last executing test programs: 10.874801976s ago: executing program 1 (id=8783): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x2000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) unshare(0x600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, 0x0, 0x0, 0x4}, 0x20) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r3, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="a5", 0x1}], 0x1, 0x0, 0x0, 0x8800}}], 0x1, 0x4008000) sendmsg$alg(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x805) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x24}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={r7, 0x4c, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5875c067}]}, &(0x7f0000000200)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x80000001, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) r13 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r13, 0x111, 0x5, 0x923, 0x4) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TUNSETFILTEREBPF(r14, 0x800454e1, &(0x7f0000000080)=r12) 10.546757593s ago: executing program 1 (id=8789): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xd0256000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010024bd70e1f4dbdf25030000000c00018008001c00", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r11, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe71, 0x4b5734940ca4ac9e}}, 0x20) r12 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r13 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000000c0), 0x12) pread64(r13, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) readv(r12, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4) 9.899526849s ago: executing program 1 (id=8797): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x208, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c4}, 0x4008004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000015c0)=[{&(0x7f0000000340)="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", 0x44b}], 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0x5f, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x2f00, 0xfffffffe, 0xb}}) 5.830906597s ago: executing program 2 (id=8824): r0 = socket(0x400000000010, 0x3, 0x0) unshare(0x680) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xb, 0xffff}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xda, 0x5f, 0x3, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0x101, 0xf4af]}}, {{0x1c, 0x1, {0xf7, 0x3, 0xcf, 0x1000, 0x2, 0x0, 0xe, 0x5}}, {0xe, 0x2, [0x4, 0x2, 0x2, 0x6b0, 0x0]}}, {{0x1c, 0x1, {0x7, 0x7, 0x401, 0xa, 0x1, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x7ff, 0x2, 0x4, 0xba1]}}, {{0x1c, 0x1, {0x3, 0x8, 0x2, 0xb56, 0x2, 0x8, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0x9, 0x3a1, 0x63b2, 0xfffb, 0x2, 0x5]}}, {{0x1c, 0x1, {0x9, 0x6, 0x7, 0x9, 0x2, 0x0, 0x80000001, 0x4}}, {0xc, 0x2, [0x3, 0xffff, 0x1, 0x9]}}, {{0x1c, 0x1, {0x0, 0x6, 0x9, 0x9, 0x0, 0x1, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x6, 0x3e1, 0x0, 0x7fff, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x808}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xfff, @any, 0x7}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$int_in(r6, 0x5421, &(0x7f0000002640)=0x9) listen(r6, 0x1) accept4(r6, 0x0, 0x0, 0x80800) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r5) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x8, @any, 0xfdff}, 0xe) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000e5e2deb90c0000000c0000000500000002007000c9ed1e1c36632783e100000000"], &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff}, 0x28) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) socket$kcm(0x10, 0x2, 0x0) 5.318873699s ago: executing program 2 (id=8830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000001020300000000000000000001000001a1fc09400001000013000b0063616c6c666f7277617264696e670000"], 0x30}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x80) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x9007}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, 0x0) 5.168180011s ago: executing program 3 (id=8831): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.952888621s ago: executing program 3 (id=8834): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a320000040009000100"], 0xa8}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@mpls_getroute={0xa0, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x4cb1}, {0x1, 0x0, 0x1}, {0x9}, {0x8, 0x0, 0x1}, {0x39fe}, {0x1}, {0x1, 0x0, 0x1}, {0xb}, {0x3, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xc9, 0x0, 0x1}, {0x9}, {0x7ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}, {0x2}, {0x3bd2}, {0x9}, {0x3, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xfffd2}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0xffff7}, {0x4, 0x0, 0x1}]}]}, 0xa0}}, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000200)=""/47, 0x2f}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x10103) 4.762423905s ago: executing program 3 (id=8835): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x6, 0x100, 0xd00a, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xb}, 0x50) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r2, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x869, 0xfffffff1, 0x0, 0x2, r5, 0x6, '\x00', r2, r5, 0x0, 0x1, 0x1, 0xa}, 0x50) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x10000, @vifc_lcl_addr=@broadcast, @remote}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x11}]}}}]}, 0x44}}, 0x20040040) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) 4.249526744s ago: executing program 2 (id=8838): bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc8}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0xe, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.173905566s ago: executing program 2 (id=8840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 4.173649402s ago: executing program 2 (id=8841): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x4000000}, 0x0) 4.05946759s ago: executing program 2 (id=8844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x5}}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xce}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10051}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x98, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x3b, 0x67}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x61}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x8}}, @TCA_BPF_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6f05}, @TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x98}, 0x1, 0x0, 0x0, 0x848}, 0x200040c4) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x21}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) 3.664331303s ago: executing program 0 (id=8846): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00", @ANYRES32], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x44}}, 0x0) 2.958432364s ago: executing program 0 (id=8849): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYBLOB="1110a2b6ce2e33fbf7957f8aeed0a69529272b648db6126dac168ba17a0e76ec4de9de975474a8ac9e66a4a0242cd3e40d618cb2caaaafd4df39a3e581cc6df7e821787f8b89277cddb3f59a578c9f71b70d97012c944ec1d444f155a87ed86aa444285c0839e9ac112f7caae917119996b24813170cb82ee1759c4a215789ccd026ffaf573dab5b377132d6f2c91f084f398dade66a1ec942fd8712983972ab7b849d3cd0ef4af9253626e8a96ed007a178e26f4ce6754837593694a1782b53f026988f74f8dde8a21b00232e9c533d65bec7937ae9b972b3a52fe664334f9a3de511", @ANYRESDEC], 0x68}}, 0x4000054) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100), 0x1000000000000105, 0x0, 0x0, 0x44011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) getpeername$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10}, {0xffff, 0xb}, {0xfff2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x2c}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4000004, 0xd, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@migrate={0x5c, 0x21, 0x10, 0x70bd2a, 0x25dfdbfc, {{@in=@empty, @in=@empty, 0x4e23, 0x7, 0x4e20, 0x101, 0xa, 0x80, 0xa0, 0x3b, r8}, 0x6e6bb3}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008040}, 0xc001) 2.016325065s ago: executing program 4 (id=8853): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r1, &(0x7f0000000100)=""/41, 0x29) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000000) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) ioctl$sock_netdev_private(r0, 0x8922, &(0x7f0000000040)="963a") 1.954922925s ago: executing program 0 (id=8854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x100003}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xff, 0x10000000, 0x5, 0x9, 0xffffffffffff07a6}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000480)="bad330752181510000316f3a277f95", 0xf, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r11, 0x1, 0xda}, 0x14) close(r4) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.605861304s ago: executing program 3 (id=8855): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x40) close(r2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 1.512173621s ago: executing program 0 (id=8856): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32=r5, @ANYBLOB="0b000080976bff0868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote, 0x4e23, 0x7, 0x4e20, 0x400, 0xa, 0x80, 0x90, 0x3c, 0x0, r5}, {0x4, 0x0, 0xfffffffffffffff8, 0x5, 0x80000001, 0xd, 0x3, 0x2}, {0x4, 0xfffffffffffffffc, 0x3b, 0x36a8}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d5, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x3, 0x3, 0x0, 0x2, 0x9, 0x81}}, 0xe8) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) r7 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="2d39163abfef84", 0x7}], 0x1}}, {{&(0x7f0000000ec0)={0xa, 0x4e23, 0x200, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=[@rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x1, 0x1}}}], 0x18}}], 0x2, 0x4040005) 1.385631119s ago: executing program 1 (id=8857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f00000001c0)=r0}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000240)) 1.220089683s ago: executing program 4 (id=8858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000017900008500000029000000180100002020702500000000082020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c80da1c7850000009b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 1.184892812s ago: executing program 0 (id=8859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000091}, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr'], 0xa) write$cgroup_devices(r3, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc429}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) unshare(0x400) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 992.234315ms ago: executing program 4 (id=8860): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="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", 0xfd}], 0x1}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x180060}, 0x1c, 0x0}}], 0x2, 0x4040005) 948.085244ms ago: executing program 3 (id=8861): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001ddcd0a4f9bdb7ac00"/28], 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) bind(0xffffffffffffffff, &(0x7f0000000240)=@nfc_llcp={0x27, r4, 0x0, 0x2, 0x1, 0x4, "0b45deb80e268743cc49430ca6e1d16d9e010385e77e33c29f2ee092d1b9acf11fdf6ffcd68a30f338320c8f2ef483c19a0b362af4a1742099d868d7c6a74e", 0x31}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "0b8f"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x193, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) 819.299806ms ago: executing program 4 (id=8862): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000004c0)={0x1, 0x7}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0xfc, 0x11, 0xc8, 0x5, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000000000000002000000850000009d0000009400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 572.085229ms ago: executing program 3 (id=8863): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x2b, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x50}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff00000000feffff0000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 423.544811ms ago: executing program 4 (id=8864): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6, 0x2}, 0x20) r1 = socket(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @random="000100", @broadcast}}}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="180870cf2b0cff5fad2acd2dff0000000000002100000000008596a0000600200018000000276d76f98551c6b0693afa8da521d460e56ea57fbf851a1275e088293f6b03238605b7b832d01543f6775ce08e5f261f98221e7490b1b4ca92adaca2bc54b1f2b882f343e6abb017452a9d3e6886e7628001b4c750c4e7b39e14e40df501383f4329b2d2ca0000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 298.614607ms ago: executing program 1 (id=8865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002780)={@fallback, 0xffffffffffffffff, 0xb, 0x21}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x2}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30", @ANYRESDEC=r2], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x4c040) 184.013196ms ago: executing program 0 (id=8866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8320081003c0008004500002040000000032f9078ac14140ae05d5d08"], 0x36) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000600501002a790101094005004585004e00670000000290787f0000010000000017099078e000000287e421c624ebcf45e02467459d3e56183ff8eabb8d477f17ae508bb4f97008e14b0545e3299065c21e812defd5372d945ca8"], 0x5c) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a000dff00000000000000000400008008000380cff80291"], 0x1c}], 0x1}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0xffffffffffffff77, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0xfffc}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)) 108.516184ms ago: executing program 4 (id=8867): r0 = epoll_create(0x3ff) (async) r1 = epoll_create1(0x80000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x4008008) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) close(0x3) 0s ago: executing program 1 (id=8868): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2, 0x4}, 0x1c) (async) r2 = accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x7}, 0x4) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x64, 0x0, 0x10, 0x2, 0x0, @remote, @local}, {0x17, 0x9, 0x0, @local}}}}}, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) kernel console output (not intermixed with test programs): 5243][T31270] RAX: ffffffffffffffda RBX: 00007f7de5415fa0 RCX: 00007f7de519c799 [ 861.755260][T31270] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 861.755275][T31270] RBP: 00007f7de60e2090 R08: 0000000000000000 R09: 0000000000000000 [ 861.755289][T31270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.755303][T31270] R13: 00007f7de5416038 R14: 00007f7de5415fa0 R15: 00007ffdbd8e3a68 [ 861.755338][T31270] [ 862.351298][T31239] wg1 speed is unknown, defaulting to 1000 [ 862.559520][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.831056][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6950'. [ 862.970032][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6953'. [ 863.398299][T31295] gre0 speed is unknown, defaulting to 1000 [ 863.762665][T31336] netlink: 'syz.1.6958': attribute type 1 has an invalid length. [ 863.774672][T31334] netlink: 'syz.1.6958': attribute type 1 has an invalid length. [ 863.852974][T31341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6956'. [ 863.863456][T31334] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 863.864659][T31336] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 863.880840][T31337] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 863.999925][T31295] wg1 speed is unknown, defaulting to 1000 [ 864.111050][T31341] syzkaller1: entered promiscuous mode [ 864.121307][T31341] syzkaller1: entered allmulticast mode [ 865.219525][T31361] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6962'. [ 865.251329][T31361] tipc: Enabling of bearer rejected, failed to enable media [ 865.720945][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6965'. [ 865.783815][T31371] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6965'. [ 865.795755][T31371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6965'. [ 866.272756][T31377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6963'. [ 866.493567][T31383] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 866.513985][T31383] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 866.598567][T31385] xt_bpf: check failed: parse error [ 866.642357][T31385] lo speed is unknown, defaulting to 1000 [ 866.658868][T31385] lo speed is unknown, defaulting to 1000 [ 866.684699][T31385] lo speed is unknown, defaulting to 1000 [ 866.761380][T31385] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 866.822466][T31385] lo speed is unknown, defaulting to 1000 [ 866.851250][T31385] lo speed is unknown, defaulting to 1000 [ 866.872225][T31385] lo speed is unknown, defaulting to 1000 [ 866.901509][T31385] lo speed is unknown, defaulting to 1000 [ 866.930557][T31385] lo speed is unknown, defaulting to 1000 [ 866.938326][T31385] lo speed is unknown, defaulting to 1000 [ 866.991049][T31385] lo speed is unknown, defaulting to 1000 [ 866.998823][T31385] lo speed is unknown, defaulting to 1000 [ 867.031646][T31385] lo speed is unknown, defaulting to 1000 [ 867.150426][T31396] netlink: 'syz.1.6972': attribute type 4 has an invalid length. [ 867.344066][T31402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6975'. [ 867.391990][T31406] netlink: 'syz.0.6976': attribute type 21 has an invalid length. [ 867.459164][T31406] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6976'. [ 867.529231][T31406] netlink: 'syz.0.6976': attribute type 5 has an invalid length. [ 867.537090][T31406] netlink: 'syz.0.6976': attribute type 6 has an invalid length. [ 867.618968][T31406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6976'. [ 867.886556][T31423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6981'. [ 867.905619][T31401] FAULT_INJECTION: forcing a failure. [ 867.905619][T31401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.931443][T31401] CPU: 0 UID: 0 PID: 31401 Comm: syz.3.6974 Not tainted syzkaller #0 PREEMPT(full) [ 867.931473][T31401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.931487][T31401] Call Trace: [ 867.931496][T31401] [ 867.931506][T31401] dump_stack_lvl+0xe8/0x150 [ 867.931543][T31401] should_fail_ex+0x412/0x560 [ 867.931578][T31401] _copy_from_user+0x2d/0xb0 [ 867.931614][T31401] xt_copy_counters+0x199/0x4c0 [ 867.931652][T31401] ? __pfx_xt_copy_counters+0x10/0x10 [ 867.931688][T31401] ? apparmor_capable+0x126/0x170 [ 867.931725][T31401] ? bpf_lsm_capable+0x9/0x20 [ 867.931756][T31401] ? security_capable+0x7e/0x2c0 [ 867.931791][T31401] do_arpt_set_ctl+0x1c2/0x1050 [ 867.931827][T31401] ? __mutex_trylock_common+0x158/0x260 [ 867.931864][T31401] ? __pfx___mutex_trylock_common+0x10/0x10 [ 867.931899][T31401] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 867.931938][T31401] ? trace_contention_end+0x3d/0x150 [ 867.931983][T31401] ? nf_setsockopt+0x221/0x290 [ 867.932012][T31401] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 867.932051][T31401] ? __pfx___mutex_lock+0x10/0x10 [ 867.932084][T31401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 867.932125][T31401] ? __pfx_aa_sk_perm+0x10/0x10 [ 867.932159][T31401] nf_setsockopt+0x26f/0x290 [ 867.932191][T31401] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 867.932224][T31401] do_sock_setsockopt+0x17c/0x1b0 [ 867.932263][T31401] __x64_sys_setsockopt+0x13d/0x1b0 [ 867.932303][T31401] do_syscall_64+0x14d/0xf80 [ 867.932335][T31401] ? trace_irq_disable+0x3b/0x150 [ 867.932365][T31401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.932388][T31401] ? clear_bhb_loop+0x40/0x90 [ 867.932416][T31401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.932438][T31401] RIP: 0033:0x7fc5bb59c799 [ 867.932459][T31401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.932478][T31401] RSP: 002b:00007fc5bc4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 867.932502][T31401] RAX: ffffffffffffffda RBX: 00007fc5bb815fa0 RCX: 00007fc5bb59c799 [ 867.932519][T31401] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000005 [ 867.932533][T31401] RBP: 00007fc5bc4be090 R08: 0000000000000068 R09: 0000000000000000 [ 867.932548][T31401] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 867.932562][T31401] R13: 00007fc5bb816038 R14: 00007fc5bb815fa0 R15: 00007fff6be64ce8 [ 867.932597][T31401] [ 868.434467][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'. [ 868.490520][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'. [ 868.586144][T31430] syzkaller0: entered promiscuous mode [ 868.592033][T31430] syzkaller0: entered allmulticast mode [ 868.609659][T31430] net_ratelimit: 68 callbacks suppressed [ 868.609681][T31430] 0: reclassify loop, rule prio 0, protocol 800 [ 868.661263][T31438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6986'. [ 868.706659][T31430] vxcan1: entered promiscuous mode [ 868.943153][T31451] netlink: 'syz.2.6991': attribute type 13 has an invalid length. [ 868.999246][T31451] netlink: 'syz.2.6991': attribute type 27 has an invalid length. [ 869.051375][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 869.095394][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'. [ 869.254185][T31464] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 869.397330][T31481] gre0 speed is unknown, defaulting to 1000 [ 869.641126][T31488] netlink: 'syz.3.7000': attribute type 2 has an invalid length. [ 869.672065][T31488] !: entered promiscuous mode [ 869.684659][T31488] netlink: 'syz.3.7000': attribute type 2 has an invalid length. [ 870.053764][T31481] wg1 speed is unknown, defaulting to 1000 [ 870.121468][T31481] lo speed is unknown, defaulting to 1000 [ 870.422927][T31482] tipc: Enabling of bearer rejected, failed to enable media [ 870.632044][T31531] netlink: 'syz.1.7014': attribute type 9 has an invalid length. [ 871.048383][T31550] gre0 speed is unknown, defaulting to 1000 [ 871.360994][T31550] wg1 speed is unknown, defaulting to 1000 [ 871.380289][T31550] lo speed is unknown, defaulting to 1000 [ 873.605795][T31533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 873.735360][T31574] team0: Port device syz_tun removed [ 873.790906][T31574] team0: Port device bond0 removed [ 873.797739][T31579] __nla_validate_parse: 7 callbacks suppressed [ 873.797759][T31579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7024'. [ 873.821308][T31577] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7023'. [ 873.843147][T31574] bond0: (slave bond_slave_0): Releasing backup interface [ 873.858828][T31574] bond0: (slave bond_slave_1): Releasing backup interface [ 873.878650][T31574] team0: Port device team_slave_0 removed [ 873.893097][T31574] team0: Port device team_slave_1 removed [ 873.900278][T31574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.907698][T31574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.917593][T31574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.926311][T31574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.941015][T31574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 873.957777][T31578] team0: No ports can be present during mode change [ 874.208945][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7031'. [ 874.212858][T31600] netlink: 'syz.0.7030': attribute type 96 has an invalid length. [ 874.404430][T31615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7036'. [ 874.531138][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7036'. [ 874.991014][T31642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7045'. [ 875.004153][T31641] gre0 speed is unknown, defaulting to 1000 [ 875.438658][T31656] Set syz1 is full, maxelem 0 reached [ 875.546266][T31669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7052'. [ 875.672225][T31669] veth1_to_hsr: entered promiscuous mode [ 875.678108][T31669] macvtap1: entered promiscuous mode [ 875.739495][T31669] macvtap1: entered allmulticast mode [ 875.744960][T31669] veth1_to_hsr: entered allmulticast mode [ 875.781979][T31641] wg1 speed is unknown, defaulting to 1000 [ 875.810704][T31641] lo speed is unknown, defaulting to 1000 [ 875.948115][T31686] syzkaller1: entered promiscuous mode [ 875.958341][T31686] syzkaller1: entered allmulticast mode [ 876.471459][T31715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7064'. [ 876.494075][T31715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7064'. [ 876.522236][T31715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7064'. [ 877.049642][T31736] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 877.064085][T31736] bond2 (unregistering): Released all slaves [ 877.255585][T31748] tipc: Started in network mode [ 877.261258][T31748] tipc: Node identity 080211000001, cluster identity 4711 [ 877.273297][T31748] tipc: Enabled bearer , priority 0 [ 878.024633][ T30] audit: type=1800 audit(1773751604.472:13): pid=31774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7080" name="memory.events" dev="tmpfs" ino=1133 res=0 errno=0 [ 878.466589][T31819] netlink: 'syz.1.7091': attribute type 13 has an invalid length. [ 878.503395][T31819] netlink: 'syz.1.7091': attribute type 17 has an invalid length. [ 879.151066][T31811] veth1_to_hsr (unregistering): left allmulticast mode [ 879.269137][T31811] hsr_slave_1 (unregistering): left promiscuous mode [ 879.309354][ T5939] tipc: Node number set to 134418688 [ 879.404562][T31819] sit0: left promiscuous mode [ 879.550326][T31819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.574315][T31819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.626884][T31849] __nla_validate_parse: 10 callbacks suppressed [ 879.626908][T31849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7098'. [ 879.769345][T31853] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.7098'. [ 879.778711][T31853] tc_dump_action: action bad kind [ 880.010603][T31874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7104'. [ 880.215652][T31883] netlink: 'syz.4.7107': attribute type 3 has an invalid length. [ 880.234277][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7107'. [ 880.374094][T31889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7110'. [ 880.408177][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7110'. [ 880.417806][T31889] netlink: 'syz.2.7110': attribute type 5 has an invalid length. [ 880.440456][ T1101] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.451085][T31889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7110'. [ 880.460652][ T1101] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.472003][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7110'. [ 880.501809][ T1101] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.519597][T31889] netlink: 'syz.2.7110': attribute type 5 has an invalid length. [ 880.527534][ T1101] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.538330][T31957] gre0 speed is unknown, defaulting to 1000 [ 881.716011][T31970] x_tables: duplicate underflow at hook 1 [ 881.815480][T31975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7132'. [ 881.890778][T31978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.985632][T31978] syzkaller1: entered promiscuous mode [ 881.996454][T31978] syzkaller1: entered allmulticast mode [ 882.201365][T31957] wg1 speed is unknown, defaulting to 1000 [ 882.221783][T31957] lo speed is unknown, defaulting to 1000 [ 882.550322][T32013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7142'. [ 883.178948][T32040] bond0: Caught tx_queue_len zero misconfig [ 883.408637][T32053] bridge0: entered promiscuous mode [ 883.521026][T32060] netlink: 'syz.1.7158': attribute type 1 has an invalid length. [ 883.673412][T32063] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 883.720546][T32063] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 883.814583][T32064] tunl0: Caught tx_queue_len zero misconfig [ 883.833755][T32064] sch_tbf: burst 2 is lower than device tunl0 mtu (1536) ! [ 884.159661][T32081] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 884.232083][T32089] FAULT_INJECTION: forcing a failure. [ 884.232083][T32089] name failslab, interval 1, probability 0, space 0, times 0 [ 884.287581][T32089] CPU: 0 UID: 0 PID: 32089 Comm: syz.4.7167 Not tainted syzkaller #0 PREEMPT(full) [ 884.287614][T32089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.287628][T32089] Call Trace: [ 884.287637][T32089] [ 884.287647][T32089] dump_stack_lvl+0xe8/0x150 [ 884.287684][T32089] should_fail_ex+0x412/0x560 [ 884.287719][T32089] should_failslab+0xa8/0x100 [ 884.287750][T32089] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 884.287773][T32089] ? net_generic+0x1e/0x240 [ 884.287810][T32089] ? __alloc_skb+0x1d0/0x7d0 [ 884.287848][T32089] __alloc_skb+0x1d0/0x7d0 [ 884.287879][T32089] ? net_generic+0x1e/0x240 [ 884.287911][T32089] tipc_msg_create+0x51/0x4d0 [ 884.287943][T32089] ? __tipc_shutdown+0x975/0x1540 [ 884.287974][T32089] __tipc_shutdown+0xce3/0x1540 [ 884.288026][T32089] ? __pfx___tipc_shutdown+0x10/0x10 [ 884.288055][T32089] ? __pfx_woken_wake_function+0x10/0x10 [ 884.288084][T32089] ? tipc_release+0xc4/0x25b0 [ 884.288114][T32089] ? __local_bh_enable_ip+0xd0/0x130 [ 884.288150][T32089] tipc_release+0x2fa/0x25b0 [ 884.288190][T32089] ? __pfx_tipc_release+0x10/0x10 [ 884.288218][T32089] ? down_write+0x16d/0x200 [ 884.288250][T32089] ? __pfx_down_write+0x10/0x10 [ 884.288270][T32089] ? locks_remove_posix+0x14f/0x6d0 [ 884.288306][T32089] sock_close+0xc3/0x240 [ 884.288334][T32089] ? __pfx_sock_close+0x10/0x10 [ 884.288360][T32089] __fput+0x44f/0xa70 [ 884.288405][T32089] fput_close_sync+0x11f/0x240 [ 884.288438][T32089] ? __pfx_fput_close_sync+0x10/0x10 [ 884.288490][T32089] __x64_sys_close+0x7e/0x110 [ 884.288525][T32089] do_syscall_64+0x14d/0xf80 [ 884.288557][T32089] ? trace_irq_disable+0x3b/0x150 [ 884.288589][T32089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.288613][T32089] ? clear_bhb_loop+0x40/0x90 [ 884.288641][T32089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.288663][T32089] RIP: 0033:0x7fa55619c799 [ 884.288684][T32089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.288704][T32089] RSP: 002b:00007fa557020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 884.288747][T32089] RAX: ffffffffffffffda RBX: 00007fa556415fa0 RCX: 00007fa55619c799 [ 884.288764][T32089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 884.288784][T32089] RBP: 00007fa557020090 R08: 0000000000000000 R09: 0000000000000000 [ 884.288798][T32089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.288811][T32089] R13: 00007fa556416038 R14: 00007fa556415fa0 R15: 00007ffcb4d869c8 [ 884.288847][T32089] [ 884.716433][T32095] bond2: entered promiscuous mode [ 884.722107][T32095] bond2: entered allmulticast mode [ 884.727790][T32095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.789815][T32100] __nla_validate_parse: 4 callbacks suppressed [ 884.789839][T32100] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7170'. [ 885.591978][T32127] tipc: Enabled bearer , priority 14 [ 885.634552][T32127] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7178'. [ 885.665089][T32127] 0X: renamed from caif0 [ 885.690920][T32127] tipc: Disabling bearer [ 885.712503][T32127] 0X: entered allmulticast mode [ 885.738214][T32127] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 885.892535][T32138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7180'. [ 886.059897][T32142] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7182'. [ 886.080533][T32142] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7182'. [ 886.875645][T32178] netlink: 'syz.4.7191': attribute type 10 has an invalid length. [ 886.897395][T32181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.912332][T32181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.073678][T32181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.081608][T32181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.094529][T32181] batman_adv: batadv0: Removing interface: gretap1 [ 887.106943][T32181] batman_adv: batadv0: Removing interface: ipvlan2 [ 887.133295][T32178] bond0: (slave wlan1): Opening slave failed [ 887.859849][T32209] netlink: 'syz.2.7199': attribute type 6 has an invalid length. [ 887.894913][T32209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7199'. [ 887.933800][T32209] lo: Caught tx_queue_len zero misconfig [ 887.968376][T32218] netlink: 'syz.3.7200': attribute type 58 has an invalid length. [ 888.058260][T32222] syzkaller0: entered promiscuous mode [ 888.065620][T32222] syzkaller0: entered allmulticast mode [ 888.138927][T32225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7202'. [ 888.206806][T32225] vlan0: entered promiscuous mode [ 888.219258][T32225] bridge0: entered promiscuous mode [ 888.346804][T32236] netlink: 'syz.4.7204': attribute type 1 has an invalid length. [ 888.385259][T32236] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7204'. [ 888.407314][T32236] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7204'. [ 888.429386][T32236] netlink: 658 bytes leftover after parsing attributes in process `syz.4.7204'. [ 888.452707][T32244] syzkaller0: entered promiscuous mode [ 888.458239][T32244] syzkaller0: entered allmulticast mode [ 888.773961][T32264] netlink: 'syz.2.7211': attribute type 13 has an invalid length. [ 889.204221][T32282] tipc: Started in network mode [ 889.209618][T32282] tipc: Node identity ac14140f, cluster identity 4711 [ 889.225920][T32282] tipc: New replicast peer: 255.255.255.255 [ 889.234039][T32282] tipc: Enabled bearer , priority 10 [ 889.247472][T32282] vcan0: entered allmulticast mode [ 889.259393][T32282] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 889.316743][T32284] netlink: 'syz.4.7219': attribute type 1 has an invalid length. [ 889.325756][T32284] netlink: 'syz.4.7219': attribute type 1 has an invalid length. [ 889.504077][T32292] syzkaller0: entered promiscuous mode [ 889.512630][T32292] syzkaller0: entered allmulticast mode [ 889.542524][T32292] FAULT_INJECTION: forcing a failure. [ 889.542524][T32292] name failslab, interval 1, probability 0, space 0, times 0 [ 889.555706][T32292] CPU: 0 UID: 0 PID: 32292 Comm: syz.3.7223 Not tainted syzkaller #0 PREEMPT(full) [ 889.555737][T32292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 889.555752][T32292] Call Trace: [ 889.555761][T32292] [ 889.555770][T32292] dump_stack_lvl+0xe8/0x150 [ 889.555803][T32292] should_fail_ex+0x412/0x560 [ 889.555837][T32292] should_failslab+0xa8/0x100 [ 889.555865][T32292] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 889.555889][T32292] ? __alloc_skb+0x186/0x7d0 [ 889.555920][T32292] ? __alloc_skb+0x1d0/0x7d0 [ 889.555948][T32292] ? __local_bh_enable_ip+0xd0/0x130 [ 889.555982][T32292] __alloc_skb+0x1d0/0x7d0 [ 889.556018][T32292] alloc_skb_with_frags+0xca/0x890 [ 889.556068][T32292] sock_alloc_send_pskb+0x878/0x990 [ 889.556097][T32292] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 889.556135][T32292] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 889.556163][T32292] ? dev_get_by_index+0x22/0x2e0 [ 889.556186][T32292] ? dev_get_by_index+0x22/0x2e0 [ 889.556229][T32292] packet_sendmsg+0x33e5/0x50f0 [ 889.556262][T32292] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 889.556294][T32292] ? __lock_acquire+0x6b5/0x2cf0 [ 889.556332][T32292] ? __lock_acquire+0x6b5/0x2cf0 [ 889.556378][T32292] ? aa_sk_perm+0x6d5/0x900 [ 889.556403][T32292] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.556439][T32292] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 889.556477][T32292] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.556507][T32292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.556531][T32292] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.556558][T32292] __sys_sendto+0x672/0x710 [ 889.556594][T32292] ? __pfx___sys_sendto+0x10/0x10 [ 889.556623][T32292] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 889.556670][T32292] ? __fget_files+0x3a0/0x420 [ 889.556714][T32292] ? ksys_write+0x242/0x270 [ 889.556741][T32292] ? __pfx_ksys_write+0x10/0x10 [ 889.556770][T32292] __x64_sys_sendto+0xde/0x100 [ 889.556807][T32292] do_syscall_64+0x14d/0xf80 [ 889.556839][T32292] ? trace_irq_disable+0x3b/0x150 [ 889.556872][T32292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.556894][T32292] ? clear_bhb_loop+0x40/0x90 [ 889.556921][T32292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.556941][T32292] RIP: 0033:0x7fc5bb59c799 [ 889.556961][T32292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.556978][T32292] RSP: 002b:00007fc5bc4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 889.557000][T32292] RAX: ffffffffffffffda RBX: 00007fc5bb815fa0 RCX: 00007fc5bb59c799 [ 889.557014][T32292] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000006 [ 889.557027][T32292] RBP: 00007fc5bc4be090 R08: 0000200000000140 R09: 0000000000000014 [ 889.557042][T32292] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 889.557055][T32292] R13: 00007fc5bb816038 R14: 00007fc5bb815fa0 R15: 00007fff6be64ce8 [ 889.557090][T32292] [ 890.236708][T32304] gre0 speed is unknown, defaulting to 1000 [ 890.279235][T20248] tipc: Node number set to 2886997007 [ 890.839954][T32326] netlink: 'syz.3.7231': attribute type 1 has an invalid length. [ 890.847770][T32326] __nla_validate_parse: 4 callbacks suppressed [ 890.847791][T32326] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.7231'. [ 891.106712][T32304] wg1 speed is unknown, defaulting to 1000 [ 891.106754][T32326] gre0 speed is unknown, defaulting to 1000 [ 891.214761][T32304] lo speed is unknown, defaulting to 1000 [ 891.308402][T32344] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 891.605959][T32341] gre0 speed is unknown, defaulting to 1000 [ 891.666664][T32326] wg1 speed is unknown, defaulting to 1000 [ 891.674845][T32326] lo speed is unknown, defaulting to 1000 [ 892.042399][T32347] gre0 speed is unknown, defaulting to 1000 [ 892.345573][T32363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7238'. [ 892.405648][T32341] wg1 speed is unknown, defaulting to 1000 [ 892.414877][T32341] lo speed is unknown, defaulting to 1000 [ 892.512347][T32347] wg1 speed is unknown, defaulting to 1000 [ 892.676092][T32347] lo speed is unknown, defaulting to 1000 [ 893.540344][T32390] syzkaller0: entered promiscuous mode [ 893.545895][T32390] syzkaller0: entered allmulticast mode [ 893.774118][T32399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 894.255436][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7253'. [ 894.305423][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7256'. [ 894.415761][T32436] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 894.437751][T32441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7256'. [ 894.691482][T32452] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.808348][T32454] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7263'. [ 894.902613][T32463] netlink: 180568 bytes leftover after parsing attributes in process `syz.3.7265'. [ 895.036764][T32472] IPVS: ip_vs_edit_dest(): server weight less than zero [ 895.044146][ T796] IPVS: starting estimator thread 0... [ 895.066295][T32475] IPVS: ip_vs_edit_dest(): server weight less than zero [ 895.150936][T32473] IPVS: using max 37 ests per chain, 88800 per kthread [ 895.320616][T32481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7270'. [ 895.330933][T32488] netlink: 'syz.1.7273': attribute type 1 has an invalid length. [ 895.341214][T32486] gre0 speed is unknown, defaulting to 1000 [ 895.350611][T32481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7270'. [ 895.389242][T32481] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 895.577527][T32499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7278'. [ 895.741518][T32486] wg1 speed is unknown, defaulting to 1000 [ 895.749319][T32486] lo speed is unknown, defaulting to 1000 [ 895.841692][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 896.035149][T32521] __nla_validate_parse: 2 callbacks suppressed [ 896.035173][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.065052][T32519] veth1_macvtap: entered promiscuous mode [ 896.071129][T32519] macsec1: entered promiscuous mode [ 896.089661][T32519] veth1_macvtap: left promiscuous mode [ 896.110139][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.120291][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.129925][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.140802][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.150464][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.169553][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.178950][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.229810][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.299820][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7283'. [ 896.494330][T32534] netlink: 'syz.1.7288': attribute type 1 has an invalid length. [ 896.670761][T32534] bond4: entered promiscuous mode [ 896.680265][T32534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.821731][T32535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 896.831478][T32535] bond4: (slave bond5): making interface the new active one [ 896.838979][T32535] bond5: entered promiscuous mode [ 896.845855][T32535] bond4: (slave bond5): Enslaving as an active interface with an up link [ 897.014052][T32566] netlink: 'syz.4.7296': attribute type 1 has an invalid length. [ 897.127285][T32566] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 897.675050][T32599] netlink: 'syz.0.7304': attribute type 8 has an invalid length. [ 897.886373][T32605] gre0 speed is unknown, defaulting to 1000 [ 898.055632][T32607] netlink: 'syz.2.7305': attribute type 1 has an invalid length. [ 898.349355][T32619] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 898.364217][T32619] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 898.374673][T32619] netlink: 'syz.3.7307': attribute type 2 has an invalid length. [ 898.585932][T32599] gre0 speed is unknown, defaulting to 1000 [ 898.592304][T32605] wg1 speed is unknown, defaulting to 1000 [ 898.602022][T32605] lo speed is unknown, defaulting to 1000 [ 899.053609][T32645] netlink: 'syz.4.7314': attribute type 1 has an invalid length. [ 899.571628][T32599] wg1 speed is unknown, defaulting to 1000 [ 899.633734][T32599] lo speed is unknown, defaulting to 1000 [ 899.774130][T32674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 899.971648][T32684] batadv1: entered promiscuous mode [ 899.990227][T32684] batadv1: entered allmulticast mode [ 901.099718][T32722] __nla_validate_parse: 64 callbacks suppressed [ 901.099742][T32722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7336'. [ 901.140232][T32724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7337'. [ 901.421532][T32736] netlink: 'syz.4.7340': attribute type 3 has an invalid length. [ 901.431408][T32736] netlink: 'syz.4.7340': attribute type 1 has an invalid length. [ 901.441042][T32737] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.448134][T26557] IPVS: starting estimator thread 0... [ 901.456932][T32736] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7340'. [ 901.490283][T32740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7341'. [ 901.492206][T32736] NCSI netlink: No device for ifindex 808464432 [ 901.499296][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7341'. [ 901.508632][T32737] netlink: 'syz.0.7339': attribute type 1 has an invalid length. [ 901.542360][T32742] netlink: 'syz.3.7341': attribute type 4 has an invalid length. [ 901.552833][T32738] IPVS: using max 27 ests per chain, 64800 per kthread [ 901.560243][T32742] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7341'. [ 901.568402][T32741] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7340'. [ 901.586250][T32736] Bluetooth: MGMT ver 1.23 [ 901.591974][T32736] Bluetooth: hci1: too big key_count value 29096 [ 901.618230][T32737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.664334][T32742] .`: renamed from bond0 [ 901.773956][T32754] netlink: 'syz.4.7344': attribute type 5 has an invalid length. [ 901.796842][T32756] xt_ecn: cannot match TCP bits for non-tcp packets [ 901.830731][T32748] netlink: 'syz.1.7343': attribute type 3 has an invalid length. [ 901.838526][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7343'. [ 901.838678][T32752] gre0 speed is unknown, defaulting to 1000 [ 902.044377][ T301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7348'. [ 902.211553][T32752] wg1 speed is unknown, defaulting to 1000 [ 902.230448][T32752] lo speed is unknown, defaulting to 1000 [ 902.814272][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7356'. [ 903.093127][ T329] gre0 speed is unknown, defaulting to 1000 [ 903.657766][ T349] netlink: 'syz.2.7360': attribute type 3 has an invalid length. [ 903.756645][ T329] wg1 speed is unknown, defaulting to 1000 [ 903.813332][ T329] lo speed is unknown, defaulting to 1000 [ 904.131800][ T359] rdma_rxe: rxe_newlink: failed to add lo [ 904.292740][ T366] bond0: Caught tx_queue_len zero misconfig [ 904.315547][ T372] netlink: 'syz.2.7366': attribute type 2 has an invalid length. [ 904.621528][ T383] gre0 speed is unknown, defaulting to 1000 [ 904.849114][ T391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 904.892798][ T392] macsec1: entered promiscuous mode [ 904.898172][ T392] bond3: entered promiscuous mode [ 904.903822][ T392] macsec1: entered allmulticast mode [ 904.909694][ T392] bond3: entered allmulticast mode [ 904.927645][ T392] bond3: left allmulticast mode [ 904.933916][ T392] bond3: left promiscuous mode [ 905.097151][ T379] gre0 speed is unknown, defaulting to 1000 [ 905.103245][ T383] wg1 speed is unknown, defaulting to 1000 [ 905.125234][ T383] lo speed is unknown, defaulting to 1000 [ 905.993338][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.002679][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.010498][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.017710][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.025659][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.034777][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.070132][ T379] wg1 speed is unknown, defaulting to 1000 [ 906.076860][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.080335][ T379] lo speed is unknown, defaulting to 1000 [ 906.129401][ T439] __nla_validate_parse: 16 callbacks suppressed [ 906.129425][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.173589][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.255333][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.297700][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.325720][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.349119][ T439] openvswitch: netlink: Message has 2 unknown bytes. [ 906.366557][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.393754][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.432356][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.456001][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.465891][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.478470][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.490010][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 906.616005][ T456] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 906.881140][ T471] sock: sock_timestamping_bind_phc: sock not bind to device [ 908.385571][ T5939] lo speed is unknown, defaulting to 1000 [ 908.770345][ T484] ip6gre1: entered promiscuous mode [ 908.775795][ T484] ip6gre1: entered allmulticast mode [ 908.786247][ T482] pimreg: tun_chr_ioctl cmd 37730 [ 908.793368][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 908.833190][T20251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 908.843004][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.002523][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.457721][ T506] netlink: 'syz.0.7403': attribute type 10 has an invalid length. [ 909.816459][ T509] bridge: RTM_NEWNEIGH with invalid ether address [ 909.839914][T20251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.845751][ T528] .70: renamed from hsr0 (while UP) [ 909.911240][ T528] .70: entered allmulticast mode [ 909.916350][ T528] hsr_slave_0: entered allmulticast mode [ 910.722717][ T580] netlink: 'syz.4.7428': attribute type 16 has an invalid length. [ 911.050999][ T596] netlink: 'syz.3.7435': attribute type 1 has an invalid length. [ 911.191727][ T603] gre0 speed is unknown, defaulting to 1000 [ 911.238016][ T609] bridge2: entered promiscuous mode [ 911.244188][ T609] bridge2: entered allmulticast mode [ 911.485962][ T603] wg1 speed is unknown, defaulting to 1000 [ 911.497127][ T603] lo speed is unknown, defaulting to 1000 [ 911.747653][ T616] batadv_slave_0: Caught tx_queue_len zero misconfig [ 912.488024][ T665] __nla_validate_parse: 32 callbacks suppressed [ 912.488050][ T665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7455'. [ 912.587614][ T675] netlink: 'syz.0.7457': attribute type 8 has an invalid length. [ 912.727966][ T686] pim6reg: entered allmulticast mode [ 912.742441][ T686] pim6reg: left allmulticast mode [ 912.771647][ T691] tipc: Enabling of bearer rejected, failed to enable media [ 912.879325][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 912.922364][ T703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 912.979842][ T705] netlink: 'syz.0.7465': attribute type 1 has an invalid length. [ 913.330837][ T719] x_tables: duplicate underflow at hook 1 [ 913.891522][ T729] wg1: Master is either lo or non-ether device [ 914.002985][ T733] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 914.421816][ T742] gre0 speed is unknown, defaulting to 1000 [ 915.075110][ T742] wg1 speed is unknown, defaulting to 1000 [ 915.106374][ T742] lo speed is unknown, defaulting to 1000 [ 916.405878][ T785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7488'. [ 916.431423][ T785] netlink: 'syz.4.7488': attribute type 39 has an invalid length. [ 916.460157][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.467878][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.517589][ T773] vcan0: left allmulticast mode [ 917.090338][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.162934][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.233837][ T792] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7490'. [ 917.531428][ T773] gretap2: left promiscuous mode [ 917.537022][ T773] ip6gre1: left promiscuous mode [ 917.546290][ T773] bridge3: left promiscuous mode [ 917.554092][ T773] bridge3: left allmulticast mode [ 917.567596][ T773] bond2: left promiscuous mode [ 917.573518][ T773] bond2: left allmulticast mode [ 917.583393][T20850] lo speed is unknown, defaulting to 1000 [ 917.594085][T20850] syz2: Port: 1 Link DOWN [ 917.630205][T14828] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.676977][T14828] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.722666][T14828] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.757761][T14828] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.778743][ T797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7491'. [ 917.819568][ T807] netlink: 'syz.3.7493': attribute type 4 has an invalid length. [ 917.839531][ T797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7491'. [ 917.848571][ T797] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7491'. [ 918.070650][ T818] netlink: 'syz.4.7497': attribute type 4 has an invalid length. [ 918.107605][ T826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7499'. [ 918.251518][ T828] netlink: 'syz.2.7500': attribute type 11 has an invalid length. [ 918.260308][ T828] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7500'. [ 919.000330][ T863] gre0 speed is unknown, defaulting to 1000 [ 919.265816][ T863] wg1 speed is unknown, defaulting to 1000 [ 919.273777][ T863] lo speed is unknown, defaulting to 1000 [ 919.542025][ T892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7514'. [ 919.617777][ T898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7515'. [ 919.732974][ T903] gre0 speed is unknown, defaulting to 1000 [ 919.852989][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 919.875618][ T913] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7518'. [ 919.925812][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 920.023571][ T909] xt_CT: No such helper "syz1" [ 920.391334][ T903] wg1 speed is unknown, defaulting to 1000 [ 920.399317][ T903] lo speed is unknown, defaulting to 1000 [ 921.172484][ T980] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 921.440152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.254792][ T1026] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 922.364557][ T1022] gre0 speed is unknown, defaulting to 1000 [ 922.541914][ T1040] netlink: 'syz.2.7551': attribute type 1 has an invalid length. [ 922.707906][ T1053] netlink: 'syz.3.7549': attribute type 298 has an invalid length. [ 923.400004][ T1072] __nla_validate_parse: 6 callbacks suppressed [ 923.400025][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7555'. [ 923.452449][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7555'. [ 923.462624][ T1073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 923.497957][ T1022] wg1 speed is unknown, defaulting to 1000 [ 923.536716][ T1078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7556'. [ 923.548083][ T1022] lo speed is unknown, defaulting to 1000 [ 923.653341][ T1080] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 923.659150][ T1080] pim6reg0: persist disabled [ 923.668706][ T1084] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 923.799276][ T1088] netlink: 'syz.2.7556': attribute type 61 has an invalid length. [ 923.807249][ T1088] netlink: 'syz.2.7556': attribute type 64 has an invalid length. [ 924.200917][ T1095] gre0 speed is unknown, defaulting to 1000 [ 924.714649][ T1095] wg1 speed is unknown, defaulting to 1000 [ 924.722834][ T1095] lo speed is unknown, defaulting to 1000 [ 924.793188][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7560'. [ 925.980618][ T1123] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7568'. [ 926.214065][ T1134] gre0 speed is unknown, defaulting to 1000 [ 926.421889][ T1138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7572'. [ 926.463295][ T1138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7572'. [ 926.738230][ T896] net_ratelimit: 90 callbacks suppressed [ 926.738254][ T896] Set syz1 is full, maxelem 65536 reached [ 927.402877][ T1134] wg1 speed is unknown, defaulting to 1000 [ 927.414769][ T1134] lo speed is unknown, defaulting to 1000 [ 927.459871][ T1169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7579'. [ 927.475019][ T1163] netlink: 'syz.0.7571': attribute type 13 has an invalid length. [ 927.859701][ T1179] netlink: 'syz.1.7581': attribute type 3 has an invalid length. [ 927.888801][ T1169] syzkaller0: entered promiscuous mode [ 927.908112][ T1169] syzkaller0: entered allmulticast mode [ 928.143212][ T1182] siw: device registration error -23 [ 928.178877][ T1182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 928.186263][ T1182] IPv6: NLM_F_CREATE should be set when creating new route [ 928.233577][ T1184] x_tables: duplicate underflow at hook 1 [ 928.644398][ T1203] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7589'. [ 928.670195][ T1204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7588'. [ 930.410769][ T1214] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7592'. [ 930.450026][ T1216] tc_dump_action: action bad kind [ 930.750346][ T1233] netlink: 'syz.3.7599': attribute type 8 has an invalid length. [ 930.789172][ T1233] sch_fq: defrate 0 ignored. [ 930.880493][ T1244] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7596'. [ 930.936561][ T1239] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7596'. [ 930.959911][ T1244] rdma_rxe: rxe_newlink: failed to add bond0 [ 930.990958][ T1227] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7596'. [ 931.133987][ T1227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.180177][ T1227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.242249][ T1227] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 931.268818][ T1227] bond0 (unregistering): Released all slaves [ 931.297812][ T1260] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7605'. [ 931.321177][ T1261] ip6tnl0: Caught tx_queue_len zero misconfig [ 931.329769][ T1261] netlink: 'syz.2.7606': attribute type 2 has an invalid length. [ 931.349313][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7606'. [ 931.465737][ T1265] gre0 speed is unknown, defaulting to 1000 [ 931.902059][ T1280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.035752][ T1292] ipt_REJECT: TCP_RESET invalid for non-tcp [ 932.116357][ T5872] IPVS: starting estimator thread 0... [ 932.142359][ T1265] wg1 speed is unknown, defaulting to 1000 [ 932.176092][ T1265] lo speed is unknown, defaulting to 1000 [ 932.219404][ T1303] IPVS: using max 27 ests per chain, 64800 per kthread [ 932.617583][ T1336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7629'. [ 932.642904][ T1336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7629'. [ 932.669594][ T1334] IPVS: Unknown mcast interface: hsr0 [ 932.707164][ T1343] atomic_op ffff8880589de998 conn xmit_atomic 0000000000000000 [ 933.301374][ T1373] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 933.683093][ T1385] __nla_validate_parse: 1 callbacks suppressed [ 933.683124][ T1385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7641'. [ 934.517840][ T1449] netlink: 'syz.4.7658': attribute type 11 has an invalid length. [ 935.472124][ T1457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.511604][ T1457] .70: left allmulticast mode [ 935.516469][ T1457] hsr_slave_0: left allmulticast mode [ 935.551446][ T1457] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 935.628866][ T1457] gretap1: left promiscuous mode [ 935.639862][ T1457] gtp0: left promiscuous mode [ 935.644703][ T1457] gtp0: left allmulticast mode [ 935.655646][ T1457] bridge1: left promiscuous mode [ 935.661382][ T1457] bridge1: left allmulticast mode [ 935.670259][ T1457] geneve2: left allmulticast mode [ 935.678017][ T1457] mac80211_hwsim hwsim81 syzkaller0: left promiscuous mode [ 935.691607][ T1457] mac80211_hwsim hwsim81 syzkaller0: left allmulticast mode [ 935.736623][ T1457] ip6gre1: left promiscuous mode [ 935.742115][ T1457] ip6gre1: left allmulticast mode [ 935.848714][T14828] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.871302][T14828] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.918222][T14828] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.949557][T14828] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.112975][ T1485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7668'. [ 936.133208][ T1486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7668'. [ 936.263783][ T1487] netlink: 'syz.4.7670': attribute type 10 has an invalid length. [ 936.336747][ T1487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 936.385527][ T1501] netlink: 'syz.3.7673': attribute type 30 has an invalid length. [ 936.751706][ T1508] netlink: 'syz.3.7674': attribute type 13 has an invalid length. [ 936.767008][ T1512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7676'. [ 936.781812][ T1508] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.7674'. [ 937.224677][ T1538] bond0: option lacp_rate: invalid value (128) [ 937.245890][ T1538] bond0 (unregistering): Released all slaves [ 937.446418][ T1547] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 937.456727][ T1547] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 937.466048][ T1547] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 937.491059][ T1550] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 937.698584][ T1559] x_tables: duplicate underflow at hook 1 [ 937.917408][ T1572] gre0 speed is unknown, defaulting to 1000 [ 937.975391][ T1580] x_tables: duplicate underflow at hook 2 [ 938.137663][ T1585] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7697'. [ 938.214674][ T1572] wg1 speed is unknown, defaulting to 1000 [ 938.223440][ T1572] lo speed is unknown, defaulting to 1000 [ 938.799317][ T1607] tipc: Enabled bearer , priority 0 [ 938.808890][ T1607] syzkaller0: entered promiscuous mode [ 938.815510][ T1607] syzkaller0: entered allmulticast mode [ 938.832001][ T1607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7703'. [ 939.113733][ T1607] tipc: Resetting bearer [ 939.427032][ T1606] tipc: Resetting bearer [ 939.493632][ T1606] tipc: Disabling bearer [ 939.574715][ T1626] netlink: 'syz.4.7709': attribute type 1 has an invalid length. [ 939.682846][ T1626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7709'. [ 939.890987][ T1634] syzkaller0: entered promiscuous mode [ 939.899936][ T1634] syzkaller0: entered allmulticast mode [ 939.978763][ T1634] tipc: Enabled bearer , priority 0 [ 939.997919][ T1633] tipc: Resetting bearer [ 940.022176][ T1633] tipc: Disabling bearer [ 940.245451][ T1647] tipc: Enabled bearer , priority 0 [ 940.298844][ T1647] syzkaller0: entered promiscuous mode [ 940.349908][ T1647] syzkaller0: entered allmulticast mode [ 940.373304][ T1647] tipc: Resetting bearer [ 940.398816][ T1646] tipc: Resetting bearer [ 940.896997][ T1665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7721'. [ 940.907113][ T1665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7721'. [ 942.485031][ T1646] tipc: Disabling bearer [ 942.541927][T20847] tipc: Node number set to 3639144075 [ 942.683215][ T1681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7725'. [ 942.825438][ T1691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7728'. [ 942.893794][ T1691] ip6tnl2: entered promiscuous mode [ 942.915307][ T1691] ip6tnl2: entered allmulticast mode [ 942.922286][ T1698] netlink: 'syz.2.7730': attribute type 1 has an invalid length. [ 943.123427][ T1710] syzkaller1: entered promiscuous mode [ 943.130294][ T1710] syzkaller1: entered allmulticast mode [ 943.322021][ T1721] syzkaller0: entered promiscuous mode [ 943.327751][ T1721] syzkaller0: entered allmulticast mode [ 943.514932][ T1734] veth1_virt_wifi: entered promiscuous mode [ 943.848697][ T1752] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 944.160594][ T1768] netlink: 'syz.0.7748': attribute type 4 has an invalid length. [ 944.175830][ T1768] netlink: 'syz.0.7748': attribute type 4 has an invalid length. [ 944.386432][ T1737] delete_channel: no stack [ 944.517652][ T1782] syzkaller0: entered promiscuous mode [ 944.526751][ T1782] syzkaller0: entered allmulticast mode [ 944.538335][ T1782] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 944.771827][ T1794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7755'. [ 945.065981][ T1811] batadv_slave_1: entered promiscuous mode [ 945.547542][ T1834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7765'. [ 945.783532][ T1847] netlink: 'syz.4.7769': attribute type 1 has an invalid length. [ 945.802177][ T1847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7769'. [ 945.826856][ T1843] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7767'. [ 945.840833][ T1817] batadv_slave_1: left promiscuous mode [ 946.317901][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7764'. [ 946.424672][ T1865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.524388][ T1876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7776'. [ 946.549743][ T1875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7776'. [ 946.770823][ T1894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7780'. [ 946.790079][ T1892] netlink: 'syz.0.7782': attribute type 1 has an invalid length. [ 946.915888][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7782'. [ 946.928094][ T1903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7783'. [ 946.963207][ T1898] gre0 speed is unknown, defaulting to 1000 [ 947.011031][ T1907] netlink: 'syz.2.7784': attribute type 2 has an invalid length. [ 947.035412][ T1907] netlink: 'syz.2.7784': attribute type 2 has an invalid length. [ 947.058014][ T1913] netlink: 'syz.4.7786': attribute type 10 has an invalid length. [ 947.084649][ T1907] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 947.125096][ T1913] bond0: (slave dummy0): Releasing backup interface [ 947.152220][ T1915] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 947.180336][ T1913] dummy0: entered promiscuous mode [ 947.211234][ T1913] team0: Port device dummy0 added [ 947.710791][ T1898] wg1 speed is unknown, defaulting to 1000 [ 947.718447][ T1898] lo speed is unknown, defaulting to 1000 [ 947.779957][ T1935] openvswitch: netlink: Multiple metadata blocks provided [ 947.956424][ T1942] xt_hashlimit: size too large, truncated to 1048576 [ 947.974072][ T1942] xt_hashlimit: overflow, try lower: 0/0 [ 948.010003][ T1943] syzkaller0: entered promiscuous mode [ 948.019688][ T1943] syzkaller0: entered allmulticast mode [ 948.774446][ T1974] netlink: 'syz.3.7800': attribute type 1 has an invalid length. [ 948.855821][ T1974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.084560][ T1968] bond0: (slave veth7): Enslaving as an active interface with a down link [ 949.147659][ T1986] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 949.155548][ T1986] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 949.483703][ T2002] syzkaller0: entered promiscuous mode [ 949.489366][ T2002] syzkaller0: entered allmulticast mode [ 949.510990][ T2004] netlink: 'syz.4.7808': attribute type 3 has an invalid length. [ 949.665754][ T2020] 8021q: VLANs not supported on syzkaller1 [ 949.708931][ T2014] block nbd4: NBD_DISCONNECT [ 949.722513][ T2023] netlink: 'syz.2.7813': attribute type 1 has an invalid length. [ 949.790659][ T2004] siw: device registration error -23 [ 949.907167][ T2035] __nla_validate_parse: 7 callbacks suppressed [ 949.907190][ T2035] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7815'. [ 950.113488][ T2048] gre0 speed is unknown, defaulting to 1000 [ 950.493825][ T2072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7825'. [ 950.680424][ T2079] openvswitch: netlink: Tunnel attr 272 out of range max 16 [ 952.440818][ T2048] wg1 speed is unknown, defaulting to 1000 [ 952.442112][ T2052] gre0 speed is unknown, defaulting to 1000 [ 952.474611][ T2048] lo speed is unknown, defaulting to 1000 [ 952.610722][ T2096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7830'. [ 952.645167][ T2098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7832'. [ 952.656062][ T2096] vlan3: entered promiscuous mode [ 952.662129][ T2096] gretap0: entered promiscuous mode [ 952.754316][ T2100] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 952.773401][ T2094] tipc: Enabled bearer , priority 0 [ 952.832240][ T2094] tipc: Resetting bearer [ 952.864389][ T2093] tipc: Disabling bearer [ 952.882219][ T2102] netlink: 'syz.0.7833': attribute type 1 has an invalid length. [ 952.930910][ T2102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 952.939718][ T2044] gre0 speed is unknown, defaulting to 1000 [ 953.060932][ T2112] ip6erspan1: entered allmulticast mode [ 953.241900][ T2117] netlink: 'syz.2.7838': attribute type 1 has an invalid length. [ 953.249968][ T2117] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7838'. [ 953.259902][ T2117] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7838'. [ 953.268969][ T2117] netlink: 'syz.2.7838': attribute type 1 has an invalid length. [ 953.279691][ T2102] gre0 speed is unknown, defaulting to 1000 [ 953.291417][ T2117] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7838'. [ 953.302323][ T2044] wg1 speed is unknown, defaulting to 1000 [ 953.343545][ T2044] lo speed is unknown, defaulting to 1000 [ 953.445851][ T2052] wg1 speed is unknown, defaulting to 1000 [ 953.485890][ T2052] lo speed is unknown, defaulting to 1000 [ 953.566178][ T2121] x_tables: duplicate underflow at hook 1 [ 953.985742][ T2102] wg1 speed is unknown, defaulting to 1000 [ 954.032089][ T2102] lo speed is unknown, defaulting to 1000 [ 954.252457][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7844'. [ 954.508687][ T2143] gre0 speed is unknown, defaulting to 1000 [ 954.589123][ T2150] netlink: 566 bytes leftover after parsing attributes in process `syz.2.7848'. [ 954.637610][ T2147] ip6erspan2: entered allmulticast mode [ 954.821290][ T2153] syzkaller0: entered promiscuous mode [ 954.839562][ T2153] syzkaller0: entered allmulticast mode [ 954.958806][ T2143] wg1 speed is unknown, defaulting to 1000 [ 954.971544][ T2143] lo speed is unknown, defaulting to 1000 [ 955.227062][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7855'. [ 955.387657][ T2170] netlink: 'syz.1.7856': attribute type 7 has an invalid length. [ 955.427912][ T2170] netlink: 'syz.1.7856': attribute type 8 has an invalid length. [ 955.460031][ T2170] netlink: 'syz.1.7856': attribute type 8 has an invalid length. [ 955.466222][ T2173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7856'. [ 955.488147][ T2170] netlink: 'syz.1.7856': attribute type 4 has an invalid length. [ 955.516491][ T2170] netlink: 'syz.1.7856': attribute type 7 has an invalid length. [ 955.546074][ T2170] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.7856'. [ 955.661389][ T2176] gre0 speed is unknown, defaulting to 1000 [ 955.706959][ T2179] team_slave_1: Caught tx_queue_len zero misconfig [ 956.098640][ T2204] syzkaller0: entered promiscuous mode [ 956.119723][ T2204] syzkaller0: entered allmulticast mode [ 956.227555][ T2211] bond3 (unregistering): Released all slaves [ 956.288840][ T2176] wg1 speed is unknown, defaulting to 1000 [ 956.312506][ T2176] lo speed is unknown, defaulting to 1000 [ 956.364934][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7868'. [ 956.653197][ T2230] gre0 speed is unknown, defaulting to 1000 [ 957.012087][ T2230] wg1 speed is unknown, defaulting to 1000 [ 957.034621][ T2230] lo speed is unknown, defaulting to 1000 [ 957.745814][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7887'. [ 957.899816][ T2277] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7888'. [ 957.990383][ T2257] team0: Port device macvlan2 removed [ 958.027364][ T2257] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.177062][ T2257] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.295190][ T2257] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.437271][ T2257] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.471626][ T2303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.490973][ T2304] netlink: 'syz.2.7897': attribute type 9 has an invalid length. [ 958.737765][T14829] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.808656][T14829] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.853128][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.956345][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.383787][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7907'. [ 959.407133][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7907'. [ 959.555570][ T2348] openvswitch: netlink: IP tunnel dst address not specified [ 959.664588][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7909'. [ 959.725828][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'. [ 960.104979][ T2375] gre0 speed is unknown, defaulting to 1000 [ 960.403891][ T2401] netlink: 'syz.0.7924': attribute type 6 has an invalid length. [ 960.584108][ T2375] wg1 speed is unknown, defaulting to 1000 [ 960.600527][ T2419] __nla_validate_parse: 4 callbacks suppressed [ 960.600549][ T2419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7928'. [ 960.618017][ T2375] lo speed is unknown, defaulting to 1000 [ 960.646152][ T2422] sctp: [Deprecated]: syz.1.7929 (pid 2422) Use of int in maxseg socket option. [ 960.646152][ T2422] Use struct sctp_assoc_value instead [ 960.662613][ T2423] sctp: [Deprecated]: syz.1.7929 (pid 2423) Use of int in maxseg socket option. [ 960.662613][ T2423] Use struct sctp_assoc_value instead [ 960.766497][ T2433] netlink: 'syz.1.7932': attribute type 1 has an invalid length. [ 960.822815][ T2435] gre0 speed is unknown, defaulting to 1000 [ 960.840709][ T2433] netlink: 'syz.1.7932': attribute type 2 has an invalid length. [ 960.921778][ T2439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7933'. [ 961.144541][ T2442] vlan3: entered promiscuous mode [ 961.170985][ T2442] vlan0: entered promiscuous mode [ 961.247684][ T2465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7938'. [ 961.257360][ T2465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7938'. [ 961.276486][ T2465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7938'. [ 961.301329][ T2473] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 961.309151][ T2465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7938'. [ 961.354354][ T2479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7939'. [ 961.515836][ T2435] wg1 speed is unknown, defaulting to 1000 [ 961.541782][ T2435] lo speed is unknown, defaulting to 1000 [ 961.842452][ T2490] 0X: left allmulticast mode [ 961.865705][ T2490] wg1: left promiscuous mode [ 961.871952][ T2490] wg1: left allmulticast mode [ 961.987874][ T2490] vlan2: left promiscuous mode [ 961.994199][ T2490] bond1: left promiscuous mode [ 962.000761][ T2490] vlan2: left allmulticast mode [ 962.005839][ T2490] bond1: left allmulticast mode [ 962.017728][ T2490] gretap1: left promiscuous mode [ 962.024030][ T2490] geneve3: left promiscuous mode [ 962.038012][ T2490] bond4: left promiscuous mode [ 962.043412][ T2490] bond5: left promiscuous mode [ 962.057426][ T2490] ip6erspan1: left allmulticast mode [ 962.065609][ T2490] ip6erspan2: left allmulticast mode [ 962.114610][ T2501] lo: entered allmulticast mode [ 962.123898][ T2501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.149343][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.169463][T14828] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.177912][T14828] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.218255][T14828] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.299432][ T2510] sch_fq: defrate 4294967293 ignored. [ 962.336340][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7949'. [ 962.472672][ T2514] nbd: couldn't find a device at index 2 [ 962.675300][ T2532] netlink: 'syz.2.7955': attribute type 2 has an invalid length. [ 962.689121][ T2532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7955'. [ 962.743603][ T2535] openvswitch: netlink: Duplicate key (type 21). [ 962.750462][ T2537] openvswitch: netlink: Duplicate key (type 21). [ 962.825550][ T2542] syzkaller0: entered promiscuous mode [ 962.834768][ T2542] syzkaller0: entered allmulticast mode [ 962.854768][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7957'. [ 963.327896][ T2580] IPVS: set_ctl: invalid protocol: 28996 10.1.1.2:20004 [ 963.338817][ T2581] IPVS: set_ctl: invalid protocol: 28996 10.1.1.2:20004 [ 963.844316][ T2610] lo: entered allmulticast mode [ 964.204934][ T2631] netlink: 'syz.2.7980': attribute type 10 has an invalid length. [ 964.228904][ T2629] vlan3: entered promiscuous mode [ 964.255577][ T2638] netlink: 'syz.2.7980': attribute type 10 has an invalid length. [ 964.264231][ T2638] dummy0: entered promiscuous mode [ 964.270731][ T2638] dummy0: entered allmulticast mode [ 964.277602][ T2638] bridge0: port 3(dummy0) entered blocking state [ 964.285466][ T2638] bridge0: port 3(dummy0) entered disabled state [ 964.296744][ T2638] bridge0: port 3(dummy0) entered blocking state [ 964.303379][ T2638] bridge0: port 3(dummy0) entered forwarding state [ 964.687653][ T2677] IPv6: Can't replace route, no match found [ 964.915220][ T2706] openvswitch: netlink: Actions may not be safe on all matching packets [ 965.024682][ T2713] syzkaller0: entered promiscuous mode [ 965.030752][ T2713] syzkaller0: entered allmulticast mode [ 965.284036][ T2726] gre0 speed is unknown, defaulting to 1000 [ 965.534712][ T2744] tipc: Enabling of bearer rejected, failed to enable media [ 965.578589][ T2752] tipc: Enabling of bearer rejected, failed to enable media [ 965.829828][ T2726] wg1 speed is unknown, defaulting to 1000 [ 965.838521][ T2726] lo speed is unknown, defaulting to 1000 [ 965.875200][ T2725] gre0 speed is unknown, defaulting to 1000 [ 965.922961][ T2768] __nla_validate_parse: 6 callbacks suppressed [ 965.922985][ T2768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8006'. [ 966.029163][ T2775] netlink: 'syz.0.8008': attribute type 1 has an invalid length. [ 966.357384][ T2778] macvlan2: entered promiscuous mode [ 966.368587][ T2778] macvlan2: entered allmulticast mode [ 966.376049][ T2778] bond7: entered promiscuous mode [ 966.386580][ T2778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 966.436343][ T2778] bond7: left promiscuous mode [ 966.507862][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8013'. [ 966.810310][ T2826] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8019'. [ 966.824117][ T2725] wg1 speed is unknown, defaulting to 1000 [ 966.850977][ T2725] lo speed is unknown, defaulting to 1000 [ 966.941097][ T2832] macvtap1: entered promiscuous mode [ 966.947911][ T2832] macvtap1: entered allmulticast mode [ 966.967958][ T2832] dummy0: entered allmulticast mode [ 967.000567][ T2832] dummy0: entered promiscuous mode [ 967.032691][ T2832] team0: Device macvtap1 failed to register rx_handler [ 967.064650][ T2832] dummy0: left allmulticast mode [ 967.073217][ T2832] dummy0: left promiscuous mode [ 967.614339][ T2873] netlink: 'syz.4.8025': attribute type 1 has an invalid length. [ 967.836989][ T2873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 967.899465][ T2877] vlan3: entered promiscuous mode [ 967.904581][ T2877] bond5: entered promiscuous mode [ 967.919682][ T2877] vlan3: entered allmulticast mode [ 967.924879][ T2877] bond5: entered allmulticast mode [ 967.991128][ T2881] bond5: (slave bridge5): making interface the new active one [ 967.998672][ T2881] bridge5: entered promiscuous mode [ 968.012455][ T2881] bridge5: entered allmulticast mode [ 968.020984][ T2881] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 968.038380][ T2884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8027'. [ 968.071394][ T2884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8027'. [ 968.348653][ T2898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8031'. [ 968.401339][ T2908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8033'. [ 968.411139][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 968.422427][ T2908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8033'. [ 968.514473][ T2908] syzkaller0: entered promiscuous mode [ 968.520915][ T2908] syzkaller0: entered allmulticast mode [ 968.602532][ T2908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8033'. [ 968.612156][ T2908] nbd: must specify at least one socket [ 968.619376][ T2908] nbd: must specify at least one socket [ 968.680235][ T2921] netlink: 'syz.3.8037': attribute type 89 has an invalid length. [ 968.887488][ T2933] ip6tnl3: entered allmulticast mode [ 969.086560][ T2951] netlink: 'syz.2.8045': attribute type 1 has an invalid length. [ 969.155107][ T2951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 969.221513][ T2957] bond6: option primary_reselect: invalid value (4) [ 969.251159][ T2957] bond6 (unregistering): Released all slaves [ 969.314393][ T2963] bond5: (slave veth7): Enslaving as an active interface with a down link [ 969.344258][ T2953] netlink: 'syz.1.8046': attribute type 15 has an invalid length. [ 969.408379][ T2951] bond5: (slave veth9): Enslaving as an active interface with a down link [ 969.442960][ T2973] bond5: entered allmulticast mode [ 969.718140][ T2996] bridge5: entered promiscuous mode [ 969.730684][ T2996] bridge5: left promiscuous mode [ 970.170118][ T3027] macsec1: entered allmulticast mode [ 970.182125][ T3027] veth1: entered allmulticast mode [ 970.215626][ T3040] bridge0: port 1(team0) entered blocking state [ 970.262919][ T3040] bridge0: port 1(team0) entered disabled state [ 970.299371][ T3040] team0: entered allmulticast mode [ 970.304782][ T3040] team_slave_0: entered allmulticast mode [ 970.313622][ T3040] team_slave_1: entered allmulticast mode [ 970.320040][ T3040] bridge1: entered allmulticast mode [ 970.327285][ T3040] team0: entered promiscuous mode [ 970.349690][ T3040] team_slave_0: entered promiscuous mode [ 970.355675][ T3040] team_slave_1: entered promiscuous mode [ 970.361742][ T3040] bridge1: entered promiscuous mode [ 970.631021][ T3055] netlink: 'syz.3.8071': attribute type 1 has an invalid length. [ 970.802859][ T3024] lec:lec_atm_close: lec0: Shut down! [ 971.204403][ T3084] netlink: 'syz.0.8077': attribute type 32 has an invalid length. [ 971.314762][ T3092] netlink: 'syz.0.8077': attribute type 1 has an invalid length. [ 971.359288][ T3092] __nla_validate_parse: 10 callbacks suppressed [ 971.359309][ T3092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8077'. [ 971.676398][ T3112] sctp: [Deprecated]: syz.2.8082 (pid 3112) Use of int in max_burst socket option deprecated. [ 971.676398][ T3112] Use struct sctp_assoc_value instead [ 971.919669][ T3122] netlink: 'syz.2.8084': attribute type 3 has an invalid length. [ 971.955065][ T3122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8084'. [ 972.383707][ T3141] netlink: 'syz.0.8086': attribute type 1 has an invalid length. [ 972.495182][ T3141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 972.633715][ T3143] vlan3: entered promiscuous mode [ 972.657135][ T3143] bond8: entered promiscuous mode [ 972.672744][ T3143] vlan3: entered allmulticast mode [ 972.680896][ T3143] bond8: entered allmulticast mode [ 972.742023][ T3159] lo: left allmulticast mode [ 973.210750][ T3159] bridge0: port 3(dummy0) entered disabled state [ 973.217462][ T3159] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.225173][ T3159] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.427301][ T3159] veth1_macvtap: left allmulticast mode [ 973.548361][ T3159] gretap1: left promiscuous mode [ 973.559877][ T3159] veth3: left promiscuous mode [ 973.568893][ T3159] hsr0: left allmulticast mode [ 973.574525][ T3159] hsr_slave_0: left allmulticast mode [ 973.580342][ T3159] hsr_slave_1: left allmulticast mode [ 973.589630][ T3159] macvlan2: left allmulticast mode [ 973.604090][ T3159] vlan0: left promiscuous mode [ 973.609597][ T3159] bridge0: left promiscuous mode [ 973.645980][ T3159] bridge2: left promiscuous mode [ 973.663663][ T3159] bridge2: left allmulticast mode [ 973.699891][ T3159] bond5: left allmulticast mode [ 973.720630][ T3157] tipc: Enabled bearer , priority 0 [ 973.826337][ T3152] tipc: Disabling bearer [ 973.889725][ T3178] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 973.917304][ T3178] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 973.961709][ T3199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8097'. [ 974.009074][T14829] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.024598][T14829] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.064798][T14829] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.105795][T14829] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.134549][ T3191] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.142287][ T3191] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.152692][ T3191] bridge0: entered allmulticast mode [ 974.181467][T14829] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.228697][T14829] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.276016][T14829] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.286507][T20245] lec:lec_start_xmit: lec0:No lecd attached [ 974.298913][T14829] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.323317][ T3214] tipc: Enabled bearer , priority 10 [ 974.342831][ T3208] syzkaller0: entered promiscuous mode [ 974.348371][ T3208] syzkaller0: entered allmulticast mode [ 974.873183][ T3245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8109'. [ 974.905093][ T3214] tipc: Enabling of bearer rejected, already enabled [ 974.946185][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8109'. [ 974.956580][ T3236] bond6: Unable to set down delay as MII monitoring is disabled [ 974.984726][ T3236] bond6 (unregistering): Released all slaves [ 975.020196][ T3244] netlink: 'syz.3.8109': attribute type 8 has an invalid length. [ 975.086884][ T3245] nH: the hash_elasticity option has been deprecated and is always 16 [ 975.113416][ T3245] nH: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 975.354822][ T3266] IPVS: set_ctl: invalid protocol: 114 255.255.255.255:20000 [ 975.433519][ T3270] wg1: Caught tx_queue_len zero misconfig [ 975.440625][ T3270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8111'. [ 975.941228][ T3290] gre0 speed is unknown, defaulting to 1000 [ 976.091012][ T3297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.273148][ T3310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8125'. [ 976.313080][ T3310] team0: entered allmulticast mode [ 976.363834][ T3310] team_slave_0: entered allmulticast mode [ 976.396878][ T3310] team_slave_1: entered allmulticast mode [ 976.416107][ T3310] dummy0: entered allmulticast mode [ 976.531688][ T3290] wg1 speed is unknown, defaulting to 1000 [ 976.551510][ T3285] gre0 speed is unknown, defaulting to 1000 [ 976.569529][ T3290] lo speed is unknown, defaulting to 1000 [ 976.639958][ T3327] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 976.750032][ T3333] netlink: 'syz.4.8128': attribute type 10 has an invalid length. [ 976.779693][ T3333] bond0: (slave wlan1): Opening slave failed [ 977.224540][ T3357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8136'. [ 977.266283][ T3285] wg1 speed is unknown, defaulting to 1000 [ 977.297574][ T3285] lo speed is unknown, defaulting to 1000 [ 977.434535][ T3366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.709152][ T3381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8144'. [ 977.762167][ T3381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8144'. [ 977.880085][ T3383] dummy0: left allmulticast mode [ 977.908429][ T3383] team0: Port device dummy0 removed [ 977.954172][ T3383] bridge_slave_0: left allmulticast mode [ 977.969547][ T3383] bridge_slave_0: left promiscuous mode [ 977.975638][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.058484][ T3383] bridge_slave_1: left allmulticast mode [ 978.067566][ T3383] bridge_slave_1: left promiscuous mode [ 978.074316][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.150372][ T3383] bond0: (slave c5): Releasing backup interface [ 978.170077][ T3383] bond0: (slave bond_slave_1): Releasing backup interface [ 978.183778][ T3383] team_slave_0: left promiscuous mode [ 978.198723][ T3383] team_slave_0: left allmulticast mode [ 978.215866][ T3383] team0: Port device team_slave_0 removed [ 978.240659][ T3383] team_slave_1: left promiscuous mode [ 978.246878][ T3383] team_slave_1: left allmulticast mode [ 978.264108][ T3383] team0: Port device team_slave_1 removed [ 978.288099][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.296165][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.305636][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.313460][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.324432][ T3383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 978.797343][ T3423] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8151'. [ 978.832739][ T3425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8150'. [ 979.044372][ T3423] syzkaller0: entered promiscuous mode [ 979.061778][ T3423] syzkaller0: entered allmulticast mode [ 980.002694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 980.011672][ C1] lec:lec_tx_timeout: lec0 [ 980.016909][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 981.631898][ T3463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8161'. [ 981.749952][ T3471] sctp: [Deprecated]: syz.1.8160 (pid 3471) Use of int in maxseg socket option. [ 981.749952][ T3471] Use struct sctp_assoc_value instead [ 981.811466][ T3461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8160'. [ 981.883779][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8165'. [ 981.983994][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8169'. [ 982.167355][ T3483] bond6 (unregistering): Released all slaves [ 982.232983][ T3496] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 982.304801][ T3498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8172'. [ 982.552755][ T3519] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 982.663474][ T3524] netlink: 'syz.4.8180': attribute type 21 has an invalid length. [ 982.688587][ T3524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8180'. [ 982.722049][ T3524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.857332][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8181'. [ 982.907161][ T3536] macvlan0: entered allmulticast mode [ 982.928173][ T3536] hsr0: entered allmulticast mode [ 982.944377][ T3536] hsr_slave_0: entered allmulticast mode [ 982.973969][ T3536] hsr_slave_1: entered allmulticast mode [ 983.192663][ T3558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8186'. [ 983.258451][ T3559] gre0 speed is unknown, defaulting to 1000 [ 983.456909][ T3562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8188'. [ 983.711481][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 983.725922][ T3559] wg1 speed is unknown, defaulting to 1000 [ 983.731951][ T3555] gre0 speed is unknown, defaulting to 1000 [ 983.741983][ T3559] lo speed is unknown, defaulting to 1000 [ 984.258022][ T3566] gre0 speed is unknown, defaulting to 1000 [ 984.269367][ T3555] wg1 speed is unknown, defaulting to 1000 [ 984.287491][ T3555] lo speed is unknown, defaulting to 1000 [ 984.422539][ T3569] pim6reg: entered allmulticast mode [ 984.487365][ T3573] pim6reg: left allmulticast mode [ 984.709419][ T3566] wg1 speed is unknown, defaulting to 1000 [ 984.717199][ T3566] lo speed is unknown, defaulting to 1000 [ 985.029391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 985.037454][ C1] lec:lec_tx_timeout: lec0 [ 985.043637][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 985.681361][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8196'. [ 985.769113][ T3599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8198'. [ 986.066950][ T3614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8201'. [ 986.174008][ T3619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8203'. [ 987.339775][ T3650] gre0 speed is unknown, defaulting to 1000 [ 987.413581][ T3652] netlink: 'syz.0.8209': attribute type 1 has an invalid length. [ 987.768171][ T3665] __nla_validate_parse: 3 callbacks suppressed [ 987.768192][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8212'. [ 988.027111][ T3681] netlink: 'syz.3.8214': attribute type 1 has an invalid length. [ 988.054248][ T3650] wg1 speed is unknown, defaulting to 1000 [ 988.062368][ T3650] lo speed is unknown, defaulting to 1000 [ 988.245847][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8218'. [ 988.421225][ T3698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8219'. [ 988.494382][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8220'. [ 988.736497][ T3712] netlink: 'syz.1.8222': attribute type 1 has an invalid length. [ 988.769601][ T3712] netlink: 174 bytes leftover after parsing attributes in process `syz.1.8222'. [ 988.848838][ T3712] workqueue: Failed to create a rescuer kthread for wq "phy7-mac-cmds": -EINTR [ 988.856761][ T3711] netlink: 'syz.1.8222': attribute type 1 has an invalid length. [ 988.912811][ T3711] netlink: 174 bytes leftover after parsing attributes in process `syz.1.8222'. [ 988.929283][ T3722] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 988.958541][ T3711] workqueue: Failed to create a rescuer kthread for wq "phy8-mac-cmds": -EINTR [ 989.037897][ T3728] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 989.292944][ T3738] netlink: 428 bytes leftover after parsing attributes in process `syz.4.8226'. [ 989.407475][ T3738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8226'. [ 989.443256][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8227'. [ 989.754651][ T3761] openvswitch: netlink: Actions may not be safe on all matching packets [ 989.912523][ T3765] netlink: 'syz.1.8235': attribute type 13 has an invalid length. [ 990.059043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 990.067150][ C1] lec:lec_tx_timeout: lec0 [ 990.072144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 990.215459][ T3787] netlink: 'syz.0.8240': attribute type 1 has an invalid length. [ 990.291539][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8240'. [ 990.403393][ T3797] netlink: 'syz.4.8242': attribute type 62 has an invalid length. [ 990.871916][ T3825] netlink: 'syz.4.8249': attribute type 4 has an invalid length. [ 991.650916][ T3855] tipc: New replicast peer: 255.255.255.255 [ 991.688000][ T3855] tipc: Enabled bearer , priority 10 [ 992.514435][ T3890] netlink: 'syz.3.8268': attribute type 83 has an invalid length. [ 992.809406][T21764] tipc: Node number set to 11777 [ 992.885662][ T3912] netlink: 'syz.1.8271': attribute type 1 has an invalid length. [ 992.948729][ T3912] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.271443][ T3930] netlink: 'syz.4.8274': attribute type 21 has an invalid length. [ 993.281243][ T3930] __nla_validate_parse: 7 callbacks suppressed [ 993.281264][ T3930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8274'. [ 993.319582][ T3930] netlink: 'syz.4.8274': attribute type 5 has an invalid length. [ 993.336273][ T3930] netlink: 'syz.4.8274': attribute type 6 has an invalid length. [ 993.348495][ T3930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8274'. [ 993.504195][ T3945] bridge0: port 3(gretap0) entered blocking state [ 993.511458][ T3945] bridge0: port 3(gretap0) entered disabled state [ 993.518319][ T3945] gretap0: entered allmulticast mode [ 993.526929][ T3945] gretap0: entered promiscuous mode [ 993.966674][ T3969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8279'. [ 994.095534][ T3976] syzkaller0: entered promiscuous mode [ 994.101703][ T3976] syzkaller0: entered allmulticast mode [ 994.207179][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8283'. [ 994.400107][ T3993] netlink: 'syz.1.8286': attribute type 10 has an invalid length. [ 994.408238][ T3993] syz_tun: entered promiscuous mode [ 994.416915][ T3993] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 995.079392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 995.087509][ C1] lec:lec_tx_timeout: lec0 [ 995.092274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 995.802961][ T3901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 996.053492][ T4010] netlink: 'syz.4.8291': attribute type 1 has an invalid length. [ 996.327400][ T4022] syzkaller1: entered promiscuous mode [ 996.342563][ T4022] syzkaller1: entered allmulticast mode [ 996.404657][ T4026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8296'. [ 996.433248][ T4025] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8297'. [ 996.491873][T21764] IPVS: starting estimator thread 0... [ 996.609839][ T4036] IPVS: using max 26 ests per chain, 62400 per kthread [ 996.755005][ T4053] netlink: 'syz.4.8304': attribute type 11 has an invalid length. [ 996.772768][ T4050] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 996.805026][ T4050] bond6 (unregistering): Released all slaves [ 996.857199][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8306'. [ 996.867084][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8306'. [ 996.935168][ T4061] team0 (unregistering): Failed to send options change via netlink (err -105) [ 996.967078][ T4061] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 996.987776][ T4061] team0 (unregistering): Port device team_slave_0 removed [ 997.015304][ T4061] team0 (unregistering): Failed to send options change via netlink (err -105) [ 997.025477][ T4061] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 997.051498][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 997.061753][ T4061] team0 (unregistering): Failed to send options change via netlink (err -105) [ 997.071399][ T4061] team0 (unregistering): Failed to send port change of device bridge3 via netlink (err -105) [ 997.097693][ T4061] team0 (unregistering): Port device bridge3 removed [ 997.198231][ T4077] gre0 speed is unknown, defaulting to 1000 [ 997.306446][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8312'. [ 997.500047][ T4092] netlink: 'syz.1.8316': attribute type 11 has an invalid length. [ 997.563525][ T4099] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8316'. [ 997.591010][ T4077] wg1 speed is unknown, defaulting to 1000 [ 997.598758][ T4077] lo speed is unknown, defaulting to 1000 [ 997.720661][ T4103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.991790][ T4114] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 998.153444][ T4124] netlink: 'syz.2.8327': attribute type 1 has an invalid length. [ 998.692019][ T4148] 8021q: adding VLAN 0 to HW filter on device bond11 [ 998.800168][ T4140] gre0 speed is unknown, defaulting to 1000 [ 998.981586][ T4161] __nla_validate_parse: 5 callbacks suppressed [ 998.981611][ T4161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8337'. [ 999.026691][ T4161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8337'. [ 999.110648][ T4169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8339'. [ 999.432625][ T4151] gre0 speed is unknown, defaulting to 1000 [ 999.452722][ T4140] wg1 speed is unknown, defaulting to 1000 [ 999.468326][ T4140] lo speed is unknown, defaulting to 1000 [ 999.476094][ T4184] netlink: 'syz.3.8341': attribute type 2 has an invalid length. [ 999.498498][ T4184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1000.031258][ T4177] gre0 speed is unknown, defaulting to 1000 [ 1000.099345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1000.107434][ C1] lec:lec_tx_timeout: lec0 [ 1000.112101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1000.171422][ T4199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1000.276658][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8344'. [ 1000.405651][ T4151] wg1 speed is unknown, defaulting to 1000 [ 1000.420273][ T4151] lo speed is unknown, defaulting to 1000 [ 1000.431443][ T4177] wg1 speed is unknown, defaulting to 1000 [ 1000.457127][ T4177] lo speed is unknown, defaulting to 1000 [ 1001.176808][ T4232] netlink: 'syz.4.8348': attribute type 1 has an invalid length. [ 1001.195600][ T4232] netlink: 'syz.4.8348': attribute type 6 has an invalid length. [ 1001.221246][ T4232] netlink: 'syz.4.8348': attribute type 3 has an invalid length. [ 1001.700012][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 1001.729120][ T4252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8354'. [ 1001.771747][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 1001.893844][ T4256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8356'. [ 1001.966686][ T4265] tunl0: Caught tx_queue_len zero misconfig [ 1002.110265][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1002.147906][ T4277] openvswitch: netlink: Unknown nsh attribute 0 [ 1002.289696][ T4287] netlink: 'syz.1.8365': attribute type 10 has an invalid length. [ 1002.325020][ T4289] nbd: nbd0 already in use [ 1002.521844][ T4297] gre0 speed is unknown, defaulting to 1000 [ 1002.739728][ T4297] wg1 speed is unknown, defaulting to 1000 [ 1002.747515][ T4297] lo speed is unknown, defaulting to 1000 [ 1002.966893][ T4323] netlink: 'syz.1.8377': attribute type 10 has an invalid length. [ 1002.994315][ T4320] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1003.497871][ T4347] tipc: Enabled bearer , priority 0 [ 1003.506050][ T4347] syzkaller0: entered promiscuous mode [ 1003.519701][ T4347] syzkaller0: entered allmulticast mode [ 1003.586578][ T4347] tipc: Resetting bearer [ 1003.610296][ T4345] tipc: Resetting bearer [ 1003.644002][ T4345] tipc: Disabling bearer [ 1003.651354][ T4352] netlink: 'syz.0.8384': attribute type 2 has an invalid length. [ 1003.672891][ T4352] !9: entered promiscuous mode [ 1003.684831][ T4350] netlink: 'syz.0.8384': attribute type 2 has an invalid length. [ 1003.702599][ T4350] !9: left promiscuous mode [ 1004.423265][ T4401] __nla_validate_parse: 7 callbacks suppressed [ 1004.423290][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8403'. [ 1004.569348][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8407'. [ 1005.119372][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1005.127475][ C1] lec:lec_tx_timeout: lec0 [ 1005.139451][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1005.480731][ T4445] netlink: 'syz.2.8416': attribute type 5 has an invalid length. [ 1005.498860][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8416'. [ 1005.521805][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8416'. [ 1006.893792][ T4489] netlink: 'syz.1.8429': attribute type 4 has an invalid length. [ 1006.904414][ T4489] netlink: 'syz.1.8429': attribute type 4 has an invalid length. [ 1007.502215][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8440'. [ 1007.541914][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1007.694017][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8445'. [ 1007.703689][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8445'. [ 1007.713801][ T4527] netlink: 'syz.0.8445': attribute type 14 has an invalid length. [ 1007.744027][ T4527] netlink: 'syz.0.8445': attribute type 13 has an invalid length. [ 1008.014965][ T4532] syzkaller0: entered promiscuous mode [ 1008.020578][ T4532] syzkaller0: entered allmulticast mode [ 1008.028375][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8446'. [ 1008.663593][ T4571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8457'. [ 1009.156632][ T4580] gre0 speed is unknown, defaulting to 1000 [ 1009.477625][ T4595] netlink: 'syz.2.8466': attribute type 2 has an invalid length. [ 1009.486080][ T4595] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8466'. [ 1009.922584][ T4616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8470'. [ 1010.075167][ T4580] wg1 speed is unknown, defaulting to 1000 [ 1010.136307][ T4580] lo speed is unknown, defaulting to 1000 [ 1010.149054][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1010.157146][ C1] lec:lec_tx_timeout: lec0 [ 1010.162559][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1010.289425][ T4628] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1010.295482][ T4628] pim6reg1: linktype set to 805 [ 1010.464940][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1010.548376][ T4633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1010.620332][ T4637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8479'. [ 1010.869726][ T4651] netlink: 'syz.3.8481': attribute type 23 has an invalid length. [ 1011.387808][ T4679] syz_tun: left promiscuous mode [ 1011.418401][ T4679] ip6tnl3: left allmulticast mode [ 1011.456352][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8489'. [ 1011.592531][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8491'. [ 1011.802559][ T4705] x_tables: duplicate underflow at hook 1 [ 1012.078633][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8500'. [ 1012.226113][ T4728] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1012.253064][ T4728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.400121][ T4735] syzkaller0: entered promiscuous mode [ 1012.405752][ T4735] syzkaller0: entered allmulticast mode [ 1012.652760][ T4744] gre0 speed is unknown, defaulting to 1000 [ 1012.658935][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1012.675269][ T4755] FAULT_INJECTION: forcing a failure. [ 1012.675269][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.701854][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.0.8511 Not tainted syzkaller #0 PREEMPT(full) [ 1012.701887][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.701903][ T4755] Call Trace: [ 1012.701912][ T4755] [ 1012.701923][ T4755] dump_stack_lvl+0xe8/0x150 [ 1012.701960][ T4755] should_fail_ex+0x412/0x560 [ 1012.701997][ T4755] _copy_from_user+0x2d/0xb0 [ 1012.702033][ T4755] kstrtouint_from_user+0xd6/0x180 [ 1012.702066][ T4755] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1012.702115][ T4755] proc_fail_nth_write+0x8e/0x210 [ 1012.702148][ T4755] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1012.702187][ T4755] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1012.702222][ T4755] vfs_write+0x29a/0xb90 [ 1012.702257][ T4755] ? __pfx_vfs_write+0x10/0x10 [ 1012.702283][ T4755] ? __fget_files+0x2a/0x420 [ 1012.702321][ T4755] ? __fget_files+0x3a0/0x420 [ 1012.702352][ T4755] ? __fget_files+0x2a/0x420 [ 1012.702395][ T4755] ksys_write+0x150/0x270 [ 1012.702423][ T4755] ? __pfx_ksys_write+0x10/0x10 [ 1012.702461][ T4755] do_syscall_64+0x14d/0xf80 [ 1012.702493][ T4755] ? trace_irq_disable+0x3b/0x150 [ 1012.702535][ T4755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.702558][ T4755] ? clear_bhb_loop+0x40/0x90 [ 1012.702587][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.702610][ T4755] RIP: 0033:0x7f7de515cfce [ 1012.702632][ T4755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1012.702651][ T4755] RSP: 002b:00007f7de60e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1012.702675][ T4755] RAX: ffffffffffffffda RBX: 00007f7de60e26c0 RCX: 00007f7de515cfce [ 1012.702692][ T4755] RDX: 0000000000000001 RSI: 00007f7de60e20a0 RDI: 0000000000000004 [ 1012.702707][ T4755] RBP: 00007f7de60e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.702721][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.702734][ T4755] R13: 00007f7de5416038 R14: 00007f7de5415fa0 R15: 00007ffdbd8e3a68 [ 1012.702771][ T4755] [ 1013.373425][ T4780] tipc: Enabled bearer , priority 0 [ 1013.390504][ T4780] syzkaller0: entered promiscuous mode [ 1013.399582][ T4780] syzkaller0: entered allmulticast mode [ 1013.442212][ T4780] tipc: Resetting bearer [ 1013.451571][ T4779] tipc: Resetting bearer [ 1013.484489][ T4779] tipc: Disabling bearer [ 1013.503040][ T4744] wg1 speed is unknown, defaulting to 1000 [ 1013.509568][ T4745] gre0 speed is unknown, defaulting to 1000 [ 1013.537638][ T4744] lo speed is unknown, defaulting to 1000 [ 1013.766809][ T4796] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1013.936550][ T4745] wg1 speed is unknown, defaulting to 1000 [ 1013.993950][ T4745] lo speed is unknown, defaulting to 1000 [ 1014.276350][ T4807] netlink: 'syz.1.8530': attribute type 9 has an invalid length. [ 1014.410298][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8531'. [ 1014.427857][ T4811] openvswitch: netlink: Flow actions attr not present in new flow. [ 1014.988921][ T4838] gre0 speed is unknown, defaulting to 1000 [ 1015.169306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1015.177425][ C1] lec:lec_tx_timeout: lec0 [ 1015.182474][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1015.663832][ T4865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8545'. [ 1015.676655][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8545'. [ 1015.698762][ T4838] wg1 speed is unknown, defaulting to 1000 [ 1015.745309][ T4838] lo speed is unknown, defaulting to 1000 [ 1015.858897][ T4886] netlink: 'syz.4.8549': attribute type 13 has an invalid length. [ 1016.078461][ T4890] netlink: 'syz.3.8552': attribute type 13 has an invalid length. [ 1016.106213][ T4885] gre0 speed is unknown, defaulting to 1000 [ 1016.596266][ T4885] wg1 speed is unknown, defaulting to 1000 [ 1016.669567][ T4885] lo speed is unknown, defaulting to 1000 [ 1016.849195][ T4910] netlink: 'syz.3.8558': attribute type 1 has an invalid length. [ 1017.251850][ T4932] 8021q: VLANs not supported on tunl0 [ 1017.442009][ T4937] gre0 speed is unknown, defaulting to 1000 [ 1017.452209][ T4942] tipc: Enabled bearer , priority 0 [ 1017.465787][ T4944] syzkaller0: entered promiscuous mode [ 1017.478446][ T4944] syzkaller0: entered allmulticast mode [ 1017.576354][ T4944] tipc: Resetting bearer [ 1017.645947][ T4944] tipc: Disabling bearer [ 1017.727594][ T4953] netlink: 'syz.0.8566': attribute type 1 has an invalid length. [ 1017.735950][ T4953] netlink: 'syz.0.8566': attribute type 1 has an invalid length. [ 1017.776425][ T4953] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1018.030876][ T4966] netlink: 16158 bytes leftover after parsing attributes in process `syz.0.8568'. [ 1018.111457][ T4969] FAULT_INJECTION: forcing a failure. [ 1018.111457][ T4969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.174522][ T4969] CPU: 1 UID: 0 PID: 4969 Comm: syz.1.8570 Not tainted syzkaller #0 PREEMPT(full) [ 1018.174553][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.174568][ T4969] Call Trace: [ 1018.174577][ T4969] [ 1018.174587][ T4969] dump_stack_lvl+0xe8/0x150 [ 1018.174624][ T4969] should_fail_ex+0x412/0x560 [ 1018.174659][ T4969] _copy_from_iter+0x1d3/0x1670 [ 1018.174695][ T4969] ? rcu_is_watching+0x15/0xb0 [ 1018.174732][ T4969] ? __pfx__copy_from_iter+0x10/0x10 [ 1018.174772][ T4969] ? netlink_sendmsg+0x650/0xb40 [ 1018.174802][ T4969] ? skb_put+0x11b/0x210 [ 1018.174839][ T4969] netlink_sendmsg+0x6c0/0xb40 [ 1018.174881][ T4969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.174916][ T4969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1018.174948][ T4969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1018.174977][ T4969] ____sys_sendmsg+0x972/0x9f0 [ 1018.175019][ T4969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.175053][ T4969] ? import_iovec+0x73/0xa0 [ 1018.175090][ T4969] ___sys_sendmsg+0x2a5/0x360 [ 1018.175119][ T4969] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.175182][ T4969] ? __fget_files+0x2a/0x420 [ 1018.175214][ T4969] ? __fget_files+0x3a0/0x420 [ 1018.175258][ T4969] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1018.175285][ T4969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1018.175319][ T4969] ? __pfx_ksys_write+0x10/0x10 [ 1018.175357][ T4969] do_syscall_64+0x14d/0xf80 [ 1018.175389][ T4969] ? trace_irq_disable+0x3b/0x150 [ 1018.175421][ T4969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.175450][ T4969] ? clear_bhb_loop+0x40/0x90 [ 1018.175477][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.175500][ T4969] RIP: 0033:0x7f378999c799 [ 1018.175520][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.175539][ T4969] RSP: 002b:00007f378a77c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.175562][ T4969] RAX: ffffffffffffffda RBX: 00007f3789c15fa0 RCX: 00007f378999c799 [ 1018.175579][ T4969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1018.175593][ T4969] RBP: 00007f378a77c090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.175607][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.175620][ T4969] R13: 00007f3789c16038 R14: 00007f3789c15fa0 R15: 00007fff896c3248 [ 1018.175656][ T4969] [ 1018.508906][ T4937] wg1 speed is unknown, defaulting to 1000 [ 1018.517019][ T4937] lo speed is unknown, defaulting to 1000 [ 1018.758774][ T4988] netlink: 'syz.2.8577': attribute type 4 has an invalid length. [ 1018.791824][ T4988] netlink: 'syz.2.8577': attribute type 4 has an invalid length. [ 1018.890054][ T4988] hsr0: left allmulticast mode [ 1018.895187][ T4988] hsr_slave_0: left allmulticast mode [ 1018.914586][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1018.917475][ T4988] hsr_slave_1: left allmulticast mode [ 1019.025873][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1019.408739][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1019.442481][ T5021] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1019.522970][ T5027] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1019.675916][ T5037] gre0: entered promiscuous mode [ 1019.681655][ T5037] gre0: entered allmulticast mode [ 1019.694948][ T5037] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1019.716442][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8592'. [ 1020.183645][ T5061] lo: Caught tx_queue_len zero misconfig [ 1020.351768][ T5071] x_tables: duplicate underflow at hook 2 [ 1020.410111][ T5069] gre0 speed is unknown, defaulting to 1000 [ 1020.441953][ T5081] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1020.485958][ T5084] netlink: 'syz.3.8603': attribute type 309 has an invalid length. [ 1020.495735][ T5084] tunl0: Caught tx_queue_len zero misconfig [ 1020.825892][ T5101] netlink: 'syz.4.8608': attribute type 1 has an invalid length. [ 1020.865913][ T5101] bond8: entered promiscuous mode [ 1020.872254][ T5101] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1020.959004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1020.967105][ C1] lec:lec_tx_timeout: lec0 [ 1020.979190][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1021.071437][ T5101] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1021.084465][ T5101] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 1021.106675][ T5101] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1021.166697][ T5101] bond8: (slave vti0): making interface the new active one [ 1021.174516][ T5101] vti0: entered promiscuous mode [ 1021.181605][ T5101] bond8: (slave vti0): Enslaving as an active interface with an up link [ 1021.198032][ T5069] wg1 speed is unknown, defaulting to 1000 [ 1021.198252][ T5095] gre0 speed is unknown, defaulting to 1000 [ 1021.220640][ T5069] lo speed is unknown, defaulting to 1000 [ 1021.439701][ T5129] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8613'. [ 1021.491295][ T5131] bridge4: entered promiscuous mode [ 1021.496581][ T5131] bridge4: entered allmulticast mode [ 1021.684649][ T5095] wg1 speed is unknown, defaulting to 1000 [ 1021.707296][ T5095] lo speed is unknown, defaulting to 1000 [ 1022.216046][ T5164] gre0 speed is unknown, defaulting to 1000 [ 1022.216439][ T5171] xfrm0: Caught tx_queue_len zero misconfig [ 1022.469932][ T5179] sctp: [Deprecated]: syz.4.8623 (pid 5179) Use of int in max_burst socket option. [ 1022.469932][ T5179] Use struct sctp_assoc_value instead [ 1022.784240][ T5164] wg1 speed is unknown, defaulting to 1000 [ 1022.799854][ T5188] pim6reg: entered allmulticast mode [ 1022.807404][ T5164] lo speed is unknown, defaulting to 1000 [ 1022.812005][ T5188] pim6reg: left allmulticast mode [ 1023.047568][ T5197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8628'. [ 1023.175410][ T5200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8629'. [ 1023.348586][ T5208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8631'. [ 1023.921810][ T5239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8636'. [ 1024.020774][ T5243] ip6tnl0: Caught tx_queue_len zero misconfig [ 1024.097146][ T5244] ip6tnl0: Caught tx_queue_len zero misconfig [ 1024.134086][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8641'. [ 1024.276445][ T5263] netlink: 'syz.3.8643': attribute type 1 has an invalid length. [ 1024.309949][ T5263] netlink: 476 bytes leftover after parsing attributes in process `syz.3.8643'. [ 1024.330817][ T5263] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.8643'. [ 1024.354133][ T5263] openvswitch: netlink: Message has 16 unknown bytes. [ 1024.363819][ T5271] netlink: 'syz.0.8647': attribute type 4 has an invalid length. [ 1024.391250][ T5272] netlink: 'syz.0.8647': attribute type 4 has an invalid length. [ 1024.569145][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1024.700662][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8651'. [ 1024.779200][ T5291] bond7: entered promiscuous mode [ 1024.784919][ T5291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1024.917833][ T5291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1024.927379][ T5291] bond7: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 1025.009187][ T5291] bond7: (slave ip6tnl4): Error -95 calling set_mac_address [ 1025.344111][ T5329] n: the hash_elasticity option has been deprecated and is always 16 [ 1025.383148][ T5329] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1025.419441][ T5337] n: the hash_elasticity option has been deprecated and is always 16 [ 1025.455679][ T5337] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1025.898934][ T5367] lo: left allmulticast mode [ 1025.904932][ T5367] gre0: left promiscuous mode [ 1025.912887][ T5367] gre0: left allmulticast mode [ 1025.999010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1026.007129][ C1] lec:lec_tx_timeout: lec0 [ 1026.013039][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1026.068459][ T5367] veth1: left allmulticast mode [ 1026.077560][ T5367] macsec1: left allmulticast mode [ 1026.232144][ T5385] netlink: 'syz.1.8676': attribute type 10 has an invalid length. [ 1026.244740][ T5385] syz_tun: entered promiscuous mode [ 1026.311708][ T5387] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1026.523045][ T5400] tipc: Failed to remove unknown binding: 66,0,0/3639144075:3252048611/3252048613 [ 1026.533870][ T5400] tipc: Failed to remove unknown binding: 66,0,0/3639144075:3252048611/3252048612 [ 1026.559551][ T5400] tipc: Failed to remove unknown binding: 66,0,0/3639144075:3252048611/3252048613 [ 1026.581463][ T5400] tipc: Failed to remove unknown binding: 66,0,0/3639144075:3252048611/3252048612 [ 1026.977363][ T5409] __nla_validate_parse: 10 callbacks suppressed [ 1026.977385][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8687'. [ 1027.284570][ T5419] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 1027.404932][ T5428] netlink: 'syz.3.8692': attribute type 10 has an invalid length. [ 1027.453969][ T5428] netlink: 'syz.3.8692': attribute type 1 has an invalid length. [ 1027.468694][ T5428] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8692'. [ 1027.525750][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8697'. [ 1027.535579][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8697'. [ 1028.315426][ T5434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.333944][ T5444] netlink: 'syz.1.8696': attribute type 1 has an invalid length. [ 1028.343939][ T5444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8696'. [ 1029.450083][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8701'. [ 1029.491612][ T5454] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1029.516641][ T5455] vlan0: entered allmulticast mode [ 1029.523176][ T5455] macsec0: entered allmulticast mode [ 1029.531298][ T5455] bond7: (slave vlan0): Error -34 calling dev_set_mtu [ 1029.610649][ T5469] netlink: 'syz.3.8706': attribute type 1 has an invalid length. [ 1029.627024][ T5469] nbd: couldn't find device at index -427251215 [ 1029.682799][ T5469] netlink: 'syz.3.8706': attribute type 1 has an invalid length. [ 1029.776279][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8709'. [ 1029.876390][ T5481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8710'. [ 1029.886763][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8711'. [ 1029.936923][ T5493] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1029.955591][ T5482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1030.113069][ T5500] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1030.708865][ T5527] netlink: 'syz.3.8721': attribute type 1 has an invalid length. [ 1030.719212][ T5527] NCSI netlink: No device for ifindex 0 [ 1030.811931][ T5534] syzkaller0: entered promiscuous mode [ 1030.817855][ T5534] syzkaller0: entered allmulticast mode [ 1031.029606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1031.037733][ C1] lec:lec_tx_timeout: lec0 [ 1031.043653][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1031.140059][ T5550] sctp: [Deprecated]: syz.3.8726 (pid 5550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1031.140059][ T5550] Use struct sctp_sack_info instead [ 1031.988072][ T5587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.139166][ T5598] __nla_validate_parse: 5 callbacks suppressed [ 1032.139191][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8737'. [ 1032.164202][ T5599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8736'. [ 1032.184511][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8737'. [ 1032.205407][ T5599] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1032.221294][ T5599] bond0 (unregistering): Released all slaves [ 1032.558897][ T5623] netlink: 'syz.2.8739': attribute type 13 has an invalid length. [ 1032.568460][ T5623] netlink: 'syz.2.8739': attribute type 17 has an invalid length. [ 1032.586898][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8742'. [ 1032.745122][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.767065][ T5623] bridge0: port 3(dummy0) entered blocking state [ 1032.774407][ T5623] bridge0: port 3(dummy0) entered forwarding state [ 1032.787742][ T5623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1032.866241][ T5639] netlink: 'syz.1.8748': attribute type 1 has an invalid length. [ 1032.874492][ T5639] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8748'. [ 1033.015680][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8749'. [ 1033.214493][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1033.366152][ T5670] netlink: 'syz.2.8758': attribute type 29 has an invalid length. [ 1033.390694][ T5665] netlink: 'syz.2.8758': attribute type 29 has an invalid length. [ 1033.446654][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8759'. [ 1033.454900][ T5678] x_tables: duplicate underflow at hook 1 [ 1033.520367][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8759'. [ 1033.897495][ T30] audit: type=1800 audit(1773751760.332:14): pid=5672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8756" name="memory.events" dev="tmpfs" ino=2674 res=0 errno=0 [ 1033.977530][ T5693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8763'. [ 1034.017488][ T5691] gre0 speed is unknown, defaulting to 1000 [ 1034.041631][ T5699] bridge0: port 3(dummy0) entered disabled state [ 1034.066654][ T5699] bridge0: entered allmulticast mode [ 1034.170736][ T5703] dummy0: left allmulticast mode [ 1034.176572][ T5703] dummy0: left promiscuous mode [ 1034.184448][ T5703] bridge0: port 3(dummy0) entered disabled state [ 1034.227051][ T5703] bridge_slave_1: left allmulticast mode [ 1034.240797][ T5703] bridge_slave_1: left promiscuous mode [ 1034.262635][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.301029][ T5703] bridge_slave_0: left allmulticast mode [ 1034.306887][ T5703] bridge_slave_0: left promiscuous mode [ 1034.313359][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.387083][ T5708] pim6reg: entered allmulticast mode [ 1034.404606][ T5709] team0: left allmulticast mode [ 1034.413063][ T5709] pim6reg: left allmulticast mode [ 1034.608763][ T5691] wg1 speed is unknown, defaulting to 1000 [ 1034.647213][ T5691] lo speed is unknown, defaulting to 1000 [ 1034.661988][ T5715] syzkaller0: entered promiscuous mode [ 1034.667659][ T5715] syzkaller0: entered allmulticast mode [ 1035.380952][ T5739] syz_tun: left promiscuous mode [ 1035.682870][ T5748] sctp: [Deprecated]: syz.3.8780 (pid 5748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.682870][ T5748] Use struct sctp_sack_info instead [ 1036.055425][ T5774] netlink: 'syz.2.8786': attribute type 1 has an invalid length. [ 1036.061562][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1036.071294][ C1] lec:lec_tx_timeout: lec0 [ 1036.077126][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1036.177516][ T5774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.197069][ T5778] team_slave_1: Caught tx_queue_len zero misconfig [ 1036.255357][ T5784] netlink: 'syz.1.8789': attribute type 1 has an invalid length. [ 1036.280317][ T5775] bond8: (slave gretap2): making interface the new active one [ 1036.298028][ T5775] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1036.375185][ T5784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.394311][ T5800] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1036.430858][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1036.441850][ T5790] bond8: (slave batadv1): making interface the new active one [ 1036.462826][ T5790] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1036.500014][ T5787] gre0 speed is unknown, defaulting to 1000 [ 1036.538107][ T5797] bond8 (unregistering): (slave batadv1): Releasing active interface [ 1036.572641][ T5797] bond8 (unregistering): Released all slaves [ 1036.887648][ T5814] syzkaller0: entered promiscuous mode [ 1036.899607][ T5814] syzkaller0: entered allmulticast mode [ 1037.325258][ T5837] __nla_validate_parse: 3 callbacks suppressed [ 1037.325283][ T5837] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1038.736956][ T5787] wg1 speed is unknown, defaulting to 1000 [ 1038.743076][ T5834] netlink: 'syz.2.8800': attribute type 29 has an invalid length. [ 1038.752606][ T5829] gre0 speed is unknown, defaulting to 1000 [ 1038.800240][ T5787] lo speed is unknown, defaulting to 1000 [ 1039.224497][ T5829] wg1 speed is unknown, defaulting to 1000 [ 1039.380185][ T36] dvmrp0: left allmulticast mode [ 1039.652657][ T36] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1039.714251][ T36] sit0 (unregistering): left allmulticast mode [ 1039.796510][ T36] batman_adv: batadv0: Removing interface: gretap1 [ 1040.055143][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1040.071471][ T36] bond0 (unregistering): Released all slaves [ 1040.083663][ T36] bond1 (unregistering): Released all slaves [ 1040.102819][ T36] bond2 (unregistering): (slave veth3): Releasing active interface [ 1040.113779][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 1040.124072][ T36] bond2 (unregistering): Released all slaves [ 1040.136989][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8817'. [ 1040.154541][ T36] bond3 (unregistering): Released all slaves [ 1040.173355][ T36] bond4 (unregistering): Released all slaves [ 1040.190503][ T36] bond5 (unregistering): Released all slaves [ 1040.208654][ T36] bond6 (unregistering): Released all slaves [ 1040.232936][ T36] bond7 (unregistering): Released all slaves [ 1040.250157][ T36] bond8 (unregistering): Released all slaves [ 1040.272955][ T36] bond9 (unregistering): Released all slaves [ 1040.291280][ T36] bond10 (unregistering): Released all slaves [ 1040.306467][ T5829] lo speed is unknown, defaulting to 1000 [ 1040.308720][ T5872] gre0 speed is unknown, defaulting to 1000 [ 1040.320334][ T5872] syz1: Port: 1 Link DOWN [ 1040.335471][ T3961] smc: removing ib device syz1 [ 1040.530169][ T5902] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1040.537530][ T8417] gre0 speed is unknown, defaulting to 1000 [ 1040.944671][ T5926] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1040.963587][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8823'. [ 1041.089573][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1041.097900][ C1] lec:lec_tx_timeout: lec0 [ 1041.103968][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1041.412321][ T5943] mac80211_hwsim hwsim81 syzkaller0: left promiscuous mode [ 1041.429313][ T5943] mac80211_hwsim hwsim81 syzkaller0: left allmulticast mode [ 1041.499422][ T5954] netlink: 'syz.2.8830': attribute type 10 has an invalid length. [ 1041.507437][ T5954] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1041.553441][ T5956] netlink: 'syz.2.8830': attribute type 2 has an invalid length. [ 1041.569134][ T5956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1041.708728][ T5954] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1041.751557][ T5966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1041.860847][ T5960] macsec2: entered promiscuous mode [ 1041.866141][ T5960] bridge0: entered promiscuous mode [ 1042.989283][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8844'. [ 1043.244472][ T6017] macvtap1: entered promiscuous mode [ 1043.250936][ T6017] veth1_to_hsr: entered promiscuous mode [ 1043.257070][ T6017] macvtap1: entered allmulticast mode [ 1043.263345][ T6017] veth1_to_hsr: entered allmulticast mode [ 1043.842900][ T6036] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1043.930958][ T6036] bond11 (unregistering): Released all slaves [ 1044.033258][ T6054] netlink: 'syz.0.8849': attribute type 7 has an invalid length. [ 1044.041827][ T6054] netlink: 'syz.0.8849': attribute type 5 has an invalid length. [ 1044.050369][ T6054] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1044.537620][ T6065] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1044.755404][ T6071] tipc: Enabling of bearer rejected, already enabled [ 1044.780159][ T6071] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 1044.788374][ T6071] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 1044.858591][ T6067] wg1 speed is unknown, defaulting to 1000 [ 1044.881343][ T6067] lo speed is unknown, defaulting to 1000 [ 1044.885156][ T6071] tipc: Resetting bearer [ 1045.198194][ T6076] wg1 speed is unknown, defaulting to 1000 [ 1045.222212][ T36] tipc: Disabling bearer [ 1045.300641][ T36] tipc: Disabling bearer [ 1045.331144][ T36] tipc: Left network mode [ 1045.335742][ T6076] lo speed is unknown, defaulting to 1000 [ 1045.362268][ T6083] nbd: socks must be embedded in a SOCK_ITEM attr [ 1045.383306][ T6083] block nbd5: shutting down sockets [ 1045.797364][ T36] IPVS: stopping backup sync thread 23891 ... [ 1045.910555][ T6098] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8861'. [ 1045.947045][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1046.098866][ T6106] IPVS: Error connecting to the multicast addr [ 1046.121831][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1046.129932][ C1] lec:lec_tx_timeout: lec0 [ 1046.135768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1046.266527][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8863'. [ 1046.300625][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8863'. [ 1046.329437][ T6110] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8863'. [ 1046.384725][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8864'. [ 1046.548286][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8865'. [ 1046.726546][ T6121] [ 1046.728946][ T6121] ====================================================== [ 1046.735983][ T6121] WARNING: possible circular locking dependency detected [ 1046.743025][ T6121] syzkaller #0 Not tainted [ 1046.747458][ T6121] ------------------------------------------------------ [ 1046.754502][ T6121] syz.4.8867/6121 is trying to acquire lock: [ 1046.760504][ T6121] ffff8880762eda98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x3e0 [ 1046.769446][ T6121] [ 1046.769446][ T6121] but task is already holding lock: [ 1046.776831][ T6121] ffff8880292618b0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1046.786257][ T6121] [ 1046.786257][ T6121] which lock already depends on the new lock. [ 1046.786257][ T6121] [ 1046.796676][ T6121] [ 1046.796676][ T6121] the existing dependency chain (in reverse order) is: [ 1046.805710][ T6121] [ 1046.805710][ T6121] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1046.813731][ T6121] __mutex_lock+0x19f/0x1300 [ 1046.818873][ T6121] elevator_change+0x1b3/0x450 [ 1046.824265][ T6121] elevator_set_none+0xb5/0x140 [ 1046.829665][ T6121] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1046.836109][ T6121] nbd_start_device+0x17f/0xb10 [ 1046.841606][ T6121] nbd_genl_connect+0x165b/0x1cf0 [ 1046.847182][ T6121] genl_family_rcv_msg_doit+0x22a/0x330 [ 1046.853271][ T6121] genl_rcv_msg+0x61c/0x7a0 [ 1046.858313][ T6121] netlink_rcv_skb+0x232/0x4b0 [ 1046.863619][ T6121] genl_rcv+0x28/0x40 [ 1046.868138][ T6121] netlink_unicast+0x80f/0x9b0 [ 1046.873446][ T6121] netlink_sendmsg+0x813/0xb40 [ 1046.878758][ T6121] ____sys_sendmsg+0x972/0x9f0 [ 1046.884066][ T6121] ___sys_sendmsg+0x2a5/0x360 [ 1046.889289][ T6121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1046.894787][ T6121] do_syscall_64+0x14d/0xf80 [ 1046.900023][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.906462][ T6121] [ 1046.906462][ T6121] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1046.915089][ T6121] blk_alloc_queue+0x546/0x680 [ 1046.920405][ T6121] __blk_mq_alloc_disk+0x197/0x390 [ 1046.926238][ T6121] nbd_dev_add+0x499/0xb50 [ 1046.931204][ T6121] nbd_init+0x168/0x1f0 [ 1046.935981][ T6121] do_one_initcall+0x250/0x8d0 [ 1046.941395][ T6121] do_initcall_level+0x104/0x190 [ 1046.946988][ T6121] do_initcalls+0x59/0xa0 [ 1046.951872][ T6121] kernel_init_freeable+0x2a6/0x3e0 [ 1046.957625][ T6121] kernel_init+0x1d/0x1d0 [ 1046.962515][ T6121] ret_from_fork+0x51e/0xb90 [ 1046.967652][ T6121] ret_from_fork_asm+0x1a/0x30 [ 1046.972960][ T6121] [ 1046.972960][ T6121] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1046.980189][ T6121] fs_reclaim_acquire+0x71/0x100 [ 1046.985666][ T6121] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1046.992099][ T6121] __alloc_skb+0x1d0/0x7d0 [ 1046.997069][ T6121] __ip6_append_data+0x2a44/0x3c50 [ 1047.002728][ T6121] ip6_append_data+0x10f/0x280 [ 1047.008071][ T6121] rawv6_sendmsg+0x12d3/0x18e0 [ 1047.013386][ T6121] ____sys_sendmsg+0x80a/0x9f0 [ 1047.018692][ T6121] ___sys_sendmsg+0x2a5/0x360 [ 1047.023914][ T6121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1047.029409][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.034559][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.041098][ T6121] [ 1047.041098][ T6121] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1047.048897][ T6121] lock_sock_nested+0x41/0x100 [ 1047.054226][ T6121] inet_shutdown+0x6a/0x390 [ 1047.059370][ T6121] nbd_mark_nsock_dead+0x2e9/0x560 [ 1047.065129][ T6121] sock_shutdown+0x15e/0x260 [ 1047.070284][ T6121] nbd_clear_sock+0x24/0x170 [ 1047.075464][ T6121] nbd_config_put+0x2dd/0x580 [ 1047.080692][ T6121] nbd_genl_connect+0x19d5/0x1cf0 [ 1047.086272][ T6121] genl_family_rcv_msg_doit+0x22a/0x330 [ 1047.092414][ T6121] genl_rcv_msg+0x61c/0x7a0 [ 1047.097551][ T6121] netlink_rcv_skb+0x232/0x4b0 [ 1047.102864][ T6121] genl_rcv+0x28/0x40 [ 1047.107386][ T6121] netlink_unicast+0x80f/0x9b0 [ 1047.112691][ T6121] netlink_sendmsg+0x813/0xb40 [ 1047.118003][ T6121] ____sys_sendmsg+0x972/0x9f0 [ 1047.123304][ T6121] ___sys_sendmsg+0x2a5/0x360 [ 1047.128525][ T6121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1047.134088][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.139232][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.145768][ T6121] [ 1047.145768][ T6121] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1047.153436][ T6121] __mutex_lock+0x19f/0x1300 [ 1047.158586][ T6121] nbd_queue_rq+0x37b/0x1100 [ 1047.163719][ T6121] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1047.169803][ T6121] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1047.176675][ T6121] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1047.183234][ T6121] blk_mq_run_hw_queue+0x348/0x4f0 [ 1047.188987][ T6121] blk_mq_dispatch_list+0xd16/0xe10 [ 1047.194746][ T6121] blk_mq_flush_plug_list+0x48d/0x570 [ 1047.200751][ T6121] __blk_flush_plug+0x3ed/0x4d0 [ 1047.206150][ T6121] __submit_bio+0x28d/0x580 [ 1047.211192][ T6121] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1047.217365][ T6121] block_read_full_folio+0x599/0x830 [ 1047.223191][ T6121] filemap_read_folio+0x137/0x3b0 [ 1047.228767][ T6121] do_read_cache_folio+0x358/0x590 [ 1047.234420][ T6121] read_part_sector+0xb6/0x2b0 [ 1047.239733][ T6121] adfspart_check_ICS+0xa5/0xa40 [ 1047.245302][ T6121] bdev_disk_changed+0x7ba/0x1550 [ 1047.250877][ T6121] blkdev_get_whole+0x380/0x510 [ 1047.256271][ T6121] bdev_open+0x31e/0xd30 [ 1047.261059][ T6121] blkdev_open+0x470/0x610 [ 1047.266014][ T6121] do_dentry_open+0x785/0x14e0 [ 1047.271328][ T6121] vfs_open+0x3b/0x340 [ 1047.275944][ T6121] path_openat+0x2e08/0x3860 [ 1047.281076][ T6121] do_file_open+0x23e/0x4a0 [ 1047.286140][ T6121] do_sys_openat2+0x113/0x200 [ 1047.291372][ T6121] __x64_sys_openat+0x138/0x170 [ 1047.296773][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.301909][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.308493][ T6121] [ 1047.308493][ T6121] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1047.315736][ T6121] __mutex_lock+0x19f/0x1300 [ 1047.320884][ T6121] nbd_queue_rq+0xc6/0x1100 [ 1047.325953][ T6121] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1047.332048][ T6121] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1047.339003][ T6121] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1047.345528][ T6121] blk_mq_run_hw_queue+0x348/0x4f0 [ 1047.351186][ T6121] blk_mq_dispatch_list+0xd16/0xe10 [ 1047.356930][ T6121] blk_mq_flush_plug_list+0x48d/0x570 [ 1047.362844][ T6121] __blk_flush_plug+0x3ed/0x4d0 [ 1047.368235][ T6121] __submit_bio+0x28d/0x580 [ 1047.373282][ T6121] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1047.379459][ T6121] block_read_full_folio+0x599/0x830 [ 1047.385306][ T6121] filemap_read_folio+0x137/0x3b0 [ 1047.390873][ T6121] do_read_cache_folio+0x358/0x590 [ 1047.396532][ T6121] read_part_sector+0xb6/0x2b0 [ 1047.401837][ T6121] adfspart_check_ICS+0xa5/0xa40 [ 1047.407326][ T6121] bdev_disk_changed+0x7ba/0x1550 [ 1047.412894][ T6121] blkdev_get_whole+0x380/0x510 [ 1047.418473][ T6121] bdev_open+0x31e/0xd30 [ 1047.423258][ T6121] blkdev_open+0x470/0x610 [ 1047.428224][ T6121] do_dentry_open+0x785/0x14e0 [ 1047.433536][ T6121] vfs_open+0x3b/0x340 [ 1047.438153][ T6121] path_openat+0x2e08/0x3860 [ 1047.443295][ T6121] do_file_open+0x23e/0x4a0 [ 1047.448344][ T6121] do_sys_openat2+0x113/0x200 [ 1047.453567][ T6121] __x64_sys_openat+0x138/0x170 [ 1047.458963][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.464125][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.470562][ T6121] [ 1047.470562][ T6121] -> #0 (set->srcu){.+.+}-{0:0}: [ 1047.477714][ T6121] __lock_acquire+0x15a5/0x2cf0 [ 1047.483114][ T6121] lock_sync+0x9d/0x120 [ 1047.487816][ T6121] __synchronize_srcu+0xca/0x3e0 [ 1047.493298][ T6121] elevator_switch+0x1e8/0x7a0 [ 1047.498690][ T6121] elevator_change+0x2cc/0x450 [ 1047.504002][ T6121] elevator_set_default+0x36c/0x430 [ 1047.509741][ T6121] blk_register_queue+0x366/0x430 [ 1047.515401][ T6121] __add_disk+0x677/0xd50 [ 1047.520274][ T6121] add_disk_fwnode+0xfb/0x480 [ 1047.525597][ T6121] nbd_dev_add+0x72c/0xb50 [ 1047.530618][ T6121] nbd_genl_connect+0x962/0x1cf0 [ 1047.536198][ T6121] genl_family_rcv_msg_doit+0x22a/0x330 [ 1047.542289][ T6121] genl_rcv_msg+0x61c/0x7a0 [ 1047.547337][ T6121] netlink_rcv_skb+0x232/0x4b0 [ 1047.552643][ T6121] genl_rcv+0x28/0x40 [ 1047.557165][ T6121] netlink_unicast+0x80f/0x9b0 [ 1047.562483][ T6121] netlink_sendmsg+0x813/0xb40 [ 1047.567792][ T6121] ____sys_sendmsg+0x972/0x9f0 [ 1047.573088][ T6121] ___sys_sendmsg+0x2a5/0x360 [ 1047.578308][ T6121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1047.583792][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.588929][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.595375][ T6121] [ 1047.595375][ T6121] other info that might help us debug this: [ 1047.595375][ T6121] [ 1047.606047][ T6121] Chain exists of: [ 1047.606047][ T6121] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 1047.606047][ T6121] [ 1047.619732][ T6121] Possible unsafe locking scenario: [ 1047.619732][ T6121] [ 1047.627198][ T6121] CPU0 CPU1 [ 1047.632766][ T6121] ---- ---- [ 1047.638147][ T6121] lock(&q->elevator_lock); [ 1047.642941][ T6121] lock(&q->q_usage_counter(io)#49); [ 1047.650875][ T6121] lock(&q->elevator_lock); [ 1047.658016][ T6121] sync(set->srcu); [ 1047.661927][ T6121] [ 1047.661927][ T6121] *** DEADLOCK *** [ 1047.661927][ T6121] [ 1047.670085][ T6121] 6 locks held by syz.4.8867/6121: [ 1047.675214][ T6121] #0: ffffffff8fc35450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1047.683433][ T6121] #1: ffffffff8fc35288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1047.692422][ T6121] #2: ffff88807c18c9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 1047.702812][ T6121] #3: ffff888029261940 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 1047.712676][ T6121] #4: ffff8880292613a8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1047.723763][ T6121] #5: ffff8880292618b0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1047.733720][ T6121] [ 1047.733720][ T6121] stack backtrace: [ 1047.739629][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.4.8867 Not tainted syzkaller #0 PREEMPT(full) [ 1047.739655][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.739670][ T6121] Call Trace: [ 1047.739682][ T6121] [ 1047.739692][ T6121] dump_stack_lvl+0xe8/0x150 [ 1047.739724][ T6121] print_circular_bug+0x2e1/0x300 [ 1047.739760][ T6121] check_noncircular+0x12e/0x150 [ 1047.739796][ T6121] __lock_acquire+0x15a5/0x2cf0 [ 1047.739825][ T6121] ? check_path+0x21/0x40 [ 1047.739860][ T6121] ? lockdep_unlock+0x5d/0xd0 [ 1047.739882][ T6121] ? __lock_acquire+0x146e/0x2cf0 [ 1047.739912][ T6121] ? __synchronize_srcu+0xb6/0x3e0 [ 1047.739936][ T6121] lock_sync+0x9d/0x120 [ 1047.739962][ T6121] ? __synchronize_srcu+0xb6/0x3e0 [ 1047.739989][ T6121] __synchronize_srcu+0xca/0x3e0 [ 1047.740014][ T6121] ? do_raw_spin_lock+0x12b/0x2f0 [ 1047.740036][ T6121] ? __pfx___synchronize_srcu+0x10/0x10 [ 1047.740067][ T6121] ? read_tsc+0x9/0x20 [ 1047.740089][ T6121] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1047.740124][ T6121] ? synchronize_srcu+0x295/0x2c0 [ 1047.740151][ T6121] elevator_switch+0x1e8/0x7a0 [ 1047.740172][ T6121] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1047.740198][ T6121] elevator_change+0x2cc/0x450 [ 1047.740220][ T6121] ? do_raw_spin_unlock+0xf5/0x210 [ 1047.740243][ T6121] elevator_set_default+0x36c/0x430 [ 1047.740271][ T6121] ? __pfx_elevator_set_default+0x10/0x10 [ 1047.740298][ T6121] ? disk_register_independent_access_ranges+0x2db/0x380 [ 1047.740330][ T6121] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1047.740357][ T6121] blk_register_queue+0x366/0x430 [ 1047.740382][ T6121] __add_disk+0x677/0xd50 [ 1047.740406][ T6121] ? down_read+0x272/0x2e0 [ 1047.740426][ T6121] add_disk_fwnode+0xfb/0x480 [ 1047.740450][ T6121] nbd_dev_add+0x72c/0xb50 [ 1047.740480][ T6121] ? __pfx_nbd_dev_add+0x10/0x10 [ 1047.740517][ T6121] ? bpf_lsm_capable+0x9/0x20 [ 1047.740543][ T6121] ? security_capable+0x7e/0x2c0 [ 1047.740565][ T6121] ? radix_tree_lookup+0x240/0x290 [ 1047.740588][ T6121] nbd_genl_connect+0x962/0x1cf0 [ 1047.740615][ T6121] ? __pfx___nla_validate_parse+0x10/0x10 [ 1047.740647][ T6121] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1047.740683][ T6121] ? rcu_is_watching+0x15/0xb0 [ 1047.740707][ T6121] ? trace_kmalloc+0x2a/0x110 [ 1047.740729][ T6121] ? __nla_parse+0x40/0x60 [ 1047.740756][ T6121] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1047.740776][ T6121] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1047.740799][ T6121] genl_family_rcv_msg_doit+0x22a/0x330 [ 1047.740822][ T6121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1047.740848][ T6121] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.740873][ T6121] genl_rcv_msg+0x61c/0x7a0 [ 1047.740894][ T6121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.740911][ T6121] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1047.740937][ T6121] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.740964][ T6121] netlink_rcv_skb+0x232/0x4b0 [ 1047.740988][ T6121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.741007][ T6121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.741039][ T6121] ? down_read+0x272/0x2e0 [ 1047.741054][ T6121] ? genl_rcv+0xd/0x40 [ 1047.741071][ T6121] genl_rcv+0x28/0x40 [ 1047.741087][ T6121] netlink_unicast+0x80f/0x9b0 [ 1047.741113][ T6121] ? __pfx_netlink_unicast+0x10/0x10 [ 1047.741135][ T6121] ? netlink_sendmsg+0x650/0xb40 [ 1047.741158][ T6121] ? skb_put+0x11b/0x210 [ 1047.741187][ T6121] netlink_sendmsg+0x813/0xb40 [ 1047.741216][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.741247][ T6121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1047.741277][ T6121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1047.741298][ T6121] ____sys_sendmsg+0x972/0x9f0 [ 1047.741315][ T6121] ? futex_unqueue+0x211/0x240 [ 1047.741339][ T6121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1047.741360][ T6121] ? import_iovec+0x73/0xa0 [ 1047.741389][ T6121] ___sys_sendmsg+0x2a5/0x360 [ 1047.741410][ T6121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1047.741430][ T6121] ? futex_wait+0x29a/0x380 [ 1047.741468][ T6121] ? __fget_files+0x2a/0x420 [ 1047.741493][ T6121] ? __fget_files+0x3a0/0x420 [ 1047.741524][ T6121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1047.741543][ T6121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1047.741565][ T6121] ? rcu_is_watching+0x15/0xb0 [ 1047.741601][ T6121] do_syscall_64+0x14d/0xf80 [ 1047.741627][ T6121] ? trace_irq_disable+0x3b/0x150 [ 1047.741653][ T6121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.741671][ T6121] ? clear_bhb_loop+0x40/0x90 [ 1047.741691][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.741709][ T6121] RIP: 0033:0x7fa55619c799 [ 1047.741727][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.741743][ T6121] RSP: 002b:00007fa557020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.741761][ T6121] RAX: ffffffffffffffda RBX: 00007fa556415fa0 RCX: 00007fa55619c799 [ 1047.741775][ T6121] RDX: 0000000004008008 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1047.741787][ T6121] RBP: 00007fa556232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1047.741798][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.741809][ T6121] R13: 00007fa556416038 R14: 00007fa556415fa0 R15: 00007ffcb4d869c8 [ 1047.741831][ T6121] [ 1048.392291][ T36] hsr_slave_0: left promiscuous mode [ 1048.417387][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8866'. [ 1048.623059][ T6122] nbd: must specify an index to disconnect [ 1048.769553][ T5921] udevd[5921]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1048.794593][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8866'. [ 1048.794596][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.794639][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.826778][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.835755][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.067027][ T36] IPVS: stop unused estimator thread 0... [ 1051.149550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1051.157624][ C1] lec:lec_tx_timeout: lec0 [ 1051.163011][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1056.179646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1056.187854][ C1] lec:lec_tx_timeout: lec0 [ 1056.193218][ C1] lec:lec_start_xmit: lec0:No lecd attached