last executing test programs: 2m34.696614739s ago: executing program 1 (id=1913): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@gettfilter={0x3c, 0x2e, 0x404, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0x5}, {0xfff3, 0xfff1}, {0x10, 0xa}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000008c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x123, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '{'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'veth0_to_hsr\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x800) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r14 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x85, &(0x7f0000000440)={r13, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m34.430962343s ago: executing program 1 (id=1916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r0, &(0x7f0000000080), 0x5b, 0x40, 0x0) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x0) 2m34.248029468s ago: executing program 1 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000002c0)={{0x100, 0x8, 0x5, 0x4, 0x5}, [{0x9, 0xfffffffffffffff2, 0x8, 0x6}, {0x1, 0xffffffffffff8390, 0x5, 0x3}, {0x9, 0xf93, 0x7, 0xb8}, {0xa1e4, 0x2, 0x4, 0x52}]}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000200)=0xe7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000240)=0x2, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x101, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x4, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) write(r4, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x16, 0x7, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2m34.06875467s ago: executing program 1 (id=1921): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129642, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x4, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x7, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0xd, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x7, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x20001, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x8, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40ffe, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x1000009, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x9, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0x0, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0xbc4, 0x803, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0x1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m32.9980486s ago: executing program 1 (id=1930): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000080)="000000000980ffff", 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) listen(r0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m32.7898565s ago: executing program 1 (id=1936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m32.703195522s ago: executing program 2 (id=1939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x26020480) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000640)={0x1, 'lo\x00'}, 0x18) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x83, 0x83, 0x1, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x2}, 0x8, 0x8000, 0x7fffffff, 0x3}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf25070000003c00018008000100", @ANYRES32=r7, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="14000200010000000000002000018008000100", @ANYRES32=r9, @ANYBLOB="140002006272696467655f736c6176655f300000"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x15) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 2m32.393718215s ago: executing program 2 (id=1941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x41) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0xf2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x2}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x41) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0xf2}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x2}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async) 2m32.299189691s ago: executing program 2 (id=1942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) 2m31.106307966s ago: executing program 2 (id=1953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000500)={0x1d, r1, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) connect$can_j1939(r0, &(0x7f0000000540)={0x1d, r1, 0x0, {0x0, 0xee}, 0x80}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)="0807060504030201", 0x8}}, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000002180)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000021c0)={&(0x7f0000002200)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)=""/4, 0x1a061}], 0x1, &(0x7f00000022c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) sendmsg$sock(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f00000020c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002100), 0x0, 0x10, &(0x7f0000002140), 0xfffffffffffffd00}, 0x48) close(0x3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x15, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x2, 0x200, 0x4, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x40, 0x0, 0x5}}) r8 = socket$inet(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000640)={0xfffc, 0x4, 0x0, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x1e, &(0x7f00000006c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000700)=0x10) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x34, 0xfe, 0xfd, 0x1, 0x0, 0x6, 0x100}, [@RTA_EXPIRES={0x8}, @RTA_UID={0x8, 0x19, r6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x34}}, 0x4008000) 2m30.44206939s ago: executing program 2 (id=1961): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x89e1, &(0x7f0000000580)='lapb0') socket(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000640)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000640)=0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002d00)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xdef}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x7, 0xa, &(0x7f0000002e40)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000079004001000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000002f00)='GPL\x00', 0x2, 0xee, &(0x7f0000002f40)=""/238, 0x41100}, 0x25) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x7, 0xa, &(0x7f0000002e40)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000079004001000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000002f00)='GPL\x00', 0x2, 0xee, &(0x7f0000002f40)=""/238, 0x41100}, 0x25) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003080)={&(0x7f00000030c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000003100)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r1, &(0x7f0000003100)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000003140)=ANY=[@ANYBLOB="400109"], 0x87) (async) write$nci(r1, &(0x7f0000003140)=ANY=[@ANYBLOB="400109"], 0x87) syz_emit_ethernet(0x46, &(0x7f0000003180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000003180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003280)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000003340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003400)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xaf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x240148c4}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000003440)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000034c0)={&(0x7f0000003500)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x20000880) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000003440)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000034c0)={&(0x7f0000003500)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x20000880) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003540)={0x0, @multicast1}, &(0x7f0000003580)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003540)={0x0, @multicast1}, &(0x7f0000003580)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000003600)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x120, 0x0, 0x120, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000003a40), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"5a03", 0x1}}, @common=@hl={{0x28}, {0x2, 0xa6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x8, 0x40, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000003a80)={'bridge_slave_0\x00'}) 2m30.089189189s ago: executing program 2 (id=1966): unshare(0x2020600) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={r1, 0xa0, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x2, @private2, 0x2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6000}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x8, @private0, 0x2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x7, @private0, 0xf}]}, &(0x7f00000003c0)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xab}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m17.72831496s ago: executing program 32 (id=1936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m14.72475049s ago: executing program 33 (id=1966): unshare(0x2020600) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={r1, 0xa0, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x2, @private2, 0x2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6000}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x8, @private0, 0x2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x7, @private0, 0xf}]}, &(0x7f00000003c0)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xab}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m10.964818067s ago: executing program 3 (id=2034): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x891b, &(0x7f0000000200)={'bond0\x00', @ifru_mtu=0x1}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f00000002c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) syz_emit_ethernet(0x3f4, &(0x7f0000000440)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, '\x00', 0x3be, 0x2f, 0x0, @mcast1, @loopback, {[@fragment={0xf1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x67}, @fragment={0xdf, 0x0, 0x3, 0x1, 0x0, 0x8, 0x67}, @hopopts={0x1d, 0xe, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x2, 0x57, "f3ecba26a936dbc954aa840579727ff79ba718e6cf8af601d8673160f75909ed2f606dd0621c84030b902204bf6567f991f772366b88483c067ec5a756d3c4c12f497c12be26b138d8d346bd0bcc41f4b3dedaf63aafcc"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x1, [0x9]}}, @enc_lim={0x4, 0x1, 0x2}]}, @routing={0x0, 0xa, 0x1, 0xf6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @remote, @remote, @private1]}, @routing={0x2, 0x8, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x84, 0x3, [], "c3658692e683a64310e129a7391efa31d428d7f00651eb13599965c9ba5aefc634ae786e801dee5baaf705fc482ba7221e00f91aca4ccda9ba59150bfa6ecd33c4449cac10c5142aa481bf67095cedb144c01a7c3151641ad029e492a0399586d0e03ee121e48e081f4f461c4ebf1460e5baf7fe7f20fc566c083d06979796d0460f334f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "5c022ba68c2e299fcdeca1f68af78e7290748f5440a95ab99ba1885f7e999a24c9bd69ea3eba297ff85b4ce0e652fd7d9d0ce7646ba04b5ca20d5c982a8284e0280af70e5f1b725d3360be7d39fcd695130d3f06c622ea021717b228944cf282d07dfb9903a36e7fd000c2a1b918a0b10d7fe7e0a4dd39d24a5c6e13b04943e56840de7406b502f3cba1a7dcf07181ddd0ab09656530de1c3f59def674f1eb02ab206eff12dc044033fc4b3e"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400], "c0a91bfe9ff63aa735e167e05bb340bc19eb40d15bebcb26333ea73b9c813c43edc25d9e7fd5db013d363fb035020512e245edc332ca5af9c537def2b562751ac2880be27e6179071920e672148d622200951b59ff3bbd03130efb9903b2784ebaa7a2ecb10ed7f3e8c6d5a0a38e64c0bd027c58c9746d0a07978ad650e3caf230ac94fe3b7c049748f7b0847132aec6fa0a70c5a850414bec7aa69f7a1f6d405c2be7e169"}, {0x8, 0x88be, 0x2, {{0xc, 0x1, 0xf2, 0x1, 0x0, 0x1, 0x7, 0x3}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x4, 0x2, 0x1, 0x1, 0x5, 0xb7}, 0x2, {0x6, 0xfc1b, 0x2, 0x1c, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "df15093160deda200defdc60b11c6bd20874ccccfdfb93cb6b34f10f57a62d9cb88666fb98e15ca1921b2e4ae01f0137621b8d5ce3af8df8f03f33ddddaa26fc568d498b8c1804ca1fa5a16846f133d3077783de91720c2f7ce1a40c869cd83af423a93db14947cb427aed36130974ade9b7e5"}}}}}}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 2m3.482011449s ago: executing program 3 (id=2049): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r1, 0x0, &(0x7f0000000180)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000680)="8435816b926bad1d31b2f8bd1491b941bd2ffd783d03705542381f34b23685e25b81ebc427f1a7db8ac33b5e02293a30e70c62a7e52973aded18aa0fa7e62c", 0xfffffffffffffffd}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ac0)={'ip6gre0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000180)="63ae016642", 0x5}, {&(0x7f00000001c0)="58abe7a26611148cef041df84653adaa0ea2472a9f3cd13c", 0x18}, {&(0x7f0000000880)="b338602fa8877cb076d0aec0114241b8efa774232d4d39dcb738bb6c569140be71153ab3d963f5fb98ec2dfa513413a657024b53b9b52efecbc9b73400201891151620cca1b10d03246cf7c38f9a90bd996cab213c787f9a81ba86c61062770afe044f2ac0c7eca289b498fa7d8c7c4c158e7d44d5f189d64b6cb656ccb500dbe90ebead2ee61f747bef673267223dc47b47338d5184ca2822ec0879a45880e24c3ef775f6524bd04fb33b3b7be37b16939303a96eed", 0xb6}, {&(0x7f0000000340)="346b74dc830502575d1c447e2803b8b81a923703737f1938410355f96a0681d1628590c2781fec4ee529244372bd0d4333880d0e60fa18b5db9aebff5962451df36210fde50308e06044c61119b654cdc4e632459e12422bb19d302f08e84f7b790cae4d6f5c8d50eed3d64c5246ab6b0976bdd1d352b32127f925f1eeb204461eac93d178dc88d03169e7312f4d3a2bc75ff1156b2ff13afe390828c09c6f905b889e64a972b930b30b1bfb8e1e71ac21d89c0011edc5346b8ebcaf369a1e", 0xbf}, {&(0x7f0000000640)}, {&(0x7f0000000700)="3a0e275d6f65ab4a74ef458e2323b3f5f575c44f8a8cc6a66c0fb09e56467b7e872d02738b281c4668fc573548f1577f41d44746a827e7c63ec443538e27f567730431", 0x43}, {&(0x7f0000000780)="e3fb89bc48656a7218febf7339a4ad4c0e8f22d2fa62f61c7eaa9085b3c0a0a573f87bbaf8fffbdf663e3db277b89bf2887fa9eb87facb0773ef8f4248c0a8acb5891d547b16df8c645e114a2041c5272dcd42c4e6cb5de84a85f246ae711c694b49bc287189816e60c154f9dc7ba80da63330154b76c2d429fc6d8d5a782b85ef14589ad903bc582d0889504e898a19385adef97601104bed8ac692b50fe541bbc80f817fb1e7de8c38df3211713bc9369a6b34e03920cec7ff2684ca558684f730c3c31cd117cee17dfbf228ba9573d92b64ad3049e41c8dba77c7d84ae04c04e692bbf5da", 0xe6}, {&(0x7f0000000940)="9e6fa4221a06eafed2672173908da959447cfc6e80adb165df862b41fffbb1ce505d60d1e89ba471b1857be3a892e9afed5fe8ff8b9019767a1e85f88e4207d401e2cac3c1e3f70612984b22957502cc97d662ab4e2a821164a10b820b406a1c63", 0x61}], 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="110000000000006e9d003586c2f23727d72fd5cd0000000000010000004000000000000000300000000000000000000000070000008613ffffffff060d43900948907076128a76d2440c3c200000000000000000001400000000000000000000000200000002000000000000001c0016130000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001100000000000000000000000100000010000000000000002000000000000000000000000700000083035c0088084c98894501ee000000001400000000000000000000000100000002000000000000001100000000000000000000000100"/116], 0xe8}}, {{&(0x7f0000000bc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000c00)}, {0x0}, {&(0x7f0000000e40)="b53b30f6c89ae633b3e895b75ddbf2449dd213b0b5951043cb3e036c826bf5990aeb331561600bfc267e2597e67d58d545480dbd4bfd224099d52edafcd766720369529bd9a43585c8917965b9febe2e4f842eb164be57cbcfc8151db5777b3dff6bf36faff924b15a3607d54669dc550bd0f537e5a528b74bafe202e9d61d0b432474c5af81569a4ecc8ad8db4023e976529821abebd49fd55e8cd2de5411e2939354ec39e080a7d5e737bb255038f6f0a82542c0ae77fd44847ff9fb", 0xbd}, {&(0x7f0000000f00)="01e4c85e308f36926589e8239055c9cea1e3d71d6753af0b8fdec505358d0a4021a1c175060000008648c34d499df14cfec23b9af4b526be444c45fb2faec3396f94607608c91a2d6c6f50150000000000000000", 0x54}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001040)="24a349e06b38cd6513bae1645acd334964a7b1d8c11deb38f044e4d36fd04457ab9e17d881e5ba4f632fd34cd5d67df252d6362f5dab2d0806e8d3117e22490d420d602ac0d665c1b8ad2202820e202a14c07a03c1ef72432f4bf4f596cb0cf9792d2d4397def264e75895f223247249c48b28cb8f2e1178875ff69f0ad46e36d039ba45d80b3b9a0c8ad17cb0d5b2f06d0f707c", 0x94}, {&(0x7f0000001140)="b0e09c965d7fe1aebcc4980096e569c8f241b828398a57cdfb271d24616482d10821437cee1a9c00014850fa0d94c0f29af08370b7c4cefa2e899d17bdf53582d8d59283357a99f0af3852afb243568257ee8e85dda42ff5bedac462495745636b794cab3971aed7406a53530878ad553697e3bbe18d3359e4967308420d60c2184ab41115eba5b403db184c5ed638c5cdb4d4a0281af49e82ea05c2107f3a70656fe4ca2371c7e35feb30969633b8969a6c20276b88dd7108f3daadf94192d0cf532ebfb42889e6b20d39253947bb35bfbde40883861b1bccc21b417170a202d5e28fbade836cd0023cda1d3557", 0xee}, {&(0x7f0000001240)='c', 0x1}, {&(0x7f0000001280)="30e97f610004", 0x6}, {&(0x7f00000012c0)="4e875ae54c14079371e1b67a4cb4145ba46e57b684ce19a432e7b2b54125d9a6183ff0853ca832865131297c1f0829c3b3613fb4a906d73d2c56cb16f2dde4b228454afc124f7dca048839c9beb87e6a7cb70d8a18ccf8c8e38da1845071edde4b377eacd2d12ba05fa4811334f7a9a04a8cb502ef6794e7bba15b97c0c2598ece0f1f93e5765f8fe9b8f7c7a14df23d29e320e58ff86ab1c9574cbc84852b3c4b80ae182e6d5c63594534c2c6e0fcb72bb44a43549a67c8728277c4b27c50821bc56db9f6fde97b2f473e223759274999b9a365ace1fd35ccf31338fafc9e0973e2e1c06616a3b030dc46c5", 0xec}, {&(0x7f00000013c0)="b3d24dcad72685ea7ce5fd307f72fc28bbb26d9655df4f7a7aad0a8a6ce22b22ac74ad7efaf021833e63ab9bfb5358efaf672f40d4665980091241582feefe8286d25c4aed05bfa218b7e82bea0d3b9cd48c21c0bb0cb74514f4080042293440986e3834d231c86b4d9eeb4198f2e17b6c1a5d54a3e898ada784a726a11b36dbb5d18cefa7e65d28f99b87c2a575987a7ba96cd032f10a0395e903f155a554834b29bf92904baa4559bd72560e8496837515fe75a41b0a925a6002aafb6ec8dcae94390e33f6d39d5122340a960c1d256023a400f57cc5493f09ddd5cbcd2a2aa5b9b2a9", 0xe4}], 0x6}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="c576955cfd535d218e1fc91e81e7395bdd2e54668e4d073d20db7214d872013cdf8e375d67c7f4ddf4f5c1122c4f19e37a2ac403e1ad9f5c2ddce8207938c84830ebb41ae3338a07ac9073bca5dfc97449e1f63c15c60301002c22898e7013d275e80186fb6d5ca627e512e6e1052273fdf6a3483f8eb6be70ecd9a7f05d11ad04e06475958e26b8f8b4d8468e9ffa121afb578d5c945882e3cc83c9fdade548", 0xa0}], 0x1, &(0x7f00000016c0)=ANY=[@ANYBLOB="c0000000000000000000000007000000862b00000002020b67dea9e9d3149709640202071284c3d884bbabe25c33c0c31c908d6d570006775d03aa443c26d10000000000000006ac1414aa00000000ac14141b0000000664010102000004000a01010180000001ac1e010100000005ac141429fffffff707137eac1414aaac14141cac1e0001ac1414bb86350000000100071ebb571d0f020cd5b9cd3e2d1b0e84b848070c1aea1172e2b7476991380610f317b684a9c527e4074040a953b40011000000000000000000000001000000060000000000000011000000000000000000000001000000ff00000000000000"], 0xf0}}, {{&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001800)="a1699d261f630c6e0be1822dec7308ecee4222ee0729614a76d03b1ad4a720a65e851e696441b0f1377bb0bed4cefb683cd1c25b25719536d92cb503ba87abd884e2e3a01388dcfa0676d8ad2a0723682839eeb4386763e668865d17db72274dd469306d8b8554fa6126cb63639e67a790e1237e8107aa07", 0x78}, {&(0x7f0000001880)="3e457aa018664c8e269ece7624fb49d72b88666ad04353d295e84ba13802423e03462d27c92844679bb1dc0800634b8f7158397363fe498f7a776a97103d0739c60209e622a845d2889af65c34350d4ffc3644614091914b22b5eea4f1be025573edff03", 0x64}, {&(0x7f0000001900)="c7c8672d15f517f9bb6ad097f8dab629aadaafed2ffee956b4a0d4be5a2c8a8caae0d18ca1857f2010e3fab713f87c81ce12bbad8ac5", 0x36}], 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x118}}], 0x5, 0x44050) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x2010, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) (async) unshare(0x20000400) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x402, 0x200, @mcast1, 0xf}, 0x1c) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x9, 0x800}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffff1, 0x4, {0x1}}]}}}]}, 0x9c}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000001000000000000000800"/32], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000010000104", @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e61746bae4596cdb69ceea2000000000000000000000000000000000000000000000000000000000002002200"/72], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x24008000) 2m2.912970159s ago: executing program 3 (id=2050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001cc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001d40)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000001e40)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000001ec0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000001fc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002080)=""/81, 0x7ffff000}, {&(0x7f0000002100)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xcb, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000002180)=""/181, 0xb5, 0x10, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000001c80)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r4}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x16, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r5, 0x0, 0x10, 0x70, &(0x7f0000001c00)="0000000005000000", &(0x7f0000001c40)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000023c0)={{r0, &(0x7f0000002240)='}\\/]/O#\x00', 0x20140, &(0x7f0000002280)={@align=0x6, {0x3, 0x7, 0xfffffffa, 0x5}}, 0x1, &(0x7f00000022c0)={@_ha_fsid}, &(0x7f0000002300)=0x5}, {[0x5, 0x10000, 0xd2df7187, 0x7]}, 0x12000000, 0x7a, &(0x7f0000002340)=""/122}) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@arena={0x21, 0x0, 0x0, 0x31, 0x40000, 0x1, 0x9, '\x00', 0x0, r6, 0x5, 0x2, 0x4}, 0x50) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000540)=""/4103, &(0x7f0000001580)=0x1007) r7 = socket$kcm(0x10, 0x2, 0x0) unshare(0x8000400) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x640400d9) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r8}, 0x50) sendmsg$inet(r7, &(0x7f0000000440)={0x0, 0xff00, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001880)={{r8, &(0x7f0000000200)='\x00', 0x5250c2, &(0x7f0000000240)={@align=0x7, {0x9, 0xb29, 0x8, 0x6}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x100}, 0x3, &(0x7f0000001800)=[{0x2, 0x8, &(0x7f0000000300)='\x00', &(0x7f0000000340)="b6694aa6268b9b3608ab21efafcf22b400e317dd51c21fde0fa80a75830e8e1b79fccdf33c398f2190586c0216d77c9f17436a375b961065f9948d445ceed2b50c921bc8345613abb4b7cbbeb402f65e361c238f8391030aff0f489b865251578b6f5c9ee4786c12ed5592736bc64e525a01c92c49b41ebe5fa52950c8297a56e456000b38", 0x85, 0x8}, {0x2, 0x2, &(0x7f0000000400)='\x00', &(0x7f00000015c0)="dac640dc8c082f10157825972edd92663cadf7fd8822c9bfd14895b9f77d8efb9fe59a79a60604c07afe1f818b34938f9c068b1123e296f61dcc74ce61f8681484ec13db5c631a17834b9c2e62f47d9cb4ea4761d3123bf6b8cf4d2f1071684f980aa80dd92337fb39caac2f0b493c906ac9c75a82815b8b76900a7cf3610a9de5dc1963d616adcc24db1d09a66906aa19bcabae299ba58be6e75e34ab3d1820cb8d65026007609b4210a742f71b375f8a77c271a4686d43c37f36e8e20164d6423bbb88db2f390bd919015cd498eddf5e1cc3439ceb48e0a141a413f75f99b447d604b1a35de8013524fec4fc41987d3567bba477bc9c", 0xf7, 0xb}, {0x2, 0x7fffffff, &(0x7f00000016c0)='!\x00', &(0x7f0000001700)="1e5256f7703e69e9e8569787606da936fc2db656ce5d016968af9c428e6803cd5827706b7d09d8f11af2d203eed5bd6d3ade3df4a36520aedcca1e133cb861a09d51b35f1c543530bf616c09e3bf6d852ac2fa70f312a836a77c1d51f4db9a2514b7c2edd49349910b4ca1c51d1b48cecd095b67f8328828bce48fe43c1b22dee835f1bdf3c816952d7ab5a5ab56d8a953e4aac8d7960e133a30e13bfac48a451615440e7352fc78daef0e94ce5fb53e9304f014a665f0bb6bf20c8bcef9f81104de0d71eeed373d3f69df851a3062346b6461af8bc3761bf50d954498468af7598a85f56b071cc83792", 0xea, 0x10}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000001900)) 2m1.196679332s ago: executing program 3 (id=2051): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x68, &(0x7f0000002040)=ANY=[@ANYRES16=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m0.881397678s ago: executing program 3 (id=2052): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1000002, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x4, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m0.600808518s ago: executing program 5 (id=2022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000380)=ANY=[@ANYBLOB="6eff0000010405000000000000000600000a000200000000020010000000ac8c0b00c2288ebf13b604898c1b76bd5041dc7e5d7785373e615f090000000000190000000000004012a6a171be6356713c856d72675aa9769f50aef0c97f8e3c832925f1a88067bef581e438a386c16a77d5573067953b376dbe0e1710de3aab86275a502bdbbbc16de06cd2b2384bc29422dbfb999bf4"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000680)="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", 0x223, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='westwood', 0x8) (async) recvfrom$inet(r0, &(0x7f0000000b80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112f00000000008510000002000000720000007600000095000000000000009500a50500"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003b00000126ff7000ffdbdf252704000083c27781c6ea0164"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 2m0.426391285s ago: executing program 3 (id=2053): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x208, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x21}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) syz_extract_tcp_res(0x0, 0x590, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m59.961401738s ago: executing program 5 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c00018006000600884700005000"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m59.681008649s ago: executing program 5 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x108902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m58.804278604s ago: executing program 6 (id=2028): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001800)=ANY=[@ANYBLOB="40000000100039042cfd7000eafffaff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac14140006000e0040000000"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c8", 0x9a}], 0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/4115, 0x1013}], 0x2) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000016c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x74}, 0x1, 0x0, 0x0, 0x44048811}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000001700)=0xffffffff, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'pimreg0\x00', 0xfff}, 0x18) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x1a0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) bind$unix(r3, &(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e) socket$packet(0x11, 0x4, 0x300) getsockname$inet6(r1, &(0x7f0000000100), &(0x7f0000001740)=0x1c) 1m55.829314991s ago: executing program 0 (id=2059): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r0, @ANYRES16=r0], 0x24}}, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/111, 0x6f}, {&(0x7f00000018c0)=""/133, 0x85}], 0x9}}], 0x1, 0x40010122, 0x0) r1 = socket$inet(0x2, 0x1, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x64010101}, {0x307, @local}, 0x48, {0x2, 0x0, @local}, 'bridge_slave_1\x00'}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1m55.412353291s ago: executing program 0 (id=2061): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, 0x0, 0x72) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000840)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) 1m55.278993424s ago: executing program 4 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 1m55.260468148s ago: executing program 0 (id=2063): r0 = socket$kcm(0x10, 0x7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000a0004050900010073797a31000000004c000480480001800a000100696e6e65720000003800028008000440000000121400058004000100696d6d656469617465000000080003400000000f080002400000008408000140000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000f0ff08000900000000000000000000280000950000000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff3e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1003}, 0x94) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000300)='espintcp', 0x8) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x9, 0x9}, 0x0, &(0x7f0000000440)={0x3ff, 0x5, 0x20000000000, 0x9, 0x1, 0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0xb, 0x5, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070000001e0000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x40800}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001080)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) sendmmsg$unix(r9, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [r10, r10]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x50, 0x40800}}], 0x1, 0x0) r14 = gettid() r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) sendmsg$netlink(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r18}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x65, 0x0, 0x0, @str='^^\x00'}]}]}, 0x30}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="3a7adc48ee4de7278f6b0e54aba5aa923c56213e2ef63d3c151b63bbbc7d9e342a68e20efe6e43bd8de6e348ed4e29151c541485498437709251b2c9cabc51b3f971cb276397e099682a630d8db52cf1f083264388e48641c254188e9059b99b4493217df7bd78f8bb4fe8689e1e16f9e6aba9f75ff8f758e4da038a41bc5c174859b916f894ebfc3689a5f1ba96b43fcfd0fc6a50e8059c01f96f4985bf1eebebf1572d2aa1d2", 0xa7}, {&(0x7f0000000d00)="50d57b6831e8ee33967964a1bd83fe591ab1820bbf10fdd63704b6740ca158dbe1d26696b19c8c7d4cfc32bb902a10391d1e488aec01226cdbcb0e080ec9be9bed778e59653ff9abc01ff49093e71e2c6e4f15e73c0f9803d650126a547a684c55502d5ba5b56ebdfd185f0459c12aedc371e7bcd6655f91a3a55d7d8d42d193ac372f9ff627d19578a58d3f6a02a081be310a325b6e0763fed3212982c01e1dbd3b37669f88cdb2ad6cce937e558fc13de97e5e0f4725a07712bb9741c8438306738a48c71d382de50df1045dc87d", 0xcf}], 0x2, &(0x7f00000008c0)=[@rights={{0x24, 0x1, 0x1, [r1, r4, r6, r6, r5]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r18, r19}}}], 0x78, 0xc880}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000002c0)="39948c1f70dd170895", 0x9}, {&(0x7f0000000a00)="ef050b787da722b1d191856701bc5f7e960a08912a68d5d59e7ccc0074bf47b5d26d4e809ada214db63af6948c7e37342686266cfd35c46a50f8a182e68d8f914d87d49eb3654b2cff3c649f1174cb7e3b78d3044ad571050af957d49b66fc", 0x5f}, {&(0x7f0000000a80)="707dc475727bdd322cc9d3a9e34f2f1d140dda02a9fa9bb9b6bb0dc19d16e98e28f04b9e47dea608f9d456e3a63fc3f0297cf1851a3ce47c34c2ebaf600f549e4016c6173296693b42825263de43288f0d3fcd1b6e604f58e4d3cf18e2bbaa4af4d1d8b8b7a152e5661e729bb2fbdf2b62bd4b568385e159b84d43fb00f65532be", 0x81}, {&(0x7f0000000b40)="9df5a4d83568f4fbcaba9f37734e8187cefccba9fac7cae56016a0da39a6d80a90f77059e2b30a8f696be5af24f6646eff4fdb73644ff2d00d34faff3bf07f5eff4f39403a4ffecedaf938dd2c5f7d701225032a4797ec675f099bbc38c3f87a81c09d0c88cb921fabadd9d774d6c11f40163a074b2e5eac62420d95dd12fef69690f99a8c3ff2c7d54c20babd7f15c84cc38d4886a73120ff347c8bc2ca7c98ffc25aa01278e5fb850ffda5648d4fdd42ec3b24953ba5ea90de6e63e6504e86fec0c9", 0xc3}, {&(0x7f0000000c40)="626d6e921a87f9ae1e2a1606b892bd02a07020197a8e2f950c7fc8da2fe3d639629156cb3908593cf7782fc95dea262e62f6a2258528f2", 0x37}], 0x5, &(0x7f0000001580)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r6, r2, r10, r3, 0xffffffffffffffff, r15, 0xffffffffffffffff, r10, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r19}}}, @cred={{0x1c, 0x1, 0x2, {r14, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r17, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r18, r19}}}], 0xb8, 0x4}}], 0x2, 0x24004094) 1m55.113925608s ago: executing program 4 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400110040000901feffffff00000000017c0000040042800c0001800600060086dd0000500002"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m55.070105116s ago: executing program 4 (id=2065): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a00)={{0xffffffffffffffff, &(0x7f0000000000)='%#:-${\x00', 0x200, &(0x7f0000000040)={@align=0x9e22, {0x7, 0xfffb, 0x5, 0x7fffffff}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x5}, 0x6, &(0x7f00000008c0)=[{0x2, 0x9bc, &(0x7f0000000200)='^+[&+{.\x00', &(0x7f0000000240)="f67f62b9d3ead1d5782194fb5225fc489688a468a5b67055f0364b778fb3d937635841dbc6fa383371e68ac09f9d6c60bea06cabd385b7fc7053dc7577b5ebc3837c7fd94e9211ccf379ec5c6eed3d3f09689b63b229f094f5082b70ef119cac55795aa3c1b6127d4270be60017cfb8a938e8d2cab782d2d2430fd22157e3c6492ea812909e1abbb37b4b36cb666dcedeba7e3e6ec53e5d673df422ae190ad6d1e366f1d73f530734eed729610cd3a35266045daef931941ef03e496a4823f377c23158a3a70a3aa759bf25d518d35f13ac5442fbb", 0xd5}, {0x3, 0x0, &(0x7f0000000340)='!\xbf(\x00', &(0x7f0000000380)="fc0c31c6a131f4e49e95a720a9e2fb02b26078942ae8a0f821079978a731ea77f8a72e8ff5e685891fc36ded614e1c1175abbd832bc6ef478ac9a0234711a050fc38b4887c907a1e0943d24ef7dc067d7deee75852f1d7ba22e1739c00424818595ad9ec017381093dbdf19427e51bbe83eec979b133300a7f77beadcf7badaabbda884e67bb19190c4b99c6fdc286b41c55335cc177", 0x96, 0x28}, {0x0, 0x8, &(0x7f0000000440)='$\x00', &(0x7f0000000480)="5e64d47c56da0d8799c8ac2a5f3f793faf5b38c7b9e766ca55dcc327f5f8d5c3b27b117ef3487067477b28155c086ef0db46eed88f5b2615c051726611ea2824fe22b29dba7bec5bcdbb669ee81dfdc9d670e9cd5611c0418f28ea48b72f189f5e7608694796d81d6aebc6d7f38bb18acd05aca5521fe73003f2d7a3927a0c4bab0615b6d12dfe26e2b4c67698d70d7857804c9a91e437a2e2e529af49f114", 0x9f, 0x52}, {0x3, 0x597, &(0x7f0000000540)='][\x00', &(0x7f0000000580)="45ed50d93ca6d45e52deb5de8690790a18061a766ee157e9a05f6fae0a245f2f87e11f32c9292db6524c7e3123869c60f215dbf5a00895fcdc4023b6f67439", 0x3f, 0x1}, {0x1, 0x8, &(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)="b84120676be92fc0f7e51c32410a8b0bee416965b635c52e779c1282d59d12bfa9563a8c0690055982526b7add4f1fa2fd2e9ec69e95db65ffa088615fd34721a03d12c75f27ab661d57eb8c81ddb485585d96a4a1afaf2cb03e8fa8dcb30cfe0408c7f670482f4f44e4227535716a749582192d6c6a9d383b07f096722ee1f191760b9bc67914c7d4daabe637f63026a43372b738507c8c8472db66d0cd28528f646f85daa932a1937f06f3ad52eb9162953e54619870b337ed1ce0ce232c5e7e16", 0xc2}, {0x2, 0x4, &(0x7f0000000700)='GPL\x00', &(0x7f0000000740)="6aff92f61bc5af2cc095a7ae5aa44cbf951fcd29008d1adde1fd334891df4f1ebeb4c0b638bd5279c40e1d59a21db1f1c7b1a0fca354cbd090ddff70a9a144412fffcd37e697d97bd16d6a9afc23a4183ada306379bb794bcdd06f434dc256730c70394e6f0f76065e012dd3fe4813ba59ff7a", 0x73, 0xa}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x32b551d7, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400fbffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) 1m54.838203982s ago: executing program 4 (id=2066): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x2010, r0, 0x971d3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x2404c000}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="a01c6d22c41a8a97dc0cff994dc18295cc4b229d166f5f54d1e85527dadf7c331e526c3e61eb6edf5bd9fd8d370ba919a66dd1fd44a290a70f4e473550b5a920e4ef19de131c45f2a1c7806826113a00b4988613bd11568237ab7c9ad5c9c2f67ebbb8ed46d294bd6fe52c2d475a8f2185ff7d2d93ef1c220cb2f4e9d1da626b45591c0dd5d540fae567c108c19f0726d14aad7838b1506fad3676cc2ff70bb76e11b06732648ea1bd78e5ea679c293e7565fddfb9c10efac976139e350c", 0xbe}, {&(0x7f0000000140)="ce3adb8b60160a8bcfe938c49c2b3c538e1e42f626e48bc2e378b5309ff32f4fec77f8034f974928588d0c7ab539d2e7aca6a5d28fbae847c71f7a746a14f2a6795c3042447c45e7ac42b3abc6b6ed30f6c5931f21744443d312fd6c09fff5", 0x5f}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="fd51ba2a301cacf7f96965ece6eae13b9934bf5f4e643e03", 0x18}, {&(0x7f00000005c0)="422468b3b7ea5d5e1dfab8d8d015228e2777199de29645b619153dc24f3f0e5656d6c86209bdf2dc4ebf1c101b139b684ede3fe306aaec0a5c8356c45b235d5a02fd15a3edb9", 0x46}], 0x5, &(0x7f0000000340)=[@iv={0xd0, 0x117, 0x2, 0xb9, "8622b515806f4bea2aac2b3817cc0b605b01f61621b970b563773bc00527aae91b07d5139b76917b9b3ba5b5a68195ab7ca201ba6a7223d5267599fee946df13fa71275c461c1afe04ae8e93533842c929acf86d2a5c42e90e00422b2bb6fff8816a650bd8b5cf285541361e7dde85228fc4c66b09c00729ee4386062a3bb7006d65818164551dc042403b10399d36a3fb55e04178de1b35c529db377b869d723cadfdbc5f35db00a810d8171fc873903a0d89bfba3690ad77"}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x130, 0x20040000}], 0x2, 0x40800) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xaf}}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x400, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) recvmsg(r2, 0x0, 0x0) 1m54.238549347s ago: executing program 0 (id=2067): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000640)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000680)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000740)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x3ae, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x3ae, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000780)=0x100000b3, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000780)=0x100000b3, 0x4) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000800)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000880)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:root_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xf9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) 1m53.917648027s ago: executing program 0 (id=2068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001480)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m53.811394252s ago: executing program 0 (id=2069): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3500000002"], 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000080)=0x100ce, 0x4) 1m53.57646499s ago: executing program 4 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c0001800600060088470000500002"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m53.445061569s ago: executing program 4 (id=2071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private2, 0x0, r6}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x86, 0xa5}]}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x3}, 0x28) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, 0x0, 0x0) (async) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@private2, r6}, 0x14) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 0s ago: executing program 34 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x108902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): 9][T10032] macsec1: left promiscuous mode [ 289.300893][T10032] bond3: left promiscuous mode [ 289.301667][T10032] gretap0: left promiscuous mode [ 289.322443][T10032] bond5: left promiscuous mode [ 289.322466][T10032] geneve2: left promiscuous mode [ 289.337240][T10032] syzkaller0: left promiscuous mode [ 289.374501][ T87] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.374545][ T87] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.374579][ T87] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.374654][ T87] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.374686][ T87] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.374716][ T87] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.374760][ T87] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.374791][ T87] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.374822][ T87] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.374865][ T87] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.374896][ T87] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.374926][ T87] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.790112][T10081] dvmrp0: entered allmulticast mode [ 289.792514][T10081] dvmrp0: left allmulticast mode [ 289.868625][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 289.870633][T10088] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 289.929500][T10089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.946'. [ 289.964740][T10093] ip_tables: iptables: counters copy to user failed while replacing table [ 290.196585][T10104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.951'. [ 290.404990][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'. [ 290.405028][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 290.434499][T10116] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 290.434520][T10116] netlink: 244 bytes leftover after parsing attributes in process `syz.0.956'. [ 290.569592][ T30] audit: type=1800 audit(1792859490.398:5): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.955" name="blkio.bfq.time" dev="tmpfs" ino=977 res=0 errno=-22 [ 290.658531][T10123] rxe_eth0 speed is unknown, defaulting to 1000 [ 290.905899][T10136] ip_tables: iptables: counters copy to user failed while replacing table [ 290.955884][T10137] IPv6: Can't replace route, no match found [ 291.296413][T10154] Cannot find del_set index 1 as target [ 291.299752][T10154] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 291.572928][T10169] Bluetooth: hci0: unsupported parameter 5135 [ 291.572953][T10169] Bluetooth: hci0: unsupported parameter 8192 [ 291.572967][T10169] Bluetooth: hci0: unsupported parameter 5135 [ 291.572992][T10169] Bluetooth: hci0: unsupported parameter 8192 [ 291.671880][T10171] syzkaller0: entered promiscuous mode [ 291.671924][T10171] syzkaller0: entered allmulticast mode [ 292.314167][T10183] veth0: entered promiscuous mode [ 292.433260][T10185] veth0: left promiscuous mode [ 292.509803][T10197] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 292.797360][T10205] ip_tables: iptables: counters copy to user failed while replacing table [ 292.919080][T10211] __nla_validate_parse: 3 callbacks suppressed [ 292.919103][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 293.915345][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'. [ 294.359598][T10278] ip_tables: iptables: counters copy to user failed while replacing table [ 294.441359][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 294.546481][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 295.201622][T10318] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 295.322558][T10327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.993'. [ 295.371320][T10327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.498572][T10332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.538397][T10332] bond5: (slave geneve2): making interface the new active one [ 295.562082][T10332] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 295.718056][ T87] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 295.718341][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 295.718388][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 295.741531][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 295.831002][T10355] ip_tables: iptables: counters copy to user failed while replacing table [ 296.353373][T10383] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 296.480023][T10386] bond6: (slave veth13): Enslaving as an active interface with a down link [ 296.536891][T10383] bond6: (slave veth0_to_bond): making interface the new active one [ 296.539905][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 296.543053][T10383] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 296.610863][T10386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.771054][T10404] ip_tables: iptables: counters copy to user failed while replacing table [ 296.970642][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 297.005346][T10393] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 297.164513][T10414] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1015'. [ 297.336859][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 299.827724][T10468] ip_tables: iptables: counters copy to user failed while replacing table [ 300.238864][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 300.239062][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 300.267795][T10490] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 300.626508][T10502] Bluetooth: hci0: unsupported parameter 5135 [ 300.626536][T10502] Bluetooth: hci0: unsupported parameter 8192 [ 300.626551][T10502] Bluetooth: hci0: unsupported parameter 5135 [ 300.626566][T10502] Bluetooth: hci0: unsupported parameter 8192 [ 300.886646][T10514] macsec2: entered promiscuous mode [ 300.908996][T10514] xt_hashlimit: invalid rate [ 301.015333][T10521] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 301.082967][T10521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.149864][T10528] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 301.390488][T10548] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 301.869152][ T8181] IPVS: starting estimator thread 0... [ 301.954624][T10571] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.962513][T10569] syzkaller0: left allmulticast mode [ 301.966664][ T8172] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.966967][ T8172] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.967089][ T8172] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.967183][ T8172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.347943][T10582] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1051'. [ 302.487933][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 302.501273][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 302.621051][T10581] syzkaller0: entered promiscuous mode [ 302.621082][T10581] syzkaller0: entered allmulticast mode [ 302.767167][T10599] ip_tables: iptables: counters copy to user failed while replacing table [ 303.135880][T10621] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 304.718789][T10621] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 304.726298][T10624] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 304.793222][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 304.841651][T10624] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.954818][T10624] bond8: (slave bridge0): making interface the new active one [ 304.960626][T10624] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 305.060519][T10634] syzkaller0: entered promiscuous mode [ 305.060546][T10634] syzkaller0: entered allmulticast mode [ 305.272727][T10649] ip_tables: iptables: counters copy to user failed while replacing table [ 305.479525][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 305.508702][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 305.860346][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 305.881661][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 305.939479][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 305.965005][T10686] syzkaller0: entered promiscuous mode [ 305.965032][T10686] syzkaller0: entered allmulticast mode [ 305.993117][T10677] tipc: Enabled bearer , priority 0 [ 306.032336][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.055466][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.131527][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.179120][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.200534][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.208451][T10673] tipc: Resetting bearer [ 306.229893][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.231999][T10666] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 306.361344][T10673] tipc: Disabling bearer [ 306.527565][T10711] vlan2: entered allmulticast mode [ 306.527593][T10711] bond0: entered allmulticast mode [ 306.527609][T10711] bond_slave_0: entered allmulticast mode [ 306.527627][T10711] bond_slave_1: entered allmulticast mode [ 306.648816][T10734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1075'. [ 306.649963][T10734] lo: entered promiscuous mode [ 306.650173][T10734] tunl0: entered promiscuous mode [ 306.650329][T10734] gre0: entered promiscuous mode [ 306.650571][T10734] erspan0: entered promiscuous mode [ 306.650700][T10734] ip_vti0: entered promiscuous mode [ 306.650870][T10734] ip6_vti0: entered promiscuous mode [ 306.651003][T10734] sit0: entered promiscuous mode [ 306.651121][T10734] ip6tnl0: entered promiscuous mode [ 306.651240][T10734] ip6gre0: entered promiscuous mode [ 306.651367][T10734] syz_tun: entered promiscuous mode [ 306.651642][T10734] ip6gretap0: entered promiscuous mode [ 306.651766][T10734] bridge0: entered promiscuous mode [ 306.651902][T10734] vcan0: entered promiscuous mode [ 306.652047][T10734] bond0: entered promiscuous mode [ 306.652176][T10734] dummy0: entered promiscuous mode [ 306.652326][T10734] nlmon0: entered promiscuous mode [ 306.652680][T10734] batadv0: entered promiscuous mode [ 306.652837][T10734] vxcan0: entered promiscuous mode [ 306.653024][T10734] vxcan1: entered promiscuous mode [ 306.653184][T10734] veth0: entered promiscuous mode [ 306.659523][T10734] veth1: entered promiscuous mode [ 306.659709][T10734] wg0: entered promiscuous mode [ 306.659876][T10734] wg2: entered promiscuous mode [ 306.660042][T10734] veth0_to_bridge: entered promiscuous mode [ 306.661227][T10734] veth1_to_bridge: entered promiscuous mode [ 306.661500][T10734] bridge_slave_1: entered promiscuous mode [ 306.661960][T10734] veth0_to_bond: entered promiscuous mode [ 306.662368][T10734] bond_slave_0: entered promiscuous mode [ 306.677736][T10734] veth1_to_bond: entered promiscuous mode [ 306.678282][T10734] bond_slave_1: entered promiscuous mode [ 306.678810][T10734] veth0_to_team: entered promiscuous mode [ 306.679295][T10734] team_slave_0: entered promiscuous mode [ 306.679715][T10734] veth1_to_team: entered promiscuous mode [ 306.680121][T10734] team_slave_1: entered promiscuous mode [ 306.680516][T10734] veth0_to_batadv: entered promiscuous mode [ 306.680936][T10734] batadv_slave_0: entered promiscuous mode [ 306.681325][T10734] veth1_to_batadv: entered promiscuous mode [ 306.681615][T10734] batadv_slave_1: entered promiscuous mode [ 306.682079][T10734] xfrm0: entered promiscuous mode [ 306.682504][T10734] veth0_to_hsr: entered promiscuous mode [ 306.762814][T10734] veth1_to_hsr: entered promiscuous mode [ 306.809483][T10734] hsr0: entered promiscuous mode [ 306.809931][T10734] veth1_virt_wifi: entered promiscuous mode [ 306.810317][T10734] veth0_virt_wifi: entered promiscuous mode [ 306.845244][T10734] virt_wifi0: entered promiscuous mode [ 306.846350][T10734] vlan0: entered promiscuous mode [ 306.847277][T10734] vlan1: entered promiscuous mode [ 306.848034][T10734] macvlan0: entered promiscuous mode [ 306.848474][T10734] macvlan1: entered promiscuous mode [ 306.892678][T10734] ipvlan0: entered promiscuous mode [ 306.892937][T10734] ipvlan1: entered promiscuous mode [ 306.960741][T10734] macvtap0: entered promiscuous mode [ 306.960890][T10734] macsec0: entered promiscuous mode [ 306.960998][T10734] geneve0: entered promiscuous mode [ 306.966760][T10734] geneve1: entered promiscuous mode [ 306.966956][T10734] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 306.967103][T10734] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 306.997725][T10734] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 306.998215][T10734] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 306.998657][T10734] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 306.999058][T10734] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 307.001848][T10734] bond1: entered promiscuous mode [ 307.002012][T10734] syztnl2: entered promiscuous mode [ 307.002152][T10734] syztnl1: entered promiscuous mode [ 307.002274][T10734] veth2: entered promiscuous mode [ 307.002466][T10734] veth3: entered promiscuous mode [ 307.002626][T10734] wireguard0: entered promiscuous mode [ 307.002762][T10734] bond2: entered promiscuous mode [ 307.003125][T10734] ip6erspan0: entered promiscuous mode [ 307.058859][T10734] macsec1: entered promiscuous mode [ 307.059284][T10734] bond3: entered promiscuous mode [ 307.059740][T10734] mac80211_hwsim hwsim11 nicvf0: entered promiscuous mode [ 307.060274][T10734] bridge1: entered promiscuous mode [ 307.076093][T10734] bond4: entered promiscuous mode [ 307.077045][T10734] gretap0: entered promiscuous mode [ 307.077380][T10734] gtp0: entered promiscuous mode [ 307.077851][T10734] gtp1: entered promiscuous mode [ 307.078280][T10734] bond5: entered promiscuous mode [ 307.078322][T10734] geneve2: entered promiscuous mode [ 307.138239][T10734] syzkaller0: entered promiscuous mode [ 307.140514][T10734] macvlan2: entered promiscuous mode [ 307.140707][T10734] macvlan3: entered promiscuous mode [ 307.140863][T10734] gre1: entered promiscuous mode [ 307.140998][T10734] vrf0: entered promiscuous mode [ 307.141151][T10734] vrf1: entered promiscuous mode [ 307.141282][T10734] gre2: entered promiscuous mode [ 307.182472][T10734] ip6tnl1: entered promiscuous mode [ 307.191995][T10734] vlan1.0: entered promiscuous mode [ 307.214285][ T87] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.214377][ T87] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.214418][ T87] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.214457][ T87] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.330832][T10739] ip6gretap0: entered promiscuous mode [ 307.641974][T10750] syzkaller0: entered promiscuous mode [ 307.641999][T10750] syzkaller0: entered allmulticast mode [ 307.991930][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 307.991956][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 308.084305][T10771] netlink: 'syz.2.1083': attribute type 21 has an invalid length. [ 308.084396][T10771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1083'. [ 309.169155][T10809] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1090'. [ 309.726959][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 309.726997][T10836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1097'. [ 309.771280][T10832] A link change request failed with some changes committed already. Interface ..ãc¤± may have been left with an inconsistent configuration, please check. [ 309.810055][T10836] geneve3: entered promiscuous mode [ 309.810082][T10836] geneve3: entered allmulticast mode [ 309.843850][ T1017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.843985][ T1017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.844028][ T1017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.844068][ T1017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.037598][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 310.062761][T10844] Bluetooth: MGMT ver 1.23 [ 310.102587][T10842] syzkaller1: entered promiscuous mode [ 310.102612][T10842] syzkaller1: entered allmulticast mode [ 310.190242][T10847] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 310.266888][T10852] syzkaller0: entered promiscuous mode [ 310.266913][T10852] syzkaller0: entered allmulticast mode [ 310.307615][T10852] tipc: Enabled bearer , priority 0 [ 310.451468][T10858] tipc: Resetting bearer [ 310.593560][T10864] pimreg0: tun_chr_ioctl cmd 1074025677 [ 310.593687][T10864] pimreg0: linktype set to 768 [ 311.152032][T10885] __nla_validate_parse: 4 callbacks suppressed [ 311.152056][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 313.171206][T10883] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1108'. [ 313.245383][ T192] tipc: Node number set to 4084883001 [ 313.261766][T10851] tipc: Resetting bearer [ 313.360861][T10851] tipc: Disabling bearer [ 313.858005][T10927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.858026][T10927] IPv6: NLM_F_CREATE should be set when creating new route [ 313.858075][T10927] IPv6: NLM_F_CREATE should be set when creating new route [ 313.858103][T10927] IPv6: NLM_F_CREATE should be set when creating new route [ 313.904674][T10928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1122'. [ 313.904707][T10928] nbd: must specify at least one socket [ 313.936698][T10928] block nbd4: not configured, cannot reconfigure [ 313.993701][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1123'. [ 314.141109][T10936] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1126'. [ 314.141149][T10936] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1126'. [ 314.141165][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 314.146413][ T30] audit: type=1107 audit(1792859513.968:6): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.170942][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 314.265796][T10936] tipc: Started in network mode [ 314.265854][T10936] tipc: Node identity 1000001, cluster identity 2577 [ 314.265896][T10936] tipc: Node number set to 16777217 [ 314.499905][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 314.499930][T10944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1129'. [ 314.533882][T10943] ip_tables: iptables: counters copy to user failed while replacing table [ 314.925721][T10963] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 314.945800][T10965] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 315.074668][T10974] batman_adv: batadv0: Adding interface: veth0 [ 315.074688][T10974] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.074723][T10974] batman_adv: batadv0: Interface activated: veth0 [ 315.262398][T10988] ip_tables: iptables: counters copy to user failed while replacing table [ 315.691846][T10998] netlink: 'syz.4.1143': attribute type 4 has an invalid length. [ 315.948179][T11017] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 316.237074][T11033] ip_tables: iptables: counters copy to user failed while replacing table [ 316.420421][T11037] __nla_validate_parse: 5 callbacks suppressed [ 316.420445][T11037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1154'. [ 316.501781][T11037] hsr_slave_0 (unregistering): left promiscuous mode [ 317.040407][T11067] syzkaller0: entered promiscuous mode [ 317.040426][T11067] syzkaller0: entered allmulticast mode [ 317.269051][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.318125][T11080] ip_tables: iptables: counters copy to user failed while replacing table [ 317.385545][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1168'. [ 317.385638][T11082] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 317.388461][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1168'. [ 317.545257][T11094] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 317.738819][T11098] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 317.769833][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1173'. [ 317.848870][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 317.848897][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 317.861205][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 317.861282][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 318.100527][T11116] ip_tables: iptables: counters copy to user failed while replacing table [ 318.280265][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'. [ 318.733914][T11141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1183'. [ 318.941588][T11149] netlink: 'syz.1.1185': attribute type 4 has an invalid length. [ 318.960366][T11149] .`: renamed from bond0 (while UP) [ 319.006147][T11153] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 319.006172][T11153] netlink: 'syz.3.1187': attribute type 2 has an invalid length. [ 320.192864][T11202] syzkaller1: entered promiscuous mode [ 320.235454][T11205] tipc: Enabling of bearer rejected, failed to enable media [ 320.372481][T11207] syzkaller0: entered promiscuous mode [ 320.372507][T11207] syzkaller0: entered allmulticast mode [ 320.396797][T11207] TC_ACT_REPEAT abuse ? [ 320.454355][T11210] vcan0: tx address claim with dest, not broadcast [ 320.454584][T11209] vcan0: tx address claim with dest, not broadcast [ 320.487775][T11212] syzkaller0: entered allmulticast mode [ 320.507770][T11212] sch_tbf: burst 10 is lower than device syzkaller0 mtu (1514) ! [ 320.524601][ T87] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.524699][ T1017] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.524740][ T1017] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.524777][ T1017] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.633701][T11215] netlink: 'syz.4.1206': attribute type 3 has an invalid length. [ 321.187266][T11238] bond8: (slave veth3): Enslaving as an active interface with an up link [ 321.355324][T11244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.818067][T11273] sctp: [Deprecated]: syz.0.1219 (pid 11273) Use of int in maxseg socket option. [ 321.818067][T11273] Use struct sctp_assoc_value instead [ 321.878078][T11290] __nla_validate_parse: 13 callbacks suppressed [ 321.878098][T11290] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1220'. [ 321.879688][T11276] bond6: option arp_all_targets: invalid value (3) [ 321.889910][T11273] netlink: 'syz.0.1219': attribute type 39 has an invalid length. [ 321.896267][T11276] bond6 (unregistering): Released all slaves [ 322.071972][T11296] xt_hashlimit: size too large, truncated to 1048576 [ 322.153885][T11302] sctp: [Deprecated]: syz.2.1218 (pid 11302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.153885][T11302] Use struct sctp_sack_info instead [ 322.161281][ T30] audit: type=1107 audit(1792859521.988:7): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 322.281611][T11290] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 322.402606][T11290] 0ªX¹¦Dö»: entered allmulticast mode [ 323.319195][T11285] bond0: (slave vlan2): Opening slave failed [ 323.474950][T11319] ip_tables: iptables: counters copy to user failed while replacing table [ 323.892348][T11332] bridge5: entered allmulticast mode [ 324.146245][T11336] tipc: Enabled bearer , priority 0 [ 324.260537][T11336] syzkaller0: entered promiscuous mode [ 324.260567][T11336] syzkaller0: entered allmulticast mode [ 324.261510][T11336] tipc: Resetting bearer [ 324.335691][T11335] tipc: Resetting bearer [ 326.727596][T11335] tipc: Disabling bearer [ 326.732878][ T192] tipc: Node number set to 959596583 [ 326.884730][T11351] syzkaller0: entered promiscuous mode [ 326.884766][T11351] syzkaller0: entered allmulticast mode [ 327.199393][T11355] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 329.287711][T11355] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 329.412054][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1236'. [ 329.412138][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1236'. [ 329.769533][T11372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.819845][T11372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.137069][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 331.137097][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 331.259049][T11387] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.1242'. [ 331.259303][T11385] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.1242'. [ 331.302427][T11388] FAULT_INJECTION: forcing a failure. [ 331.302427][T11388] name failslab, interval 1, probability 0, space 0, times 1 [ 331.302463][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.1.1241 Not tainted syzkaller #0 PREEMPT(full) [ 331.302487][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.302507][T11388] Call Trace: [ 331.302516][T11388] [ 331.302526][T11388] dump_stack_lvl+0xe8/0x150 [ 331.302565][T11388] should_fail_ex+0x410/0x560 [ 331.302604][T11388] should_failslab+0xa8/0x100 [ 331.302641][T11388] __kmalloc_noprof+0xf9/0x710 [ 331.302671][T11388] ? tomoyo_encode+0x2ad/0x570 [ 331.302698][T11388] ? tomoyo_encode+0x2ad/0x570 [ 331.302734][T11388] tomoyo_encode+0x2ad/0x570 [ 331.302771][T11388] tomoyo_realpath_from_path+0x5fa/0x640 [ 331.302812][T11388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 331.302838][T11388] tomoyo_path_number_perm+0x246/0x5f0 [ 331.302866][T11388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.302889][T11388] ? __lock_acquire+0x747/0x2de0 [ 331.302965][T11388] ? __fget_files+0x2a/0x420 [ 331.302993][T11388] ? __fget_files+0x2a/0x420 [ 331.303017][T11388] ? __fget_files+0x2a/0x420 [ 331.303047][T11388] security_file_ioctl+0xc3/0x2a0 [ 331.303073][T11388] __se_sys_ioctl+0x47/0x170 [ 331.303106][T11388] do_syscall_64+0x166/0x520 [ 331.303127][T11388] ? trace_irq_disable+0x3b/0x140 [ 331.303153][T11388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.303176][T11388] ? clear_bhb_loop+0x70/0xc0 [ 331.303204][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.303226][T11388] RIP: 0033:0x7f16a799f559 [ 331.303246][T11388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.303291][T11388] RSP: 002b:00007f16a87ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.303314][T11388] RAX: ffffffffffffffda RBX: 00007f16a7c26090 RCX: 00007f16a799f559 [ 331.303330][T11388] RDX: 0000200000000400 RSI: 0000000000008914 RDI: 0000000000000005 [ 331.303345][T11388] RBP: 00007f16a87ac090 R08: 0000000000000000 R09: 0000000000000000 [ 331.303359][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.303373][T11388] R13: 00007f16a7c26128 R14: 00007f16a7c26090 R15: 00007fff9da4b428 [ 331.303411][T11388] [ 331.327935][T11388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.681699][T11396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.694709][T11396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.866538][T11401] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 331.868233][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 331.868267][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 332.486572][T11411] FAULT_INJECTION: forcing a failure. [ 332.486572][T11411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.486609][T11411] CPU: 0 UID: 0 PID: 11411 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) [ 332.486642][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.486655][T11411] Call Trace: [ 332.486663][T11411] [ 332.486672][T11411] dump_stack_lvl+0xe8/0x150 [ 332.486709][T11411] should_fail_ex+0x410/0x560 [ 332.486745][T11411] _copy_from_user+0x2d/0xb0 [ 332.486776][T11411] ___sys_sendmsg+0x1c6/0x360 [ 332.486808][T11411] ? __lock_acquire+0x747/0x2de0 [ 332.486837][T11411] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.486907][T11411] ? __fget_files+0x3a2/0x420 [ 332.486929][T11411] ? __fget_files+0x2a/0x420 [ 332.486960][T11411] __x64_sys_sendmsg+0x1b1/0x290 [ 332.486983][T11411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.487038][T11411] do_syscall_64+0x166/0x520 [ 332.487058][T11411] ? trace_irq_disable+0x3b/0x140 [ 332.487082][T11411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.487103][T11411] ? clear_bhb_loop+0x70/0xc0 [ 332.487129][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.487149][T11411] RIP: 0033:0x7f890bb9f559 [ 332.487169][T11411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.487187][T11411] RSP: 002b:00007f890c9d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.487209][T11411] RAX: ffffffffffffffda RBX: 00007f890be26090 RCX: 00007f890bb9f559 [ 332.487224][T11411] RDX: 0000000020008000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 332.487251][T11411] RBP: 00007f890c9d8090 R08: 0000000000000000 R09: 0000000000000000 [ 332.487264][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.487277][T11411] R13: 00007f890be26128 R14: 00007f890be26090 R15: 00007ffc1c587318 [ 332.487312][T11411] [ 334.417826][T11443] bridge_slave_1: default FDB implementation only supports local addresses [ 334.501936][T11444] tap0: tun_chr_ioctl cmd 21731 [ 334.916644][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 334.997916][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 335.266093][T11475] FAULT_INJECTION: forcing a failure. [ 335.266093][T11475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.266129][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.3.1267 Not tainted syzkaller #0 PREEMPT(full) [ 335.266155][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.266170][T11475] Call Trace: [ 335.266178][T11475] [ 335.266189][T11475] dump_stack_lvl+0xe8/0x150 [ 335.266229][T11475] should_fail_ex+0x410/0x560 [ 335.266268][T11475] _copy_from_user+0x2d/0xb0 [ 335.266302][T11475] sock_do_ioctl+0x195/0x320 [ 335.266338][T11475] ? __pfx_sock_do_ioctl+0x10/0x10 [ 335.266383][T11475] sock_ioctl+0x57a/0x7e0 [ 335.266409][T11475] ? __fget_files+0x2a/0x420 [ 335.266434][T11475] ? __pfx_sock_ioctl+0x10/0x10 [ 335.266459][T11475] ? __fget_files+0x2a/0x420 [ 335.266492][T11475] ? __fget_files+0x2a/0x420 [ 335.266521][T11475] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.266546][T11475] ? __pfx_sock_ioctl+0x10/0x10 [ 335.266571][T11475] __se_sys_ioctl+0xfc/0x170 [ 335.266605][T11475] do_syscall_64+0x166/0x520 [ 335.266627][T11475] ? trace_irq_disable+0x3b/0x140 [ 335.266654][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.266677][T11475] ? clear_bhb_loop+0x70/0xc0 [ 335.266705][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.266728][T11475] RIP: 0033:0x7f373c39f559 [ 335.266749][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.266768][T11475] RSP: 002b:00007f373d297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.266793][T11475] RAX: ffffffffffffffda RBX: 00007f373c626090 RCX: 00007f373c39f559 [ 335.266810][T11475] RDX: 0000200000000400 RSI: 0000000000008914 RDI: 0000000000000005 [ 335.266824][T11475] RBP: 00007f373d297090 R08: 0000000000000000 R09: 0000000000000000 [ 335.266838][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.266852][T11475] R13: 00007f373c626128 R14: 00007f373c626090 R15: 00007ffd7817f8f8 [ 335.266889][T11475] [ 335.534065][T11463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.121082][T11491] netlink: 'syz.2.1272': attribute type 16 has an invalid length. [ 336.121107][T11491] netlink: 'syz.2.1272': attribute type 17 has an invalid length. [ 336.150906][T11491] tunl0: left promiscuous mode [ 336.152754][T11505] netlink: 'syz.0.1275': attribute type 3 has an invalid length. [ 336.152778][T11505] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1275'. [ 336.181591][T11491] gre0: left promiscuous mode [ 336.199738][T11491] 0ªX¹¦Dö»: left allmulticast mode [ 336.211363][T11491] erspan0: left promiscuous mode [ 336.222615][T11491] ip_vti0: left promiscuous mode [ 336.236743][T11491] ip6_vti0: left promiscuous mode [ 336.242680][T11491] sit0: left promiscuous mode [ 336.280809][T11491] ip6tnl0: left promiscuous mode [ 336.291888][T11491] ip6gre0: left promiscuous mode [ 336.305862][T11491] syz_tun: left promiscuous mode [ 336.310994][T11491] ip6gretap0: left promiscuous mode [ 336.320399][T11491] bridge0: left promiscuous mode [ 336.332468][T11491] vcan0: left promiscuous mode [ 336.345707][T11491] bond0: left promiscuous mode [ 336.347382][T11491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.350582][T11491] dummy0: left promiscuous mode [ 336.376894][T11491] nlmon0: left promiscuous mode [ 336.382972][T11491] batadv0: left promiscuous mode [ 336.395516][T11491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.402308][T11491] vxcan0: left promiscuous mode [ 336.416586][T11491] vxcan1: left promiscuous mode [ 336.420303][T11491] veth0: left promiscuous mode [ 336.422563][T11491] veth1: left promiscuous mode [ 336.441470][T11491] wg0: left promiscuous mode [ 336.455238][T11491] wg2: left promiscuous mode [ 336.456172][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.456691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.459844][T11491] veth0_to_bridge: left promiscuous mode [ 336.462680][T11491] veth1_to_bridge: left promiscuous mode [ 336.468001][T11491] bridge_slave_1: left promiscuous mode [ 336.469442][T11491] veth0_to_bond: left promiscuous mode [ 336.476568][T11491] bond_slave_0: left promiscuous mode [ 336.483013][T11491] veth1_to_bond: left promiscuous mode [ 336.509969][T11491] bond_slave_1: left promiscuous mode [ 336.526620][T11491] veth0_to_team: left promiscuous mode [ 336.528492][T11491] team_slave_0: left promiscuous mode [ 336.529258][T11491] veth1_to_team: left promiscuous mode [ 336.530321][T11491] team_slave_1: left promiscuous mode [ 336.531381][T11491] veth0_to_batadv: left promiscuous mode [ 336.532821][T11491] batadv_slave_0: left promiscuous mode [ 336.538560][T11491] veth1_to_batadv: left promiscuous mode [ 336.542121][T11491] batadv_slave_1: left promiscuous mode [ 336.549142][T11491] xfrm0: left promiscuous mode [ 336.558346][T11491] veth0_to_hsr: left promiscuous mode [ 336.571702][T11491] veth1_to_hsr: left promiscuous mode [ 336.580795][T11491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.580859][T11491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.582230][T11491] hsr0: left promiscuous mode [ 336.605851][T11491] veth1_virt_wifi: left promiscuous mode [ 336.630235][T11491] veth0_virt_wifi: left promiscuous mode [ 336.631809][T11491] virt_wifi0: left promiscuous mode [ 336.631831][T11491] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 336.711252][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.711388][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.817789][T11522] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 336.852520][T11527] netlink: 'syz.4.1279': attribute type 30 has an invalid length. [ 336.972640][T11533] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1278'. [ 337.051680][T11533] bond7: entered promiscuous mode [ 337.055467][T11533] bond7: entered allmulticast mode [ 337.058715][T11533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.530582][T11558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1285'. [ 337.625587][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 338.232347][T11595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1290'. [ 338.232585][T11597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1290'. [ 338.232895][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1290'. [ 338.655398][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 339.573908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.574268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.574598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.681119][T11646] Set syz1 is full, maxelem 1029 reached [ 339.700746][T11646] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.736765][T11651] sch_tbf: burst 10 is lower than device syzkaller0 mtu (313) ! [ 339.940950][T11658] __nla_validate_parse: 3 callbacks suppressed [ 339.940976][T11658] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1304'. [ 340.037551][T11662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.119233][T11667] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 340.174980][T11671] netlink: zone id is out of range [ 340.269748][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1314'. [ 340.638139][T11694] sctp: [Deprecated]: syz.4.1317 (pid 11694) Use of int in maxseg socket option. [ 340.638139][T11694] Use struct sctp_assoc_value instead [ 340.652924][T11697] veth1_vlan: mtu less than device minimum [ 340.760207][T11700] tipc: Enabling of bearer rejected, failed to enable media [ 341.035775][T11709] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 341.036021][T11709] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 341.156371][T11709] netlink: 'syz.1.1321': attribute type 7 has an invalid length. [ 341.156396][T11709] netlink: 'syz.1.1321': attribute type 3 has an invalid length. [ 341.156411][T11709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1321'. [ 341.198006][T11714] netlink: 'syz.4.1323': attribute type 1 has an invalid length. [ 341.353789][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 341.357200][T11714] 8021q: adding VLAN 0 to HW filter on device bond10 [ 341.381110][T11721] macvlan2: entered promiscuous mode [ 341.381134][T11721] macvlan2: entered allmulticast mode [ 341.412461][T11714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1323'. [ 341.432839][T11707] netlink: 'syz.0.1320': attribute type 15 has an invalid length. [ 341.446762][T11723] netlink: 'syz.1.1324': attribute type 6 has an invalid length. [ 341.525444][T11722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.527442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.216186][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.216500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.865268][T11750] sch_tbf: burst 10 is lower than device syzkaller0 mtu (313) ! [ 344.120888][T11767] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1334'. [ 344.120917][T11767] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1334'. [ 344.175511][T11768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1337'. [ 344.224444][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1338'. [ 344.275046][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1339'. [ 344.435397][T11778] bridge_slave_0: left allmulticast mode [ 344.435424][T11778] bridge_slave_0: left promiscuous mode [ 344.435690][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.611219][T11790] FAULT_INJECTION: forcing a failure. [ 344.611219][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 344.611265][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.2.1345 Not tainted syzkaller #0 PREEMPT(full) [ 344.611294][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.611310][T11790] Call Trace: [ 344.611320][T11790] [ 344.611330][T11790] dump_stack_lvl+0xe8/0x150 [ 344.611374][T11790] should_fail_ex+0x410/0x560 [ 344.611420][T11790] should_failslab+0xa8/0x100 [ 344.611461][T11790] __kmalloc_noprof+0xf9/0x710 [ 344.611496][T11790] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 344.611523][T11790] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 344.611559][T11790] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 344.611597][T11790] genl_family_rcv_msg_doit+0xda/0x340 [ 344.611648][T11790] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 344.611700][T11790] ? apparmor_capable+0x126/0x170 [ 344.611742][T11790] ? bpf_lsm_capable+0x9/0x20 [ 344.611771][T11790] ? security_capable+0x7e/0x2c0 [ 344.611809][T11790] genl_rcv_msg+0x614/0x7a0 [ 344.611866][T11790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.611905][T11790] ? __pfx_ieee802154_llsec_add_key+0x10/0x10 [ 344.611954][T11790] netlink_rcv_skb+0x226/0x4a0 [ 344.611999][T11790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.612050][T11790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.612098][T11790] ? down_read+0x2b9/0x320 [ 344.612132][T11790] genl_rcv+0x28/0x40 [ 344.612168][T11790] netlink_unicast+0x8ef/0xa80 [ 344.612221][T11790] netlink_sendmsg+0x7f0/0xb20 [ 344.612261][T11790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.612299][T11790] ? aa_sock_msg_perm+0x144/0x210 [ 344.612337][T11790] ? apparmor_socket_sendmsg+0x18b/0x360 [ 344.612367][T11790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.612399][T11790] sock_sendmsg_nosec+0x14e/0x190 [ 344.612435][T11790] ____sys_sendmsg+0x54e/0x850 [ 344.612482][T11790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.612535][T11790] ? import_iovec+0x73/0xa0 [ 344.612577][T11790] ___sys_sendmsg+0x2a5/0x360 [ 344.612614][T11790] ? __lock_acquire+0x747/0x2de0 [ 344.612651][T11790] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.612743][T11790] ? __fget_files+0x3a2/0x420 [ 344.612770][T11790] ? __fget_files+0x2a/0x420 [ 344.612812][T11790] __x64_sys_sendmsg+0x1b1/0x290 [ 344.612842][T11790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.612912][T11790] do_syscall_64+0x166/0x520 [ 344.612937][T11790] ? trace_irq_disable+0x3b/0x140 [ 344.612967][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.612994][T11790] ? clear_bhb_loop+0x70/0xc0 [ 344.613038][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.613064][T11790] RIP: 0033:0x7f8727b9f559 [ 344.613089][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.613111][T11790] RSP: 002b:00007f8728ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.613139][T11790] RAX: ffffffffffffffda RBX: 00007f8727e26090 RCX: 00007f8727b9f559 [ 344.613157][T11790] RDX: 0000000020008000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 344.613173][T11790] RBP: 00007f8728ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 344.613189][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.613205][T11790] R13: 00007f8727e26128 R14: 00007f8727e26090 R15: 00007ffc626d32b8 [ 344.613248][T11790] [ 344.694604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.695546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.696245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.439946][T11815] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 345.489548][T11815] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 345.509538][T11815] bond0 (unregistering): Released all slaves [ 346.013196][T11846] FAULT_INJECTION: forcing a failure. [ 346.013196][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 346.013233][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz.2.1358 Not tainted syzkaller #0 PREEMPT(full) [ 346.013259][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.013277][T11846] Call Trace: [ 346.013285][T11846] [ 346.013294][T11846] dump_stack_lvl+0xe8/0x150 [ 346.013334][T11846] should_fail_ex+0x410/0x560 [ 346.013372][T11846] ? __alloc_skb+0x1db/0x7a0 [ 346.013403][T11846] should_failslab+0xa8/0x100 [ 346.013439][T11846] ? __alloc_skb+0x1db/0x7a0 [ 346.013467][T11846] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 346.013494][T11846] ? __alloc_skb+0x18d/0x7a0 [ 346.013525][T11846] ? __alloc_skb+0x1db/0x7a0 [ 346.013563][T11846] __alloc_skb+0x1db/0x7a0 [ 346.013599][T11846] netlink_ack+0x136/0xb30 [ 346.013624][T11846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.013678][T11846] netlink_rcv_skb+0x2a4/0x4a0 [ 346.013707][T11846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.013744][T11846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.013791][T11846] ? down_read+0x2b9/0x320 [ 346.013820][T11846] genl_rcv+0x28/0x40 [ 346.013851][T11846] netlink_unicast+0x8ef/0xa80 [ 346.013897][T11846] netlink_sendmsg+0x7f0/0xb20 [ 346.013933][T11846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.013966][T11846] ? aa_sock_msg_perm+0x144/0x210 [ 346.014008][T11846] ? apparmor_socket_sendmsg+0x18b/0x360 [ 346.014035][T11846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.014063][T11846] sock_sendmsg_nosec+0x14e/0x190 [ 346.014096][T11846] ____sys_sendmsg+0x54e/0x850 [ 346.014137][T11846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.014184][T11846] ? import_iovec+0x73/0xa0 [ 346.014223][T11846] ___sys_sendmsg+0x2a5/0x360 [ 346.014256][T11846] ? __lock_acquire+0x747/0x2de0 [ 346.014287][T11846] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.014367][T11846] ? __fget_files+0x3a2/0x420 [ 346.014391][T11846] ? __fget_files+0x2a/0x420 [ 346.014427][T11846] __x64_sys_sendmsg+0x1b1/0x290 [ 346.014453][T11846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.014513][T11846] do_syscall_64+0x166/0x520 [ 346.014535][T11846] ? trace_irq_disable+0x3b/0x140 [ 346.014562][T11846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.014585][T11846] ? clear_bhb_loop+0x70/0xc0 [ 346.014613][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.014636][T11846] RIP: 0033:0x7f8727b9f559 [ 346.014658][T11846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.014677][T11846] RSP: 002b:00007f8728ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.014702][T11846] RAX: ffffffffffffffda RBX: 00007f8727e26090 RCX: 00007f8727b9f559 [ 346.014718][T11846] RDX: 0000000020008000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 346.014733][T11846] RBP: 00007f8728ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 346.014748][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.014762][T11846] R13: 00007f8727e26128 R14: 00007f8727e26090 R15: 00007ffc626d32b8 [ 346.014799][T11846] [ 346.498619][T11852] __nla_validate_parse: 2 callbacks suppressed [ 346.498643][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 346.758060][T11867] net_ratelimit: 2 callbacks suppressed [ 346.758082][T11867] openvswitch: netlink: Actions may not be safe on all matching packets [ 347.337081][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.337416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.836384][T11880] ip_tables: iptables: counters copy to user failed while replacing table [ 349.972465][T11892] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1372'. [ 350.188226][T11902] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 15, id = 0 [ 350.219049][T11900] ip6gre2: entered promiscuous mode [ 350.466820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.467140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.467423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.707824][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 350.707866][T11917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1377'. [ 351.162750][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 351.185091][T11919] netlink: 976 bytes leftover after parsing attributes in process `syz.3.1378'. [ 351.185118][T11919] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 351.186238][ T30] audit: type=1800 audit(1792859551.018:8): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1381" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1350 res=0 errno=-22 [ 351.507396][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 351.540455][T11942] netlink: 'syz.1.1384': attribute type 16 has an invalid length. [ 351.540482][T11942] netlink: 'syz.1.1384': attribute type 17 has an invalid length. [ 351.701889][T11942] 8021q: adding VLAN 0 to HW filter on device .` [ 351.797500][T11942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 351.922711][T11969] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1390'. [ 351.922737][T11969] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1390'. [ 352.313170][T11992] syzkaller1: entered promiscuous mode [ 352.313197][T11992] syzkaller1: entered allmulticast mode [ 352.425339][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 352.426241][T12000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 353.047849][T12023] sctp: [Deprecated]: syz.2.1404 (pid 12023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.047849][T12023] Use struct sctp_sack_info instead [ 353.048104][T12023] sctp: [Deprecated]: syz.2.1404 (pid 12023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.048104][T12023] Use struct sctp_sack_info instead [ 353.102796][ T8177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.103091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.319883][T12017] SET target dimension over the limit! [ 353.362849][T12038] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 353.402104][T12036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1409'. [ 353.929969][T12058] sctp: [Deprecated]: syz.1.1417 (pid 12058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.929969][T12058] Use struct sctp_sack_info instead [ 354.354767][T12082] syzkaller0: entered promiscuous mode [ 354.354794][T12082] syzkaller0: entered allmulticast mode [ 354.376617][T12082] tipc: Enabled bearer , priority 0 [ 354.395888][T12082] tipc: Resetting bearer [ 354.414793][T12080] tipc: Resetting bearer [ 354.464950][T12080] tipc: Disabling bearer [ 354.809466][T12096] syzkaller0: left promiscuous mode [ 354.809492][T12096] syzkaller0: left allmulticast mode [ 354.952113][T12100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.042198][T12110] ip_tables: iptables: counters copy to user failed while replacing table [ 355.107985][T12114] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 355.280363][T12109] veth7: entered allmulticast mode [ 355.290496][T12109] bond9: (slave veth7): Enslaving as an active interface with a down link [ 355.307838][T12115] bond9: (slave veth0_to_bond): making interface the new active one [ 355.310821][T12115] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 355.372047][T12109] macvlan3: entered promiscuous mode [ 355.372074][T12109] macvlan3: entered allmulticast mode [ 355.372968][T12109] bond9: entered promiscuous mode [ 355.372989][T12109] veth0_to_bond: entered promiscuous mode [ 355.377907][T12109] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 355.401298][T12109] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth7 [ 355.418130][T12109] bond9: left promiscuous mode [ 355.418158][T12109] veth0_to_bond: left promiscuous mode [ 355.493618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.493949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.494244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.710802][T12124] ip_tables: iptables: counters copy to user failed while replacing table [ 355.914433][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 356.091548][T12144] ip_tables: iptables: counters copy to user failed while replacing table [ 356.197596][T12144] IPVS: Scheduler module ip_vs_mh not found [ 356.541294][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1448'. [ 357.222103][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 357.693724][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 358.218555][ T8933] net_ratelimit: 1 callbacks suppressed [ 358.218577][ T8933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.218825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.249892][T12249] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 358.249919][T12249] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1479'. [ 358.312488][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1482'. [ 358.623874][T12269] netlink: 'syz.2.1491': attribute type 3 has an invalid length. [ 358.657813][T12271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.780843][T12277] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 358.780880][T12277] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1492'. [ 358.821275][T12279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.821615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.821953][T12279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.823941][ T8930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.863250][T12279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.864562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.867858][T12279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.285993][T12301] openvswitch: netlink: Missing key (keys=40, expected=100) [ 359.309519][T12303] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 359.402750][T12303] 8021q: adding VLAN 0 to HW filter on device bond10 [ 359.442040][T12307] bond10: (slave geneve2): making interface the new active one [ 359.453157][T12307] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 359.632124][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.790314][T12313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.806942][T12313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.928097][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 360.333527][ T8934] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.333568][ T8934] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.333614][ T8934] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.333643][ T8934] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.333708][ T8934] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.333735][ T8934] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.333772][ T8934] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.333798][ T8934] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.276386][T12393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.479809][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 361.698189][T12418] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1554'. [ 362.440460][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 362.481234][T12459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1573'. [ 362.481601][T12456] FAULT_INJECTION: forcing a failure. [ 362.481601][T12456] name failslab, interval 1, probability 0, space 0, times 0 [ 362.481634][T12456] CPU: 1 UID: 0 PID: 12456 Comm: syz.2.1572 Not tainted syzkaller #0 PREEMPT(full) [ 362.481658][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 362.481673][T12456] Call Trace: [ 362.481682][T12456] [ 362.481691][T12456] dump_stack_lvl+0xe8/0x150 [ 362.481731][T12456] should_fail_ex+0x410/0x560 [ 362.481769][T12456] should_failslab+0xa8/0x100 [ 362.481805][T12456] __kmalloc_noprof+0xf9/0x710 [ 362.481834][T12456] ? sk_prot_alloc+0xe7/0x210 [ 362.481865][T12456] ? sk_prot_alloc+0xe7/0x210 [ 362.481904][T12456] sk_prot_alloc+0xe7/0x210 [ 362.481940][T12456] ? sk_alloc+0x27/0x390 [ 362.481965][T12456] sk_alloc+0x3a/0x390 [ 362.481992][T12456] bpf_prog_test_run_skb+0x3a6/0x2230 [ 362.482023][T12456] ? __fget_files+0x2a/0x420 [ 362.482043][T12456] ? __fget_files+0x2a/0x420 [ 362.482059][T12456] ? __fget_files+0x3a2/0x420 [ 362.482075][T12456] ? __fget_files+0x2a/0x420 [ 362.482097][T12456] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 362.482118][T12456] bpf_prog_test_run+0x2c5/0x340 [ 362.482145][T12456] __sys_bpf+0xa22/0xd90 [ 362.482172][T12456] ? __pfx___sys_bpf+0x10/0x10 [ 362.482202][T12456] ? __fget_files+0x2a/0x420 [ 362.482233][T12456] ? ksys_write+0x242/0x270 [ 362.482254][T12456] ? __pfx_ksys_write+0x10/0x10 [ 362.482277][T12456] __x64_sys_bpf+0xba/0xd0 [ 362.482299][T12456] do_syscall_64+0x166/0x520 [ 362.482314][T12456] ? trace_irq_disable+0x3b/0x140 [ 362.482333][T12456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.482350][T12456] ? clear_bhb_loop+0x70/0xc0 [ 362.482376][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.482392][T12456] RIP: 0033:0x7f8727b9f559 [ 362.482408][T12456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.482422][T12456] RSP: 002b:00007f8728b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.482439][T12456] RAX: ffffffffffffffda RBX: 00007f8727e25fa0 RCX: 00007f8727b9f559 [ 362.482451][T12456] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 362.482462][T12456] RBP: 00007f8728b01090 R08: 0000000000000000 R09: 0000000000000000 [ 362.482472][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.482481][T12456] R13: 00007f8727e26038 R14: 00007f8727e25fa0 R15: 00007ffc626d32b8 [ 362.482506][T12456] [ 363.227792][T12488] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 363.262476][ T8935] net_ratelimit: 36 callbacks suppressed [ 363.262499][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.262796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.318444][ T8930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.318660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.341319][ T8933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.342166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.377769][ T8933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.377989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.402632][ T8933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.402870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.810770][T12511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1583'. [ 365.642252][T12521] FAULT_INJECTION: forcing a failure. [ 365.642252][T12521] name failslab, interval 1, probability 0, space 0, times 0 [ 365.642289][T12521] CPU: 1 UID: 0 PID: 12521 Comm: syz.4.1585 Not tainted syzkaller #0 PREEMPT(full) [ 365.642314][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.642327][T12521] Call Trace: [ 365.642335][T12521] [ 365.642345][T12521] dump_stack_lvl+0xe8/0x150 [ 365.642384][T12521] should_fail_ex+0x410/0x560 [ 365.642422][T12521] should_failslab+0xa8/0x100 [ 365.642455][T12521] __kmalloc_noprof+0xf9/0x710 [ 365.642483][T12521] ? security_sk_alloc+0x52/0x360 [ 365.642514][T12521] ? security_sk_alloc+0x52/0x360 [ 365.642554][T12521] security_sk_alloc+0x52/0x360 [ 365.642592][T12521] sk_prot_alloc+0x101/0x210 [ 365.642623][T12521] ? sk_alloc+0x27/0x390 [ 365.642659][T12521] sk_alloc+0x3a/0x390 [ 365.642707][T12521] bpf_prog_test_run_skb+0x3a6/0x2230 [ 365.642752][T12521] ? __fget_files+0x2a/0x420 [ 365.642780][T12521] ? __fget_files+0x2a/0x420 [ 365.642802][T12521] ? __fget_files+0x3a2/0x420 [ 365.642825][T12521] ? __fget_files+0x2a/0x420 [ 365.642856][T12521] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 365.642885][T12521] bpf_prog_test_run+0x2c5/0x340 [ 365.642922][T12521] __sys_bpf+0xa22/0xd90 [ 365.642961][T12521] ? __pfx___sys_bpf+0x10/0x10 [ 365.643004][T12521] ? __fget_files+0x2a/0x420 [ 365.643049][T12521] ? ksys_write+0x242/0x270 [ 365.643079][T12521] ? __pfx_ksys_write+0x10/0x10 [ 365.643112][T12521] __x64_sys_bpf+0xba/0xd0 [ 365.643143][T12521] do_syscall_64+0x166/0x520 [ 365.643164][T12521] ? trace_irq_disable+0x3b/0x140 [ 365.643191][T12521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.643218][T12521] ? clear_bhb_loop+0x70/0xc0 [ 365.643244][T12521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.643262][T12521] RIP: 0033:0x7fa700f9f559 [ 365.643282][T12521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.643301][T12521] RSP: 002b:00007fa701de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.643325][T12521] RAX: ffffffffffffffda RBX: 00007fa701225fa0 RCX: 00007fa700f9f559 [ 365.643342][T12521] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 365.643356][T12521] RBP: 00007fa701de4090 R08: 0000000000000000 R09: 0000000000000000 [ 365.643370][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.643384][T12521] R13: 00007fa701226038 R14: 00007fa701225fa0 R15: 00007ffc6d731278 [ 365.643421][T12521] [ 365.961512][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1589'. [ 365.992274][T12522] ip6gre2: entered allmulticast mode [ 366.047750][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 366.134358][T12533] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 366.134383][T12533] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1589'. [ 366.247195][T12543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1593'. [ 366.375278][T12551] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.398424][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 366.559381][T12567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1592'. [ 366.781969][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 367.454123][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454159][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454356][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454379][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454578][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454600][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454785][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454808][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.454994][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.591749][T12598] smc: removing ib device rxe0 [ 367.798676][T12598] smbdirect: ib_dev[rxe0] removed [ 368.587001][T12631] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 368.897868][T12631] bond11 (unregistering): Released all slaves [ 369.022243][T12645] syzkaller0: entered promiscuous mode [ 369.022269][T12645] syzkaller0: entered allmulticast mode [ 369.112718][ T8935] net_ratelimit: 17 callbacks suppressed [ 369.112742][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.112961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.573696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.574085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.574556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.574882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.720007][T12681] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 370.484350][T12711] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.036841][T12706] team0: Port device team_slave_0 removed [ 371.066221][T12717] tunl0: Caught tx_queue_len zero misconfig [ 371.136621][T12732] tipc: Enabling of bearer rejected, failed to enable media [ 371.492348][T12747] ¬0Ù: renamed from bond_slave_1 (while UP) [ 371.700752][T12756] FAULT_INJECTION: forcing a failure. [ 371.700752][T12756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.700791][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(full) [ 371.700817][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.700830][T12756] Call Trace: [ 371.700840][T12756] [ 371.700849][T12756] dump_stack_lvl+0xe8/0x150 [ 371.700889][T12756] should_fail_ex+0x410/0x560 [ 371.700927][T12756] _copy_to_user+0x31/0xb0 [ 371.700963][T12756] bpf_test_finish+0x52e/0x690 [ 371.701004][T12756] ? __pfx_bpf_test_finish+0x10/0x10 [ 371.701036][T12756] ? eth_type_trans+0x33f/0x640 [ 371.701075][T12756] bpf_prog_test_run_skb+0x11fe/0x2230 [ 371.701127][T12756] ? __fget_files+0x2a/0x420 [ 371.701151][T12756] ? __fget_files+0x3a2/0x420 [ 371.701174][T12756] ? __fget_files+0x2a/0x420 [ 371.701204][T12756] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 371.701234][T12756] bpf_prog_test_run+0x2c5/0x340 [ 371.701271][T12756] __sys_bpf+0xa22/0xd90 [ 371.701309][T12756] ? __pfx___sys_bpf+0x10/0x10 [ 371.701352][T12756] ? __fget_files+0x2a/0x420 [ 371.701394][T12756] ? ksys_write+0x242/0x270 [ 371.701425][T12756] ? __pfx_ksys_write+0x10/0x10 [ 371.701459][T12756] __x64_sys_bpf+0xba/0xd0 [ 371.701490][T12756] do_syscall_64+0x166/0x520 [ 371.701514][T12756] ? trace_irq_disable+0x3b/0x140 [ 371.701541][T12756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.701564][T12756] ? clear_bhb_loop+0x70/0xc0 [ 371.701593][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.701616][T12756] RIP: 0033:0x7f8727b9f559 [ 371.701644][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.701664][T12756] RSP: 002b:00007f8728b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.701688][T12756] RAX: ffffffffffffffda RBX: 00007f8727e25fa0 RCX: 00007f8727b9f559 [ 371.701704][T12756] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 371.701717][T12756] RBP: 00007f8728b01090 R08: 0000000000000000 R09: 0000000000000000 [ 371.701730][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.701743][T12756] R13: 00007f8727e26038 R14: 00007f8727e25fa0 R15: 00007ffc626d32b8 [ 371.701780][T12756] [ 371.852040][T12760] __nla_validate_parse: 188 callbacks suppressed [ 371.852095][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 371.931242][T12757] nft_compat: unsupported protocol 1 [ 372.049876][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1645'. [ 372.050144][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1645'. [ 372.480919][T12760] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.556980][T12764] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.773743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.773978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.000711][T12803] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 373.039853][T12803] bond6: entered promiscuous mode [ 373.040264][T12803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.041666][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 373.118358][T12807] bond6: (slave bridge0): making interface the new active one [ 373.118385][T12807] bridge0: entered promiscuous mode [ 373.119947][T12807] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 373.232576][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1655'. [ 373.355179][T12823] FAULT_INJECTION: forcing a failure. [ 373.355179][T12823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.355218][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.1.1658 Not tainted syzkaller #0 PREEMPT(full) [ 373.355243][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 373.355258][T12823] Call Trace: [ 373.355266][T12823] [ 373.355275][T12823] dump_stack_lvl+0xe8/0x150 [ 373.355314][T12823] should_fail_ex+0x410/0x560 [ 373.355354][T12823] _copy_to_user+0x31/0xb0 [ 373.355390][T12823] bpf_test_finish+0x52e/0x690 [ 373.355431][T12823] ? __pfx_bpf_test_finish+0x10/0x10 [ 373.355461][T12823] ? eth_type_trans+0x33f/0x640 [ 373.355497][T12823] bpf_prog_test_run_skb+0x11fe/0x2230 [ 373.355553][T12823] ? __fget_files+0x2a/0x420 [ 373.355577][T12823] ? __fget_files+0x3a2/0x420 [ 373.355599][T12823] ? __fget_files+0x2a/0x420 [ 373.355628][T12823] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 373.355657][T12823] bpf_prog_test_run+0x2c5/0x340 [ 373.355693][T12823] __sys_bpf+0xa22/0xd90 [ 373.355733][T12823] ? __pfx___sys_bpf+0x10/0x10 [ 373.355776][T12823] ? __fget_files+0x2a/0x420 [ 373.355820][T12823] ? ksys_write+0x242/0x270 [ 373.355851][T12823] ? __pfx_ksys_write+0x10/0x10 [ 373.355883][T12823] __x64_sys_bpf+0xba/0xd0 [ 373.355922][T12823] do_syscall_64+0x166/0x520 [ 373.355944][T12823] ? trace_irq_disable+0x3b/0x140 [ 373.355971][T12823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.355994][T12823] ? clear_bhb_loop+0x70/0xc0 [ 373.356022][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.356044][T12823] RIP: 0033:0x7f16a799f559 [ 373.356064][T12823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.356083][T12823] RSP: 002b:00007f16a87cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.356109][T12823] RAX: ffffffffffffffda RBX: 00007f16a7c25fa0 RCX: 00007f16a799f559 [ 373.356125][T12823] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 373.356139][T12823] RBP: 00007f16a87cd090 R08: 0000000000000000 R09: 0000000000000000 [ 373.356154][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.356167][T12823] R13: 00007f16a7c26038 R14: 00007f16a7c25fa0 R15: 00007fff9da4b428 [ 373.356205][T12823] [ 373.627443][T12821] netlink: 'syz.2.1659': attribute type 10 has an invalid length. [ 373.627468][T12821] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1659'. [ 373.834083][T12834] xt_check_table_hooks: 55 callbacks suppressed [ 373.834106][T12834] x_tables: duplicate underflow at hook 1 [ 373.837709][T12833] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 373.938817][T12829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1662'. [ 373.938856][T12829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1662'. [ 374.177728][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 374.290511][T12849] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 374.302479][T12849] team0: Port device netdevsim1 removed [ 374.312375][T12849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.321783][T12849] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 374.662395][T12868] block nbd0: server does not support multiple connections per device. [ 374.686867][T12868] block nbd0: shutting down sockets [ 374.705823][T12869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1674'. [ 374.766531][T12869] vlan3: entered allmulticast mode [ 374.766554][T12869] dummy0: entered allmulticast mode [ 374.854907][ T8935] net_ratelimit: 3 callbacks suppressed [ 374.854930][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.855336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.151759][T12880] netlink: 'syz.1.1676': attribute type 3 has an invalid length. [ 376.176827][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.337681][T12895] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 376.481809][T12895] bond11 (unregistering): Released all slaves [ 376.627861][T12902] gre2: entered promiscuous mode [ 376.724502][T12917] bridge0: entered allmulticast mode [ 376.758164][T12917] pim6reg: entered allmulticast mode [ 376.929160][T12929] team0 (unregistering): Port device team_slave_1 removed [ 376.977689][T12934] sit0: entered promiscuous mode [ 376.997950][T12934] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 376.997975][T12934] __nla_validate_parse: 5 callbacks suppressed [ 376.997989][T12934] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1690'. [ 377.017138][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.173718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.174089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.174439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.289924][T12953] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 377.826137][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 378.696574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.724046][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.748195][T12989] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 379.859893][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 380.053025][T12989] bond11: entered promiscuous mode [ 380.063092][T12989] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.132166][T12990] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.132608][T12990] bond11: (slave gre3): The slave device specified does not support setting the MAC address [ 380.132631][T12990] bond11: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 380.165991][T12997] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 380.182937][T12990] bond11: (slave gre3): making interface the new active one [ 380.182964][T12990] gre3: entered promiscuous mode [ 380.205799][T12998] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1710'. [ 380.209044][T12990] bond11: (slave gre3): Enslaving as an active interface with an up link [ 380.222952][T13002] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:20003 [ 380.242905][T12991] bond11 (unregistering): (slave gre3): Releasing backup interface [ 380.242936][T12991] gre3: left promiscuous mode [ 380.266421][T12991] bond11 (unregistering): Released all slaves [ 380.318475][T12997] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.337954][T13003] bond11: entered allmulticast mode [ 380.343070][T13003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1709'. [ 380.422453][T12995] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 380.449802][T13008] bond11: (slave ip6gretap0): making interface the new active one [ 380.449831][T13008] ip6gretap0: entered allmulticast mode [ 380.472539][T13008] bond11: (slave ip6gretap0): Enslaving as an active interface with an up link [ 380.490313][T12997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1709'. [ 380.572854][T13019] ip_tables: iptables: counters copy to user failed while replacing table [ 380.614812][ T8934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.615040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.664887][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1714'. [ 380.952065][T13034] smbdirect: ib_dev[syz1] removed [ 381.256352][T13055] erspan0: entered promiscuous mode [ 381.303157][T13062] netlink: 'syz.2.1725': attribute type 4 has an invalid length. [ 381.303183][T13062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1725'. [ 381.306566][T13062] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 381.753153][T13078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.199220][T13076] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1729'. [ 382.202192][T13052] erspan0: left promiscuous mode [ 382.319583][T13084] FAULT_INJECTION: forcing a failure. [ 382.319583][T13084] name failslab, interval 1, probability 0, space 0, times 0 [ 382.319620][T13084] CPU: 1 UID: 0 PID: 13084 Comm: syz.0.1731 Not tainted syzkaller #0 PREEMPT(full) [ 382.319645][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 382.319659][T13084] Call Trace: [ 382.319668][T13084] [ 382.319678][T13084] dump_stack_lvl+0xe8/0x150 [ 382.319717][T13084] should_fail_ex+0x410/0x560 [ 382.319755][T13084] ? __alloc_skb+0x1db/0x7a0 [ 382.319786][T13084] should_failslab+0xa8/0x100 [ 382.319822][T13084] ? __alloc_skb+0x1db/0x7a0 [ 382.319850][T13084] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 382.319879][T13084] ? __alloc_skb+0x18d/0x7a0 [ 382.319910][T13084] ? __alloc_skb+0x1db/0x7a0 [ 382.319949][T13084] __alloc_skb+0x1db/0x7a0 [ 382.319986][T13084] netlink_sendmsg+0x5cd/0xb20 [ 382.320023][T13084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.320056][T13084] ? aa_sock_msg_perm+0x144/0x210 [ 382.320090][T13084] ? apparmor_socket_sendmsg+0x98/0x360 [ 382.320117][T13084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.320145][T13084] sock_sendmsg_nosec+0x14e/0x190 [ 382.320175][T13084] ____sys_sendmsg+0x54e/0x850 [ 382.320225][T13084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.320270][T13084] ? import_iovec+0x73/0xa0 [ 382.320307][T13084] ___sys_sendmsg+0x2a5/0x360 [ 382.320340][T13084] ? __lock_acquire+0x747/0x2de0 [ 382.320370][T13084] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.320447][T13084] ? __fget_files+0x3a2/0x420 [ 382.320470][T13084] ? __fget_files+0x2a/0x420 [ 382.320505][T13084] __x64_sys_sendmsg+0x1b1/0x290 [ 382.320531][T13084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.320593][T13084] do_syscall_64+0x166/0x520 [ 382.320615][T13084] ? trace_irq_disable+0x3b/0x140 [ 382.320641][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.320664][T13084] ? clear_bhb_loop+0x70/0xc0 [ 382.320692][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.320714][T13084] RIP: 0033:0x7f890bb9f559 [ 382.320735][T13084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.320754][T13084] RSP: 002b:00007f890c9f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.320779][T13084] RAX: ffffffffffffffda RBX: 00007f890be25fa0 RCX: 00007f890bb9f559 [ 382.320796][T13084] RDX: 0000000000040010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 382.320811][T13084] RBP: 00007f890c9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 382.320825][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.320839][T13084] R13: 00007f890be26038 R14: 00007f890be25fa0 R15: 00007ffc1c587318 [ 382.320875][T13084] [ 382.454300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.455255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.456249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.759692][T13091] ip_tables: iptables: counters copy to user failed while replacing table [ 382.792818][T13088] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 382.832212][T13093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'. [ 382.849034][T13093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.984995][T13105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1740'. [ 383.095067][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.132997][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1741'. [ 383.298477][T13109] xt_IDLETIMER: timeout value is zero [ 383.350420][T13043] udevd[13043]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 383.396469][T13124] netlink: 'syz.3.1745': attribute type 5 has an invalid length. [ 383.806977][T13138] tipc: Enabled bearer , priority 0 [ 383.810297][T13138] syzkaller0: entered promiscuous mode [ 383.810321][T13138] syzkaller0: entered allmulticast mode [ 383.810636][T13138] tipc: Resetting bearer [ 383.877737][T13146] vlan5: entered promiscuous mode [ 383.877763][T13146] macvlan0: entered promiscuous mode [ 383.955089][T13149] batman_adv: batadv0: Interface deactivated: veth0 [ 383.955120][T13149] batman_adv: batadv0: Removing interface: veth0 [ 384.000981][T13149] bond6: (slave veth0_to_bond): Releasing active interface [ 384.050763][T13149] .`: (slave bond_slave_0): Releasing backup interface [ 384.068333][T13149] bond_slave_0: left allmulticast mode [ 384.119417][T13149] .`: (slave 5¬0Ù): Releasing backup interface [ 384.139165][T13149] ¬0Ù: left allmulticast mode [ 384.201811][T13149] team0: Port device team_slave_0 removed [ 384.248891][T13149] team0: Port device team_slave_1 removed [ 384.251892][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.251917][T13149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.281527][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.281553][T13149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.409339][T13154] netlink: 'syz.0.1756': attribute type 11 has an invalid length. [ 384.699328][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 384.829518][T13182] block nbd0: not configured, cannot reconfigure [ 385.025712][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 385.121354][T13199] bond4: (slave lo): Releasing backup interface [ 385.142191][T13199] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 385.142220][T13199] lo: left promiscuous mode [ 385.338655][T13197] bridge0 (unregistering): left allmulticast mode [ 385.494408][T13205] syzkaller0: entered promiscuous mode [ 385.494433][T13205] syzkaller0: entered allmulticast mode [ 385.531783][T13200] tipc: Enabled bearer , priority 0 [ 385.551174][T13212] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 385.570884][T13221] tipc: Failed to remove unknown binding: 66,0,0/1754210131:3792015763/3792015764 [ 385.571181][T13221] tipc: Failed to remove unknown binding: 66,0,0/1754210131:3792015763/3792015764 [ 385.614578][T13205] tipc: Resetting bearer [ 385.614966][T13200] SET target dimension over the limit! [ 385.687773][T13196] tipc: Resetting bearer [ 385.801295][T13196] tipc: Disabling bearer [ 386.147592][T13244] wg2: Caught tx_queue_len zero misconfig [ 386.206188][T13248] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 386.309708][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 386.489637][T13265] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 386.489664][T13265] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1784'. [ 386.490030][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1784'. [ 386.885429][T13287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1792'. [ 387.156194][T13300] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.181386][T13300] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 387.196202][T13303] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 387.327140][T13314] __nla_validate_parse: 1 callbacks suppressed [ 387.327165][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 387.479665][T13319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1798'. [ 387.516987][T13322] netlink: 'syz.0.1800': attribute type 5 has an invalid length. [ 387.555003][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 387.556680][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 387.584268][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 387.712276][T13336] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1803'. [ 387.712303][T13336] net_ratelimit: 7 callbacks suppressed [ 387.712317][T13336] openvswitch: netlink: Flow key attr not present in new flow. [ 388.231620][T13367] sctp: [Deprecated]: syz.2.1807 (pid 13367) Use of int in max_burst socket option deprecated. [ 388.231620][T13367] Use struct sctp_assoc_value instead [ 388.508229][T13379] syzkaller0: entered promiscuous mode [ 388.508258][T13379] syzkaller0: entered allmulticast mode [ 388.543949][ T8939] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.544007][ T8939] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.544045][ T8939] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.544082][ T8939] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.549218][T13379] sch_tbf: burst 10 is lower than device syzkaller0 mtu (1514) ! [ 388.824559][T13394] xt_hashlimit: size too large, truncated to 1048576 [ 388.841603][T13396] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1817'. [ 388.841632][T13396] openvswitch: netlink: Flow key attr not present in new flow. [ 389.189615][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 389.224728][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 389.769701][T13428] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1824'. [ 389.840119][T13431] sch_tbf: burst 10 is lower than device syzkaller0 mtu (313) ! [ 390.075191][T13442] openvswitch: netlink: Flow key attr not present in new flow. [ 391.371286][T13492] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.255131][ T30] audit: type=1804 audit(1792859592.088:9): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1854" name="/newroot/351/memory.events" dev="tmpfs" ino=1813 res=1 errno=0 [ 392.257501][ T30] audit: type=1800 audit(1792859592.088:10): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="memory.events" dev="tmpfs" ino=1813 res=0 errno=-22 [ 392.259619][ T30] audit: type=1800 audit(1792859592.088:11): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="memory.events" dev="tmpfs" ino=1813 res=0 errno=-22 [ 392.292318][ T30] audit: type=1804 audit(1792859592.118:12): pid=13536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1854" name="/newroot/351/memory.events" dev="tmpfs" ino=1813 res=1 errno=0 [ 392.348530][ T30] audit: type=1800 audit(1792859592.178:13): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="memory.events" dev="tmpfs" ino=1813 res=0 errno=-22 [ 392.351854][ T30] audit: type=1804 audit(1792859592.178:14): pid=13532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1854" name="/newroot/351/memory.events" dev="tmpfs" ino=1813 res=1 errno=0 [ 392.416139][T13530] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 392.422292][T13530] bond12 (unregistering): Released all slaves [ 392.591818][T13543] __nla_validate_parse: 10 callbacks suppressed [ 392.591841][T13543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1855'. [ 392.669541][T13546] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1857'. [ 392.669572][T13546] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.696594][T13539] netlink: 'syz.3.1855': attribute type 2 has an invalid length. [ 392.835158][T13553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 392.914460][T13556] erspan0: entered promiscuous mode [ 392.967513][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 393.205834][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 393.349269][T13580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1865'. [ 393.389811][T13580] pimreg0: tun_chr_ioctl cmd 1074025677 [ 393.390000][T13580] pimreg0: linktype set to 823 [ 393.996505][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1872'. [ 394.035164][T13609] FAULT_INJECTION: forcing a failure. [ 394.035164][T13609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.036218][T13609] CPU: 0 UID: 0 PID: 13609 Comm: syz.0.1874 Not tainted syzkaller #0 PREEMPT(full) [ 394.036248][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 394.036262][T13609] Call Trace: [ 394.036271][T13609] [ 394.036282][T13609] dump_stack_lvl+0xe8/0x150 [ 394.036324][T13609] should_fail_ex+0x410/0x560 [ 394.036364][T13609] _copy_from_user+0x2d/0xb0 [ 394.036399][T13609] sk_setsockopt+0x2b5/0x2fe0 [ 394.036440][T13609] ? __pfx_sk_setsockopt+0x10/0x10 [ 394.036491][T13609] ? lock_acquire+0x115/0x350 [ 394.036528][T13609] ? aa_sock_opt_perm+0xe1/0x1e0 [ 394.036562][T13609] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 394.036589][T13609] do_sock_setsockopt+0x11b/0x1b0 [ 394.036628][T13609] __x64_sys_setsockopt+0x13d/0x1b0 [ 394.036669][T13609] do_syscall_64+0x166/0x520 [ 394.036691][T13609] ? trace_irq_disable+0x3b/0x140 [ 394.036718][T13609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.036741][T13609] ? clear_bhb_loop+0x70/0xc0 [ 394.036769][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.036792][T13609] RIP: 0033:0x7f890bb9f559 [ 394.036812][T13609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.036832][T13609] RSP: 002b:00007f890c9d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 394.036858][T13609] RAX: ffffffffffffffda RBX: 00007f890be26090 RCX: 00007f890bb9f559 [ 394.036875][T13609] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 394.036889][T13609] RBP: 00007f890c9d8090 R08: 0000000000000004 R09: 0000000000000000 [ 394.036903][T13609] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 394.036917][T13609] R13: 00007f890be26128 R14: 00007f890be26090 R15: 00007ffc1c587318 [ 394.036955][T13609] [ 394.836006][T13626] FAULT_INJECTION: forcing a failure. [ 394.836006][T13626] name failslab, interval 1, probability 0, space 0, times 0 [ 394.836044][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.4.1879 Not tainted syzkaller #0 PREEMPT(full) [ 394.836069][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 394.836084][T13626] Call Trace: [ 394.836093][T13626] [ 394.836102][T13626] dump_stack_lvl+0xe8/0x150 [ 394.836142][T13626] should_fail_ex+0x410/0x560 [ 394.836182][T13626] should_failslab+0xa8/0x100 [ 394.836216][T13626] ? skb_clone+0x212/0x3a0 [ 394.836239][T13626] kmem_cache_alloc_noprof+0x9c/0x600 [ 394.836270][T13626] ? skb_clone+0x212/0x3a0 [ 394.836304][T13626] skb_clone+0x212/0x3a0 [ 394.836331][T13626] __netlink_deliver_tap+0x355/0x6e0 [ 394.836374][T13626] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.836405][T13626] netlink_deliver_tap+0x19c/0x1b0 [ 394.836436][T13626] netlink_unicast+0x8c1/0xa80 [ 394.836483][T13626] netlink_sendmsg+0x7f0/0xb20 [ 394.836518][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.836552][T13626] ? aa_sock_msg_perm+0x144/0x210 [ 394.836587][T13626] ? apparmor_socket_sendmsg+0x98/0x360 [ 394.836614][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.836642][T13626] sock_sendmsg_nosec+0x14e/0x190 [ 394.836673][T13626] ____sys_sendmsg+0x54e/0x850 [ 394.836714][T13626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.836761][T13626] ? import_iovec+0x73/0xa0 [ 394.836797][T13626] ___sys_sendmsg+0x2a5/0x360 [ 394.836829][T13626] ? __lock_acquire+0x747/0x2de0 [ 394.836860][T13626] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.836940][T13626] ? __fget_files+0x3a2/0x420 [ 394.836963][T13626] ? __fget_files+0x2a/0x420 [ 394.837006][T13626] __x64_sys_sendmsg+0x1b1/0x290 [ 394.837033][T13626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.837095][T13626] do_syscall_64+0x166/0x520 [ 394.837116][T13626] ? trace_irq_disable+0x3b/0x140 [ 394.837143][T13626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.837166][T13626] ? clear_bhb_loop+0x70/0xc0 [ 394.837195][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.837217][T13626] RIP: 0033:0x7fa700f9f559 [ 394.837238][T13626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.837257][T13626] RSP: 002b:00007fa701de4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.837281][T13626] RAX: ffffffffffffffda RBX: 00007fa701225fa0 RCX: 00007fa700f9f559 [ 394.837299][T13626] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 394.837313][T13626] RBP: 00007fa701de4090 R08: 0000000000000000 R09: 0000000000000000 [ 394.837327][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.837341][T13626] R13: 00007fa701226038 R14: 00007fa701225fa0 R15: 00007ffc6d731278 [ 394.837378][T13626] [ 395.412194][T13631] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1882'. [ 395.412234][T13631] openvswitch: netlink: Flow key attr not present in new flow. [ 395.733103][T13642] netlink: 279 bytes leftover after parsing attributes in process `syz.4.1885'. [ 395.733132][T13642] veth0_to_bond: default FDB implementation only supports local addresses [ 395.753629][T13644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.870970][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1887'. [ 396.019606][T13660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.074626][T13663] openvswitch: netlink: Flow key attr not present in new flow. [ 396.246747][T13670] openvswitch: netlink: Flow key attr not present in new flow. [ 396.361221][T13679] bond12 (unregistering): Released all slaves [ 396.714232][T13691] bond7: entered allmulticast mode [ 396.714712][T13691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 396.761164][T13696] tipc: Enabled bearer , priority 0 [ 396.901367][T13708] openvswitch: netlink: Flow actions attr not present in new flow. [ 396.988242][T13715] openvswitch: netlink: Flow key attr not present in new flow. [ 397.119006][T13719] ipvlan1: entered promiscuous mode [ 397.129655][T13719] ipvlan1: left promiscuous mode [ 397.645711][T13742] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 397.723693][T13741] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 397.754723][T13747] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.112231][T13759] syzkaller0: entered promiscuous mode [ 398.112258][T13759] syzkaller0: entered allmulticast mode [ 398.146056][T13759] tipc: Enabled bearer , priority 0 [ 398.424864][T13758] tipc: Resetting bearer [ 398.805620][T13758] tipc: Disabling bearer [ 398.828353][T13773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.828853][T13773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 399.315717][T13798] __nla_validate_parse: 10 callbacks suppressed [ 399.315740][T13798] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1935'. [ 399.316265][T13801] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 399.316285][T13801] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1938'. [ 399.626789][T13821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.632101][T13823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.289642][T13836] SET target dimension over the limit! [ 400.307644][T13836] SET target dimension over the limit! [ 400.586937][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 400.980022][T13861] vcan0: tx address claim with dest, not broadcast [ 401.217118][T13865] sctp: [Deprecated]: syz.4.1954 (pid 13865) Use of int in max_burst socket option. [ 401.217118][T13865] Use struct sctp_assoc_value instead [ 401.310811][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1957'. [ 401.343183][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 401.469447][T13875] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 401.696513][T13894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1964'. [ 401.901416][T13902] bond12: option tlb_dynamic_lb: invalid value (255) [ 401.917875][T13902] bond12 (unregistering): Released all slaves [ 402.399237][T13911] sctp: [Deprecated]: syz.0.1967 (pid 13911) Use of int in max_burst socket option deprecated. [ 402.399237][T13911] Use struct sctp_assoc_value instead [ 402.586018][T13917] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 402.647987][T13917] 8021q: adding VLAN 0 to HW filter on device bond12 [ 402.649000][T13916] syzkaller0: entered promiscuous mode [ 402.649023][T13916] syzkaller0: entered allmulticast mode [ 402.700942][T13920] bond12: (slave veth9): Enslaving as an active interface with a down link [ 402.869093][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1971'. [ 402.880069][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1972'. [ 402.985356][T13923] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 402.985391][T13923] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 403.211077][T13937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1976'. [ 403.636299][T13949] tipc: Can't bind to reserved service type 2 [ 403.854250][T13957] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1981'. [ 404.161838][T13966] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 404.892701][T13986] FAULT_INJECTION: forcing a failure. [ 404.892701][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.892737][T13986] CPU: 1 UID: 0 PID: 13986 Comm: syz.3.1988 Not tainted syzkaller #0 PREEMPT(full) [ 404.892761][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.892774][T13986] Call Trace: [ 404.892782][T13986] [ 404.892793][T13986] dump_stack_lvl+0xe8/0x150 [ 404.892831][T13986] should_fail_ex+0x410/0x560 [ 404.892869][T13986] _copy_from_user+0x2d/0xb0 [ 404.892904][T13986] ___sys_sendmsg+0x1c6/0x360 [ 404.892938][T13986] ? __lock_acquire+0x747/0x2de0 [ 404.892970][T13986] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.893048][T13986] ? __fget_files+0x3a2/0x420 [ 404.893072][T13986] ? __fget_files+0x2a/0x420 [ 404.893118][T13986] __x64_sys_sendmsg+0x1b1/0x290 [ 404.893144][T13986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.893203][T13986] do_syscall_64+0x166/0x520 [ 404.893225][T13986] ? trace_irq_disable+0x3b/0x140 [ 404.893254][T13986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.893276][T13986] ? clear_bhb_loop+0x70/0xc0 [ 404.893303][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.893325][T13986] RIP: 0033:0x7f373c39f559 [ 404.893345][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.893365][T13986] RSP: 002b:00007f373d2b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.893389][T13986] RAX: ffffffffffffffda RBX: 00007f373c625fa0 RCX: 00007f373c39f559 [ 404.893406][T13986] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 404.893420][T13986] RBP: 00007f373d2b8090 R08: 0000000000000000 R09: 0000000000000000 [ 404.893434][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.893447][T13986] R13: 00007f373c626038 R14: 00007f373c625fa0 R15: 00007ffd7817f8f8 [ 404.893483][T13986] [ 405.628871][T14007] __nla_validate_parse: 2 callbacks suppressed [ 405.628895][T14007] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1992'. [ 405.628915][T14007] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.962461][T14023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 407.348778][T14057] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.125782][T14064] bond13: Unable to set up delay as MII monitoring is disabled [ 408.258757][T14064] bond13 (unregistering): Released all slaves [ 408.405735][T14075] syzkaller0: entered promiscuous mode [ 408.405760][T14075] syzkaller0: entered allmulticast mode [ 408.461734][T14075] tipc: Enabled bearer , priority 0 [ 408.462130][T14074] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 408.489625][T14073] tipc: Resetting bearer [ 408.599072][T14073] tipc: Disabling bearer [ 410.646928][T14089] erspan1: entered promiscuous mode [ 412.526173][T14093] openvswitch: netlink: Flow actions attr not present in new flow. [ 413.007450][T14110] netlink: 'syz.0.2017': attribute type 2 has an invalid length. [ 413.157535][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.157704][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.157819][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.158360][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.158492][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.158722][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.158836][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.158950][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.159128][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.159243][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 413.890428][T14123] geneve4: entered promiscuous mode [ 414.459364][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.461829][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.472653][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.474518][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.475312][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.575381][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.580882][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.581249][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.582329][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.630001][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.371742][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.390622][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.391666][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.671660][T14125] infiniband rxe0: set active [ 415.674724][ T5762] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.674795][T14125] infiniband rxe0: added rxe_eth0 [ 415.747659][T14125] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 415.747702][T14125] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 415.747746][T14125] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 415.887778][T14149] openvswitch: netlink: Flow actions attr not present in new flow. [ 415.905984][T14125] RDS/IB: rxe0: added [ 415.906049][T14125] smc: adding ib device rxe0 with port count 1 [ 415.906072][T14125] smc: ib device rxe0 port 1 has no pnetid [ 415.906187][ T5762] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.993138][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.599326][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.695143][ T5632] Bluetooth: hci5: command tx timeout [ 416.919127][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.206228][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.520199][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.818890][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 417.822965][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 417.847634][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 417.848911][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 417.849660][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 418.071810][T14125] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.774192][ T5632] Bluetooth: hci5: command tx timeout [ 418.964391][T14171] __nla_validate_parse: 58 callbacks suppressed [ 418.964414][T14171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2030'. [ 419.051886][T14173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 419.197938][T14171] bridge0: port 1(syz_tun) entered blocking state [ 419.198105][T14171] bridge0: port 1(syz_tun) entered disabled state [ 419.198278][T14171] syz_tun: entered allmulticast mode [ 419.200642][T14171] syz_tun: entered promiscuous mode [ 419.241621][T14173] bridge0: port 1(syz_tun) entered blocking state [ 419.241936][T14173] bridge0: port 1(syz_tun) entered forwarding state [ 419.279284][T14158] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.345360][T14171] ip6gretap0: entered promiscuous mode [ 419.527341][T14178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2031'. [ 419.974910][ T5632] Bluetooth: hci6: command tx timeout [ 420.507020][T14125] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.507133][T14125] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.507358][T14125] bridge_slave_0: entered allmulticast mode [ 420.509491][T14125] bridge_slave_0: entered promiscuous mode [ 420.749597][T14125] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.749716][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.749892][T14125] bridge_slave_1: entered allmulticast mode [ 420.752034][T14125] bridge_slave_1: entered promiscuous mode [ 420.854269][ T5632] Bluetooth: hci5: command tx timeout [ 420.890851][T14125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.920341][T14125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.026961][T14125] team0: Port device team_slave_0 added [ 421.050433][T14125] team0: Port device team_slave_1 added [ 421.123110][T14125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.123131][T14125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.123161][T14125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.191916][T14125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.191936][T14125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.191966][T14125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.342650][T14125] hsr_slave_0: entered promiscuous mode [ 421.352912][T14125] hsr_slave_1: entered promiscuous mode [ 421.368368][T14125] debugfs: 'hsr0' already exists in 'hsr' [ 421.368425][T14125] Cannot create hsr debugfs directory [ 421.941763][T14158] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.941963][T14158] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.942129][T14158] bridge_slave_0: entered allmulticast mode [ 421.968474][T14158] bridge_slave_0: entered promiscuous mode [ 421.982022][T14158] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.982226][T14158] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.982454][T14158] bridge_slave_1: entered allmulticast mode [ 422.011312][T14158] bridge_slave_1: entered promiscuous mode [ 422.055360][ T5632] Bluetooth: hci6: command tx timeout [ 422.104972][T14158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.111999][T14158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.206566][T14207] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2034'. [ 422.256039][T14158] team0: Port device team_slave_0 added [ 422.270698][T14158] team0: Port device team_slave_1 added [ 422.348583][T14125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.371770][T14125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.389029][T14158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.389048][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.389079][T14158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.390125][T14125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.465662][T14125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.466780][T14125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.498050][T14125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.499337][T14158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.499353][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.499393][T14158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.501795][T14125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.570055][T14125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.794153][T14219] openvswitch: netlink: Flow actions attr not present in new flow. [ 422.934353][ T5632] Bluetooth: hci5: command tx timeout [ 423.055718][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 423.172537][T14232] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2040'. [ 423.202475][T14224] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 423.202498][T14224] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2037'. [ 423.292074][T14232] 0·: renamed from hsr0 [ 423.408897][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 423.528824][T14232] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.530813][T14232] 0·: entered allmulticast mode [ 423.530837][T14232] hsr_slave_1: entered allmulticast mode [ 423.547086][T14232] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 423.606225][T14158] hsr_slave_0: entered promiscuous mode [ 423.607458][T14158] hsr_slave_1: entered promiscuous mode [ 423.610393][T14158] debugfs: 'hsr0' already exists in 'hsr' [ 423.610417][T14158] Cannot create hsr debugfs directory [ 423.861812][T14243] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 424.031267][T14243] 8021q: adding VLAN 0 to HW filter on device bond13 [ 424.134703][ T5632] Bluetooth: hci6: command tx timeout [ 424.137956][T14245] bond9: (slave veth0_to_bond): Releasing active interface [ 424.196229][T14245] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 424.201312][T14243] bond13: entered promiscuous mode [ 424.201337][T14243] bond13: entered allmulticast mode [ 424.458855][T14243] macvlan3: entered promiscuous mode [ 424.458880][T14243] macvlan3: entered allmulticast mode [ 424.462383][T14243] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 424.826851][T14252] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.971447][T14125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.122016][T14125] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.135723][T14158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.217116][ T5632] Bluetooth: hci6: command tx timeout [ 426.301918][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.353653][T14158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.428133][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.430798][T14158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.498008][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.515495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.515609][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.517357][T14158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.565417][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.599306][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.599422][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.960648][T14158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.061926][T14158] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.533056][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.533173][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.691782][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.691898][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.265490][T14125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.745630][T14293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2049'. [ 429.389701][T14125] veth0_vlan: entered promiscuous mode [ 429.428954][T14125] veth1_vlan: entered promiscuous mode [ 429.513200][T14125] veth0_macvtap: entered promiscuous mode [ 429.546057][T14125] veth1_macvtap: entered promiscuous mode [ 429.610899][T14125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.657001][T14158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.676107][T14125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.108576][ T8935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.133833][ T8935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.134917][ T8935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.134958][ T8935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.432694][T14307] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 430.432722][T14307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2050'. [ 430.465834][T14307] batadv0: entered promiscuous mode [ 430.465858][T14307] batadv0: entered allmulticast mode [ 430.467132][T14307] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 430.541616][ T8935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.541640][ T8935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.716361][ T8938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.716386][ T8938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.071294][T14158] veth0_vlan: entered promiscuous mode [ 431.128075][T14158] veth1_vlan: entered promiscuous mode [ 431.291420][T14158] veth0_macvtap: entered promiscuous mode [ 431.324615][T14158] veth1_macvtap: entered promiscuous mode [ 431.421193][T14158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.459898][T14158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.604451][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2022'. [ 431.725477][ T87] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.725527][ T87] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.725566][ T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.725613][ T87] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.788823][T14327] xt_IDLETIMER: timeout value is zero [ 431.836480][T14333] veth0: entered promiscuous mode [ 432.166467][T14339] openvswitch: netlink: Flow actions attr not present in new flow. [ 432.256398][T14335] syz_tun: left allmulticast mode [ 432.256429][T14335] syz_tun: left promiscuous mode [ 432.256687][T14335] bridge0: port 1(syz_tun) entered disabled state [ 432.382082][T14334] udevd[14334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 432.414755][T14334] udevd[14334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 432.490344][T14335] bond0: (slave bond_slave_0): Releasing backup interface [ 432.516348][T14335] bond_slave_0: left promiscuous mode [ 432.569217][T14335] bond0: (slave bond_slave_1): Releasing backup interface [ 432.599556][T14335] bond_slave_1: left promiscuous mode [ 432.633064][T14335] team0: Port device team_slave_1 removed [ 432.644390][T14335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.644425][T14335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.682313][T14335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.740851][T14331] veth0: left promiscuous mode [ 432.850109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.850135][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.959725][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.959748][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.823275][ C1] sched: DL replenish lagged too much [ 436.346892][T14362] netlink: 'syz.0.2059': attribute type 9 has an invalid length. [ 437.017705][T14381] sctp: [Deprecated]: syz.0.2063 (pid 14381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.017705][T14381] Use struct sctp_sack_info instead [ 438.479948][T14402] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 440.962577][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.808287][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.322433][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.582328][ T33] INFO: task syz.2.1966:13907 blocked for more than 169 seconds. [ 575.582367][ T33] Not tainted syzkaller #0 [ 575.582380][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.582397][ T33] task:syz.2.1966 state:D stack:27168 pid:13907 tgid:13906 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 575.582555][ T33] Call Trace: [ 575.582565][ T33] [ 575.582582][ T33] __schedule+0x17dd/0x5820 [ 575.582657][ T33] ? __pfx___schedule+0x10/0x10 [ 575.582703][ T33] ? schedule+0x90/0x2b0 [ 575.582741][ T33] schedule+0x164/0x2b0 [ 575.582776][ T33] schedule_preempt_disabled+0x13/0x30 [ 575.582809][ T33] __mutex_lock+0x7c4/0x15a0 [ 575.582838][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 575.582867][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 575.582897][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 575.582919][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 575.582961][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 575.582984][ T33] ? do_syscall_64+0x166/0x520 [ 575.583005][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.583041][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 575.583075][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 575.583119][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 575.583144][ T33] ? trace_kmalloc+0x2a/0xf0 [ 575.607694][ T33] ? __kmalloc_noprof+0x387/0x710 [ 575.607745][ T33] ? __nla_parse+0x40/0x60 [ 575.607776][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 575.607802][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 575.607835][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 575.607881][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.607934][ T33] ? bpf_lsm_capable+0x9/0x20 [ 575.607961][ T33] ? security_capable+0x7e/0x2c0 [ 575.607996][ T33] genl_rcv_msg+0x614/0x7a0