last executing test programs: 16.387886967s ago: executing program 3 (id=8454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@fallback=r3, r3, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r2, r2, 0x2f, 0x0, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xd, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f0", 0x0, 0x200020fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r0, r1, 0x28, 0x0, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x34, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x18, 0x1}]}, 0x34}}, 0x0) 15.207685066s ago: executing program 2 (id=8457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x0) 14.537047027s ago: executing program 3 (id=8459): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000280)="69dbadc12e", 0x3, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410404"], 0x7) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1, {0x0, 0xff}, 0xfe}, 0x18) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000240)=@generic={0x1, "805f33737a98eb332642340e7bc17270284ba304166c95a6652b44320bff74ff74b721d57ffab1cc00c96613541cc59c329375b722a75a4c022fbaa397abd136f844161477d701cfc247eee75db6d0115dcc158a529bcc394de7cb20ad6ed39da0e6cb95e1ad4676d9b6a9e91b5ae05dac421e1dee4ab21f1d3e2257ee74"}, 0x80, 0x0, 0x0, 0x0, 0x2350}}], 0x1, 0x4000041) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000015c0), &(0x7f0000001600)=[{0x0, 0x3, 0x3, 0x2}, {0x0, 0x5, 0xc}, {0xfffffffe, 0x4, 0xb, 0x9}], 0x10, 0x59}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000001700)=r5) 14.410390084s ago: executing program 1 (id=8460): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) unshare(0x2e020400) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b000100627269646765000010000280eec10c002e000000000010000000"], 0x40}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000240)=@nfc={0x27, r9, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="61486c8c68221110d83221fb117a630f1798", 0x12}, {&(0x7f0000000480)="0ad327f7db4b3d183586afd51cd3c4af6f7a4ef93691ca2c5360f687b904497e04bc2b815596b060f9ae7a92b980a427e6f369072d3c13dda1a13869", 0x3c}, {&(0x7f00000004c0)="5e3c5564e8ea578536daee76b29b1a151568686a38260ada0ecb34296ce96c604799cc2a5ec3ffa094f52a202031ae754bbc7ba89a0bc7b14a81ca00e27d201cad4b85aecc047c3d7f0fe8c284262c5b133e3593bf1ba45baaa51f803269ef8cd7e7fb32994df5178cdef0f74c3ebbabb87515dfc5f92b702ecadab2c69bfe2387a2b51775846954ffe4ce90835309a6efd78594328d5f3fec41f83a1409249d86051674e1", 0xa5}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="980000000000f1000e010000030000008ee0185587d2b6e7a83cd7ec416a9f6b8bfe25916a852a10adbf8ec1eac55a6c3f42c1b5a511c51a6a9fadcb54a2aac62872eb08616f5125a1bdd834ed14b3d80d7613ebcd26d06347250ccf6a650392bbb40decd06af90bf925478758cc1c6573caf37b9551edd6b9c9ba6ff33b84919b8d87481d91c6bb2e631296f95e12f33032000000000000"], 0x98}, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r10, @ANYRESDEC=r14], 0x50}, 0x1, 0x0, 0x0, 0xc00}, 0x8040) poll(&(0x7f00000000c0)=[{r1, 0x5220}, {r1, 0x2000}, {r1, 0x4000}, {r12, 0x8000}, {r0, 0xa010}, {r0, 0x2400}, {r0}], 0x7, 0x8) 13.341330519s ago: executing program 2 (id=8461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f0000ff", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x1}, 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000500)={@dev={0xac, 0x14, 0x14, 0x26}, @local}, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x400, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004891}, 0x2000c001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 12.101413731s ago: executing program 4 (id=8463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x200}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x5, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 11.122723673s ago: executing program 2 (id=8464): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x8, 0x7, 0xb, 0x0, 0xb, 0x9, 0x8, 0x9, 0x4, [0xa, 0xffff, 0x7, 0x8, 0x529, 0x8, 0x50, 0xb9ac]}}) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x2, &(0x7f0000000300)=@raw=[@generic={0x67, 0x3, 0x0, 0x3, 0x20}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x108, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xdc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_SEL={0x14, 0x5, {0xa, 0x9, 0x2, 0x3, 0x6, 0x4, 0x5, 0x4fc}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_SEL={0xb4, 0x5, {0x2c, 0x2, 0x7, 0x1, 0x8, 0x7, 0x1, 0x8, [{0x5, 0x1, 0xffffb57b, 0x5}, {0x121e7c9d, 0x6, 0x0, 0x8}, {0x7, 0x88, 0xfffffffb, 0xffff}, {0x3, 0x92fd, 0x5}, {0x10000, 0xfffffffb, 0x1, 0x7}, {0xbb6, 0x7fff, 0xfffffff1, 0x4}, {0x8000, 0x9, 0xf0, 0x4}, {0x1, 0x5, 0xfffffffe, 0xe0000000}, {0x7, 0x8, 0xcae, 0x3}, {0x1, 0xb, 0xff, 0xfffffff8}]}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xfb, 0x6, 0x45, @mcast2, @mcast2, 0x7, 0x700, 0xb, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x8225, 0x1, {{0x3d, 0x4, 0x3, 0x2f, 0xf4, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, {[@noop, @ssrr={0x89, 0x13, 0xd8, [@dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @multicast2, @remote]}, @timestamp={0x44, 0x1c, 0x95, 0x0, 0xd, [0x1000000, 0x8, 0x3, 0xe3e, 0xf98, 0xe77f]}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x5, 0x0}, 0x9}, {@empty, 0x6}, {@loopback, 0xe0000}, {@broadcast, 0x2}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x23, 0x6f, [@remote, @private=0xa010100, @rand_addr=0x64010101, @remote, @dev, @broadcast, @remote, @multicast1]}, @cipso={0x86, 0x42, 0x0, [{0x1, 0x7, "610c82bed1"}, {0x6, 0x12, "a8e7d70f33faabc3633e2aa3e1691f45"}, {0x5, 0x12, "88ea5c104a02eadef5788596138eccbe"}, {0x2, 0x11, "40e5d4e839ea47967e7312b082183b"}]}, @generic={0x7, 0x12, "469d8367566c8bf89e5d724a7505a9a0"}, @noop, @ssrr={0x89, 0xb, 0xfc, [@multicast1, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x81, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, 0x80, 0x20, 0x1000, 0x8}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000b00)={0x0, @empty, @broadcast}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', 0x0, 0x2f, 0x83, 0x48, 0x3, 0x1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x4000, 0x0, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x80, 0x80, 0x5, 0x7, {{0x1f, 0x4, 0x1, 0x1, 0x7c, 0x64, 0x0, 0xc5, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@noop, @ssrr={0x89, 0x1b, 0xb7, [@multicast1, @private=0xa010100, @empty, @multicast1, @remote, @multicast2]}, @timestamp={0x44, 0x14, 0x9f, 0x0, 0x7, [0x7, 0x2d3, 0x1, 0xf]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x0, [0x4]}, @noop, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x37, 0x1, 0x1, [{@local, 0x2}]}, @end, @ssrr={0x89, 0x1b, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @remote, @multicast1, @rand_addr=0x64010101]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000002100)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="000428bd7000070000000000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365726cc9f452464b6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14020280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000074fd030003000000080004009899000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400030000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400070003080400000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0400028008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f0000"], 0x620}, 0x1, 0x0, 0x0, 0x805}, 0x24004800) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.937718565s ago: executing program 3 (id=8465): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x53, 0x20040000) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x10, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012940b0001ce0f7036746e6c00001800028014000300ffc82a16cbef249d7d4ea6e69cc19a04"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r5, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) 10.859512088s ago: executing program 1 (id=8466): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x8, 0x7, 0xb, 0x0, 0xb, 0x9, 0x8, 0x9, 0x4, [0xa, 0xffff, 0x7, 0x8, 0x529, 0x8, 0x50, 0xb9ac]}}) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x2, &(0x7f0000000300)=@raw=[@generic={0x67, 0x3, 0x0, 0x3, 0x20}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x108, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xdc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_SEL={0x14, 0x5, {0xa, 0x9, 0x2, 0x3, 0x6, 0x4, 0x5, 0x4fc}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_SEL={0xb4, 0x5, {0x2c, 0x2, 0x7, 0x1, 0x8, 0x7, 0x1, 0x8, [{0x5, 0x1, 0xffffb57b, 0x5}, {0x121e7c9d, 0x6, 0x0, 0x8}, {0x7, 0x88, 0xfffffffb, 0xffff}, {0x3, 0x92fd, 0x5}, {0x10000, 0xfffffffb, 0x1, 0x7}, {0xbb6, 0x7fff, 0xfffffff1, 0x4}, {0x8000, 0x9, 0xf0, 0x4}, {0x1, 0x5, 0xfffffffe, 0xe0000000}, {0x7, 0x8, 0xcae, 0x3}, {0x1, 0xb, 0xff, 0xfffffff8}]}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xfb, 0x6, 0x45, @mcast2, @mcast2, 0x7, 0x700, 0xb, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x8225, 0x1, {{0x3d, 0x4, 0x3, 0x2f, 0xf4, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, {[@noop, @ssrr={0x89, 0x13, 0xd8, [@dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @multicast2, @remote]}, @timestamp={0x44, 0x1c, 0x95, 0x0, 0xd, [0x1000000, 0x8, 0x3, 0xe3e, 0xf98, 0xe77f]}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x5, 0x0}, 0x9}, {@empty, 0x6}, {@loopback, 0xe0000}, {@broadcast, 0x2}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x23, 0x6f, [@remote, @private=0xa010100, @rand_addr=0x64010101, @remote, @dev, @broadcast, @remote, @multicast1]}, @cipso={0x86, 0x42, 0x0, [{0x1, 0x7, "610c82bed1"}, {0x6, 0x12, "a8e7d70f33faabc3633e2aa3e1691f45"}, {0x5, 0x12, "88ea5c104a02eadef5788596138eccbe"}, {0x2, 0x11, "40e5d4e839ea47967e7312b082183b"}]}, @generic={0x7, 0x12, "469d8367566c8bf89e5d724a7505a9a0"}, @noop, @ssrr={0x89, 0xb, 0xfc, [@multicast1, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x81, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, 0x80, 0x20, 0x1000, 0x8}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000b00)={0x0, @empty, @broadcast}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', 0x0, 0x2f, 0x83, 0x48, 0x3, 0x1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x4000, 0x0, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x80, 0x80, 0x5, 0x7, {{0x1f, 0x4, 0x1, 0x1, 0x7c, 0x64, 0x0, 0xc5, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@noop, @ssrr={0x89, 0x1b, 0xb7, [@multicast1, @private=0xa010100, @empty, @multicast1, @remote, @multicast2]}, @timestamp={0x44, 0x14, 0x9f, 0x0, 0x7, [0x7, 0x2d3, 0x1, 0xf]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x0, [0x4]}, @noop, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x37, 0x1, 0x1, [{@local, 0x2}]}, @end, @ssrr={0x89, 0x1b, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @remote, @multicast1, @rand_addr=0x64010101]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000002100)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="000428bd7000070000000000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365726cc9f452464b6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14020280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400030000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400070003080400000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0400028008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f0000"], 0x620}, 0x1, 0x0, 0x0, 0x805}, 0x24004800) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.687826057s ago: executing program 0 (id=8467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000300)='./file0\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x3c, 0x43, 0x107, 0x70b92a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x20, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x10001}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x280040, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) sendto$packet(r8, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 9.743700302s ago: executing program 4 (id=8468): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) r4 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 8.606753561s ago: executing program 3 (id=8469): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/121, 0x79}], 0x1, &(0x7f00000029c0)=""/78, 0x4e}, 0x6}], 0x1, 0x40001102, 0x0) sendmsg$tipc(r6, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0205865, &(0x7f0000000fc0)={&(0x7f0000000040)=0xb, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f80)}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x20, 0x36, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r1, @ANYRES8=r0], 0xfdef) 8.002877157s ago: executing program 0 (id=8470): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x24, 0x7400}, 0x4000) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240), 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x20003}}], 0x4}, 0x2400c804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000200)={0x1f, 0xffff}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000000000095000000000000003cc952d5623c07daca142588bad6e2c419232af8213037a83091bdfb3c0d56e1f38c926b1e70c59cf4856d95264dbf6293b17f355b4355704ecf9a181796e22c4675f09f18dd3734d3dd5574b091e0a012ec34b9edc5104dc355bf205207c49240602d7acd2b"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r6, &(0x7f0000000700)="b068", 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x8) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x58, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.571605634s ago: executing program 1 (id=8471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="015f0000", @ANYRES8=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0x891b, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300023a"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000012c0)={r2, &(0x7f0000000140)='\xc7:+#}{\x00', 0x200501, &(0x7f00000001c0)={@align=0x400, {0x2, 0x2, 0x3, 0x5}}, 0x3, &(0x7f0000001240), &(0x7f0000001280)=0x80000000}) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e20, 0xa, @loopback, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000180)=0x80, 0x33) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r5, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) syz_emit_ethernet(0x1016, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0x54, '/', "c63395", 0x6005, "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"}}}}}, 0x0) 6.238364659s ago: executing program 4 (id=8472): syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 5.953348787s ago: executing program 0 (id=8473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff53}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000) (async, rerun: 64) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028006001000000f00001400060000000000000000000000ffff00efffff090001"], 0x60}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x101a1}, [@IFLA_LINKINFO={0x7e, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff7fff}]}}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x5c}}, 0x8000000) 5.945734167s ago: executing program 4 (id=8474): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000014000100000000000000000023000000", @ANYRES32=0x1, @ANYBLOB="aa0000000000000404cbd454485a7472650b372698ebeaa0e78ab5f9004dc9834562aab05eb7f15ea232f575a62c1708a2cfbcd332436aee1bed9874d407f9542dbda9542618ec9a5f7954695c91daa1c313cd596094405451136eb2b9"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000002000115b24e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d4330000007f000001020000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0100000000000000ffffffffffffffff00000000000000002300000000000000feffffffffffffff02000000fcffffff000000002abd70000435000002000100200000000000000048000100686d6163287368613235362900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x784, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="021800000200"/16], 0x10}}, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x163, 0x0) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4800) listen(r3, 0x5) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r8, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r10}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 5.685237969s ago: executing program 1 (id=8475): syz_emit_ethernet(0xa1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000240)={0x0, 0x3, [0x99c, 0x651, 0xb5, 0x132]}) (async) syz_emit_ethernet(0xa1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000240)={0x0, 0x3, [0x99c, 0x651, 0xb5, 0x132]}) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000bfa400000000000007040000f8ffffffb70500000800000085000000190000009500000000000070"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000bfa400000000000007040000f8ffffffb70500000800000085000000190000009500000000000070"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003f00)=""/4108, 0x100c}], 0x1}}], 0x1, 0x40000020, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003f00)=""/4108, 0x100c}], 0x1}}], 0x1, 0x40000020, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r4 = socket(0x2c, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x21}}}, @dstopts_2292={{0x10, 0x29, 0x4, {0x7}}}], 0x30}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000280)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x4, 0xffffffff, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000480)={0x6, {{0xa, 0x4e24, 0x4, @remote, 0xca02}}, {{0xa, 0x4e21, 0x7f, @mcast2, 0x3}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bind$xdp(r6, &(0x7f0000000340)={0x2c, 0x3, 0x0, 0x6}, 0x10) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000680)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}, @IFLA_MAP={0x24, 0xe, {0x65, 0x5, 0xa7, 0x3, 0x9, 0x7}}]}, 0x68}}, 0x0) 5.682676532s ago: executing program 2 (id=8476): r0 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x2}, 0x10}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x20, 0x7f70, {{0x2a, 0x4, 0x2, 0x1, 0xa8, 0x66, 0x0, 0x2, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xec, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x80000001}, {@multicast1, 0x9}, {@multicast2, 0x3}, {@multicast2}, {@multicast1, 0x2e56cf00}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x401}, {@local, 0x7f0}, {@local, 0x101}, {@loopback, 0xdf}]}, @end, @generic={0x94, 0x6, "9349f59f"}, @timestamp_prespec={0x44, 0x34, 0x43, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe99}, {@loopback, 0x5}, {@multicast2, 0xe}, {@multicast2, 0x4e}, {@multicast1, 0x7ff}, {@broadcast, 0xb}]}, @end]}}}}}) 4.13873119s ago: executing program 2 (id=8477): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x6, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc, 0x2b}, 0x2000, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f09}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x503, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffffe}]}, 0x28}, 0x1, 0x2000, 0x0, 0xc0}, 0x4048800) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xa}, 0x6}) accept4(r4, 0x0, 0x0, 0x81800) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a297f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}}, 0x0) 4.024972567s ago: executing program 3 (id=8478): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe0}]}]}, 0x2c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xc2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000200), 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x1, r9, 0x20000002}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 3.059619954s ago: executing program 0 (id=8479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x24, r3, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100e4ff"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r7, 0x4}, &(0x7f00000000c0)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.943961002s ago: executing program 4 (id=8480): syz_emit_ethernet(0xaee, &(0x7f0000000d40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0xab8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x39, 0x3, "bf5c1c6dbc7edaffb0683dc337f8f4b8a8384755bd2289a152058fed3b"}, {0x1f, 0x11, "0feb81fa03f381e6e9674bbd18aafc57e93b5e76179f9e4668a66e8223171f0d6300a29979616c459780de277c59119806c09d0ef66051241390251b8d86d8e93ecdee7f39d45f05397b5d42cfa17c770d2279ea50a045a7190bd9060e0b132699b521d81c349e176ac7080b486ba07c7480aae762bfb954e460c2339694619f92165017fbdc"}, {0x2, 0xf, "fc16626634a4290ce986ed9efcc1fbe5d28740d1dc9391d174fd583a516b68d33bd292877570727e9081cddaec5c3124e05c0d7fc05623ccd09b0adc4bf8d8e8de44588a1414b752e0fb11e77481d002de3b98f4346bf72f5f13fbbeaf972ed3aa8258abdbf19666bc96c58d134aced41ffed9c4fa5ceb2ad7c7bda5"}, {0x1, 0xc, "c148deb184b97a6bef586904d7af4dcf92d36b7d10e42e250ae0ec9249eebde2778bb65b8df056eda3d415a285c7e24229698a4c5ad3b9854e13025f711a36211d879d26da1304e5978a8ff39b7c5e11bfd7f4a32ceff045112373c75737878b"}, {0x1f, 0x12, "f1681a24d1d29e86011726a3f5cfc4df2135839d39e7e132755d01ff1ebbd752c57921015e6156511f424a08b8bc1be137045a4aaf9cf324ee06fb69e5821e57c65eeaa850ff7e3708c8d81173540bc4b2bec7b7ecb29b26e6b87a20b99de1dd83a9e8d9541b500f0362feee3e9c964d0482b37ebb09051b391019a899f0edcfc74a7f89a3b3d188b41ce4b524bab8"}, {0x1d, 0x17, "3c68f82bc90582c7175e56570bc9cb2a7e17a6a274986d710c846cb7601d9aa3f76588b1cf404b92c75fc692fa56fba5ae84aa1436299d4260f79f44d7cc712f645ca1d045feaba065880b1dac2460a82d731e20de0786cb80f1dbb1b4265b69a8125319448e8f8c7ac9e24a7a4ea69928f60626f9f15dadb1a5b0fa1bdf12b02c6393ddba407259972d5f026fb94d4640cd0d3a1127247e5b7dbca325f39cba572a32a66c817cab745589a20230012d951f075a3b8b6475"}, {0x5, 0xda, "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"}, {0xe, 0x20, "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"}]}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, 0x0, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x40008}, 0x884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x4d}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000eeff00000000003de33103b8f75b645c1432191901008141db4b0e28174197ac1ed0bd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) unshare(0x22020600) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7fffffff}}, 0x2000000, 0xa0e, 0x3, 0x51, 0xaa, 0x89, 0xf}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r9, 0x5, 0x31, "ba3697bbdbbde0ecd505885fa5b784df111fd4de29e9784011eb78761cdcadb7f279b341db4a793bcc40607c15c633e0f3"}, 0x39) 2.934702397s ago: executing program 2 (id=8481): unshare(0x6a020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000100)="3682", 0x2, 0x48c71, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYRES32, @ANYBLOB="7f34dd9e2666e29fa4f5a72146b75b5e1016b612627f59830b3873d1a302ed6cf68403a244eae63598fb99aa382b619c93b944c1c626dd7fd269bd09fa51d40b21ab544845f26199c86018ae1754a6cb60f79ec7776ea475478b203bf0e30cd7908e185655e2232cdeedc71c6f1e978d70ee55d70a49da4a1e8911cbe5e1b10cbc6e8db80570", @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYBLOB="3b61e65409791a3a0cc9f84107ff2af1930b98ca99f764b20a5aaa1410593d0706fee3c15dd5dcaf3c8a843411013da12c06be1c51abd497693d1c58c69c9780cf5db5dd387e8bd22601b277de46dbcb1fe34972113cbd4fe1e9c06f05f7e86997e72c3b38c074d88e740f02dc9674000b5b2ac1cdd2ddadc5ba2637913446c9328c0ff3f64064fffe177085f74e7b18e8a06535599f4c5e68efcdc39faa45b931ab21f4889311bd7a049976de335c1c3006ac5dbec97c60ad57090c43dd960d7a80fc0f8155e2b80cfd53b13f25b2053fe8ea02b3dcf2387ed19ce416", @ANYRESDEC=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @local}, 0x1, 0x0, 0x2, 0x3}}, 0x26) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r6, 0x4}, 0x38) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r4, &(0x7f00000006c0)={0x11, 0x0, r8, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000867078c30000880100000000000000"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x5, 0x10}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 2.551703155s ago: executing program 1 (id=8482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="d28e01103108060000000000fbfd", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940)={r2}, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket(0x1d, 0x80000, 0x38) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000100), 0x80000) 1.970569072s ago: executing program 3 (id=8483): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000280)="69dbadc12e", 0x3, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410404"], 0x7) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1, {0x0, 0xff}, 0xfe}, 0x18) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000240)=@generic={0x1, "805f33737a98eb332642340e7bc17270284ba304166c95a6652b44320bff74ff74b721d57ffab1cc00c96613541cc59c329375b722a75a4c022fbaa397abd136f844161477d701cfc247eee75db6d0115dcc158a529bcc394de7cb20ad6ed39da0e6cb95e1ad4676d9b6a9e91b5ae05dac421e1dee4ab21f1d3e2257ee74"}, 0x80, 0x0, 0x0, 0x0, 0x2350}}], 0x1, 0x4000041) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000015c0), &(0x7f0000001600)=[{0x0, 0x3, 0x3, 0x2}, {0x0, 0x5, 0xc}, {0xfffffffe, 0x4, 0xb, 0x9}], 0x10, 0x59}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000001700)=r5) 1.72118228s ago: executing program 0 (id=8484): syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 940.165048ms ago: executing program 4 (id=8485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1040, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x1c, 0x24, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x12, 0x0, {0xa, 0xe}, {0xfff3, 0xffff}, {0x1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc011}, 0x4004810) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae4, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e23, 0x6, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x33}, {0x5, 0x9, 0x3, 0x0, 0x0, 0x6, 0x6, 0x6}, {0xff, 0x7f, 0xfffffffffffffff9}, 0x1, 0x6e6bb9, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x3c}, 0x0, @in=@local, 0x3500, 0x0, 0x1, 0x6, 0x2, 0x200, 0x7f}}, 0xe8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xbc, 0x2, {{0x0, [0x0, 0x7, 0x1, 0xc, 0xf, 0xd, 0x7, 0xa, 0x7, 0xc, 0x0, 0xb, 0x0, 0x10, 0x1, 0x10], 0x1, [0x2, 0xfffc, 0x4f, 0x7, 0x8, 0x9, 0x7f, 0xffff, 0x2b6, 0x3, 0x4, 0x4, 0x5, 0x36dd, 0x8b9, 0x50], [0x9, 0x9, 0xbaed, 0x6, 0xf, 0x401, 0xa42e, 0x8, 0xfffb, 0xc, 0xb, 0x8, 0x9bd, 0x392, 0x0, 0x2d7]}, [@TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xd54}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0xec}}, 0x8004) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 643.903373ms ago: executing program 1 (id=8486): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000600000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000006001000000010000e006020000f5d083443d30659ac539ab15f7896e85ffbe51d38b4f70535cf61509d9b5b2775b64e4b97940dfc1ac61f69928c507b483754d958b762105c520026e096053958e8231849e5ec17c39857ebc5f4e9613dda4e97eeca8cee67b9ed79802e33b1a846e71c93ff6d29e5bdc24e5dfec6de321c6cfea4872"], 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000600000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000006001000000010000e006020000f5d083443d30659ac539ab15f7896e85ffbe51d38b4f70535cf61509d9b5b2775b64e4b97940dfc1ac61f69928c507b483754d958b762105c520026e096053958e8231849e5ec17c39857ebc5f4e9613dda4e97eeca8cee67b9ed79802e33b1a846e71c93ff6d29e5bdc24e5dfec6de321c6cfea4872"], 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0xfffffffffffffd50}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c6000000", @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c6000000", @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x1c118f48e6f7345d) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=8487): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x22, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESOCT=r2, @ANYBLOB="608076fd97973437a90c4d41079706bee8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRESOCT=r1, @ANYRES8=r6], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) kernel console output (not intermixed with test programs): 1: left promiscuous mode [ 1102.970313][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.002824][ T4642] bond0: (slave bond_slave_0): Releasing backup interface [ 1103.021825][ T4642] bond0: (slave bond_slave_1): Releasing backup interface [ 1103.063261][ T4642] team0: Port device team_slave_0 removed [ 1103.077260][ T4642] team0: Port device team_slave_1 removed [ 1103.084806][ T4642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.089975][ T4314] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.092712][T26607] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.092822][T26607] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.092914][T26607] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.206305][ T4666] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1103.206696][ T4666] netlink: 'syz.2.7122': attribute type 1 has an invalid length. [ 1103.297121][ T4666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1103.645204][ T4697] pim6reg: entered allmulticast mode [ 1103.672905][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7129'. [ 1103.768465][ T4707] IPVS: set_ctl: invalid protocol: 47 172.20.20.50:20003 [ 1103.927268][ T4706] ip6gretap1: entered allmulticast mode [ 1103.984776][ T4696] pim6reg: left allmulticast mode [ 1104.037380][ T4728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1104.197422][ T4730] bridge0: port 3(vlan3) entered disabled state [ 1104.197829][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.198680][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.414695][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.516451][ T4744] netlink: 'syz.4.7142': attribute type 3 has an invalid length. [ 1105.333390][ T4730] batman_adv: batadv0: Interface deactivated: gretap1 [ 1105.367747][ T4730] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1105.409572][ T4730] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1105.409725][ T4730] ip6gretap2: left allmulticast mode [ 1105.464692][ T6767] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.464727][ T6767] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 49662 - 0 [ 1105.464768][ T6767] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.464795][ T6767] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 49662 - 0 [ 1105.464832][ T6767] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.464857][ T6767] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 49662 - 0 [ 1105.464894][ T6767] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.464920][ T6767] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 49662 - 0 [ 1105.589671][ T4764] lo: entered allmulticast mode [ 1105.589963][ T4764] lo: left allmulticast mode [ 1106.121670][ T4794] syzkaller0: entered promiscuous mode [ 1106.121689][ T4794] syzkaller0: entered allmulticast mode [ 1106.314055][ T4801] mac80211_hwsim hwsim96 wlan0: entered promiscuous mode [ 1106.314075][ T4801] mac80211_hwsim hwsim96 wlan0: entered allmulticast mode [ 1106.341801][ T4791] hsr_slave_0: left promiscuous mode [ 1106.343166][ T4791] hsr_slave_1: left promiscuous mode [ 1106.394963][ T4805] syzkaller0: entered promiscuous mode [ 1106.394986][ T4805] syzkaller0: entered allmulticast mode [ 1106.553068][ T4813] lo speed is unknown, defaulting to 1000 [ 1106.554206][ T4813] lo speed is unknown, defaulting to 1000 [ 1106.771348][ T4819] lo speed is unknown, defaulting to 1000 [ 1106.777362][ T4819] lo speed is unknown, defaulting to 1000 [ 1107.543514][T31086] Bluetooth: hci2: command 0x0406 tx timeout [ 1107.632660][ T4865] ip6erspan0: entered allmulticast mode [ 1107.671990][ T4865] x_tables: duplicate underflow at hook 3 [ 1107.676006][ T4870] __nla_validate_parse: 16 callbacks suppressed [ 1107.676024][ T4870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1107.778278][ T4870] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1108.025179][ T4886] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1108.121957][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7180'. [ 1108.124105][ T4893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1108.291728][ T4898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1108.291753][ T4898] netlink: 468 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1108.291774][ T4898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1108.426639][ T30] audit: type=1804 audit(1789663021.776:23): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7182" name="/newroot/154/cgroup.controllers" dev="tmpfs" ino=815 res=1 errno=0 [ 1108.427794][ T30] audit: type=1800 audit(1789663021.776:24): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7182" name="cgroup.controllers" dev="tmpfs" ino=815 res=0 errno=0 [ 1108.692075][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7185'. [ 1108.693066][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7184'. [ 1108.742529][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7185'. [ 1108.949044][ T4924] xt_hashlimit: size too large, truncated to 1048576 [ 1109.333024][ T4956] netlink: 'syz.3.7190': attribute type 62 has an invalid length. [ 1109.470401][ T4961] x_tables: duplicate underflow at hook 2 [ 1109.626599][ T4981] netlink: 'syz.0.7195': attribute type 6 has an invalid length. [ 1109.868492][ T4994] sctp: [Deprecated]: syz.2.7197 (pid 4994) Use of int in maxseg socket option. [ 1109.868492][ T4994] Use struct sctp_assoc_value instead [ 1109.964524][ T4994] sctp: [Deprecated]: syz.2.7197 (pid 4994) Use of int in maxseg socket option. [ 1109.964524][ T4994] Use struct sctp_assoc_value instead [ 1111.776336][ T5055] Unknown options in mask 6 [ 1112.918141][ T5106] __nla_validate_parse: 11 callbacks suppressed [ 1112.918177][ T5106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1112.918194][ T5106] netlink: 468 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1113.270711][ T5106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1113.338875][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1113.341120][ T5115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.571523][ T5121] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7221'. [ 1113.763436][ T5136] netlink: 'syz.0.7225': attribute type 11 has an invalid length. [ 1113.763462][ T5136] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1114.018426][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7226'. [ 1114.208313][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1114.287202][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1114.287246][ T5130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1114.349941][ T5157] openvswitch: netlink: Flow key attr not present in new flow. [ 1114.868890][ T5173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.284879][ T5191] syzkaller0: entered promiscuous mode [ 1115.284904][ T5191] syzkaller0: entered allmulticast mode [ 1115.587274][ T5210] pim6reg: entered allmulticast mode [ 1115.700347][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1115.965778][ T5213] syzkaller0: entered promiscuous mode [ 1115.965804][ T5213] syzkaller0: entered allmulticast mode [ 1116.040867][ T5224] netlink: 'syz.0.7248': attribute type 1 has an invalid length. [ 1116.096500][ T5224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1116.114171][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.117196][ T5231] bond4: (slave batadv0): making interface the new active one [ 1116.133990][ T5231] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 1116.187802][ T5224] bond1: (slave syz_tun): Removing an active aggregator [ 1116.200947][ T5224] bond1: (slave syz_tun): Releasing backup interface [ 1116.238095][ T5224] bond0: left allmulticast mode [ 1116.238127][ T5224] bond_slave_0: left allmulticast mode [ 1116.238148][ T5224] bond_slave_1: left allmulticast mode [ 1116.244097][ T5224] bond0: left promiscuous mode [ 1116.244147][ T5224] bond_slave_0: left promiscuous mode [ 1116.248874][ T5224] bond_slave_1: left promiscuous mode [ 1116.254800][ T5224] bridge0: port 3(bond0) entered disabled state [ 1116.304712][ T5224] bond4: (slave batadv0): Releasing active interface [ 1116.329487][ T5224] bridge_slave_0: left allmulticast mode [ 1116.329512][ T5224] bridge_slave_0: left promiscuous mode [ 1116.329911][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.885468][ T5224] bridge_slave_1: left allmulticast mode [ 1116.885650][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.908097][ T5224] bond2: (slave veth0_to_bond): Releasing active interface [ 1116.923263][ T5224] bond0: (slave bond_slave_0): Releasing backup interface [ 1116.937974][ T5224] bond0: (slave bond_slave_1): Releasing backup interface [ 1116.977287][ T5224] team0: Port device team_slave_1 removed [ 1116.978417][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.978442][ T5224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.003518][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.003544][ T5224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.005928][ T5224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1117.964856][ T5291] netlink: 'syz.3.7257': attribute type 1 has an invalid length. [ 1118.373259][ T5320] lo speed is unknown, defaulting to 1000 [ 1118.377531][ T5320] lo speed is unknown, defaulting to 1000 [ 1118.444019][ T5326] __nla_validate_parse: 14 callbacks suppressed [ 1118.444039][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1118.444580][ T5326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1118.446992][ T5326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1118.649025][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7269'. [ 1119.305895][ T5380] x_tables: duplicate underflow at hook 4 [ 1119.308295][ T5380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1119.337013][ T5381] syzkaller0: entered promiscuous mode [ 1119.337036][ T5381] syzkaller0: entered allmulticast mode [ 1119.511189][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1119.530174][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1119.536916][ T5392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1119.537865][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1119.835035][ T5405] netlink: 'syz.0.7287': attribute type 8 has an invalid length. [ 1119.945202][ T5411] TC_ACT_REPEAT abuse ? [ 1119.964433][ T5419] TC_ACT_REPEAT abuse ? [ 1120.109564][ T5430] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1120.240040][ T5430] IPVS: Scheduler module ip_vs_sip not found [ 1120.412882][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1120.554135][ T5462] netlink: 'syz.2.7301': attribute type 3 has an invalid length. [ 1120.682742][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7303'. [ 1120.689551][ T5473] ip6gre1: entered promiscuous mode [ 1120.689573][ T5473] ip6gre1: entered allmulticast mode [ 1120.860501][ T5464] netlink: 'syz.4.7300': attribute type 3 has an invalid length. [ 1121.178423][ T5497] netpci0: tun_chr_ioctl cmd 1074025678 [ 1121.178449][ T5497] netpci0: group set to 0 [ 1121.244573][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.244795][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.268796][ T9208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.337604][ T5506] syzkaller0: entered promiscuous mode [ 1121.337629][ T5506] syzkaller0: entered allmulticast mode [ 1121.548751][ T9219] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.929069][ T9219] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.977309][ T5533] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1122.216691][ T5540] syzkaller0: entered promiscuous mode [ 1122.216716][ T5540] syzkaller0: entered allmulticast mode [ 1122.242907][ T5540] simple: /dev/video#_1 [ 1122.537640][ T5553] netlink: 'syz.0.7326': attribute type 10 has an invalid length. [ 1124.213670][ T5613] nbd: nbd3 already in use [ 1124.778681][ T5633] __nla_validate_parse: 19 callbacks suppressed [ 1124.778707][ T5633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7347'. [ 1124.812443][ T5633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7347'. [ 1124.842508][ T5637] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1124.849237][ T5639] netlink: 'syz.0.7350': attribute type 39 has an invalid length. [ 1124.934637][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1124.934665][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1124.936373][ T5643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1125.308361][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1125.310743][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1125.311143][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1125.311524][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1125.394006][ T5673] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1125.538963][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1126.134266][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.148201][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.310976][ T5702] veth1_vlan: left promiscuous mode [ 1126.325787][ T5702] veth0_vlan: left promiscuous mode [ 1126.347706][ T5702] veth0_vlan: entered promiscuous mode [ 1126.362761][ T5702] veth1_vlan: entered promiscuous mode [ 1126.424190][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.439957][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.447936][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.464296][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.517489][ T5702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.532749][ T5702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1126.577297][ T5702] bond3: left promiscuous mode [ 1126.577315][ T5702] veth3: left promiscuous mode [ 1126.592375][ T5702] vxlan0: left promiscuous mode [ 1126.592827][ T5702] vxlan1: left promiscuous mode [ 1126.688874][T26607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.699700][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.979320][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.979382][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.025066][ T5750] IPVS: Error connecting to the multicast addr [ 1127.166623][ T5759] tipc: Enabling of bearer rejected, failed to enable media [ 1127.404477][ T5619] Bluetooth: hci4: unexpected event 0x04 length: 0 < 10 [ 1127.509655][ T5775] sctp: [Deprecated]: syz.3.7383 (pid 5775) Use of int in max_burst socket option deprecated. [ 1127.509655][ T5775] Use struct sctp_assoc_value instead [ 1127.551563][ T5782] netlink: 'syz.4.7382': attribute type 1 has an invalid length. [ 1127.624434][ T5782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1127.689406][ T5786] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1127.748311][ T5782] 8021q: adding VLAN 0 to HW filter on device .` [ 1127.757507][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.982483][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1127.982511][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1128.053058][ T5782] veth1_vlan: left promiscuous mode [ 1128.068241][ T5782] veth0_vlan: left promiscuous mode [ 1128.081128][ T30] audit: type=1800 audit(1789663041.436:25): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7386" name="memory.events" dev="tmpfs" ino=1110 res=0 errno=0 [ 1128.103309][ T5782] veth0_vlan: entered promiscuous mode [ 1128.132439][ T5782] veth1_vlan: entered promiscuous mode [ 1128.158299][ T5782] veth1_macvtap: left promiscuous mode [ 1128.165388][ T5782] veth0_macvtap: left promiscuous mode [ 1128.166495][ T5782] veth0_macvtap: entered promiscuous mode [ 1128.167745][ T5782] veth1_macvtap: entered promiscuous mode [ 1128.196394][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.197995][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.214235][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.215762][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1128.237042][ T5782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.252643][ T5782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1128.254411][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.491316][ T5782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1128.514854][ T5782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1128.547187][ T5782] ip6gretap1: left allmulticast mode [ 1128.755789][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.771329][ T5786] bond5: (slave batadv0): making interface the new active one [ 1128.774550][ T5786] batadv0: entered promiscuous mode [ 1128.776218][ T5786] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 1128.808934][T23971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.809067][T23971] bridge0: port 1(bridge_slave_0) entered listening state [ 1128.814234][T23971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.814302][T23971] bridge0: port 2(bridge_slave_1) entered listening state [ 1129.000824][ T4315] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.000852][ T4315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.041605][ T4315] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1129.075827][T26607] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.075867][T26607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.209506][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.209542][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.210975][ T50] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1129.264753][ T50] bond0: (slave veth3): making interface the new active one [ 1129.331303][ T50] bond0: active interface up! [ 1129.440898][ T5850] tipc: Started in network mode [ 1129.440926][ T5850] tipc: Node identity ac1414aa, cluster identity 4711 [ 1129.441881][ T5850] tipc: Enabled bearer , priority 26 [ 1129.454426][ T4314] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.454511][ T4314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.463310][ T5850] openvswitch: netlink: Key type 29 is not supported [ 1129.513098][ T5858] netlink: 'syz.2.7395': attribute type 1 has an invalid length. [ 1129.515067][ T5858] xt_policy: output policy not valid in PREROUTING and INPUT [ 1129.693793][ T5865] netlink: 'syz.3.7397': attribute type 2 has an invalid length. [ 1129.693820][ T5865] netlink: 'syz.3.7397': attribute type 1 has an invalid length. [ 1129.760615][ T5869] netlink: 'syz.4.7398': attribute type 1 has an invalid length. [ 1129.760875][ T5868] netlink: 'syz.0.7399': attribute type 1 has an invalid length. [ 1129.844380][ T5873] __nla_validate_parse: 71 callbacks suppressed [ 1129.844422][ T5873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7400'. [ 1129.880082][ T5868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1130.023523][ T5871] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1130.069784][ T5875] bond5: (slave dummy0): making interface the new active one [ 1130.094874][ T5875] dummy0: entered promiscuous mode [ 1130.099001][ T5875] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1130.173844][ T5875] netlink: 'syz.0.7399': attribute type 10 has an invalid length. [ 1130.173871][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7399'. [ 1130.223545][ T5875] bond5: (slave dummy0): Releasing active interface [ 1130.241487][ T5894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1130.283851][ T5894] ip6t_srh: unknown srh match flags 4000 [ 1130.522613][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7408'. [ 1130.546653][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7408'. [ 1130.560359][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7407'. [ 1130.605926][ T5745] tipc: Node number set to 2886997162 [ 1130.733098][ T5921] sctp_setsockopt_delayed_ack: 56 callbacks suppressed [ 1130.733120][ T5921] sctp: [Deprecated]: syz.2.7412 (pid 5921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.733120][ T5921] Use struct sctp_sack_info instead [ 1130.736417][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7412'. [ 1130.871512][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7414'. [ 1130.912414][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1130.937326][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1131.175537][ T5940] netlink: 'syz.4.7416': attribute type 7 has an invalid length. [ 1131.175562][ T5940] netlink: 'syz.4.7416': attribute type 3 has an invalid length. [ 1131.248306][ T5940] netlink: 'syz.4.7416': attribute type 1 has an invalid length. [ 1132.661310][ T6018] nbd: must specify an index to disconnect [ 1133.540761][ T6064] ip6t_hbh: too many supported opts specified [ 1133.907514][ T6087] veth0_macvtap: left promiscuous mode [ 1133.907608][ T6087] macvtap0: entered promiscuous mode [ 1134.063669][ T6100] Bluetooth: MGMT ver 1.23 [ 1134.222359][ T6108] tipc: Enabling of bearer rejected, failed to enable media [ 1134.430916][ T6114] xt_policy: output policy not valid in PREROUTING and INPUT [ 1134.815662][ T6136] netlink: Conntrack attr has 8 unknown bytes [ 1134.815701][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1134.863116][ T30] audit: type=1804 audit(1789663048.216:26): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7467" name="/newroot/224/memory.events" dev="tmpfs" ino=1171 res=1 errno=0 [ 1134.864958][ T30] audit: type=1800 audit(1789663048.216:27): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7467" name="memory.events" dev="tmpfs" ino=1171 res=0 errno=0 [ 1134.865852][ T30] audit: type=1800 audit(1789663048.216:28): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7467" name="memory.events" dev="tmpfs" ino=1171 res=0 errno=0 [ 1134.890857][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1135.036548][ T6143] validate_nla: 1 callbacks suppressed [ 1135.036579][ T6143] netlink: 'syz.2.7468': attribute type 1 has an invalid length. [ 1135.091493][ T6146] __nla_validate_parse: 25 callbacks suppressed [ 1135.091514][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1135.183161][ T6149] bond7: entered promiscuous mode [ 1135.183183][ T6149] bond7: entered allmulticast mode [ 1135.341728][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7474'. [ 1135.556267][ T6176] openvswitch: netlink: Flow key attr not present in new flow. [ 1135.672353][ T6183] sctp: [Deprecated]: syz.2.7479 (pid 6183) Use of int in max_burst socket option. [ 1135.672353][ T6183] Use struct sctp_assoc_value instead [ 1135.777266][ T6182] IPVS: Scheduler module ip_vs_sip not found [ 1135.796247][ T6182] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1135.806328][ T6182] netlink: 'syz.2.7479': attribute type 1 has an invalid length. [ 1135.819933][ T6190] netlink: 'syz.3.7481': attribute type 1 has an invalid length. [ 1135.921047][ T6182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1136.025093][ T6190] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1136.025802][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7482'. [ 1136.045640][ T6193] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1136.060615][ T6193] bond9: (slave batadv1): making interface the new active one [ 1136.062118][ T6193] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 1136.201241][ T6201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1136.206746][ T6201] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1136.206845][T22287] veth3: entered promiscuous mode [ 1136.267752][ T6191] netlink: 'syz.1.7480': attribute type 10 has an invalid length. [ 1136.353861][ T6215] syzkaller1: entered promiscuous mode [ 1136.355471][ T6215] syzkaller1: entered allmulticast mode [ 1136.382411][ T6213] dummy0: entered promiscuous mode [ 1136.386528][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7486'. [ 1136.388018][ T6212] dummy0: left promiscuous mode [ 1136.676643][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7490'. [ 1136.690526][ T6229] bond0: Unable to set up delay as MII monitoring is disabled [ 1136.842842][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7491'. [ 1137.169833][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1137.172752][ T6253] netlink: 'syz.0.7495': attribute type 1 has an invalid length. [ 1137.172772][ T6253] netlink: 64363 bytes leftover after parsing attributes in process `syz.0.7495'. [ 1137.178015][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1137.227551][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1137.359421][ T6260] 0·: renamed from hsr0 (while UP) [ 1137.366731][ T6260] 0·: entered allmulticast mode [ 1137.366755][ T6260] hsr_slave_0: entered allmulticast mode [ 1137.366773][ T6260] hsr_slave_1: entered allmulticast mode [ 1137.367239][ T6260] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1137.727607][ T6277] syzkaller0: entered promiscuous mode [ 1137.727634][ T6277] syzkaller0: entered allmulticast mode [ 1138.074175][ T6293] netlink: 'syz.0.7507': attribute type 2 has an invalid length. [ 1138.114705][ T6293] : entered promiscuous mode [ 1138.241117][ T6296] tap0: tun_chr_ioctl cmd 1074025677 [ 1138.241225][ T6296] tap0: linktype set to 804 [ 1139.323844][ T6373] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1139.323894][ T6373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.875167][T26606] batadv0: left promiscuous mode [ 1140.170983][ T6415] __nla_validate_parse: 15 callbacks suppressed [ 1140.171003][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1140.335091][ T6421] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1140.362180][ T6427] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1140.503559][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1140.518158][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1140.798335][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1140.801501][ T5619] block nbd1: Receive control failed (result -107) [ 1140.904795][ T6446] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1141.337357][ T6473] FAULT_INJECTION: forcing a failure. [ 1141.337357][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.337394][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.3.7553 Not tainted syzkaller #0 PREEMPT(full) [ 1141.337420][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.337453][ T6473] Call Trace: [ 1141.337463][ T6473] [ 1141.337474][ T6473] dump_stack_lvl+0xe8/0x150 [ 1141.337517][ T6473] should_fail_ex+0x410/0x560 [ 1141.337552][ T6473] _copy_from_user+0x2d/0xb0 [ 1141.337584][ T6473] bpf_test_init+0xd8/0x150 [ 1141.337624][ T6473] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1141.337681][ T6473] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1141.337722][ T6473] ? __fget_files+0x2a/0x420 [ 1141.337762][ T6473] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1141.337799][ T6473] bpf_prog_test_run+0x2c5/0x340 [ 1141.337833][ T6473] __sys_bpf+0xa22/0xd90 [ 1141.337869][ T6473] ? __pfx___sys_bpf+0x10/0x10 [ 1141.337908][ T6473] ? __fget_files+0x2a/0x420 [ 1141.337959][ T6473] ? ksys_write+0x242/0x270 [ 1141.337997][ T6473] ? __pfx_ksys_write+0x10/0x10 [ 1141.338038][ T6473] __x64_sys_bpf+0xba/0xd0 [ 1141.338064][ T6473] do_syscall_64+0x166/0x520 [ 1141.338091][ T6473] ? trace_irq_disable+0x3b/0x140 [ 1141.338114][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.338140][ T6473] ? clear_bhb_loop+0x70/0xc0 [ 1141.338177][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.338201][ T6473] RIP: 0033:0x7faf58d9e159 [ 1141.338224][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.338245][ T6473] RSP: 002b:00007faf59bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1141.338272][ T6473] RAX: ffffffffffffffda RBX: 00007faf59025fa0 RCX: 00007faf58d9e159 [ 1141.338290][ T6473] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1141.338306][ T6473] RBP: 00007faf59bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.338321][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.338336][ T6473] R13: 00007faf59026038 R14: 00007faf59025fa0 R15: 00007ffd0f8a1fd8 [ 1141.338373][ T6473] [ 1141.343953][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1141.365125][ T6474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1141.638839][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7555'. [ 1141.883561][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1142.006121][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1142.092676][ T6497] bridge_slave_0: default FDB implementation only supports local addresses [ 1142.487186][ T6521] batman_adv: batadv0: Adding interface: gretap1 [ 1142.487206][ T6521] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.487540][ T6521] batman_adv: batadv0: Interface activated: gretap1 [ 1142.745954][ T6535] tipc: Enabling of bearer rejected, already enabled [ 1143.361585][ T6561] x_tables: duplicate entry at hook 1 [ 1143.851451][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1143.853659][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1146.362730][ T6566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1146.982194][ T6622] netlink: 'syz.2.7590': attribute type 1 has an invalid length. [ 1147.173266][ T6625] __nla_validate_parse: 4 callbacks suppressed [ 1147.173303][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7592'. [ 1147.173326][ T6625] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7592'. [ 1147.566283][ T6639] bond10: option primary_reselect: invalid value (6) [ 1147.582478][ T6639] bond10 (unregistering): Released all slaves [ 1148.167843][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7600'. [ 1148.236702][ T6666] tc_dump_action: action bad kind [ 1148.920960][ T6698] syzkaller0: entered promiscuous mode [ 1148.920988][ T6698] syzkaller0: entered allmulticast mode [ 1148.928063][ T6698] tipc: Enabled bearer , priority 0 [ 1149.064494][ T6697] tipc: Resetting bearer [ 1149.239493][ T6711] netlink: 'syz.1.7613': attribute type 1 has an invalid length. [ 1149.338701][ T6718] netlink: 756 bytes leftover after parsing attributes in process `syz.3.7615'. [ 1149.627679][ T6729] sock: sock_set_timeout: `syz.2.7616' (pid 6729) tries to set negative timeout [ 1152.432402][ T6697] tipc: Disabling bearer [ 1152.436258][ T6711] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1152.757726][ T6768] gre0: entered promiscuous mode [ 1152.757754][ T6768] gre0: entered allmulticast mode [ 1152.784639][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1152.818862][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1153.082688][ T6788] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1153.147324][ T6790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.169753][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1153.170042][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1153.424066][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7632'. [ 1153.903647][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1154.035926][ T6840] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1154.116834][ T6854] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1154.331616][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7644'. [ 1154.492302][ T6872] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1155.037785][ T6892] syzkaller0: entered promiscuous mode [ 1155.037813][ T6892] syzkaller0: entered allmulticast mode [ 1155.153813][ T6900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1156.160011][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1156.205555][ T6912] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7658'. [ 1157.471692][ T6872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1157.813354][ T6933] __nla_validate_parse: 2 callbacks suppressed [ 1157.813371][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7663'. [ 1157.816753][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7662'. [ 1157.864760][ T6937] IPv6: NLM_F_CREATE should be specified when creating new route [ 1158.287172][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7672'. [ 1158.494997][ T6976] netlink: 632 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1158.498305][ T6976] netlink: 'syz.1.7674': attribute type 1 has an invalid length. [ 1158.613776][ T6970] syzkaller0: entered promiscuous mode [ 1158.613803][ T6970] syzkaller0: entered allmulticast mode [ 1158.657404][ T6981] gre0: left promiscuous mode [ 1158.657443][ T6981] gre0: left allmulticast mode [ 1158.934390][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1158.937715][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.956281][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.966181][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.208716][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.208742][ C1] bridge0: topology change detected, propagating [ 1159.209123][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.209142][ C1] bridge0: topology change detected, propagating [ 1160.334025][ T6981] veth3: left allmulticast mode [ 1160.378378][ T6981] vxlan0: left allmulticast mode [ 1160.397388][ T6981] vxlan1: left allmulticast mode [ 1161.147725][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.530362][ T4315] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.530399][ T4315] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.579498][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.579534][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.579661][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.579690][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.579734][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.579761][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.827401][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7684'. [ 1163.892564][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1163.917731][ T7019] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1163.999342][ T7019] macvlan2: entered promiscuous mode [ 1163.999366][ T7019] macvlan2: entered allmulticast mode [ 1164.000468][ T7019] bond9: entered promiscuous mode [ 1164.001242][ T7019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1164.042665][ T7019] bond9: left promiscuous mode [ 1164.241993][ T7046] tc_dump_action: action bad kind [ 1164.257623][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 1164.318025][ T7034] netlink: 'syz.1.7691': attribute type 12 has an invalid length. [ 1164.360399][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1164.360756][ T7044] netlink: 'syz.4.7692': attribute type 16 has an invalid length. [ 1164.360775][ T7044] netlink: 'syz.4.7692': attribute type 17 has an invalid length. [ 1164.434303][ T7044] 0·: left allmulticast mode [ 1164.434327][ T7044] hsr_slave_0: left allmulticast mode [ 1164.434344][ T7044] hsr_slave_1: left allmulticast mode [ 1164.474857][ T7044] veth0_macvtap: entered promiscuous mode [ 1164.475068][ T7044] macvtap0: left promiscuous mode [ 1164.576478][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.597330][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.598267][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.607448][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.653733][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.653935][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.654301][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.654620][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.654974][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.196161][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.267583][ T7072] IPVS: Error connecting to the multicast addr [ 1165.293449][ T7074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.352891][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.598951][ T7100] netlink: 'syz.4.7707': attribute type 2 has an invalid length. [ 1165.611755][ T7100] ´: entered promiscuous mode [ 1165.617005][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7707'. [ 1165.717825][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7709'. [ 1165.729229][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7709'. [ 1165.971539][ T7120] tipc: Enabled bearer , priority 0 [ 1166.006600][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7713'. [ 1166.006625][ T7117] netlink: 356 bytes leftover after parsing attributes in process `syz.2.7713'. [ 1166.006640][ T7117] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7713'. [ 1166.052359][ T7128] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1166.101131][ T7128] tipc: Resetting bearer [ 1166.358301][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 1166.457174][ T7119] tipc: Disabling bearer [ 1166.858005][ T7173] sit0: entered promiscuous mode [ 1166.897106][ T7173] netlink: 'syz.4.7720': attribute type 1 has an invalid length. [ 1167.602336][ T7211] netlink: 'syz.2.7729': attribute type 2 has an invalid length. [ 1167.626286][ T7211] : entered promiscuous mode [ 1168.105355][ T7227] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1168.287073][ T7228] netlink: 'syz.0.7732': attribute type 1 has an invalid length. [ 1168.544455][ T7238] IPv6: Can't replace route, no match found [ 1168.556323][ T7245] xt_policy: output policy not valid in PREROUTING and INPUT [ 1168.698139][ T7252] nbd: device at index 64 is going down [ 1169.112483][ T7266] udevd[7266]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1169.139094][ T7004] udevd[7004]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1169.573903][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.592964][ T7286] __nla_validate_parse: 13 callbacks suppressed [ 1169.592987][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7740'. [ 1169.800128][ T7300] pim6reg1: entered promiscuous mode [ 1169.800151][ T7300] pim6reg1: entered allmulticast mode [ 1169.938264][ T7313] 8021q: VLANs not supported on ip6gre0 [ 1170.097738][ T7319] block nbd4: shutting down sockets [ 1170.114554][ T7323] netlink: 'syz.2.7750': attribute type 1 has an invalid length. [ 1170.132577][ T7319] block nbd5: shutting down sockets [ 1170.152250][ T7319] block nbd6: shutting down sockets [ 1170.162020][ T7319] block nbd7: shutting down sockets [ 1170.169421][ T7319] block nbd7: shutting down sockets [ 1170.177187][ T7319] block nbd7: shutting down sockets [ 1170.183582][ T7319] block nbd7: shutting down sockets [ 1170.193587][ T7319] block nbd7: shutting down sockets [ 1170.200950][ T7319] block nbd7: shutting down sockets [ 1170.207209][ T7319] block nbd7: shutting down sockets [ 1170.215482][ T7319] block nbd7: shutting down sockets [ 1170.233017][ T7319] block nbd6: shutting down sockets [ 1170.239248][ T7319] block nbd6: shutting down sockets [ 1170.245274][ T7319] block nbd6: shutting down sockets [ 1170.256019][ T7323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1170.294478][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7751'. [ 1170.316206][ T7319] block nbd4: shutting down sockets [ 1170.322529][ T7319] block nbd4: shutting down sockets [ 1170.337140][ T7319] block nbd5: shutting down sockets [ 1170.343149][ T7326] bond6: entered allmulticast mode [ 1170.348225][ T7319] block nbd5: shutting down sockets [ 1170.362841][ T7326] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1170.397426][ T7319] block nbd4: shutting down sockets [ 1170.400728][ T7319] block nbd4: shutting down sockets [ 1170.440961][ T7319] block nbd6: shutting down sockets [ 1170.446647][ T7319] block nbd6: shutting down sockets [ 1170.464512][ T7319] block nbd8: shutting down sockets [ 1170.469537][ T7319] block nbd8: shutting down sockets [ 1170.490164][ T7319] block nbd8: shutting down sockets [ 1170.498990][ T7319] block nbd8: shutting down sockets [ 1170.514336][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1170.522347][ T7319] block nbd4: shutting down sockets [ 1170.536092][ T7319] block nbd4: shutting down sockets [ 1170.542146][ T7319] block nbd4: shutting down sockets [ 1170.549302][ T7319] block nbd4: shutting down sockets [ 1170.567561][ T7319] block nbd4: shutting down sockets [ 1170.586457][ T7319] block nbd5: shutting down sockets [ 1170.595426][ T7319] block nbd5: shutting down sockets [ 1170.699078][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7756'. [ 1170.937774][ T7344] bridge7: entered promiscuous mode [ 1170.937799][ T7344] bridge7: entered allmulticast mode [ 1171.008006][ T7354] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 1171.054966][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7760'. [ 1171.075086][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7759'. [ 1171.104662][ T7352] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1171.482665][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1171.482683][ T7394] net_ratelimit: 203 callbacks suppressed [ 1171.482693][ T7394] openvswitch: netlink: Flow key attr not present in new flow. [ 1171.711384][ T7410] tap0: tun_chr_ioctl cmd 1074025677 [ 1171.711471][ T7410] tap0: linktype set to 778 [ 1171.853071][ T7417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1171.853092][ T7417] IPv6: NLM_F_CREATE should be set when creating new route [ 1171.853136][ T7417] IPv6: NLM_F_CREATE should be set when creating new route [ 1171.853163][ T7417] IPv6: NLM_F_CREATE should be set when creating new route [ 1171.854542][ T7417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1172.019330][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.075043][ T7425] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1172.076688][ T7425] bond6 (unregistering): Released all slaves [ 1172.107031][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7775'. [ 1172.107051][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7775'. [ 1172.130406][ T7380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.426157][ T30] audit: type=1804 audit(1789663085.776:29): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7778" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1898 res=1 errno=0 [ 1172.426230][ T30] audit: type=1800 audit(1789663085.776:30): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7778" name="cgroup.controllers" dev="tmpfs" ino=1898 res=0 errno=0 [ 1172.503769][ T7448] veth3: left promiscuous mode [ 1172.652558][ T7457] x_tables: duplicate underflow at hook 3 [ 1172.654594][ T7457] netlink: 'syz.4.7781': attribute type 3 has an invalid length. [ 1174.569147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.648846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.379185][ T7442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1175.403503][ T7494] __nla_validate_parse: 5 callbacks suppressed [ 1175.403574][ T7494] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7786'. [ 1175.606785][ T7515] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1175.640387][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7792'. [ 1175.792684][ T7525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1175.801329][ T7525] netlink: 580 bytes leftover after parsing attributes in process `syz.2.7797'. [ 1175.954472][ T7532] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.7800'. [ 1175.988155][ T7537] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1176.070204][ T7544] SET target dimension over the limit! [ 1176.098256][ T7546] sit0: left promiscuous mode [ 1176.222179][ T7537] xt_CT: No such helper "syz1" [ 1176.317113][ T7546] netlink: 'syz.4.7802': attribute type 3 has an invalid length. [ 1176.317139][ T7546] netlink: 646 bytes leftover after parsing attributes in process `syz.4.7802'. [ 1176.425178][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1176.425213][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1176.563116][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1176.563155][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1176.917501][ T7565] lo speed is unknown, defaulting to 1000 [ 1176.930434][ T7565] lo speed is unknown, defaulting to 1000 [ 1176.964963][ T7566] netlink: 'syz.2.7806': attribute type 4 has an invalid length. [ 1177.041600][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1177.136086][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.231849][ T7575] netlink: 'syz.3.7809': attribute type 1 has an invalid length. [ 1177.328442][ T5619] Bluetooth: hci4: link tx timeout [ 1177.350763][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.401031][T28515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.401363][T28515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.426154][ T9217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.579282][ T7580] syzkaller1: entered promiscuous mode [ 1177.579308][ T7580] syzkaller1: entered allmulticast mode [ 1177.784934][ T7602] tipc: Enabled bearer , priority 0 [ 1177.785251][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.804615][ T7616] syzkaller0: entered promiscuous mode [ 1177.804636][ T7616] syzkaller0: entered allmulticast mode [ 1177.823019][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.823334][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.823660][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.823968][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.827911][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.828265][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.869399][ T7618] tipc: Resetting bearer [ 1177.887146][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.887518][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.905267][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.905595][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.905915][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.906246][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1177.907370][ T7616] syzkaller0: left allmulticast mode [ 1177.983192][ T7602] tipc: Enabling of bearer rejected, already enabled [ 1178.054672][ T7616] nbd1: detected capacity change from 0 to 6 [ 1178.055890][ T1718] block nbd1: Dead connection, failed to find a fallback [ 1178.291892][ T7616] tipc: Resetting bearer [ 1178.358126][ T7616] tipc: Disabling bearer [ 1178.532928][ T7646] netlink: 'syz.4.7822': attribute type 29 has an invalid length. [ 1178.594451][ T7637] lo speed is unknown, defaulting to 1000 [ 1178.624006][ T7637] lo speed is unknown, defaulting to 1000 [ 1178.770513][ T30] audit: type=1804 audit(1789663092.126:31): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7824" name="/newroot/406/cgroup.controllers" dev="tmpfs" ino=2125 res=1 errno=0 [ 1178.771908][ T30] audit: type=1800 audit(1789663092.126:32): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7824" name="cgroup.controllers" dev="tmpfs" ino=2125 res=0 errno=0 [ 1178.853856][ T7666] netlink: 'syz.3.7824': attribute type 5 has an invalid length. [ 1178.874259][ T7662] No such timeout policy "syz0" [ 1179.313246][ T7692] netlink: 'syz.1.7831': attribute type 1 has an invalid length. [ 1179.370103][T31086] Bluetooth: hci4: command 0x0405 tx timeout [ 1179.479581][ T7692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1179.512873][ T7704] bond3: (slave veth3): Releasing backup interface [ 1179.702097][ T7709] netlink: 'syz.1.7834': attribute type 1 has an invalid length. [ 1179.738113][ T7709] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1179.758652][ T7709] bond8: (slave geneve3): making interface the new active one [ 1179.760122][ T7709] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1179.815680][T23976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.816531][ T6761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.816571][ T6761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.816606][ T6761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.387274][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.497655][ T7733] veth1_macvtap: entered promiscuous mode [ 1180.574096][ T9217] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1180.577317][ T7733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1180.669165][ T7733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1180.674958][ T7733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1180.728117][ T7733] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1180.998913][ T9216] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1181.400156][ T6761] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1181.400432][ T6761] bond5: (slave veth3): making interface the new active one [ 1181.435396][ T6761] bond5: active interface up! [ 1181.528875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.529107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.529280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.630546][T22287] openvswitch: cpu_id mismatch with handler threads [ 1181.675865][ T7773] netlink: 'syz.1.7845': attribute type 1 has an invalid length. [ 1181.708159][ T7775] netlink: 'syz.2.7847': attribute type 1 has an invalid length. [ 1181.708180][ T7775] __nla_validate_parse: 74 callbacks suppressed [ 1181.708194][ T7775] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7847'. [ 1181.798114][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7845'. [ 1181.836797][ T7785] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 1181.902437][ T7773] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1181.916362][T23976] openvswitch: cpu_id mismatch with handler threads [ 1181.959352][T23976] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1181.959403][T23976] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1181.959440][T23976] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.013861][ T7791] syzkaller0: entered promiscuous mode [ 1182.013884][ T7791] syzkaller0: entered allmulticast mode [ 1182.020745][ T6745] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.209677][ T7804] xt_hashlimit: max too large, truncated to 1048576 [ 1182.209697][ T7804] xt_hashlimit: overflow, try lower: 0/0 [ 1182.248905][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 1182.410555][ T5722] openvswitch: cpu_id mismatch with handler threads [ 1182.516485][ T7823] »»»»»»: renamed from veth1_to_bridge (while UP) [ 1182.558860][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1182.558884][ T7825] openvswitch: netlink: Flow key attr not present in new flow. [ 1182.563622][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1182.629882][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.632277][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.634776][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.694841][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1182.748801][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1182.752498][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.757631][ T7826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1182.757655][ T7826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1182.773019][ T7826] veth1_vlan: left promiscuous mode [ 1182.776317][ T7826] veth0_vlan: left promiscuous mode [ 1182.781855][ T7826] veth0_vlan: entered promiscuous mode [ 1182.788277][ T7826] veth1_vlan: entered promiscuous mode [ 1182.805984][ T7826] veth1_macvtap: left promiscuous mode [ 1182.809090][ T7826] veth0_macvtap: left promiscuous mode [ 1182.813211][ T7826] veth0_macvtap: entered promiscuous mode [ 1182.815539][ T7826] veth1_macvtap: entered promiscuous mode [ 1182.875357][ T7826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1182.887631][ T7826] batman_adv: batadv0: Interface activated: gretap1 [ 1182.895868][ T6745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.896349][ T7826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1182.900917][ T7826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1182.932579][ T7826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1182.951742][ T7826] batman_adv: batadv0: Interface activated: ipvlan3 [ 1182.956574][ T7826] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1182.965309][ T7826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1182.981935][ T7826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1182.985287][ T7826] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1182.991915][ T7826] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1183.008188][ T7826] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 1183.017784][ T7826] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1183.025119][ T7826] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1183.032764][ T7826] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1183.034805][ T7826] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1183.038415][T23976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.038563][T23976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.069073][T23976] bridge0: port 3(vlan3) entered blocking state [ 1183.069161][T23976] bridge0: port 3(vlan3) entered forwarding state [ 1183.072277][T23976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.072357][T23976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.172040][ T7827] netlink: 'syz.3.7857': attribute type 3 has an invalid length. [ 1183.172275][ T7827] netlink: 'syz.3.7857': attribute type 3 has an invalid length. [ 1183.248801][T23976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.248835][T23976] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 42640 - 0 [ 1183.248870][T23976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.248894][T23976] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 42640 - 0 [ 1183.248926][T23976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.248950][T23976] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 42640 - 0 [ 1183.265335][T23973] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.265432][T23973] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 42640 - 0 [ 1183.288382][ T6761] openvswitch: cpu_id mismatch with handler threads [ 1183.315023][ T6761] openvswitch: cpu_id mismatch with handler threads [ 1183.385681][ T7849] can: request_module (can-proto-5) failed. [ 1183.395417][ T7849] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1183.424530][ T5722] openvswitch: cpu_id mismatch with handler threads [ 1183.470881][ T7851] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1183.688901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.689265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.725955][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7868'. [ 1183.735700][ T7845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.125582][ T7883] syzkaller0: entered promiscuous mode [ 1184.125604][ T7883] syzkaller0: entered allmulticast mode [ 1184.160046][ T7883] tipc: Enabled bearer , priority 0 [ 1184.221536][ T7883] tipc: Resetting bearer [ 1184.267805][ T7883] tipc: Disabling bearer [ 1184.492381][ T7900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1184.511552][ T7895] netlink: 'syz.1.7878': attribute type 4 has an invalid length. [ 1184.760218][ T7909] netlink: 'syz.0.7881': attribute type 3 has an invalid length. [ 1185.085654][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.086227][ T7904] veth3: entered promiscuous mode [ 1185.126568][ T7904] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1185.128531][T28515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.128656][T28515] bridge0: port 2(bridge_slave_1) entered listening state [ 1185.381156][ T7924] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 1185.645987][ T7946] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 1185.664678][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1185.710487][ T7946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1185.917894][ T7924] bond10: (slave veth5): Enslaving as an active interface with a down link [ 1185.953359][ T9209] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1186.088967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1186.225412][ T7974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.225563][ T7974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.225653][ T7974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.226630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.386883][ T7978] IPVS: set_ctl: invalid protocol: 256 5.0.0.0:20994 [ 1186.393757][ T7977] x_tables: duplicate underflow at hook 1 [ 1186.454078][ T7974] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1186.628069][ T7984] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1186.708381][ T7955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1186.708407][ T7955] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1186.767240][ T7991] netlink: 'syz.0.7898': attribute type 16 has an invalid length. [ 1186.767267][ T7991] netlink: 'syz.0.7898': attribute type 17 has an invalid length. [ 1186.767282][ T7991] netlink: 'syz.0.7898': attribute type 27 has an invalid length. [ 1186.891228][ T7990] lo speed is unknown, defaulting to 1000 [ 1186.891435][ T7955] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1186.891455][ T7955] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1186.933700][ T7990] lo speed is unknown, defaulting to 1000 [ 1186.983217][ T7955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1186.983241][ T7955] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1187.049191][ C1] openvswitch: cpu_id mismatch with handler threads [ 1187.163853][ T7955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1187.163880][ T7955] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1187.265347][ T8000] netlink: 'syz.3.7904': attribute type 11 has an invalid length. [ 1187.379650][ T7955] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1187.379672][ T7955] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1187.409320][ T8003] __nla_validate_parse: 8 callbacks suppressed [ 1187.409340][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7905'. [ 1187.415003][ T8003] netpci0: tun_chr_ioctl cmd 21731 [ 1188.074536][ T8028] lo speed is unknown, defaulting to 1000 [ 1188.086266][ T8028] lo speed is unknown, defaulting to 1000 [ 1188.651980][T28515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.729156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.729503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.859703][ T8067] sctp: [Deprecated]: syz.3.7921 (pid 8067) Use of int in max_burst socket option. [ 1188.859703][ T8067] Use struct sctp_assoc_value instead [ 1188.914216][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1189.255087][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.255514][ T8079] bond0: (slave gtp5): The slave device specified does not support setting the MAC address [ 1189.261333][ T8079] bond0: (slave gtp5): Error -95 calling set_mac_address [ 1189.345925][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7925'. [ 1189.351249][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7925'. [ 1189.474427][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1189.769262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.945466][ T8110] netlink: 'syz.4.7933': attribute type 1 has an invalid length. [ 1189.945487][ T8110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7933'. [ 1189.986544][ T8108] sch_tbf: peakrate 8 is lower than or equals to rate 17313625871600249881 ! [ 1190.114123][ T8120] netlink: 'syz.2.7935': attribute type 9 has an invalid length. [ 1190.114149][ T8120] netlink: 'syz.2.7935': attribute type 6 has an invalid length. [ 1190.170918][ T8120] netlink: 'syz.2.7935': attribute type 4 has an invalid length. [ 1190.170940][ T8120] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1190.216137][ T8120] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1190.526387][ T8144] FAULT_INJECTION: forcing a failure. [ 1190.526387][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.526422][ T8144] CPU: 1 UID: 0 PID: 8144 Comm: syz.2.7940 Not tainted syzkaller #0 PREEMPT(full) [ 1190.526459][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.526480][ T8144] Call Trace: [ 1190.526495][ T8144] [ 1190.526510][ T8144] dump_stack_lvl+0xe8/0x150 [ 1190.526562][ T8144] should_fail_ex+0x410/0x560 [ 1190.526590][ T8144] _copy_from_user+0x2d/0xb0 [ 1190.526615][ T8144] ___sys_sendmsg+0x1c6/0x360 [ 1190.526643][ T8144] ? __lock_acquire+0x747/0x2de0 [ 1190.526668][ T8144] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.526699][ T8144] ? kstrtouint+0x6e/0xe0 [ 1190.526754][ T8144] ? __fget_files+0x2a/0x420 [ 1190.526781][ T8144] ? __fget_files+0x3a2/0x420 [ 1190.526819][ T8144] __sys_sendmmsg+0x273/0x4d0 [ 1190.526851][ T8144] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1190.526887][ T8144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1190.526925][ T8144] ? ksys_write+0x242/0x270 [ 1190.526958][ T8144] ? __pfx_ksys_write+0x10/0x10 [ 1190.526993][ T8144] __x64_sys_sendmmsg+0xa0/0xc0 [ 1190.527022][ T8144] do_syscall_64+0x166/0x520 [ 1190.527043][ T8144] ? trace_irq_disable+0x3b/0x140 [ 1190.527061][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.527081][ T8144] ? clear_bhb_loop+0x70/0xc0 [ 1190.527107][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.527127][ T8144] RIP: 0033:0x7fc7c559e159 [ 1190.527145][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.527162][ T8144] RSP: 002b:00007fc7c645b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1190.527183][ T8144] RAX: ffffffffffffffda RBX: 00007fc7c5825fa0 RCX: 00007fc7c559e159 [ 1190.527199][ T8144] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1190.527212][ T8144] RBP: 00007fc7c645b090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.527224][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.527236][ T8144] R13: 00007fc7c5826038 R14: 00007fc7c5825fa0 R15: 00007ffd44fab908 [ 1190.527268][ T8144] [ 1191.026150][ T8159] netlink: 'syz.4.7942': attribute type 39 has an invalid length. [ 1191.095671][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7943'. [ 1191.110033][ T8158] xfrm0: entered allmulticast mode [ 1191.130410][ T8158] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1191.343877][ T8159] bond0: (slave syz_tun): Releasing active interface [ 1191.592629][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7952'. [ 1191.660924][ T8196] FAULT_INJECTION: forcing a failure. [ 1191.660924][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.660957][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.1.7954 Not tainted syzkaller #0 PREEMPT(full) [ 1191.660980][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1191.660992][ T8196] Call Trace: [ 1191.661000][ T8196] [ 1191.661009][ T8196] dump_stack_lvl+0xe8/0x150 [ 1191.661043][ T8196] should_fail_ex+0x410/0x560 [ 1191.661069][ T8196] ? __alloc_skb+0x1db/0x7a0 [ 1191.661092][ T8196] should_failslab+0xa8/0x100 [ 1191.661118][ T8196] ? __alloc_skb+0x1db/0x7a0 [ 1191.661138][ T8196] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1191.661167][ T8196] ? __alloc_skb+0x18d/0x7a0 [ 1191.661190][ T8196] ? __alloc_skb+0x1db/0x7a0 [ 1191.661217][ T8196] __alloc_skb+0x1db/0x7a0 [ 1191.661243][ T8196] netlink_sendmsg+0x5d4/0xb40 [ 1191.661282][ T8196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.661318][ T8196] ? apparmor_socket_sendmsg+0x98/0x360 [ 1191.661346][ T8196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.661374][ T8196] sock_sendmsg_nosec+0x13a/0x180 [ 1191.661408][ T8196] ____sys_sendmsg+0x54e/0x850 [ 1191.661439][ T8196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.661478][ T8196] ? import_iovec+0x73/0xa0 [ 1191.661507][ T8196] ___sys_sendmsg+0x2a5/0x360 [ 1191.661531][ T8196] ? __lock_acquire+0x747/0x2de0 [ 1191.661557][ T8196] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.661587][ T8196] ? kstrtouint+0x6e/0xe0 [ 1191.661644][ T8196] ? __fget_files+0x2a/0x420 [ 1191.661672][ T8196] ? __fget_files+0x3a2/0x420 [ 1191.661707][ T8196] __sys_sendmmsg+0x273/0x4d0 [ 1191.661747][ T8196] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1191.661782][ T8196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1191.661821][ T8196] ? ksys_write+0x242/0x270 [ 1191.661853][ T8196] ? __pfx_ksys_write+0x10/0x10 [ 1191.661890][ T8196] __x64_sys_sendmmsg+0xa0/0xc0 [ 1191.661919][ T8196] do_syscall_64+0x166/0x520 [ 1191.661940][ T8196] ? trace_irq_disable+0x3b/0x140 [ 1191.661959][ T8196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.661981][ T8196] ? clear_bhb_loop+0x70/0xc0 [ 1191.662006][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.662026][ T8196] RIP: 0033:0x7f2132d9e159 [ 1191.662046][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.662064][ T8196] RSP: 002b:00007f2133c85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1191.662085][ T8196] RAX: ffffffffffffffda RBX: 00007f2133025fa0 RCX: 00007f2132d9e159 [ 1191.662099][ T8196] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1191.662111][ T8196] RBP: 00007f2133c85090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.662123][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.662134][ T8196] R13: 00007f2133026038 R14: 00007f2133025fa0 R15: 00007ffc1eb00548 [ 1191.662164][ T8196] [ 1191.866588][ T8198] openvswitch: netlink: Multiple metadata blocks provided [ 1192.012755][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7955'. [ 1192.046251][ T8202] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1192.621544][ T8210] gre2: entered promiscuous mode [ 1192.621568][ T8210] gre2: entered allmulticast mode [ 1193.061838][ T8232] ip6t_rt: unknown flags 1F [ 1193.061977][ T8232] ip6t_rt: unknown flags 1F [ 1193.062078][ T8232] ip6t_rt: unknown flags 1F [ 1193.062173][ T8232] ip6t_rt: unknown flags 1F [ 1193.062270][ T8232] ip6t_rt: unknown flags 1F [ 1193.062367][ T8232] ip6t_rt: unknown flags 1F [ 1193.062465][ T8232] ip6t_rt: unknown flags 1F [ 1193.062578][ T8232] ip6t_rt: unknown flags 1F [ 1193.062676][ T8232] ip6t_rt: unknown flags 1F [ 1193.062780][ T8232] ip6t_rt: unknown flags 1F [ 1193.486073][ T8243] FAULT_INJECTION: forcing a failure. [ 1193.486073][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.486105][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.1.7968 Not tainted syzkaller #0 PREEMPT(full) [ 1193.486128][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.486140][ T8243] Call Trace: [ 1193.486149][ T8243] [ 1193.486158][ T8243] dump_stack_lvl+0xe8/0x150 [ 1193.486193][ T8243] should_fail_ex+0x410/0x560 [ 1193.486227][ T8243] _copy_from_iter+0x1d3/0x1660 [ 1193.486261][ T8243] ? __pfx__copy_from_iter+0x10/0x10 [ 1193.486282][ T8243] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1193.486320][ T8243] ? netlink_sendmsg+0x5d4/0xb40 [ 1193.486350][ T8243] ? netlink_sendmsg+0x5d4/0xb40 [ 1193.486393][ T8243] ? netlink_sendmsg+0x650/0xb40 [ 1193.486441][ T8243] ? skb_put+0x112/0x210 [ 1193.486472][ T8243] netlink_sendmsg+0x6c0/0xb40 [ 1193.486519][ T8243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.486563][ T8243] ? apparmor_socket_sendmsg+0x98/0x360 [ 1193.486593][ T8243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.486625][ T8243] sock_sendmsg_nosec+0x13a/0x180 [ 1193.486665][ T8243] ____sys_sendmsg+0x54e/0x850 [ 1193.486702][ T8243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1193.486745][ T8243] ? import_iovec+0x73/0xa0 [ 1193.486778][ T8243] ___sys_sendmsg+0x2a5/0x360 [ 1193.486806][ T8243] ? __lock_acquire+0x747/0x2de0 [ 1193.486836][ T8243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.486873][ T8243] ? kstrtouint+0x6e/0xe0 [ 1193.486940][ T8243] ? __fget_files+0x2a/0x420 [ 1193.486971][ T8243] ? __fget_files+0x3a2/0x420 [ 1193.487016][ T8243] __sys_sendmmsg+0x273/0x4d0 [ 1193.487053][ T8243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1193.487095][ T8243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1193.487143][ T8243] ? ksys_write+0x242/0x270 [ 1193.487181][ T8243] ? __pfx_ksys_write+0x10/0x10 [ 1193.487230][ T8243] __x64_sys_sendmmsg+0xa0/0xc0 [ 1193.487264][ T8243] do_syscall_64+0x166/0x520 [ 1193.487288][ T8243] ? trace_irq_disable+0x3b/0x140 [ 1193.487312][ T8243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.487336][ T8243] ? clear_bhb_loop+0x70/0xc0 [ 1193.487366][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.487390][ T8243] RIP: 0033:0x7f2132d9e159 [ 1193.487416][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.487437][ T8243] RSP: 002b:00007f2133c85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1193.487463][ T8243] RAX: ffffffffffffffda RBX: 00007f2133025fa0 RCX: 00007f2132d9e159 [ 1193.487481][ T8243] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1193.487498][ T8243] RBP: 00007f2133c85090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.487513][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.487528][ T8243] R13: 00007f2133026038 R14: 00007f2133025fa0 R15: 00007ffc1eb00548 [ 1193.487567][ T8243] [ 1193.850642][ T8247] lo speed is unknown, defaulting to 1000 [ 1193.858316][ T8247] lo speed is unknown, defaulting to 1000 [ 1193.862392][ T8249] __nla_validate_parse: 1 callbacks suppressed [ 1193.862434][ T8249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7971'. [ 1193.895622][ T8246] x_tables: duplicate underflow at hook 3 [ 1194.237004][ T8261] netlink: 'syz.3.7975': attribute type 2 has an invalid length. [ 1194.237544][ T8261] netlink: 'syz.3.7975': attribute type 11 has an invalid length. [ 1194.237563][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7975'. [ 1194.294991][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7972'. [ 1194.411758][T28515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.440401][ T8263] bridge0: port 1(vlan3) entered blocking state [ 1194.440850][ T8263] bridge0: port 1(vlan3) entered disabled state [ 1194.440986][ T8263] vlan3: entered allmulticast mode [ 1194.441004][ T8263] geneve0: entered allmulticast mode [ 1194.751364][ T8247] netlink: 'syz.2.7969': attribute type 4 has an invalid length. [ 1194.756740][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1194.918118][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1194.993318][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7977'. [ 1195.049806][ C1] openvswitch: cpu_id mismatch with handler threads [ 1195.187854][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1195.330236][ T8315] FAULT_INJECTION: forcing a failure. [ 1195.330236][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.330269][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.3.7982 Not tainted syzkaller #0 PREEMPT(full) [ 1195.330291][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.330304][ T8315] Call Trace: [ 1195.330312][ T8315] [ 1195.330320][ T8315] dump_stack_lvl+0xe8/0x150 [ 1195.330354][ T8315] should_fail_ex+0x410/0x560 [ 1195.330382][ T8315] _copy_from_iter+0x1d3/0x1660 [ 1195.330415][ T8315] ? __pfx__copy_from_iter+0x10/0x10 [ 1195.330435][ T8315] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1195.330455][ T8315] ? netlink_sendmsg+0x5d4/0xb40 [ 1195.330482][ T8315] ? netlink_sendmsg+0x5d4/0xb40 [ 1195.330534][ T8315] ? netlink_sendmsg+0x650/0xb40 [ 1195.330562][ T8315] ? skb_put+0x112/0x210 [ 1195.330590][ T8315] netlink_sendmsg+0x6c0/0xb40 [ 1195.330630][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.330670][ T8315] ? apparmor_socket_sendmsg+0x98/0x360 [ 1195.330697][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.330726][ T8315] sock_sendmsg_nosec+0x13a/0x180 [ 1195.330762][ T8315] ____sys_sendmsg+0x54e/0x850 [ 1195.330794][ T8315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.330831][ T8315] ? import_iovec+0x73/0xa0 [ 1195.330860][ T8315] ___sys_sendmsg+0x2a5/0x360 [ 1195.330885][ T8315] ? __lock_acquire+0x747/0x2de0 [ 1195.330912][ T8315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.330944][ T8315] ? kstrtouint+0x6e/0xe0 [ 1195.331021][ T8315] ? __fget_files+0x2a/0x420 [ 1195.331048][ T8315] ? __fget_files+0x3a2/0x420 [ 1195.331102][ T8315] __sys_sendmmsg+0x273/0x4d0 [ 1195.331136][ T8315] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1195.331172][ T8315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1195.331214][ T8315] ? ksys_write+0x242/0x270 [ 1195.331249][ T8315] ? __pfx_ksys_write+0x10/0x10 [ 1195.331289][ T8315] __x64_sys_sendmmsg+0xa0/0xc0 [ 1195.331319][ T8315] do_syscall_64+0x166/0x520 [ 1195.331342][ T8315] ? trace_irq_disable+0x3b/0x140 [ 1195.331363][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.331386][ T8315] ? clear_bhb_loop+0x70/0xc0 [ 1195.331413][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.331435][ T8315] RIP: 0033:0x7faf58d9e159 [ 1195.331456][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.331475][ T8315] RSP: 002b:00007faf59bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1195.331498][ T8315] RAX: ffffffffffffffda RBX: 00007faf59025fa0 RCX: 00007faf58d9e159 [ 1195.331514][ T8315] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1195.331530][ T8315] RBP: 00007faf59bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.331544][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.331557][ T8315] R13: 00007faf59026038 R14: 00007faf59025fa0 R15: 00007ffd0f8a1fd8 [ 1195.331592][ T8315] [ 1195.807374][ T8327] netlink: 'syz.4.7984': attribute type 62 has an invalid length. [ 1195.807399][ T8327] netlink: 'syz.4.7984': attribute type 3 has an invalid length. [ 1195.986770][ T8332] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1196.016926][ T8332] netlink: 'syz.2.7986': attribute type 1 has an invalid length. [ 1196.080793][ T8332] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1196.084050][ T8344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7988'. [ 1196.134833][ T8346] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 1196.149495][ T8344] netlink: 'syz.3.7988': attribute type 10 has an invalid length. [ 1196.168064][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7988'. [ 1196.828680][ T8381] FAULT_INJECTION: forcing a failure. [ 1196.828680][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.828718][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.1.7998 Not tainted syzkaller #0 PREEMPT(full) [ 1196.828744][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1196.828760][ T8381] Call Trace: [ 1196.828769][ T8381] [ 1196.828780][ T8381] dump_stack_lvl+0xe8/0x150 [ 1196.828822][ T8381] should_fail_ex+0x410/0x560 [ 1196.828852][ T8381] ? __alloc_skb+0x1db/0x7a0 [ 1196.828879][ T8381] should_failslab+0xa8/0x100 [ 1196.828923][ T8381] ? __alloc_skb+0x1db/0x7a0 [ 1196.828947][ T8381] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1196.828984][ T8381] ? __alloc_skb+0x18d/0x7a0 [ 1196.829010][ T8381] ? __alloc_skb+0x1db/0x7a0 [ 1196.829043][ T8381] __alloc_skb+0x1db/0x7a0 [ 1196.829074][ T8381] netlink_ack+0x136/0xb30 [ 1196.829106][ T8381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.829223][ T8381] ? __lock_acquire+0x747/0x2de0 [ 1196.829270][ T8381] netlink_rcv_skb+0x2a4/0x4a0 [ 1196.829300][ T8381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.829326][ T8381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1196.829369][ T8381] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.829399][ T8381] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.829434][ T8381] netlink_unicast+0x7bd/0x940 [ 1196.829473][ T8381] netlink_sendmsg+0x813/0xb40 [ 1196.829514][ T8381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.829557][ T8381] ? apparmor_socket_sendmsg+0x98/0x360 [ 1196.829584][ T8381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.829614][ T8381] sock_sendmsg_nosec+0x13a/0x180 [ 1196.829650][ T8381] ____sys_sendmsg+0x54e/0x850 [ 1196.829683][ T8381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.829720][ T8381] ? import_iovec+0x73/0xa0 [ 1196.829749][ T8381] ___sys_sendmsg+0x2a5/0x360 [ 1196.829785][ T8381] ? __lock_acquire+0x747/0x2de0 [ 1196.829810][ T8381] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.829838][ T8381] ? kstrtouint+0x6e/0xe0 [ 1196.829890][ T8381] ? __fget_files+0x2a/0x420 [ 1196.829923][ T8381] ? __fget_files+0x3a2/0x420 [ 1196.829957][ T8381] __sys_sendmmsg+0x273/0x4d0 [ 1196.829986][ T8381] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1196.830018][ T8381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1196.830052][ T8381] ? ksys_write+0x242/0x270 [ 1196.830083][ T8381] ? __pfx_ksys_write+0x10/0x10 [ 1196.830118][ T8381] __x64_sys_sendmmsg+0xa0/0xc0 [ 1196.830151][ T8381] do_syscall_64+0x166/0x520 [ 1196.830192][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.830225][ T8381] ? clear_bhb_loop+0x70/0xc0 [ 1196.830255][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.830279][ T8381] RIP: 0033:0x7f2132d9e159 [ 1196.830300][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.830320][ T8381] RSP: 002b:00007f2133c85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.830345][ T8381] RAX: ffffffffffffffda RBX: 00007f2133025fa0 RCX: 00007f2132d9e159 [ 1196.830363][ T8381] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1196.830379][ T8381] RBP: 00007f2133c85090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.830395][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.830408][ T8381] R13: 00007f2133026038 R14: 00007f2133025fa0 R15: 00007ffc1eb00548 [ 1196.830445][ T8381] [ 1197.537196][ T8414] sctp: [Deprecated]: syz.0.8005 (pid 8414) Use of int in maxseg socket option. [ 1197.537196][ T8414] Use struct sctp_assoc_value instead [ 1197.561522][ T8414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1197.917349][ T8422] netlink: 'syz.4.8006': attribute type 5 has an invalid length. [ 1198.673928][ T8477] openvswitch: netlink: Missing valid actions attribute. [ 1198.673970][ T8477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.940899][ T8485] netlink: 'syz.0.8015': attribute type 1 has an invalid length. [ 1199.167426][ T8494] netlink: 'syz.1.8021': attribute type 13 has an invalid length. [ 1199.307020][ T8501] __nla_validate_parse: 12 callbacks suppressed [ 1199.307043][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8025'. [ 1199.460615][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.906708][ T8544] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8034'. [ 1199.907983][ T8544] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8034'. [ 1200.012323][ T8548] netlink: 'syz.4.8035': attribute type 1 has an invalid length. [ 1200.170866][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1200.423369][ T8526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8029'. [ 1200.819798][ T8581] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1200.822521][ T8581] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1200.822603][ T8581] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1200.938186][ T8581] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1200.983455][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1200.984550][ T8587] netlink: 'syz.2.8040': attribute type 1 has an invalid length. [ 1201.301896][ T8600] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8045'. [ 1201.424071][ T8605] netlink: 9408 bytes leftover after parsing attributes in process `syz.0.8047'. [ 1201.704605][ T8619] x_tables: duplicate underflow at hook 2 [ 1201.811390][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1201.847727][ T8628] netlink: Failed to add GPL helper -22 [ 1201.847784][ T8628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.690192][ T8672] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1202.691019][ T8672] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1202.918138][ T8686] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1203.509886][ T8710] syzkaller0: entered promiscuous mode [ 1203.509913][ T8710] syzkaller0: entered allmulticast mode [ 1204.498148][ T8735] __nla_validate_parse: 43 callbacks suppressed [ 1204.498172][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8079'. [ 1204.577054][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8079'. [ 1204.650046][T26610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.288982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.666339][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8085'. [ 1207.666638][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8085'. [ 1207.686355][ T8754] lo speed is unknown, defaulting to 1000 [ 1207.762109][ T8754] lo speed is unknown, defaulting to 1000 [ 1208.007894][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1208.360821][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020f9dc00: rx timeout, send abort [ 1208.456348][ T8794] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1208.567571][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8094'. [ 1208.567606][ T8796] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1208.597940][ T8796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.860884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020f9dc00: abort rx timeout. Force session deactivation [ 1208.861087][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048721400: rx timeout, send abort [ 1209.091020][ T8819] IPv6: NLM_F_CREATE should be specified when creating new route [ 1209.091145][ T8819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1209.091158][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 1209.239934][ T8822] openvswitch: netlink: Message has 4 unknown bytes. [ 1209.241695][ T8819] openvswitch: netlink: Message has 4 unknown bytes. [ 1209.361151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048721400: abort rx timeout. Force session deactivation [ 1209.526534][ T8835] tipc: Enabling of bearer rejected, failed to enable media [ 1209.542772][ T8835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8105'. [ 1209.542796][ T8835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8105'. [ 1209.719782][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8107'. [ 1209.768789][ C1] openvswitch: cpu_id mismatch with handler threads [ 1209.985865][ T8856] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.985907][ T8856] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.023728][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 1210.121423][ T8856] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.121461][ T8856] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.174102][ T8864] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8113'. [ 1210.190257][ T8869] netlink: 'syz.0.8114': attribute type 23 has an invalid length. [ 1210.252401][ T8856] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.252441][ T8856] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.338134][ T8856] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.338177][ T8856] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.387679][ T8870] syzkaller0: entered promiscuous mode [ 1210.387705][ T8870] syzkaller0: entered allmulticast mode [ 1210.476646][ T8876] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8116'. [ 1210.476676][ T8876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8116'. [ 1210.596402][ T8878] tipc: Enabled bearer , priority 0 [ 1210.669975][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1210.678392][ T8878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1210.724329][ T8875] tipc: Disabling bearer [ 1210.759363][T28515] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.759403][T28515] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.930616][ T6761] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.930655][ T6761] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.930747][ T6761] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.930777][ T6761] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.930815][ T6761] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.930991][ T6761] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.168375][ T8912] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8124'. [ 1211.731361][ T8930] netlink: 'syz.2.8128': attribute type 1 has an invalid length. [ 1211.755754][ T8931] netlink: 'syz.4.8131': attribute type 32 has an invalid length. [ 1211.864505][ T8927] bridge8: entered promiscuous mode [ 1211.864528][ T8927] bridge8: entered allmulticast mode [ 1212.046472][ T8944] netlink: 'syz.4.8134': attribute type 10 has an invalid length. [ 1212.550972][ T8982] netlink: 'syz.4.8143': attribute type 2 has an invalid length. [ 1212.550996][ T8982] netlink: 'syz.4.8143': attribute type 11 has an invalid length. [ 1213.106303][ T8998] openvswitch: netlink: IPv4 tun info is not correct [ 1213.156600][ T9000] netlink: 'syz.3.8148': attribute type 1 has an invalid length. [ 1214.478362][ T9000] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1214.654168][ T9006] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1214.813565][ T6755] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.813601][ T6755] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.813898][ T6755] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.813928][ T6755] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.813965][ T6755] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.813992][ T6755] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.814028][ T6755] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.814054][ T6755] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.020228][ T9028] __nla_validate_parse: 6 callbacks suppressed [ 1215.020249][ T9028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8153'. [ 1215.314283][ T9033] syzkaller0: entered promiscuous mode [ 1215.314310][ T9033] syzkaller0: entered allmulticast mode [ 1215.529431][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.529459][ C0] bridge0: topology change detected, propagating [ 1215.717189][ T9067] block nbd0: reconnected socket [ 1215.725594][ T9067] netlink: 'syz.1.8158': attribute type 9 has an invalid length. [ 1215.910202][ T9058] xt_hashlimit: size too large, truncated to 1048576 [ 1216.520221][T31086] block nbd0: Receive control failed (result -32) [ 1219.084004][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.118279][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.145077][ T9079] bridge0: port 3(vlan3) entered disabled state [ 1219.155661][ T9079] vlan3 (unregistering): left allmulticast mode [ 1219.155685][ T9079] bridge_slave_0 (unregistering): left allmulticast mode [ 1219.155706][ T9079] vlan3 (unregistering): left promiscuous mode [ 1219.155774][ T9079] bridge0: port 3(vlan3) entered disabled state [ 1219.295442][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1220.069243][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1220.341097][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8177'. [ 1220.402882][ T9155] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1220.574230][ T9159] netlink: 'syz.2.8179': attribute type 16 has an invalid length. [ 1220.574258][ T9159] netlink: 'syz.2.8179': attribute type 17 has an invalid length. [ 1220.674944][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.689928][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.803677][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1220.803702][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1220.936865][ T9190] sctp: [Deprecated]: syz.0.8183 (pid 9190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.936865][ T9190] Use struct sctp_sack_info instead [ 1220.979849][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1220.979896][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1221.196953][ T9159] xfrm0: left allmulticast mode [ 1221.206517][ T9159] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1221.206589][ T9159] 0·: left allmulticast mode [ 1221.206604][ T9159] hsr_slave_0: left allmulticast mode [ 1221.236755][ T9159] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1221.325444][ T9171] netlink: 'syz.1.8182': attribute type 2 has an invalid length. [ 1221.351832][ T9168] syzkaller1: entered promiscuous mode [ 1221.351857][ T9168] syzkaller1: entered allmulticast mode [ 1221.555506][ T9223] netlink: 'syz.4.8187': attribute type 11 has an invalid length. [ 1222.039062][ T9231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1222.056892][ T9231] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1222.124848][ T9240] lo speed is unknown, defaulting to 1000 [ 1222.140227][ T9240] lo speed is unknown, defaulting to 1000 [ 1222.308700][ T9253] can: request_module (can-proto-0) failed. [ 1222.385157][ T9259] xt_policy: output policy not valid in PREROUTING and INPUT [ 1222.707699][ T9272] netlink: 564 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1222.752691][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8199'. [ 1222.905200][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8197'. [ 1223.605434][ T9297] netlink: 'syz.3.8203': attribute type 2 has an invalid length. [ 1223.700209][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1224.605665][ T9328] netlink: 'syz.1.8215': attribute type 13 has an invalid length. [ 1224.831716][ T9333] lo speed is unknown, defaulting to 1000 [ 1224.845602][ T9333] lo speed is unknown, defaulting to 1000 [ 1225.057106][ T9347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1225.508400][ T9361] veth0_to_bridge: entered promiscuous mode [ 1225.552688][ T9361] macvtap1: entered allmulticast mode [ 1225.552711][ T9361] veth0_to_bridge: entered allmulticast mode [ 1225.601949][ T9361] veth0_to_bridge: left allmulticast mode [ 1225.601979][ T9361] veth0_to_bridge: left promiscuous mode [ 1225.761478][ T9370] __nla_validate_parse: 4 callbacks suppressed [ 1225.761501][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1225.812092][ T9370] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1225.816726][ T9370] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 1226.002888][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1226.052238][ T9377] team0: Device xfrm0 is of different type [ 1226.088922][ T9379] tipc: Enabling of bearer rejected, media not registered [ 1227.365752][ T9443] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 1227.431328][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1227.431365][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1227.510971][ T4312] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.511632][ T4312] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.511723][ T4312] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.511797][ T4312] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.563923][ T9452] netlink: 'syz.2.8249': attribute type 1 has an invalid length. [ 1227.591467][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8249'. [ 1227.645434][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8249'. [ 1227.665111][ T9457] veth11: entered allmulticast mode [ 1227.797288][ T9453] macvlan3: entered promiscuous mode [ 1227.797326][ T9453] macvlan3: entered allmulticast mode [ 1227.812982][ T9453] bond9: entered promiscuous mode [ 1227.816070][ T9453] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1227.855311][ T9453] bond9: left promiscuous mode [ 1228.005682][ T9450] syzkaller0: entered promiscuous mode [ 1228.005708][ T9450] syzkaller0: entered allmulticast mode [ 1228.031862][ T9472] tipc: Enabled bearer , priority 0 [ 1228.064475][ T9450] tipc: Resetting bearer [ 1228.125626][ T9445] tipc: Resetting bearer [ 1228.273060][ T9445] tipc: Disabling bearer [ 1228.644714][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8255'. [ 1228.698269][ T9499] netlink: 'syz.1.8255': attribute type 10 has an invalid length. [ 1229.056945][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8258'. [ 1229.283402][ T9517] syzkaller1: entered promiscuous mode [ 1229.283428][ T9517] syzkaller1: entered allmulticast mode [ 1229.353071][ T9520] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1229.437609][ T9517] lo speed is unknown, defaulting to 1000 [ 1229.449614][ T9517] lo speed is unknown, defaulting to 1000 [ 1229.903793][ T9538] syzkaller0: entered promiscuous mode [ 1229.903836][ T9538] syzkaller0: entered allmulticast mode [ 1230.045697][ T9517] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8260'. [ 1230.122583][ T9544] FAULT_INJECTION: forcing a failure. [ 1230.122583][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.122622][ T9544] CPU: 0 UID: 0 PID: 9544 Comm: syz.2.8269 Not tainted syzkaller #0 PREEMPT(full) [ 1230.122647][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1230.122662][ T9544] Call Trace: [ 1230.122671][ T9544] [ 1230.122683][ T9544] dump_stack_lvl+0xe8/0x150 [ 1230.122723][ T9544] should_fail_ex+0x410/0x560 [ 1230.122755][ T9544] should_failslab+0xa8/0x100 [ 1230.122783][ T9544] ? skb_clone+0x212/0x3a0 [ 1230.122816][ T9544] kmem_cache_alloc_noprof+0xa1/0x600 [ 1230.122855][ T9544] ? skb_clone+0x212/0x3a0 [ 1230.122892][ T9544] skb_clone+0x212/0x3a0 [ 1230.122927][ T9544] __netlink_deliver_tap+0x413/0x860 [ 1230.122976][ T9544] ? netlink_deliver_tap+0x2e/0x1b0 [ 1230.123011][ T9544] netlink_deliver_tap+0x19c/0x1b0 [ 1230.123048][ T9544] netlink_sendskb+0x68/0x140 [ 1230.123080][ T9544] netlink_rcv_skb+0x2a4/0x4a0 [ 1230.123115][ T9544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1230.123154][ T9544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1230.123204][ T9544] ? netlink_deliver_tap+0x2e/0x1b0 [ 1230.123237][ T9544] ? netlink_deliver_tap+0x2e/0x1b0 [ 1230.123278][ T9544] netlink_unicast+0x7bd/0x940 [ 1230.123321][ T9544] netlink_sendmsg+0x813/0xb40 [ 1230.123365][ T9544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.123409][ T9544] ? apparmor_socket_sendmsg+0x98/0x360 [ 1230.123438][ T9544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.123470][ T9544] sock_sendmsg_nosec+0x13a/0x180 [ 1230.123509][ T9544] ____sys_sendmsg+0x54e/0x850 [ 1230.123545][ T9544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.123586][ T9544] ? import_iovec+0x73/0xa0 [ 1230.123619][ T9544] ___sys_sendmsg+0x2a5/0x360 [ 1230.123648][ T9544] ? __lock_acquire+0x747/0x2de0 [ 1230.123677][ T9544] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.123704][ T9544] ? __lock_acquire+0x747/0x2de0 [ 1230.123734][ T9544] ? kstrtouint+0x6e/0xe0 [ 1230.123816][ T9544] __sys_sendmmsg+0x273/0x4d0 [ 1230.123856][ T9544] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1230.123898][ T9544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1230.123943][ T9544] ? ksys_write+0x242/0x270 [ 1230.123982][ T9544] ? __pfx_ksys_write+0x10/0x10 [ 1230.124024][ T9544] __x64_sys_sendmmsg+0xa0/0xc0 [ 1230.124058][ T9544] do_syscall_64+0x166/0x520 [ 1230.124082][ T9544] ? trace_irq_disable+0x3b/0x140 [ 1230.124105][ T9544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.124130][ T9544] ? clear_bhb_loop+0x70/0xc0 [ 1230.124168][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.124192][ T9544] RIP: 0033:0x7fc7c559e159 [ 1230.124216][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.124237][ T9544] RSP: 002b:00007fc7c645b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1230.124262][ T9544] RAX: ffffffffffffffda RBX: 00007fc7c5825fa0 RCX: 00007fc7c559e159 [ 1230.124280][ T9544] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004 [ 1230.124297][ T9544] RBP: 00007fc7c645b090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.124311][ T9544] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000002 [ 1230.124325][ T9544] R13: 00007fc7c5826038 R14: 00007fc7c5825fa0 R15: 00007ffd44fab908 [ 1230.124363][ T9544] [ 1230.667175][ T9558] netlink: 'syz.4.8270': attribute type 11 has an invalid length. [ 1230.774499][ T9561] netlink: 'syz.1.8273': attribute type 15 has an invalid length. [ 1230.774534][ T9561] netlink: 'syz.1.8273': attribute type 7 has an invalid length. [ 1230.774551][ T9561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8273'. [ 1231.000254][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8273'. [ 1231.162385][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8276'. [ 1231.710874][ T9590] netlink: 'syz.4.8281': attribute type 11 has an invalid length. [ 1232.055157][ T9603] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1232.055279][ T9603] syzkaller1: linktype set to 1 [ 1232.345222][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1232.354219][ T9620] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1232.375600][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.664880][ T9641] netlink: 'syz.0.8294': attribute type 4 has an invalid length. [ 1232.687867][ T9641] netlink: 'syz.0.8294': attribute type 4 has an invalid length. [ 1232.823762][ T9641] netlink: 'syz.0.8294': attribute type 4 has an invalid length. [ 1232.827336][ T9660] netlink: 'syz.0.8294': attribute type 4 has an invalid length. [ 1233.342122][ T9669] FAULT_INJECTION: forcing a failure. [ 1233.342122][ T9669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.342158][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.3.8296 Not tainted syzkaller #0 PREEMPT(full) [ 1233.342192][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1233.342206][ T9669] Call Trace: [ 1233.342215][ T9669] [ 1233.342224][ T9669] dump_stack_lvl+0xe8/0x150 [ 1233.342262][ T9669] should_fail_ex+0x410/0x560 [ 1233.342293][ T9669] _copy_to_user+0x31/0xb0 [ 1233.342324][ T9669] simple_read_from_buffer+0xe1/0x170 [ 1233.342361][ T9669] proc_fail_nth_read+0x1bb/0x230 [ 1233.342396][ T9669] ? common_file_perm+0x20e/0x2b0 [ 1233.342426][ T9669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1233.342464][ T9669] ? rw_verify_area+0x24a/0x4c0 [ 1233.342504][ T9669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1233.342539][ T9669] vfs_read+0x213/0xa80 [ 1233.342596][ T9669] ? __pfx___mutex_lock+0x10/0x10 [ 1233.342627][ T9669] ? __pfx_vfs_read+0x10/0x10 [ 1233.342667][ T9669] ? __fget_files+0x2a/0x420 [ 1233.342706][ T9669] ? __fget_files+0x3a2/0x420 [ 1233.342738][ T9669] ? __fget_files+0x2a/0x420 [ 1233.342782][ T9669] ksys_read+0x150/0x270 [ 1233.342821][ T9669] ? __pfx_ksys_read+0x10/0x10 [ 1233.342872][ T9669] do_syscall_64+0x166/0x520 [ 1233.342899][ T9669] ? trace_irq_disable+0x3b/0x140 [ 1233.342923][ T9669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.342949][ T9669] ? clear_bhb_loop+0x70/0xc0 [ 1233.342980][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.343004][ T9669] RIP: 0033:0x7faf58d5e98e [ 1233.343027][ T9669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1233.343048][ T9669] RSP: 002b:00007faf59bb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1233.343074][ T9669] RAX: ffffffffffffffda RBX: 00007faf59bb16c0 RCX: 00007faf58d5e98e [ 1233.343092][ T9669] RDX: 000000000000000f RSI: 00007faf59bb10a0 RDI: 0000000000000005 [ 1233.343108][ T9669] RBP: 00007faf59bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.343124][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1233.343139][ T9669] R13: 00007faf59026038 R14: 00007faf59025fa0 R15: 00007ffd0f8a1fd8 [ 1233.343186][ T9669] [ 1233.984048][ T9676] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1233.993370][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1234.205419][ T9696] ip_tables: iptables: counters copy to user failed while replacing table [ 1234.523775][ T9705] bridge0: port 1(bond0) entered blocking state [ 1234.523896][ T9705] bridge0: port 1(bond0) entered disabled state [ 1234.524088][ T9705] bond0: entered allmulticast mode [ 1234.524108][ T9705] bond_slave_0: entered allmulticast mode [ 1234.524130][ T9705] bond_slave_1: entered allmulticast mode [ 1234.524148][ T9705] bridge0: entered allmulticast mode [ 1234.677448][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1234.945442][ T9705] bond0: left allmulticast mode [ 1234.945469][ T9705] bond_slave_0: left allmulticast mode [ 1234.945487][ T9705] bond_slave_1: left allmulticast mode [ 1234.945503][ T9705] bridge0: left allmulticast mode [ 1235.184867][ T9710] hsr_slave_1 (unregistering): left promiscuous mode [ 1235.698104][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1235.698172][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1236.016269][ T9748] pim6reg1: entered promiscuous mode [ 1236.016296][ T9748] pim6reg1: entered allmulticast mode [ 1236.501010][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8320'. [ 1236.617001][ T9765] netlink: 'syz.1.8320': attribute type 1 has an invalid length. [ 1236.783597][ T9765] bond10: entered promiscuous mode [ 1236.784086][ T9765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1236.786490][ T9768] netlink: 'syz.4.8322': attribute type 6 has an invalid length. [ 1236.860753][ T9760] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1236.861611][ T9760] bond10: (slave gre3): The slave device specified does not support setting the MAC address [ 1236.861666][ T9760] bond10: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1236.907055][ T9760] bond10: (slave gre3): making interface the new active one [ 1236.907094][ T9760] gre3: entered promiscuous mode [ 1236.927675][ T9760] bond10: (slave gre3): Enslaving as an active interface with an up link [ 1237.066497][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1237.066535][ T9772] netlink: 'syz.0.8323': attribute type 7 has an invalid length. [ 1237.066549][ T9772] netlink: 'syz.0.8323': attribute type 8 has an invalid length. [ 1237.066561][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1237.122387][ T9772] bridge0: entered promiscuous mode [ 1237.133269][ T9772] ip6gretap0: entered promiscuous mode [ 1237.143774][ T9772] erspan0: entered promiscuous mode [ 1237.146283][ T9772] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1237.473561][ T9789] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8328'. [ 1237.492412][ T9786] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1237.543074][ T9794] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1237.733728][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8331'. [ 1237.769591][ T9807] netlink: 'syz.1.8332': attribute type 8 has an invalid length. [ 1237.769615][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8332'. [ 1237.788634][ T9807] veth1_to_team: entered promiscuous mode [ 1237.790504][ T9807] gretap0: entered promiscuous mode [ 1237.821565][ T9807] veth1_to_team: left promiscuous mode [ 1237.824866][ T9807] gretap0: left promiscuous mode [ 1238.140942][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8336'. [ 1238.140968][ T9826] openvswitch: netlink: Message has 1 unknown bytes. [ 1238.782691][ T9855] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8341'. [ 1239.117243][ T9861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8343'. [ 1239.192941][ T9861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8343'. [ 1239.209782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.210453][ C1] openvswitch: cpu_id mismatch with handler threads [ 1239.554820][ T9881] bond11: entered promiscuous mode [ 1239.554950][ T9881] bond11: entered allmulticast mode [ 1239.555641][ T9881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1241.402647][ T9911] team0: Port device vlan3 added [ 1241.829734][ T9934] __nla_validate_parse: 1 callbacks suppressed [ 1241.829758][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8357'. [ 1244.745129][ T9944] ip6gre2: entered promiscuous mode [ 1244.745174][ T9944] ip6gre2: entered allmulticast mode [ 1244.874897][ T4982] udevd[4982]: worker [7004] /devices/virtual/block/nbd1 is taking a long time [ 1244.963993][ T9954] netlink: 'syz.3.8363': attribute type 1 has an invalid length. [ 1245.208233][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1245.727709][ T9954] bond12: entered promiscuous mode [ 1245.727839][ T9954] bond12: entered allmulticast mode [ 1245.738037][ T9954] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1245.793575][ T6757] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.794043][ T6757] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.819990][T22287] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.980033][T22287] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.981340][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8365'. [ 1246.340789][T11370] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1247.433693][ T9976] netlink: 'syz.0.8367': attribute type 1 has an invalid length. [ 1247.433716][ T9976] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1247.656764][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8369'. [ 1248.809117][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1249.474184][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8371'. [ 1249.849006][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1250.457796][T10000] ip6erspan0: entered allmulticast mode [ 1251.865768][T10018] xt_hashlimit: size too large, truncated to 1048576 [ 1251.865827][T10018] xt_hashlimit: max too large, truncated to 1048576 [ 1254.052670][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8381'. [ 1254.832086][T10034] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1256.985306][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1257.000893][T10067] x_tables: duplicate entry at hook 1 [ 1257.384760][T10071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1257.384820][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1258.146111][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1258.272400][T10067] netlink: 'syz.4.8387': attribute type 1 has an invalid length. [ 1258.343213][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1258.408912][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1258.445198][T10082] netlink: 'syz.4.8387': attribute type 1 has an invalid length. [ 1259.334413][T10072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1261.566669][T10106] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.8393'. [ 1262.080016][T10119] netlink: 'syz.2.8395': attribute type 4 has an invalid length. [ 1262.291037][T10120] netlink: 'syz.2.8395': attribute type 4 has an invalid length. [ 1265.126098][T10136] x_tables: duplicate underflow at hook 2 [ 1265.373209][T10140] syzkaller0: MTU too low for tipc bearer [ 1265.373306][T10140] tipc: Enabling of bearer rejected, failed to enable media [ 1265.955318][T10145] netlink: 'syz.3.8402': attribute type 1 has an invalid length. [ 1266.039430][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1266.237667][T10138] bond10 (unregistering): Released all slaves [ 1270.571259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.048845][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1276.782354][T10145] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1278.096227][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8408'. [ 1278.096327][T10180] netlink: 'syz.2.8408': attribute type 30 has an invalid length. [ 1278.096365][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8408'. [ 1278.575908][T10191] x_tables: duplicate underflow at hook 1 [ 1284.145784][T10255] netlink: 'syz.1.8418': attribute type 1 has an invalid length. [ 1285.554296][T10257] bond11: entered promiscuous mode [ 1285.554805][T10257] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1286.683741][T10267] netlink: 'syz.2.8422': attribute type 1 has an invalid length. [ 1287.575148][T10267] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1288.911174][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1289.530832][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1290.638490][T10301] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1290.944222][T10309] netlink: 'syz.0.8427': attribute type 62 has an invalid length. [ 1290.944266][T10309] netlink: 'syz.0.8427': attribute type 3 has an invalid length. [ 1291.332407][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8426'. [ 1291.349618][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8427'. [ 1292.936055][T10325] veth0_to_bond: entered allmulticast mode [ 1293.144373][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8431'. [ 1293.208269][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8431'. [ 1295.099561][T10347] tun0: tun_chr_ioctl cmd 1074025673 [ 1295.236016][T10346] syzkaller0: entered allmulticast mode [ 1295.291249][T10344] tipc: Enabled bearer , priority 0 [ 1295.866062][T10340] tipc: Disabling bearer [ 1296.072811][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1296.216465][T10351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8436'. [ 1296.267786][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1296.737652][T10353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8436'. [ 1297.150480][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.442494][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1298.442620][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1298.894253][T31086] block nbd5: Receive control failed (result -22) [ 1298.898075][T10364] nbd5: detected capacity change from 0 to 32 [ 1299.057403][T29467] block nbd5: Dead connection, failed to find a fallback [ 1299.057474][T29467] block nbd5: shutting down sockets [ 1299.057540][T29467] blk_print_req_error: 96 callbacks suppressed [ 1299.057596][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.057670][T29467] buffer_io_error: 138 callbacks suppressed [ 1299.057704][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.058289][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.058356][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.149096][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.149154][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.194820][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.194855][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.194986][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.195014][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.195160][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.195187][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.195606][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.195635][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.197023][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.197052][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.198785][ T7266] ldm_validate_partition_table(): Disk read failed. [ 1299.198886][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.198913][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.199031][T29467] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1299.199058][T29467] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1299.237300][ T7266] Dev nbd5: unable to read RDB block 0 [ 1299.313690][ T7266] nbd5: unable to read partition table [ 1299.519088][ T7266] ldm_validate_partition_table(): Disk read failed. [ 1299.520593][ T7266] Dev nbd5: unable to read RDB block 0 [ 1299.522593][ T7266] nbd5: unable to read partition table [ 1300.014550][ C1] openvswitch: cpu_id mismatch with handler threads [ 1301.784170][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1301.870297][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1303.128817][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1304.831329][T10384] 8021q: VLANs not supported on gre0 [ 1307.571797][ T6755] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.571867][ T6755] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1308.969129][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1309.711099][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8455'. [ 1309.899281][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8456'. [ 1310.126171][T10437] ip_tables: iptables: counters copy to user failed while replacing table [ 1311.884991][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8459'. [ 1311.964550][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8460'. [ 1312.355713][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'. [ 1312.355754][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8462'. [ 1312.562948][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'. [ 1312.563039][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8462'. [ 1317.369327][T10509] IPVS: rr: UDP [::1]:8080 - no destination available [ 1318.204676][T10513] netlink: 'syz.3.8469': attribute type 1 has an invalid length. [ 1318.487648][T10518] netlink: 'syz.1.8471': attribute type 3 has an invalid length. [ 1318.487707][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1319.665462][T10531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1322.477305][T10559] lo speed is unknown, defaulting to 1000 [ 1322.634342][T10559] lo speed is unknown, defaulting to 1000 [ 1323.030569][T10564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1324.109324][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8483'. [ 1324.990026][ T31] INFO: task kworker/0:1H:1718 blocked for more than 143 seconds. [ 1324.990055][ T31] Not tainted syzkaller #0 [ 1324.990067][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.990077][ T31] task:kworker/0:1H state:D stack:26400 pid:1718 tgid:1718 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1324.990141][ T31] Workqueue: kblockd blk_mq_run_work_fn [ 1324.990299][ T31] Call Trace: [ 1324.990308][ T31] [ 1324.990332][ T31] __schedule+0x17db/0x58f0 [ 1324.990389][ T31] ? __pfx___schedule+0x10/0x10 [ 1324.990422][ T31] ? schedule+0x90/0x2b0 [ 1324.990446][ T31] schedule+0x164/0x2b0 [ 1324.990469][ T31] schedule_timeout+0x152/0x2c0 [ 1324.990501][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1324.990531][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1324.990571][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1324.990604][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1324.990649][ T31] nbd_queue_rq+0x96f/0xff0 [ 1324.990723][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1324.990746][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1324.990787][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1324.990825][ T31] ? sbitmap_get+0x229/0x390 [ 1324.990859][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1324.990883][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1324.990915][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1324.990962][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1324.990990][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1324.991023][ T31] ? lock_acquire+0x115/0x350 [ 1324.991050][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1324.991083][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1324.991111][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 1324.991139][ T31] blk_mq_run_work_fn+0x16c/0x300 [ 1324.991169][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1324.991197][ T31] process_scheduled_works+0xc3d/0x1630 [ 1324.991258][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1324.991293][ T31] ? assign_work+0x3cf/0x5d0 [ 1324.991332][ T31] worker_thread+0xa47/0xfb0 [ 1324.991376][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1324.991417][ T31] kthread+0x38b/0x480 [ 1324.991439][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1324.991465][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.991488][ T31] ret_from_fork+0x514/0xb70 [ 1324.991528][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.991562][ T31] ? __switch_to+0xc89/0x1420 [ 1324.991595][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.991618][ T31] ret_from_fork_asm+0x1a/0x30 [ 1324.991668][ T31] [ 1324.991881][ T31] [ 1324.991881][ T31] Showing all locks held in the system: [ 1324.991927][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1324.992004][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1324.992080][ T31] locks held by kworker/0:1H/1718: 4, on CPU#0: [ 1324.992096][ T31] #0: ffff88801eef8940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992153][ T31] #1: ffffc90006a6fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992211][ T31] #2: ffff88801d33de18 (set->srcu){.+.+}-{ ** replaying previous printk message ** [ 1324.992211][ T31] #2: ffff88801d33de18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1324.992270][ T31] #3: ffff88807cbd7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1324.992338][ T31] locks held by getty/5375: 2, on CPU#0: [ 1324.992352][ T31] #0: ffff88802816c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1324.992492][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1324.992557][ T31] locks held by kworker/u8:4/23961: 3, last CPU#1: [ 1324.992573][ T31] #0: ffff88803db31140 ((wq_completion)krds_cp_wq#15/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992630][ T31] #1: ffffc90003f77c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992706][ T31] #2: ffff888055531880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1324.992769][ T31] locks held by kworker/u8:5/23962: 3, last CPU#0: [ 1324.992785][ T31] #0: ffff888043bbf140 ((wq_completion)krds_cp_wq#15/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992845][ T31] #1: ffffc900044d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.992914][ T31] #2: ffff888055531e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1324.992972][ T31] locks held by kworker/u8:9/23965: 3, last CPU#1: [ 1324.992987][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993044][ T31] #1: ffffc90003cf7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993103][ T31] #2: ffff88804a3e1258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1324.993244][ T31] locks held by kworker/u8:47/26614: 4, last CPU#1: [ 1324.993260][ T31] #0: ffff888043bbd940 ((wq_completion)krds_cp_wq#15/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993317][ T31] #1: ffffc9000c277c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993381][ T31] #2: ffff888055531b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1324.993438][ T31] #3: ffff88803359d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1324.993564][ T31] locks held by kworker/u8:50/4312: 2, on CPU#1: [ 1324.993579][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993636][ T31] #1: ffffc90004ce7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993693][ T31] locks held by kworker/u8:53/4315: 3, last CPU#1: [ 1324.993709][ T31] #0: ffff8880338aa140 ((wq_completion)krds_cp_wq#15/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993767][ T31] #1: ffffc900056bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1324.993825][ T31] #2: ffff888055533080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1324.993884][ T31] locks held by udevd/7004: 1, on CPU#0: [ 1324.993898][ T31] #0: ffff88807b34b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1324.993987][ T31] locks held by syz.2.8481/10559: 2, on CPU#1: [ 1324.994002][ T31] #0: ffffffff90243cc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1324.994113][ T31] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1324.994173][ T31] locks held by syz.2.8481/10562: 2, last CPU#1: [ 1324.994189][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_map_update_value+0x644/0x920 [ 1324.994250][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rhtab_map_update_elem+0x76/0x1ec0 [ 1324.994313][ T31] locks held by syz.4.8485/10579: 2, last CPU#1: [ 1324.994334][ T31] #0: ffff888035739078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1324.994404][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1324.994467][ T31] locks held by syz.4.8485/10582: 3, last CPU#1: [ 1324.994484][ T31] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1324.994581][ T31] #1: ffff888079f5e530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1324.994718][ T31] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 1324.994770][ T31] locks held by syz.4.8485/10587: 1, on CPU#1: [ 1324.994785][ T31] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1324.994836][ T31] locks held by syz.4.8485/10588: 1, on CPU#1: [ 1324.994851][ T31] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1324.994903][ T31] locks held by syz.1.8486/10581: 1, on CPU#1: [ 1324.994918][ T31] #0: ffffffff8fa0abc0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 1324.995051][ T31] locks held by syz.1.8486/10583: 2, on CPU#1: [ 1324.995067][ T31] #0: ffffffff8fa0abc0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 1324.995127][ T31] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaef/0x1c00 [ 1324.995188][ T31] locks held by syz.1.8486/10585: 1, on CPU#1: [ 1324.995203][ T31] #0: ffffffff8fa0abc0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 1325.403640][ T31] locks held by syz.1.8486/10589: 1, last CPU#0: [ 1325.403689][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1325.403836][ T31] locks held by modprobe/10584: 2, last CPU#1: [ 1325.403876][ T31] #0: ffff8880357383b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1325.404015][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1325.404163][ T31] locks held by modprobe/10592: 1, last CPU#1: [ 1325.404208][ T31] #0: ffff8880837d7678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1325.404368][ T31] [ 1325.404386][ T31] ============================================= [ 1325.404386][ T31] [ 1325.404853][ T31] NMI backtrace for cpu 0 [ 1325.404896][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1325.404947][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1325.404982][ T31] Call Trace: [ 1325.405010][ T31] [ 1325.405031][ T31] dump_stack_lvl+0xe8/0x150 [ 1325.405108][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1325.405279][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1325.405366][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1325.405451][ T31] sys_info+0x135/0x170 [ 1325.405539][ T31] watchdog+0xfd7/0x1030 [ 1325.405624][ T31] ? watchdog+0x1c7/0x1030 [ 1325.405692][ T31] kthread+0x38b/0x480 [ 1325.405742][ T31] ? __pfx_watchdog+0x10/0x10 [ 1325.405785][ T31] ? __pfx_kthread+0x10/0x10 [ 1325.405835][ T31] ret_from_fork+0x514/0xb70 [ 1325.405894][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.405971][ T31] ? __switch_to+0xc89/0x1420 [ 1325.406043][ T31] ? __pfx_kthread+0x10/0x10 [ 1325.406107][ T31] ret_from_fork_asm+0x1a/0x30 [ 1325.406287][ T31] [ 1325.406309][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1325.406393][ C1] NMI backtrace for cpu 1 [ 1325.406406][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1325.406426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1325.406437][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1325.406496][ C1] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1325.406523][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1325.406538][ C1] RAX: 1ffffffff35a7400 RBX: 00000000000003fd RCX: 0000000000000000 [ 1325.406550][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1325.406560][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1325.406572][ C1] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 1325.406584][ C1] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 1325.406595][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 1325.406609][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1325.406620][ C1] CR2: 00007ffbd85b1a10 CR3: 000000006844a000 CR4: 00000000003526f0 [ 1325.406635][ C1] Call Trace: [ 1325.406642][ C1] [ 1325.406650][ C1] wait_for_lsr+0x184/0x2f0 [ 1325.406671][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1325.406699][ C1] serial8250_console_write+0xaa1/0x1200 [ 1325.406723][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1325.406746][ C1] ? __schedule+0x17f1/0x58f0 [ 1325.406770][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1325.406798][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1325.406819][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1325.406845][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1325.406872][ C1] nbcon_kthread_func+0x679/0x880 [ 1325.406893][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1325.406910][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1325.406931][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1325.406956][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1325.406982][ C1] kthread+0x38b/0x480 [ 1325.406997][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1325.407013][ C1] ? __pfx_kthread+0x10/0x10 [ 1325.407029][ C1] ret_from_fork+0x514/0xb70 [ 1325.407046][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.407071][ C1] ? __switch_to+0xc89/0x1420 [ 1325.407094][ C1] ? __pfx_kthread+0x10/0x10 [ 1325.407111][ C1] ret_from_fork_asm+0x1a/0x30 [ 1325.407144][ C1] [ 1325.407379][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1326.339696][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1326.348827][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1326.358909][ T31] Call Trace: [ 1326.362211][ T31] [ 1326.365166][ T31] vpanic+0x56d/0xa60 [ 1326.369200][ T31] ? __pfx_vpanic+0x10/0x10 [ 1326.373740][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1326.379314][ T31] panic+0xc5/0xd0 [ 1326.383077][ T31] ? __pfx_panic+0x10/0x10 [ 1326.387531][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1326.392602][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1326.398798][ T31] watchdog+0x1030/0x1030 [ 1326.403161][ T31] ? watchdog+0x1c7/0x1030 [ 1326.407628][ T31] kthread+0x38b/0x480 [ 1326.411720][ T31] ? __pfx_watchdog+0x10/0x10 [ 1326.416408][ T31] ? __pfx_kthread+0x10/0x10 [ 1326.421010][ T31] ret_from_fork+0x514/0xb70 [ 1326.425638][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.430788][ T31] ? __switch_to+0xc89/0x1420 [ 1326.435481][ T31] ? __pfx_kthread+0x10/0x10 [ 1326.440079][ T31] ret_from_fork_asm+0x1a/0x30 [ 1326.444878][ T31] [ 1326.449338][ T31] Kernel Offset: disabled [ 1326.453678][ T31] Rebooting in 86400 seconds..