last executing test programs: 2.745437883s ago: executing program 2 (id=4067): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}], 0x1, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000100), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdfa5760000000c009900fe1cffff1c000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24004804) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="88", 0x1, 0x24000045, &(0x7f0000000340)={0xa, 0x2, 0xfffffff7, @loopback, 0x43bc}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000000)=@raw=[@exit, @tail_call], &(0x7f0000000100)='syzkaller\x00', 0x20, 0xb0, &(0x7f0000000180)=""/176, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x1, 0x1], &(0x7f0000000300)=[{0x5, 0x5, 0x0, 0x5}, {0x3, 0x1, 0xe, 0xa}, {0x3, 0x0, 0xd, 0x9}, {0x2, 0x2, 0x7, 0x8}, {0x20000, 0x2, 0x8, 0x9}, {0x5, 0x2, 0x4, 0x7}, {0x2, 0x3, 0x9, 0x2}, {0x5, 0x2, 0x4, 0x6}, {0x3, 0x2, 0x9, 0x6}], 0x10, 0xfffffeb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x0, 0x1e, 0x80, &(0x7f0000000480)="44fc3820936741b37fbd83d3f0d0de390efa4d56b5ad3dd442252a7fbee7", &(0x7f00000004c0)=""/128, 0x4f7, 0x0, 0xb6, 0x47, &(0x7f0000000540)="cda0dc0d0bd1aa7c1c2072039b2e1f2de15e3ece37a50215aa403853d128f185f7c64c7dfae169c0ff2870714fe7587e72b60496fc65dd7404e085c58d132b822825aa4c7cd15ab76e32a41ef890af08b09e80d31c7e3e1606c5bca3909914f5eaf6e14a419119c5b4be80b7b8f68d1aaccd57dc22dfc224973b131f49abd84f5130156cf81cf0cc395899f209f9bc9646b9c0f6240aa4639c4f9e1ec83e2754b9551b8fe45f751bafcae613eee18225850b3ed063fe", &(0x7f0000000600)="eff184d0b23eb0536ad474a239d1944c43ebd692f3dd3efa34078e05cfebe2f0467012133c3e8f048d66ce9fe0cd8de2eff6ef6b96d08fb75a516299134ac786262d87459d85ad", 0x4, 0x0, 0x59}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) 2.012027679s ago: executing program 2 (id=4078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc4643, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000600)="c23a", 0x2}], 0x1, 0x1) close(r3) socket(0x2b, 0x80801, 0x1) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1016) 1.944707863s ago: executing program 4 (id=4079): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x6, 0x0, 0x2, 0x1, 0x0, 0x80}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) 1.807776303s ago: executing program 4 (id=4081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x20, 0x0, 0x0, @private2, @mcast2, {[], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd0"}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000006e93000000000000b50302000000000085000000b7000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001900010026bd7000000000000a000000fd04000b0000000005001400030000001800168014000100010000000000000038000400054006000c00090008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48841) 1.621416104s ago: executing program 0 (id=4082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000090601020000000000000000000000010900cc8f020073797a3100000000100008800c000780f2ff09400000a0cd08000940000000060500010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c00d040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x40854) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x24, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r7, 0x2210}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000017c0)=ANY=[], 0x32600) r10 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000100)=0x100, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="65bfa526f173386bf27ec0eb8e3aadfc14f84adc23b9e1d62e182edbb076a37f48b0ce874f158b739a54013793bac9f756cfa5f743fafa8c8844b596188e4a54c7bc6ce37991d39ad6412f37449693036263fe2dfef9378381f31180fb01056acb", @ANYRES64=r2], 0x0) r11 = socket(0x1d, 0x3, 0x1) getsockname$netlink(r11, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000000000000567d804d8900000000000000f9fffeff1835000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000004000000", @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES64=r2, @ANYRES32=r9, @ANYRESOCT=r2, @ANYRESOCT=r9, @ANYRES8=r6], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffde0) 1.595591077s ago: executing program 2 (id=4083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000049"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x20008041) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0x3c}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 1.441394565s ago: executing program 2 (id=4084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) unshare(0x8000400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.397004256s ago: executing program 3 (id=4085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x82000001, '\x00', 0x0, 0x0, 0x0, 0x100000, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.382207938s ago: executing program 2 (id=4086): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={r1, 0x8}, &(0x7f0000000340)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000240)=0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r3, 0x2, 0x20, 0x6, 0x3}, &(0x7f0000000100)=0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x50) syz_emit_ethernet(0x4f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="2d18f2404c914a9e", 0x8, 0x4000880, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000440)={r3, 0xe, 0xad96}, 0x8) r6 = socket(0x29, 0x3, 0x2) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/23, 0x17}], 0x1, 0x0, 0xffffffffffffff4d}, 0x2}], 0x1, 0x2003, 0x0) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="1b35", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}], 0x2, 0x40480dc) bind$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a3100000000050004000100000014000780060005404e200000080012400000009b050005000a000000050001000600000011000300686173683a69702c6d61726b00000000ef3677843d7419fd8810f77c82992693a4b73035b4e684577c0a313d5a92c682314cdc0e85baaf9e229cdc41c459390444cba509e7c0ec4ea2b1a3ade72fe1ad4082fdbb3ad65ee6db32b65ee25f02c51d41cfa12805f6ea63c3f3d0bd744252bc6c003283023a931e1f24906cde2bf4cdfeb6e108d60b74915693120100"/234], 0x60}}, 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) 1.277123709s ago: executing program 4 (id=4087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200008c0}], 0x1, 0x44840) recvmsg$can_j1939(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x15, 0x40006, 0x503) bpf$ENABLE_STATS(0x20, 0x0, 0xffffffffffffff99) 1.227258209s ago: executing program 4 (id=4088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x20}, [{0x1f, 0x1, "fc6823061bcc"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001ff"], 0x118}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 1.138875744s ago: executing program 1 (id=4089): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x4, 0x70bd2b, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a122000044700000500012800b00010067656e65766500004000028008000b4000000200060005004e2300000500080001000000080002007f000001050008000100000005000ce11800000004000600050008000200000008001b00177000000a000100a5"], 0x84}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) sendto(r0, &(0x7f0000000200)="8664bd9dc59d34c8159b428f53967866705f2eca390a601315894b332d26c112c09844de965bfeba9e74e537b720157db327bc237c3345f4e7bc8781a2b7c46fb35093f966ae219aa94e45a28bbc908ccf219341cbab8032a7a34309b9995718ccba5e3dc2f0e41c10cb75cb42f741b2", 0x70, 0x10000800, 0x0, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) 1.018810316s ago: executing program 3 (id=4090): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x80000015}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x60000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000000feff00"/20, @ANYRES16=r2, @ANYRES32, @ANYRES8=r3, @ANYRES8=r1, @ANYRES16=r3, @ANYRESOCT=r2], 0x48) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000040)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000580)={0xdcea, {{0xa, 0x4e23, 0x6, @remote, 0x1}}, {{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x108) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40c100, 0x0) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="000060000efcd1b2c4e2bced40367c257cc91f6d026909"], 0x17) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000626f6e64000000000c00028008"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58001134", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000001400020077673200000000000000000000000000300008802c0000800400098024000100"/82], 0x58}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r8, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000080)) 1.017688167s ago: executing program 4 (id=4091): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f10"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xcff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8920, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005700)=""/4075, 0xfeb}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000001d40)=""/4083, 0xff3}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000002d40)=""/4078, 0xfee}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000800)=""/156, 0x9c}], 0xa}, 0x32120) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2339137e7559dbb6d6af623000005cf61526dd10d1c452007132597a2c038182400000000005a0d00000000be00"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r3, 0x15, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 861.196793ms ago: executing program 1 (id=4092): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="65c377026d738e6d0b99d595555d7f3c3d4bcbf5e65dd4a6b23fc05b2ff4553387f301bceaf74da59a", @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x42050, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @local, 0x3b67}, 0x1c) 859.984824ms ago: executing program 3 (id=4093): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x1, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x24008094) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a32000000007c000000060a010400000000000000000100000208000b40000000005400048050000180080001006e61740044000280080002400000000208000140000000000800054000000016080006400000000a0800054000000000080002400000000a080006400000000c080004400000000c0900010073797a30"], 0xf0}}, 0x0) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0x2a}, {&(0x7f0000000340)="448b7cff000000000000", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88695211f0", 0x11}], 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 828.437156ms ago: executing program 4 (id=4094): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x15e) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fa01, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 738.901802ms ago: executing program 1 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x78, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x78}}, 0x4000810) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340054b7497cf0746417fbf94e5a710001", @ANYRES16=0x0, @ANYRES8], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0xc72, 0x6, 0x2208, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xb}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x6f, r3}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}}, 0x20000090) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9b001800", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf271500000008000300", @ANYRES32=r8, @ANYBLOB="0c002b800800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x334, r13, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}, @NL80211_ATTR_FRAME={0x2e5, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ff8}, @device_b, @random="07e769053f7b", @broadcast, {0xd, 0xfff}, "", @value={0xa, 0x1, 0x1, 0x0, 0x4}}, @random="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"}}]}, 0x334}, 0x1, 0x0, 0x0, 0xc000}, 0x4004004) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf251d00000010002f800c0002000203aaaaaaaaaaaa0c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 600.022868ms ago: executing program 0 (id=4096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x5f, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000002080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001180)=@delchain={0xe84, 0x65, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff2}, {0x0, 0x10}, {0x4, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @filter_kind_options=@f_u32={{0x8}, {0xb8c, 0x2, [@TCA_U32_SEL={0x2e4, 0x5, {0x7, 0x5, 0xda, 0x8, 0x1e, 0xa0e, 0xffff, 0x5, [{0x8, 0xffff, 0xfffffffb, 0x6}, {0x1, 0x4, 0x35, 0x2}, {0xea, 0x7, 0x4, 0x10000}, {0x1, 0x6, 0x2, 0x8}, {0x7b3, 0x9, 0x1, 0x985b}, {0x81, 0xcd0, 0x6d, 0xd}, {0x3, 0x1ff, 0x4, 0x7fffffff}, {0x40, 0x0, 0x3, 0x4}, {0x7, 0xb1b, 0x6b1, 0x6}, {0xfffffffe, 0x93, 0xc, 0x7fff}, {0xa301, 0x6, 0x64, 0xfffff801}, {0x3, 0x9, 0x4, 0xa}, {0x6, 0x3, 0x9, 0x5}, {0x8, 0x10, 0x5, 0x10001}, {0x1, 0x3, 0xa411, 0x5}, {0x2, 0x2, 0x2, 0x4}, {0x4, 0x80000000, 0x1}, {0xa1, 0x2, 0x10, 0x6}, {0x8000, 0x6, 0x80000000, 0x1}, {0x5, 0x40, 0x4, 0x3}, {0x0, 0x10, 0x9, 0x7}, {0xa, 0xfffffffd, 0x5b, 0xfd}, {0x9, 0x5, 0x6, 0xbb4}, {0x7, 0xe47e, 0x0, 0x6}, {0x2, 0x40, 0x8, 0xe12}, {0x1, 0x7, 0x8001, 0x3}, {0x800, 0x6, 0x857, 0x3}, {0x6, 0x42, 0x5, 0x4b}, {0x6, 0x4, 0x5, 0xff}, {0x800, 0x9, 0x4, 0x280}, {0x8, 0x2, 0x4, 0x320}, {0x81, 0x7, 0x1, 0xffffffff}, {0x2, 0xe, 0xd, 0x8}, {0x4, 0x4, 0x2, 0x516d9933}, {0x3, 0x9, 0x7f, 0x9}, {0xff, 0x6, 0x4, 0x6}, {0x9, 0x7, 0x1, 0xe9}, {0xe, 0x5, 0x6, 0xfffffffd}, {0x80000001, 0x10000, 0x5, 0x80000001}, {0x10, 0x6, 0x7, 0xcf3}, {0x2, 0x3, 0x1, 0x7fffffff}, {0x0, 0xffffffff, 0x9, 0x1}, {0x0, 0x9, 0x6, 0x6}, {0x3, 0x5a, 0x1ff, 0x5}, {0x7, 0x3, 0xd, 0x4}]}}, @TCA_U32_SEL={0x474, 0x5, {0xa, 0x1, 0x8, 0x8, 0xf, 0x2, 0x800, 0x1, [{0x400, 0x7ff, 0x1000, 0xff800000}, {0x1000, 0x1, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x1fec4000}, {0x9e7, 0x6, 0xce0b, 0x3}, {0x8, 0x3d, 0x9, 0x2}, {0x9, 0x2, 0x7fff, 0xa2}, {0x101, 0x4, 0x3, 0x7}, {0x71ae, 0x5, 0x6, 0x1}, {0x1000, 0x1, 0xffffffff, 0x4}, {0x4, 0xc287, 0x5, 0xfffffffe}, {0x80, 0x87, 0x80000001, 0x8}, {0x2, 0xffff7fff, 0xc, 0x3}, {0xa1d8, 0x8, 0x1}, {0xf50, 0x9, 0x4, 0x51a1}, {0xfffffffa, 0x10000, 0x1, 0x4}, {0x0, 0x9, 0xffffffff, 0x9}, {0x5, 0x401, 0xfffffffa, 0x4}, {0x5, 0x9bc, 0x2, 0x8}, {0x4, 0x1000, 0x1, 0x1}, {0x400, 0xfffffffe, 0x0, 0xfffffe00}, {0x6, 0x7, 0x1000, 0x2}, {0x7ff, 0xfffffff7, 0x80000001, 0x2}, {0x4, 0x40, 0xd, 0x8000}, {0xf080, 0x2, 0x0, 0x4}, {0x6, 0x8, 0x96d}, {0x4, 0x4, 0x8, 0x7}, {0x0, 0x3, 0x8, 0x7}, {0x6, 0x4}, {0x7ff, 0x0, 0x6, 0xb071}, {0x1, 0x2, 0x62, 0x5b07}, {0x3ff, 0x7, 0xf, 0x5}, {0x1, 0x7fffffff, 0x800, 0x9}, {0x9, 0x9, 0x1, 0x6}, {0x9, 0x2e, 0x4, 0x7}, {0x7, 0x7fffffff, 0x800, 0x6}, {0x3, 0x8, 0x6, 0x8001}, {0x5, 0x1, 0x1ff}, {0x6, 0x6, 0x8, 0x9}, {0x8a, 0xa6, 0xfb7, 0x1}, {0x8001, 0x2, 0x89d, 0xfffffc01}, {0x30, 0x6, 0x8, 0x8a}, {0xfff, 0xfffffff9, 0xfffffffa, 0x8000}, {0x3, 0xff, 0x8, 0xe}, {0x1, 0x0, 0x83, 0x8000}, {0xb394, 0xe, 0x4, 0x7ff}, {0x4, 0x0, 0xcb, 0x4}, {0x1000, 0x7f, 0x1, 0x1ff}, {0xf3b5, 0x2, 0x7, 0x8}, {0x6, 0x3, 0x3, 0x3}, {0x1, 0x7fff, 0x7, 0x8000}, {0x5a50, 0x8, 0x401, 0x291e0000}, {0x7f, 0x3, 0x9, 0xfffffeff}, {0x8, 0x0, 0x0, 0xffffffff}, {0x2, 0xfffffff7, 0x5, 0x5}, {0x9, 0x8000000, 0x6, 0xb1}, {0xa, 0x2, 0xfffff800, 0xe8b9}, {0x5, 0xfffffff6, 0x5, 0xffff85cc}, {0x6afbce20, 0x2, 0x6, 0x3}, {0x3ff, 0xb, 0x4, 0x5}, {0xfffffffb, 0x7, 0x3ff, 0x5}, {0x3, 0x3, 0x80000000, 0x3e0f}, {0x6, 0x100, 0x189, 0x800}, {0x0, 0x81, 0x80, 0x4}, {0x3, 0x0, 0x80, 0xfff}, {0x7fff, 0x8, 0x2, 0x5}, {0x672eaa6a, 0x10001, 0x6a0, 0x1}, {0x6, 0x9, 0xffff, 0xfffffff7}, {0x3, 0x3, 0x5, 0x10001}, {0x1ff, 0x95, 0x10000}, {0x3ff, 0xff, 0x7, 0x22f}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x3, 0x5, 0x9, 0x4, 0xc, 0x23, 0xb, 0x2, 0x100, 0x3, 0xe46, 0x0, 0x5, 0xe, 0x8, 0x1ff, 0x7243, 0x7, 0x0, 0x0, 0x2c800000, 0x5, 0xff, 0x4, 0x2, 0x6, 0x0, 0x401, 0x3, 0x9, 0x7, 0x4, 0x1, 0x7, 0x2, 0x400, 0x4, 0x8, 0x9, 0x2074, 0x8, 0x200, 0xe68, 0x0, 0x13, 0xf, 0x4, 0x4, 0xffa, 0x7, 0x2, 0x200000, 0x0, 0x0, 0x1, 0x3, 0x6, 0x3, 0x6, 0x1, 0x1e900000, 0x2, 0xc78c, 0x2, 0xc, 0x4, 0x1, 0x9, 0x3, 0x10001, 0x1, 0x9, 0xfffffffa, 0xffff, 0x6, 0x1, 0x6a8, 0x1000, 0x0, 0x7, 0x7fff, 0x7, 0x0, 0x5, 0x2, 0x7, 0x100, 0x9, 0x2, 0x86, 0x10000, 0x5, 0xfffffffd, 0x9, 0x8, 0xd246, 0x5, 0x10000, 0x1, 0x80, 0xffffc65c, 0x5, 0x6, 0x3, 0x8, 0x4, 0x6, 0x0, 0x8, 0x6, 0x3, 0x40, 0x2, 0x1106, 0xfffffffe, 0x1, 0xf22f, 0x8, 0x81, 0x6, 0x2, 0x7, 0xc, 0x12000, 0x7, 0x10, 0x8000, 0x6cd, 0x401, 0x3, 0x0, 0x2, 0x3, 0x7, 0x2, 0x2, 0x7, 0xe5, 0xf, 0x81, 0x43e, 0xca, 0xb, 0x7, 0x1, 0x8, 0xcc3a, 0x6f9, 0x0, 0x8, 0xd, 0x81, 0xab5, 0x2, 0x8, 0x1000, 0x2, 0x7f, 0xa, 0x0, 0xc, 0x5, 0x2, 0x8, 0x0, 0x10, 0x401, 0x71, 0x101, 0x6, 0x2, 0x8, 0x9, 0x20000000, 0x6, 0x8001, 0x271, 0xb4e, 0x69, 0x8, 0x2, 0x8, 0x5, 0x3, 0x800, 0x7, 0x7ff, 0x9fd, 0x9, 0x25f1, 0x7fff, 0x15, 0xb07, 0x1, 0x7, 0x6, 0x1, 0xfffff001, 0x5, 0xffffffff, 0x9, 0x9, 0x6, 0x4, 0x6, 0x7ff, 0x7, 0x6, 0xbf27, 0xaf32, 0x79000, 0xff, 0xc, 0xd55, 0x9, 0xb086, 0x6, 0x7f, 0x5, 0xfffffffd, 0x350a9400, 0x6, 0x8, 0x800, 0x401, 0x35, 0xfffffff2, 0x2, 0xfffffffa, 0x10000, 0x9, 0x7, 0xffff22bf, 0x2, 0xde61, 0x3, 0x80000000, 0xf7d0, 0x18fd3e3d, 0x82a8, 0xfffffffa, 0xdb, 0x8, 0x6, 0x5, 0x7, 0xc7d6, 0x2e9d, 0x2, 0x5, 0x4, 0x1000, 0x3, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xc3e7}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @filter_kind_options=@f_flow={{0x9}, {0x26c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_ACT={0x200, 0x9, 0x0, 0x1, [@m_simple={0x68, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '}:![/\x00'}]}, {0x2f, 0x6, "a2654c83e619a7531e6fd20fba27234f26f350f90454e1ad386efe7a7deea8de06401379009909c6495d42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xf0, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x5, 0xf73b, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f4c, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x4, 0x4, 0x4, 0x7f}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1130, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x141, 0x2}}]}, {0x6e, 0x6, "eeedf7cd4ad3255d09ab1be7803865ddfccf86fd0aba6fcbceba96be8ba824dca831fb7da09fceeff64d4382adf749a4a037f7f721b44acaa3c8784c0e90a226b3b467ac87bb5e6ab069693c4836b3fc65817375f5a6973dbfbd2490550d5f39ab1e05bfde2ba7059f16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xa4, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0x8, 0x10000000, 0x6, 0x3}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x2, 0x50c8, 0x6}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x7d7, 0x0, 0x10, 0x7}, 0xa}}]}, {0x24, 0x6, "ed24ab6b8c108e34dc1adc578a13c8bd8ebbd172c2fbe69bb6a656c301509020"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xffe0}}, @TCA_FLOW_POLICE={0x48, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xc3fe, 0x8e, 0x6, {0xfc, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x2, 0x4ed, 0x1, 0x6, 0x9}, 0x81, 0x4, 0x7}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000a0}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x5f, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) sendmsg$nl_route_sched(r3, &(0x7f0000002080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001180)=@delchain={0xe84, 0x65, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff2}, {0x0, 0x10}, {0x4, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @filter_kind_options=@f_u32={{0x8}, {0xb8c, 0x2, [@TCA_U32_SEL={0x2e4, 0x5, {0x7, 0x5, 0xda, 0x8, 0x1e, 0xa0e, 0xffff, 0x5, [{0x8, 0xffff, 0xfffffffb, 0x6}, {0x1, 0x4, 0x35, 0x2}, {0xea, 0x7, 0x4, 0x10000}, {0x1, 0x6, 0x2, 0x8}, {0x7b3, 0x9, 0x1, 0x985b}, {0x81, 0xcd0, 0x6d, 0xd}, {0x3, 0x1ff, 0x4, 0x7fffffff}, {0x40, 0x0, 0x3, 0x4}, {0x7, 0xb1b, 0x6b1, 0x6}, {0xfffffffe, 0x93, 0xc, 0x7fff}, {0xa301, 0x6, 0x64, 0xfffff801}, {0x3, 0x9, 0x4, 0xa}, {0x6, 0x3, 0x9, 0x5}, {0x8, 0x10, 0x5, 0x10001}, {0x1, 0x3, 0xa411, 0x5}, {0x2, 0x2, 0x2, 0x4}, {0x4, 0x80000000, 0x1}, {0xa1, 0x2, 0x10, 0x6}, {0x8000, 0x6, 0x80000000, 0x1}, {0x5, 0x40, 0x4, 0x3}, {0x0, 0x10, 0x9, 0x7}, {0xa, 0xfffffffd, 0x5b, 0xfd}, {0x9, 0x5, 0x6, 0xbb4}, {0x7, 0xe47e, 0x0, 0x6}, {0x2, 0x40, 0x8, 0xe12}, {0x1, 0x7, 0x8001, 0x3}, {0x800, 0x6, 0x857, 0x3}, {0x6, 0x42, 0x5, 0x4b}, {0x6, 0x4, 0x5, 0xff}, {0x800, 0x9, 0x4, 0x280}, {0x8, 0x2, 0x4, 0x320}, {0x81, 0x7, 0x1, 0xffffffff}, {0x2, 0xe, 0xd, 0x8}, {0x4, 0x4, 0x2, 0x516d9933}, {0x3, 0x9, 0x7f, 0x9}, {0xff, 0x6, 0x4, 0x6}, {0x9, 0x7, 0x1, 0xe9}, {0xe, 0x5, 0x6, 0xfffffffd}, {0x80000001, 0x10000, 0x5, 0x80000001}, {0x10, 0x6, 0x7, 0xcf3}, {0x2, 0x3, 0x1, 0x7fffffff}, {0x0, 0xffffffff, 0x9, 0x1}, {0x0, 0x9, 0x6, 0x6}, {0x3, 0x5a, 0x1ff, 0x5}, {0x7, 0x3, 0xd, 0x4}]}}, @TCA_U32_SEL={0x474, 0x5, {0xa, 0x1, 0x8, 0x8, 0xf, 0x2, 0x800, 0x1, [{0x400, 0x7ff, 0x1000, 0xff800000}, {0x1000, 0x1, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x1fec4000}, {0x9e7, 0x6, 0xce0b, 0x3}, {0x8, 0x3d, 0x9, 0x2}, {0x9, 0x2, 0x7fff, 0xa2}, {0x101, 0x4, 0x3, 0x7}, {0x71ae, 0x5, 0x6, 0x1}, {0x1000, 0x1, 0xffffffff, 0x4}, {0x4, 0xc287, 0x5, 0xfffffffe}, {0x80, 0x87, 0x80000001, 0x8}, {0x2, 0xffff7fff, 0xc, 0x3}, {0xa1d8, 0x8, 0x1}, {0xf50, 0x9, 0x4, 0x51a1}, {0xfffffffa, 0x10000, 0x1, 0x4}, {0x0, 0x9, 0xffffffff, 0x9}, {0x5, 0x401, 0xfffffffa, 0x4}, {0x5, 0x9bc, 0x2, 0x8}, {0x4, 0x1000, 0x1, 0x1}, {0x400, 0xfffffffe, 0x0, 0xfffffe00}, {0x6, 0x7, 0x1000, 0x2}, {0x7ff, 0xfffffff7, 0x80000001, 0x2}, {0x4, 0x40, 0xd, 0x8000}, {0xf080, 0x2, 0x0, 0x4}, {0x6, 0x8, 0x96d}, {0x4, 0x4, 0x8, 0x7}, {0x0, 0x3, 0x8, 0x7}, {0x6, 0x4}, {0x7ff, 0x0, 0x6, 0xb071}, {0x1, 0x2, 0x62, 0x5b07}, {0x3ff, 0x7, 0xf, 0x5}, {0x1, 0x7fffffff, 0x800, 0x9}, {0x9, 0x9, 0x1, 0x6}, {0x9, 0x2e, 0x4, 0x7}, {0x7, 0x7fffffff, 0x800, 0x6}, {0x3, 0x8, 0x6, 0x8001}, {0x5, 0x1, 0x1ff}, {0x6, 0x6, 0x8, 0x9}, {0x8a, 0xa6, 0xfb7, 0x1}, {0x8001, 0x2, 0x89d, 0xfffffc01}, {0x30, 0x6, 0x8, 0x8a}, {0xfff, 0xfffffff9, 0xfffffffa, 0x8000}, {0x3, 0xff, 0x8, 0xe}, {0x1, 0x0, 0x83, 0x8000}, {0xb394, 0xe, 0x4, 0x7ff}, {0x4, 0x0, 0xcb, 0x4}, {0x1000, 0x7f, 0x1, 0x1ff}, {0xf3b5, 0x2, 0x7, 0x8}, {0x6, 0x3, 0x3, 0x3}, {0x1, 0x7fff, 0x7, 0x8000}, {0x5a50, 0x8, 0x401, 0x291e0000}, {0x7f, 0x3, 0x9, 0xfffffeff}, {0x8, 0x0, 0x0, 0xffffffff}, {0x2, 0xfffffff7, 0x5, 0x5}, {0x9, 0x8000000, 0x6, 0xb1}, {0xa, 0x2, 0xfffff800, 0xe8b9}, {0x5, 0xfffffff6, 0x5, 0xffff85cc}, {0x6afbce20, 0x2, 0x6, 0x3}, {0x3ff, 0xb, 0x4, 0x5}, {0xfffffffb, 0x7, 0x3ff, 0x5}, {0x3, 0x3, 0x80000000, 0x3e0f}, {0x6, 0x100, 0x189, 0x800}, {0x0, 0x81, 0x80, 0x4}, {0x3, 0x0, 0x80, 0xfff}, {0x7fff, 0x8, 0x2, 0x5}, {0x672eaa6a, 0x10001, 0x6a0, 0x1}, {0x6, 0x9, 0xffff, 0xfffffff7}, {0x3, 0x3, 0x5, 0x10001}, {0x1ff, 0x95, 0x10000}, {0x3ff, 0xff, 0x7, 0x22f}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x3, 0x5, 0x9, 0x4, 0xc, 0x23, 0xb, 0x2, 0x100, 0x3, 0xe46, 0x0, 0x5, 0xe, 0x8, 0x1ff, 0x7243, 0x7, 0x0, 0x0, 0x2c800000, 0x5, 0xff, 0x4, 0x2, 0x6, 0x0, 0x401, 0x3, 0x9, 0x7, 0x4, 0x1, 0x7, 0x2, 0x400, 0x4, 0x8, 0x9, 0x2074, 0x8, 0x200, 0xe68, 0x0, 0x13, 0xf, 0x4, 0x4, 0xffa, 0x7, 0x2, 0x200000, 0x0, 0x0, 0x1, 0x3, 0x6, 0x3, 0x6, 0x1, 0x1e900000, 0x2, 0xc78c, 0x2, 0xc, 0x4, 0x1, 0x9, 0x3, 0x10001, 0x1, 0x9, 0xfffffffa, 0xffff, 0x6, 0x1, 0x6a8, 0x1000, 0x0, 0x7, 0x7fff, 0x7, 0x0, 0x5, 0x2, 0x7, 0x100, 0x9, 0x2, 0x86, 0x10000, 0x5, 0xfffffffd, 0x9, 0x8, 0xd246, 0x5, 0x10000, 0x1, 0x80, 0xffffc65c, 0x5, 0x6, 0x3, 0x8, 0x4, 0x6, 0x0, 0x8, 0x6, 0x3, 0x40, 0x2, 0x1106, 0xfffffffe, 0x1, 0xf22f, 0x8, 0x81, 0x6, 0x2, 0x7, 0xc, 0x12000, 0x7, 0x10, 0x8000, 0x6cd, 0x401, 0x3, 0x0, 0x2, 0x3, 0x7, 0x2, 0x2, 0x7, 0xe5, 0xf, 0x81, 0x43e, 0xca, 0xb, 0x7, 0x1, 0x8, 0xcc3a, 0x6f9, 0x0, 0x8, 0xd, 0x81, 0xab5, 0x2, 0x8, 0x1000, 0x2, 0x7f, 0xa, 0x0, 0xc, 0x5, 0x2, 0x8, 0x0, 0x10, 0x401, 0x71, 0x101, 0x6, 0x2, 0x8, 0x9, 0x20000000, 0x6, 0x8001, 0x271, 0xb4e, 0x69, 0x8, 0x2, 0x8, 0x5, 0x3, 0x800, 0x7, 0x7ff, 0x9fd, 0x9, 0x25f1, 0x7fff, 0x15, 0xb07, 0x1, 0x7, 0x6, 0x1, 0xfffff001, 0x5, 0xffffffff, 0x9, 0x9, 0x6, 0x4, 0x6, 0x7ff, 0x7, 0x6, 0xbf27, 0xaf32, 0x79000, 0xff, 0xc, 0xd55, 0x9, 0xb086, 0x6, 0x7f, 0x5, 0xfffffffd, 0x350a9400, 0x6, 0x8, 0x800, 0x401, 0x35, 0xfffffff2, 0x2, 0xfffffffa, 0x10000, 0x9, 0x7, 0xffff22bf, 0x2, 0xde61, 0x3, 0x80000000, 0xf7d0, 0x18fd3e3d, 0x82a8, 0xfffffffa, 0xdb, 0x8, 0x6, 0x5, 0x7, 0xc7d6, 0x2e9d, 0x2, 0x5, 0x4, 0x1000, 0x3, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xc3e7}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @filter_kind_options=@f_flow={{0x9}, {0x26c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_ACT={0x200, 0x9, 0x0, 0x1, [@m_simple={0x68, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '}:![/\x00'}]}, {0x2f, 0x6, "a2654c83e619a7531e6fd20fba27234f26f350f90454e1ad386efe7a7deea8de06401379009909c6495d42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xf0, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x5, 0xf73b, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f4c, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x4, 0x4, 0x4, 0x7f}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1130, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x141, 0x2}}]}, {0x6e, 0x6, "eeedf7cd4ad3255d09ab1be7803865ddfccf86fd0aba6fcbceba96be8ba824dca831fb7da09fceeff64d4382adf749a4a037f7f721b44acaa3c8784c0e90a226b3b467ac87bb5e6ab069693c4836b3fc65817375f5a6973dbfbd2490550d5f39ab1e05bfde2ba7059f16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xa4, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0x8, 0x10000000, 0x6, 0x3}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x2, 0x50c8, 0x6}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x7d7, 0x0, 0x10, 0x7}, 0xa}}]}, {0x24, 0x6, "ed24ab6b8c108e34dc1adc578a13c8bd8ebbd172c2fbe69bb6a656c301509020"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xffe0}}, @TCA_FLOW_POLICE={0x48, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xc3fe, 0x8e, 0x6, {0xfc, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x2, 0x4ed, 0x1, 0x6, 0x9}, 0x81, 0x4, 0x7}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000a0}, 0x20000090) (async) 599.701453ms ago: executing program 1 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x60bd2d, 0x25dfdbf9, {0x2, 0x20, 0x30, 0xc, 0xff, 0x4, 0x0, 0x1, 0x7c00}, [@RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x2) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 570.621011ms ago: executing program 3 (id=4098): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000000)={0x19, 0x82, 0x4, 0xffffff65, 0x3ff}) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000100)={0x0, r1, r2, 0x2, 0x4, '\x00', {0x8, 0x1, 0x6, 0x5, 0x1, 0x10001, 0x4, 0x60000000000, {0x7fff, 0x4}, {0x200, 0x7}, {0x2, 0xdc4}, 0xa, 0x4, 0x14, 0x4, 0xffff, 0x81, 0x7fff, 0x7f, 0x7fff, 0x9, '\x00', 0x7a6, 0x5, 0x2393, 0x8}}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400040, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x8, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xe, 0x4}, {}, {0xa, 0x3}, {0xb}, {0x2}, {0x8, 0x4}]}, @struct={0x3, 0x6, 0x0, 0x4, 0x1, 0xffffff11, [{0x7, 0x0, 0x4}, {0xa, 0x5, 0x5}, {0x8, 0x2, 0x7d}, {0x9, 0x4, 0x4a37}, {0x2, 0x4, 0xfffffffe}, {0x6, 0x3, 0x9}]}, @const={0x1, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x0, 0x41, 0x0, 0x0, 0x30]}}, &(0x7f0000000640)=""/17, 0xbc, 0x11, 0x0, 0x2, 0x10000}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x17, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x7, 0x4, 0xf, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x220}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}], &(0x7f0000000500)='GPL\x00', 0x7839, 0x0, 0x0, 0x41100, 0x30, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x5, 0x1f0}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x1, r2], &(0x7f0000000740)=[{0x3, 0x3, 0x9, 0x1}, {0x0, 0x2, 0xf, 0x4}, {0x3, 0x1, 0xd, 0xb}, {0x5, 0x5, 0x1, 0x7}]}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000840)={r2, 0x2, 0x1000, 0x5a}) (async) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r11, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x404c) (async) getsockopt$netlink(r11, 0x10e, 0x4, &(0x7f0000000a00)=""/167, &(0x7f0000000ac0)=0xa7) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000b00)={{0xa, 0x4e21, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x4e21, 0x3, @private1, 0x94fe}, 0xffffffffffffffff, {[0x80000001, 0x8001, 0x7f, 0x7ff, 0x5, 0x8, 0x8]}}, 0x5c) (async, rerun: 64) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b80)) (rerun: 64) recvmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=""/79, 0x4f}], 0x1, &(0x7f0000000c80)=""/80, 0x50}, 0x42) (async, rerun: 64) bind$qrtr(r11, &(0x7f0000000d40)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc) (async, rerun: 64) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000d80)=0x401, 0x4) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x7, &(0x7f0000000dc0)=@raw=[@alu={0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000e00)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000e40)=[r11], &(0x7f0000000e80)=[{0x2, 0x1, 0xb, 0xe}, {0x5, 0x3, 0xb, 0x1}, {0x3, 0x2, 0x7, 0x6}, {0x1, 0x5, 0x3, 0xc}, {0x1, 0x1, 0x5}, {0x3, 0x2, 0x9, 0x4}, {0x4, 0x4, 0x1, 0xc}, {0x5, 0x3, 0x2, 0xb}, {0x5, 0x1, 0xf, 0xa}]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001000)={r11, r10, 0x4, r13}, 0x10) (async) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000001040)={0x1, 0x4a, "6e387ca1e71579124ee4094e963866f9c06b51d30ef87a704b5abc33218d803ba855ac1d5db67e371ac9448df03529f3982eb066b3c7d4dfed3d8b3121d50dc6a277d8642b19a86dfe8a"}) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@multicast1, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000011c0)=0xe8) (rerun: 32) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r14, 0xc0286687, &(0x7f0000001240)={0x2, 0x3, 0x16, &(0x7f0000001200)=""/22}) 461.743513ms ago: executing program 2 (id=4099): listen(0xffffffffffffffff, 0x400004) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x80000000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x5, 0xe56, 0x43d94cac, 0x7, 0x9}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)={r4, 0xc}, &(0x7f0000000440)=0x8) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="9d6fd101adf5d988701b4aeaf0cbb8d3e1776f6b5d8891fda1cb74942fa092912f6134a8c8e5843cd58879e9fd12e46359b2698391cd452faca4b73e3d467dd56d30446da0c54b5f0b78a8cad0c46f6bbd5c225d2e68f8247e0f6302cd3289f43a49e5d3b49cf5b7da39ea64204a2089fb38312f62abf84e3b95d25b4b32348f2e81bc1d21628a1393ee38f05e145aaf2ab790b71cb9819ee896caa85c6577fa4e96e30bcd2e25babef484d5cf7a3e3ab28da3c44c0091cf28913cd9a82f9922a2135a54f680585aff06c83527fbd4ba1ad8d098fb3891f50d830754", 0xdc}], 0x1, &(0x7f0000000800)=[@op={0x18}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000840)="e1fa892b896a6d3900dcd8ef1fe51cd6d424aeed9e1b3dad28390bf01535a539840e6e5709fa41f155409e6aee52722fdec8d3daaffe480d0a4551180482e41d3dbdbf9396166e14f66b40347e9f856df80c9bed2e798f68bfb73b2a282fe1fb16fe27c476c8a456acb530290e47631de342b3368f2ff07bb2581519abd65587db21be498e7bc810c73dd45dff0a249bc012e510f32807086593f36cbb423e85eb123ae5844892e5290e8e1fc978e271080028c868cb962ddd640f854888ace987f5fd0dde17c78132", 0xc9}, {&(0x7f0000000940)="69ef363d9567410b2dbce8c27e2a72322b19fd56b43e56a3fe3b7b80b6a5286023b49f473ec6660b02f853609ba09c1163802e4a2c04924aafb2cf3e481db76da680c307e2793fd2471d11c45da73e518ff42d63914c61ed497fd82695df8856301effe875db117a6698f1ff84c78831c681f8f0f20ae52d975038b2ea6367be7a0dd955f9472f65", 0x88}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="00e3ea1e664f8aebea570f4bfd588e9e887d88a4dd60d97115cc47fb8e24e651d29531c942bbc758de3e97400f26cdd7aeaba483f6e1b278600ac1c9027fd65dc65881cb2a7ffe483a7a84425fe5", 0x4e}, {&(0x7f0000001b00)="f902553d27c6e290612209e8aadffdfd32c0cb7f9428d896ec8ef69934cd7cf1d998f6fbb5b3f899b8f22813eb360fbd9930e9ddd4985a978f43f1b6079f8969c87bff8961715381773a80bd38929fbf2e6829519159df21de6cdf99aedd6188ce64ccd7223564714491d24749a8c4a5ba6b7ea9f310719344b9", 0x7a}, {&(0x7f0000001b80)="3fecdf168c087a0556810e472a45ac0495201200aa3b7d970d0170dc1586da2a3402d38f65facdd813662ed95e1a1623137cd02035cbaada0bdc9f8c6f428a66d19541c161fc53e77f89bb17b37640ca6250bafcec1757d497b627dac347aaef340effe62233dccc65311efc1051118e0936d21a89bf3a029ac238a3c2b480656ee5623ec8e8ca9ff5d040da12608a3013b6396310a26e72b10f104cf8936d1502032d4e797088a3f35021d5ffaefb8b2b4080de179e96cae8023c2964bec6937f3dec83e071b04afa184d5bbde723", 0xcf}, {&(0x7f0000001c80)="a22d9e21b9b3a8d77cbaf64b9ae0607eeda69e123abf45d81ee4945ab13b5ee43ecaa9fbd24be4c67ce02152d949b9ce3006e8e2f30362fe766fd8be41391bbefe53ec691d7e25949f5bcfe2e63ea9e364536b6b8091799a75b29b00f369fffb6413a536204d492b6d857ba202e590d366e8d7ffec2c15c7f15f2c3a89a940c6887b0d75e70244fc918d2b7e95aa94ff2c3079b2", 0x94}], 0x7, &(0x7f0000001dc0)=[@iv={0xc0, 0x117, 0x2, 0xa8, "27bf483e1f10a75be78a9e7e0a710eb880543772f59c10c9a74a217a025de8b986b2e7efb36ec84c5d2e37558adf274f2510b919ce9c34c108ed0348e3c7db574787b75366d5985f18bc2b4ffbd28fb8150fd5c963daeb25620d804942480dfef3673e9df045966e4f0af0ae933493d29e1ccc31c6f98da583dc48809639399ec3dff67add5eb1ad711da76398dcc5acda2d8f7eb74fbed7c1a4b185437e7e6e08343d0f59766861"}, @assoc={0x18, 0x117, 0x4, 0x1478}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0}], 0x2, 0x40801) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 401.685329ms ago: executing program 0 (id=4100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000b, 0x4000010, r0, 0xfffff000) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x1e, 0x0, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x11, 0x0, &(0x7f0000000040)) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000340)='e\xe7\xa5\xb1\xe7Xr2F\xc1.\xf3\xc5\x90\x03\x12>\xfd\xdb\\{W\xbb\xdf\xf2\xbb\x03o\x7f\xed\xe2\xd0YX\x13\x97\t\xbb\x95f', 0x1ee4e0c108591905, 0x0, 0x7, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000001400)=@ethtool_gfeatures}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000b, 0x4000010, r0, 0xfffff000) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_mtu(r3, 0x29, 0x1e, 0x0, 0x15) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r3, 0x11e, 0x11, 0x0, &(0x7f0000000040)) (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000340)='e\xe7\xa5\xb1\xe7Xr2F\xc1.\xf3\xc5\x90\x03\x12>\xfd\xdb\\{W\xbb\xdf\xf2\xbb\x03o\x7f\xed\xe2\xd0YX\x13\x97\t\xbb\x95f', 0x1ee4e0c108591905, 0x0, 0x7, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000001400)=@ethtool_gfeatures}) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 394.039183ms ago: executing program 3 (id=4101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x873e57d5184bcc26, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7, 0x10}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x8, 0xd3, 0x6, 0x5, 0xfffffffe]}, &(0x7f0000000080)=0x54) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x25, "cd84748b6a6d3aff71bbe4400041e8eddf685287722d484526f7c75d21dd1d3cafaba8d7f2"}, &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, 0x4) 386.874114ms ago: executing program 1 (id=4102): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket(0x40000000015, 0x805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xd8, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0xc4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x39}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xa2e718a12040d21f}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 265.282595ms ago: executing program 0 (id=4103): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x80000000000000a, 0x800, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r9, 0x301, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x40}}, 0x8000) 194.829851ms ago: executing program 3 (id=4104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f00000001c0)=[{0x94, 0x4, 0x0, 0x2}, {0x6, 0x0, 0x96, 0x10000002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x0, 0x0, {0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf9d}}}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f800000000000000ff0000000e00000091076a6e31c254c82f9219bcb356bb91af98605f466633e186d47a0063f101eda04601d8d325a0e1631905999a65642ed3af6afe210d9b7cfa132a876356a4dfdc7ee4e47c6e44e5db962c1b15f0320e2e1e946018be0e8becb61ab6f7955e408efb314308ca4e0b67e5badc83e8c08ff2a733bd98eb7c2622216b09cc4c542d2ce0d91eb86dda9b0e872ffbbbd7c4f1c01731412fdfbaa6486a7b818d70bd0b85b703f335c514f0af6d77e16648af9e5246eb12b19bef14311e2e896f6d935f7412b5cc50199ea8fbe0eb9919f0d26383efc71735e9fd75fedb5c7fdb884f575815ebe4a2350000"], 0xf8}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d40)={0x24, r8, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000018c0)={&(0x7f0000000500), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xe0, r8, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bf9ca41f6507bb85d0f0d59cea6f804883dc487f1b57c8d5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "96c3ec42123ed8a32b9cd1e75d7e579cef1a87601d02b7e3"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000814) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000180)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x1, 0x2000}}, 0x1c}}, 0x4800) close(0x3) 180.502947ms ago: executing program 1 (id=4105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000004c65b1f67ce893f6fba000a263540000000300260014000600736974300000000000000000000000001400070000000000000000000000ffff7f000001"], 0x3c}, 0x8, 0x3000000000002}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, '\x00'}}}}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r14, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00), 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x38, 0x1, 0x1, [r5, r1, r12, r0, r0, 0xffffffffffffffff, r8, r0, r5, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r8, r1, r3, r6]}}, @rights={{0x2c, 0x1, 0x1, [r3, r9, r12, r3, r4, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x4008000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000080", @ANYRES16=r16, @ANYBLOB="0100fdffffff00000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0006000000000000000c0090000800000000000000"], 0x54}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 5.068079ms ago: executing program 0 (id=4106): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x614}]}]}]}, 0x34}}, 0x40) 0s ago: executing program 0 (id=4107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x74, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x49d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x352a}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e22, 0x18f, @empty, 0xa}, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x9, 0x4, 0x6, 0x7fa, r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x2, 0x8, 0x5, 0xa, 0xf, 0x9, 0x2, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x3, 0x6, 0x6, 0x3, 0x9, 0xe4c, 0x9, 0x4, 0x1, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ond3: (slave bridge1): failed to get link speed/duplex [ 453.879386][ T8854] bond3: (slave bridge1): failed to get link speed/duplex [ 454.156090][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 454.273115][T18219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.322113][T18219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.339982][T18219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.372771][T18219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.401831][T18486] vlan2: entered allmulticast mode [ 454.406985][T18486] bond0: entered allmulticast mode [ 454.420068][T18486] bond_slave_0: entered allmulticast mode [ 454.428324][T18486] bond_slave_1: entered allmulticast mode [ 454.437109][T18219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.469292][T18219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.509847][T18219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.525871][T18219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.535427][T18497] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 454.803460][T18219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.907530][T18219] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.954809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.962050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.000616][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.007827][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.105117][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'. [ 455.229894][T18531] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3254'. [ 455.594069][ T8854] bridge_slave_1: left allmulticast mode [ 455.613897][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.643909][ T8854] bridge_slave_0: left allmulticast mode [ 455.660520][ T8854] bridge_slave_0: left promiscuous mode [ 455.674540][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.770078][ T8854] dvmrp0: left allmulticast mode [ 455.782341][ T5627] Bluetooth: hci1: command tx timeout [ 456.401325][ T8854] bond2 (unregistering): (slave geneve2): Releasing active interface [ 456.441812][ T8854] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 456.672996][ T8854] bond1 (unregistering): Released all slaves [ 456.688897][ T8854] bond2 (unregistering): Released all slaves [ 456.703642][ T8854] bond3 (unregistering): Released all slaves [ 456.722052][ T8854] bond4 (unregistering): Released all slaves [ 456.737419][ T8854] bond0 (unregistering): Released all slaves [ 456.753600][ T8854] bond5 (unregistering): (slave veth7): Releasing active interface [ 456.764653][ T8854] bond5 (unregistering): Released all slaves [ 456.785137][ T8854] bond6 (unregistering): Released all slaves [ 456.799410][ T8854] bond7 (unregistering): Released all slaves [ 456.820519][T18538] geneve1: entered promiscuous mode [ 456.937605][ T8854] hmac(sha224: left promiscuous mode [ 457.204222][ T8854] tipc: Disabling bearer [ 457.225964][ T8854] tipc: Left network mode [ 457.355769][T18576] xt_nfacct: accounting object `syz0' does not exist [ 457.363374][T18568] bond16: entered allmulticast mode [ 458.244172][ T30] audit: type=1800 audit(1777915767.201:13): pid=18602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3263" name="memory.events" dev="tmpfs" ino=3324 res=0 errno=0 [ 458.332898][T18589] vlan2: entered promiscuous mode [ 458.338042][T18589] bridge0: entered promiscuous mode [ 458.373515][T18598] netlink: 'syz.2.3261': attribute type 4 has an invalid length. [ 458.438095][T18219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.638828][T18219] veth0_vlan: entered promiscuous mode [ 458.682754][T18219] veth1_vlan: entered promiscuous mode [ 458.995184][T18619] bond17: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 459.051881][T18619] bond17 (unregistering): Released all slaves [ 459.393786][T18219] veth0_macvtap: entered promiscuous mode [ 459.427665][T18219] veth1_macvtap: entered promiscuous mode [ 460.074274][T18219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.198081][ T8854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.219265][ T8854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.253281][ T8854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.278091][ T8854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.292822][T18643] __nla_validate_parse: 3 callbacks suppressed [ 460.292839][T18643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3272'. [ 460.319551][ T8854] hsr0: left allmulticast mode [ 460.330545][ T8854] veth1_macvtap: left promiscuous mode [ 460.344472][ T8854] veth0_macvtap: left promiscuous mode [ 460.753057][ T8854] team0 (unregistering): Port device team_slave_1 removed [ 460.771876][ T8854] team0 (unregistering): Port device team_slave_0 removed [ 460.909138][ T8854] lo (unregistering): left allmulticast mode [ 460.929182][T18219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.965111][ T8862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.026976][ T8862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.057023][ T8862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.074267][ T8862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.356487][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.372294][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.479634][ T8854] IPVS: stop unused estimator thread 0... [ 461.491538][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.525026][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.602597][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 461.827888][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 461.843318][T18703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3185'. [ 461.885967][T18707] bond4: option broadcast_neighbor: invalid value (30) [ 461.894820][T18707] bond4 (unregistering): Released all slaves [ 461.935042][T18703] netlink: 'syz.3.3185': attribute type 3 has an invalid length. [ 461.943755][T18703] netlink: 'syz.3.3185': attribute type 3 has an invalid length. [ 462.163592][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3286'. [ 462.447778][T18718] tipc: Enabled bearer , priority 0 [ 462.499711][T18718] syzkaller0: MTU too low for tipc bearer [ 462.558530][T18718] tipc: Disabling bearer [ 462.598929][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3286'. [ 462.729808][T18748] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 462.845406][T16935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.860969][T16935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.863687][T18753] netlink: 'syz.2.3293': attribute type 30 has an invalid length. [ 462.879028][T16935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.889675][T16935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.906181][T16935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.686162][T18772] bridge_slave_0: left allmulticast mode [ 463.700729][T18772] bridge_slave_0: left promiscuous mode [ 463.714373][T18772] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.757737][T18772] bridge_slave_1: left allmulticast mode [ 463.783941][T18772] bridge_slave_1: left promiscuous mode [ 463.790773][T18772] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.822997][T18772] bond0: (slave bond_slave_0): Releasing backup interface [ 463.852736][T18772] bond0: (slave bond_slave_1): Releasing backup interface [ 463.889601][T18772] team0: Port device team_slave_0 removed [ 463.901462][T18772] team0: Port device team_slave_1 removed [ 463.908272][T18772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.916751][T18772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.929701][T18772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.937217][T18772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.951106][T18772] net_ratelimit: 9 callbacks suppressed [ 463.951121][T18772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.180659][T18796] netlink: 'syz.3.3300': attribute type 4 has an invalid length. [ 464.237980][T18797] netlink: 'syz.3.3300': attribute type 4 has an invalid length. [ 464.306310][T18796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3300'. [ 464.353112][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 464.553009][T18811] netlink: 'syz.0.3302': attribute type 9 has an invalid length. [ 464.569850][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 464.795638][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 464.814008][T18815] veth1_to_team: entered promiscuous mode [ 464.825907][T18815] macsec1: entered promiscuous mode [ 464.835508][T18815] macsec1: entered allmulticast mode [ 464.841270][T18815] veth1_to_team: entered allmulticast mode [ 464.855521][T18815] veth1_to_team: left allmulticast mode [ 464.862933][T18815] veth1_to_team: left promiscuous mode [ 464.914604][T18822] IPVS: Error connecting to the multicast addr [ 464.980099][T16935] Bluetooth: hci3: command tx timeout [ 465.041935][T18825] netlink: 'syz.0.3306': attribute type 39 has an invalid length. [ 465.271870][T18833] netlink: 'syz.0.3311': attribute type 21 has an invalid length. [ 465.325823][T18833] __nla_validate_parse: 64 callbacks suppressed [ 465.325842][T18833] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3311'. [ 465.555521][T18839] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.602621][T18839] bond1: (slave lo): Enslaving as an active interface with an up link [ 465.617328][T18839] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 465.736227][T18853] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3315'. [ 465.781276][T18850] tipc: Enabled bearer , priority 0 [ 465.869872][T18850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.910715][T18850] tipc: Resetting bearer [ 465.955289][T18849] tipc: Disabling bearer [ 466.346960][T18886] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3321'. [ 466.400328][T18749] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.407576][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.415356][T18749] bridge_slave_0: entered allmulticast mode [ 466.426233][T18749] bridge_slave_0: entered promiscuous mode [ 466.436278][T18749] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.443769][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.471154][T18749] bridge_slave_1: entered allmulticast mode [ 466.487696][T18749] bridge_slave_1: entered promiscuous mode [ 466.495440][T18892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3325'. [ 466.498190][T18893] IPVS: ip_vs_edit_dest(): server weight less than zero [ 466.514968][ T806] IPVS: starting estimator thread 0... [ 466.571735][T18749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.587206][T18749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.620646][T18894] IPVS: using max 30 ests per chain, 72000 per kthread [ 466.648281][T18749] team0: Port device team_slave_0 added [ 466.673529][T18749] team0: Port device team_slave_1 added [ 466.726745][T18749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.735406][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.768497][T18749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.793118][T18749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.800782][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.858916][T18749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.940478][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3330'. [ 466.956048][T18749] hsr_slave_0: entered promiscuous mode [ 466.963687][T18749] hsr_slave_1: entered promiscuous mode [ 466.970497][T18749] debugfs: 'hsr0' already exists in 'hsr' [ 466.976348][T18749] Cannot create hsr debugfs directory [ 467.060974][T16935] Bluetooth: hci3: command tx timeout [ 467.336169][T18749] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.350024][T18749] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.452920][T18930] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3335'. [ 467.486045][T18749] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.512158][T18749] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.592962][T18749] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.618660][T18749] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.674260][T18749] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.710608][T18749] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.807511][T18950] syzkaller0: entered promiscuous mode [ 467.830054][T18950] syzkaller0: entered allmulticast mode [ 468.074496][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 468.104730][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 468.288810][T18749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.312593][T18749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.329868][T18749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.357684][T18749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.379448][T18749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.397757][T18749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.413976][T18749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.437443][T18749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.491460][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 468.890287][T18749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.956501][T18749] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.995559][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.002824][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.043980][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.051208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.139957][T16935] Bluetooth: hci3: command tx timeout [ 469.747506][T19013] sctp: [Deprecated]: syz.2.3350 (pid 19013) Use of int in max_burst socket option deprecated. [ 469.747506][T19013] Use struct sctp_assoc_value instead [ 470.003151][T19015] netlink: 'syz.4.3355': attribute type 4 has an invalid length. [ 470.097262][T19015] netlink: 'syz.4.3355': attribute type 4 has an invalid length. [ 470.162077][T18749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.343463][T18749] veth0_vlan: entered promiscuous mode [ 470.432561][T18749] veth1_vlan: entered promiscuous mode [ 470.536471][T18749] veth0_macvtap: entered promiscuous mode [ 470.551342][T19050] __nla_validate_parse: 133 callbacks suppressed [ 470.551361][T19050] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3363'. [ 470.588935][T18749] veth1_macvtap: entered promiscuous mode [ 470.606145][T19050] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 470.622164][T18749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.650854][T19054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3364'. [ 470.705223][T18749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.777248][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.795303][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.833252][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.848093][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.895653][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3368'. [ 471.172697][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.182137][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.220894][T16935] Bluetooth: hci3: command tx timeout [ 471.223021][T19090] pim6reg: entered allmulticast mode [ 471.973002][T19080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.045494][T19091] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3374'. [ 472.062790][T19091] nbd: must specify at least one socket [ 472.073701][ T8857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.089240][ T8857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.435515][T19130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3386'. [ 472.787860][T19152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3395'. [ 472.808801][T19152] netlink: 'syz.2.3395': attribute type 7 has an invalid length. [ 472.840964][T19152] netlink: 'syz.2.3395': attribute type 8 has an invalid length. [ 472.870466][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 472.923114][T19152] syz_tun: entered promiscuous mode [ 472.945685][T19152] gretap0: entered promiscuous mode [ 472.990107][T19152] erspan0: entered promiscuous mode [ 473.014666][T19152] debugfs: 'hsr1' already exists in 'hsr' [ 473.025903][T19152] Cannot create hsr debugfs directory [ 473.135344][T19164] syzkaller0: entered promiscuous mode [ 473.163225][T19164] syzkaller0: entered allmulticast mode [ 473.245144][T19175] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3403'. [ 473.603048][T19207] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 473.631039][T19207] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 473.762381][T19219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 473.767121][T19207] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 473.790436][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3411'. [ 473.904832][T19207] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 474.056930][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'. [ 474.206087][T19243] xt_l2tp: v2 doesn't support IP mode [ 474.777296][T19234] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 474.805176][T19234] bond1 (unregistering): Released all slaves [ 475.021452][T19246] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 475.807210][T19322] __nla_validate_parse: 3 callbacks suppressed [ 475.807229][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'. [ 475.883492][ T12] bridge_slave_1: left promiscuous mode [ 475.887756][T19307] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 475.899360][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.924768][ T12] bridge_slave_0: left allmulticast mode [ 475.947245][ T12] bridge_slave_0: left promiscuous mode [ 475.964529][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.029031][ T12] pimreg: left allmulticast mode [ 476.050932][ T12] dvmrp6: left allmulticast mode [ 476.072807][ T12] dvmrp0: left allmulticast mode [ 476.338955][T16935] Bluetooth: hci0: command 0x040f tx timeout [ 476.483035][ T12] gretap0 (unregistering): left promiscuous mode [ 476.576435][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 477.016073][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.027077][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.041825][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 477.054222][ T12] bond0 (unregistering): Released all slaves [ 477.072821][ T12] bond1 (unregistering): Released all slaves [ 477.094215][ T12] bond2 (unregistering): (slave lo): Releasing backup interface [ 477.104194][ T12] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 477.117444][ T12] bond2 (unregistering): Released all slaves [ 477.147175][ T12] bond3 (unregistering): Released all slaves [ 477.163037][ T12] bond4 (unregistering): Released all slaves [ 477.194591][ T12] bond5 (unregistering): Released all slaves [ 477.214692][ T12] bond6 (unregistering): Released all slaves [ 477.249510][ T12] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 477.258973][ T12] wireguard0: left promiscuous mode [ 477.265816][ T12] bond7 (unregistering): (slave wireguard1): Releasing backup interface [ 477.281465][ T12] bond7 (unregistering): Released all slaves [ 477.304238][ T12] bond8 (unregistering): Released all slaves [ 477.324878][ T12] bond9 (unregistering): Released all slaves [ 477.353330][ T12] bond11 (unregistering): Released all slaves [ 477.372423][ T12] bond10 (unregistering): Released all slaves [ 477.399010][ T12] bond12 (unregistering): Released all slaves [ 477.423128][T19323] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 477.511518][T19357] ip6gretap2: entered promiscuous mode [ 477.585476][ T12] hmac(sha224: left promiscuous mode [ 477.720280][ T12] tipc: Left network mode [ 478.020536][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 478.122716][T19378] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.426792][T19395] batadv_slave_0: entered promiscuous mode [ 478.546765][T19394] batadv_slave_0: left promiscuous mode [ 478.582820][T19402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3457'. [ 478.818163][T19408] tipc: New replicast peer: 255.255.255.255 [ 478.827309][T19408] tipc: Enabled bearer , priority 10 [ 479.479553][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 479.512884][T19425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3463'. [ 479.667026][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 479.702769][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 479.727068][T19437] netlink: 'syz.2.3465': attribute type 6 has an invalid length. [ 479.808656][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 479.840153][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 479.863388][T19437] netlink: 'syz.2.3465': attribute type 6 has an invalid length. [ 480.819476][T19466] netlink: 'syz.3.3475': attribute type 6 has an invalid length. [ 480.845857][T19466] netlink: 'syz.3.3475': attribute type 7 has an invalid length. [ 480.881081][T19466] netlink: 'syz.3.3475': attribute type 8 has an invalid length. [ 480.911576][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3475'. [ 480.958027][ T12] veth1_to_team: left promiscuous mode [ 482.835473][ T12] pim6reg (unregistering): left allmulticast mode [ 483.071863][ T997] smc: removing ib device syz2 [ 483.118100][ T12] team0 (unregistering): Port device team_slave_1 removed [ 483.132994][ T12] team0 (unregistering): Port device team_slave_0 removed [ 483.217789][ T12] team0 (unregistering): Port device dummy0 removed [ 483.262202][T19470] ip6gre1: entered promiscuous mode [ 483.268590][T19470] ip6gre1: entered allmulticast mode [ 483.286065][T19473] netlink: 'syz.3.3478': attribute type 29 has an invalid length. [ 483.308131][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 483.335709][ T997] smbdirect: ib_dev[syz2] removed [ 483.861687][T19499] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3485'. [ 485.295983][T19528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.516295][T19550] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3499'. [ 485.537038][T19550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3499'. [ 485.555585][T19550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3499'. [ 485.669390][T19556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3501'. [ 485.691564][T19528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.001256][T19528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.252661][T19528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.781678][ T8862] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.953042][ T64] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.175232][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.246914][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.425715][T19607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.432771][T19612] netlink: 'syz.3.3515': attribute type 7 has an invalid length. [ 487.471808][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 487.488124][T19615] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 487.510347][T19617] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3516'. [ 487.663582][ T12] IPVS: stop unused estimator thread 0... [ 487.882034][T19623] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3518'. [ 487.959290][T19634] FAULT_INJECTION: forcing a failure. [ 487.959290][T19634] name failslab, interval 1, probability 0, space 0, times 0 [ 487.986247][T19634] CPU: 0 UID: 0 PID: 19634 Comm: syz.3.3520 Not tainted syzkaller #0 PREEMPT(full) [ 487.986277][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.986289][T19634] Call Trace: [ 487.986296][T19634] [ 487.986304][T19634] dump_stack_lvl+0xe8/0x150 [ 487.986331][T19634] should_fail_ex+0x412/0x560 [ 487.986361][T19634] should_failslab+0xa8/0x100 [ 487.986389][T19634] __kmalloc_cache_noprof+0x88/0x660 [ 487.986412][T19634] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 487.986435][T19634] ? sctp_add_bind_addr+0x8c/0x370 [ 487.986462][T19634] sctp_add_bind_addr+0x8c/0x370 [ 487.986492][T19634] sctp_copy_local_addr_list+0x314/0x4f0 [ 487.986519][T19634] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 487.986541][T19634] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 487.986565][T19634] ? sctp_v6_is_any+0x64/0x80 [ 487.986589][T19634] ? sctp_copy_one_addr+0x93/0x360 [ 487.986613][T19634] sctp_bind_addr_copy+0xb3/0x3c0 [ 487.986636][T19634] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 487.986659][T19634] sctp_connect_new_asoc+0x2ff/0x6b0 [ 487.986689][T19634] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 487.986721][T19634] ? __local_bh_enable_ip+0xd0/0x130 [ 487.986739][T19634] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 487.986763][T19634] ? security_sctp_bind_connect+0x7e/0x2c0 [ 487.986786][T19634] sctp_sendmsg+0x1528/0x2c10 [ 487.986827][T19634] ? __pfx_sctp_sendmsg+0x10/0x10 [ 487.986855][T19634] ? aa_sk_perm+0x6d5/0x900 [ 487.986881][T19634] ? __might_fault+0xaf/0x130 [ 487.986910][T19634] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.986934][T19634] ? sock_rps_record_flow+0x19/0x350 [ 487.986959][T19634] ? __pfx_inet_sendmsg+0x10/0x10 [ 487.986983][T19634] ? inet_sendmsg+0x2f4/0x370 [ 487.987008][T19634] ? __pfx_inet_sendmsg+0x10/0x10 [ 487.987032][T19634] __sys_sendto+0x5de/0x710 [ 487.987057][T19634] ? __pfx___sys_sendto+0x10/0x10 [ 487.987075][T19634] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 487.987108][T19634] ? __fget_files+0x3a0/0x420 [ 487.987141][T19634] ? ksys_write+0x242/0x270 [ 487.987167][T19634] ? __pfx_ksys_write+0x10/0x10 [ 487.987195][T19634] __x64_sys_sendto+0xde/0x100 [ 487.987217][T19634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.987236][T19634] do_syscall_64+0x15f/0xf80 [ 487.987256][T19634] ? trace_irq_disable+0x3b/0x140 [ 487.987281][T19634] ? clear_bhb_loop+0x40/0x90 [ 487.987303][T19634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.987321][T19634] RIP: 0033:0x7fc5f299cdd9 [ 487.987339][T19634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.987355][T19634] RSP: 002b:00007fc5f37e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.987375][T19634] RAX: ffffffffffffffda RBX: 00007fc5f2c15fa0 RCX: 00007fc5f299cdd9 [ 487.987388][T19634] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 487.987399][T19634] RBP: 00007fc5f37e4090 R08: 0000200000000100 R09: 000000000000001c [ 487.987411][T19634] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 487.987423][T19634] R13: 00007fc5f2c16038 R14: 00007fc5f2c15fa0 R15: 00007ffddaa17698 [ 487.987452][T19634] [ 488.805555][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 488.896248][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'. [ 488.997141][T19656] team0: Port device team_slave_0 removed [ 489.419607][T19672] sctp: [Deprecated]: syz.4.3529 (pid 19672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.419607][T19672] Use struct sctp_sack_info instead [ 489.473218][T19675] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 489.481314][T19675] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3531'. [ 489.490901][T19675] veth1_virt_wifi: entered promiscuous mode [ 489.497239][T19675] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 489.510437][T19675] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 489.518329][T19675] veth1_virt_wifi: entered allmulticast mode [ 489.525944][T19678] FAULT_INJECTION: forcing a failure. [ 489.525944][T19678] name failslab, interval 1, probability 0, space 0, times 0 [ 489.527565][T19675] veth1_virt_wifi: left allmulticast mode [ 489.558516][T19678] CPU: 1 UID: 0 PID: 19678 Comm: syz.1.3532 Not tainted syzkaller #0 PREEMPT(full) [ 489.558541][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.558551][T19678] Call Trace: [ 489.558559][T19678] [ 489.558566][T19678] dump_stack_lvl+0xe8/0x150 [ 489.558590][T19678] should_fail_ex+0x412/0x560 [ 489.558618][T19678] should_failslab+0xa8/0x100 [ 489.558647][T19678] __kmalloc_cache_noprof+0x88/0x660 [ 489.558667][T19678] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 489.558688][T19678] ? sctp_add_bind_addr+0x8c/0x370 [ 489.558711][T19678] sctp_add_bind_addr+0x8c/0x370 [ 489.558740][T19678] sctp_copy_local_addr_list+0x314/0x4f0 [ 489.558766][T19678] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 489.558788][T19678] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 489.558812][T19678] ? sctp_v6_is_any+0x64/0x80 [ 489.558835][T19678] ? sctp_copy_one_addr+0x93/0x360 [ 489.558860][T19678] sctp_bind_addr_copy+0xb3/0x3c0 [ 489.558882][T19678] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 489.558904][T19678] sctp_connect_new_asoc+0x2ff/0x6b0 [ 489.558933][T19678] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 489.558966][T19678] ? __local_bh_enable_ip+0xd0/0x130 [ 489.558984][T19678] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 489.559009][T19678] ? security_sctp_bind_connect+0x7e/0x2c0 [ 489.559032][T19678] sctp_sendmsg+0x1528/0x2c10 [ 489.559073][T19678] ? __pfx_sctp_sendmsg+0x10/0x10 [ 489.559102][T19678] ? aa_sk_perm+0x6d5/0x900 [ 489.559122][T19678] ? __might_fault+0xaf/0x130 [ 489.559151][T19678] ? __pfx_aa_sk_perm+0x10/0x10 [ 489.559175][T19678] ? sock_rps_record_flow+0x19/0x350 [ 489.559199][T19678] ? __pfx_inet_sendmsg+0x10/0x10 [ 489.559224][T19678] ? inet_sendmsg+0x2f4/0x370 [ 489.559247][T19678] ? __pfx_inet_sendmsg+0x10/0x10 [ 489.559269][T19678] __sys_sendto+0x5de/0x710 [ 489.559290][T19678] ? __pfx___sys_sendto+0x10/0x10 [ 489.559307][T19678] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 489.559341][T19678] ? __fget_files+0x3a0/0x420 [ 489.559370][T19678] ? ksys_write+0x242/0x270 [ 489.559394][T19678] ? __pfx_ksys_write+0x10/0x10 [ 489.559421][T19678] __x64_sys_sendto+0xde/0x100 [ 489.559441][T19678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.559460][T19678] do_syscall_64+0x15f/0xf80 [ 489.559487][T19678] ? trace_irq_disable+0x3b/0x140 [ 489.559512][T19678] ? clear_bhb_loop+0x40/0x90 [ 489.559535][T19678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.559552][T19678] RIP: 0033:0x7f462d19cdd9 [ 489.559569][T19678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.559583][T19678] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.559601][T19678] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 489.559613][T19678] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 489.559624][T19678] RBP: 00007f462e09f090 R08: 0000200000000100 R09: 000000000000001c [ 489.559636][T19678] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 489.559647][T19678] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 489.559678][T19678] [ 490.224724][T19687] netlink: 'syz.2.3535': attribute type 10 has an invalid length. [ 490.244573][T19687] team0: Port device dummy0 added [ 490.401652][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3540'. [ 490.472178][T19707] netlink: 'syz.2.3540': attribute type 1 has an invalid length. [ 490.492963][T19707] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3540'. [ 490.543857][T19707] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3540'. [ 490.556212][T19707] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3540'. [ 491.836589][T19742] IPv6: sit1: Disabled Multicast RS [ 491.946880][T19753] FAULT_INJECTION: forcing a failure. [ 491.946880][T19753] name failslab, interval 1, probability 0, space 0, times 0 [ 491.978044][T19753] CPU: 0 UID: 0 PID: 19753 Comm: syz.4.3548 Not tainted syzkaller #0 PREEMPT(full) [ 491.978069][T19753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.978079][T19753] Call Trace: [ 491.978087][T19753] [ 491.978094][T19753] dump_stack_lvl+0xe8/0x150 [ 491.978118][T19753] should_fail_ex+0x412/0x560 [ 491.978144][T19753] should_failslab+0xa8/0x100 [ 491.978171][T19753] __kmalloc_cache_noprof+0x88/0x660 [ 491.978203][T19753] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 491.978226][T19753] ? sctp_add_bind_addr+0x8c/0x370 [ 491.978252][T19753] sctp_add_bind_addr+0x8c/0x370 [ 491.978279][T19753] sctp_copy_local_addr_list+0x314/0x4f0 [ 491.978305][T19753] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 491.978326][T19753] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 491.978351][T19753] ? sctp_v6_is_any+0x64/0x80 [ 491.978375][T19753] ? sctp_copy_one_addr+0x93/0x360 [ 491.978401][T19753] sctp_bind_addr_copy+0xb3/0x3c0 [ 491.978422][T19753] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 491.978443][T19753] sctp_connect_new_asoc+0x2ff/0x6b0 [ 491.978471][T19753] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 491.978501][T19753] ? __local_bh_enable_ip+0xd0/0x130 [ 491.978518][T19753] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 491.978542][T19753] ? security_sctp_bind_connect+0x7e/0x2c0 [ 491.978565][T19753] sctp_sendmsg+0x1528/0x2c10 [ 491.978605][T19753] ? __pfx_sctp_sendmsg+0x10/0x10 [ 491.978633][T19753] ? aa_sk_perm+0x6d5/0x900 [ 491.978653][T19753] ? __might_fault+0xaf/0x130 [ 491.978681][T19753] ? __pfx_aa_sk_perm+0x10/0x10 [ 491.978706][T19753] ? sock_rps_record_flow+0x19/0x350 [ 491.978729][T19753] ? __pfx_inet_sendmsg+0x10/0x10 [ 491.978753][T19753] ? inet_sendmsg+0x2f4/0x370 [ 491.978776][T19753] ? __pfx_inet_sendmsg+0x10/0x10 [ 491.978800][T19753] __sys_sendto+0x5de/0x710 [ 491.978825][T19753] ? __pfx___sys_sendto+0x10/0x10 [ 491.978842][T19753] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 491.978878][T19753] ? __fget_files+0x3a0/0x420 [ 491.978910][T19753] ? ksys_write+0x242/0x270 [ 491.978936][T19753] ? __pfx_ksys_write+0x10/0x10 [ 491.978964][T19753] __x64_sys_sendto+0xde/0x100 [ 491.978984][T19753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.979002][T19753] do_syscall_64+0x15f/0xf80 [ 491.979022][T19753] ? trace_irq_disable+0x3b/0x140 [ 491.979046][T19753] ? clear_bhb_loop+0x40/0x90 [ 491.979068][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.979084][T19753] RIP: 0033:0x7fdc06b9cdd9 [ 491.979101][T19753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.979115][T19753] RSP: 002b:00007fdc07a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 491.979135][T19753] RAX: ffffffffffffffda RBX: 00007fdc06e15fa0 RCX: 00007fdc06b9cdd9 [ 491.979148][T19753] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 491.979159][T19753] RBP: 00007fdc07a85090 R08: 0000200000000100 R09: 000000000000001c [ 491.979170][T19753] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 491.979181][T19753] R13: 00007fdc06e16038 R14: 00007fdc06e15fa0 R15: 00007ffe921bebf8 [ 491.979219][T19753] [ 492.958955][T19786] __nla_validate_parse: 4 callbacks suppressed [ 492.958975][T19786] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3555'. [ 493.089814][T19789] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3554'. [ 496.088797][T19791] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 496.113265][T19791] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3556'. [ 496.267735][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 496.362913][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 496.462206][ T8862] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.462293][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 496.476144][ T8862] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.536730][ T8862] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.606938][ T8862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.677700][T19818] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 497.018381][T19843] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3571'. [ 497.165901][T19849] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 497.246613][T19856] netlink: 'syz.3.3577': attribute type 83 has an invalid length. [ 497.311397][T19849] veth5: entered allmulticast mode [ 497.799033][T19889] netlink: 'syz.0.3586': attribute type 8 has an invalid length. [ 498.202533][T19919] netlink: 'syz.2.3594': attribute type 21 has an invalid length. [ 498.255505][T19919] netlink: 'syz.2.3594': attribute type 1 has an invalid length. [ 498.292619][T19919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3594'. [ 498.319428][T19923] batman_adv: batadv0: Interface deactivated: dummy0 [ 498.326239][T19923] batman_adv: batadv0: Removing interface: dummy0 [ 498.354926][T19923] bridge_slave_0: left allmulticast mode [ 498.383063][T19923] bridge_slave_0: left promiscuous mode [ 498.407445][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.458986][T19923] bridge_slave_1: left allmulticast mode [ 498.484619][T19923] bridge_slave_1: left promiscuous mode [ 498.507777][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.593034][T19923] bond0: (slave bond_slave_0): Releasing backup interface [ 498.610221][T19923] bond_slave_0: left allmulticast mode [ 498.622319][T19943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3597'. [ 498.641682][T19944] FAULT_INJECTION: forcing a failure. [ 498.641682][T19944] name failslab, interval 1, probability 0, space 0, times 0 [ 498.678801][T19944] CPU: 0 UID: 0 PID: 19944 Comm: syz.2.3598 Not tainted syzkaller #0 PREEMPT(full) [ 498.678826][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.678837][T19944] Call Trace: [ 498.678844][T19944] [ 498.678852][T19944] dump_stack_lvl+0xe8/0x150 [ 498.678877][T19944] should_fail_ex+0x412/0x560 [ 498.678899][T19944] should_failslab+0xa8/0x100 [ 498.678927][T19944] __kmalloc_cache_noprof+0x88/0x660 [ 498.678949][T19944] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 498.678972][T19944] ? sctp_add_bind_addr+0x8c/0x370 [ 498.678997][T19944] sctp_add_bind_addr+0x8c/0x370 [ 498.679023][T19944] sctp_copy_local_addr_list+0x314/0x4f0 [ 498.679050][T19944] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 498.679065][T19944] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 498.679078][T19944] ? sctp_v6_is_any+0x64/0x80 [ 498.679091][T19944] ? sctp_copy_one_addr+0x93/0x360 [ 498.679104][T19944] sctp_bind_addr_copy+0xb3/0x3c0 [ 498.679116][T19944] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 498.679129][T19944] sctp_connect_new_asoc+0x2ff/0x6b0 [ 498.679145][T19944] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 498.679163][T19944] ? __local_bh_enable_ip+0xd0/0x130 [ 498.679173][T19944] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 498.679187][T19944] ? security_sctp_bind_connect+0x7e/0x2c0 [ 498.679199][T19944] sctp_sendmsg+0x1528/0x2c10 [ 498.679221][T19944] ? __pfx_sctp_sendmsg+0x10/0x10 [ 498.679236][T19944] ? aa_sk_perm+0x6d5/0x900 [ 498.679247][T19944] ? __might_fault+0xaf/0x130 [ 498.679263][T19944] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.679276][T19944] ? sock_rps_record_flow+0x19/0x350 [ 498.679290][T19944] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.679305][T19944] ? inet_sendmsg+0x2f4/0x370 [ 498.679318][T19944] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.679331][T19944] __sys_sendto+0x5de/0x710 [ 498.679345][T19944] ? __pfx___sys_sendto+0x10/0x10 [ 498.679355][T19944] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 498.679373][T19944] ? __fget_files+0x3a0/0x420 [ 498.679391][T19944] ? ksys_write+0x242/0x270 [ 498.679406][T19944] ? __pfx_ksys_write+0x10/0x10 [ 498.679422][T19944] __x64_sys_sendto+0xde/0x100 [ 498.679433][T19944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.679444][T19944] do_syscall_64+0x15f/0xf80 [ 498.679455][T19944] ? trace_irq_disable+0x3b/0x140 [ 498.679470][T19944] ? clear_bhb_loop+0x40/0x90 [ 498.679482][T19944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.679494][T19944] RIP: 0033:0x7f9c7ef9cdd9 [ 498.679505][T19944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.679513][T19944] RSP: 002b:00007f9c7d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.679525][T19944] RAX: ffffffffffffffda RBX: 00007f9c7f215fa0 RCX: 00007f9c7ef9cdd9 [ 498.679532][T19944] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 498.679538][T19944] RBP: 00007f9c7d1f6090 R08: 0000200000000100 R09: 000000000000001c [ 498.679545][T19944] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 498.679550][T19944] R13: 00007f9c7f216038 R14: 00007f9c7f215fa0 R15: 00007ffdab785be8 [ 498.679566][T19944] [ 498.680263][T19923] bond0: (slave bond_slave_1): Releasing backup interface [ 499.004370][T19950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3599'. [ 499.014483][T19950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3599'. [ 499.015902][T19923] bond_slave_1: left allmulticast mode [ 499.046252][T19923] team0: Port device team_slave_1 removed [ 499.054094][T19923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.062938][T19923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.071547][T19923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.079423][T19923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.091557][T19923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.600506][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 499.790268][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 499.829484][T19972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.841719][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 499.853726][T19988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3607'. [ 499.887718][T19972] bond3 (unregistering): Released all slaves [ 499.967328][T19985] bond4 (unregistering): Released all slaves [ 500.123256][T19991] FAULT_INJECTION: forcing a failure. [ 500.123256][T19991] name failslab, interval 1, probability 0, space 0, times 0 [ 500.156944][T19991] CPU: 0 UID: 0 PID: 19991 Comm: syz.4.3609 Not tainted syzkaller #0 PREEMPT(full) [ 500.156969][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.156979][T19991] Call Trace: [ 500.156985][T19991] [ 500.156992][T19991] dump_stack_lvl+0xe8/0x150 [ 500.157017][T19991] should_fail_ex+0x412/0x560 [ 500.157044][T19991] should_failslab+0xa8/0x100 [ 500.157073][T19991] __kmalloc_cache_noprof+0x88/0x660 [ 500.157095][T19991] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 500.157119][T19991] ? sctp_add_bind_addr+0x8c/0x370 [ 500.157145][T19991] sctp_add_bind_addr+0x8c/0x370 [ 500.157171][T19991] sctp_copy_local_addr_list+0x314/0x4f0 [ 500.157197][T19991] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 500.157220][T19991] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 500.157244][T19991] ? sctp_v6_is_any+0x64/0x80 [ 500.157268][T19991] ? sctp_copy_one_addr+0x93/0x360 [ 500.157294][T19991] sctp_bind_addr_copy+0xb3/0x3c0 [ 500.157316][T19991] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 500.157338][T19991] sctp_connect_new_asoc+0x2ff/0x6b0 [ 500.157367][T19991] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 500.157400][T19991] ? __local_bh_enable_ip+0xd0/0x130 [ 500.157417][T19991] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 500.157442][T19991] ? security_sctp_bind_connect+0x7e/0x2c0 [ 500.157464][T19991] sctp_sendmsg+0x1528/0x2c10 [ 500.157501][T19991] ? __pfx_sctp_sendmsg+0x10/0x10 [ 500.157528][T19991] ? aa_sk_perm+0x6d5/0x900 [ 500.157549][T19991] ? __might_fault+0xaf/0x130 [ 500.157577][T19991] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.157608][T19991] ? sock_rps_record_flow+0x19/0x350 [ 500.157632][T19991] ? __pfx_inet_sendmsg+0x10/0x10 [ 500.157657][T19991] ? inet_sendmsg+0x2f4/0x370 [ 500.157681][T19991] ? __pfx_inet_sendmsg+0x10/0x10 [ 500.157706][T19991] __sys_sendto+0x5de/0x710 [ 500.157731][T19991] ? __pfx___sys_sendto+0x10/0x10 [ 500.157750][T19991] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 500.157785][T19991] ? __fget_files+0x3a0/0x420 [ 500.157815][T19991] ? ksys_write+0x242/0x270 [ 500.157840][T19991] ? __pfx_ksys_write+0x10/0x10 [ 500.157867][T19991] __x64_sys_sendto+0xde/0x100 [ 500.157889][T19991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.157908][T19991] do_syscall_64+0x15f/0xf80 [ 500.157928][T19991] ? trace_irq_disable+0x3b/0x140 [ 500.157951][T19991] ? clear_bhb_loop+0x40/0x90 [ 500.157973][T19991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.157989][T19991] RIP: 0033:0x7fdc06b9cdd9 [ 500.158006][T19991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.158020][T19991] RSP: 002b:00007fdc07a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 500.158038][T19991] RAX: ffffffffffffffda RBX: 00007fdc06e15fa0 RCX: 00007fdc06b9cdd9 [ 500.158050][T19991] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 500.158061][T19991] RBP: 00007fdc07a85090 R08: 0000200000000100 R09: 000000000000001c [ 500.158073][T19991] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 500.158084][T19991] R13: 00007fdc06e16038 R14: 00007fdc06e15fa0 R15: 00007ffe921bebf8 [ 500.158112][T19991] [ 500.258286][T20001] netlink: 'syz.3.3610': attribute type 2 has an invalid length. [ 500.352944][T20004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3612'. [ 500.528660][T20004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3612'. [ 500.746795][T20016] x_tables: ip_tables: osf match: only valid for protocol 6 [ 500.817099][T20024] tipc: Started in network mode [ 500.830100][T20024] tipc: Node identity ea0c222d2368, cluster identity 4711 [ 500.840396][T20024] tipc: Enabled bearer , priority 0 [ 500.853175][T20024] syzkaller0: entered promiscuous mode [ 500.863285][T20024] syzkaller0: entered allmulticast mode [ 500.920333][T20024] tipc: Resetting bearer [ 500.955831][T20022] tipc: Resetting bearer [ 500.991479][T20022] tipc: Disabling bearer [ 501.010697][T20030] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 501.465379][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.730217][T20061] FAULT_INJECTION: forcing a failure. [ 501.730217][T20061] name failslab, interval 1, probability 0, space 0, times 0 [ 501.768188][T20061] CPU: 1 UID: 0 PID: 20061 Comm: syz.1.3625 Not tainted syzkaller #0 PREEMPT(full) [ 501.768213][T20061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.768224][T20061] Call Trace: [ 501.768232][T20061] [ 501.768240][T20061] dump_stack_lvl+0xe8/0x150 [ 501.768265][T20061] should_fail_ex+0x412/0x560 [ 501.768292][T20061] should_failslab+0xa8/0x100 [ 501.768320][T20061] __kmalloc_cache_noprof+0x88/0x660 [ 501.768342][T20061] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 501.768364][T20061] ? sctp_add_bind_addr+0x8c/0x370 [ 501.768393][T20061] sctp_add_bind_addr+0x8c/0x370 [ 501.768415][T20061] sctp_copy_local_addr_list+0x314/0x4f0 [ 501.768439][T20061] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 501.768459][T20061] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 501.768480][T20061] ? sctp_v6_is_any+0x64/0x80 [ 501.768502][T20061] ? sctp_copy_one_addr+0x93/0x360 [ 501.768524][T20061] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.768546][T20061] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.768567][T20061] sctp_connect_new_asoc+0x2ff/0x6b0 [ 501.768593][T20061] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 501.768625][T20061] ? __local_bh_enable_ip+0xd0/0x130 [ 501.768642][T20061] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 501.768665][T20061] ? security_sctp_bind_connect+0x7e/0x2c0 [ 501.768687][T20061] sctp_sendmsg+0x1528/0x2c10 [ 501.768727][T20061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 501.768755][T20061] ? aa_sk_perm+0x6d5/0x900 [ 501.768775][T20061] ? __might_fault+0xaf/0x130 [ 501.768803][T20061] ? __pfx_aa_sk_perm+0x10/0x10 [ 501.768827][T20061] ? sock_rps_record_flow+0x19/0x350 [ 501.768850][T20061] ? __pfx_inet_sendmsg+0x10/0x10 [ 501.768874][T20061] ? inet_sendmsg+0x2f4/0x370 [ 501.768898][T20061] ? __pfx_inet_sendmsg+0x10/0x10 [ 501.768922][T20061] __sys_sendto+0x5de/0x710 [ 501.768947][T20061] ? __pfx___sys_sendto+0x10/0x10 [ 501.768964][T20061] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 501.769000][T20061] ? __fget_files+0x3a0/0x420 [ 501.769031][T20061] ? ksys_write+0x242/0x270 [ 501.769057][T20061] ? __pfx_ksys_write+0x10/0x10 [ 501.769086][T20061] __x64_sys_sendto+0xde/0x100 [ 501.769107][T20061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.769126][T20061] do_syscall_64+0x15f/0xf80 [ 501.769146][T20061] ? trace_irq_disable+0x3b/0x140 [ 501.769170][T20061] ? clear_bhb_loop+0x40/0x90 [ 501.769203][T20061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.769220][T20061] RIP: 0033:0x7f462d19cdd9 [ 501.769237][T20061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.769251][T20061] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 501.769269][T20061] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 501.769281][T20061] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 501.769292][T20061] RBP: 00007f462e09f090 R08: 0000200000000100 R09: 000000000000001c [ 501.769303][T20061] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 501.769314][T20061] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 501.769345][T20061] [ 502.306013][T20076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 502.427375][T20077] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 502.852108][T20102] tipc: Started in network mode [ 502.860949][T20102] tipc: Node identity 321afc7f8bf7, cluster identity 4711 [ 502.868288][T20102] tipc: Enabled bearer , priority 0 [ 502.880762][T20098] syzkaller0: entered promiscuous mode [ 502.886302][T20098] syzkaller0: entered allmulticast mode [ 502.894033][T20104] FAULT_INJECTION: forcing a failure. [ 502.894033][T20104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.910279][T20104] CPU: 1 UID: 0 PID: 20104 Comm: syz.3.3633 Not tainted syzkaller #0 PREEMPT(full) [ 502.910303][T20104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.910314][T20104] Call Trace: [ 502.910321][T20104] [ 502.910328][T20104] dump_stack_lvl+0xe8/0x150 [ 502.910354][T20104] should_fail_ex+0x412/0x560 [ 502.910382][T20104] _copy_from_user+0x2d/0xb0 [ 502.910408][T20104] ethtool_set_features+0xbc/0x300 [ 502.910432][T20104] ? __pfx_ethtool_set_features+0x10/0x10 [ 502.910457][T20104] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.910478][T20104] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.910503][T20104] dev_ethtool+0xfa5/0x1ae0 [ 502.910541][T20104] ? __pfx_dev_ethtool+0x10/0x10 [ 502.910564][T20104] ? dev_load+0x21/0x1f0 [ 502.910600][T20104] ? dev_load+0x21/0x1f0 [ 502.910621][T20104] dev_ioctl+0x392/0x1150 [ 502.910644][T20104] sock_do_ioctl+0x23e/0x320 [ 502.910672][T20104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 502.910700][T20104] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 502.910740][T20104] sock_ioctl+0x5c6/0x7f0 [ 502.910768][T20104] ? __pfx_sock_ioctl+0x10/0x10 [ 502.910794][T20104] ? __fget_files+0x2a/0x420 [ 502.910815][T20104] ? __fget_files+0x3a0/0x420 [ 502.910834][T20104] ? __fget_files+0x2a/0x420 [ 502.910858][T20104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 502.910884][T20104] ? __pfx_sock_ioctl+0x10/0x10 [ 502.910909][T20104] __se_sys_ioctl+0xfc/0x170 [ 502.910934][T20104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.910954][T20104] do_syscall_64+0x15f/0xf80 [ 502.910974][T20104] ? trace_irq_disable+0x3b/0x140 [ 502.910999][T20104] ? clear_bhb_loop+0x40/0x90 [ 502.911022][T20104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.911040][T20104] RIP: 0033:0x7fc5f299cdd9 [ 502.911057][T20104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.911072][T20104] RSP: 002b:00007fc5f37e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.911091][T20104] RAX: ffffffffffffffda RBX: 00007fc5f2c15fa0 RCX: 00007fc5f299cdd9 [ 502.911109][T20104] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 502.911121][T20104] RBP: 00007fc5f37e4090 R08: 0000000000000000 R09: 0000000000000000 [ 502.911132][T20104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.911143][T20104] R13: 00007fc5f2c16038 R14: 00007fc5f2c15fa0 R15: 00007ffddaa17698 [ 502.911173][T20104] [ 502.915642][T20098] tipc: Resetting bearer [ 503.185726][T20097] tipc: Resetting bearer [ 503.233050][T20097] tipc: Disabling bearer [ 503.424358][T20115] __nla_validate_parse: 6 callbacks suppressed [ 503.424371][T20115] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3636'. [ 503.610090][T20123] FAULT_INJECTION: forcing a failure. [ 503.610090][T20123] name failslab, interval 1, probability 0, space 0, times 0 [ 503.627700][T20125] syzkaller0: entered promiscuous mode [ 503.633648][T20125] syzkaller0: entered allmulticast mode [ 503.647907][T20123] CPU: 1 UID: 0 PID: 20123 Comm: syz.3.3639 Not tainted syzkaller #0 PREEMPT(full) [ 503.647932][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.647942][T20123] Call Trace: [ 503.647950][T20123] [ 503.647977][T20123] dump_stack_lvl+0xe8/0x150 [ 503.648004][T20123] should_fail_ex+0x412/0x560 [ 503.648032][T20123] should_failslab+0xa8/0x100 [ 503.648060][T20123] __kmalloc_cache_noprof+0x88/0x660 [ 503.648083][T20123] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 503.648106][T20123] ? sctp_v6_cmp_addr+0x15/0xd0 [ 503.648126][T20123] ? sctp_add_bind_addr+0x8c/0x370 [ 503.648153][T20123] sctp_add_bind_addr+0x8c/0x370 [ 503.648178][T20123] sctp_copy_local_addr_list+0x314/0x4f0 [ 503.648204][T20123] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 503.648227][T20123] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 503.648250][T20123] ? sctp_v6_is_any+0x64/0x80 [ 503.648279][T20123] ? sctp_copy_one_addr+0x93/0x360 [ 503.648303][T20123] sctp_bind_addr_copy+0xb3/0x3c0 [ 503.648325][T20123] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 503.648348][T20123] sctp_connect_new_asoc+0x2ff/0x6b0 [ 503.648378][T20123] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 503.648410][T20123] ? __local_bh_enable_ip+0xd0/0x130 [ 503.648426][T20123] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 503.648449][T20123] ? security_sctp_bind_connect+0x7e/0x2c0 [ 503.648470][T20123] sctp_sendmsg+0x1528/0x2c10 [ 503.648508][T20123] ? __pfx_sctp_sendmsg+0x10/0x10 [ 503.648534][T20123] ? aa_sk_perm+0x6d5/0x900 [ 503.648554][T20123] ? __might_fault+0xaf/0x130 [ 503.648582][T20123] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.648605][T20123] ? sock_rps_record_flow+0x19/0x350 [ 503.648629][T20123] ? __pfx_inet_sendmsg+0x10/0x10 [ 503.648652][T20123] ? inet_sendmsg+0x2f4/0x370 [ 503.648676][T20123] ? __pfx_inet_sendmsg+0x10/0x10 [ 503.648700][T20123] __sys_sendto+0x5de/0x710 [ 503.648723][T20123] ? __pfx___sys_sendto+0x10/0x10 [ 503.648742][T20123] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 503.648776][T20123] ? __fget_files+0x3a0/0x420 [ 503.648808][T20123] ? ksys_write+0x242/0x270 [ 503.648835][T20123] ? __pfx_ksys_write+0x10/0x10 [ 503.648864][T20123] __x64_sys_sendto+0xde/0x100 [ 503.648886][T20123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.648906][T20123] do_syscall_64+0x15f/0xf80 [ 503.648924][T20123] ? trace_irq_disable+0x3b/0x140 [ 503.648950][T20123] ? clear_bhb_loop+0x40/0x90 [ 503.648973][T20123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.648990][T20123] RIP: 0033:0x7fc5f299cdd9 [ 503.649008][T20123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.649022][T20123] RSP: 002b:00007fc5f37e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 503.649040][T20123] RAX: ffffffffffffffda RBX: 00007fc5f2c15fa0 RCX: 00007fc5f299cdd9 [ 503.649053][T20123] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 503.649064][T20123] RBP: 00007fc5f37e4090 R08: 0000200000000100 R09: 000000000000001c [ 503.649075][T20123] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 503.649086][T20123] R13: 00007fc5f2c16038 R14: 00007fc5f2c15fa0 R15: 00007ffddaa17698 [ 503.649118][T20123] [ 504.122826][T20147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3644'. [ 504.178290][T20154] tap0: tun_chr_ioctl cmd 1074812118 [ 504.348792][T20157] FAULT_INJECTION: forcing a failure. [ 504.348792][T20157] name failslab, interval 1, probability 0, space 0, times 0 [ 504.368211][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 504.378803][T20162] netlink: 580 bytes leftover after parsing attributes in process `syz.0.3648'. [ 504.384028][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 504.392305][T20164] tipc: Enabling of bearer rejected, failed to enable media [ 504.421626][T20157] CPU: 1 UID: 0 PID: 20157 Comm: syz.1.3646 Not tainted syzkaller #0 PREEMPT(full) [ 504.421652][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.421664][T20157] Call Trace: [ 504.421671][T20157] [ 504.421678][T20157] dump_stack_lvl+0xe8/0x150 [ 504.421705][T20157] should_fail_ex+0x412/0x560 [ 504.421732][T20157] should_failslab+0xa8/0x100 [ 504.421760][T20157] __kmalloc_cache_noprof+0x88/0x660 [ 504.421783][T20157] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.421804][T20157] ? __request_module+0x2d0/0x630 [ 504.421830][T20157] __request_module+0x2d0/0x630 [ 504.421850][T20157] ? __pfx___request_module+0x10/0x10 [ 504.421869][T20157] ? kasan_quarantine_put+0xbb/0x1f0 [ 504.421893][T20157] ? __pfx___request_module+0x10/0x10 [ 504.421916][T20157] ? apparmor_capable+0x126/0x170 [ 504.421950][T20157] ? dev_load+0x21/0x1f0 [ 504.421972][T20157] dev_ioctl+0x384/0x1150 [ 504.421995][T20157] sock_do_ioctl+0x23e/0x320 [ 504.422024][T20157] ? __pfx_sock_do_ioctl+0x10/0x10 [ 504.422048][T20157] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 504.422085][T20157] sock_ioctl+0x5c6/0x7f0 [ 504.422111][T20157] ? __pfx_sock_ioctl+0x10/0x10 [ 504.422137][T20157] ? __fget_files+0x2a/0x420 [ 504.422163][T20157] ? __fget_files+0x3a0/0x420 [ 504.422182][T20157] ? __fget_files+0x2a/0x420 [ 504.422202][T20157] ? bpf_lsm_file_ioctl+0x9/0x20 [ 504.422225][T20157] ? __pfx_sock_ioctl+0x10/0x10 [ 504.422246][T20157] __se_sys_ioctl+0xfc/0x170 [ 504.422270][T20157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.422289][T20157] do_syscall_64+0x15f/0xf80 [ 504.422308][T20157] ? trace_irq_disable+0x3b/0x140 [ 504.422331][T20157] ? clear_bhb_loop+0x40/0x90 [ 504.422353][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.422371][T20157] RIP: 0033:0x7f462d19cdd9 [ 504.422389][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.422402][T20157] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.422420][T20157] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 504.422431][T20157] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 504.422442][T20157] RBP: 00007f462e09f090 R08: 0000000000000000 R09: 0000000000000000 [ 504.422453][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.422463][T20157] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 504.422492][T20157] [ 504.707474][T20165] IPVS: sh: FWM 3 0x00000003 - no destination available [ 505.194698][T20189] syzkaller1: entered promiscuous mode [ 505.212994][T20189] syzkaller1: entered allmulticast mode [ 505.395326][T20204] tipc: Enabled bearer , priority 0 [ 505.414242][T20194] syzkaller0: entered promiscuous mode [ 505.447431][T20194] syzkaller0: entered allmulticast mode [ 505.500688][T20194] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3656'. [ 505.555641][T20194] tipc: Resetting bearer [ 505.585538][T20191] tipc: Resetting bearer [ 505.595314][T20207] netlink: 'syz.2.3658': attribute type 4 has an invalid length. [ 505.650159][T20191] tipc: Disabling bearer [ 505.693142][T20209] lo: entered allmulticast mode [ 505.708961][T20212] FAULT_INJECTION: forcing a failure. [ 505.708961][T20212] name failslab, interval 1, probability 0, space 0, times 0 [ 505.742136][T20212] CPU: 1 UID: 0 PID: 20212 Comm: syz.1.3660 Not tainted syzkaller #0 PREEMPT(full) [ 505.742163][T20212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.742174][T20212] Call Trace: [ 505.742182][T20212] [ 505.742190][T20212] dump_stack_lvl+0xe8/0x150 [ 505.742220][T20212] should_fail_ex+0x412/0x560 [ 505.742248][T20212] should_failslab+0xa8/0x100 [ 505.742276][T20212] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 505.742302][T20212] ? __kasan_kmalloc+0x93/0xb0 [ 505.742326][T20212] ? __request_module+0x2ec/0x630 [ 505.742346][T20212] ? __kmalloc_cache_noprof+0x31c/0x660 [ 505.742373][T20212] kstrdup+0x42/0x100 [ 505.742392][T20212] __request_module+0x2ec/0x630 [ 505.742413][T20212] ? __pfx___request_module+0x10/0x10 [ 505.742432][T20212] ? kasan_quarantine_put+0xbb/0x1f0 [ 505.742457][T20212] ? __pfx___request_module+0x10/0x10 [ 505.742481][T20212] ? apparmor_capable+0x126/0x170 [ 505.742516][T20212] ? dev_load+0x21/0x1f0 [ 505.742539][T20212] dev_ioctl+0x384/0x1150 [ 505.742562][T20212] sock_do_ioctl+0x23e/0x320 [ 505.742591][T20212] ? __pfx_sock_do_ioctl+0x10/0x10 [ 505.742614][T20212] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 505.742652][T20212] sock_ioctl+0x5c6/0x7f0 [ 505.742680][T20212] ? __pfx_sock_ioctl+0x10/0x10 [ 505.742704][T20212] ? __fget_files+0x2a/0x420 [ 505.742723][T20212] ? __fget_files+0x3a0/0x420 [ 505.742742][T20212] ? __fget_files+0x2a/0x420 [ 505.742771][T20212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 505.742795][T20212] ? __pfx_sock_ioctl+0x10/0x10 [ 505.742818][T20212] __se_sys_ioctl+0xfc/0x170 [ 505.742841][T20212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.742860][T20212] do_syscall_64+0x15f/0xf80 [ 505.742879][T20212] ? trace_irq_disable+0x3b/0x140 [ 505.742904][T20212] ? clear_bhb_loop+0x40/0x90 [ 505.742924][T20212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.742942][T20212] RIP: 0033:0x7f462d19cdd9 [ 505.742958][T20212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.742973][T20212] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.742992][T20212] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 505.743005][T20212] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 505.743015][T20212] RBP: 00007f462e09f090 R08: 0000000000000000 R09: 0000000000000000 [ 505.743025][T20212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.743035][T20212] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 505.743063][T20212] [ 506.194141][T20231] syzkaller0: entered promiscuous mode [ 506.199763][T20231] syzkaller0: entered allmulticast mode [ 506.473618][T20248] netlink: 'syz.1.3667': attribute type 3 has an invalid length. [ 506.488700][T20250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3669'. [ 506.676423][ T30] audit: type=1800 audit(1777915815.631:14): pid=20256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3672" name="memory.events" dev="tmpfs" ino=307 res=0 errno=0 [ 506.679573][T20260] netlink: 'syz.4.3675': attribute type 62 has an invalid length. [ 506.719232][T20259] tipc: Enabled bearer , priority 0 [ 506.726916][T20259] syzkaller0: entered promiscuous mode [ 506.738066][T20259] syzkaller0: entered allmulticast mode [ 506.773678][T20259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3673'. [ 506.794952][T20259] tipc: Resetting bearer [ 506.808731][T20257] tipc: Resetting bearer [ 506.849342][T20257] tipc: Disabling bearer [ 506.965474][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 506.966119][T20277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.027176][T20279] openvswitch: netlink: Key type 142 is out of range max 32 [ 507.089244][T20283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3678'. [ 507.291030][T20290] xt_bpf: check failed: parse error [ 507.415926][T20301] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 507.435095][T20294] veth3: entered promiscuous mode [ 507.440815][T20298] tipc: Started in network mode [ 507.448034][T20298] tipc: Node identity 1ee44d3f2fe6, cluster identity 4711 [ 507.462989][T20298] tipc: Enabled bearer , priority 0 [ 507.494862][T20309] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 507.510179][T20301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.521054][T20295] tipc: Disabling bearer [ 507.662819][T20306] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.703153][T20306] bond1: (slave batadv1): making interface the new active one [ 507.712981][T20306] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 507.764482][T20314] tipc: Enabled bearer , priority 0 [ 507.773457][T20314] syzkaller0: entered promiscuous mode [ 507.795585][T20314] syzkaller0: entered allmulticast mode [ 507.826027][T20314] tipc: Resetting bearer [ 507.835999][T20313] tipc: Resetting bearer [ 507.863545][T20313] tipc: Disabling bearer [ 507.880889][T20325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.596127][T20375] netlink: 'syz.1.3705': attribute type 1 has an invalid length. [ 509.073540][T20403] netlink: 'syz.2.3713': attribute type 21 has an invalid length. [ 509.163700][T20404] __nla_validate_parse: 7 callbacks suppressed [ 509.163719][T20404] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3712'. [ 509.206801][T20401] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.319641][T20401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.335590][T20401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.496154][T20410] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3716'. [ 509.505955][T20410] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 509.654726][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3717'. [ 509.743627][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.768887][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.805181][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.835678][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.873708][T20428] syzkaller0: entered promiscuous mode [ 509.890595][T20428] syzkaller0: entered allmulticast mode [ 510.071863][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 510.850119][T20472] FAULT_INJECTION: forcing a failure. [ 510.850119][T20472] name failslab, interval 1, probability 0, space 0, times 0 [ 510.884421][T20472] CPU: 1 UID: 0 PID: 20472 Comm: syz.1.3731 Not tainted syzkaller #0 PREEMPT(full) [ 510.884446][T20472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.884456][T20472] Call Trace: [ 510.884463][T20472] [ 510.884471][T20472] dump_stack_lvl+0xe8/0x150 [ 510.884496][T20472] should_fail_ex+0x412/0x560 [ 510.884523][T20472] should_failslab+0xa8/0x100 [ 510.884549][T20472] __kmalloc_cache_noprof+0x88/0x660 [ 510.884573][T20472] ? dev_ethtool+0x132/0x1ae0 [ 510.884603][T20472] dev_ethtool+0x132/0x1ae0 [ 510.884630][T20472] ? __request_module+0x415/0x630 [ 510.884651][T20472] ? __pfx___request_module+0x10/0x10 [ 510.884668][T20472] ? kasan_quarantine_put+0xbb/0x1f0 [ 510.884692][T20472] ? __pfx_dev_ethtool+0x10/0x10 [ 510.884716][T20472] ? apparmor_capable+0x126/0x170 [ 510.884751][T20472] ? dev_load+0x21/0x1f0 [ 510.884771][T20472] dev_ioctl+0x392/0x1150 [ 510.884795][T20472] sock_do_ioctl+0x23e/0x320 [ 510.884824][T20472] ? __pfx_sock_do_ioctl+0x10/0x10 [ 510.884846][T20472] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 510.884884][T20472] sock_ioctl+0x5c6/0x7f0 [ 510.884911][T20472] ? __pfx_sock_ioctl+0x10/0x10 [ 510.884936][T20472] ? __fget_files+0x2a/0x420 [ 510.884956][T20472] ? __fget_files+0x3a0/0x420 [ 510.884975][T20472] ? __fget_files+0x2a/0x420 [ 510.884997][T20472] ? bpf_lsm_file_ioctl+0x9/0x20 [ 510.885022][T20472] ? __pfx_sock_ioctl+0x10/0x10 [ 510.885046][T20472] __se_sys_ioctl+0xfc/0x170 [ 510.885071][T20472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.885090][T20472] do_syscall_64+0x15f/0xf80 [ 510.885110][T20472] ? trace_irq_disable+0x3b/0x140 [ 510.885134][T20472] ? clear_bhb_loop+0x40/0x90 [ 510.885154][T20472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.885171][T20472] RIP: 0033:0x7f462d19cdd9 [ 510.885187][T20472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.885201][T20472] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.885220][T20472] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 510.885243][T20472] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 510.885253][T20472] RBP: 00007f462e09f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.885265][T20472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.885275][T20472] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 510.885303][T20472] [ 511.233908][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3737'. [ 511.339801][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3738'. [ 511.429169][T20505] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3740'. [ 511.496609][T20506] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3740'. [ 511.721243][T20508] syzkaller0: entered promiscuous mode [ 511.737028][T20508] syzkaller0: entered allmulticast mode [ 511.787923][T20508] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3741'. [ 511.965668][T20525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3746'. [ 512.027203][T20520] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 512.305931][T20529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.375806][T20534] FAULT_INJECTION: forcing a failure. [ 512.375806][T20534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.421324][T20534] CPU: 1 UID: 0 PID: 20534 Comm: syz.1.3749 Not tainted syzkaller #0 PREEMPT(full) [ 512.421351][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.421362][T20534] Call Trace: [ 512.421369][T20534] [ 512.421376][T20534] dump_stack_lvl+0xe8/0x150 [ 512.421402][T20534] should_fail_ex+0x412/0x560 [ 512.421430][T20534] _copy_to_user+0x31/0xb0 [ 512.421458][T20534] simple_read_from_buffer+0xe1/0x170 [ 512.421486][T20534] proc_fail_nth_read+0x1bb/0x230 [ 512.421511][T20534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.421537][T20534] ? rw_verify_area+0x2a6/0x4d0 [ 512.421560][T20534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.421584][T20534] vfs_read+0x20c/0xa70 [ 512.421612][T20534] ? __pfx___mutex_lock+0x10/0x10 [ 512.421635][T20534] ? __pfx_vfs_read+0x10/0x10 [ 512.421661][T20534] ? __fget_files+0x2a/0x420 [ 512.421686][T20534] ? __fget_files+0x3a0/0x420 [ 512.421704][T20534] ? __fget_files+0x2a/0x420 [ 512.421730][T20534] ksys_read+0x150/0x270 [ 512.421755][T20534] ? __pfx_ksys_read+0x10/0x10 [ 512.421783][T20534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.421802][T20534] do_syscall_64+0x15f/0xf80 [ 512.421821][T20534] ? trace_irq_disable+0x3b/0x140 [ 512.421844][T20534] ? clear_bhb_loop+0x40/0x90 [ 512.421865][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.421882][T20534] RIP: 0033:0x7f462d15d60e [ 512.421899][T20534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.421914][T20534] RSP: 002b:00007f462e09efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.421933][T20534] RAX: ffffffffffffffda RBX: 00007f462e09f6c0 RCX: 00007f462d15d60e [ 512.421946][T20534] RDX: 000000000000000f RSI: 00007f462e09f0a0 RDI: 0000000000000004 [ 512.421957][T20534] RBP: 00007f462e09f090 R08: 0000000000000000 R09: 0000000000000000 [ 512.421968][T20534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.421978][T20534] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 512.422009][T20534] [ 512.736612][T20529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.778792][T20550] syzkaller0: entered promiscuous mode [ 512.784329][T20550] syzkaller0: entered allmulticast mode [ 512.818075][T20565] tipc: New replicast peer: 255.255.255.255 [ 512.844389][T20565] tipc: Enabled bearer , priority 10 [ 512.866461][T20562] : renamed from bond0 (while UP) [ 512.983322][T20529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.130226][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.138772][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.207944][T20578] netlink: 'syz.0.3760': attribute type 21 has an invalid length. [ 513.326481][T20572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.341890][T20572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.547287][T20529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.582316][ T64] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.600312][ T64] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.617548][ T64] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.637839][ T64] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.787234][T20594] netlink: 'syz.4.3762': attribute type 7 has an invalid length. [ 513.812221][ T64] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.862378][ T64] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.890515][T20596] erspan1: entered allmulticast mode [ 513.992970][ T7180] tipc: Node number set to 822234431 [ 514.046202][ T997] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.077812][ T997] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.254782][T20614] xt_hashlimit: size too large, truncated to 1048576 [ 514.625762][T20627] __nla_validate_parse: 7 callbacks suppressed [ 514.626731][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 514.685675][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 514.766505][T20636] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.3774'. [ 514.798705][T20632] ip6gre1: entered promiscuous mode [ 514.948900][T20646] netlink: 'syz.4.3778': attribute type 1 has an invalid length. [ 514.956930][T20646] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3778'. [ 515.158944][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 515.187526][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3780'. [ 515.208365][T20657] netlink: 'syz.4.3780': attribute type 14 has an invalid length. [ 515.256733][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 515.418099][T20666] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3784'. [ 515.439175][T20666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3784'. [ 515.458703][T20666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3784'. [ 515.601107][T20676] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 516.433868][T20725] bond4: ARP target 9.0.0.0 is already present [ 516.454841][T20725] bond4: option arp_ip_target: invalid value (9) [ 516.470019][T20725] bond4 (unregistering): Released all slaves [ 516.564556][T20736] tipc: Enabled bearer , priority 0 [ 516.596404][T20736] syzkaller0: entered promiscuous mode [ 516.610180][T20736] syzkaller0: entered allmulticast mode [ 516.744517][T20736] tipc: Resetting bearer [ 516.829719][T20732] tipc: Resetting bearer [ 516.991537][T20732] tipc: Disabling bearer [ 517.136659][T20746] netlink: 'syz.3.3803': attribute type 16 has an invalid length. [ 517.145086][T20746] netlink: 'syz.3.3803': attribute type 17 has an invalid length. [ 517.190718][T20756] netlink: 'syz.3.3803': attribute type 3 has an invalid length. [ 517.214854][T20756] netlink: 'syz.3.3803': attribute type 2 has an invalid length. [ 517.236907][T20756] netlink: 'syz.3.3803': attribute type 2 has an invalid length. [ 517.305004][T20746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.328370][T20746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.343055][T20746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.356564][T20746] veth3: left promiscuous mode [ 517.365084][T20746] 8021q: adding VLAN 0 to HW filter on device eth0 [ 517.375601][T20746] 8021q: adding VLAN 0 to HW filter on device eth1 [ 517.389405][T20746] 8021q: adding VLAN 0 to HW filter on device eth2 [ 517.449622][T20746] 8021q: adding VLAN 0 to HW filter on device eth3 [ 517.649701][T20760] team0: Mode changed to "roundrobin" [ 517.665456][T20760] team0: Mode changed to "broadcast" [ 518.007353][T20581] Set syz1 is full, maxelem 65536 reached [ 518.133548][T20786] netlink: 'syz.0.3812': attribute type 1 has an invalid length. [ 518.187766][T20789] bond4 (unregistering): Released all slaves [ 518.315922][T20805] tipc: Enabled bearer , priority 0 [ 518.327881][T20792] syzkaller0: entered promiscuous mode [ 518.351214][T20792] syzkaller0: entered allmulticast mode [ 518.452003][T20792] tipc: Resetting bearer [ 518.463143][T20791] tipc: Resetting bearer [ 518.498213][T20791] tipc: Disabling bearer [ 518.816178][T20844] netlink: 'syz.2.3829': attribute type 13 has an invalid length. [ 518.843126][T20844] netlink: 'syz.2.3829': attribute type 17 has an invalid length. [ 518.865606][T20844] netlink: 'syz.2.3829': attribute type 27 has an invalid length. [ 519.146792][T20844] bond1: left promiscuous mode [ 519.154869][T20844] ip6tnl2: left allmulticast mode [ 519.164939][T20844] vlan2: left promiscuous mode [ 519.172879][T20844] bridge0: left promiscuous mode [ 519.183397][T20844] ip6gre1: left promiscuous mode [ 519.189763][T20844] ip6gre1: left allmulticast mode [ 519.199948][T20844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.227264][T20844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.241021][T20844] veth5: left allmulticast mode [ 519.341264][T20851] syzkaller0: entered allmulticast mode [ 519.472001][T20876] netlink: 'syz.3.3836': attribute type 1 has an invalid length. [ 519.555394][T20881] netlink: 'syz.2.3837': attribute type 39 has an invalid length. [ 519.614088][T20885] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.656343][T20885] bond4: (slave bond5): making interface the new active one [ 519.711776][T20885] bond4: (slave bond5): Enslaving as an active interface with an up link [ 519.872150][T20881] syz_tun (unregistering): left promiscuous mode [ 519.887767][T20883] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 519.957106][T20903] FAULT_INJECTION: forcing a failure. [ 519.957106][T20903] name failslab, interval 1, probability 0, space 0, times 0 [ 519.970745][T20903] CPU: 1 UID: 0 PID: 20903 Comm: syz.4.3844 Not tainted syzkaller #0 PREEMPT(full) [ 519.970769][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.970780][T20903] Call Trace: [ 519.970787][T20903] [ 519.970795][T20903] dump_stack_lvl+0xe8/0x150 [ 519.970821][T20903] should_fail_ex+0x412/0x560 [ 519.970849][T20903] should_failslab+0xa8/0x100 [ 519.970878][T20903] __kmalloc_cache_noprof+0x88/0x660 [ 519.970902][T20903] ? sctp_v6_cmp_addr+0x15/0xd0 [ 519.970924][T20903] ? sctp_add_bind_addr+0x8c/0x370 [ 519.970950][T20903] sctp_add_bind_addr+0x8c/0x370 [ 519.970977][T20903] sctp_copy_local_addr_list+0x314/0x4f0 [ 519.971002][T20903] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 519.971024][T20903] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 519.971049][T20903] ? sctp_v6_is_any+0x64/0x80 [ 519.971072][T20903] ? sctp_copy_one_addr+0x93/0x360 [ 519.971097][T20903] sctp_bind_addr_copy+0xb3/0x3c0 [ 519.971119][T20903] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 519.971143][T20903] sctp_connect_new_asoc+0x2ff/0x6b0 [ 519.971169][T20903] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 519.971201][T20903] ? __local_bh_enable_ip+0xd0/0x130 [ 519.971219][T20903] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 519.971243][T20903] ? security_sctp_bind_connect+0x7e/0x2c0 [ 519.971265][T20903] sctp_sendmsg+0x1528/0x2c10 [ 519.971317][T20903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.971345][T20903] ? aa_sk_perm+0x6d5/0x900 [ 519.971364][T20903] ? __might_fault+0xaf/0x130 [ 519.971393][T20903] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.971418][T20903] ? sock_rps_record_flow+0x19/0x350 [ 519.971440][T20903] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.971463][T20903] ? inet_sendmsg+0x2f4/0x370 [ 519.971484][T20903] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.971508][T20903] __sys_sendto+0x5de/0x710 [ 519.971530][T20903] ? __pfx___sys_sendto+0x10/0x10 [ 519.971548][T20903] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 519.971584][T20903] ? __fget_files+0x3a0/0x420 [ 519.971616][T20903] ? ksys_write+0x242/0x270 [ 519.971642][T20903] ? __pfx_ksys_write+0x10/0x10 [ 519.971671][T20903] __x64_sys_sendto+0xde/0x100 [ 519.971693][T20903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.971712][T20903] do_syscall_64+0x15f/0xf80 [ 519.971732][T20903] ? trace_irq_disable+0x3b/0x140 [ 519.971757][T20903] ? clear_bhb_loop+0x40/0x90 [ 519.971780][T20903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.971797][T20903] RIP: 0033:0x7fdc06b9cdd9 [ 519.971815][T20903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.971829][T20903] RSP: 002b:00007fdc07a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.971848][T20903] RAX: ffffffffffffffda RBX: 00007fdc06e15fa0 RCX: 00007fdc06b9cdd9 [ 519.971861][T20903] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 519.971872][T20903] RBP: 00007fdc07a85090 R08: 0000200000000100 R09: 000000000000001c [ 519.971883][T20903] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 519.971895][T20903] R13: 00007fdc06e16038 R14: 00007fdc06e15fa0 R15: 00007ffe921bebf8 [ 519.971926][T20903] [ 520.303456][T20907] __nla_validate_parse: 11 callbacks suppressed [ 520.303483][T20907] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3846'. [ 520.536169][T20917] ip6gretap0: entered promiscuous mode [ 520.544064][T20917] macsec0: entered promiscuous mode [ 520.550682][T20917] macsec0: entered allmulticast mode [ 520.556935][T20917] ip6gretap0: entered allmulticast mode [ 520.598307][T20917] ip6gretap0: left allmulticast mode [ 520.614557][T20917] ip6gretap0: left promiscuous mode [ 520.776388][T20937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3853'. [ 520.824086][T20939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.863635][T20939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.886331][T20939] netlink: 'syz.0.3854': attribute type 2 has an invalid length. [ 520.907516][T20939] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 520.920048][T20939] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3854'. [ 520.946802][T20948] netlink: 'syz.1.3857': attribute type 1 has an invalid length. [ 521.016134][T20953] sctp: [Deprecated]: syz.1.3858 (pid 20953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.016134][T20953] Use struct sctp_sack_info instead [ 521.024286][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 521.072008][T20955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.114825][T20955] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 521.138822][ T8854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.147955][ T8854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.162846][ T8854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.206256][ T8854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.521063][T20971] smc: net device wlan0 applied user defined pnetid SYZ0 [ 521.557884][T20971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3864'. [ 521.739684][T20984] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 521.783425][T20984] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 521.806204][T20985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3867'. [ 521.878819][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 521.924295][T20990] netlink: 'syz.4.3869': attribute type 15 has an invalid length. [ 522.238476][T21011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 522.452310][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 522.578849][T21037] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3882'. [ 523.057467][T21064] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 523.076804][T21062] xt_nfacct: accounting object `syz0' does not exist [ 523.095755][T21064] ip6tnl1: entered allmulticast mode [ 523.110380][ T8862] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.122680][T21064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.022366][T16935] Bluetooth: hci5: command 0x0406 tx timeout [ 524.135873][T21080] team0: Port device dummy0 added [ 524.144344][T21083] veth0: entered promiscuous mode [ 524.161643][T21090] bond0: entered promiscuous mode [ 524.365748][T21118] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.405883][T21108] syzkaller0: entered promiscuous mode [ 524.424578][T21108] syzkaller0: entered allmulticast mode [ 524.436591][T21076] bond0: left promiscuous mode [ 524.445511][T21076] veth0: left promiscuous mode [ 524.659419][T21138] validate_nla: 3 callbacks suppressed [ 524.659436][T21138] netlink: 'syz.2.3905': attribute type 4 has an invalid length. [ 524.764404][T21139] netlink: 'syz.2.3905': attribute type 4 has an invalid length. [ 526.620848][T21126] nicvf0: tun_chr_ioctl cmd 2148553947 [ 526.794194][T21144] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 526.804672][T21142] syzkaller0: entered promiscuous mode [ 526.827735][T21142] syzkaller0: entered allmulticast mode [ 527.005975][T21161] geneve3: entered promiscuous mode [ 527.026721][T21161] __nla_validate_parse: 8 callbacks suppressed [ 527.026740][T21161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3912'. [ 527.078381][T21167] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 527.084658][T21169] netlink: 'syz.4.3912': attribute type 1 has an invalid length. [ 527.138606][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.160031][T21169] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3912'. [ 527.224687][T21169] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3912'. [ 527.240073][T21169] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3912'. [ 527.336719][T21181] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 527.371971][T21181] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 527.501408][T21193] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.3920'. [ 527.531597][T21198] FAULT_INJECTION: forcing a failure. [ 527.531597][T21198] name failslab, interval 1, probability 0, space 0, times 0 [ 527.542007][T21193] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3920'. [ 527.561409][T21198] CPU: 0 UID: 0 PID: 21198 Comm: syz.1.3923 Not tainted syzkaller #0 PREEMPT(full) [ 527.561434][T21198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.561445][T21198] Call Trace: [ 527.561452][T21198] [ 527.561460][T21198] dump_stack_lvl+0xe8/0x150 [ 527.561486][T21198] should_fail_ex+0x412/0x560 [ 527.561514][T21198] should_failslab+0xa8/0x100 [ 527.561547][T21198] __kmalloc_cache_noprof+0x88/0x660 [ 527.561571][T21198] ? sctp_v6_cmp_addr+0x15/0xd0 [ 527.561593][T21198] ? sctp_add_bind_addr+0x8c/0x370 [ 527.561620][T21198] sctp_add_bind_addr+0x8c/0x370 [ 527.561647][T21198] sctp_copy_local_addr_list+0x314/0x4f0 [ 527.561672][T21198] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 527.561695][T21198] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 527.561719][T21198] ? sctp_v6_is_any+0x64/0x80 [ 527.561743][T21198] ? sctp_copy_one_addr+0x93/0x360 [ 527.561769][T21198] sctp_bind_addr_copy+0xb3/0x3c0 [ 527.561791][T21198] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 527.561821][T21198] sctp_connect_new_asoc+0x2ff/0x6b0 [ 527.561850][T21198] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 527.561883][T21198] ? __local_bh_enable_ip+0xd0/0x130 [ 527.561900][T21198] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 527.561924][T21198] ? security_sctp_bind_connect+0x7e/0x2c0 [ 527.561946][T21198] sctp_sendmsg+0x1528/0x2c10 [ 527.561985][T21198] ? __pfx_sctp_sendmsg+0x10/0x10 [ 527.562014][T21198] ? aa_sk_perm+0x6d5/0x900 [ 527.562035][T21198] ? __might_fault+0xaf/0x130 [ 527.562062][T21198] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.562087][T21198] ? sock_rps_record_flow+0x19/0x350 [ 527.562110][T21198] ? __pfx_inet_sendmsg+0x10/0x10 [ 527.562136][T21198] ? inet_sendmsg+0x2f4/0x370 [ 527.562159][T21198] ? __pfx_inet_sendmsg+0x10/0x10 [ 527.562183][T21198] __sys_sendto+0x5de/0x710 [ 527.562208][T21198] ? __pfx___sys_sendto+0x10/0x10 [ 527.562226][T21198] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 527.562260][T21198] ? __fget_files+0x3a0/0x420 [ 527.562292][T21198] ? ksys_write+0x242/0x270 [ 527.562318][T21198] ? __pfx_ksys_write+0x10/0x10 [ 527.562348][T21198] __x64_sys_sendto+0xde/0x100 [ 527.562369][T21198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.562389][T21198] do_syscall_64+0x15f/0xf80 [ 527.562408][T21198] ? trace_irq_disable+0x3b/0x140 [ 527.562433][T21198] ? clear_bhb_loop+0x40/0x90 [ 527.562455][T21198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.562473][T21198] RIP: 0033:0x7f462d19cdd9 [ 527.562490][T21198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.562504][T21198] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 527.562524][T21198] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 527.562536][T21198] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 527.562547][T21198] RBP: 00007f462e09f090 R08: 0000200000000100 R09: 000000000000001c [ 527.562559][T21198] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 527.562569][T21198] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 527.562598][T21198] [ 527.589655][T21193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3920'. [ 527.897716][T21193] netlink: 'syz.4.3920': attribute type 3 has an invalid length. [ 527.905827][T21193] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3920'. [ 528.106550][T21220] openvswitch: netlink: IP tunnel TTL not specified. [ 528.265380][T21215] veth1_virt_wifi: left promiscuous mode [ 528.308307][T21215] geneve1: left promiscuous mode [ 528.314802][T21215] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 528.395197][T21215] vlan2: left allmulticast mode [ 528.403731][T21215] bond0: left allmulticast mode [ 528.419225][T21215] ip6gretap2: left promiscuous mode [ 528.536706][ T5748] syz1: Port: 1 Link DOWN [ 528.550923][ T8854] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.559576][T21243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3930'. [ 528.568925][ T8854] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.583040][ T8854] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.592352][ T8854] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.625744][ T8854] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.647913][ T8854] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.671270][ T8854] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.687412][ T8854] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.710051][T21225] tipc: Enabled bearer , priority 0 [ 528.830877][T21234] syzkaller0: entered promiscuous mode [ 528.844348][T21234] syzkaller0: entered allmulticast mode [ 528.872865][T21234] tipc: Resetting bearer [ 528.933414][T21219] tipc: Resetting bearer [ 529.323572][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'. [ 531.804656][T21219] tipc: Disabling bearer [ 531.830887][T21279] smc: net device hsr0 applied user defined pnetid SYZ2 [ 531.934132][T21293] FAULT_INJECTION: forcing a failure. [ 531.934132][T21293] name failslab, interval 1, probability 0, space 0, times 0 [ 531.955078][T21293] CPU: 1 UID: 0 PID: 21293 Comm: syz.0.3938 Not tainted syzkaller #0 PREEMPT(full) [ 531.955103][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.955113][T21293] Call Trace: [ 531.955121][T21293] [ 531.955129][T21293] dump_stack_lvl+0xe8/0x150 [ 531.955156][T21293] should_fail_ex+0x412/0x560 [ 531.955183][T21293] should_failslab+0xa8/0x100 [ 531.955213][T21293] __kmalloc_cache_noprof+0x88/0x660 [ 531.955237][T21293] ? sctp_v6_cmp_addr+0x15/0xd0 [ 531.955259][T21293] ? sctp_add_bind_addr+0x8c/0x370 [ 531.955286][T21293] sctp_add_bind_addr+0x8c/0x370 [ 531.955312][T21293] sctp_copy_local_addr_list+0x314/0x4f0 [ 531.955338][T21293] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 531.955359][T21293] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 531.955383][T21293] ? sctp_v6_is_any+0x64/0x80 [ 531.955406][T21293] ? sctp_copy_one_addr+0x93/0x360 [ 531.955431][T21293] sctp_bind_addr_copy+0xb3/0x3c0 [ 531.955453][T21293] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 531.955476][T21293] sctp_connect_new_asoc+0x2ff/0x6b0 [ 531.955503][T21293] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 531.955532][T21293] ? __local_bh_enable_ip+0xd0/0x130 [ 531.955548][T21293] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 531.955573][T21293] ? security_sctp_bind_connect+0x7e/0x2c0 [ 531.955595][T21293] sctp_sendmsg+0x1528/0x2c10 [ 531.955633][T21293] ? __pfx_sctp_sendmsg+0x10/0x10 [ 531.955662][T21293] ? aa_sk_perm+0x6d5/0x900 [ 531.955682][T21293] ? __might_fault+0xaf/0x130 [ 531.955711][T21293] ? __pfx_aa_sk_perm+0x10/0x10 [ 531.955735][T21293] ? sock_rps_record_flow+0x19/0x350 [ 531.955759][T21293] ? __pfx_inet_sendmsg+0x10/0x10 [ 531.955784][T21293] ? inet_sendmsg+0x2f4/0x370 [ 531.955808][T21293] ? __pfx_inet_sendmsg+0x10/0x10 [ 531.955833][T21293] __sys_sendto+0x5de/0x710 [ 531.955857][T21293] ? __pfx___sys_sendto+0x10/0x10 [ 531.955874][T21293] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 531.955906][T21293] ? __fget_files+0x3a0/0x420 [ 531.955936][T21293] ? ksys_write+0x242/0x270 [ 531.955963][T21293] ? __pfx_ksys_write+0x10/0x10 [ 531.955992][T21293] __x64_sys_sendto+0xde/0x100 [ 531.956013][T21293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.956031][T21293] do_syscall_64+0x15f/0xf80 [ 531.956057][T21293] ? trace_irq_disable+0x3b/0x140 [ 531.956081][T21293] ? clear_bhb_loop+0x40/0x90 [ 531.956101][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.956119][T21293] RIP: 0033:0x7f9d34d9cdd9 [ 531.956134][T21293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.956149][T21293] RSP: 002b:00007f9d35d2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 531.956168][T21293] RAX: ffffffffffffffda RBX: 00007f9d35015fa0 RCX: 00007f9d34d9cdd9 [ 531.956180][T21293] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 531.956191][T21293] RBP: 00007f9d35d2b090 R08: 0000200000000100 R09: 000000000000001c [ 531.956203][T21293] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 531.956214][T21293] R13: 00007f9d35016038 R14: 00007f9d35015fa0 R15: 00007ffcfc8554f8 [ 531.956244][T21293] [ 531.975358][T21290] vlan2: entered promiscuous mode [ 532.136090][T21308] __nla_validate_parse: 3 callbacks suppressed [ 532.136107][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 532.158616][T21290] bridge0: entered promiscuous mode [ 532.324015][T21295] vlan2: entered promiscuous mode [ 532.374599][T21311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 532.408795][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 532.575348][T21325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3945'. [ 532.614369][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 532.701896][T21333] netlink: 'syz.0.3949': attribute type 1 has an invalid length. [ 532.728111][T21333] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3949'. [ 532.986804][T21345] FAULT_INJECTION: forcing a failure. [ 532.986804][T21345] name failslab, interval 1, probability 0, space 0, times 0 [ 533.011238][T21345] CPU: 1 UID: 0 PID: 21345 Comm: syz.0.3951 Not tainted syzkaller #0 PREEMPT(full) [ 533.011264][T21345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.011274][T21345] Call Trace: [ 533.011281][T21345] [ 533.011289][T21345] dump_stack_lvl+0xe8/0x150 [ 533.011315][T21345] should_fail_ex+0x412/0x560 [ 533.011342][T21345] should_failslab+0xa8/0x100 [ 533.011370][T21345] __kmalloc_cache_noprof+0x88/0x660 [ 533.011394][T21345] ? sctp_v6_cmp_addr+0x15/0xd0 [ 533.011416][T21345] ? sctp_add_bind_addr+0x8c/0x370 [ 533.011443][T21345] sctp_add_bind_addr+0x8c/0x370 [ 533.011470][T21345] sctp_copy_local_addr_list+0x314/0x4f0 [ 533.011496][T21345] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 533.011518][T21345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 533.011543][T21345] ? sctp_v6_is_any+0x64/0x80 [ 533.011566][T21345] ? sctp_copy_one_addr+0x93/0x360 [ 533.011592][T21345] sctp_bind_addr_copy+0xb3/0x3c0 [ 533.011614][T21345] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 533.011638][T21345] sctp_connect_new_asoc+0x2ff/0x6b0 [ 533.011667][T21345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 533.011700][T21345] ? __local_bh_enable_ip+0xd0/0x130 [ 533.011717][T21345] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 533.011741][T21345] ? security_sctp_bind_connect+0x7e/0x2c0 [ 533.011764][T21345] sctp_sendmsg+0x1528/0x2c10 [ 533.011804][T21345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 533.011833][T21345] ? aa_sk_perm+0x6d5/0x900 [ 533.011854][T21345] ? __might_fault+0xaf/0x130 [ 533.011883][T21345] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.011908][T21345] ? sock_rps_record_flow+0x19/0x350 [ 533.011935][T21345] ? __pfx_inet_sendmsg+0x10/0x10 [ 533.011969][T21345] ? inet_sendmsg+0x2f4/0x370 [ 533.011993][T21345] ? __pfx_inet_sendmsg+0x10/0x10 [ 533.012018][T21345] __sys_sendto+0x5de/0x710 [ 533.012043][T21345] ? __pfx___sys_sendto+0x10/0x10 [ 533.012061][T21345] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 533.012097][T21345] ? __fget_files+0x3a0/0x420 [ 533.012130][T21345] ? ksys_write+0x242/0x270 [ 533.012156][T21345] ? __pfx_ksys_write+0x10/0x10 [ 533.012186][T21345] __x64_sys_sendto+0xde/0x100 [ 533.012207][T21345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.012227][T21345] do_syscall_64+0x15f/0xf80 [ 533.012247][T21345] ? trace_irq_disable+0x3b/0x140 [ 533.012272][T21345] ? clear_bhb_loop+0x40/0x90 [ 533.012294][T21345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.012312][T21345] RIP: 0033:0x7f9d34d9cdd9 [ 533.012329][T21345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.012344][T21345] RSP: 002b:00007f9d35d2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.012362][T21345] RAX: ffffffffffffffda RBX: 00007f9d35015fa0 RCX: 00007f9d34d9cdd9 [ 533.012375][T21345] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 533.012385][T21345] RBP: 00007f9d35d2b090 R08: 0000200000000100 R09: 000000000000001c [ 533.012397][T21345] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 533.012407][T21345] R13: 00007f9d35016038 R14: 00007f9d35015fa0 R15: 00007ffcfc8554f8 [ 533.012438][T21345] [ 533.540832][T21362] Cannot find del_set index 1 as target [ 533.571397][T21361] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3954'. [ 533.689166][T21361] dvmrp8: entered allmulticast mode [ 533.839867][T21375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.995205][T21383] tipc: Enabled bearer , priority 0 [ 534.032622][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3961'. [ 534.060427][T21390] tipc: Enabled bearer , priority 0 [ 534.091284][T21383] syzkaller0: entered promiscuous mode [ 534.100712][T21383] syzkaller0: entered allmulticast mode [ 534.137384][T21390] syzkaller0: entered promiscuous mode [ 534.163953][T21390] syzkaller0: entered allmulticast mode [ 534.242842][T21390] tipc: Resetting bearer [ 534.264649][T21383] tipc: Resetting bearer [ 534.304213][T21383] tipc: Disabling bearer [ 534.322284][T21388] tipc: Resetting bearer [ 534.432098][T21388] tipc: Disabling bearer [ 534.455453][T21405] FAULT_INJECTION: forcing a failure. [ 534.455453][T21405] name failslab, interval 1, probability 0, space 0, times 0 [ 534.499920][T21405] CPU: 0 UID: 0 PID: 21405 Comm: syz.4.3966 Not tainted syzkaller #0 PREEMPT(full) [ 534.499947][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.499958][T21405] Call Trace: [ 534.499967][T21405] [ 534.499977][T21405] dump_stack_lvl+0xe8/0x150 [ 534.500003][T21405] should_fail_ex+0x412/0x560 [ 534.500032][T21405] should_failslab+0xa8/0x100 [ 534.500149][T21405] __kmalloc_cache_noprof+0x88/0x660 [ 534.500183][T21405] ? sctp_v6_cmp_addr+0x15/0xd0 [ 534.500205][T21405] ? sctp_add_bind_addr+0x8c/0x370 [ 534.500233][T21405] sctp_add_bind_addr+0x8c/0x370 [ 534.500261][T21405] sctp_copy_local_addr_list+0x314/0x4f0 [ 534.500288][T21405] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 534.500311][T21405] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 534.500336][T21405] ? sctp_v6_is_any+0x64/0x80 [ 534.500360][T21405] ? sctp_copy_one_addr+0x93/0x360 [ 534.500386][T21405] sctp_bind_addr_copy+0xb3/0x3c0 [ 534.500410][T21405] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 534.500433][T21405] sctp_connect_new_asoc+0x2ff/0x6b0 [ 534.500463][T21405] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 534.500496][T21405] ? __local_bh_enable_ip+0xd0/0x130 [ 534.500513][T21405] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 534.500537][T21405] ? security_sctp_bind_connect+0x7e/0x2c0 [ 534.500558][T21405] sctp_sendmsg+0x1528/0x2c10 [ 534.500598][T21405] ? __pfx_sctp_sendmsg+0x10/0x10 [ 534.500626][T21405] ? aa_sk_perm+0x6d5/0x900 [ 534.500646][T21405] ? __might_fault+0xaf/0x130 [ 534.500672][T21405] ? __pfx_aa_sk_perm+0x10/0x10 [ 534.500699][T21405] ? sock_rps_record_flow+0x19/0x350 [ 534.500723][T21405] ? __pfx_inet_sendmsg+0x10/0x10 [ 534.500749][T21405] ? inet_sendmsg+0x2f4/0x370 [ 534.500772][T21405] ? __pfx_inet_sendmsg+0x10/0x10 [ 534.500798][T21405] __sys_sendto+0x5de/0x710 [ 534.500823][T21405] ? __pfx___sys_sendto+0x10/0x10 [ 534.500841][T21405] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 534.500878][T21405] ? __fget_files+0x3a0/0x420 [ 534.500911][T21405] ? ksys_write+0x242/0x270 [ 534.500938][T21405] ? __pfx_ksys_write+0x10/0x10 [ 534.500969][T21405] __x64_sys_sendto+0xde/0x100 [ 534.500992][T21405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.501011][T21405] do_syscall_64+0x15f/0xf80 [ 534.501042][T21405] ? trace_irq_disable+0x3b/0x140 [ 534.501068][T21405] ? clear_bhb_loop+0x40/0x90 [ 534.501092][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.501111][T21405] RIP: 0033:0x7fdc06b9cdd9 [ 534.501129][T21405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.501145][T21405] RSP: 002b:00007fdc07a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 534.501165][T21405] RAX: ffffffffffffffda RBX: 00007fdc06e15fa0 RCX: 00007fdc06b9cdd9 [ 534.501179][T21405] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 534.501190][T21405] RBP: 00007fdc07a85090 R08: 0000200000000100 R09: 000000000000001c [ 534.501201][T21405] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000002 [ 534.501212][T21405] R13: 00007fdc06e16038 R14: 00007fdc06e15fa0 R15: 00007ffe921bebf8 [ 534.501242][T21405] [ 535.178273][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 535.378646][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.552835][T21451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3972'. [ 535.602883][T21442] bond5: entered allmulticast mode [ 536.028180][T21474] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 536.071420][T21475] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 536.125445][T21477] tipc: Enabled bearer , priority 0 [ 536.149852][T21477] syzkaller0: entered promiscuous mode [ 536.177241][T21477] syzkaller0: entered allmulticast mode [ 536.231410][T21477] tipc: Resetting bearer [ 536.261825][T21476] tipc: Resetting bearer [ 536.324937][T21476] tipc: Disabling bearer [ 536.377454][T21487] netlink: 'syz.2.3982': attribute type 1 has an invalid length. [ 536.397823][T21487] netlink: 'syz.2.3982': attribute type 2 has an invalid length. [ 537.038766][T21517] sock: sock_set_timeout: `syz.0.3995' (pid 21517) tries to set negative timeout [ 537.081265][T21518] tipc: Enabled bearer , priority 0 [ 537.111773][T21518] syzkaller0: entered promiscuous mode [ 537.140158][T21518] syzkaller0: entered allmulticast mode [ 537.264051][T21518] tipc: Resetting bearer [ 537.292292][T21523] __nla_validate_parse: 5 callbacks suppressed [ 537.292310][T21523] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3995'. [ 537.332317][T21515] tipc: Resetting bearer [ 537.427425][T21515] tipc: Disabling bearer [ 537.463258][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 537.498023][T21531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.633902][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 537.675209][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3999'. [ 537.879867][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 538.171910][T21564] netlink: 'syz.2.4009': attribute type 13 has an invalid length. [ 538.197280][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 538.214172][T21564] netlink: 'syz.2.4009': attribute type 17 has an invalid length. [ 538.271812][T21561] netlink: 'syz.1.4007': attribute type 13 has an invalid length. [ 538.294096][T21561] netlink: 'syz.1.4007': attribute type 17 has an invalid length. [ 538.326551][T21556] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4007'. [ 538.356648][T21556] Set syz1 is full, maxelem 65536 reached [ 538.644340][T21564] mac80211_hwsim hwsim51 wlan0: left promiscuous mode [ 538.654616][T21564] mac80211_hwsim hwsim51 wlan0: left allmulticast mode [ 538.754719][T21561] erspan0: entered promiscuous mode [ 538.869925][T21561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.887351][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4014'. [ 538.902508][T21561] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.937015][T21561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.030327][T21561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.049676][T21561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.061301][T21561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.090463][T21561] veth1_vlan: left promiscuous mode [ 539.097675][T21561] veth0_vlan: left promiscuous mode [ 539.104117][T21561] veth0_vlan: entered promiscuous mode [ 539.114492][T21561] veth1_vlan: entered promiscuous mode [ 539.127996][T21561] veth1_macvtap: left promiscuous mode [ 539.135632][T21561] veth0_macvtap: left promiscuous mode [ 539.142623][T21561] veth0_macvtap: entered promiscuous mode [ 539.157492][T21561] veth1_macvtap: entered promiscuous mode [ 539.176723][T21561] 8021q: adding VLAN 0 to HW filter on device eth0 [ 539.192164][T21561] 8021q: adding VLAN 0 to HW filter on device eth1 [ 539.210850][T21561] 8021q: adding VLAN 0 to HW filter on device eth2 [ 539.229419][T21561] 8021q: adding VLAN 0 to HW filter on device eth3 [ 539.252559][T21561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.266426][T21561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.303535][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.310853][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.342533][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.349784][ T8854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.378521][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 539.490999][ T8862] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.508773][ T8862] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.576102][ T8862] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.600452][ T8862] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.618709][ T8862] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.627210][ T8862] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.653450][T21604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4017'. [ 539.673360][ T8862] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.682033][ T8862] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.837192][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.164461][T21626] block nbd4: server does not support multiple connections per device. [ 540.190970][T21631] netlink: 'syz.1.4023': attribute type 1 has an invalid length. [ 540.216680][T21626] block nbd4: shutting down sockets [ 540.242962][T21629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4023'. [ 540.376200][T21635] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 540.417805][T21631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.451726][T21636] bond6: entered promiscuous mode [ 540.457858][T21636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.526786][T21629] netlink: 'syz.1.4023': attribute type 1 has an invalid length. [ 540.934807][T21665] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 542.111993][T21698] netlink: 'syz.3.4042': attribute type 1 has an invalid length. [ 542.151248][T21701] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20005 [ 542.159345][T21715] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20005 [ 542.166625][T21698] netlink: 'syz.3.4042': attribute type 1 has an invalid length. [ 542.176848][T21705] syzkaller0: entered promiscuous mode [ 542.182906][T21705] syzkaller0: entered allmulticast mode [ 542.292775][T21716] bond0 (unregistering): Released all slaves [ 542.359029][T21724] openvswitch: netlink: Actions may not be safe on all matching packets [ 542.390965][T21724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.465067][T21730] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.476426][T21730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.483737][T21730] IPv6: NLM_F_CREATE should be set when creating new route [ 542.491062][T21730] IPv6: NLM_F_CREATE should be set when creating new route [ 542.498287][T21730] IPv6: NLM_F_CREATE should be set when creating new route [ 542.511546][T21730] __nla_validate_parse: 10 callbacks suppressed [ 542.511564][T21730] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4048'. [ 542.545387][T21729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 542.599444][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'. [ 542.631551][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 542.729148][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4052'. [ 542.732670][T21738] syzkaller0: entered promiscuous mode [ 542.756365][T21738] syzkaller0: entered allmulticast mode [ 542.795973][T21750] Bluetooth: MGMT ver 1.23 [ 542.802023][T21748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.548614][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 545.045425][T21763] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 545.093145][T21763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 545.209624][T21770] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 545.224145][T21763] bond7: (slave ip6gretap3): making interface the new active one [ 545.238240][T21763] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 545.298342][T21776] syzkaller0: entered promiscuous mode [ 545.418925][T21784] pimreg: entered allmulticast mode [ 545.445024][T21788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4069'. [ 545.456276][T21790] netlink: 'syz.3.4068': attribute type 13 has an invalid length. [ 545.534126][T21794] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4066'. [ 545.732500][T21810] netlink: 'syz.1.4073': attribute type 1 has an invalid length. [ 545.759091][T21810] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 546.012637][T21819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.046604][T21819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.174479][T21819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.184879][T21819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.350738][T21819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.378552][T21819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.389637][T21840] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 546.580756][T21819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.588829][T21851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4082'. [ 546.607242][T21819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.797915][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 546.808278][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.846367][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 546.854996][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.879467][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 546.888047][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.919191][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 546.927765][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.959425][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4088'. [ 546.971616][T21867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4088'. [ 547.058787][T16935] Bluetooth: hci3: command 0x0405 tx timeout [ 547.143061][T21869] nbd4: detected capacity change from 0 to 127 [ 547.157087][T16935] block nbd4: Receive control failed (result -32) [ 547.177656][T21876] block nbd4: Dead connection, failed to find a fallback [ 547.186520][T21876] block nbd4: shutting down sockets [ 547.193845][T21876] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.205449][T21876] Buffer I/O error on dev nbd4, logical block 0, async page read [ 547.218314][T21876] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.228106][T21876] Buffer I/O error on dev nbd4, logical block 1, async page read [ 547.236723][T21876] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.246332][T21876] Buffer I/O error on dev nbd4, logical block 2, async page read [ 547.255018][T21876] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.264974][T21876] Buffer I/O error on dev nbd4, logical block 3, async page read [ 547.273729][T21876] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.283381][T21876] Buffer I/O error on dev nbd4, logical block 0, async page read [ 547.291939][T21876] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.302751][T21876] Buffer I/O error on dev nbd4, logical block 1, async page read [ 547.311057][T21876] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.331951][T21876] Buffer I/O error on dev nbd4, logical block 2, async page read [ 547.348603][T21876] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.364819][T21876] Buffer I/O error on dev nbd4, logical block 3, async page read [ 547.392206][T21876] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.409748][T21882] tipc: Enabling of bearer rejected, failed to enable media [ 547.420320][T21876] Buffer I/O error on dev nbd4, logical block 0, async page read [ 547.429683][T21876] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.441391][T21876] Buffer I/O error on dev nbd4, logical block 1, async page read [ 547.456825][T21876] ldm_validate_partition_table(): Disk read failed. [ 547.471168][T21876] Dev nbd4: unable to read RDB block 0 [ 547.484012][T21876] nbd4: unable to read partition table [ 547.504537][T21876] ldm_validate_partition_table(): Disk read failed. [ 547.543658][T21876] Dev nbd4: unable to read RDB block 0 [ 547.570081][T21876] nbd4: unable to read partition table [ 547.740463][T21903] __nla_validate_parse: 6 callbacks suppressed [ 547.740481][T21903] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4100'. [ 547.762984][T21903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.828158][T21912] syz_tun: entered promiscuous mode [ 547.993555][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'. [ 548.122822][T21925] [ 548.125196][T21925] ====================================================== [ 548.132210][T21925] WARNING: possible circular locking dependency detected [ 548.139234][T21925] syzkaller #0 Not tainted [ 548.143637][T21925] ------------------------------------------------------ [ 548.150640][T21925] syz.1.4105/21925 is trying to acquire lock: [ 548.156691][T21925] ffff888027132178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 548.166091][T21925] [ 548.166091][T21925] but task is already holding lock: [ 548.173442][T21925] ffff888027131c50 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 548.183633][T21925] [ 548.183633][T21925] which lock already depends on the new lock. [ 548.183633][T21925] [ 548.194030][T21925] [ 548.194030][T21925] the existing dependency chain (in reverse order) is: [ 548.203043][T21925] [ 548.203043][T21925] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 548.211649][T21925] blk_alloc_queue+0x546/0x680 [ 548.216933][T21925] __blk_mq_alloc_disk+0x197/0x390 [ 548.222564][T21925] nbd_dev_add+0x499/0xb50 [ 548.227494][T21925] nbd_init+0x168/0x1f0 [ 548.232170][T21925] do_one_initcall+0x250/0x870 [ 548.237446][T21925] do_initcall_level+0x104/0x190 [ 548.242898][T21925] do_initcalls+0x59/0xa0 [ 548.247739][T21925] kernel_init_freeable+0x2a6/0x3e0 [ 548.253450][T21925] kernel_init+0x1d/0x1d0 [ 548.258296][T21925] ret_from_fork+0x514/0xb70 [ 548.263404][T21925] ret_from_fork_asm+0x1a/0x30 [ 548.268681][T21925] [ 548.268681][T21925] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 548.275880][T21925] fs_reclaim_acquire+0x71/0x100 [ 548.281334][T21925] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 548.287658][T21925] __alloc_skb+0x1d0/0x7d0 [ 548.292584][T21925] __ip6_append_data+0x2c7c/0x3e90 [ 548.298204][T21925] ip6_append_data+0x10f/0x280 [ 548.303474][T21925] rawv6_sendmsg+0x12d3/0x18e0 [ 548.308749][T21925] ____sys_sendmsg+0x80a/0x9f0 [ 548.314024][T21925] ___sys_sendmsg+0x2a5/0x360 [ 548.319297][T21925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 548.324744][T21925] do_syscall_64+0x15f/0xf80 [ 548.329841][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.336238][T21925] [ 548.336238][T21925] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 548.343967][T21925] lock_sock_nested+0x41/0x100 [ 548.349245][T21925] inet_shutdown+0x6a/0x390 [ 548.354264][T21925] nbd_mark_nsock_dead+0x2e9/0x560 [ 548.359888][T21925] recv_work+0x1c2e/0x1d40 [ 548.364813][T21925] process_scheduled_works+0xb5d/0x1860 [ 548.370864][T21925] worker_thread+0xa53/0xfc0 [ 548.375963][T21925] kthread+0x388/0x470 [ 548.380542][T21925] ret_from_fork+0x514/0xb70 [ 548.385642][T21925] ret_from_fork_asm+0x1a/0x30 [ 548.390915][T21925] [ 548.390915][T21925] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 548.398549][T21925] __mutex_lock+0x1a3/0x1550 [ 548.403670][T21925] nbd_queue_rq+0x37b/0x1100 [ 548.408772][T21925] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 548.414833][T21925] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 548.421678][T21925] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 548.428174][T21925] blk_mq_run_hw_queue+0x348/0x4f0 [ 548.433798][T21925] blk_mq_dispatch_list+0xd16/0xe10 [ 548.439512][T21925] blk_mq_flush_plug_list+0x48d/0x570 [ 548.445402][T21925] __blk_flush_plug+0x3ed/0x4d0 [ 548.450771][T21925] __submit_bio+0x28d/0x580 [ 548.455794][T21925] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 548.461944][T21925] block_read_full_folio+0x599/0x830 [ 548.467735][T21925] filemap_read_folio+0x137/0x3b0 [ 548.473270][T21925] do_read_cache_folio+0x358/0x590 [ 548.478899][T21925] read_part_sector+0xb6/0x2b0 [ 548.484175][T21925] adfspart_check_ICS+0xb1/0x960 [ 548.489627][T21925] bdev_disk_changed+0x817/0x1770 [ 548.495163][T21925] blkdev_get_whole+0x380/0x510 [ 548.500528][T21925] bdev_open+0x31e/0xd30 [ 548.505283][T21925] blkdev_open+0x470/0x610 [ 548.510205][T21925] do_dentry_open+0x785/0x14e0 [ 548.515477][T21925] vfs_open+0x3b/0x340 [ 548.520050][T21925] path_openat+0x2e08/0x3860 [ 548.525154][T21925] do_file_open+0x23e/0x4a0 [ 548.530170][T21925] do_sys_openat2+0x113/0x200 [ 548.535361][T21925] __x64_sys_openat+0x138/0x170 [ 548.540722][T21925] do_syscall_64+0x15f/0xf80 [ 548.545827][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.552230][T21925] [ 548.552230][T21925] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 548.559436][T21925] __mutex_lock+0x1a3/0x1550 [ 548.564539][T21925] nbd_queue_rq+0xc6/0x1100 [ 548.569552][T21925] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 548.575613][T21925] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 548.582453][T21925] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 548.588951][T21925] blk_mq_run_hw_queue+0x348/0x4f0 [ 548.594577][T21925] blk_mq_dispatch_list+0xd16/0xe10 [ 548.600291][T21925] blk_mq_flush_plug_list+0x48d/0x570 [ 548.606176][T21925] __blk_flush_plug+0x3ed/0x4d0 [ 548.611541][T21925] __submit_bio+0x28d/0x580 [ 548.616558][T21925] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 548.622705][T21925] block_read_full_folio+0x599/0x830 [ 548.628498][T21925] filemap_read_folio+0x137/0x3b0 [ 548.634034][T21925] do_read_cache_folio+0x358/0x590 [ 548.639658][T21925] read_part_sector+0xb6/0x2b0 [ 548.644935][T21925] adfspart_check_ICS+0xb1/0x960 [ 548.650387][T21925] bdev_disk_changed+0x817/0x1770 [ 548.655928][T21925] blkdev_get_whole+0x380/0x510 [ 548.661298][T21925] bdev_open+0x31e/0xd30 [ 548.666064][T21925] blkdev_open+0x470/0x610 [ 548.670985][T21925] do_dentry_open+0x785/0x14e0 [ 548.676259][T21925] vfs_open+0x3b/0x340 [ 548.680833][T21925] path_openat+0x2e08/0x3860 [ 548.685934][T21925] do_file_open+0x23e/0x4a0 [ 548.690950][T21925] do_sys_openat2+0x113/0x200 [ 548.696133][T21925] __x64_sys_openat+0x138/0x170 [ 548.701498][T21925] do_syscall_64+0x15f/0xf80 [ 548.706598][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.713039][T21925] [ 548.713039][T21925] -> #1 (set->srcu){.+.+}-{0:0}: [ 548.720153][T21925] __synchronize_srcu+0xca/0x300 [ 548.725605][T21925] elevator_switch+0x1e8/0x7a0 [ 548.730882][T21925] elevator_change+0x2cc/0x450 [ 548.736159][T21925] elevator_set_default+0x36c/0x430 [ 548.741869][T21925] blk_register_queue+0x3e9/0x4e0 [ 548.747411][T21925] __add_disk+0x677/0xd50 [ 548.752246][T21925] add_disk_fwnode+0xfb/0x480 [ 548.757449][T21925] nbd_dev_add+0x72c/0xb50 [ 548.762372][T21925] nbd_init+0x168/0x1f0 [ 548.767045][T21925] do_one_initcall+0x250/0x870 [ 548.772320][T21925] do_initcall_level+0x104/0x190 [ 548.777776][T21925] do_initcalls+0x59/0xa0 [ 548.782616][T21925] kernel_init_freeable+0x2a6/0x3e0 [ 548.788327][T21925] kernel_init+0x1d/0x1d0 [ 548.793175][T21925] ret_from_fork+0x514/0xb70 [ 548.798273][T21925] ret_from_fork_asm+0x1a/0x30 [ 548.803553][T21925] [ 548.803553][T21925] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 548.811363][T21925] __lock_acquire+0x15a5/0x2cf0 [ 548.816723][T21925] lock_acquire+0x106/0x350 [ 548.821735][T21925] __mutex_lock+0x1a3/0x1550 [ 548.826841][T21925] elevator_change+0x1b3/0x450 [ 548.832123][T21925] elevator_set_none+0xb5/0x140 [ 548.837488][T21925] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 548.843800][T21925] nbd_start_device+0x17f/0xb10 [ 548.849158][T21925] nbd_genl_connect+0x165b/0x1cf0 [ 548.854690][T21925] genl_family_rcv_msg_doit+0x22a/0x330 [ 548.860759][T21925] genl_rcv_msg+0x61c/0x7a0 [ 548.865776][T21925] netlink_rcv_skb+0x232/0x4b0 [ 548.871050][T21925] genl_rcv+0x28/0x40 [ 548.875548][T21925] netlink_unicast+0x75c/0x8e0 [ 548.880819][T21925] netlink_sendmsg+0x813/0xb40 [ 548.886095][T21925] ____sys_sendmsg+0x972/0x9f0 [ 548.891371][T21925] ___sys_sendmsg+0x2a5/0x360 [ 548.896559][T21925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 548.902012][T21925] do_syscall_64+0x15f/0xf80 [ 548.907143][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.913548][T21925] [ 548.913548][T21925] other info that might help us debug this: [ 548.913548][T21925] [ 548.923763][T21925] Chain exists of: [ 548.923763][T21925] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 548.923763][T21925] [ 548.937492][T21925] Possible unsafe locking scenario: [ 548.937492][T21925] [ 548.944929][T21925] CPU0 CPU1 [ 548.950279][T21925] ---- ---- [ 548.955632][T21925] lock(&q->q_usage_counter(io)#54); [ 548.961003][T21925] lock(fs_reclaim); [ 548.967591][T21925] lock(&q->q_usage_counter(io)#54); [ 548.975672][T21925] lock(&q->elevator_lock); [ 548.980268][T21925] [ 548.980268][T21925] *** DEADLOCK *** [ 548.980268][T21925] [ 548.988408][T21925] 6 locks held by syz.1.4105/21925: [ 548.993602][T21925] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.001797][T21925] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.011202][T21925] #2: ffff8880271c69c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 549.022599][T21925] #3: ffff8880271c68d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 549.033638][T21925] #4: ffff888027131c50 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 549.044345][T21925] #5: ffff888027131c88 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 549.055237][T21925] [ 549.055237][T21925] stack backtrace: [ 549.061126][T21925] CPU: 1 UID: 0 PID: 21925 Comm: syz.1.4105 Not tainted syzkaller #0 PREEMPT(full) [ 549.061148][T21925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.061160][T21925] Call Trace: [ 549.061167][T21925] [ 549.061174][T21925] dump_stack_lvl+0xe8/0x150 [ 549.061197][T21925] print_circular_bug+0x2e1/0x300 [ 549.061221][T21925] check_noncircular+0x12e/0x150 [ 549.061245][T21925] __lock_acquire+0x15a5/0x2cf0 [ 549.061263][T21925] ? ktime_get+0x45/0x220 [ 549.061292][T21925] ? elevator_change+0x1b3/0x450 [ 549.061314][T21925] lock_acquire+0x106/0x350 [ 549.061331][T21925] ? elevator_change+0x1b3/0x450 [ 549.061357][T21925] __mutex_lock+0x1a3/0x1550 [ 549.061377][T21925] ? elevator_change+0x1b3/0x450 [ 549.061400][T21925] ? rcu_is_watching+0x15/0xb0 [ 549.061421][T21925] ? work_grab_pending+0x3d1/0x990 [ 549.061440][T21925] ? elevator_change+0x1b3/0x450 [ 549.061462][T21925] ? __pfx___mutex_lock+0x10/0x10 [ 549.061480][T21925] ? enable_work+0x17f/0x230 [ 549.061505][T21925] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.061525][T21925] ? __cancel_work_sync+0xf7/0x110 [ 549.061545][T21925] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 549.061571][T21925] elevator_change+0x1b3/0x450 [ 549.061596][T21925] elevator_set_none+0xb5/0x140 [ 549.061617][T21925] ? __pfx_elevator_set_none+0x10/0x10 [ 549.061641][T21925] ? xa_load+0x1db/0x210 [ 549.061663][T21925] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 549.061685][T21925] ? kernfs_add_one+0x477/0x5c0 [ 549.061706][T21925] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 549.061726][T21925] ? sysfs_add_file_mode_ns+0x259/0x300 [ 549.061747][T21925] nbd_start_device+0x17f/0xb10 [ 549.061765][T21925] ? device_create_file+0xf4/0x1b0 [ 549.061782][T21925] nbd_genl_connect+0x165b/0x1cf0 [ 549.061797][T21925] ? __pfx___nla_validate_parse+0x10/0x10 [ 549.061825][T21925] ? __pfx_nbd_genl_connect+0x10/0x10 [ 549.061841][T21925] ? rcu_is_watching+0x15/0xb0 [ 549.061860][T21925] ? trace_kmalloc+0x2a/0xf0 [ 549.061883][T21925] ? __nla_parse+0x40/0x60 [ 549.061906][T21925] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 549.061932][T21925] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 549.061960][T21925] genl_family_rcv_msg_doit+0x22a/0x330 [ 549.061987][T21925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 549.062016][T21925] ? __lock_acquire+0x6b5/0x2cf0 [ 549.062035][T21925] genl_rcv_msg+0x61c/0x7a0 [ 549.062061][T21925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.062085][T21925] ? __pfx_nbd_genl_connect+0x10/0x10 [ 549.062105][T21925] netlink_rcv_skb+0x232/0x4b0 [ 549.062124][T21925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.062148][T21925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.062172][T21925] ? down_read+0x270/0x2e0 [ 549.062191][T21925] ? genl_rcv+0xd/0x40 [ 549.062214][T21925] genl_rcv+0x28/0x40 [ 549.062236][T21925] netlink_unicast+0x75c/0x8e0 [ 549.062257][T21925] netlink_sendmsg+0x813/0xb40 [ 549.062280][T21925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.062301][T21925] ? aa_sock_msg_perm+0xf1/0x1b0 [ 549.062322][T21925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.062345][T21925] ____sys_sendmsg+0x972/0x9f0 [ 549.062366][T21925] ? __might_fault+0xaf/0x130 [ 549.062388][T21925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.062411][T21925] ? import_iovec+0x73/0xa0 [ 549.062435][T21925] ___sys_sendmsg+0x2a5/0x360 [ 549.062454][T21925] ? __lock_acquire+0x6b5/0x2cf0 [ 549.062473][T21925] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.062504][T21925] ? futex_wake+0x4ac/0x580 [ 549.062536][T21925] ? __fget_files+0x2a/0x420 [ 549.062554][T21925] ? __fget_files+0x3a0/0x420 [ 549.062576][T21925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 549.062598][T21925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.062622][T21925] ? rcu_is_watching+0x15/0xb0 [ 549.062644][T21925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.062661][T21925] do_syscall_64+0x15f/0xf80 [ 549.062679][T21925] ? trace_irq_disable+0x3b/0x140 [ 549.062703][T21925] ? clear_bhb_loop+0x40/0x90 [ 549.062722][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.062737][T21925] RIP: 0033:0x7f462d19cdd9 [ 549.062753][T21925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.062768][T21925] RSP: 002b:00007f462e09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.062787][T21925] RAX: ffffffffffffffda RBX: 00007f462d415fa0 RCX: 00007f462d19cdd9 [ 549.062799][T21925] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000f [ 549.062811][T21925] RBP: 00007f462d232d69 R08: 0000000000000000 R09: 0000000000000000 [ 549.062821][T21925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.062831][T21925] R13: 00007f462d416038 R14: 00007f462d415fa0 R15: 00007fff8c5fbf38 [ 549.062849][T21925] [ 549.665840][ T5627] block nbd5: Receive control failed (result -32) [ 549.673083][T16935] block nbd5: Receive control failed (result -32) [ 550.738973][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 551.379194][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!