a082dcca6efa771588ae9111c4435c3c1b732573786aef47a1e03944405b275eb1f980f91e2bca6c6be469df2d0282672", @ANYRESHEX], 0x88}}, 0x24040004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x80) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0xfffffffffffffffe) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000400)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01080000000000000000020000000900010073797a30000000000c000240000000000000000104000480080007006e617400140000001100010000000000000000000000000a6cecb2681925abf72cad8172d5cd88668a7a674cdad2b2d22e7cb6241519729fedc1ebfa9990824c29c341a25f6ee8951c05cc0703e89ec8ed4ab9cc47a5f23b5be524bdd8ebf5a644d8c2d47d2432debd715423d14e63c7a900"], 0x60}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000003c0)=0x4482, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000800000091117c00000000009d00000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x4}, 0x10, 0x0, r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) close(0x3) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000000803000000000000000000070000060900010073797a30001d00000600024000f5000005000300060000001c00048008000840fffffffb0800045b0000000308000340000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc880) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 889.140463ms ago: executing program 4 (id=7307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102"], 0x2dc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000040000580"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x4, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 766.94372ms ago: executing program 1 (id=7308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10010, 0x1004}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xcf89, 0x90e, 0x1, 0x88a8}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844) 657.669434ms ago: executing program 4 (id=7309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000d00)=""/28, &(0x7f0000000540)=0x1c) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003840)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000003940)=0xe8) (async) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000100)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f00067b0a0000000d0085a168d0bf46d32345653610648d270012000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000f25232500000000000000000", 0x78, 0x84, 0x0, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000003b80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ac0)=[{&(0x7f0000000600)={0x22c, 0x27, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x2}, @generic="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", @typed={0x8, 0x14a, 0x0, 0x0, @pid=r4}, @generic="f1dc28a4831a552739df17470a8871828ff993af5acf6f4ed99714231b020892142e78df5a804f5af1eb271b9bdab92562656898224161793410f6072c83e21c70d0e0a3283c215dfaee0e494082103be33e586abc544085501f6bb79f20477bb483fc2b544c", @typed={0x8, 0x56, 0x0, 0x0, @pid}, @typed={0x8, 0x153, 0x0, 0x0, @u32}, @typed={0x97, 0x8, 0x0, 0x0, @binary="5c6784599b68e4fd162478465f3e8a35fad734a55f62b82b1761198dc904299450291d0b2e738b883c70b6b679508256d4eebf95df35bc47b0fcc91a8986193d6e8c5b78228344e5fe4371d729fa04702495b53bd6bdbb6d0af58e22a7d0e57b0d09128c71850467f40cd8811074e95731fa587a7130e3dad0e47fbd63aba2b6a5d1011ca384fccaea41a5854f3a47123956ee"}]}, 0x22c}, {&(0x7f00000003c0)={0x14, 0x2f, 0x2, 0x70bd27, 0x25dfdbfc, "", [@nested={0x4, 0xca}]}, 0x14}, {&(0x7f0000001300)={0x126c, 0x3c, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xc, 0xbd, 0x0, 0x0, @str='-\\&#\xf4%}\x00'}, @generic="91463d004f90b82835aa0855be6d45968a8629a0d21818098f342bac56949c2dab98c67dd15af9836d8886031972656e755580912bf895ba0818379cf7e1f1", @generic="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", @nested={0x83, 0x83, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="5e080841d3052a1a3a14f1c221132034a529587bf7d1879c7b6f4403b539d308fe26c1a8f5bbdd714f4fc39617dd6da2e34435e170c1bff18a66c50c6130ec35f9817941b86b1f6a3b111476fd4ceaaad376476953b016d6d0866d706fe3ab1b51f2d4bb886f22df7736ff"]}, @typed={0xc, 0x115, 0x0, 0x0, @u64=0xc}, @typed={0x4b, 0x2c, 0x0, 0x0, @binary="86ec3d8f2bd57a5710a0cc6799de00a1a58797b6c8b6de507d8d8fec9f7932b34650032ff4914b52d802646dfb78a878040541388d87475faca4c4be6a9cc1d8b0e49f0bf7f9eb"}, @typed={0x72, 0x10b, 0x0, 0x0, @binary="c7f970ba9af45e5f93fa495d9df563d26d94f5f7cf9c605df9d23c925d85dadcf1517845eb4b94c55a3023de09fd0baed6f38beff28e05bafc07f683155b862d0ca9b437faa4b36cfbd88ebfbb8a21d33c934af9e95098db163dd69ba4162a4fe2b96dfb2eefd1243df56a7cf462"}, @generic="9bf0d977e5d38e5f30bbc79c448ab4299725389b988ee1d3c97275d93afb315a03257f41dd43face54fd9110be4301b4f2b6309a9b725992fbab8d9efa80ec2ed670aad5b62699a022fad2cc14813720b7828301fe9eccde312ccc184cae4a7ea76511159f4421d06d6ec343b749984a864c01dee21e1abffc4383c7a10331f9887c7de68c1dfdd195e59ddbe4c711c7311d6908e6c80031d865ca420891ac715e149761a71229615671437ad15e01da174abd3342907861af", @typed={0x8, 0x122, 0x0, 0x0, @u32=0x5ec}]}, 0x126c}, {&(0x7f0000002580)={0x6c, 0x39, 0x400, 0x70bd2a, 0x25dfdbff, "", [@generic="477a9dbb9aa2d5429d59d0e043b31c23db661031d9418e71", @nested={0x44, 0x80, 0x0, 0x1, [@nested={0x4, 0x66}, @nested={0x4, 0x8b}, @typed={0x2b, 0xff, 0x0, 0x0, @binary="aead42f9571cab1b3a1f4f934992eb146e7e602745e9d326f15a8dfcc058070dbd8b2f796da817"}, @nested={0x4, 0x10c}, @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6}]}]}, 0x6c}, {&(0x7f0000002600)={0x1220, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="d374c9b15e1e2168fd8503e7e769a6b9701c93f9e7e12afeed0136dadac56fb259a0380c1cb1d9dd7bb7b9abeb087d66f1a455c2fb2e004589c6cf46dbd41be30f1190912a90d9bf108c46d83f53c31a1f4ec2ee310ae2fafd3f1e4456fb338aef9186dc6f958b3602333c6f95623dc88ef8152ddf551c25d553cba006b6b599120059691045b657c798c0e6988222fed721e98571b02a82347f18e2b1f4c5db39a06442f73ce3a8b5873178f5eb3760bc3af628eb5b5535bbf764e7c409", @generic="2ef7234ae8155e828f0de9838193667b343ca96be8ecd2a0bc6dc2f9a737c5c17bd6abf5c20361d2a4ccc3314d105561af1e9a71b937c946f2a75fc8df1421868fe8da4176c66b823a75e29946877f909f884ae87fd6a3ebff83a1b4c69bd386896841436589900f02a17bfcaa33de759c5782a4673725df5a9ad8c6aa04c0eab94558f3f5b67dc2", @nested={0x10c6, 0x155, 0x0, 0x1, [@generic, @typed={0x75, 0x60, 0x0, 0x0, @binary="2c28e46257539ba268f7915ee6316eb851a4ce6a62e4dd4aadd5f43576cde8f612aa90c8ace4817f1b258a7f6dc70b0526bb32aa3fe54ad1cc73221f90a3593d6a02f9cde238cd774f090e7f8db778468084f4801a02fd91deb9eb52e10158389f538398a10759c49ce3a72bda3d936110"}, @generic="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", @generic="32708bcd0883fc2f23b9022399640cf747a933e9f741f470ebd719d089bad2168fe77a5e7f10ed5969b8f100bc43542de8c284c2750fad6fd9bd20e608711ffc6bc5a176afee", @nested={0x4, 0x2c}]}]}, 0x1220}, {&(0x7f0000003980)={0x18, 0x1e, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x10, 0x0, 0x0, @uid=r6}]}, 0x18}, {&(0x7f00000039c0)={0x14, 0x3e, 0x400, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x65}]}, 0x14}, {&(0x7f0000003a00)={0x30, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x20, 0x107, 0x0, 0x1, [@typed={0x14, 0x130, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xfc, 0x0, 0x0, @uid=r5}]}]}, 0x30}], 0x8, &(0x7f0000003b40)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r2, r7, r0, r1]}}], 0x28, 0x200000d1}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 594.375267ms ago: executing program 1 (id=7310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000000), 0xfffffffffffffe63}], 0x1, 0x4000000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x67}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3000000000000, 0x1, 0x8}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x480c1) 313.557695ms ago: executing program 2 (id=7311): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0xfffffffe, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e20, 0xa4fffffc, @loopback, 0x3}}}, 0x108) unshare(0x6a040000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f00000007c0)={&(0x7f00000006c0)="8be1d4bcf25912ba3d50e1e4d117945ce26fabf97135c887628f612ce566e9555ce59698043116230ba8727a4896d86c59dfc32dfa5de1f1c481513bda9aaeb130a9159cd3727020d9a349e88eb2705c99bfc18e1bd238cccc7b902909bd6bfb594ab12046d60177f5ce10140457a42e248f24d3262aa610f8b08639f52e3527", 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0xfd95) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000300)=""/235, 0xeb) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xd321) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0x10000004}, 0x1c) shutdown(r4, 0x0) 311.798665ms ago: executing program 1 (id=7312): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 310.829671ms ago: executing program 0 (id=7313): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 282.371975ms ago: executing program 4 (id=7314): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x20, 0x36, 0x1, 0x700, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)=@newlink={0x20, 0x10, 0x1, 0x1, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtfilter={0x9c, 0x2c, 0x100, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x68, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x2}, {0x40}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7540}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xc6, 0x1, 0x9}, {0x5, 0xffff58d3, 0x3, 0x7, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4cca, 0x8, 0x9}, {0x4, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4ca, 0x7, 0x1}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4048086}, 0x40040) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x800) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24044084}, 0x1dc8b08251aa3334) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r12, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x44}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r12, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000002880)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002840)={&(0x7f0000002700)={0x114, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6646a62f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3961033a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5512255b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e7f89f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fcc28e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3871347d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36c80f91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9a1682}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19b75d61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6146}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d81205}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fed7b35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e3bcdfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb048f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5967e66e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75f456cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x99892b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3104af9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x60040805}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r9) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) 0s ago: executing program 3 (id=7315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e3efeb878655b0e4721e97a26ffc34b29a6e23b5c16ae2def5062d4f1eb5ceebe19f673ad95e8195e7f94d31607008bcd485090b1ef5d020afe2a7b4007a2d8ed6d846f992f9647fd642cde12181de27f8f449c7ad21"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r4, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r6, 0x29, 0x1e, 0x0, 0x15) close(0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) kernel console output (not intermixed with test programs): family 0 port 8472 - 0 [ 878.811998][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 879.215350][T29167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.224996][T29167] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.242251][T29167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.387880][T29167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.472159][T29167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 879.504734][T29167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.544197][T29167] veth1_vlan: left promiscuous mode [ 879.562196][T29167] veth0_vlan: left promiscuous mode [ 879.569252][T29167] veth0_vlan: entered promiscuous mode [ 879.592971][T29167] veth1_vlan: entered promiscuous mode [ 879.617235][T29167] veth1_macvtap: left promiscuous mode [ 879.625286][T29134] __nla_validate_parse: 6 callbacks suppressed [ 879.625310][T29134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5824'. [ 879.633738][T29167] veth0_macvtap: left promiscuous mode [ 879.672176][T29167] veth0_macvtap: entered promiscuous mode [ 879.679271][T29167] veth1_macvtap: entered promiscuous mode [ 879.709858][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.732729][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.750886][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.771452][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.888188][T29167] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 879.905423][T24525] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.917807][T24525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.935276][T24505] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.942630][T24505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.953720][T24505] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.960964][T24505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.030360][T24525] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.057661][T24525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.088708][T24525] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.114373][T24525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.211470][T24497] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.232879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 880.251078][T24497] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.267066][T24497] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.288968][T24497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.631883][ C1] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 880.648505][T29232] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5860'. [ 880.670582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 880.946354][T29250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5865'. [ 881.403354][T29263] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5870'. [ 881.416473][T29265] Bluetooth: MGMT ver 1.23 [ 881.947696][T29286] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5877'. [ 881.962472][T29289] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5877'. [ 882.243416][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5882'. [ 882.274020][T29303] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 882.856010][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5890'. [ 883.002672][T29330] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5892'. [ 883.006613][T29331] netlink: 'syz.2.5891': attribute type 1 has an invalid length. [ 883.054015][T29333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5893'. [ 883.392475][T29350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.591002][T29350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.771247][T29391] syzkaller0: entered promiscuous mode [ 884.779693][T29391] syzkaller0: entered allmulticast mode [ 884.812552][T29391] tipc: Started in network mode [ 884.819383][T29391] tipc: Node identity 1ab96f28fbec, cluster identity 4711 [ 884.834927][T29391] tipc: Enabled bearer , priority 0 [ 884.864191][T29390] tipc: Resetting bearer [ 884.902647][T29390] tipc: Disabling bearer [ 884.903246][T29397] __nla_validate_parse: 4 callbacks suppressed [ 884.903291][T29397] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5910'. [ 885.113151][T29403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5913'. [ 885.126042][T29404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5913'. [ 885.485374][T29416] sctp: [Deprecated]: syz.3.5914 (pid 29416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 885.485374][T29416] Use struct sctp_sack_info instead [ 885.657607][T29419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5917'. [ 885.671842][T29420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5917'. [ 885.778530][T29424] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5918'. [ 885.876875][T29424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.896674][T29427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 886.019168][T29432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5921'. [ 886.068035][T29432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5921'. [ 886.207246][T29436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5923'. [ 886.799244][T29468] openvswitch: netlink: IP tunnel dst address not specified [ 887.033020][T29480] syzkaller0: entered promiscuous mode [ 887.038727][T29480] syzkaller0: entered allmulticast mode [ 887.646728][T29506] x_tables: duplicate underflow at hook 1 [ 888.295302][T29521] virt_wifi0 speed is unknown, defaulting to 1000 [ 888.485503][T29549] sch_fq: defrate 4294967293 ignored. [ 889.113594][T29572] netlink: 'syz.4.5963': attribute type 10 has an invalid length. [ 889.328145][T29582] syzkaller0: entered promiscuous mode [ 889.360324][T29582] syzkaller0: entered allmulticast mode [ 889.775749][T29600] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 889.788751][T29602] netlink: 'syz.3.5975': attribute type 15 has an invalid length. [ 889.958945][T29607] __nla_validate_parse: 14 callbacks suppressed [ 889.958970][T29607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5977'. [ 890.217073][T29630] bond1: option lp_interval: invalid value (0) [ 890.225319][T29630] bond1: option lp_interval: allowed values 1 - 2147483647 [ 890.236703][T29630] bond1 (unregistering): Released all slaves [ 890.513815][T29642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5985'. [ 890.839219][T29648] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 890.897164][T29648] bond1 (unregistering): Released all slaves [ 891.252225][T29668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5990'. [ 891.539371][T29674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5991'. [ 891.908722][T29682] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5993'. [ 892.296743][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 892.384930][T29696] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.392687][T29696] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.435754][T29696] bridge0: entered allmulticast mode [ 893.047359][T29723] ip6tnl0: Caught tx_queue_len zero misconfig [ 893.431965][T29706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 893.571336][T29726] netlink: 'syz.3.6004': attribute type 1 has an invalid length. [ 893.589676][T29726] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6004'. [ 893.686775][T29726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6004'. [ 893.707594][T29737] netlink: 'syz.4.6007': attribute type 1 has an invalid length. [ 893.715688][T29737] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6007'. [ 893.972461][T29751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6011'. [ 894.062882][T29751] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.072133][T29751] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.263693][T29751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.277457][T29751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.494774][T24505] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.504430][T24505] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.540115][T24505] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.576379][T29767] nbd: must specify a size in bytes for the device [ 894.633442][T24496] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.954450][T29784] syzkaller0: entered promiscuous mode [ 894.960024][T29784] syzkaller0: entered allmulticast mode [ 895.116960][T29804] __nla_validate_parse: 146 callbacks suppressed [ 895.116983][T29804] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6024'. [ 895.137486][T29804] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6024'. [ 895.149405][T29805] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6024'. [ 895.159300][T29805] netlink: 'syz.3.6024': attribute type 9 has an invalid length. [ 895.167908][T29805] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 895.179101][T29804] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6024'. [ 895.199255][T29804] netlink: 'syz.3.6024': attribute type 9 has an invalid length. [ 895.222601][T29804] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 895.275322][T29807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6025'. [ 895.358724][T29810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.728021][T29826] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6030'. [ 895.894999][T29830] syzkaller0: entered promiscuous mode [ 895.901868][T29830] syzkaller0: entered allmulticast mode [ 896.166790][T29844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6035'. [ 896.188567][T29844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6035'. [ 896.213770][T29844] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 896.513904][T29869] tipc: Enabling of bearer rejected, failed to enable media [ 896.871286][T29884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'. [ 897.329767][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 897.454440][T29900] syzkaller0: entered promiscuous mode [ 897.468901][T29900] syzkaller0: entered allmulticast mode [ 897.573920][T29900] tipc: Enabled bearer , priority 0 [ 897.591247][T29900] tipc: Resetting bearer [ 897.616665][T29899] tipc: Resetting bearer [ 897.694193][T29899] tipc: Disabling bearer [ 897.982767][T29915] block nbd7: server does not support multiple connections per device. [ 898.005163][T29915] block nbd7: shutting down sockets [ 898.183761][T29928] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 898.211836][T29929] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 898.237128][T29928] syzkaller0: entered promiscuous mode [ 898.251926][T29928] syzkaller0: entered allmulticast mode [ 898.962946][T29954] SET target dimension over the limit! [ 899.247870][T29965] netlink: 'syz.3.6066': attribute type 1 has an invalid length. [ 899.339181][T29965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 899.391840][T29959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.415925][T29959] bond1: (slave batadv0): making interface the new active one [ 899.444984][T29959] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 899.789687][T29994] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 900.075953][T30008] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.699953][T30025] netlink: 'syz.2.6083': attribute type 8 has an invalid length. [ 900.708307][T30025] __nla_validate_parse: 13 callbacks suppressed [ 900.708329][T30025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6083'. [ 900.757715][T30022] smc: net device vlan1 applied user defined pnetid SYZ2 [ 900.771604][T30025] bond0: entered promiscuous mode [ 900.776815][T30025] bond_slave_0: entered promiscuous mode [ 900.783491][T30025] bond_slave_1: entered promiscuous mode [ 900.791723][T30025] gretap0: entered promiscuous mode [ 900.808919][T30025] bond0: left promiscuous mode [ 900.815835][T30025] bond_slave_0: left promiscuous mode [ 900.822875][T30025] bond_slave_1: left promiscuous mode [ 900.829977][T30025] gretap0: left promiscuous mode [ 901.479289][T30042] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.497822][T30055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6093'. [ 901.510101][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'. [ 901.547073][T30055] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 902.452011][T30091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6094'. [ 902.574407][T30095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 902.834890][T30088] virt_wifi0 speed is unknown, defaulting to 1000 [ 903.246758][T30118] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6107'. [ 903.288069][T30118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6107'. [ 903.636018][T30132] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 903.818429][T30143] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 903.827505][T30143] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6116'. [ 903.838579][T30143] NCSI netlink: No device for ifindex 0 [ 903.940650][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6115'. [ 903.946042][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6115'. [ 904.085600][T30145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.147667][T30159] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 904.421705][T24497] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.435464][T24497] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.452560][T24505] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.469293][T24505] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.510571][T24520] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.533647][T24520] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.564845][T24520] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.586017][T24520] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.263299][T30200] syzkaller0: entered promiscuous mode [ 905.281896][T30200] syzkaller0: entered allmulticast mode [ 905.500423][T30202] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.535765][T30214] netlink: 'syz.3.6135': attribute type 23 has an invalid length. [ 905.631674][T30219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6137'. [ 905.743936][T30226] bridge0: port 3(ip6gretap0) entered blocking state [ 905.750981][T30226] bridge0: port 3(ip6gretap0) entered disabled state [ 905.758107][T30226] ip6gretap0: entered allmulticast mode [ 905.767323][T30226] ip6gretap0: entered promiscuous mode [ 906.646636][T30267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6150'. [ 907.186039][T30284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6152'. [ 907.220109][T30284] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.253785][T30284] bridge_slave_1 (unregistering): left allmulticast mode [ 907.277116][T30284] bridge_slave_1 (unregistering): left promiscuous mode [ 907.295187][T30284] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.506930][T30298] netlink: 'syz.1.6155': attribute type 1 has an invalid length. [ 908.438161][T30321] tc_dump_action: action bad kind [ 908.797490][T30331] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6166'. [ 908.808918][T30331] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6166'. [ 908.876694][T30332] netlink: 420 bytes leftover after parsing attributes in process `syz.2.6166'. [ 909.816695][T30337] Cannot find add_set index 0 as target [ 910.543826][T30302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.781912][T30348] netlink: 'syz.2.6171': attribute type 10 has an invalid length. [ 910.796141][T30348] team0: Port device dummy0 added [ 910.855989][T30353] netlink: 'syz.4.6173': attribute type 39 has an invalid length. [ 910.966651][T30359] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 910.993414][T30359] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6174'. [ 911.019601][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6175'. [ 911.033407][T30360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6175'. [ 911.171519][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 911.326835][T30373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6179'. [ 911.336135][T30369] lo: Caught tx_queue_len zero misconfig [ 911.419559][T30369] sit0: Caught tx_queue_len zero misconfig [ 911.939979][T30399] FAULT_INJECTION: forcing a failure. [ 911.939979][T30399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.955781][T30399] CPU: 1 UID: 0 PID: 30399 Comm: syz.2.6185 Not tainted syzkaller #0 PREEMPT(full) [ 911.955813][T30399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.955828][T30399] Call Trace: [ 911.955837][T30399] [ 911.955847][T30399] dump_stack_lvl+0xe8/0x150 [ 911.955889][T30399] should_fail_ex+0x40c/0x560 [ 911.955927][T30399] _copy_from_user+0x2d/0xb0 [ 911.955951][T30399] kstrtouint_from_user+0xd6/0x180 [ 911.955984][T30399] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 911.956017][T30399] ? irqentry_exit+0x218/0x8f0 [ 911.956063][T30399] proc_fail_nth_write+0x8e/0x210 [ 911.956153][T30399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.956193][T30399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.956224][T30399] vfs_write+0x296/0xba0 [ 911.956257][T30399] ? __pfx_vfs_write+0x10/0x10 [ 911.956280][T30399] ? __fget_files+0x2a/0x420 [ 911.956316][T30399] ? __fget_files+0x3a2/0x420 [ 911.956343][T30399] ? __fget_files+0x2a/0x420 [ 911.956382][T30399] ksys_write+0x150/0x270 [ 911.956407][T30399] ? __pfx_ksys_write+0x10/0x10 [ 911.956438][T30399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.956464][T30399] do_syscall_64+0x174/0x580 [ 911.956493][T30399] ? trace_irq_disable+0x3b/0x140 [ 911.956523][T30399] ? clear_bhb_loop+0x40/0x90 [ 911.956551][T30399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.956573][T30399] RIP: 0033:0x7ff1f535e84e [ 911.956595][T30399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 911.956613][T30399] RSP: 002b:00007ff1f62e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.956637][T30399] RAX: ffffffffffffffda RBX: 00007ff1f62e66c0 RCX: 00007ff1f535e84e [ 911.956654][T30399] RDX: 0000000000000001 RSI: 00007ff1f62e60a0 RDI: 0000000000000007 [ 911.956669][T30399] RBP: 00007ff1f62e6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.956683][T30399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.956696][T30399] R13: 00007ff1f5626038 R14: 00007ff1f5625fa0 R15: 00007ffc13548cb8 [ 911.956732][T30399] [ 912.421478][T30411] netlink: 'syz.4.6191': attribute type 5 has an invalid length. [ 912.429575][T30411] __nla_validate_parse: 2 callbacks suppressed [ 912.429595][T30411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6191'. [ 912.541798][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6194'. [ 912.585320][T30409] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 912.613315][T30409] bond1 (unregistering): Released all slaves [ 912.732869][T30430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6197'. [ 912.746848][T30430] netlink: 'syz.3.6197': attribute type 10 has an invalid length. [ 912.757866][T30430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6197'. [ 912.783244][T30430] geneve3: entered promiscuous mode [ 912.788733][T30430] geneve3: entered allmulticast mode [ 912.799263][T30431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.901954][T30434] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6198'. [ 913.145441][T30452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6203'. [ 913.155048][T30453] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6203'. [ 913.233756][T30457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 913.252956][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 913.283895][T30459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6206'. [ 913.538093][T30468] netlink: 'syz.2.6209': attribute type 1 has an invalid length. [ 913.698450][T30480] netlink: 'syz.4.6210': attribute type 15 has an invalid length. [ 913.757143][T30482] netlink: 'syz.1.6214': attribute type 13 has an invalid length. [ 914.711480][T30535] syzkaller0: entered promiscuous mode [ 914.722600][T30537] netlink: 'syz.3.6227': attribute type 1 has an invalid length. [ 914.741394][T30535] syzkaller0: entered allmulticast mode [ 914.990431][T30545] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 915.159847][T30553] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.168022][T30553] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.201141][T30553] bridge0: entered allmulticast mode [ 915.231709][T30554] bridge_slave_1: left allmulticast mode [ 915.245839][T30554] bridge_slave_1: left promiscuous mode [ 915.258315][T30554] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.302558][T30554] bridge_slave_0: left allmulticast mode [ 915.310511][T30554] bridge_slave_0: left promiscuous mode [ 915.316588][T30554] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.143792][T30591] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 916.620348][T30609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.663425][T30616] netlink: 'syz.3.6252': attribute type 1 has an invalid length. [ 916.693593][T30616] gretap1: entered allmulticast mode [ 916.716446][T30609] syzkaller0: entered promiscuous mode [ 916.723905][T30609] syzkaller0: entered allmulticast mode [ 917.645527][T30664] __nla_validate_parse: 82 callbacks suppressed [ 917.645552][T30664] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6267'. [ 917.663367][T30664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6267'. [ 917.836708][T30672] netlink: 'syz.4.6273': attribute type 4 has an invalid length. [ 917.868229][T30672] netlink: 'syz.4.6273': attribute type 4 has an invalid length. [ 917.974116][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6274'. [ 917.986444][T30677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6274'. [ 918.010093][T30677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6274'. [ 918.051020][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 918.084107][T30677] team0: Port device team_slave_0 removed [ 918.117504][T30685] syzkaller1: entered promiscuous mode [ 918.124765][T30685] syzkaller1: entered allmulticast mode [ 918.138732][T30684] SET target dimension over the limit! [ 918.225683][T30693] syzkaller0: entered promiscuous mode [ 918.251404][T30693] syzkaller0: entered allmulticast mode [ 918.309208][T30695] @0Ù: renamed from bond_slave_1 [ 918.343464][T30698] smc: net device lo applied user defined pnetid SYZ2 [ 918.364171][T30698] smc: net device lo erased user defined pnetid SYZ2 [ 918.517184][T30709] x_tables: duplicate underflow at hook 2 [ 918.543355][T30709] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6280'. [ 918.658721][T30699] virt_wifi0 speed is unknown, defaulting to 1000 [ 919.276745][T30738] ip6tnl0: Caught tx_queue_len zero misconfig [ 919.446127][T30702] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6268'. [ 919.635385][T30760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6292'. [ 919.899410][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6296'. [ 920.043291][T30778] xt_TCPMSS: Only works on TCP SYN packets [ 921.006552][T30832] netlink: 'syz.1.6315': attribute type 10 has an invalid length. [ 921.042098][T30832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.058981][T30832] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 921.433469][T30856] netlink: zone id is out of range [ 921.478155][T30856] netlink: zone id is out of range [ 921.497390][T30856] netlink: zone id is out of range [ 921.505885][T30856] netlink: zone id is out of range [ 921.514592][T30856] netlink: get zone limit has 4 unknown bytes [ 921.913149][T30884] pim6reg1: entered promiscuous mode [ 921.926273][T30884] pim6reg1: entered allmulticast mode [ 921.952933][T30884] pim6reg: entered allmulticast mode [ 922.463558][T30898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.481806][T30898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.628127][T30898] mac80211_hwsim hwsim75 wlan0: left allmulticast mode [ 922.659671][T30898] veth3: left promiscuous mode [ 922.676161][T30895] netlink: 'syz.1.6335': attribute type 2 has an invalid length. [ 922.684262][T30895] __nla_validate_parse: 75 callbacks suppressed [ 922.684281][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6335'. [ 922.705250][T30899] netlink: 'syz.1.6335': attribute type 2 has an invalid length. [ 922.713767][T30899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6335'. [ 922.893193][T24527] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.903547][T24527] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.914373][T24527] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.925077][T24527] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.934834][T24527] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.944116][T24527] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.955410][T24527] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.987005][T24527] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.019770][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6342'. [ 923.046375][T30919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6342'. [ 923.085338][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6342'. [ 923.094841][T24496] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.108524][T24496] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.108560][T30921] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6341'. [ 923.120806][T30919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6342'. [ 923.141026][T24527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.161029][T24527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.166667][T30922] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6341'. [ 923.184305][T30921] gretap0: entered promiscuous mode [ 923.216284][T30922] 0ªî{X¹¦: renamed from gretap0 [ 923.231720][T30922] 0ªî{X¹¦: left promiscuous mode [ 923.236851][T30922] 0ªî{X¹¦: entered allmulticast mode [ 923.244827][T30922] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 934.010437][ T5648] Bluetooth: hci2: command 0x0406 tx timeout [ 937.050895][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 939.897011][T30959] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 940.223196][T30983] netlink: 'syz.2.6355': attribute type 1 has an invalid length. [ 940.334269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.373279][T30988] netlink: 'syz.4.6356': attribute type 22 has an invalid length. [ 940.418945][T30991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.431921][T30991] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.451569][T30991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.463472][T30994] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6356'. [ 940.499379][T30991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.513796][T30991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.543705][T30991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 940.554470][T30991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.573785][T30991] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 940.587802][T30991] veth1_vlan: left promiscuous mode [ 940.609749][T30991] veth0_vlan: left promiscuous mode [ 940.621589][T30991] veth0_vlan: entered promiscuous mode [ 940.630355][T30991] veth1_vlan: entered promiscuous mode [ 940.644411][T30991] veth1_macvtap: left promiscuous mode [ 940.651579][T30991] veth0_macvtap: left promiscuous mode [ 940.659101][T30991] veth0_macvtap: entered promiscuous mode [ 940.668307][T30991] veth1_macvtap: entered promiscuous mode [ 940.683594][T30991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.696091][T30991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.705703][T30991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.717309][T30991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.739372][T30991] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 940.762243][T30988] netlink: 'syz.4.6356': attribute type 1 has an invalid length. [ 940.867174][T30994] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6356'. [ 940.891002][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6356'. [ 940.948437][T31006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.973966][T24530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.988091][T24530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.008082][T24530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.018245][T24530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.032587][T31010] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 941.236579][T31019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6364'. [ 941.370634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.448231][T31016] openvswitch: netlink: Flow key attr not present in new flow. [ 941.532233][T31016] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 941.560094][T31016] bond2 (unregistering): Released all slaves [ 941.578895][T31034] FAULT_INJECTION: forcing a failure. [ 941.578895][T31034] name failslab, interval 1, probability 0, space 0, times 0 [ 941.600435][T31034] CPU: 0 UID: 0 PID: 31034 Comm: syz.1.6367 Not tainted syzkaller #0 PREEMPT(full) [ 941.600482][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 941.600506][T31034] Call Trace: [ 941.600515][T31034] [ 941.600525][T31034] dump_stack_lvl+0xe8/0x150 [ 941.600565][T31034] should_fail_ex+0x40c/0x560 [ 941.600600][T31034] should_failslab+0xa8/0x100 [ 941.600636][T31034] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 941.600664][T31034] ? local_lock_release+0x9c/0x160 [ 941.600692][T31034] ? __alloc_skb+0x1d7/0x7a0 [ 941.600715][T31034] ? __alloc_skb+0x1d7/0x7a0 [ 941.600745][T31034] __alloc_skb+0x1d7/0x7a0 [ 941.600774][T31034] alloc_skb_with_frags+0xc6/0x760 [ 941.600890][T31034] ? __lock_acquire+0x683/0x2cf0 [ 941.600926][T31034] sock_alloc_send_pskb+0x878/0x990 [ 941.600978][T31034] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 941.601028][T31034] tun_get_user+0x9a6/0x4370 [ 941.601127][T31034] ? aa_file_perm+0x18b/0x15f0 [ 941.601161][T31034] ? aa_file_perm+0x4ed/0x15f0 [ 941.601187][T31034] ? __pfx_tun_get_user+0x10/0x10 [ 941.601209][T31034] ? __lock_acquire+0x683/0x2cf0 [ 941.601246][T31034] ? kstrtoull+0x12f/0x1d0 [ 941.601282][T31034] ? ref_tracker_alloc+0x341/0x4b0 [ 941.601351][T31034] ? get_pid_task+0x20/0x1f0 [ 941.601402][T31034] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 941.601434][T31034] ? tun_get+0x1c/0x2f0 [ 941.601468][T31034] ? tun_get+0x1c/0x2f0 [ 941.601515][T31034] ? tun_get+0x1c/0x2f0 [ 941.601548][T31034] ? tun_get+0x1c/0x2f0 [ 941.601586][T31034] tun_chr_write_iter+0x113/0x200 [ 941.601624][T31034] vfs_write+0x612/0xba0 [ 941.601656][T31034] ? __pfx_vfs_write+0x10/0x10 [ 941.601690][T31034] ? __fget_files+0x2a/0x420 [ 941.601731][T31034] ksys_write+0x150/0x270 [ 941.601757][T31034] ? __pfx_ksys_write+0x10/0x10 [ 941.601789][T31034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.601814][T31034] do_syscall_64+0x174/0x580 [ 941.601845][T31034] ? trace_irq_disable+0x3b/0x140 [ 941.601874][T31034] ? clear_bhb_loop+0x40/0x90 [ 941.601902][T31034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.601925][T31034] RIP: 0033:0x7fa264b5e84e [ 941.601946][T31034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 941.601966][T31034] RSP: 002b:00007fa26599efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 941.601991][T31034] RAX: ffffffffffffffda RBX: 00007fa26599f6c0 RCX: 00007fa264b5e84e [ 941.602007][T31034] RDX: 0000000000000d81 RSI: 0000200000000e00 RDI: 00000000000000c8 [ 941.602022][T31034] RBP: 00007fa26599f090 R08: 0000000000000000 R09: 0000000000000000 [ 941.602037][T31034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.602050][T31034] R13: 00007fa264e26128 R14: 00007fa264e26090 R15: 00007fff1981d778 [ 941.602087][T31034] [ 942.256406][T31049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6370'. [ 942.267923][T31051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.278624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.410395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.435916][T31056] IPVS: Scheduler module ip_vs_sip not found [ 943.456304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.103369][T24520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.124442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.413381][T31051] macsec1: entered promiscuous mode [ 945.530916][ C1] net_ratelimit: 1 callbacks suppressed [ 945.530941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.067589][T31087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6378'. [ 946.133479][T31091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6380'. [ 946.172749][T31091] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 946.186928][T31091] bond1 (unregistering): Released all slaves [ 946.238458][T31073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6375'. [ 946.249688][T31073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6375'. [ 946.265922][T31073] netlink: 'syz.4.6375': attribute type 32 has an invalid length. [ 946.279339][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 946.300550][T31073] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6375'. [ 946.570286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.586370][T31105] team0: Port device dummy0 removed [ 946.595620][T31110] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 946.604942][T31105] bridge_slave_0: left allmulticast mode [ 946.614879][T31105] bridge_slave_0: left promiscuous mode [ 946.638273][T31105] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.666688][T31115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6384'. [ 946.946127][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6387'. [ 946.994523][T31105] bridge_slave_1: left allmulticast mode [ 947.010333][T31105] bridge_slave_1: left promiscuous mode [ 947.016350][T31105] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.065538][T31130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.065838][T31105] bond0: (slave bond_slave_0): Releasing backup interface [ 947.089596][T31131] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6387'. [ 947.142989][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'. [ 947.154100][T31105] bond0: (slave c@0Ù): Releasing backup interface [ 947.291195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.302316][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 947.322693][T31105] team0: Port device team_slave_0 removed [ 947.342376][T31105] team0: Port device team_slave_1 removed [ 947.349541][T31105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.373199][T31105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.444088][T31105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 947.464344][T31110] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 947.471552][T31131] gretap0: entered promiscuous mode [ 947.610846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.197732][T31179] netlink: 'syz.2.6400': attribute type 1 has an invalid length. [ 948.281567][T31179] bond1: entered promiscuous mode [ 948.297391][T31179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 948.534868][T31186] bond1: (slave veth3): making interface the new active one [ 948.563435][T31186] veth3: entered promiscuous mode [ 948.639080][T31186] bond1: (slave veth3): Enslaving as an active interface with an up link [ 948.650410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.217506][T11510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.228829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.254583][T24520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.300658][T31263] netlink: 'syz.4.6417': attribute type 2 has an invalid length. [ 950.499678][T31272] netlink: 'syz.4.6419': attribute type 1 has an invalid length. [ 950.572965][T31272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 950.596515][T31272] bond2: entered promiscuous mode [ 950.601790][T31272] bond2: entered allmulticast mode [ 950.615732][T31278] lo: Caught tx_queue_len zero misconfig [ 950.723494][T31272] macvlan2: entered promiscuous mode [ 950.730434][ C1] net_ratelimit: 4 callbacks suppressed [ 950.730453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.751754][T31272] macvlan2: entered allmulticast mode [ 950.803677][T31272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 951.129419][T31318] __nla_validate_parse: 6 callbacks suppressed [ 951.129439][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6426'. [ 951.222757][T31318] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 951.595813][T31334] netlink: 'syz.3.6431': attribute type 1 has an invalid length. [ 951.606615][T31333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6429'. [ 951.648945][T31333] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6429'. [ 951.770986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.968226][T31353] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 952.186069][T31370] netlink: 'syz.2.6438': attribute type 1 has an invalid length. [ 952.243705][T31370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.295368][T31375] batman_adv: batadv0: Adding interface: ip6gretap1 [ 952.341544][T31375] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.474497][T31375] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 952.636436][T31376] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 952.810301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.389930][T31401] 0ªî{X¹¦: left allmulticast mode [ 953.414642][T31401] bridge0: left allmulticast mode [ 953.454084][T31401] geneve2: left promiscuous mode [ 953.459109][T31401] geneve2: left allmulticast mode [ 953.850776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.120882][T31421] macvtap1: entered promiscuous mode [ 954.126360][T31421] macvtap1: entered allmulticast mode [ 954.160600][T31421] veth1_to_bridge: entered allmulticast mode [ 954.182713][T31421] veth1_to_bridge: entered promiscuous mode [ 954.213223][T31421] team0: Device macvtap1 failed to register rx_handler [ 954.423071][T31421] veth1_to_bridge: left allmulticast mode [ 954.429194][T31421] veth1_to_bridge: left promiscuous mode [ 954.658444][T31443] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.6448'. [ 954.890273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.976007][T24496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.984696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.041879][T24520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.050827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.065630][T31456] syzkaller0: entered promiscuous mode [ 955.075490][T31456] syzkaller0: entered allmulticast mode [ 955.502882][T31473] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 955.540254][T31473] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 955.564424][T31473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 955.930606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.023982][T31486] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 956.227171][T31500] netlink: 'syz.4.6472': attribute type 1 has an invalid length. [ 956.366943][T31500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 956.409901][T31508] vlan4: entered promiscuous mode [ 956.416726][T31508] bond3: entered promiscuous mode [ 956.426118][T31508] vlan4: entered allmulticast mode [ 956.432961][T31508] bond3: entered allmulticast mode [ 956.496907][T31510] bond3: (slave bridge4): making interface the new active one [ 956.519536][T31510] bridge4: entered promiscuous mode [ 956.525494][T31510] bridge4: entered allmulticast mode [ 956.534337][T31510] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 956.651912][T31518] virt_wifi0 speed is unknown, defaulting to 1000 [ 956.698822][T31523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.709699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.854170][T31530] syzkaller0: entered promiscuous mode [ 956.862705][T31530] syzkaller0: entered allmulticast mode [ 956.907350][T31536] openvswitch: netlink: Message has 8 unknown bytes. [ 956.970353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.997899][T31536] xt_bpf: check failed: parse error [ 957.127222][T31539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6481'. [ 957.682176][T31563] virt_wifi0 speed is unknown, defaulting to 1000 [ 957.831986][T31568] tipc: Enabled bearer , priority 0 [ 957.853433][T31566] syzkaller0: entered promiscuous mode [ 957.859393][T31566] syzkaller0: entered allmulticast mode [ 957.925212][T31566] tipc: Resetting bearer [ 957.938153][T31565] tipc: Resetting bearer [ 958.011083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.028401][T31565] tipc: Disabling bearer [ 958.487530][T31592] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 958.500681][T31592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.509053][T31592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 958.645009][T31596] openvswitch: netlink: Key 8 has unexpected len 1 expected 40 [ 958.888394][T31606] netlink: 'syz.2.6504': attribute type 4 has an invalid length. [ 959.005098][T31612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6505'. [ 959.050415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.159416][T31621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6507'. [ 959.184615][T31621] vlan2: entered promiscuous mode [ 959.197067][T31621] batadv0: entered promiscuous mode [ 959.507455][T31637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6514'. [ 959.532467][T31638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6512'. [ 959.577984][T31639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6513'. [ 959.610459][ T5648] Bluetooth: hci5: command 0x0406 tx timeout [ 959.624819][T31640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6512'. [ 959.677725][T31638] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6512'. [ 960.090951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.301667][T31650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6517'. [ 960.316380][T31650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6517'. [ 960.388013][T31653] geneve1: Caught tx_queue_len zero misconfig [ 960.525234][T31636] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 960.794612][T31669] tipc: Started in network mode [ 960.817155][T31669] tipc: Node identity d202c72f8791, cluster identity 4711 [ 960.839699][T31669] tipc: Enabled bearer , priority 0 [ 960.854434][T31669] syzkaller0: entered promiscuous mode [ 960.861508][T31669] syzkaller0: entered allmulticast mode [ 960.903647][T31669] tipc: Resetting bearer [ 960.918424][T31668] tipc: Resetting bearer [ 960.966439][T31668] tipc: Disabling bearer [ 961.130418][ C1] net_ratelimit: 4 callbacks suppressed [ 961.130440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.535691][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 961.738416][T31720] x_tables: duplicate underflow at hook 2 [ 961.858483][T31724] x_tables: ip_tables: DSCP target: only valid in mangle table, not 0 [ 962.038215][T31732] virt_wifi0 speed is unknown, defaulting to 1000 [ 962.049673][T31734] netlink: 'syz.4.6543': attribute type 7 has an invalid length. [ 962.060100][T31734] netlink: 'syz.4.6543': attribute type 8 has an invalid length. [ 962.170689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.215726][T31742] __nla_validate_parse: 86 callbacks suppressed [ 962.215749][T31742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6546'. [ 962.223704][T31738] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 962.627272][T31766] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 962.838757][T11510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.848142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.174019][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6558'. [ 963.183802][T31766] team0: No ports can be present during mode change [ 963.210312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.448743][T31801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6562'. [ 963.468698][T31800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6561'. [ 963.714985][T31808] netlink: 'syz.4.6565': attribute type 1 has an invalid length. [ 964.238785][T31837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6572'. [ 964.249716][T31838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6573'. [ 964.259596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.289106][T31829] netlink: 'syz.0.6563': attribute type 12 has an invalid length. [ 964.297627][T31829] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6563'. [ 964.624176][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6578'. [ 964.806585][T31860] ip6gre1: entered promiscuous mode [ 964.844545][T31860] ip6gre1: entered allmulticast mode [ 964.945990][T24529] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 964.963146][T24529] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 964.972532][T11511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 965.160995][T11510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 965.201333][T11510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 965.261483][T31891] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6584'. [ 965.290417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.469856][T31897] netlink: 'syz.3.6586': attribute type 10 has an invalid length. [ 965.492885][T31897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.514690][T31903] xt_connbytes: Forcing CT accounting to be enabled [ 965.524110][T31897] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 965.708259][T31913] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6591'. [ 965.807948][T31920] tipc: Enabled bearer , priority 0 [ 965.824934][T31917] tipc: Disabling bearer [ 965.851817][T24528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.971188][T31923] netlink: 'syz.3.6593': attribute type 2 has an invalid length. [ 966.144655][T24528] net_ratelimit: 1 callbacks suppressed [ 966.144676][T24528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.178608][T31925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.247150][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.280578][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.306817][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.330782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.432440][T31675] udevd[31675]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 966.502991][T24522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.512443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.823134][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.849725][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.338631][T31956] __nla_validate_parse: 6 callbacks suppressed [ 967.338654][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6600'. [ 967.628623][T31965] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 967.666407][T31965] bond3 (unregistering): Released all slaves [ 967.896410][T31981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6606'. [ 967.987489][T31981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6606'. [ 968.104792][T31989] x_tables: duplicate underflow at hook 3 [ 968.261561][T31995] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20004 [ 968.650444][T32010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6613'. [ 969.174761][T32029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6618'. [ 969.262494][T32029] IPv6: NLM_F_REPLACE set, but no existing node found! [ 969.370338][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 969.487768][T32046] netlink: 'syz.2.6622': attribute type 13 has an invalid length. [ 969.536925][T32044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6622'. [ 969.664165][T32049] netlink: 'syz.4.6623': attribute type 3 has an invalid length. [ 969.697411][T32053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6624'. [ 969.751508][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6624'. [ 969.800582][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 969.852358][T32053] tipc: New replicast peer: 172.20.20.170 [ 969.858771][T32053] tipc: Enabled bearer , priority 10 [ 969.897446][T32050] vti0: entered promiscuous mode [ 969.910732][T32050] vti0: entered allmulticast mode [ 970.221662][T32085] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6632'. [ 970.359461][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 970.646607][T32098] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 970.670902][T32107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6641'. [ 970.684477][T32098] bond1 (unregistering): Released all slaves [ 970.726607][T32109] erspan0: left allmulticast mode [ 970.733496][T32109] erspan0: left promiscuous mode [ 970.739048][T32109] bridge2: port 1(erspan0) entered disabled state [ 970.755665][T32109] ip6gretap0: left allmulticast mode [ 970.767249][T32109] ip6gretap0: left promiscuous mode [ 970.794656][T32109] bridge0: port 3(ip6gretap0) entered disabled state [ 971.139140][T32109] bridge_slave_0: left allmulticast mode [ 971.145245][T32109] bridge_slave_0: left promiscuous mode [ 971.152753][T32109] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.179492][T32109] bond0: (slave bond_slave_0): Releasing backup interface [ 971.201784][T32109] bond_slave_0: left allmulticast mode [ 971.214846][T32109] bond0: (slave bond_slave_1): Releasing backup interface [ 971.231935][T32109] bond_slave_1: left allmulticast mode [ 971.251434][T32109] team0: Port device team_slave_0 removed [ 971.264347][T32109] team0: Port device team_slave_1 removed [ 971.275215][T32109] net_ratelimit: 7 callbacks suppressed [ 971.275230][T32109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 971.318663][T32110] team0: Mode changed to "loadbalance" [ 971.341963][ T808] tipc: Node number set to 3780472616 [ 971.530414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.547995][T32141] bridge0: port 3(dummy0) entered blocking state [ 971.569454][T32141] bridge0: port 3(dummy0) entered disabled state [ 971.592726][T32141] dummy0: entered allmulticast mode [ 971.623093][T32141] dummy0: entered promiscuous mode [ 971.649471][T32142] dummy0: left allmulticast mode [ 971.666384][T32142] dummy0: left promiscuous mode [ 971.681187][T32142] bridge0: port 3(dummy0) entered disabled state [ 971.723898][T32144] syz.1.6648: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 971.763590][T32144] CPU: 1 UID: 0 PID: 32144 Comm: syz.1.6648 Not tainted syzkaller #0 PREEMPT(full) [ 971.763623][T32144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.763639][T32144] Call Trace: [ 971.763650][T32144] [ 971.763661][T32144] dump_stack_lvl+0xe8/0x150 [ 971.763704][T32144] warn_alloc+0x24c/0x270 [ 971.763739][T32144] ? stack_depot_save_flags+0x33/0x800 [ 971.763774][T32144] ? __pfx_warn_alloc+0x10/0x10 [ 971.763806][T32144] ? kasan_save_track+0x3e/0x80 [ 971.763836][T32144] ? __kasan_kmalloc+0x93/0xb0 [ 971.763879][T32144] ? xsk_setsockopt+0x52a/0x960 [ 971.764043][T32144] ? do_sock_setsockopt+0x17c/0x1b0 [ 971.764072][T32144] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 971.764099][T32144] ? do_syscall_64+0x174/0x580 [ 971.764129][T32144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.764164][T32144] __vmalloc_node_range_noprof+0x12c/0x1730 [ 971.764226][T32144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 971.764262][T32144] ? __kasan_kmalloc+0x93/0xb0 [ 971.764296][T32144] ? __kmalloc_cache_noprof+0x32d/0x660 [ 971.764328][T32144] ? __kmalloc_cache_noprof+0x150/0x660 [ 971.764363][T32144] vmalloc_user_noprof+0xad/0xe0 [ 971.764394][T32144] ? xskq_create+0xbf/0x170 [ 971.764425][T32144] xskq_create+0xbf/0x170 [ 971.764459][T32144] xsk_init_queue+0x8a/0xe0 [ 971.764492][T32144] xsk_setsockopt+0x52a/0x960 [ 971.764519][T32144] ? __fget_files+0x2a/0x420 [ 971.764553][T32144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 971.764585][T32144] ? __pfx_aa_sk_perm+0x10/0x10 [ 971.764615][T32144] ? aa_sock_opt_perm+0xff/0x1a0 [ 971.764645][T32144] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 971.764671][T32144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 971.764701][T32144] do_sock_setsockopt+0x17c/0x1b0 [ 971.764754][T32144] __x64_sys_setsockopt+0x13d/0x1b0 [ 971.764786][T32144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.764812][T32144] do_syscall_64+0x174/0x580 [ 971.764844][T32144] ? trace_irq_disable+0x3b/0x140 [ 971.764948][T32144] ? clear_bhb_loop+0x40/0x90 [ 971.764977][T32144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.765002][T32144] RIP: 0033:0x7fa264b9e019 [ 971.765025][T32144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.765046][T32144] RSP: 002b:00007fa2659c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 971.765071][T32144] RAX: ffffffffffffffda RBX: 00007fa264e25fa0 RCX: 00007fa264b9e019 [ 971.765089][T32144] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 971.765104][T32144] RBP: 00007fa264c3500c R08: 0000000000000004 R09: 0000000000000000 [ 971.765119][T32144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.765134][T32144] R13: 00007fa264e26038 R14: 00007fa264e25fa0 R15: 00007fff1981d778 [ 971.765173][T32144] [ 971.765278][T32144] Mem-Info: [ 972.082723][T32144] active_anon:11086 inactive_anon:0 isolated_anon:0 [ 972.082723][T32144] active_file:2 inactive_file:43825 isolated_file:0 [ 972.082723][T32144] unevictable:768 dirty:40 writeback:0 [ 972.082723][T32144] slab_reclaimable:13469 slab_unreclaimable:173109 [ 972.082723][T32144] mapped:31633 shmem:3770 pagetables:1368 [ 972.082723][T32144] sec_pagetables:0 bounce:0 [ 972.082723][T32144] kernel_misc_reclaimable:0 [ 972.082723][T32144] free:1211479 free_pcp:9355 free_cma:0 [ 972.129989][T32117] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 972.200368][T32144] Node 0 active_anon:38544kB inactive_anon:0kB active_file:8kB inactive_file:175092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126632kB dirty:160kB writeback:0kB shmem:7844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17384kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 972.250665][T24522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.259173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.339662][T32144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 972.381795][T32157] __nla_validate_parse: 4 callbacks suppressed [ 972.381816][T32157] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6650'. [ 972.407971][T32144] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.411861][T32160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6652'. [ 972.439507][T32144] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 972.439631][T32144] Node 0 DMA32 free:889936kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34912kB inactive_anon:0kB active_file:8kB inactive_file:175092kB unevictable:1536kB writepending:324kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:47004kB local_pcp:26168kB free_cma:0kB [ 972.439704][T32144] lowmem_reserve[]: 0 0 0 0 0 [ 972.439760][T32144] Node 0 [ 972.453522][T32160] tipc: Invalid UDP bearer configuration [ 972.462390][T32144] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.496121][T32160] tipc: Enabling of bearer rejected, failed to enable media [ 972.543506][T32144] lowmem_reserve[]: 0 0 0 0 0 [ 972.570871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.601226][T32144] Node 1 Normal free:3941740kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.655822][T32144] lowmem_reserve[]: 0 0 0 0 0 [ 972.666821][T32144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 972.682404][T32144] Node 0 DMA32: 12*4kB (ME) 11*8kB (UM) 201*16kB (UME) 336*32kB (UME) 127*64kB (UM) 43*128kB (UME) 20*256kB (UM) 4*512kB (UM) 1*1024kB (M) 3*2048kB (ME) 207*4096kB (UM) = 889944kB [ 972.702593][T32144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 972.762552][T32144] Node 1 Normal: 1*4kB (M) 1*8kB (M) 8*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941740kB [ 972.799336][T32171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.811400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.856964][T32171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.873938][T32166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.885798][T11511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.896739][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 972.908438][T32144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.934105][T32144] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 972.945322][T32144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.957921][T32144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.959967][T32150] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 972.968214][T32144] 45845 total pagecache pages [ 972.982637][T32144] 0 pages in swap cache [ 972.986860][T32144] Free swap = 124996kB [ 972.991267][T32144] Total swap = 124996kB [ 972.995561][T32144] 2097051 pages RAM [ 972.999440][T32144] 0 pages HighMem/MovableOnly [ 973.008879][T32144] 428245 pages reserved [ 973.013967][T32144] 0 pages cma reserved [ 973.233769][T32186] tc_dump_action: action bad kind [ 973.397057][T32184] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 973.420711][T32184] bond2 (unregistering): Released all slaves [ 973.626434][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6664'. [ 973.656088][T32199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.701341][T32199] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 973.719039][T32199] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 973.804737][T32197] syzkaller0: entered promiscuous mode [ 973.816369][T32197] syzkaller0: entered allmulticast mode [ 973.837486][T32197] tipc: Enabled bearer , priority 0 [ 973.881036][T32197] tipc: Resetting bearer [ 973.897256][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6667'. [ 973.985020][T32196] tipc: Resetting bearer [ 974.031354][T32196] tipc: Disabling bearer [ 974.199251][T32228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6670'. [ 974.516952][T32241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6678'. [ 974.830687][T32257] sctp: [Deprecated]: syz.2.6682 (pid 32257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 974.830687][T32257] Use struct sctp_sack_info instead [ 975.018146][T32277] netlink: 'syz.3.6686': attribute type 10 has an invalid length. [ 975.089305][T32274] syzkaller0: entered promiscuous mode [ 975.098296][T32274] syzkaller0: entered allmulticast mode [ 975.146977][T32277] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 975.168725][T32278] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9495:78ff:feab:4b96 error=-28 [ 975.414991][T32278] infiniband syz1: set down [ 975.432939][T32278] infiniband syz1: added bridge_slave_1 [ 975.579948][T32278] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 975.639418][T32278] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 975.708159][T32278] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 975.803106][T32278] RDS/IB: syz1: added [ 975.808081][T32278] smc: adding ib device syz1 with port count 1 [ 975.818039][T32278] smc: ib device syz1 port 1 has no pnetid [ 976.734493][ C1] net_ratelimit: 11 callbacks suppressed [ 976.734517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.748410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.758089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.770303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.016663][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 978.022445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.034266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.043991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.810991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.143017][T32297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 979.276783][T32309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6695'. [ 979.308846][T32313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6694'. [ 979.526583][T32321] netlink: 'syz.2.6697': attribute type 1 has an invalid length. [ 979.563760][T32321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6697'. [ 979.735327][T32330] netlink: 'syz.1.6699': attribute type 11 has an invalid length. [ 979.745806][T32330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6699'. [ 979.850433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.070056][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6702'. [ 980.137768][T32348] netlink: 'syz.2.6705': attribute type 1 has an invalid length. [ 980.180378][T32350] netlink: 'syz.2.6705': attribute type 1 has an invalid length. [ 981.853410][T24527] net_ratelimit: 1 callbacks suppressed [ 981.853431][T24527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.868031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.930371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.202278][T32360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6709'. [ 982.306737][T32362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6710'. [ 982.387658][T32364] netlink: 'syz.4.6711': attribute type 83 has an invalid length. [ 982.435043][T32364] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 982.648522][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6712'. [ 982.752928][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6712'. [ 982.771301][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6712'. [ 982.915691][T32381] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 982.970656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.017766][T32386] syzkaller0: entered promiscuous mode [ 983.024331][T32386] syzkaller0: entered allmulticast mode [ 983.251366][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.275800][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.300999][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.309087][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.319233][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.331424][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.339622][T32398] netlink: 'syz.2.6720': attribute type 49 has an invalid length. [ 983.775041][T24497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.784316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.010413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.103818][T32422] x_tables: duplicate underflow at hook 1 [ 984.104093][T32423] x_tables: duplicate underflow at hook 1 [ 984.266558][T32426] IPVS: Error joining to the multicast group [ 984.835410][T32450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.843953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.189864][T32467] __nla_validate_parse: 34 callbacks suppressed [ 985.189886][T32467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6741'. [ 985.209755][T32467] smc: net device wg2 applied user defined pnetid SY [ 985.326037][T32472] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6744'. [ 985.489708][T32478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6746'. [ 985.502522][T32478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6746'. [ 986.243423][T32502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 986.393459][T32509] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 986.551610][T32516] syzkaller0: entered promiscuous mode [ 986.560546][T32517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6754'. [ 986.569617][T32516] syzkaller0: entered allmulticast mode [ 986.605615][T32517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6754'. [ 986.623068][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6756'. [ 987.146769][T32527] bridge4: entered promiscuous mode [ 987.165717][T32527] bridge4: entered allmulticast mode [ 987.189083][T32527] team0: Port device bridge4 added [ 987.234182][T32531] bridge0: port 1(team0) entered blocking state [ 987.257774][T32527] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6758'. [ 987.258070][T32531] bridge0: port 1(team0) entered disabled state [ 987.302115][T32531] team0: entered allmulticast mode [ 987.324669][T32531] team_slave_1: entered allmulticast mode [ 987.342640][T32531] bridge0: port 1(team0) entered blocking state [ 987.349179][T32531] bridge0: port 1(team0) entered forwarding state [ 987.364111][T19863] team_slave_1: entered promiscuous mode [ 987.606567][T32547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 987.828268][T32560] Bluetooth: MGMT ver 1.23 [ 988.019566][T32568] syz.1.6770: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 988.058147][T32575] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 988.067492][T32568] CPU: 0 UID: 0 PID: 32568 Comm: syz.1.6770 Not tainted syzkaller #0 PREEMPT(full) [ 988.067525][T32568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.067540][T32568] Call Trace: [ 988.067550][T32568] [ 988.067561][T32568] dump_stack_lvl+0xe8/0x150 [ 988.067607][T32568] warn_alloc+0x24c/0x270 [ 988.067646][T32568] ? stack_depot_save_flags+0x33/0x800 [ 988.067695][T32568] ? __pfx_warn_alloc+0x10/0x10 [ 988.067730][T32568] ? kasan_save_track+0x3e/0x80 [ 988.067759][T32568] ? __kasan_kmalloc+0x93/0xb0 [ 988.067795][T32568] ? xsk_setsockopt+0x52a/0x960 [ 988.067824][T32568] ? do_sock_setsockopt+0x17c/0x1b0 [ 988.067854][T32568] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 988.067882][T32568] ? do_syscall_64+0x174/0x580 [ 988.067916][T32568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.067954][T32568] __vmalloc_node_range_noprof+0x12c/0x1730 [ 988.068022][T32568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 988.068060][T32568] ? __kasan_kmalloc+0x93/0xb0 [ 988.068097][T32568] ? __kmalloc_cache_noprof+0x32d/0x660 [ 988.068131][T32568] ? __kmalloc_cache_noprof+0x150/0x660 [ 988.068167][T32568] vmalloc_user_noprof+0xad/0xe0 [ 988.068199][T32568] ? xskq_create+0xbf/0x170 [ 988.068233][T32568] xskq_create+0xbf/0x170 [ 988.068269][T32568] xsk_init_queue+0x8a/0xe0 [ 988.068304][T32568] xsk_setsockopt+0x52a/0x960 [ 988.068333][T32568] ? __fget_files+0x2a/0x420 [ 988.068370][T32568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 988.068401][T32568] ? __pfx_aa_sk_perm+0x10/0x10 [ 988.068434][T32568] ? aa_sock_opt_perm+0xff/0x1a0 [ 988.068467][T32568] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 988.068496][T32568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 988.068528][T32568] do_sock_setsockopt+0x17c/0x1b0 [ 988.068564][T32568] __x64_sys_setsockopt+0x13d/0x1b0 [ 988.068600][T32568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.068628][T32568] do_syscall_64+0x174/0x580 [ 988.068672][T32568] ? clear_bhb_loop+0x40/0x90 [ 988.068703][T32568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.068727][T32568] RIP: 0033:0x7fa264b9e019 [ 988.068751][T32568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.068772][T32568] RSP: 002b:00007fa2659c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 988.068798][T32568] RAX: ffffffffffffffda RBX: 00007fa264e25fa0 RCX: 00007fa264b9e019 [ 988.068817][T32568] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 988.068831][T32568] RBP: 00007fa264c3500c R08: 0000000000000004 R09: 0000000000000000 [ 988.068846][T32568] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.068862][T32568] R13: 00007fa264e26038 R14: 00007fa264e25fa0 R15: 00007fff1981d778 [ 988.068903][T32568] [ 988.068944][T32568] Mem-Info: [ 988.124954][T32576] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 988.262540][T32568] active_anon:8735 inactive_anon:0 isolated_anon:0 [ 988.262540][T32568] active_file:2 inactive_file:43831 isolated_file:0 [ 988.262540][T32568] unevictable:768 dirty:189 writeback:0 [ 988.262540][T32568] slab_reclaimable:13374 slab_unreclaimable:178402 [ 988.262540][T32568] mapped:29594 shmem:1474 pagetables:1261 [ 988.262540][T32568] sec_pagetables:0 bounce:0 [ 988.262540][T32568] kernel_misc_reclaimable:0 [ 988.262540][T32568] free:1208645 free_pcp:10339 free_cma:0 [ 988.429030][T32568] Node 0 active_anon:34888kB inactive_anon:0kB active_file:8kB inactive_file:175116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118232kB dirty:764kB writeback:0kB shmem:4348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17352kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 988.463809][T32568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 988.520634][T32568] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.582893][T32568] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 988.602663][T32568] Node 0 DMA32 free:877532kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35188kB inactive_anon:0kB active_file:8kB inactive_file:175116kB unevictable:1536kB writepending:764kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:41388kB local_pcp:20712kB free_cma:0kB [ 988.648333][T32568] lowmem_reserve[]: 0 0 0 0 0 [ 988.654216][T32568] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.687591][T32568] lowmem_reserve[]: 0 0 0 0 0 [ 988.693319][T32568] Node 1 Normal free:3941740kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.727287][T32568] lowmem_reserve[]: 0 0 0 0 0 [ 988.728698][T32585] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 988.734857][T32568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 988.759011][T32568] Node 0 DMA32: 859*4kB (UME) 242*8kB (UM) 50*16kB (UME) 104*32kB (UME) 101*64kB (UM) 41*128kB (ME) 19*256kB (M) 3*512kB (M) 2*1024kB (UM) 4*2048kB (ME) 205*4096kB (UM) = 877532kB [ 988.785224][T32568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 988.798287][T32568] Node 1 Normal: 1*4kB (M) 1*8kB (M) 8*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941740kB [ 988.844892][T32568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.868700][T32568] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 988.881209][T32568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.897423][T32568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.909166][T32568] 45300 total pagecache pages [ 988.915029][T32568] 0 pages in swap cache [ 988.919401][T32568] Free swap = 124996kB [ 988.924299][T32568] Total swap = 124996kB [ 988.928590][T32568] 2097051 pages RAM [ 988.934266][T32568] 0 pages HighMem/MovableOnly [ 988.939072][T32568] 428245 pages reserved [ 988.946897][T32568] 0 pages cma reserved [ 989.177748][T32605] validate_nla: 58 callbacks suppressed [ 989.177898][T32605] netlink: 'syz.2.6783': attribute type 4 has an invalid length. [ 989.437420][T32620] netlink: 'syz.3.6788': attribute type 8 has an invalid length. [ 989.627708][T32634] nbd: nbd1 already in use [ 990.210306][T32662] __nla_validate_parse: 11 callbacks suppressed [ 990.210327][T32662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6798'. [ 990.312121][T32662] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6798'. [ 990.689605][T32670] batman_adv: batadv0: Adding interface: vlan2 [ 990.696855][T32670] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.726189][T32670] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 990.786853][T32677] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6802'. [ 990.938041][T32685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6804'. [ 991.112519][T32693] netlink: 'syz.2.6809': attribute type 1 has an invalid length. [ 991.179058][T32693] veth9: entered allmulticast mode [ 991.191590][T32693] bond4: (slave veth9): Enslaving as an active interface with a down link [ 991.231037][T32701] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6807'. [ 991.245613][T32693] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 991.263470][T32693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6809'. [ 991.267849][T32703] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6810'. [ 991.305105][T32693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 991.595258][T32712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6814'. [ 991.633221][T32719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6816'. [ 991.746148][T32714] syzkaller0: entered promiscuous mode [ 991.761076][T32714] syzkaller0: entered allmulticast mode [ 991.807986][T32724] netlink: 'syz.4.6816': attribute type 3 has an invalid length. [ 991.840833][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'. [ 994.660139][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.326999][T32739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 995.409205][T32750] tunl0: Caught tx_queue_len zero misconfig [ 995.467447][T32752] netlink: 480 bytes leftover after parsing attributes in process `syz.2.6825'. [ 995.483608][T32752] netlink: 480 bytes leftover after parsing attributes in process `syz.2.6825'. [ 995.582172][T32757] net_ratelimit: 47 callbacks suppressed [ 995.582193][T32757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.599740][T32756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.248824][ T324] netlink: 'syz.3.6832': attribute type 210 has an invalid length. [ 996.621320][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6840'. [ 996.630820][ T342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6840'. [ 996.652626][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6840'. [ 996.661856][T24530] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.670882][T24530] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.679675][ T342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6840'. [ 996.689286][T24530] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.700022][T24529] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.741954][ T345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6839'. [ 996.794093][ T351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6843'. [ 996.805053][ T351] netlink: 'syz.1.6843': attribute type 1 has an invalid length. [ 996.814366][ T351] netlink: 'syz.1.6843': attribute type 2 has an invalid length. [ 996.838926][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6843'. [ 996.884046][ T345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.922380][ T345] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.959789][ T345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.024050][T24529] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9495:78ff:feab:4b96 error=-28 [ 997.074874][ T345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.089561][ T345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 997.100531][ T345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 997.117048][ T345] veth1_vlan: left promiscuous mode [ 997.127455][ T345] veth0_vlan: left promiscuous mode [ 997.143141][ T345] veth0_vlan: entered promiscuous mode [ 997.151295][ T345] veth1_vlan: entered promiscuous mode [ 997.161763][ T345] veth1_macvtap: left promiscuous mode [ 997.168841][ T345] veth0_macvtap: left promiscuous mode [ 997.185514][ T345] veth0_macvtap: entered promiscuous mode [ 997.193842][ T345] veth1_macvtap: entered promiscuous mode [ 997.211352][ T345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.227199][ T345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.299617][ T345] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 997.328894][T24527] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.336302][T24527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.359748][T24527] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.367025][T24527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.434620][T11511] syz1: Port: 1 Link ACTIVE [ 997.472802][ T335] syzkaller0: entered promiscuous mode [ 997.478597][ T335] syzkaller0: entered allmulticast mode [ 997.651694][ T370] 8021q: VLANs not supported on nlmon0 [ 997.711031][T24529] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.740245][T24529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.771549][T24529] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.806425][T24529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.826875][T24529] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.841488][T24529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.853178][T24529] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.863425][T24529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.928995][ T376] tc_dump_action: action bad kind [ 998.605130][ T422] openvswitch: netlink: Flow actions attr not present in new flow. [ 998.617494][ T423] syzkaller1: entered promiscuous mode [ 998.628979][ T423] syzkaller1: entered allmulticast mode [ 998.902087][ T5635] Bluetooth: hci3: command 0x0405 tx timeout [ 1002.086134][ T442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.346356][ T486] __nla_validate_parse: 8 callbacks suppressed [ 1002.346378][ T486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1002.897944][ T517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6891'. [ 1002.939069][ T523] sctp: [Deprecated]: syz.2.6892 (pid 523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1002.939069][ T523] Use struct sctp_sack_info instead [ 1003.070997][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1003.346606][ T530] Bluetooth: MGMT ver 1.23 [ 1003.998756][ T540] bond2 (unregistering): Released all slaves [ 1004.144955][ T555] tipc: Enabled bearer , priority 0 [ 1004.241011][ T558] syzkaller0: entered promiscuous mode [ 1004.246734][ T558] syzkaller0: entered allmulticast mode [ 1004.613501][ T538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.642564][ T538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.424654][ T573] tipc: Enabling of bearer rejected, failed to enable media [ 1008.482697][ T538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.493825][ T538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.519661][ T602] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1008.599127][ T537] tipc: Resetting bearer [ 1008.643771][ T537] tipc: Disabling bearer [ 1008.776828][ T538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.787723][ T538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.084336][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1009.257843][ T642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1009.402284][T24522] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.413694][T24522] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.461432][T24522] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.474302][T24522] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.490545][T24522] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.509439][T24522] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.523534][T24522] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.532792][T24522] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.622552][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1009.674184][ T652] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1009.686016][ T657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6918'. [ 1009.871425][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1010.073832][ T677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6924'. [ 1010.093584][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6925'. [ 1010.104145][ T677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6924'. [ 1010.128220][ T677] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1010.162252][ T680] xt_hashlimit: size too large, truncated to 1048576 [ 1011.360982][ T696] netlink: 'syz.0.6929': attribute type 1 has an invalid length. [ 1011.480805][ T696] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1012.030498][ T739] openvswitch: netlink: Message has 1 unknown bytes. [ 1012.060542][ T739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.414451][ T748] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1012.694377][ T762] bond2 (unregistering): Released all slaves [ 1013.294828][ T779] netlink: 'syz.1.6959': attribute type 1 has an invalid length. [ 1013.376037][ T783] Cannot find del_set index 2 as target [ 1013.684683][ T807] openvswitch: netlink: Missing valid actions attribute. [ 1013.693026][ T807] openvswitch: netlink: Actions may not be safe on all matching packets [ 1013.715574][ T811] team_slave_1: Caught tx_queue_len zero misconfig [ 1013.777970][ T815] openvswitch: netlink: Missing valid actions attribute. [ 1013.799109][ T815] openvswitch: netlink: Actions may not be safe on all matching packets [ 1014.314026][ T837] netlink: 'syz.4.6974': attribute type 1 has an invalid length. [ 1014.640687][ T846] __nla_validate_parse: 70 callbacks suppressed [ 1014.640709][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1014.735717][ T855] netlink: 'syz.2.6979': attribute type 2 has an invalid length. [ 1014.744555][ T855] netlink: 'syz.2.6979': attribute type 2 has an invalid length. [ 1014.765514][ T846] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1014.801900][ T846] bond2 (unregistering): Released all slaves [ 1014.965504][ T862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1014.977588][ T862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1015.037121][ T866] tipc: Enabling of bearer rejected, failed to enable media [ 1015.338983][ T878] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1015.348296][ T878] lo: Caught tx_queue_len zero misconfig [ 1015.741788][ T896] IPVS: set_ctl: invalid protocol: 0 7.0.0.0:512 [ 1016.433260][ T935] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1016.443921][ T935] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1016.453828][ T935] 0ªî{X¹¦: renamed from gretap0 [ 1016.461438][ T935] 0ªî{X¹¦: left promiscuous mode [ 1016.466889][ T935] 0ªî{X¹¦: entered allmulticast mode [ 1016.473999][ T935] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1019.234547][ T926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1019.326659][ T977] ±ÿ: renamed from lo (while UP) [ 1019.344618][ T979] netlink: 'syz.2.7007': attribute type 8 has an invalid length. [ 1019.463629][ T987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1019.513363][ T987] vlan0: entered allmulticast mode [ 1019.518859][ T987] bridge9: entered allmulticast mode [ 1019.526083][ T990] syzkaller0: entered promiscuous mode [ 1019.533884][ T990] syzkaller0: entered allmulticast mode [ 1019.544489][ T987] bridge9: port 1(erspan0) entered blocking state [ 1019.552721][ T990] IPv6: NLM_F_CREATE should be specified when creating new route [ 1019.561134][ T987] bridge9: port 1(erspan0) entered disabled state [ 1019.567801][ T990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7010'. [ 1019.577372][ T987] erspan0: entered allmulticast mode [ 1019.595708][ T994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1019.598856][ T987] erspan0: entered promiscuous mode [ 1019.677048][ T995] vti0: entered promiscuous mode [ 1020.011658][ T1014] netlink: 'syz.4.7020': attribute type 1 has an invalid length. [ 1020.046996][ T1014] bond5: option mode: invalid value (8) [ 1020.057065][ T1014] bond5 (unregistering): Released all slaves [ 1020.112738][ T1018] : renamed from dummy0 [ 1020.121644][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1020.169224][ T1019] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7019'. [ 1027.291415][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.224521][T24497] mac80211_hwsim hwsim24 wlan1: left allmulticast mode [ 1029.231637][T24497] mac80211_hwsim hwsim24 wlan1: left promiscuous mode [ 1029.241519][T24497] bridge0: port 1(wlan1) entered disabled state [ 1029.258904][T24497] bridge0: left allmulticast mode [ 1029.613167][T24497] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 1029.635360][T24497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.645789][T24497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.655520][T24497] bond0 (unregistering): Released all slaves [ 1029.686251][T24497] bond1 (unregistering): Released all slaves [ 1029.702269][T24497] bond2 (unregistering): Released all slaves [ 1029.718473][T24497] bond3 (unregistering): Released all slaves [ 1029.742084][T24497] bond4 (unregistering): Released all slaves [ 1029.758106][T24497] bond5 (unregistering): Released all slaves [ 1029.775821][T24497] bond6 (unregistering): Released all slaves [ 1029.794316][T24497] bond7 (unregistering): Released all slaves [ 1030.011545][T24497] : left promiscuous mode [ 1030.091191][T24497] tipc: Left network mode [ 1030.849679][T24497] hsr_slave_0: left promiscuous mode [ 1030.856104][T24497] hsr_slave_1: left promiscuous mode [ 1030.865334][T24497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.874840][T24497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.068012][T24497] team0 (unregistering): Port device team_slave_1 removed [ 1031.084638][T24497] team0 (unregistering): Port device team_slave_0 removed [ 1031.291251][ T5648] Bluetooth: hci3: command 0x0405 tx timeout [ 1031.515061][T24497] IPVS: stop unused estimator thread 0... [ 1058.999578][ T1043] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1059.345256][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1059.453577][ T1066] netlink: 'syz.3.7030': attribute type 13 has an invalid length. [ 1059.470638][ T1066] netlink: 2080 bytes leftover after parsing attributes in process `syz.3.7030'. [ 1059.786719][ T1086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1059.809037][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1059.841620][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1061.062291][ T1161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1061.094223][ T1163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1061.106005][ T1164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1061.483014][ T1178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7054'. [ 1061.782894][ T1180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1061.831136][ T1180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1061.845398][ T1180] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1061.862418][ T1180] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1061.875867][ T1180] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1061.887448][ T1180] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1061.904040][ T1180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.259853][ T1190] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1062.282276][ T1190] bond5 (unregistering): Released all slaves [ 1062.526286][ T1198] virt_wifi0 speed is unknown, defaulting to 1000 [ 1062.599076][ T1203] netlink: 'syz.3.7059': attribute type 4 has an invalid length. [ 1062.951569][ T1206] syzkaller0: entered promiscuous mode [ 1062.967867][ T1206] syzkaller0: entered allmulticast mode [ 1065.051153][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1066.957907][ T1236] nbd7: detected capacity change from 0 to 63 [ 1067.044862][ T1240] __nla_validate_parse: 3 callbacks suppressed [ 1067.044883][ T1240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1067.118508][ T5635] block nbd7: Receive control failed (result -104) [ 1067.587058][ T1267] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7072'. [ 1067.609950][ T1267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7072'. [ 1068.123478][ T1273] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1068.398262][ T1298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.335108][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 2 seconds [ 1070.371708][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 2 seconds [ 1070.382956][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 2 seconds [ 1070.398495][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 2 seconds [ 1071.573490][T11508] bridge0: entered promiscuous mode [ 1071.579998][T11508] team0: entered promiscuous mode [ 1071.736098][ T1316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7082'. [ 1072.418393][ T1352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1072.418785][ T1354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1072.538245][ T1366] syzkaller0: entered promiscuous mode [ 1072.561028][ T1366] syzkaller0: entered allmulticast mode [ 1072.660809][ T30] audit: type=1804 audit(1785590826.954:12): pid=1374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7095" name="/newroot/342/cgroup.controllers" dev="tmpfs" ino=1776 res=1 errno=0 [ 1072.753348][ T30] audit: type=1800 audit(1785590826.954:13): pid=1374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7095" name="cgroup.controllers" dev="tmpfs" ino=1776 res=0 errno=0 [ 1072.954073][ T1385] tipc: Cannot configure node identity twice [ 1072.982393][ T1385] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1073.027188][ T1384] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1073.259219][ T1408] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 1073.459795][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1073.510355][ T1424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1073.674897][ T1430] syzkaller0: entered promiscuous mode [ 1073.681447][ T1430] syzkaller0: entered allmulticast mode [ 1073.693657][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 4 seconds [ 1073.708203][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 4 seconds [ 1073.719483][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 4 seconds [ 1073.730740][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 4 seconds [ 1073.852555][ T1438] netlink: 'syz.4.7112': attribute type 1 has an invalid length. [ 1074.158850][ T1431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7110'. [ 1074.565384][ T1438] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1074.650049][ T1462] FAULT_INJECTION: forcing a failure. [ 1074.650049][ T1462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.670841][ T1440] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1074.690773][ T1462] CPU: 0 UID: 0 PID: 1462 Comm: syz.2.7116 Not tainted syzkaller #0 PREEMPT(full) [ 1074.690806][ T1462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.690820][ T1462] Call Trace: [ 1074.690830][ T1462] [ 1074.690840][ T1462] dump_stack_lvl+0xe8/0x150 [ 1074.690881][ T1462] should_fail_ex+0x40c/0x560 [ 1074.690916][ T1462] _copy_to_user+0x31/0xb0 [ 1074.690941][ T1462] simple_read_from_buffer+0xe1/0x170 [ 1074.691008][ T1462] proc_fail_nth_read+0x1bb/0x230 [ 1074.691045][ T1462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.691081][ T1462] ? rw_verify_area+0x24a/0x4c0 [ 1074.691106][ T1462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.691137][ T1462] vfs_read+0x213/0xa80 [ 1074.691166][ T1462] ? __pfx___mutex_lock+0x10/0x10 [ 1074.691200][ T1462] ? __pfx_vfs_read+0x10/0x10 [ 1074.691225][ T1462] ? __fget_files+0x2a/0x420 [ 1074.691261][ T1462] ? __fget_files+0x3a2/0x420 [ 1074.691289][ T1462] ? __fget_files+0x2a/0x420 [ 1074.691330][ T1462] ksys_read+0x150/0x270 [ 1074.691355][ T1462] ? __pfx_ksys_read+0x10/0x10 [ 1074.691388][ T1462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.691414][ T1462] do_syscall_64+0x174/0x580 [ 1074.691444][ T1462] ? trace_irq_disable+0x3b/0x140 [ 1074.691474][ T1462] ? clear_bhb_loop+0x40/0x90 [ 1074.691502][ T1462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.691524][ T1462] RIP: 0033:0x7ff1f535e84e [ 1074.691546][ T1462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1074.691566][ T1462] RSP: 002b:00007ff1f62e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1074.691590][ T1462] RAX: ffffffffffffffda RBX: 00007ff1f62e66c0 RCX: 00007ff1f535e84e [ 1074.691607][ T1462] RDX: 000000000000000f RSI: 00007ff1f62e60a0 RDI: 0000000000000004 [ 1074.691621][ T1462] RBP: 00007ff1f62e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.691636][ T1462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.691657][ T1462] R13: 00007ff1f5626038 R14: 00007ff1f5625fa0 R15: 00007ffc13548cb8 [ 1074.691695][ T1462] [ 1074.944160][ T1442] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1075.346616][ T1485] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1076.061994][ T1519] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1077.062459][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 6 seconds [ 1077.073211][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 6 seconds [ 1077.084157][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 6 seconds [ 1077.095126][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 6 seconds [ 1078.254280][T24529] wlan1: Trigger new scan to find an IBSS to join [ 1079.267337][ T1544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7136'. [ 1079.601961][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7139'. [ 1079.658890][ T1556] tipc: Enabled bearer , priority 0 [ 1079.678631][ T1556] syzkaller0: entered promiscuous mode [ 1079.687987][ T1556] syzkaller0: entered allmulticast mode [ 1079.704034][ T1557] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1079.757633][ T1556] tipc: Resetting bearer [ 1079.777804][ T1555] tipc: Resetting bearer [ 1079.875565][ T1555] tipc: Disabling bearer [ 1080.104224][ T1564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.377871][ T1580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7148'. [ 1080.390626][ T1580] netlink: 'syz.2.7148': attribute type 25 has an invalid length. [ 1080.404185][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7148'. [ 1080.413326][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1080.427671][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 8 seconds [ 1080.439382][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 8 seconds [ 1080.450774][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 8 seconds [ 1080.464196][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 8 seconds [ 1081.083153][ T1615] netlink: 340 bytes leftover after parsing attributes in process `syz.3.7156'. [ 1081.211546][T24530] wlan1: Trigger new scan to find an IBSS to join [ 1081.434622][ T1629] IPVS: Unknown mcast interface: vcan0 [ 1081.996074][ T1656] netlink: 'syz.0.7167': attribute type 11 has an invalid length. [ 1082.020175][ T1656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7167'. [ 1082.032526][ T1656] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7167'. [ 1082.107644][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1082.406978][ T1670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7175'. [ 1082.466385][ T1678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7176'. [ 1082.573972][ T1679] virt_wifi0 speed is unknown, defaulting to 1000 [ 1082.614670][ T1683] netlink: 'syz.4.7181': attribute type 1 has an invalid length. [ 1082.891522][ T1694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.918573][ T1696] SET target dimension over the limit! [ 1083.680908][ T1717] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1083.771169][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 10 seconds [ 1083.782220][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 10 seconds [ 1083.796120][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 10 seconds [ 1083.807553][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 10 seconds [ 1084.072421][ T1734] netlink: 'syz.2.7193': attribute type 1 has an invalid length. [ 1084.082704][ T1734] netlink: 'syz.2.7193': attribute type 1 has an invalid length. [ 1084.251907][T24520] wlan1: Trigger new scan to find an IBSS to join [ 1085.066005][ T1775] syzkaller0: entered promiscuous mode [ 1085.076481][ T1775] syzkaller0: entered allmulticast mode [ 1085.183896][T24520] wlan1: Creating new IBSS network, BSSID 22:7b:92:d4:38:56 [ 1085.602120][ T1796] ip6t_srh: unknown srh invflags BA61 [ 1085.829299][ T1809] __nla_validate_parse: 5 callbacks suppressed [ 1085.829316][ T1809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1085.943799][ T1811] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1085.956711][ T1811] bond2 (unregistering): Released all slaves [ 1086.005434][ T1815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1086.191301][ T1824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1086.206000][ T1824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1086.221594][ T1824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1086.231985][ T1824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1086.244323][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1086.256548][ T1824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1086.267751][ T1824] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1086.295605][ T1828] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1086.338656][ T1825] erspan0: left allmulticast mode [ 1086.353842][ T1825] erspan0: left promiscuous mode [ 1086.359660][ T1825] bridge9: port 1(erspan0) entered disabled state [ 1086.368490][ T1829] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1086.385297][ T1825] bridge13: port 1(erspan0) entered blocking state [ 1086.392468][ T1825] bridge13: port 1(erspan0) entered disabled state [ 1086.399873][ T1825] erspan0: entered allmulticast mode [ 1086.403289][ T1828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1086.417538][ T1825] erspan0: entered promiscuous mode [ 1086.463444][ T1834] set match dimension is over the limit! [ 1086.475676][ T1835] tipc: Enabling of bearer rejected, failed to enable media [ 1086.497331][ T1835] veth0_macvtap: left promiscuous mode [ 1086.620918][ T1841] sock: sock_set_timeout: `syz.4.7222' (pid 1841) tries to set negative timeout [ 1087.142110][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 12 seconds [ 1087.153771][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 12 seconds [ 1087.165767][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 12 seconds [ 1087.176920][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 12 seconds [ 1087.610491][ T5648] Bluetooth: hci3: command 0x0405 tx timeout [ 1088.249320][ T1911] virt_wifi0 speed is unknown, defaulting to 1000 [ 1088.764280][ T1930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.914927][ T1932] bond2: entered allmulticast mode [ 1088.964401][ T1939] netlink: 'syz.4.7246': attribute type 3 has an invalid length. [ 1089.851619][ T1981] FAULT_INJECTION: forcing a failure. [ 1089.851619][ T1981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.880595][ T1981] CPU: 1 UID: 0 PID: 1981 Comm: syz.1.7255 Not tainted syzkaller #0 PREEMPT(full) [ 1089.880627][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.880641][ T1981] Call Trace: [ 1089.880650][ T1981] [ 1089.880661][ T1981] dump_stack_lvl+0xe8/0x150 [ 1089.880701][ T1981] should_fail_ex+0x40c/0x560 [ 1089.880737][ T1981] _copy_from_user+0x2d/0xb0 [ 1089.880760][ T1981] do_sock_getsockopt+0x200/0x7e0 [ 1089.880796][ T1981] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1089.880843][ T1981] ? __fget_files+0x3a2/0x420 [ 1089.880873][ T1981] ? __fget_files+0x2a/0x420 [ 1089.880912][ T1981] __x64_sys_getsockopt+0x1a4/0x240 [ 1089.880947][ T1981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.880971][ T1981] do_syscall_64+0x174/0x580 [ 1089.881003][ T1981] ? trace_irq_disable+0x3b/0x140 [ 1089.881033][ T1981] ? clear_bhb_loop+0x40/0x90 [ 1089.881061][ T1981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.881087][ T1981] RIP: 0033:0x7fa264b9e019 [ 1089.881110][ T1981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.881129][ T1981] RSP: 002b:00007fa2659c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1089.881154][ T1981] RAX: ffffffffffffffda RBX: 00007fa264e25fa0 RCX: 00007fa264b9e019 [ 1089.881171][ T1981] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000003 [ 1089.881185][ T1981] RBP: 00007fa2659c0090 R08: 0000200000000100 R09: 0000000000000000 [ 1089.881200][ T1981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.881213][ T1981] R13: 00007fa264e26038 R14: 00007fa264e25fa0 R15: 00007fff1981d778 [ 1089.881249][ T1981] [ 1090.259319][ T1991] x_tables: duplicate entry at hook 1 [ 1090.480947][ T1985] batman_adv: batadv0: Adding interface: gretap0 [ 1090.489259][ T1985] batman_adv: batadv0: The MTU of interface gretap0 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.523626][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 14 seconds [ 1090.532963][ T1985] batman_adv: batadv0: Interface activated: gretap0 [ 1090.536462][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 14 seconds [ 1090.552563][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 14 seconds [ 1090.568369][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 14 seconds [ 1091.013769][ T2035] bridge1: entered allmulticast mode [ 1091.139498][ T2044] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1091.224489][ T2044] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1093.809114][ T2015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.852418][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 16 seconds [ 1093.863641][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 16 seconds [ 1093.874849][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 16 seconds [ 1093.886027][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 16 seconds [ 1094.153031][ T2056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.243940][ T2059] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1094.635582][ T2091] SET target dimension over the limit! [ 1094.739665][ T2102] __nla_validate_parse: 9 callbacks suppressed [ 1094.739688][ T2102] netlink: 408 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1094.775260][ T2101] netlink: 'syz.3.7277': attribute type 10 has an invalid length. [ 1094.919199][ T2101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.943510][ T2101] team0: Port device bond0 added [ 1095.351296][ T2130] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1095.394844][ T2125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7290'. [ 1095.433116][ T2137] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7292'. [ 1095.454026][ T2137] netlink: 'syz.3.7292': attribute type 9 has an invalid length. [ 1095.492986][ T2137] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.7292'. [ 1095.594502][ T2128] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1095.770577][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1095.879295][ T2152] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1095.906889][ T2128] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1095.928318][ T2128] gretap1: left promiscuous mode [ 1095.956585][ T2128] hsr1: left promiscuous mode [ 1095.966735][ T2128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.989475][ T2128] batman_adv: batadv0: Interface activated: vlan2 [ 1096.055480][T11385] virt_wifi0 speed is unknown, defaulting to 1000 [ 1096.066030][ T2152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1096.150825][ T2154] "syz.2.7297" (2154) uses obsolete ecb(arc4) skcipher [ 1096.211840][ T2154] geneve2: entered promiscuous mode [ 1096.242092][T24525] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.278188][ T2157] FAULT_INJECTION: forcing a failure. [ 1096.278188][ T2157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.279996][T24525] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.337574][T24525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.349422][T24525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.363424][ T2157] CPU: 1 UID: 0 PID: 2157 Comm: syz.1.7298 Not tainted syzkaller #0 PREEMPT(full) [ 1096.363454][ T2157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.363469][ T2157] Call Trace: [ 1096.363486][ T2157] [ 1096.363497][ T2157] dump_stack_lvl+0xe8/0x150 [ 1096.363539][ T2157] should_fail_ex+0x40c/0x560 [ 1096.363577][ T2157] _copy_to_user+0x31/0xb0 [ 1096.363602][ T2157] copy_to_sockptr_offset+0x66/0xa0 [ 1096.363745][ T2157] do_ip_getsockopt+0x1021/0x1d00 [ 1096.363787][ T2157] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1096.363823][ T2157] ? __lock_acquire+0x683/0x2cf0 [ 1096.363866][ T2157] ? aa_file_perm+0x18b/0x15f0 [ 1096.363901][ T2157] ? aa_label_sk_perm+0x532/0x6e0 [ 1096.363935][ T2157] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1096.363962][ T2157] ? _parse_integer_limit+0x192/0x1e0 [ 1096.364002][ T2157] ip_getsockopt+0xbb/0x230 [ 1096.364034][ T2157] ? kstrtouint+0x6e/0xe0 [ 1096.364066][ T2157] ? __pfx_ip_getsockopt+0x10/0x10 [ 1096.364109][ T2157] raw_getsockopt+0x13c/0x3e0 [ 1096.364162][ T2157] ? __might_fault+0xaf/0x130 [ 1096.364219][ T2157] ? __pfx_raw_getsockopt+0x10/0x10 [ 1096.364258][ T2157] ? sock_common_getsockopt+0x2d/0xb0 [ 1096.364284][ T2157] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1096.364308][ T2157] do_sock_getsockopt+0x51d/0x7e0 [ 1096.364344][ T2157] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1096.364392][ T2157] ? __fget_files+0x3a2/0x420 [ 1096.364422][ T2157] ? __fget_files+0x2a/0x420 [ 1096.364461][ T2157] __x64_sys_getsockopt+0x1a4/0x240 [ 1096.364508][ T2157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.364534][ T2157] do_syscall_64+0x174/0x580 [ 1096.364566][ T2157] ? trace_irq_disable+0x3b/0x140 [ 1096.364597][ T2157] ? clear_bhb_loop+0x40/0x90 [ 1096.364626][ T2157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.364647][ T2157] RIP: 0033:0x7fa264b9e019 [ 1096.364668][ T2157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.364687][ T2157] RSP: 002b:00007fa2659c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1096.364709][ T2157] RAX: ffffffffffffffda RBX: 00007fa264e25fa0 RCX: 00007fa264b9e019 [ 1096.364725][ T2157] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000003 [ 1096.364738][ T2157] RBP: 00007fa2659c0090 R08: 0000200000000100 R09: 0000000000000000 [ 1096.364752][ T2157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.364765][ T2157] R13: 00007fa264e26038 R14: 00007fa264e25fa0 R15: 00007fff1981d778 [ 1096.364798][ T2157] [ 1096.622976][T24525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.636396][T24527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.646376][T24525] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.669437][T24525] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.936050][ T2178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7307'. [ 1097.005550][ T2178] vlan1: entered promiscuous mode [ 1097.011400][ T2178] bridge0: entered promiscuous mode [ 1097.051354][ T2187] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1097.213708][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 18 seconds [ 1097.224912][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 18 seconds [ 1097.236122][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 18 seconds [ 1097.247615][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 18 seconds [ 1097.525103][ T2211] netlink: 'syz.4.7314': attribute type 1 has an invalid length. [ 1097.572565][ T2213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7312'. [ 1097.614840][ T2211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1097.637625][ T2205] virt_wifi0 speed is unknown, defaulting to 1000 [ 1097.743409][ T2213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7312'. [ 1097.862227][ T2221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7315'. [ 1097.961477][ T2213] [ 1097.963875][ T2213] ====================================================== [ 1097.970979][ T2213] WARNING: possible circular locking dependency detected [ 1097.978209][ T2213] syzkaller #0 Not tainted [ 1097.982692][ T2213] ------------------------------------------------------ [ 1097.989789][ T2213] syz.1.7312/2213 is trying to acquire lock: [ 1097.995874][ T2213] ffff88805d964898 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1098.004995][ T2213] [ 1098.004995][ T2213] but task is already holding lock: [ 1098.012378][ T2213] ffff88802a390ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1098.021903][ T2213] [ 1098.021903][ T2213] which lock already depends on the new lock. [ 1098.021903][ T2213] [ 1098.032434][ T2213] [ 1098.032434][ T2213] the existing dependency chain (in reverse order) is: [ 1098.041469][ T2213] [ 1098.041469][ T2213] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1098.049395][ T2213] __mutex_lock+0x19d/0x1550 [ 1098.054547][ T2213] elevator_change+0x1af/0x480 [ 1098.059866][ T2213] elevator_set_none+0xb5/0x140 [ 1098.065265][ T2213] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1098.071687][ T2213] nbd_start_device+0x189/0xb30 [ 1098.077152][ T2213] nbd_genl_connect+0x1597/0x1c10 [ 1098.082749][ T2213] genl_family_rcv_msg_doit+0x233/0x340 [ 1098.088841][ T2213] genl_rcv_msg+0x614/0x7a0 [ 1098.093892][ T2213] netlink_rcv_skb+0x226/0x4a0 [ 1098.099215][ T2213] genl_rcv+0x28/0x40 [ 1098.103751][ T2213] netlink_unicast+0x7bb/0x940 [ 1098.109056][ T2213] netlink_sendmsg+0x813/0xb40 [ 1098.114372][ T2213] sock_sendmsg_nosec+0x13a/0x180 [ 1098.119947][ T2213] ____sys_sendmsg+0x54e/0x850 [ 1098.125260][ T2213] ___sys_sendmsg+0x2a5/0x360 [ 1098.130497][ T2213] __x64_sys_sendmsg+0x1b1/0x290 [ 1098.135981][ T2213] do_syscall_64+0x174/0x580 [ 1098.141119][ T2213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.147552][ T2213] [ 1098.147552][ T2213] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1098.156222][ T2213] blk_alloc_queue+0x544/0x690 [ 1098.161604][ T2213] __blk_mq_alloc_disk+0x194/0x390 [ 1098.167259][ T2213] nbd_dev_add+0x494/0xb60 [ 1098.172217][ T2213] nbd_init+0x15f/0x1e0 [ 1098.177006][ T2213] do_one_initcall+0x250/0x870 [ 1098.182334][ T2213] do_initcall_level+0x10a/0x1a0 [ 1098.187971][ T2213] do_initcalls+0x59/0xa0 [ 1098.192939][ T2213] kernel_init_freeable+0x29d/0x3e0 [ 1098.198684][ T2213] kernel_init+0x1d/0x1d0 [ 1098.203555][ T2213] ret_from_fork+0x514/0xb70 [ 1098.208755][ T2213] ret_from_fork_asm+0x1a/0x30 [ 1098.214088][ T2213] [ 1098.214088][ T2213] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1098.221345][ T2213] fs_reclaim_acquire+0x71/0x100 [ 1098.226849][ T2213] __kmalloc_cache_node_noprof+0x66/0x630 [ 1098.233128][ T2213] create_worker+0x112/0x7b0 [ 1098.238293][ T2213] workqueue_prepare_cpu+0xe4/0x170 [ 1098.244032][ T2213] cpuhp_invoke_callback+0x434/0x810 [ 1098.249880][ T2213] _cpu_up+0x2ce/0x5b0 [ 1098.254511][ T2213] cpu_up+0x1d2/0x220 [ 1098.259039][ T2213] cpuhp_bringup_mask+0xb2/0x1a0 [ 1098.264607][ T2213] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1098.271013][ T2213] bringup_nonboot_cpus+0x17/0x30 [ 1098.276602][ T2213] smp_init+0x32/0x110 [ 1098.281300][ T2213] kernel_init_freeable+0x27f/0x3e0 [ 1098.287070][ T2213] kernel_init+0x1d/0x1d0 [ 1098.291947][ T2213] ret_from_fork+0x514/0xb70 [ 1098.297109][ T2213] ret_from_fork_asm+0x1a/0x30 [ 1098.302416][ T2213] [ 1098.302416][ T2213] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1098.310265][ T2213] cpus_read_lock+0x42/0x160 [ 1098.315847][ T2213] static_key_slow_inc+0x12/0x30 [ 1098.321382][ T2213] nbd_genl_reconfigure+0x1301/0x1e80 [ 1098.327396][ T2213] genl_family_rcv_msg_doit+0x233/0x340 [ 1098.333491][ T2213] genl_rcv_msg+0x614/0x7a0 [ 1098.338541][ T2213] netlink_rcv_skb+0x226/0x4a0 [ 1098.343884][ T2213] genl_rcv+0x28/0x40 [ 1098.348408][ T2213] netlink_unicast+0x7bb/0x940 [ 1098.353720][ T2213] netlink_sendmsg+0x813/0xb40 [ 1098.359038][ T2213] sock_sendmsg_nosec+0x13a/0x180 [ 1098.364620][ T2213] ____sys_sendmsg+0x54e/0x850 [ 1098.369940][ T2213] ___sys_sendmsg+0x2a5/0x360 [ 1098.375159][ T2213] __x64_sys_sendmsg+0x1b1/0x290 [ 1098.380750][ T2213] do_syscall_64+0x174/0x580 [ 1098.385904][ T2213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.392343][ T2213] [ 1098.392343][ T2213] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1098.400025][ T2213] __mutex_lock+0x19d/0x1550 [ 1098.405186][ T2213] nbd_queue_rq+0x373/0x1150 [ 1098.410396][ T2213] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1098.416558][ T2213] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1098.423509][ T2213] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1098.430050][ T2213] blk_mq_run_work_fn+0x16c/0x300 [ 1098.435647][ T2213] process_scheduled_works+0xa8e/0x14e0 [ 1098.441785][ T2213] worker_thread+0xa47/0xfb0 [ 1098.447117][ T2213] kthread+0x388/0x470 [ 1098.451758][ T2213] ret_from_fork+0x514/0xb70 [ 1098.456912][ T2213] ret_from_fork_asm+0x1a/0x30 [ 1098.462227][ T2213] [ 1098.462227][ T2213] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1098.469472][ T2213] __mutex_lock+0x19d/0x1550 [ 1098.474630][ T2213] nbd_queue_rq+0xc1/0x1150 [ 1098.479688][ T2213] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1098.485789][ T2213] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1098.492765][ T2213] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1098.499390][ T2213] blk_mq_run_work_fn+0x16c/0x300 [ 1098.504972][ T2213] process_scheduled_works+0xa8e/0x14e0 [ 1098.511278][ T2213] worker_thread+0xa47/0xfb0 [ 1098.516517][ T2213] kthread+0x388/0x470 [ 1098.521251][ T2213] ret_from_fork+0x514/0xb70 [ 1098.526442][ T2213] ret_from_fork_asm+0x1a/0x30 [ 1098.531780][ T2213] [ 1098.531780][ T2213] -> #0 (set->srcu){.+.+}-{0:0}: [ 1098.538956][ T2213] __lock_acquire+0x1520/0x2cf0 [ 1098.544378][ T2213] lock_sync+0x9d/0x120 [ 1098.549103][ T2213] __synchronize_srcu+0xc9/0x2f0 [ 1098.554603][ T2213] elevator_switch+0x1e8/0x7b0 [ 1098.559931][ T2213] elevator_change+0x2fa/0x480 [ 1098.565265][ T2213] elevator_set_default+0x375/0x440 [ 1098.571203][ T2213] blk_register_queue+0x3f3/0x4e0 [ 1098.576979][ T2213] __add_disk+0x6cb/0xe30 [ 1098.581867][ T2213] add_disk_fwnode+0x100/0x3a0 [ 1098.587188][ T2213] nbd_dev_add+0x733/0xb60 [ 1098.592165][ T2213] nbd_genl_connect+0x992/0x1c10 [ 1098.597660][ T2213] genl_family_rcv_msg_doit+0x233/0x340 [ 1098.603760][ T2213] genl_rcv_msg+0x614/0x7a0 [ 1098.608817][ T2213] netlink_rcv_skb+0x226/0x4a0 [ 1098.614141][ T2213] genl_rcv+0x28/0x40 [ 1098.618705][ T2213] netlink_unicast+0x7bb/0x940 [ 1098.624028][ T2213] netlink_sendmsg+0x813/0xb40 [ 1098.629358][ T2213] sock_sendmsg_nosec+0x13a/0x180 [ 1098.634944][ T2213] ____sys_sendmsg+0x54e/0x850 [ 1098.640269][ T2213] ___sys_sendmsg+0x2a5/0x360 [ 1098.645649][ T2213] __x64_sys_sendmsg+0x1b1/0x290 [ 1098.651145][ T2213] do_syscall_64+0x174/0x580 [ 1098.656327][ T2213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.662949][ T2213] [ 1098.662949][ T2213] other info that might help us debug this: [ 1098.662949][ T2213] [ 1098.673212][ T2213] Chain exists of: [ 1098.673212][ T2213] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 1098.673212][ T2213] [ 1098.687004][ T2213] Possible unsafe locking scenario: [ 1098.687004][ T2213] [ 1098.694558][ T2213] CPU0 CPU1 [ 1098.700010][ T2213] ---- ---- [ 1098.705444][ T2213] lock(&q->elevator_lock); [ 1098.710077][ T2213] lock(&q->q_usage_counter(io)#50); [ 1098.718030][ T2213] lock(&q->elevator_lock); [ 1098.725350][ T2213] sync(set->srcu); [ 1098.729361][ T2213] [ 1098.729361][ T2213] *** DEADLOCK *** [ 1098.729361][ T2213] [ 1098.737527][ T2213] 6 locks held by syz.1.7312/2213: [ 1098.742676][ T2213] #0: ffffffff9009ebe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1098.750987][ T2213] #1: ffffffff9009ea20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1098.760010][ T2213] #2: ffff8880686fd1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1098.770436][ T2213] #3: ffff88802a390f60 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1098.780340][ T2213] #4: ffff88802a3909e8 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1098.791315][ T2213] #5: ffff88802a390ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1098.801294][ T2213] [ 1098.801294][ T2213] stack backtrace: [ 1098.807305][ T2213] CPU: 0 UID: 0 PID: 2213 Comm: syz.1.7312 Not tainted syzkaller #0 PREEMPT(full) [ 1098.807329][ T2213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1098.807341][ T2213] Call Trace: [ 1098.807349][ T2213] [ 1098.807358][ T2213] dump_stack_lvl+0xe8/0x150 [ 1098.807390][ T2213] print_circular_bug+0x2e1/0x300 [ 1098.807413][ T2213] check_noncircular+0x12e/0x150 [ 1098.807434][ T2213] __lock_acquire+0x1520/0x2cf0 [ 1098.807461][ T2213] ? check_noncircular+0xda/0x150 [ 1098.807482][ T2213] ? lockdep_unlock+0x5d/0xd0 [ 1098.807504][ T2213] ? __lock_acquire+0x13e8/0x2cf0 [ 1098.807533][ T2213] ? __synchronize_srcu+0xb5/0x2f0 [ 1098.807564][ T2213] lock_sync+0x9d/0x120 [ 1098.807588][ T2213] ? __synchronize_srcu+0xb5/0x2f0 [ 1098.807616][ T2213] __synchronize_srcu+0xc9/0x2f0 [ 1098.807641][ T2213] ? __pfx___synchronize_srcu+0x10/0x10 [ 1098.807666][ T2213] ? do_raw_spin_lock+0x12b/0x2f0 [ 1098.807691][ T2213] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1098.807783][ T2213] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1098.807818][ T2213] ? synchronize_srcu+0x20a/0x260 [ 1098.807844][ T2213] elevator_switch+0x1e8/0x7b0 [ 1098.807870][ T2213] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1098.807889][ T2213] elevator_change+0x2fa/0x480 [ 1098.807915][ T2213] ? do_raw_spin_unlock+0xf5/0x210 [ 1098.807937][ T2213] elevator_set_default+0x375/0x440 [ 1098.807965][ T2213] ? __pfx_elevator_set_default+0x10/0x10 [ 1098.807995][ T2213] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1098.808051][ T2213] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1098.808121][ T2213] blk_register_queue+0x3f3/0x4e0 [ 1098.808143][ T2213] __add_disk+0x6cb/0xe30 [ 1098.808167][ T2213] add_disk_fwnode+0x100/0x3a0 [ 1098.808189][ T2213] nbd_dev_add+0x733/0xb60 [ 1098.808211][ T2213] ? __pfx_nbd_dev_add+0x10/0x10 [ 1098.808237][ T2213] ? bpf_lsm_capable+0x9/0x20 [ 1098.808262][ T2213] ? security_capable+0x7e/0x2c0 [ 1098.808309][ T2213] ? radix_tree_lookup+0x25c/0x290 [ 1098.808355][ T2213] nbd_genl_connect+0x992/0x1c10 [ 1098.808377][ T2213] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1098.808395][ T2213] ? rcu_is_watching+0x15/0xb0 [ 1098.808412][ T2213] ? trace_kmalloc+0x2a/0xf0 [ 1098.808437][ T2213] ? __kmalloc_noprof+0x396/0x720 [ 1098.808462][ T2213] ? __nla_parse+0x40/0x60 [ 1098.808490][ T2213] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1098.808509][ T2213] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1098.808531][ T2213] genl_family_rcv_msg_doit+0x233/0x340 [ 1098.808558][ T2213] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1098.808581][ T2213] ? __lock_acquire+0x683/0x2cf0 [ 1098.808611][ T2213] genl_rcv_msg+0x614/0x7a0 [ 1098.808630][ T2213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.808646][ T2213] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1098.808670][ T2213] netlink_rcv_skb+0x226/0x4a0 [ 1098.808693][ T2213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.808711][ T2213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1098.808740][ T2213] ? down_read+0x2be/0x330 [ 1098.808769][ T2213] genl_rcv+0x28/0x40 [ 1098.808783][ T2213] netlink_unicast+0x7bb/0x940 [ 1098.808809][ T2213] netlink_sendmsg+0x813/0xb40 [ 1098.808837][ T2213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.808863][ T2213] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1098.808885][ T2213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.808908][ T2213] sock_sendmsg_nosec+0x13a/0x180 [ 1098.808938][ T2213] ____sys_sendmsg+0x54e/0x850 [ 1098.808964][ T2213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.808990][ T2213] ? import_iovec+0x73/0xa0 [ 1098.809009][ T2213] ___sys_sendmsg+0x2a5/0x360 [ 1098.809030][ T2213] ? __lock_acquire+0x683/0x2cf0 [ 1098.809059][ T2213] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.809083][ T2213] ? futex_wait+0x2a2/0x390 [ 1098.809124][ T2213] ? __fget_files+0x2a/0x420 [ 1098.809149][ T2213] ? __fget_files+0x3a2/0x420 [ 1098.809178][ T2213] __x64_sys_sendmsg+0x1b1/0x290 [ 1098.809202][ T2213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.809234][ T2213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.809252][ T2213] do_syscall_64+0x174/0x580 [ 1098.809277][ T2213] ? trace_irq_disable+0x3b/0x140 [ 1098.809301][ T2213] ? clear_bhb_loop+0x40/0x90 [ 1098.809321][ T2213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.809339][ T2213] RIP: 0033:0x7fa264b9e019 [ 1098.809357][ T2213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.809373][ T2213] RSP: 002b:00007fa26599f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.809394][ T2213] RAX: ffffffffffffffda RBX: 00007fa264e26090 RCX: 00007fa264b9e019 [ 1098.809408][ T2213] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000011 [ 1098.809421][ T2213] RBP: 00007fa264c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1098.809432][ T2213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.809443][ T2213] R13: 00007fa264e26128 R14: 00007fa264e26090 R15: 00007fff1981d778 [ 1098.809465][ T2213] [ 1099.345061][ T2213] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7312'. [ 1099.375288][ T1369] block nbd64: NBD_DISCONNECT [ 1099.513625][ T1277] udevd[1277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1100.571882][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 20 seconds [ 1100.582790][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 20 seconds [ 1100.593808][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 20 seconds [ 1100.604759][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 20 seconds [ 1103.930533][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 22 seconds [ 1103.941498][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 22 seconds [ 1103.952650][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 22 seconds [ 1103.963640][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 22 seconds [ 1107.301053][ T1597] block nbd7: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 24 seconds [ 1107.311973][ T1597] block nbd7: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 24 seconds [ 1107.323026][ T1597] block nbd7: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 24 seconds [ 1107.334729][ T1597] block nbd7: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 24 seconds