last executing test programs: 5.136801913s ago: executing program 0 (id=6181): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x3, 0x9, 0x80000000, 0x9}) 3.872342048s ago: executing program 3 (id=6110): r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) 3.775437578s ago: executing program 4 (id=6192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.577120334s ago: executing program 3 (id=6193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r14) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r15 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r15, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r13, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/12, 0xc}, {&(0x7f0000000280)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c19", 0x20}, {&(0x7f0000000380)="d422b8", 0x3}], 0x4) 3.385286307s ago: executing program 0 (id=6194): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00070000f3ff0080000000000004"], 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000055000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x94) 3.161053831s ago: executing program 0 (id=6196): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000001200)={0x1f, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"fbffff090800"}}}, 0xc) (async) mmap(&(0x7f000067b000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20004014}, 0x20050800) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000140020000000ffff0a0101010000000000000000"], 0x38}, 0x1, 0x620b}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c0004"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x4000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) (async) sendmmsg$inet6(r4, &(0x7f0000000d80)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @empty, 0x1000}, 0x1c, &(0x7f0000000c80), 0x0, &(0x7f0000000d00)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}}], 0x1, 0x8000) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000440)=0xf8, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e21, 0x6, @private2, 0x9}}}, &(0x7f0000000180)=0x84) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) (async, rerun: 32) unshare(0x22020600) (rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) 3.049884744s ago: executing program 4 (id=6198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000040000006d000200000000009500000000000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x2, 0x3, 0x103, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x20008000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x1ffff, 0x0, 0x0, 0x0, 0x45, [0xff7, 0x9]}}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000400)={{0x3c, @empty, 0x4e24, 0x4, 'lblcr\x00', 0x36, 0xd, 0x35}, {@broadcast, 0x4e24, 0x4, 0xfffffb36, 0x2, 0x1}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000be00"/16, @ANYRES16=r4, @ANYBLOB="10002dbd7000fedbdf250200000014000600fc00000000000000000000000000000108000400ffffffff0800020003000000050001000000000008000c0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2.996602872s ago: executing program 0 (id=6199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000007b07040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 2.911146376s ago: executing program 0 (id=6200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket(0x2c, 0x4, 0x200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000540)={0x7, 0x65}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@loopback, @dev, 0x0}, &(0x7f0000000240)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x11000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000300)=0x1400, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x7fc, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) vmsplice(r9, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x10, 0x90, 0xffffaf82, 0x9, {{0x16, 0x4, 0x1, 0x2a, 0x58, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x5, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@rand_addr=0x64010102, 0xfffffff9}, {@local, 0x8}, {@private=0xa010102, 0x1b}]}, @end, @timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x0, [{@rand_addr=0x64010102, 0x3}, {@empty, 0x9}]}]}}}}}) getpeername$packet(r1, 0x0, &(0x7f0000000380)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="000382060000fcdbdf250c00000060000180140002006e65747063693000000000000000000008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="1400020069ee36657273707e6e3000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f7465616d00000064000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000300030000000800030000000000140002007465616d5f736c6176655f3100000000080003000100000008000300010000001400020070696d36726567300000000000000000080001", @ANYRES32, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x40) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) 2.881463226s ago: executing program 4 (id=6201): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x22eb}, @val={0x2, 0x80, 0xa, 0x3, 0xffca, 0x7}, @llc={@llc={0x42, 0xfc, "feb1", "904e62cc90846d877936f54c5483c9705d22ddf5912290a2062166fea76318bc455f74e60b3d2f73052ecb3ea6410af10f9d10dacaa450eae7efa8bc787f50241ce8f9133f8d75507fbc07d1a1c8e2186116b63a99a727a2ce454231847e2b7cc38551bb"}}}, 0x76) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r2, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 2.793296788s ago: executing program 2 (id=6202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x1, 0x0, 0xffcffffc}, {0x6, 0x0, 0x0, 0x3}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xd}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket(0x10, 0x803, 0x4) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020700f80f00ffb703000008000000b70400000000000085000000540000009500000000000000569bdb8a3c1a533d828c0e8a593ecb96069d45e9b7bf2067e194207c0f5f67f0348adfc82f8fcd3f664bcd9cc498"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@arp={@empty, @local, 0xff000000, 0x0, 0xa, 0xa, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0x7f]}}, 0x1, 0x1, 0x69b, 0x1, 0x8000, 0x2ec, 'bridge_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x54}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000900)=@newchain={0x5d8, 0x64, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x7, 0x9}, {0xf, 0x1}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_cgroup={{0xb}, {0x598, 0x2, [@TCA_CGROUP_ACT={0x3f0, 0x1, [@m_bpf={0xc8, 0xa, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x14, 0x1f, 0x80, 0x2}, {0x9a, 0x10, 0xb7, 0x4}, {0x401, 0x37, 0xa2, 0x5}, {0x1ff, 0x9}, {0x6, 0x2, 0x10, 0x8}, {0xa07c, 0x4, 0x0, 0x4f51}]}]}, {0x62, 0x6, "f14bd3be175d103dda567f2d3563aa5f8a8ba4b6a4004b07cf75afb5398cfec4ad686260aa4cf519cc99e833b7798de4e79cc810a22724620945f1938c526d536cdcd82910b940247b3e12f2a9fb1a85f8826f32e469324e95885d6021e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x58, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd4829}]}, {0x1c, 0x6, "d2fc602adeb218386a55a431ab69ed62fcc0d5b892ec79e6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x1cc, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x2, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x34, 0xffffffffffffffff, 0xea5, 0x10000}}, @TCA_DEF_DATA={0x7, 0x3, '\xe4.\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x714, 0xffffffffffffffff, 0xf9, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffbe1, 0xffffffff, 0x0, 0xff, 0xcc}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x7fff, 0x1, 0x9266, 0xe2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x100, 0x10, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0xb4, 0x6, "9fb71908b887947bb05a079f85440056f7eefcd60fad3f2e45a41bde5b6c7473c2af521caf24dc3444c219f87f7946e7d1348e7f7314bf635235605ec5f210d07c16a76ae89da643afa39e35b9bc38f8916f53cd895761c8ccd4d7f2b5530775dd3cfaace02601e741866ec959e13c2a1c71c940d6adb42bcf86fc70488a30acd54d61666f71a0332793f916e5c2a4afc2c29001d935a9976470e2e5b62245916c1304899e3655ea19054323e191de32"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x1a4, 0x1, [@m_police={0xb0, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]]}, {0x75, 0x6, "3cf32ca19e69858ccd6415f1db75156249654ed720f153f3d7b08cd78b3b30692b2e80b3a85960c0737dbd9b67c48c113cb36698aaa9647a7bacd946685125d3fb5b0dbb0a3d22b8d865419d668c2b92bc3c684e35abac67df6c3c33218d5f604b704b558c57210c7d143c5536054daaf0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0xf0, 0x5, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0xd9, 0x7, 0xffffffff, 0x200}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x401, 0x1, 0x6, 0x7}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe197, 0x6, 0x1, 0x5, 0x4}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x10000005, 0x3ff, 0xd2f7}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x8, 0x10000000, 0x3, 0x2}, 0x75}}]}, {0x36, 0x6, "e23d86995bc1ad4f8ba39b64b67bea7250d2037c2acbb7c9ff19d05f9ac460316b4a0fc4e8e8f8625fc1f0ddbb9ab728c002"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x339728d5dab10af7}}}}]}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x24004010}, 0x84) 2.612045691s ago: executing program 1 (id=6203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x711, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff3}, {0x7, 0xe}, {0xb, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa2086dd607428dd00183afffe8000000000000000000000000000bbff020000000000000000000000000001890090780000000000000000000000000000000000000001c90e7b1ba87e0e5e165a6a7d1b2b95039d297f53ed56de3fa9943d1acdaead071bcac026e6d202233eca32389f837b77316cf210b50a39c3f40c4a34f59cf73da9e2440d0fe490c5954e5dde70d49bab98241ef780d0c1180a1912"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff000000000100018006000600800a007769726567756172640000000400028000190000000000003ba53d7416ee2d0c2c4bcc3365169ccd126ccbd28e7381a00a28d3c7378cca7f8a82a25c02cd208d7a73bc4c4bc9c368439a678b7ff005f20484d594414de16160f19c65eb312e66ea69920b748b080420ab6d3c6b91e7feaeab08aca7106b033d08d15bf9c20a53027cdce387d60b2246699cc5"], 0x38}}, 0xc000) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r5, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) recvmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)=""/198, 0xc6}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/125, 0x84}, {&(0x7f0000000680)=""/183, 0xaa}, {&(0x7f0000001000)=""/14, 0xfd47}, {&(0x7f0000001040)=""/116, 0x74}, {&(0x7f0000002d00)=""/4105, 0x1009}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) 2.401112864s ago: executing program 3 (id=6204): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x3, 0x9, 0x80000000, 0x9}) 2.277088183s ago: executing program 2 (id=6205): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="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", 0xde5}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910a5b4810ee7", 0xb4}, {&(0x7f0000002600)="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", 0xf25}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r6, 0x3328}, {r5, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x32020600) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xe7) sendto$inet6(r0, &(0x7f0000003540)="25e8e9d4a9239a8b03132cfa84ad1edbcde4da80be39d6323554a85c9ae105cd5fd898530280f12d73d3ba93eaa8dace833bb0089ad5251648394995e154e76cec04ba85ceba1985e818402e5af57a1e0d3e0b014cd169b5119657d7674f93bc8a51585c257b4c8c3946b060c3b21bed916f105f6ce99c18c4f5ac7e0331e6eec8b552c0c6d31dd7fad05f71f0bdb543bec0d6e01114b81d95fb7b04257cf778a6aaa169c1881ef3f0c791a1e968ce23c2400008ed16747c5f6cf818eaae261b1800c5f6a8e310fe63d80e856f4545960a1fb5cc2a59cc7db75990346bf3e2393004aec96b6b063dac9dfcd4ea43f0fac80dbc0e36151c76c7236cac81ce86befba3b5d778b85d97a7020eb076a679b79b827883ab56e70734c645f56391f242368977c29602e1f97181c547e5a8c470d54a1226b1ddfd76c046bb490cb118a54be5a44759615025b98088a75b833c569976c80d731e0bab6d08ba2e2187a721f73a305357b6c045b6f5b4284f8b304c35b1956889155420cb1639bfd33d8dc00e803c0c7660b1a2baf6dca3435957721bdd38a795653497e945c7ecb72c9bd27adea2fa79c3631112d42501c5d4059c121c2687bc33559650209c5797d11495e8aa1764dd17f14caaf9058f576a06a600eb3b5960d1f70767aa15e91252d7c34df906f4b7a11a3ce72505c6ffc26273625d0351fd045316f8c39c37b4ce6f6fce314032699a81c3178efcf93969518d01ad0f526169d7dc05ec1a6a4761c45535db11a7355946ca2e25c58c3d7082eea63065f45378b848d9963ebec139de49f483e02d8dca3beaf407ef252aec2e877a212fd8db7ff90c23ae295a85d2b5613e834b72310eaa0ebf99033edb3f637406d1bbee8c2ee8f5995f514f0955588f25ce0597e97b42c7f386aa2467ad0c11fcbf88d6e19b77fadc038bbef82ac54476d6630662aeeb1cb0297422e1324aa91085e0efcbe37974a86aac8d5159908fed6b794b0308c08fdd00815f0ab2bfa504f80a834d7a30b542577809c13e59cf5b52ac012d7ea9f2d7c61b06a7c795968324d918096fbfb038622a2a42f73a091e03c7c5da1bf843dd8a6485a082f132afcf392d49de16e0300fa6e7a85f856a8dc6a3b83572683bb4137289b08df7cf75eaa83c0102d6fe24be5a307f1fa9b3f354f9d1605ab564e5d66b2801b234a756b1911643aa40020e61b471f4b1ab292b30f8a7913917a00f325e9f01ff8950e4b706f7c81816ded4058f67d0ce8299fe7d9451f16d2759775fa737f7cdc52dd937f4b675e7f1030eafd0b7d5805258f6a107e23831c0307a64aae64134805eba3fe4d6246e5a58256a5896a9895342e441d938a58b282f695c92fb1881a6c64182d4026058298ca517bf549d9873ce26400580e4ff1deaab1efabb6218b175ac93fa4166611692389fb2d23343991074261e53dc6c81d1845e64effe48934d25448b83f830b248647ae2fc57b517d9dcc73317453b2ac1da359efe52ae058555c920048a2d79cfe5cafd84db885045c87cdf5fdd1c3fbd24298559f3e2930b11f7a6f7d6b370ae28820e20f7712203d897e4fbb0c56e57910b5aedda453facd73a825a1169151d8d299da501c555bf2cf65f3c500fe345049a91ccd753bd29c96372e8caa9b601f0b51d6970d617bab0ba648280b0d2e60bfed5faa30407cd79267ae362313ee4dea4bf30b9f796bfe206b215e5cf7c1af228a934d60cfe59149f3066668e81c28fbbac9c507111cb954619bd7ea3201d12503b2701aaa9708eae16e61c5bf9f9ed37dcf2e5275d284b0f995def527dc7bbadc194057decaa955416e93655e1293c30ecb5498fd880b89e8f8f8cb9bf9048e5daedaf165a1cd2e64a819275f06c19523e5f3dab7e61d801ca4d83331f519600d1a54b711ed369a294e8cf9ccc77204e54c8512eebb10fd8bc8012cef74e398c07aea2e8a3d2d212c52dd9c7a69e6738f2034d5fafcd737bf2b8cc79a4ca31ffb34d32f995caa9d432603e260d07045eca10ec8006b17ec334d342800e9cd75bde1e1ba57d6e6b42d0a82cc1b3e047bf6fc9ac4e2e32fe72ce0b1c79d24d163c44c03043477a76e8fd7a2efcad511f818f7a0258a6fcd7a8f121d48de8f82137f2a36a169feb0289fc8fa470a62ecce30711a75402a01195904f18dc8b745e981e1e27668618672fe6becb4aaba23114436b1d58c0d0ec6f8dbc755e854b86cf2c0537ef5519028da1f0e7b54564a70839788523e5805dd7672e80af5f9c8b130da178ee202bf4d34331ae9ac558f049d304e8e58192fa88f57055506e50d5843e5310e47b11f69a5bb5b0c5165bc81b895f63bac27f99052a0a68048980d4053645b153e5059693807ce5454989952e838fd5833f5d478934107c7de4323189b8bef2808b18a824ba0b86b32f361ee57bd58f3ea855054f3e816d9a1844eba2ac4a0eebfa056d81ccdf7432975f77b3e2458685027470d5244d891141b1ecb04e66cec081705f4990bcca8a8ed8ae3fa0637a81d04fa5670b7c3f7656b22ca1deab15ae227bc78b78f38056c069181dc8d715bd25681e1a44cc8e48649dcadb4819771cb2d4701cd5f34af7211406326b7d7649bbea5f1c4a209307d358b5e32f3b222f93732f73be83897aa94dd46706f3c8d5176c3a8e3032842c618105b2ded882d49017e710722bc5367aab81c23a88e2e96534b0852ae86e70565f40a3083876bed79566e387bc7f5971a2d2136574f130b4bd0761e103b00597e08a67d3cf00f457a900db7103ad48f50480855109ecde329bf064a5cdd97e0168c326941ebe33107a68ca7d17491439807cdea5faa9beb96e815f39985918fdc85e2a00153f1b50ac49a33663749719450fb7c13be7d571ff34941dd33cd82766348c5ebc08f7ef3c927610383ef3579e719c6a8afa43e020ee9596956c53a4d6a55dddf81b5d379c511b9472c93b9a841f5a564a721e188a7c623da98132ef434bf8d6d5931534be745cacef903a369f3bbdf4d68f24d0a409c0c3d66014ef07e5f2862d5a4fed7e9b214dfc7d2fcf9395491efc3142a57c8675cce88a4b81007baec77178380268c15275119eb3d5fd677a1b8e5b5b3e346dce11086cdff6fcb6e0b4de63125ba8904a938f9e765e87295d6cbcb481865131f54cc7541c99cb89bfd962ee68ef28364c195693f0d9ca834c85f7d981b2a98092d5e61cd3940d86b324574d8ec44f0101dc1fdea2a193f7e2bad6987e7897357db3b2e159c94acfc875b4bb72ed1924efa0a3876b0e454bb062eefab04df48cd0f87ed3563743401ee67976f4494ea1ba740ac703b21b8a88a3637e1dd1a87276691e840aed86356dc1240bf48e78d30d1e08340f0a9d82ec5b50576365da2580d9ec66e7ec634119680a85b1a0973081b3432d207e0725aeca9beb80b80b99e0eedb44e2cc9a6edd639618e31615985c6816dfab5f8832e72b3eba332362840c720919710c8ae097b53dbdeecf6ea82b519b82152dca64bdd47db37a7e9637c17d17bcfff7633a0836ee9044996e61a32112fecec81b8dc347bb4b539c9fae603488c6e9501a6e8c84fcb5b116198d084f55408d766720eb281587014ccbb1e3058c2575822bfacbb1bacaef287873a78061fad65e4ad021d16192ee0edd7ec9bd792288d4d16be0ce21210a2bb6bf09e841920cd7b422e61890382f62cbaddb53cd22c5cc11468b9de27ececa1a4ba8d9deb59d50fd3df6a9a8f97df3c30df1e15be05b753f2ae0a8644846a0f85136b817dfbd865effaca4624e66d18e2cc6172097d1f7246502a7e5f9221c09272d53b716df66ecf4c528d5b4316d9378d605e949ceefab8109bdbe54eff197be31fb03434f114747d56d44618e93d82e6b01b1b0711d13bdeaeb2ecca1f91ab784bdfa468b938dad5804673136c01fe32e8bac5d80ce43c95535bff44ebb5df12371d23c9be7b894891bdf57f4e583e79e10bb34368a2c47d5ca8b27e3aadd154473a40283fdac896687663c5140596ebf6fd47e94a1e809a983c0c9811644299820506afb53571df1d7a8a2d3b3ac4895f00514261a5d68463d651ffc7f64cd8afa3170c458c3f400613561f7660098ff5bba377ee820c5b3ab651be69618b2ad9468c7efa0c1ef8ccfa215953b2cc949b48c6e1701c77ce6261a5798b47349a1d1df2449ed81ac08662502cacb8f7f904bd7c204659c5ab5e934c943a941a096de3af9546c7197dd591422bac91718971d61eb2fb35260afdff3f60225c35ae2af2fd22e7942c18786d6ae84ad92faa65f02dd1325026b10ee1c4b484c597c4c456b58bd08012af593eff317b04069642d8a434826c84f4ac7d8ce27628daf393a93d16201eeea1b527e05a579e19f925c2fa3fae738b4bf5518abd5c0a2fd90d26da346af2fab5065cf136621c4a45e20e73aba16c2e4a2ed8d59b9ed41b498ea30928a8d3b49905bc5676bc73047d3171fa7f3f0528fa5bb2c248970d9a81961559196c8b84197143d5329c315e26f27b7f19bc10ca1beaef0ac404bfb36b28b469845cb23ad95765e4aba63624e9c6ff4a4f05b340d49ebe5f4cde51638596f01751301a392035de2b1bd06b63281f2bf956f9396523f41a15ac3b21a4dd1aefc1f728eb2ff04122e59c890518971024601c952df44686c7ff9cb8ed4c04d5d76e1440019c794e5a34db9dbc42f81368e394768890ae7b3e7dee4af6f71656770da558f6d9dbd8f296761ff91f9b1eaea05ee75bed9d54a1e1fffbf31655c8da3ba36889490b827864e6bf5a4d0893c2fed71897884e010591dcfc412e815305d822172ab4bff8145823f3dd5e0c4531f671db7d510131c82a91149dd75ba771aa2a49f79b8160cf87e65e3df9917eddfea337ed262c457debf696dedae02c091b245f2dffd796650c460ec949026b7a06db3a23469ebfb955ac91f31ec48cddfb8fcb44f356f7f4cdd5ace7e169314a6805d33c7563d6879c848d5b863c7eab9af3530822321e2563796ef7c64025d1c1320390a98251f69c60d3bd9f25b50268fee4bffe7ab8e6f4ac45b0e650b251f7a47e05acfb0c8afe6f7fa7c5b0dbb2fe2a6b9006664fbd6a2a8fcc7068ec753a08ea7f01d7db0852b8c245a73a8e0bd197f3036465facf9a3cd91bad7c55f6bb7e038f4a47fd572cf9ac571f016f494edf673b46d17d00370ce0f2d7715a074a5a8e9c2f512d84f6ce4ccec0e1a572481680ba2f16391222822f3e870d1ea1a148adc54390e2fb7ce3e08e16f6c85912599622923c7946b45e02e114bcee9fa4cc907d781eb07c00ab1a1a02c7a564a2bfaefebc4c5b1630122fa6604036874d2a84f43f5f19ba4d64d34769777e9a63c4916745e6b7bbba28c5db7288b7edb547042d240d1118e978292252eef48f662df44e7a00f836924296f8a75614ff417eb235948d390823c2fdb9368d40d9b327ceb735d2d92796cedad2dfe4dcd519e753d0c3fa805569954c34a98b58be6c52e40a6f530ab094ebbddaecb76eee1876b5e759fb2dfa5c532a25108353b40afb7faff898a22232bab5ff4f327a42edc55807d9b21ffaee8203d8193de867bc93416877f853c3fb16c76c69df9055c12f627e4773b82b021e8545945fd74a5519d1e6d0c60947d23c3e3d96aac9b7302ae12e60a3321b13a09f317277c2b6c1cbf7452d7033089ff478681657f9abd67e2d0fffee0485a744aff6f217b1d0b197221085a01e91a09ba2dce8e8556d3d9bb1b7839b54a3a250f790bbae81c312047503f4ca722d6ef831722", 0x1000, 0x10, &(0x7f0000004540)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x6}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x408000, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @local}, 0x66, {0x2, 0x4e20, @loopback}, 'pim6reg1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, 0x0, 0x40880) socket$can_bcm(0x1d, 0x2, 0x2) 2.269636626s ago: executing program 1 (id=6206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.188242324s ago: executing program 1 (id=6207): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115300000000008510000002000000840300000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x3c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@srh={0x1, 0x4, 0x4, 0x2, 0x80, 0x38, 0x6, [@mcast2, @private1]}]}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="e036d448b3887a428a23e955eeaa", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.120649996s ago: executing program 3 (id=6208): openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x4000004) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xa) (async) r3 = socket$netlink(0x10, 0x3, 0xf) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f00000018c0)=""/120, 0x78}], 0x8}}], 0x1, 0x40010122, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$FIONCLEX(r3, 0x5450) accept4$llc(r5, 0x0, &(0x7f0000000040), 0x80800) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x2e, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5421, &(0x7f00000000c0)=0x7) (async) write$cgroup_int(r8, &(0x7f0000000440)=0x2, 0xe4270493) write$nci(r9, 0x0, 0xffffffd1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0xffffffffffffff17) (async) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0103080ac900800009000900b38f5c6e46aaa1240600"], 0xe) 1.741154117s ago: executing program 4 (id=6209): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x891b, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) socketpair(0x2c, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x9, 'erspan0\x00'}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x6, 0xfe, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x68f4f00d3aa7dce4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000) 1.284670954s ago: executing program 1 (id=6210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000197b7b07040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.152082636s ago: executing program 2 (id=6211): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0xffff393c, 0x6, 0x9}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) (async) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) socket$tipc(0x1e, 0x2, 0x0) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) (async) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 1.000987839s ago: executing program 1 (id=6212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x2000000, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x4, 0x3, 0x0, 0x1000000, 0x200}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x3504, 0x1, 0x1, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0x1bc}}, 0x4000) 816.404569ms ago: executing program 1 (id=6213): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/84, 0x54}, 0x2}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f0000000780)=""/133, 0x85}], 0x9, &(0x7f0000000900)=""/31, 0x1f}, 0x10}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000005440)=""/4096, 0x1000}], 0x1, &(0x7f0000006480)=""/163, 0xa3}, 0x101}], 0x3, 0x10022, 0x0) 804.142422ms ago: executing program 2 (id=6214): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xb, @empty, 0x1}, 0x19) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 529.4537ms ago: executing program 2 (id=6215): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x4000812) 298.428927ms ago: executing program 3 (id=6216): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (rerun: 32) 288.597852ms ago: executing program 4 (id=6217): unshare(0x22020400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xffffffffffffff1e, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4091, 0x1000}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000000)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000000100)={0x0, 0x3938700}) 263.147639ms ago: executing program 0 (id=6218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x70bd28, 0x0, {0xa, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x100a}], 0x1}, 0x100) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 238.359102ms ago: executing program 2 (id=6219): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x6, 0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000080) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 49.314703ms ago: executing program 4 (id=6220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000096e0000000500000a400000000c0a010100000000000000000300002b0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100582e0000140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x7f62c4469923ede5}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) close(0x3) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x3c, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x208}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x48846) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xe, 0x6, @mcast1}}}}}}, 0x0) 0s ago: executing program 3 (id=6221): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000500)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xc60c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r4, &(0x7f0000000040)="240000001e005f0214f6fffffffffff80700000002000000130e0000080000000d001d80", 0x24) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r2, 0x7}, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="feff71621e5bc9832c806c1feecb2031bc59527e378246dc3960954fb359ba9749157ab0aaf6581c8b881135e82c5738bfd1f14a701b3d038c3d45a9493887458e12ab1fdf82a28520c021cce05ad98f3e89ae3da8841900ea86447c474c022f938b34114c9bdfd3dd76630c0004001a8008003f00", @ANYRES32], 0x1238}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000500)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xc60c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) (async) write(r4, &(0x7f0000000040)="240000001e005f0214f6fffffffffff80700000002000000130e0000080000000d001d80", 0x24) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r2, 0x7}, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="1eb5bef4b8267d2836c790ed7e5391ea5ee14038a5ab8366d34875a626e791740850d9ac43dfbbcf49305e7a96b38d2766ee454da122d064896d8943238580a26705516bad7de942e850bdbf5c2d56e289708572dab156fcb51cb19a51209d02d51844726c7926732b05a4365634f3a885e0a0d95400e363e552fe3857a0396d407c927bc02617096be0a144f516790fd3b743fe3938c88a9de226ff9633fbc83b00a588ca5642564c624a0ffbee31639fb2969eaf3c4e83a95e6d284495707cb5c68cbf2231d42533705b82ecb1330060a582576e80fc2f77956eba93bb79cc26642515ab35a0c29ea8307c196ee4b00a8576fba890f6e49567767263d356dda028811e3d01e93c8cb0c3de0676de4aef5726a4847b2ab0014a6f86ca28d785dd1195413ecd5b9b30db24872b039813d851ac156d76ceb624214a4b495cc2ec3ae59e71ce4745f9e993df1bf9d20843c50a45752d0478f83e311f78266db641ad376dd310783009ffb5ea9207383d2dd0fdc6fb0b7aeef848dbf92a108ddece69e9d7531ee59e826cfb3cd800b35105b11a59359bd0d4c4a1d6d09178c5039b2a1d87eec6faa2b226a2735799ccec78f51fa6d77d8d16497a966cefd2e1181b26158d55f5c226953c8f5c73bfe42bd697d48b2b0374530b1f1bf140834997b579d6e4fed4b04d3ee1d2728f223de2c899dd98c1dc621e9f425ec8a0c1f0a9ca282bb546ebf34c7e7698757d74774d40e7f89180fcb68b64b053534b438d539689037c3d614c36525e25155337b7fca1272c90c63622eeddcd8f7adeb780e8d482d6c0887b8fa855f9ea680fd6446b9f9c18b399be444024cffc38a836550927f883fefd9bab2daebfcf1e9eccb8581423ee70137e93de0452755c117999ad457da9aa0adac64a3829a75590dd9db444bdaf367875ee4928f0f53e605e8156b90a038507b38412bd155e962dbecea88d0baf8f62a01df757cfd73cc47837cec19039911350a301414f1fccc224c6899efbc7efe156d8250ce83ac8b414f9516b53294f4c521a7dbeecc160e757fc586a6dbcd51d379c3bea2108d209c31d051ec83e6562171fb96b018c6ec38ff254497dbfc965833a77f5dde4c0b912e4f4030673b7b3b1d1dcbed40cd53ffc768eb33b0c5aebbd5d7baee8cce0a90fb08322054c423cfcd7e48c86fe0c944d9b31f35af8d1691872743ebd6f5ccce32c220cc81e37f09ba780ccd492da3e1e149ff87e1f288279c65b2ef92f55e8c6a33d3626b830aee1da2f0fdf76fd871412ac85972abe1780a97d6f5973f29eeca08aee2a5b2105bfbae833bbcf11373266c41bc35078b30b2b7d51ee34d7bd9b750f55c479829fdad126f70dba6a43fdb5649ebf57359d8d3f9c491d4849dd500395f387d31a0ec7f55b91072513c86765fe0386ad5feb1c26df1e95bd52d8ac5a988387f4ab9c18d94f618c94606bd5af95fa3d6f15e3f02e6934016e7b41a5a70d7b5e0a15bf28a9cfb4853958809e3dbb8bd8919fbb2705ddfcdac64c5888932c078a1f0a2f9c0a9c5c815b5c02e6f2791cff9e0e1f9e1b7626eb4f9ece84f6665a1e103fbd5c65f1ebd632ecd144306c0904599e33a7260c311f28dd1dcc71aa28fbfb5c89cfaf19ba540e838c9fc2456562b77f66d1cfb7fd9e5955b508fde72e5b58b23aa729ff7659c282c8e3573f2607ddf4df4900deb72ff477478c3b8dbd9fc24d145e39da3d200dd2a375f48a3244358c0133b9d5796c69cbe4dcabfbe14869611064d777c5f072d8277b044752a3be4b8ffd111d4b8746857149bd1e09060cb4136f2ee4f47d2beb11a654e8a33317574bba10311e39c959d8a2a4712634cf826686f170b853ce31a0072e4609434eec6b974db5b8ef4ded6c79efa90fb428ddf1d5a5c4c9bd3aada354e1fe99c4603d42ccd7f5bd6553642020eb10425b6501263f588678b35a122ec0d940e419e875c2f7d45bcecf97ecffb63834737dbb0c500584e5e13df467da945b25e53456e719e74a5e018735b7933d22e54bb2a5f37c3db65b3efbabeda25139f141272dc1cbac1b68bce5b68f65f5056307443ece9087c9ccb34a0933965c2c340cdcc745c6daba67d36c76f59847b32ab0eb74e36ddb62c8b4ef69f1e0f68930920c0681e2b9e146d139e311c4c705f372adc4c30b4ae544d91b987db7d70ed9e2597ebfc03fec80d32854e88786b5aaad1db6b6321de1083fd9a30d568d0743317e696d10a5233b8d019cac81a39c22cedc5d5cb361f3dfbddd021655d178f32fbc1413fa18b5c4598610125afeed65858e6ffc561c1b398251c5bf3acfb6e54eb27148f154a88c88e62f9bb7d5ce549eef2ea79d6cc788e00728188a3c71c30c051c763456e280c0a78a4cf06ec063af053f85832483a6df5ce3389d85b73fe5e9c0c49297b4dd468d9a797299b8930f5166ea1e319d073fefd287d396610e6760e37276b793faecdb2727ff0806542f0738511476f474bce2f003955b8c188d676adab53c935f670e441ff9deddb88ceabf41290cb8589f94bbabf41c062bfb4fa2a30d0b289d74cd93e00af365cb79a4a7921df9192aa0e0fbf85d7b11e8eee2a9b7e9ebf25a75a9a487ea0288e88b9be079d1e71de82bffdac32786ebeec58d28ed59c47e3f660362735f13ef81f93b71278329fca942847121b9afe691989ce5bbb7674d3a734cab9e61de41dc1a1d35d8cfe3c461df5718cfa2e61cd897eddb9a3feb2280772ef594917ae5817835e30d4cda1aab3efa552ea1d26c5a28104281515b19410c33c103588995f99b4aeae603ea1d2c90a09fc83a4bd99cacf8c729e2f28d6bd6d7dbd13d0bcbd58c236d3477fa9c7438e04302bb5b2dec8985ee51385ed4f5fcf1998340b841d7ca335be6186b98d15b13fce77032cf1fdfb9ab8aee4574753e552321a0f97f0e70391e332ad6d8dce77e00293c362771a740e96d6dd861ed9716d5943f10a6c2d362c617934cb4a749df9a857e73321bf4921dc232b32eef210f119f8b2c795d9c895134383f09575aff811a4b6eecd1db78fa316670a9cfd2966df9a86e5a94ae4e5318d8986f8d141659022b6922725b838a457df21f52627c039a723f08ebb5f5498ffb32cadf5d79444b66096d153e8c48dd25019f73324e0db02c8e37f2e8980c999d6d959c93d1f2fbd30e6ee3ab0d93dc3bac77a513bf3c579e09a0788bdaa06595aa7b6e73feef650eafced8daa89aa28a597b5d1cc22d34707bbfddf1c80b7275bc05b452df293708f8f827c18bf7ed7ecc48df5ef58d6e8028c5df7146a4c9bc8c4cb36410ddf7b80208e76f54ac94eabdd1c4b70fa50032428b5779df92fee4614d1dcf87196af0cc29342a3e3d7b5426ac1bb58efe94645c2cbf05b4d446ceeb0bce84ddba05bb925874ad3f2d5e4060dd7e25eddf8b0eb0396576820b182a809a4aafce8fca75b957497658063d03cbf2e536b99e4404b451ae0e3bfc5c2d9bdb4b523c402a205d2ece78dde3a3537a7231e3c0eda45e568a6651afb4cb0622abe1f8a46fc660131fcf8fce53c300eba808e83e6f54da15eb8901e0e562c0000d57fd2b8edf3ebae238656675df50b82af39c699380dff430460dbdb6e67da404b95771f0ce06dcd5e7ed344a5cce8ffd11e813e382c09ef19371ab72fbd89bf9d980febdc8ba59c472d8386f87bc49f8238a40e21a0284d7940bdd88238e87320aa5fb11605c602f15dd6831cb5db957490f690b5a2231a4f467852556e6edf8072fb1756ec7347b0b78b13fc28c42614924a8ff5bfe3ba0c9aecb725735183cc4fc25171bc23622e0a660f078f18c6e31608562cfdb1b7b2bab3c6f9989b8733cc4d13e1cb836d046412bfd2f0f5b8bfd5a63dbcb579abbcb58c9121be25dd1cc3064da38124a2866de4ce01b3bb0f27e78659d1835baa8cd1ee2e62c5c7078bc1e42409bbdfc88460c8c266255df5270d300c5011e47a5972daef570121b97886de0b5f98a4d096fd3569bdce81c18370765221d5d3dcfbe7ffacee8ca632c90e3da0fb7902f829da00588ada850410c98bc555bd15bd1504d789e053138b76b2179a6f0cad15db23ca57f127c09e44ecdd22f82dc1b3d21dee8dba787626daa2938a114521a58657f5f73a3232fcc56fcbc20f6968d13ec521d7bfb4ed8f6c65a019fb85d0723101d5a5f5c1507ddf4d4a226495d4e8d9cc0385ed4da3ea93eb97af0529b0450a56ae9b8c4c035d428cac265a378e4f5d5fa1571cc1b1b290fdb1468975eb00f680a8528527cc0dbf7ba0ff0e8e94bb09ee8ea640b9cd6faa14c073012d28c031e262520eaf84e55ae75bd8644500fab968209e953fe302aa4ac132be65f4d151e74115249ea844c7a485a85134f15b35b1e8822a2fe93fd11db762c82317c0d5e8cd3becfd3726c14ce532fe9cc7cb8837e856748adb5a73e38279c9416b39337b7c257efbd5c2b54d5b5fa86e4fb176a70f38cfcb781c23bc0bea1365eb2032b562845a936857456be0cba62b244aeca11f15b4c3f1c084c54b984db4f5bffeb25c2a4374546fc80063c1ca13d359b2eeda67deee3481183efe50382aa8d636b04f103bc8e3287b8a8c4d5138440f9b72b8f409eb1b83d03da40302dd7f4f06e863ad8fe0f7c644eb7db6f67d2ff79bd337ddc5e6bb884d81dd22ab21e0b2c57ffd96255970a075b27afd60c2e4db8af5b96beaaa26b8a197fb4da3e7b2056ecc18039f8ae892d840788df83801a186de8872c35a7bc517ddf2292975e777b92a7ffa35e52f0127577788f613dd94a2c4173001a3f4b2f8b570feeece654c2c510a4e8bc2700267a3ffe29badbbb4bc1e6ad336a0b55e498358aae84d3ee6aebc10ccf7418cfb9c9a1e3dbfe742e71832624100f0d62155730cdc44b9234e24fd0999f039c8129a109aa15563621ab4d64c4c7d670fdb21ef9ad2ce6729ae8d8d36cb8faf8c897de551f68e09ee7ae4154e0988b1efcdcb0f14ad8282edda578179e3364ce7d0e39c0fb36c7bbebe1428c023527d60543be4f5793cd6ef50f971793daf26548ad597b431c8800aca7ec8f5eae3d944149c0d6180272107ef32299135a7fe0769455dce557532371f65102334c5414d89909996f1f3e338f8323f210d9a8f583b30c8ccf0b7be30e15637c0c0b40344d925e7ca78a61ee40f87151615df96895faa448de533ffc91eb45cef9f7e7ed52a4d38e6be48807f0d9c0d238f61def57d02cf3ba9efd9987498973e3aecd0816e19440cd650d7b818cfe56e4f3e3827977e4aa60b690c74bb860d537e24db943c062c9a53f2b0aca59620fbcb385329b5188d3f43311e18a0558cb6069707cbb04579cf755c792a1130469998acf1093529abdacac8a6ddda8b76a72ea7381d7ca63f244d68622bbd70704313a7b6ed2854afb6bf9d0030924fc3e9581be3a77cb9d3f7ec6c6166318acde931a3c6f1bfaf184ab2b86b20a361fb1d9b20b371d7a6f950d132f4713e07d8bdb315bd1792651e408d7f23dad4db6a0cf6f44617a5bd1deb7812a870f65153ddf61a34a3ba8b90d53b3b9aea6f05307100cff64f3ae7a58221dcf60527eacc507f2a6711bd6ac5b6eee65a3205ec147ff6d9eda41d5af4f8552fc75141af088174101bd1a8b580dcf2ea3e7c6aecd7157ff322fb105cff4994c9ce58a11c805bef40a4ddfbd0060f2601ae6558b3f0f4226bfdb17348613817807004b76c6649ad4823f3685a53b78f5c9f5042439287aa8973226ea836782f73fbf4f2c7851097586f4aa78d40e089b0da8cd083b8d0024800800cb00", @ANYRES32, @ANYBLOB="feff71621e5bc9832c806c1feecb2031bc59527e378246dc3960954fb359ba9749157ab0aaf6581c8b881135e82c5738bfd1f14a701b3d038c3d45a9493887458e12ab1fdf82a28520c021cce05ad98f3e89ae3da8841900ea86447c474c022f938b34114c9bdfd3dd76630c0004001a8008003f00", @ANYRES32], 0x1238}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) (async) kernel console output (not intermixed with test programs): er_hwframe+0x77/0x7f [ 707.047472][T24652] do_syscall_64+0x174/0x580 [ 707.047496][T24652] ? trace_irq_disable+0x3b/0x140 [ 707.047528][T24652] ? clear_bhb_loop+0x40/0x90 [ 707.047554][T24652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.047576][T24652] RIP: 0033:0x7f230799ce59 [ 707.047596][T24652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.047614][T24652] RSP: 002b:00007f230884a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.047637][T24652] RAX: ffffffffffffffda RBX: 00007f2307c15fa0 RCX: 00007f230799ce59 [ 707.047653][T24652] RDX: 000000002404000a RSI: 0000200000000180 RDI: 0000000000000003 [ 707.047667][T24652] RBP: 00007f230884a090 R08: 0000000000000000 R09: 0000000000000000 [ 707.047680][T24652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.047693][T24652] R13: 00007f2307c16038 R14: 00007f2307c15fa0 R15: 00007fff63a07458 [ 707.047726][T24652] [ 707.582510][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.600983][T24670] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4914'. [ 707.839153][T24670] bond_slave_0: left promiscuous mode [ 707.853368][T24670] bond_slave_1: left promiscuous mode [ 707.896759][T24670] bond0 (unregistering): left allmulticast mode [ 707.922099][T24670] bond_slave_0: left allmulticast mode [ 707.929943][T24670] bond_slave_1: left allmulticast mode [ 707.936061][T24670] team0: left allmulticast mode [ 707.941567][T24670] team_slave_0: left allmulticast mode [ 707.947986][T24670] team_slave_1: left allmulticast mode [ 707.954613][T24670] team_slave_0: left promiscuous mode [ 707.962233][T24670] team_slave_1: left promiscuous mode [ 708.037505][T24670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.084522][T24670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.122390][T24670] bond0 (unregistering): (slave team0): Releasing backup interface [ 708.209634][T24670] bond0 (unregistering): Released all slaves [ 708.258522][T12769] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 708.270107][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4917'. [ 708.319959][T12769] bond3: now running without any active interface! [ 708.694082][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.722245][T24716] openvswitch: netlink: Flow key attr not present in new flow. [ 708.974402][T24736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.983026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.140078][T24740] netlink: 'syz.0.4932': attribute type 1 has an invalid length. [ 709.269478][T24740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.317745][T24741] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 709.383608][T24753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4937'. [ 709.505418][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4937'. [ 709.562471][ T1617] block nbd4: Possible stuck request ffff888027d77000: control (read@0,1024B). Runtime 300 seconds [ 709.573370][ T1617] block nbd4: Possible stuck request ffff888027d771c0: control (read@1024,1024B). Runtime 300 seconds [ 709.585123][ T1617] block nbd4: Possible stuck request ffff888027d77380: control (read@2048,1024B). Runtime 300 seconds [ 709.596311][ T1617] block nbd4: Possible stuck request ffff888027d77540: control (read@3072,1024B). Runtime 300 seconds [ 709.769634][T24770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4938'. [ 709.923726][T24778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.031816][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.262660][T24790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4946'. [ 710.273080][T24796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4946'. [ 710.885820][T24829] FAULT_INJECTION: forcing a failure. [ 710.885820][T24829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.901530][T24829] CPU: 0 UID: 0 PID: 24829 Comm: syz.4.4953 Not tainted syzkaller #0 PREEMPT(full) [ 710.901574][T24829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.901590][T24829] Call Trace: [ 710.901599][T24829] [ 710.901608][T24829] dump_stack_lvl+0xe8/0x150 [ 710.901638][T24829] should_fail_ex+0x40c/0x560 [ 710.901679][T24829] _copy_from_iter+0x1d3/0x1660 [ 710.901705][T24829] ? rcu_is_watching+0x15/0xb0 [ 710.901736][T24829] ? __pfx__copy_from_iter+0x10/0x10 [ 710.901754][T24829] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 710.901792][T24829] ? netlink_sendmsg+0x650/0xb40 [ 710.901822][T24829] ? skb_put+0x112/0x210 [ 710.901846][T24829] netlink_sendmsg+0x6c0/0xb40 [ 710.901881][T24829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.901909][T24829] ? aa_sock_msg_perm+0xf1/0x1b0 [ 710.901943][T24829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 710.901971][T24829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.901997][T24829] ____sys_sendmsg+0x9b9/0xa20 [ 710.902020][T24829] ? __might_fault+0xaf/0x130 [ 710.902056][T24829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.902097][T24829] ? import_iovec+0x73/0xa0 [ 710.902126][T24829] ___sys_sendmsg+0x2a5/0x360 [ 710.902148][T24829] ? __lock_acquire+0x683/0x2cd0 [ 710.902175][T24829] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.902236][T24829] ? __fget_files+0x2a/0x420 [ 710.902262][T24829] ? __fget_files+0x3a2/0x420 [ 710.902300][T24829] __x64_sys_sendmsg+0x1bd/0x2a0 [ 710.902327][T24829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 710.902362][T24829] ? __pfx_ksys_write+0x10/0x10 [ 710.902407][T24829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.902432][T24829] do_syscall_64+0x174/0x580 [ 710.902456][T24829] ? trace_irq_disable+0x3b/0x140 [ 710.902488][T24829] ? clear_bhb_loop+0x40/0x90 [ 710.902515][T24829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.902537][T24829] RIP: 0033:0x7f0df859ce59 [ 710.902557][T24829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.902575][T24829] RSP: 002b:00007f0df945c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.902599][T24829] RAX: ffffffffffffffda RBX: 00007f0df8815fa0 RCX: 00007f0df859ce59 [ 710.902614][T24829] RDX: 000000002404000a RSI: 0000200000000180 RDI: 0000000000000003 [ 710.902627][T24829] RBP: 00007f0df945c090 R08: 0000000000000000 R09: 0000000000000000 [ 710.902640][T24829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.902652][T24829] R13: 00007f0df8816038 R14: 00007f0df8815fa0 R15: 00007ffe2ba66ef8 [ 710.902685][T24829] [ 711.196512][T12758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.515894][T24843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4957'. [ 711.617034][T24847] netlink: 'syz.0.4959': attribute type 27 has an invalid length. [ 711.880039][T24859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4960'. [ 712.310851][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.844638][T24885] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4971'. [ 712.854646][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 712.875212][T24885] IPVS: nq: FWM 3 0x00000003 - no destination available [ 712.900159][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.129542][T24895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.138771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.152436][T24873] virt_wifi0 speed is unknown, defaulting to 1000 [ 713.421449][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.432528][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4977'. [ 713.717075][T24926] netlink: 652 bytes leftover after parsing attributes in process `syz.2.4984'. [ 713.738920][T24914] 8021q: adding VLAN 0 to HW filter on device bond11 [ 713.747161][T24914] bridge0: port 1(bond11) entered blocking state [ 713.754232][T24914] bridge0: port 1(bond11) entered disabled state [ 713.762155][T24914] bond11: entered allmulticast mode [ 713.770940][T24914] bond11: entered promiscuous mode [ 713.777074][T24914] bridge0: port 1(bond11) entered blocking state [ 713.783708][T24914] bridge0: port 1(bond11) entered forwarding state [ 713.827448][T24926] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.943917][T24920] bond6: option lacp_rate: invalid value (128) [ 713.967718][T24920] bond6 (unregistering): Released all slaves [ 714.041471][T24926] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4984'. [ 714.050718][T24926] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4984'. [ 714.187252][T24936] syzkaller0: entered promiscuous mode [ 714.193258][T24936] syzkaller0: entered allmulticast mode [ 714.552486][T12767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.648303][T24935] bond1: left promiscuous mode [ 714.665780][T24935] ipip0: left promiscuous mode [ 714.709974][T24935] bond2: left promiscuous mode [ 714.720277][T24935] macvlan2: left allmulticast mode [ 714.728361][T24935] gretap0: left allmulticast mode [ 714.743004][T24935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.755964][T24935] bridge2: left promiscuous mode [ 714.764337][T24935] bridge2: left allmulticast mode [ 714.776421][T24935] geneve2: left promiscuous mode [ 714.782157][T24935] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 714.811728][T22146] bridge0: entered promiscuous mode [ 714.888487][T12719] bridge0: port 1(bond11) entered disabled state [ 714.924933][ T6073] syz0: Port: 1 Link ACTIVE [ 715.295096][T24975] netlink: 'syz.3.5000': attribute type 3 has an invalid length. [ 715.665990][T24988] netlink: 'syz.3.5000': attribute type 1 has an invalid length. [ 715.687434][T12758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.702498][T24995] tunl0: Caught tx_queue_len zero misconfig [ 715.749058][T24995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5005'. [ 716.004335][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 716.520728][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 716.588782][T25035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5017'. [ 716.695358][T25045] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5019'. [ 716.808885][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.104690][T25057] syzkaller0: entered promiscuous mode [ 717.131684][T25057] syzkaller0: entered allmulticast mode [ 717.227174][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5021'. [ 717.640479][T25086] net_ratelimit: 2 callbacks suppressed [ 717.640500][T25086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.655149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.682828][T25088] netlink: 'syz.1.5030': attribute type 58 has an invalid length. [ 717.702907][T25088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5030'. [ 717.952618][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.071790][T25090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.080861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.246411][T25086] syzkaller0: entered promiscuous mode [ 718.252704][T25086] syzkaller0: entered allmulticast mode [ 718.703814][T25114] 8021q: adding VLAN 0 to HW filter on device bond10 [ 719.113162][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.221832][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.086851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.166519][T25118] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 721.171271][T25120] syzkaller1: entered promiscuous mode [ 721.185615][T25120] syzkaller1: entered allmulticast mode [ 721.324252][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.383895][T25142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5041'. [ 721.536647][T12714] bond10: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 721.578538][T12714] bond10: (slave veth5): making interface the new active one [ 721.589341][T25147] netlink: 'syz.1.5043': attribute type 10 has an invalid length. [ 721.635809][T12714] bond10: active interface up! [ 722.443132][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.497492][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 723.118688][T25213] pim6reg: entered allmulticast mode [ 723.141568][T25213] pim6reg: left allmulticast mode [ 723.347233][T25226] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5070'. [ 723.498340][T25231] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 723.581747][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.927373][T25243] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5077'. [ 724.682137][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.527044][T25186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.778131][T25262] sctp: [Deprecated]: syz.3.5085 (pid 25262) Use of int in maxseg socket option. [ 725.778131][T25262] Use struct sctp_assoc_value instead [ 725.800848][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.979410][T25267] openvswitch: netlink: Flow actions attr not present in new flow. [ 726.025349][T25273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.094301][T25273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.148415][T25273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.172674][T25273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.184896][T25273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.966717][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5103'. [ 727.128929][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 727.455838][T25349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5113'. [ 727.696352][T25355] syzkaller0: entered promiscuous mode [ 727.705903][T25355] syzkaller0: entered allmulticast mode [ 727.724721][T25355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5114'. [ 727.748805][T25364] netlink: 'syz.1.5117': attribute type 1 has an invalid length. [ 727.766099][T25355] ipvlan0: entered allmulticast mode [ 727.783376][T25355] veth0_vlan: entered allmulticast mode [ 727.810291][T25364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5117'. [ 727.938279][T25370] FAULT_INJECTION: forcing a failure. [ 727.938279][T25370] name failslab, interval 1, probability 0, space 0, times 0 [ 727.992253][T25370] CPU: 0 UID: 0 PID: 25370 Comm: syz.0.5120 Not tainted syzkaller #0 PREEMPT(full) [ 727.992283][T25370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.992297][T25370] Call Trace: [ 727.992305][T25370] [ 727.992315][T25370] dump_stack_lvl+0xe8/0x150 [ 727.992346][T25370] should_fail_ex+0x40c/0x560 [ 727.992387][T25370] should_failslab+0xa8/0x100 [ 727.992423][T25370] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 727.992458][T25370] ? __alloc_skb+0x189/0x7a0 [ 727.992490][T25370] ? __alloc_skb+0x1d7/0x7a0 [ 727.992520][T25370] ? __local_bh_enable_ip+0xd0/0x130 [ 727.992547][T25370] __alloc_skb+0x1d7/0x7a0 [ 727.992585][T25370] netlink_sendmsg+0x5d4/0xb40 [ 727.992619][T25370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.992647][T25370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 727.992681][T25370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 727.992709][T25370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.992735][T25370] ____sys_sendmsg+0x9b9/0xa20 [ 727.992759][T25370] ? __might_fault+0xaf/0x130 [ 727.992795][T25370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.992829][T25370] ? import_iovec+0x73/0xa0 [ 727.992857][T25370] ___sys_sendmsg+0x2a5/0x360 [ 727.992880][T25370] ? __lock_acquire+0x683/0x2cd0 [ 727.992909][T25370] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.992971][T25370] ? __fget_files+0x2a/0x420 [ 727.992998][T25370] ? __fget_files+0x3a2/0x420 [ 727.993036][T25370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 727.993062][T25370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.993097][T25370] ? __pfx_ksys_write+0x10/0x10 [ 727.993138][T25370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.993170][T25370] do_syscall_64+0x174/0x580 [ 727.993195][T25370] ? trace_irq_disable+0x3b/0x140 [ 727.993227][T25370] ? clear_bhb_loop+0x40/0x90 [ 727.993254][T25370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.993276][T25370] RIP: 0033:0x7f0c1699ce59 [ 727.993296][T25370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.993314][T25370] RSP: 002b:00007f0c1777e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.993338][T25370] RAX: ffffffffffffffda RBX: 00007f0c16c15fa0 RCX: 00007f0c1699ce59 [ 727.993354][T25370] RDX: 0000000004040080 RSI: 0000200000000500 RDI: 0000000000000003 [ 727.993368][T25370] RBP: 00007f0c1777e090 R08: 0000000000000000 R09: 0000000000000000 [ 727.993381][T25370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.993393][T25370] R13: 00007f0c16c16038 R14: 00007f0c16c15fa0 R15: 00007ffd17347df8 [ 727.993428][T25370] [ 728.264424][T25373] syzkaller1: entered promiscuous mode [ 728.270050][T25373] syzkaller1: entered allmulticast mode [ 728.455007][T25381] netlink: 'syz.4.5126': attribute type 1 has an invalid length. [ 728.627615][T25381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.656908][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 728.729975][T25394] ipt_REJECT: ECHOREPLY no longer supported. [ 728.794360][T25388] macvlan3: entered promiscuous mode [ 728.811418][T25388] macvlan3: entered allmulticast mode [ 728.828403][T25388] bond0: entered allmulticast mode [ 728.835311][T25388] bond0: entered promiscuous mode [ 728.841919][T25388] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 728.854984][T25388] team0: Port device macvlan3 added [ 728.933692][T25381] bond0: (slave ip6gretap2): making interface the new active one [ 728.951340][T25381] ip6gretap2: entered promiscuous mode [ 728.961348][T25381] ip6gretap2: entered allmulticast mode [ 728.974722][T25381] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 728.984327][T25399] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5132'. [ 729.338724][T25418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5137'. [ 729.384797][T12719] net_ratelimit: 54 callbacks suppressed [ 729.384816][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.595686][T25431] syzkaller0: entered promiscuous mode [ 729.630931][T25431] syzkaller0: entered allmulticast mode [ 729.645592][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5140'. [ 730.250222][T25459] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5147'. [ 730.296719][T25465] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 730.407570][T25468] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 730.561415][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.847722][T25482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5155'. [ 730.869812][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5154'. [ 730.891558][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5155'. [ 731.176937][T25495] vlan3: entered promiscuous mode [ 731.193351][T25495] bridge0: entered promiscuous mode [ 731.219326][T25497] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 731.692436][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.800908][T12758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.954513][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.963222][T25550] bridge0: entered allmulticast mode [ 732.984937][T25550] bond11: left allmulticast mode [ 732.998100][T25550] bond11: left promiscuous mode [ 733.004263][T25550] bridge0: port 1(bond11) entered disabled state [ 733.013303][T25550] bridge_slave_1: left allmulticast mode [ 733.019153][T25550] bridge_slave_1: left promiscuous mode [ 733.028261][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.931158][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.526942][ T1655] block nbd0: Possible stuck request ffff8880a2830000: control (read@0,1024B). Runtime 30 seconds [ 734.537990][ T1655] block nbd0: Possible stuck request ffff8880a28301c0: control (read@1024,1024B). Runtime 30 seconds [ 734.549256][ T1655] block nbd0: Possible stuck request ffff8880a2830380: control (read@2048,1024B). Runtime 30 seconds [ 734.560476][ T1655] block nbd0: Possible stuck request ffff8880a2830540: control (read@3072,1024B). Runtime 30 seconds [ 734.599470][T25507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.756946][T25561] netlink: 'syz.2.5178': attribute type 4 has an invalid length. [ 734.791762][T25561] __nla_validate_parse: 4 callbacks suppressed [ 734.791780][T25561] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5178'. [ 734.881490][T25566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5179'. [ 734.938367][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'. [ 735.041184][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.165835][T25574] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 735.187093][T25575] tipc: Enabled bearer , priority 0 [ 735.222143][T25571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.257200][T25571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.316346][T25571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.352618][T25571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.397170][T25571] batman_adv: batadv0: Interface deactivated: wlan0 [ 735.410152][T25586] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 735.428514][T25571] batman_adv: batadv0: Removing interface: wlan0 [ 735.441351][T25571] batman_adv: batadv0: Interface deactivated: gretap1 [ 735.448490][T25571] batman_adv: batadv0: Removing interface: gretap1 [ 735.455953][T25589] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5185'. [ 735.473871][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5185'. [ 735.529036][T25593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 735.545926][ T30] audit: type=1800 audit(1781568751.443:11): pid=25594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5187" name="memory.events" dev="tmpfs" ino=1619 res=0 errno=0 [ 735.657400][T25590] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 735.709592][T25590] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 735.741653][T25590] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 735.838159][T25590] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 736.069468][T12758] smbdirect: ib_dev[syz2] removed [ 736.161178][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.273800][T25611] netlink: set zone limit has 4 unknown bytes [ 736.425101][T21995] tipc: Node number set to 2732287813 [ 736.516530][T25628] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 736.719147][T25638] netlink: 'syz.3.5197': attribute type 4 has an invalid length. [ 736.737663][T25638] netlink: 'syz.3.5197': attribute type 4 has an invalid length. [ 736.764255][T25640] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5198'. [ 736.858868][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 737.271471][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.483646][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5205'. [ 737.849624][T25655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.313921][T25694] netlink: 'syz.2.5209': attribute type 13 has an invalid length. [ 738.329795][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5213'. [ 738.350484][T25701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5212'. [ 738.381760][T12758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.391585][T25698] netlink: 'syz.4.5212': attribute type 8 has an invalid length. [ 738.476706][T25700] team1: entered promiscuous mode [ 738.493377][T25700] team1: entered allmulticast mode [ 738.517268][T25700] 8021q: adding VLAN 0 to HW filter on device team1 [ 738.727409][T25682] virt_wifi0 speed is unknown, defaulting to 1000 [ 738.737935][T25714] netlink: 'syz.4.5218': attribute type 1 has an invalid length. [ 738.807066][T25714] bond8: entered promiscuous mode [ 738.812660][T25714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.879453][T25714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.887373][T25714] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 738.898353][T25714] bond8: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 738.914292][T25714] bond8: (slave ipip0): making interface the new active one [ 738.922389][T25714] ipip0: entered promiscuous mode [ 738.930003][T25714] bond8: (slave ipip0): Enslaving as an active interface with an up link [ 739.385754][T25734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.511890][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.643705][ T1617] block nbd4: Possible stuck request ffff888027d77000: control (read@0,1024B). Runtime 330 seconds [ 739.655399][ T1617] block nbd4: Possible stuck request ffff888027d771c0: control (read@1024,1024B). Runtime 330 seconds [ 739.667718][ T1617] block nbd4: Possible stuck request ffff888027d77380: control (read@2048,1024B). Runtime 330 seconds [ 739.682558][ T1617] block nbd4: Possible stuck request ffff888027d77540: control (read@3072,1024B). Runtime 330 seconds [ 739.893784][T25748] __nla_validate_parse: 3 callbacks suppressed [ 739.893806][T25748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5230'. [ 740.080905][T25760] pim6reg: entered allmulticast mode [ 740.279460][T25780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.317965][T25777] nbd: socks must be embedded in a SOCK_ITEM attr [ 740.432477][T25783] netlink: 'syz.3.5239': attribute type 2 has an invalid length. [ 740.527266][T25787] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 740.642725][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.919122][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5247'. [ 740.951322][T25805] v: renamed from gre0 (while UP) [ 740.978300][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5247'. [ 741.006358][T25805] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 741.214473][T25820] netlink: 'syz.0.5250': attribute type 12 has an invalid length. [ 741.268953][T25818] netlink: 'syz.2.5252': attribute type 12 has an invalid length. [ 741.269619][T25825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5253'. [ 741.281352][T25826] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5251'. [ 741.536868][T25832] x_tables: duplicate entry at hook 2 [ 741.772756][T12764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.908450][T25852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5262'. [ 741.921796][T25852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5262'. [ 741.981071][T25856] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5264'. [ 742.119993][T25866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5267'. [ 742.247588][T25868] xfrm0: entered allmulticast mode [ 742.302929][T25868] netlink: 'syz.1.5269': attribute type 1 has an invalid length. [ 742.361556][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5272'. [ 742.592240][T25888] sch_fq: defrate 9 ignored. [ 742.903185][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.115348][T25911] netlink: 'syz.2.5283': attribute type 1 has an invalid length. [ 743.153880][T25913] netlink: 'syz.1.5285': attribute type 5 has an invalid length. [ 743.529357][T25934] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 743.734316][T25934] bond12: entered promiscuous mode [ 743.753848][T25934] 8021q: adding VLAN 0 to HW filter on device bond12 [ 744.021240][T12719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.271626][T25934] bond12: (slave bridge5): making interface the new active one [ 744.290166][T25934] bridge5: entered promiscuous mode [ 744.315269][T25934] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 744.594207][T25966] team0: No ports can be present during mode change [ 744.655491][T25966] batadv_slave_0: Caught tx_queue_len zero misconfig [ 744.669462][T25966] lo: Caught tx_queue_len zero misconfig [ 744.814004][T25981] netlink: 'syz.2.5303': attribute type 4 has an invalid length. [ 744.967305][T25987] __nla_validate_parse: 6 callbacks suppressed [ 744.967326][T25987] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5304'. [ 745.122728][T25991] openvswitch: netlink: Duplicate or invalid key (type 0). [ 745.132941][T25991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.164083][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.500844][T26003] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.5311'. [ 745.785965][T26021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.812794][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5314'. [ 746.283670][T26040] geneve1: entered promiscuous mode [ 746.312512][T12758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.707099][T26023] virt_wifi0 speed is unknown, defaulting to 1000 [ 746.833758][T26056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5326'. [ 747.324794][T26075] erspan0: entered promiscuous mode [ 747.347130][T26075] vlan1: entered promiscuous mode [ 747.410044][T26071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5326'. [ 747.437880][T26071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5326'. [ 747.463786][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.679056][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5335'. [ 747.857178][T26096] bond0: (slave ip6tnl0): refused to change device type [ 747.875334][T26096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5338'. [ 748.103865][T26101] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5337'. [ 748.109274][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'. [ 748.134924][T26101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.173152][T26102] ip6erspan0: entered allmulticast mode [ 748.207800][T26103] netlink: 'syz.2.5337': attribute type 12 has an invalid length. [ 748.237510][T26120] xt_recent: Unsupported userspace flags (000000b1) [ 748.328792][T26124] sctp: [Deprecated]: syz.3.5343 (pid 26124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.328792][T26124] Use struct sctp_sack_info instead [ 748.583133][T26141] tipc: Started in network mode [ 748.589171][T26141] tipc: Node identity ca1f7e543c5d, cluster identity 4711 [ 748.598066][T26141] tipc: Enabled bearer , priority 0 [ 748.627171][T26141] tipc: Resetting bearer [ 748.633900][T26140] pim6reg0: tun_chr_ioctl cmd 35111 [ 748.709530][T26141] tipc: Resetting bearer [ 749.756916][T26202] xt_recent: Unsupported userspace flags (000000b1) [ 749.811939][ T6073] tipc: Node number set to 4131552852 [ 749.836705][T26209] sctp: [Deprecated]: syz.1.5370 (pid 26209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.836705][T26209] Use struct sctp_sack_info instead [ 750.345892][T26234] __nla_validate_parse: 5 callbacks suppressed [ 750.345911][T26234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5379'. [ 750.559370][T26245] netlink: 'syz.3.5383': attribute type 17 has an invalid length. [ 750.735219][T26249] vxlan0: entered promiscuous mode [ 750.745800][T26249] vxlan0: entered allmulticast mode [ 750.956890][T26245] ip6gre1: left allmulticast mode [ 750.982011][T26245] team1: left promiscuous mode [ 750.987032][T26245] team1: left allmulticast mode [ 750.993730][T26245] bond12: left promiscuous mode [ 750.998850][T26245] bridge5: left promiscuous mode [ 751.008811][T12764] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.022540][T12764] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.047909][T12764] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.074976][T12764] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.235086][T26272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5393'. [ 751.269444][T26272] netlink: 'syz.1.5393': attribute type 5 has an invalid length. [ 751.279691][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5393'. [ 752.566075][T26325] bridge9: entered promiscuous mode [ 752.947488][T26354] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 753.261233][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'. [ 753.542431][T26374] openvswitch: netlink: Message has 4 unknown bytes. [ 753.561380][T26374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.582349][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5429'. [ 753.798357][T26385] tipc: Failed to remove unknown binding: 66,0,0/0:167903990/167903992 [ 753.818784][T26385] tipc: Failed to remove unknown binding: 66,0,0/0:167903990/167903991 [ 753.828544][T26375] tipc: Failed to remove unknown binding: 66,0,0/0:167903990/167903992 [ 753.841794][T26375] tipc: Failed to remove unknown binding: 66,0,0/0:167903990/167903991 [ 754.476785][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5435'. [ 755.162294][T26430] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5448'. [ 755.408057][T26437] syzkaller0: entered promiscuous mode [ 755.415378][T26437] syzkaller0: entered allmulticast mode [ 755.433473][T26436] tipc: Enabled bearer , priority 0 [ 755.441824][T26442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5452'. [ 755.498594][T26436] tipc: Resetting bearer [ 755.556494][T26436] tipc: Disabling bearer [ 755.757833][T26451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5455'. [ 755.786417][T26451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5455'. [ 756.689885][T26451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.712403][T26451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.091100][T26451] geneve1: left promiscuous mode [ 757.559661][T26451] vlan2: left promiscuous mode [ 757.576667][T26451] bond5: left promiscuous mode [ 757.583827][T26451] team_slave_1: left promiscuous mode [ 757.589490][T26451] bond5: left allmulticast mode [ 757.594636][T26451] team_slave_1: left allmulticast mode [ 757.620733][T26451] vxlan0: left promiscuous mode [ 757.625802][T26451] vxlan0: left allmulticast mode [ 757.818151][T12758] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.835449][T12758] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.925406][T12758] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.936552][T26485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5463'. [ 757.969988][T12758] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.001761][T12758] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.032890][T12758] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.056760][T12758] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.086247][T12758] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.286111][T26499] netlink: 'syz.4.5469': attribute type 58 has an invalid length. [ 758.315404][T26499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5469'. [ 758.573740][T26520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5475'. [ 758.801482][T26532] netlink: 'syz.4.5478': attribute type 1 has an invalid length. [ 758.813795][T26532] netlink: 'syz.4.5478': attribute type 4 has an invalid length. [ 758.859480][T26532] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5478'. [ 758.966696][T26546] syzkaller0: entered promiscuous mode [ 758.984376][T26546] syzkaller0: entered allmulticast mode [ 759.049049][T26545] syzkaller0: refused to change device tx_queue_len [ 759.423765][T26562] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 760.053546][T26596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5499'. [ 760.087151][T26596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5499'. [ 760.108075][T26596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5499'. [ 760.214478][T26596] syzkaller0: left promiscuous mode [ 760.219896][T26596] syzkaller0: left allmulticast mode [ 760.229207][T26596] tipc: Resetting bearer [ 760.240177][T26596] tipc: Resetting bearer [ 760.252476][T26606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 760.264354][T26596] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 760.280467][T26606] netlink: 'syz.2.5502': attribute type 4 has an invalid length. [ 760.499537][T26613] netlink: 'syz.1.5505': attribute type 11 has an invalid length. [ 760.666910][T26611] syzkaller0: entered promiscuous mode [ 760.695114][T26611] syzkaller0: entered allmulticast mode [ 761.214620][T26652] netlink: 'syz.3.5515': attribute type 58 has an invalid length. [ 761.830142][T26684] bond3: option ad_user_port_key: invalid value (65535) [ 761.842582][T26684] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 761.920651][T26684] bond3 (unregistering): Released all slaves [ 762.781215][T26709] siw: device registration error -23 [ 763.002861][T26705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.221549][T26724] __nla_validate_parse: 73 callbacks suppressed [ 763.221571][T26724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5539'. [ 763.271333][T26705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.370068][T26724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.404030][T26724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.200160][T26724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.233446][T26724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.371810][T26724] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 764.382774][T26724] batman_adv: batadv0: Removing interface: ip6gretap1 [ 764.540257][T26705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.603631][ T1655] block nbd0: Possible stuck request ffff8880a2830000: control (read@0,1024B). Runtime 60 seconds [ 764.614494][ T1655] block nbd0: Possible stuck request ffff8880a28301c0: control (read@1024,1024B). Runtime 60 seconds [ 764.625489][ T1655] block nbd0: Possible stuck request ffff8880a2830380: control (read@2048,1024B). Runtime 60 seconds [ 764.636607][ T1655] block nbd0: Possible stuck request ffff8880a2830540: control (read@3072,1024B). Runtime 60 seconds [ 764.914227][T26774] xt_recent: Unsupported userspace flags (000000b1) [ 764.989938][T26776] sctp: [Deprecated]: syz.4.5545 (pid 26776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.989938][T26776] Use struct sctp_sack_info instead [ 765.055578][T26778] netlink: 'syz.2.5548': attribute type 1 has an invalid length. [ 765.112486][T26778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 765.205602][T26705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.347271][T26778] bond7: (slave veth13): Enslaving as an active interface with a down link [ 765.401989][T26784] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 765.430312][T26784] bond7: (slave batadv2): making interface the new active one [ 765.461616][T26784] batadv2: entered promiscuous mode [ 765.472788][T26784] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 765.623293][T12763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.646248][T12763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.773056][T12727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.784871][T26789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5550'. [ 765.842860][T26794] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5552'. [ 765.858858][T12727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.872144][T26794] openvswitch: netlink: Flow key attr not present in new flow. [ 765.879104][T26790] block nbd3: not configured, cannot reconfigure [ 765.904599][T12727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.918911][T26790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.951786][T12727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.964436][T26797] pim6reg1: entered allmulticast mode [ 765.998572][T26797] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 766.013726][T26797] batman_adv: batadv0: Adding interface: gretap1 [ 766.020234][T26797] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.073459][T26797] batman_adv: batadv0: Interface activated: gretap1 [ 766.177193][T26803] netlink: 'syz.4.5554': attribute type 4 has an invalid length. [ 766.298763][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5555'. [ 766.317209][T26806] netlink: 'syz.2.5555': attribute type 3 has an invalid length. [ 766.469503][T26814] netlink: 'syz.4.5556': attribute type 1 has an invalid length. [ 766.567176][T26814] 8021q: adding VLAN 0 to HW filter on device bond9 [ 766.643596][T26817] bond9: (slave gretap0): Enslaving as a backup interface with an up link [ 766.652708][T26808] netlink: 'syz.4.5556': attribute type 9 has an invalid length. [ 766.720918][T12763] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 766.890720][T12758] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 767.522319][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5567'. [ 767.783520][T26857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5569'. [ 767.873819][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 767.904163][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 768.252340][T26870] syzkaller0: entered promiscuous mode [ 768.264260][T26870] syzkaller0: entered allmulticast mode [ 768.362753][T26878] netlink: 'syz.3.5575': attribute type 1 has an invalid length. [ 768.449116][T26878] 8021q: adding VLAN 0 to HW filter on device bond13 [ 768.594823][T26878] bond13: (slave geneve2): making interface the new active one [ 768.614574][T26878] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 768.715538][T26882] openvswitch: netlink: IPv4 tun info is not correct [ 768.851518][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5578'. [ 768.961564][T26892] netlink: 'syz.2.5581': attribute type 1 has an invalid length. [ 769.095879][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5581'. [ 769.186710][T26896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5581'. [ 769.209108][T26892] veth15: entered promiscuous mode [ 769.235865][T26908] FAULT_INJECTION: forcing a failure. [ 769.235865][T26908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.252183][T26899] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5583'. [ 769.289675][T26908] CPU: 0 UID: 0 PID: 26908 Comm: syz.3.5584 Not tainted syzkaller #0 PREEMPT(full) [ 769.289706][T26908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 769.289720][T26908] Call Trace: [ 769.289729][T26908] [ 769.289740][T26908] dump_stack_lvl+0xe8/0x150 [ 769.289773][T26908] should_fail_ex+0x40c/0x560 [ 769.289815][T26908] _copy_from_iter+0x1d3/0x1660 [ 769.289843][T26908] ? rcu_is_watching+0x15/0xb0 [ 769.289876][T26908] ? __pfx__copy_from_iter+0x10/0x10 [ 769.289896][T26908] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 769.289937][T26908] ? netlink_sendmsg+0x650/0xb40 [ 769.289961][T26908] ? skb_put+0x112/0x210 [ 769.289987][T26908] netlink_sendmsg+0x6c0/0xb40 [ 769.290035][T26908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.290065][T26908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 769.290100][T26908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.290129][T26908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.290157][T26908] ____sys_sendmsg+0x9b9/0xa20 [ 769.290180][T26908] ? __might_fault+0xaf/0x130 [ 769.290222][T26908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.290256][T26908] ? import_iovec+0x73/0xa0 [ 769.290285][T26908] ___sys_sendmsg+0x2a5/0x360 [ 769.290308][T26908] ? __lock_acquire+0x683/0x2cd0 [ 769.290337][T26908] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.290403][T26908] ? __fget_files+0x2a/0x420 [ 769.290430][T26908] ? __fget_files+0x3a2/0x420 [ 769.290469][T26908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 769.290497][T26908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.290532][T26908] ? __pfx_ksys_write+0x10/0x10 [ 769.290573][T26908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.290595][T26908] do_syscall_64+0x174/0x580 [ 769.290619][T26908] ? trace_irq_disable+0x3b/0x140 [ 769.290652][T26908] ? clear_bhb_loop+0x40/0x90 [ 769.290679][T26908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.290701][T26908] RIP: 0033:0x7f46d639ce59 [ 769.290722][T26908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.290741][T26908] RSP: 002b:00007f46d733c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.290765][T26908] RAX: ffffffffffffffda RBX: 00007f46d6615fa0 RCX: 00007f46d639ce59 [ 769.290782][T26908] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 769.290797][T26908] RBP: 00007f46d733c090 R08: 0000000000000000 R09: 0000000000000000 [ 769.290810][T26908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.290836][T26908] R13: 00007f46d6616038 R14: 00007f46d6615fa0 R15: 00007ffd7743daa8 [ 769.290870][T26908] [ 769.632458][T26911] ip6t_rpfilter: unknown options [ 769.650312][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5585'. [ 769.771075][ T1617] block nbd4: Possible stuck request ffff888027d77000: control (read@0,1024B). Runtime 360 seconds [ 769.782007][ T1617] block nbd4: Possible stuck request ffff888027d771c0: control (read@1024,1024B). Runtime 360 seconds [ 769.793908][ T1617] block nbd4: Possible stuck request ffff888027d77380: control (read@2048,1024B). Runtime 360 seconds [ 769.805229][ T1617] block nbd4: Possible stuck request ffff888027d77540: control (read@3072,1024B). Runtime 360 seconds [ 769.966167][T12719] wlan1: Trigger new scan to find an IBSS to join [ 770.571428][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5598'. [ 770.664209][T26954] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 770.996402][T26972] syzkaller1: entered promiscuous mode [ 771.030706][T26972] syzkaller1: entered allmulticast mode [ 771.116119][T26983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.126096][T26982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.271626][T26982] pimreg: entered allmulticast mode [ 771.281166][T26982] pimreg: left allmulticast mode [ 771.314010][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5607'. [ 771.315827][T26988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5607'. [ 771.566630][T27004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5613'. [ 771.786713][T27014] : entered promiscuous mode [ 771.819352][T27014] smc: net device hsr0 applied user defined pnetid SYZ2 [ 771.830240][T27014] netlink: 54 bytes leftover after parsing attributes in process `syz.3.5615'. [ 772.565059][T27001] virt_wifi0 speed is unknown, defaulting to 1000 [ 773.010704][T12729] wlan1: Trigger new scan to find an IBSS to join [ 773.598170][T27081] ÿ: renamed from bond_slave_0 [ 773.657777][T27084] FAULT_INJECTION: forcing a failure. [ 773.657777][T27084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.674462][T27084] CPU: 1 UID: 0 PID: 27084 Comm: syz.2.5629 Not tainted syzkaller #0 PREEMPT(full) [ 773.674492][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 773.674506][T27084] Call Trace: [ 773.674516][T27084] [ 773.674525][T27084] dump_stack_lvl+0xe8/0x150 [ 773.674557][T27084] should_fail_ex+0x40c/0x560 [ 773.674598][T27084] _copy_from_user+0x2d/0xb0 [ 773.674625][T27084] __x64_sys_epoll_ctl+0x128/0x1b0 [ 773.674669][T27084] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 773.674710][T27084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.674734][T27084] do_syscall_64+0x174/0x580 [ 773.674759][T27084] ? trace_irq_disable+0x3b/0x140 [ 773.674792][T27084] ? clear_bhb_loop+0x40/0x90 [ 773.674820][T27084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.674843][T27084] RIP: 0033:0x7f28af19ce59 [ 773.674864][T27084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.674883][T27084] RSP: 002b:00007f28ad3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 773.674907][T27084] RAX: ffffffffffffffda RBX: 00007f28af415fa0 RCX: 00007f28af19ce59 [ 773.674924][T27084] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 773.674937][T27084] RBP: 00007f28ad3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.674951][T27084] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 773.674965][T27084] R13: 00007f28af416038 R14: 00007f28af415fa0 R15: 00007ffdefcdcff8 [ 773.675000][T27084] [ 773.992402][T27064] virt_wifi0 speed is unknown, defaulting to 1000 [ 774.076489][T12764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.336196][T27090] virt_wifi0 speed is unknown, defaulting to 1000 [ 775.108359][T27108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5636'. [ 775.548367][T27036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.742413][T27123] IPVS: set_ctl: invalid protocol: 92 172.30.1.1:20004 [ 775.751990][T27124] IPVS: set_ctl: invalid protocol: 92 172.30.1.1:20004 [ 776.226191][T27153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 776.923645][T27178] xt_hashlimit: size too large, truncated to 1048576 [ 776.953015][T27173] macsec3: entered allmulticast mode [ 776.983903][T27173] bond0: (slave macsec3): Error -34 calling dev_set_mtu [ 777.081621][T12714] batadv2: left promiscuous mode [ 777.107958][T27179] ip6tnl0: Caught tx_queue_len zero misconfig [ 777.334476][T27202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.375326][T27203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.533674][T27202] bridge0: port 3(syz_tun) entered blocking state [ 777.552818][T27202] bridge0: port 3(syz_tun) entered disabled state [ 777.571781][T27202] syz_tun: entered allmulticast mode [ 777.585503][T27202] syz_tun: entered promiscuous mode [ 777.665205][T27208] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 777.748399][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'. [ 777.780144][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5658'. [ 777.894510][T27229] netlink: 'syz.2.5662': attribute type 19 has an invalid length. [ 777.937019][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 777.958730][T27229] sctp: [Deprecated]: syz.2.5662 (pid 27229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.958730][T27229] Use struct sctp_sack_info instead [ 778.083849][T27237] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.5664'. [ 778.298184][T27244] netlink: 'syz.0.5669': attribute type 1 has an invalid length. [ 778.320846][T27244] netlink: 'syz.0.5669': attribute type 2 has an invalid length. [ 778.329110][T27248] openvswitch: netlink: IP tunnel dst address not specified [ 778.338559][T27244] netlink: 'syz.0.5669': attribute type 1 has an invalid length. [ 778.348216][T27248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.357811][T27244] netlink: 'syz.0.5669': attribute type 2 has an invalid length. [ 778.495029][T27255] tipc: Enabling of bearer rejected, failed to enable media [ 778.526010][T27253] can: request_module (can-proto-4) failed. [ 778.614235][T27262] openvswitch: netlink: Message has 4 unknown bytes. [ 778.631699][T27262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.868285][T27273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 778.893076][T27273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.241937][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.253923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.538204][T27307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.897479][T27323] FAULT_INJECTION: forcing a failure. [ 779.897479][T27323] name failslab, interval 1, probability 0, space 0, times 0 [ 779.980818][T27323] CPU: 1 UID: 0 PID: 27323 Comm: syz.3.5692 Not tainted syzkaller #0 PREEMPT(full) [ 779.980849][T27323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.980863][T27323] Call Trace: [ 779.980872][T27323] [ 779.980882][T27323] dump_stack_lvl+0xe8/0x150 [ 779.980913][T27323] should_fail_ex+0x40c/0x560 [ 779.980956][T27323] should_failslab+0xa8/0x100 [ 779.980992][T27323] __kmalloc_cache_noprof+0x88/0x660 [ 779.981023][T27323] ? __raw_spin_lock_init+0x45/0x100 [ 779.981054][T27323] ? device_add+0xb6/0xb90 [ 779.981090][T27323] device_add+0xb6/0xb90 [ 779.981120][T27323] ? wakeup_source_sysfs_add+0x1b4/0x2c0 [ 779.981147][T27323] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 779.981185][T27323] wakeup_source_register+0x17f/0x380 [ 779.981222][T27323] ep_insert+0xf2f/0x1a60 [ 779.981271][T27323] ? __pfx_ep_insert+0x10/0x10 [ 779.981322][T27323] ? bpf_lsm_capable+0x9/0x20 [ 779.981354][T27323] do_epoll_ctl+0x7b6/0xe20 [ 779.981396][T27323] __x64_sys_epoll_ctl+0x165/0x1b0 [ 779.981433][T27323] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 779.981475][T27323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.981500][T27323] do_syscall_64+0x174/0x580 [ 779.981526][T27323] ? trace_irq_disable+0x3b/0x140 [ 779.981564][T27323] ? clear_bhb_loop+0x40/0x90 [ 779.981593][T27323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.981616][T27323] RIP: 0033:0x7f46d639ce59 [ 779.981637][T27323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.981658][T27323] RSP: 002b:00007f46d733c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 779.981683][T27323] RAX: ffffffffffffffda RBX: 00007f46d6615fa0 RCX: 00007f46d639ce59 [ 779.981699][T27323] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 779.981713][T27323] RBP: 00007f46d733c090 R08: 0000000000000000 R09: 0000000000000000 [ 779.981726][T27323] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 779.981741][T27323] R13: 00007f46d6616038 R14: 00007f46d6615fa0 R15: 00007ffd7743daa8 [ 779.981777][T27323] [ 780.299626][T27331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5695'. [ 780.366366][T27332] netlink: 'syz.3.5695': attribute type 1 has an invalid length. [ 780.443942][T27341] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5697'. [ 780.458137][T27341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5697'. [ 780.592255][T27344] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5698'. [ 780.606938][T27344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'. [ 780.680654][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 781.024069][T27366] netlink: 'syz.0.5701': attribute type 1 has an invalid length. [ 781.050768][T27366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5701'. [ 781.150007][T27374] FAULT_INJECTION: forcing a failure. [ 781.150007][T27374] name failslab, interval 1, probability 0, space 0, times 0 [ 781.186496][T27374] CPU: 0 UID: 0 PID: 27374 Comm: syz.3.5705 Not tainted syzkaller #0 PREEMPT(full) [ 781.186534][T27374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.186548][T27374] Call Trace: [ 781.186557][T27374] [ 781.186567][T27374] dump_stack_lvl+0xe8/0x150 [ 781.186598][T27374] should_fail_ex+0x40c/0x560 [ 781.186640][T27374] should_failslab+0xa8/0x100 [ 781.186677][T27374] __kmalloc_cache_noprof+0x88/0x660 [ 781.186711][T27374] ? get_device_parent+0x255/0x3a0 [ 781.186742][T27374] ? do_raw_spin_unlock+0xf5/0x210 [ 781.186780][T27374] get_device_parent+0x255/0x3a0 [ 781.186819][T27374] device_add+0x2d4/0xb90 [ 781.186855][T27374] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 781.186883][T27374] wakeup_source_register+0x17f/0x380 [ 781.186921][T27374] ep_insert+0xf2f/0x1a60 [ 781.186969][T27374] ? __pfx_ep_insert+0x10/0x10 [ 781.187014][T27374] ? bpf_lsm_capable+0x9/0x20 [ 781.187047][T27374] do_epoll_ctl+0x7b6/0xe20 [ 781.187088][T27374] __x64_sys_epoll_ctl+0x165/0x1b0 [ 781.187124][T27374] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 781.187174][T27374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.187206][T27374] do_syscall_64+0x174/0x580 [ 781.187232][T27374] ? trace_irq_disable+0x3b/0x140 [ 781.187265][T27374] ? clear_bhb_loop+0x40/0x90 [ 781.187294][T27374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.187317][T27374] RIP: 0033:0x7f46d639ce59 [ 781.187337][T27374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.187357][T27374] RSP: 002b:00007f46d733c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 781.187380][T27374] RAX: ffffffffffffffda RBX: 00007f46d6615fa0 RCX: 00007f46d639ce59 [ 781.187398][T27374] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 781.187411][T27374] RBP: 00007f46d733c090 R08: 0000000000000000 R09: 0000000000000000 [ 781.187426][T27374] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 781.187440][T27374] R13: 00007f46d6616038 R14: 00007f46d6615fa0 R15: 00007ffd7743daa8 [ 781.187483][T27374] [ 781.681263][T12758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.701102][T12758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.725302][T27386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.897237][T27395] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 782.633038][T27421] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5719'. [ 782.831060][T27427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5722'. [ 782.860586][T27427] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.868290][T27427] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.941126][T27431] syzkaller0: entered promiscuous mode [ 782.949538][T27431] syzkaller0: entered allmulticast mode [ 783.024744][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 783.072147][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 783.134002][T27434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.162927][T12727] net_ratelimit: 2 callbacks suppressed [ 783.162946][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.180295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.552588][T27465] netlink: 'syz.3.5733': attribute type 61 has an invalid length. [ 784.413986][T27500] x_tables: duplicate underflow at hook 1 [ 784.791578][T27514] veth0: entered promiscuous mode [ 784.827872][T27514] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.954648][T27519] netlink: 'syz.0.5746': attribute type 89 has an invalid length. [ 785.008073][T27513] veth0: left promiscuous mode [ 785.042614][T27522] openvswitch: netlink: IPv6 tunnel dst address is zero [ 785.059575][T27523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.497033][T27537] __nla_validate_parse: 12 callbacks suppressed [ 785.497061][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 785.583996][T27537] macvtap1: entered allmulticast mode [ 785.602163][T27537] dummy0: entered allmulticast mode [ 785.610829][T27537] dummy0: entered promiscuous mode [ 785.638884][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.659048][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.677081][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 785.687355][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 785.695644][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 786.313494][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5761'. [ 786.381268][T27572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5762'. [ 786.556606][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'. [ 786.634541][T27583] netlink: 'syz.1.5768': attribute type 21 has an invalid length. [ 787.055347][T27594] netlink: 'syz.0.5771': attribute type 1 has an invalid length. [ 787.278541][T27604] FAULT_INJECTION: forcing a failure. [ 787.278541][T27604] name failslab, interval 1, probability 0, space 0, times 0 [ 787.299560][T27604] CPU: 1 UID: 0 PID: 27604 Comm: syz.1.5774 Not tainted syzkaller #0 PREEMPT(full) [ 787.299602][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 787.299620][T27604] Call Trace: [ 787.299630][T27604] [ 787.299640][T27604] dump_stack_lvl+0xe8/0x150 [ 787.299697][T27604] should_fail_ex+0x40c/0x560 [ 787.299741][T27604] should_failslab+0xa8/0x100 [ 787.299777][T27604] ? __kernfs_new_node+0xea/0x970 [ 787.299807][T27604] kmem_cache_alloc_noprof+0x87/0x650 [ 787.299849][T27604] __kernfs_new_node+0xea/0x970 [ 787.299888][T27604] ? __pfx___kernfs_new_node+0x10/0x10 [ 787.299918][T27604] ? kernfs_root+0x1c/0x230 [ 787.299954][T27604] ? kernfs_root+0x1c/0x230 [ 787.299982][T27604] ? kernfs_root+0x1c/0x230 [ 787.300017][T27604] kernfs_new_node+0x102/0x210 [ 787.300054][T27604] kernfs_create_link+0xa7/0x200 [ 787.300082][T27604] sysfs_do_create_link_sd+0x83/0x110 [ 787.300113][T27604] device_add_class_symlinks+0xb6/0x240 [ 787.300152][T27604] device_add+0x467/0xb90 [ 787.300187][T27604] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 787.300216][T27604] wakeup_source_register+0x17f/0x380 [ 787.300255][T27604] ep_insert+0xf2f/0x1a60 [ 787.300303][T27604] ? __pfx_ep_insert+0x10/0x10 [ 787.300349][T27604] ? bpf_lsm_capable+0x9/0x20 [ 787.300382][T27604] do_epoll_ctl+0x7b6/0xe20 [ 787.300422][T27604] __x64_sys_epoll_ctl+0x165/0x1b0 [ 787.300457][T27604] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 787.300499][T27604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.300524][T27604] do_syscall_64+0x174/0x580 [ 787.300548][T27604] ? trace_irq_disable+0x3b/0x140 [ 787.300582][T27604] ? clear_bhb_loop+0x40/0x90 [ 787.300610][T27604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.300632][T27604] RIP: 0033:0x7f230799ce59 [ 787.300653][T27604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.300672][T27604] RSP: 002b:00007f230884a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 787.300702][T27604] RAX: ffffffffffffffda RBX: 00007f2307c15fa0 RCX: 00007f230799ce59 [ 787.300719][T27604] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 787.300732][T27604] RBP: 00007f230884a090 R08: 0000000000000000 R09: 0000000000000000 [ 787.300746][T27604] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 787.300760][T27604] R13: 00007f2307c16038 R14: 00007f2307c15fa0 R15: 00007fff63a07458 [ 787.300796][T27604] [ 787.625170][T27594] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 787.626091][T27543] virt_wifi0 speed is unknown, defaulting to 1000 [ 787.732454][ T5635] Bluetooth: hci0: command tx timeout [ 788.308092][T27628] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 788.325073][T27628] netlink: 'syz.3.5782': attribute type 1 has an invalid length. [ 788.334544][T27628] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5782'. [ 788.357166][T27635] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 788.669102][T27648] netlink: 'syz.2.5786': attribute type 1 has an invalid length. [ 788.968008][T27543] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.996724][T27543] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.036176][T27543] bridge_slave_0: entered allmulticast mode [ 789.062866][T27543] bridge_slave_0: entered promiscuous mode [ 789.084580][T27543] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.101637][T27543] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.112532][T27668] netlink: 'syz.2.5788': attribute type 3 has an invalid length. [ 789.120495][T27543] bridge_slave_1: entered allmulticast mode [ 789.139570][T27668] netlink: 'syz.2.5788': attribute type 1 has an invalid length. [ 789.155265][T27543] bridge_slave_1: entered promiscuous mode [ 789.173877][T27668] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5788'. [ 789.212735][T27668] NCSI netlink: No device for ifindex 0 [ 789.275511][T27543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.344500][T27543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.501821][T27543] team0: Port device team_slave_0 added [ 789.594553][T27543] team0: Port device team_slave_1 added [ 789.799956][T27543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.803978][ T5635] Bluetooth: hci0: command tx timeout [ 789.851464][T27543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.973480][T27702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5794'. [ 789.988927][T27543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.020874][T27543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.043893][T27543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.120960][T27543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.317810][T27543] hsr_slave_0: entered promiscuous mode [ 790.342370][T27543] hsr_slave_1: entered promiscuous mode [ 790.362566][T27543] debugfs: 'hsr0' already exists in 'hsr' [ 790.370079][T27543] Cannot create hsr debugfs directory [ 790.474099][T27715] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5795'. [ 790.494473][T27715] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5795'. [ 790.515514][T27715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5795'. [ 790.782610][T27543] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.810602][T27543] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.037875][T27543] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.061422][T27543] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.179564][T27543] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.194953][T27543] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.219604][T27723] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5799'. [ 791.267422][T27543] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.292227][T27543] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.409006][T27730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5803'. [ 791.444146][T27730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5803'. [ 791.803107][T27745] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5804'. [ 791.880886][ T5635] Bluetooth: hci0: command tx timeout [ 791.994768][T27543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.031802][T27543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.051870][T27543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.073649][T27543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.082661][T27543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.093984][T27543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.104130][T27543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 792.134227][T27543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.149133][T27757] netlink: 'syz.3.5810': attribute type 12 has an invalid length. [ 792.159963][T27757] netlink: 'syz.3.5810': attribute type 5 has an invalid length. [ 792.174635][T27756] geneve3: entered promiscuous mode [ 792.231955][T27756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5810'. [ 792.297420][T27754] tipc: Resetting bearer [ 792.305918][T27754] tipc: Resetting bearer [ 792.337873][T12729] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 57634 - 0 [ 792.347383][T12729] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 57634 - 0 [ 792.389157][T12729] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 57634 - 0 [ 792.426217][T12729] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 57634 - 0 [ 792.548529][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'. [ 792.607211][T27777] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5815'. [ 792.644564][T27777] netlink: 'syz.3.5815': attribute type 1 has an invalid length. [ 792.673357][T27778] netlink: 'syz.3.5815': attribute type 1 has an invalid length. [ 792.683569][T27543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.754622][T27783] netlink: 'syz.0.5816': attribute type 3 has an invalid length. [ 792.800210][T27777] netlink: 'syz.3.5815': attribute type 10 has an invalid length. [ 792.812832][T27543] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.819596][T27777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5815'. [ 792.836573][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.843858][T12758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.868613][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.875896][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.913734][ T5635] block nbd2: Receive control failed (result -32) [ 792.913767][ T5636] block nbd3: Receive control failed (result -32) [ 793.287595][T27803] syzkaller0: entered promiscuous mode [ 793.301394][T27803] syzkaller0: entered allmulticast mode [ 793.823922][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 793.960774][ T5635] Bluetooth: hci0: command tx timeout [ 794.218185][T27543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.274520][T27843] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 794.284216][T27843] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 794.333142][T27846] syzkaller0: entered promiscuous mode [ 794.357706][T27846] syzkaller0: entered allmulticast mode [ 794.671631][T27861] xt_TCPMSS: Only works on TCP SYN packets [ 794.684750][ T1655] block nbd0: Possible stuck request ffff8880a2830000: control (read@0,1024B). Runtime 90 seconds [ 794.695532][ T1655] block nbd0: Possible stuck request ffff8880a28301c0: control (read@1024,1024B). Runtime 90 seconds [ 794.707267][ T1655] block nbd0: Possible stuck request ffff8880a2830380: control (read@2048,1024B). Runtime 90 seconds [ 794.718733][ T1655] block nbd0: Possible stuck request ffff8880a2830540: control (read@3072,1024B). Runtime 90 seconds [ 794.774290][T27865] netlink: 'syz.2.5839': attribute type 6 has an invalid length. [ 794.787697][T27865] netlink: 'syz.2.5839': attribute type 7 has an invalid length. [ 794.795924][T27865] netlink: 'syz.2.5839': attribute type 8 has an invalid length. [ 795.017922][T27874] nbd: nbd2 already in use [ 795.038789][T27874] nbd: must specify an index to disconnect [ 795.099669][T27543] veth0_vlan: entered promiscuous mode [ 795.119868][T27543] veth1_vlan: entered promiscuous mode [ 795.189504][T27543] veth0_macvtap: entered promiscuous mode [ 795.210421][T27543] veth1_macvtap: entered promiscuous mode [ 795.286958][T27543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.326304][T27543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.360407][T12764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.383995][T12764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.425104][T27886] bridge0: Caught tx_queue_len zero misconfig [ 795.466979][T12764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.486897][T12764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.781703][T12727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.804700][T12727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.888716][T12758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.907777][T12758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.056374][T27891] __nla_validate_parse: 2 callbacks suppressed [ 796.056397][T27891] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.5847'. [ 796.120164][T27891] openvswitch: netlink: Flow key attr not present in new flow. [ 796.792381][T27914] pim6reg1: entered promiscuous mode [ 796.815219][T27914] pim6reg1: entered allmulticast mode [ 797.265222][T27937] openvswitch: netlink: Missing valid actions attribute. [ 797.297982][T27937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.708373][T27958] tipc: Enabling of bearer rejected, failed to enable media [ 797.802638][T27960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5864'. [ 797.832484][T27965] veth0_macvtap: Caught tx_queue_len zero misconfig [ 798.779266][T27991] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5871'. [ 798.789682][T27990] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5871'. [ 799.801737][ T1617] block nbd4: Possible stuck request ffff888027d77000: control (read@0,1024B). Runtime 390 seconds [ 799.813524][ T1617] block nbd4: Possible stuck request ffff888027d771c0: control (read@1024,1024B). Runtime 390 seconds [ 799.824689][ T1617] block nbd4: Possible stuck request ffff888027d77380: control (read@2048,1024B). Runtime 390 seconds [ 799.841283][ T1617] block nbd4: Possible stuck request ffff888027d77540: control (read@3072,1024B). Runtime 390 seconds [ 800.794230][T27960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.032879][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5873'. [ 801.056273][T27994] bridge0: port 3(dummy0) entered blocking state [ 801.074129][T28000] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5873'. [ 801.086749][T27994] bridge0: port 3(dummy0) entered disabled state [ 801.101123][T27994] dummy0: entered allmulticast mode [ 801.134750][T27994] dummy0: entered promiscuous mode [ 801.145735][T27994] bridge0: port 3(dummy0) entered blocking state [ 801.152284][T27994] bridge0: port 3(dummy0) entered forwarding state [ 801.166615][T28008] dummy0: left allmulticast mode [ 801.206886][T28008] dummy0: left promiscuous mode [ 801.234948][T28008] bridge0: port 3(dummy0) entered disabled state [ 801.270269][T28010] syzkaller0: entered promiscuous mode [ 801.289068][T28010] syzkaller0: entered allmulticast mode [ 801.374981][T27998] 5nè: entered promiscuous mode [ 801.491269][T28024] netlink: 296 bytes leftover after parsing attributes in process `syz.3.5881'. [ 802.053765][T28047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5890'. [ 802.214173][T28059] xt_recent: Unsupported userspace flags (000000b1) [ 802.260312][T28059] sctp: [Deprecated]: syz.3.5892 (pid 28059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.260312][T28059] Use struct sctp_sack_info instead [ 803.656352][T28118] FAULT_INJECTION: forcing a failure. [ 803.656352][T28118] name failslab, interval 1, probability 0, space 0, times 0 [ 803.696405][T28118] CPU: 1 UID: 0 PID: 28118 Comm: syz.4.5910 Not tainted syzkaller #0 PREEMPT(full) [ 803.696437][T28118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 803.696451][T28118] Call Trace: [ 803.696460][T28118] [ 803.696471][T28118] dump_stack_lvl+0xe8/0x150 [ 803.696511][T28118] should_fail_ex+0x40c/0x560 [ 803.696553][T28118] should_failslab+0xa8/0x100 [ 803.696589][T28118] ? __kernfs_new_node+0xea/0x970 [ 803.696620][T28118] kmem_cache_alloc_noprof+0x87/0x650 [ 803.696660][T28118] __kernfs_new_node+0xea/0x970 [ 803.696698][T28118] ? __pfx___kernfs_new_node+0x10/0x10 [ 803.696730][T28118] ? kernfs_root+0x1c/0x230 [ 803.696765][T28118] ? kernfs_root+0x1c/0x230 [ 803.696793][T28118] ? kernfs_root+0x1c/0x230 [ 803.696819][T28118] ? kernfs_root+0x1c/0x230 [ 803.696854][T28118] kernfs_new_node+0x102/0x210 [ 803.696890][T28118] __kernfs_create_file+0x4b/0x2e0 [ 803.696916][T28118] sysfs_add_file_mode_ns+0x237/0x300 [ 803.696950][T28118] internal_create_group+0x679/0x1180 [ 803.697002][T28118] ? __pfx_internal_create_group+0x10/0x10 [ 803.697030][T28118] ? kernfs_add_one+0x480/0x5d0 [ 803.697064][T28118] ? up_write+0x1a6/0x410 [ 803.697098][T28118] sysfs_create_groups+0x59/0x120 [ 803.697131][T28118] device_add_attrs+0x1b1/0x5e0 [ 803.697168][T28118] ? __pfx_device_add_attrs+0x10/0x10 [ 803.697198][T28118] ? kobject_put+0x50f/0x550 [ 803.697234][T28118] ? device_add_class_symlinks+0x21f/0x240 [ 803.697274][T28118] device_add+0x488/0xb90 [ 803.697324][T28118] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 803.697352][T28118] wakeup_source_register+0x17f/0x380 [ 803.697391][T28118] ep_insert+0xf2f/0x1a60 [ 803.697439][T28118] ? __pfx_ep_insert+0x10/0x10 [ 803.697483][T28118] ? bpf_lsm_capable+0x9/0x20 [ 803.697521][T28118] do_epoll_ctl+0x7b6/0xe20 [ 803.697562][T28118] __x64_sys_epoll_ctl+0x165/0x1b0 [ 803.697597][T28118] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 803.697639][T28118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.697664][T28118] do_syscall_64+0x174/0x580 [ 803.697688][T28118] ? trace_irq_disable+0x3b/0x140 [ 803.697720][T28118] ? clear_bhb_loop+0x40/0x90 [ 803.697748][T28118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.697774][T28118] RIP: 0033:0x7f89ad59ce59 [ 803.697795][T28118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.697815][T28118] RSP: 002b:00007f89ae3ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 803.697839][T28118] RAX: ffffffffffffffda RBX: 00007f89ad815fa0 RCX: 00007f89ad59ce59 [ 803.697855][T28118] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 803.697868][T28118] RBP: 00007f89ae3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 803.697882][T28118] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 803.697896][T28118] R13: 00007f89ad816038 R14: 00007f89ad815fa0 R15: 00007ffe77eb8068 [ 803.697933][T28118] [ 804.436737][T28128] xt_recent: Unsupported userspace flags (000000b1) [ 804.472380][T28128] sctp: [Deprecated]: syz.3.5912 (pid 28128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.472380][T28128] Use struct sctp_sack_info instead [ 804.543070][T28126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.727856][T28111] virt_wifi0 speed is unknown, defaulting to 1000 [ 804.797241][T28131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5915'. [ 804.834821][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5915'. [ 804.864288][T28134] netlink: 'syz.0.5916': attribute type 10 has an invalid length. [ 805.251881][T28143] netlink: 'syz.4.5918': attribute type 10 has an invalid length. [ 805.287311][T28143] veth0_vlan: left promiscuous mode [ 805.296569][T28143] veth0_vlan: entered promiscuous mode [ 805.311975][T28143] team0: Device veth0_vlan failed to register rx_handler [ 805.331500][T28146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5918'. [ 805.349818][T28146] netlink: 'syz.4.5918': attribute type 7 has an invalid length. [ 805.358560][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5918'. [ 805.418426][T28145] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5919'. [ 805.444259][T28143] Bluetooth: MGMT ver 1.23 [ 805.737688][T28155] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5922'. [ 805.748595][T28156] FAULT_INJECTION: forcing a failure. [ 805.748595][T28156] name failslab, interval 1, probability 0, space 0, times 0 [ 805.764568][T28156] CPU: 0 UID: 0 PID: 28156 Comm: syz.4.5921 Not tainted syzkaller #0 PREEMPT(full) [ 805.764601][T28156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.764624][T28156] Call Trace: [ 805.764633][T28156] [ 805.764643][T28156] dump_stack_lvl+0xe8/0x150 [ 805.764676][T28156] should_fail_ex+0x40c/0x560 [ 805.764718][T28156] should_failslab+0xa8/0x100 [ 805.764753][T28156] ? __kernfs_new_node+0xea/0x970 [ 805.764785][T28156] kmem_cache_alloc_noprof+0x87/0x650 [ 805.764826][T28156] __kernfs_new_node+0xea/0x970 [ 805.764863][T28156] ? __pfx___kernfs_new_node+0x10/0x10 [ 805.764895][T28156] ? kernfs_root+0x1c/0x230 [ 805.764930][T28156] ? kernfs_root+0x1c/0x230 [ 805.764958][T28156] ? kernfs_root+0x1c/0x230 [ 805.764985][T28156] ? kernfs_root+0x1c/0x230 [ 805.765019][T28156] kernfs_new_node+0x102/0x210 [ 805.765055][T28156] __kernfs_create_file+0x4b/0x2e0 [ 805.765082][T28156] sysfs_add_file_mode_ns+0x237/0x300 [ 805.765118][T28156] internal_create_group+0x679/0x1180 [ 805.765165][T28156] ? __pfx_internal_create_group+0x10/0x10 [ 805.765198][T28156] ? kernfs_add_one+0x480/0x5d0 [ 805.765234][T28156] ? up_write+0x1a6/0x410 [ 805.765268][T28156] sysfs_create_groups+0x59/0x120 [ 805.765301][T28156] device_add_attrs+0x1b1/0x5e0 [ 805.765338][T28156] ? __pfx_device_add_attrs+0x10/0x10 [ 805.765370][T28156] ? kobject_put+0x50f/0x550 [ 805.765409][T28156] ? device_add_class_symlinks+0x21f/0x240 [ 805.765447][T28156] device_add+0x488/0xb90 [ 805.765482][T28156] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 805.765510][T28156] wakeup_source_register+0x17f/0x380 [ 805.765548][T28156] ep_insert+0xf2f/0x1a60 [ 805.765595][T28156] ? __pfx_ep_insert+0x10/0x10 [ 805.765645][T28156] ? bpf_lsm_capable+0x9/0x20 [ 805.765677][T28156] do_epoll_ctl+0x7b6/0xe20 [ 805.765721][T28156] __x64_sys_epoll_ctl+0x165/0x1b0 [ 805.765755][T28156] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 805.765797][T28156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.765822][T28156] do_syscall_64+0x174/0x580 [ 805.765847][T28156] ? trace_irq_disable+0x3b/0x140 [ 805.765881][T28156] ? clear_bhb_loop+0x40/0x90 [ 805.765908][T28156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.765931][T28156] RIP: 0033:0x7f89ad59ce59 [ 805.765957][T28156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.765977][T28156] RSP: 002b:00007f89ae3ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 805.766001][T28156] RAX: ffffffffffffffda RBX: 00007f89ad815fa0 RCX: 00007f89ad59ce59 [ 805.766017][T28156] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 805.766030][T28156] RBP: 00007f89ae3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 805.766043][T28156] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 805.766057][T28156] R13: 00007f89ad816038 R14: 00007f89ad815fa0 R15: 00007ffe77eb8068 [ 805.766094][T28156] [ 806.358230][T28170] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5928'. [ 806.403416][T28170] 0ªX¹¦À: renamed from batadv0 [ 806.567328][T28170] 0ªX¹¦À: entered allmulticast mode [ 806.598211][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5926'. [ 806.625710][T28170] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 806.646886][T28170] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 807.118271][T28208] FAULT_INJECTION: forcing a failure. [ 807.118271][T28208] name failslab, interval 1, probability 0, space 0, times 0 [ 807.159351][T28208] CPU: 1 UID: 0 PID: 28208 Comm: syz.2.5935 Not tainted syzkaller #0 PREEMPT(full) [ 807.159384][T28208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.159399][T28208] Call Trace: [ 807.159408][T28208] [ 807.159418][T28208] dump_stack_lvl+0xe8/0x150 [ 807.159449][T28208] should_fail_ex+0x40c/0x560 [ 807.159490][T28208] should_failslab+0xa8/0x100 [ 807.159526][T28208] ? __kernfs_new_node+0xea/0x970 [ 807.159557][T28208] kmem_cache_alloc_noprof+0x87/0x650 [ 807.159596][T28208] __kernfs_new_node+0xea/0x970 [ 807.159633][T28208] ? __pfx___kernfs_new_node+0x10/0x10 [ 807.159665][T28208] ? kernfs_root+0x1c/0x230 [ 807.159700][T28208] ? kernfs_root+0x1c/0x230 [ 807.159727][T28208] ? kernfs_root+0x1c/0x230 [ 807.159754][T28208] ? kernfs_root+0x1c/0x230 [ 807.159788][T28208] kernfs_new_node+0x102/0x210 [ 807.159824][T28208] __kernfs_create_file+0x4b/0x2e0 [ 807.159850][T28208] sysfs_add_file_mode_ns+0x237/0x300 [ 807.159885][T28208] internal_create_group+0x679/0x1180 [ 807.159933][T28208] ? __pfx_internal_create_group+0x10/0x10 [ 807.159959][T28208] ? kernfs_add_one+0x480/0x5d0 [ 807.159994][T28208] ? up_write+0x1a6/0x410 [ 807.160027][T28208] sysfs_create_groups+0x59/0x120 [ 807.160060][T28208] device_add_attrs+0x1b1/0x5e0 [ 807.160097][T28208] ? __pfx_device_add_attrs+0x10/0x10 [ 807.160128][T28208] ? kobject_put+0x50f/0x550 [ 807.160162][T28208] ? device_add_class_symlinks+0x21f/0x240 [ 807.160199][T28208] device_add+0x488/0xb90 [ 807.160235][T28208] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 807.160270][T28208] wakeup_source_register+0x17f/0x380 [ 807.160308][T28208] ep_insert+0xf2f/0x1a60 [ 807.160368][T28208] ? __pfx_ep_insert+0x10/0x10 [ 807.160411][T28208] ? bpf_lsm_capable+0x9/0x20 [ 807.160442][T28208] do_epoll_ctl+0x7b6/0xe20 [ 807.160481][T28208] __x64_sys_epoll_ctl+0x165/0x1b0 [ 807.160516][T28208] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 807.160558][T28208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.160582][T28208] do_syscall_64+0x174/0x580 [ 807.160606][T28208] ? trace_irq_disable+0x3b/0x140 [ 807.160636][T28208] ? clear_bhb_loop+0x40/0x90 [ 807.160663][T28208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.160685][T28208] RIP: 0033:0x7f28af19ce59 [ 807.160704][T28208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.160722][T28208] RSP: 002b:00007f28ad3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 807.160744][T28208] RAX: ffffffffffffffda RBX: 00007f28af415fa0 RCX: 00007f28af19ce59 [ 807.160760][T28208] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 807.160772][T28208] RBP: 00007f28ad3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 807.160785][T28208] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 807.160799][T28208] R13: 00007f28af416038 R14: 00007f28af415fa0 R15: 00007ffdefcdcff8 [ 807.160834][T28208] [ 807.395311][T28214] syzkaller0: entered promiscuous mode [ 807.473626][T28214] syzkaller0: entered allmulticast mode [ 808.084378][T28236] netlink: 'syz.0.5942': attribute type 1 has an invalid length. [ 808.111214][T28236] netlink: 'syz.0.5942': attribute type 3 has an invalid length. [ 808.148351][T28236] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5942'. [ 808.570165][T28250] FAULT_INJECTION: forcing a failure. [ 808.570165][T28250] name failslab, interval 1, probability 0, space 0, times 0 [ 808.607276][T28250] CPU: 1 UID: 0 PID: 28250 Comm: syz.0.5949 Not tainted syzkaller #0 PREEMPT(full) [ 808.607307][T28250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.607321][T28250] Call Trace: [ 808.607330][T28250] [ 808.607340][T28250] dump_stack_lvl+0xe8/0x150 [ 808.607372][T28250] should_fail_ex+0x40c/0x560 [ 808.607415][T28250] should_failslab+0xa8/0x100 [ 808.607450][T28250] ? __kernfs_new_node+0xea/0x970 [ 808.607482][T28250] kmem_cache_alloc_noprof+0x87/0x650 [ 808.607522][T28250] __kernfs_new_node+0xea/0x970 [ 808.607560][T28250] ? __pfx___kernfs_new_node+0x10/0x10 [ 808.607592][T28250] ? kernfs_root+0x1c/0x230 [ 808.607629][T28250] ? kernfs_root+0x1c/0x230 [ 808.607658][T28250] ? kernfs_root+0x1c/0x230 [ 808.607684][T28250] ? kernfs_root+0x1c/0x230 [ 808.607718][T28250] kernfs_new_node+0x102/0x210 [ 808.607755][T28250] __kernfs_create_file+0x4b/0x2e0 [ 808.607782][T28250] sysfs_add_file_mode_ns+0x237/0x300 [ 808.607816][T28250] internal_create_group+0x679/0x1180 [ 808.607862][T28250] ? __pfx_internal_create_group+0x10/0x10 [ 808.607890][T28250] ? kernfs_add_one+0x480/0x5d0 [ 808.607925][T28250] ? up_write+0x1a6/0x410 [ 808.607959][T28250] sysfs_create_groups+0x59/0x120 [ 808.607992][T28250] device_add_attrs+0x1b1/0x5e0 [ 808.608027][T28250] ? __pfx_device_add_attrs+0x10/0x10 [ 808.608058][T28250] ? kobject_put+0x50f/0x550 [ 808.608092][T28250] ? device_add_class_symlinks+0x21f/0x240 [ 808.608133][T28250] device_add+0x488/0xb90 [ 808.608169][T28250] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 808.608198][T28250] wakeup_source_register+0x17f/0x380 [ 808.608244][T28250] ep_insert+0xf2f/0x1a60 [ 808.608293][T28250] ? __pfx_ep_insert+0x10/0x10 [ 808.608338][T28250] ? bpf_lsm_capable+0x9/0x20 [ 808.608370][T28250] do_epoll_ctl+0x7b6/0xe20 [ 808.608423][T28250] __x64_sys_epoll_ctl+0x165/0x1b0 [ 808.608456][T28250] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 808.608498][T28250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.608521][T28250] do_syscall_64+0x174/0x580 [ 808.608544][T28250] ? trace_irq_disable+0x3b/0x140 [ 808.608576][T28250] ? clear_bhb_loop+0x40/0x90 [ 808.608602][T28250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.608622][T28250] RIP: 0033:0x7f0c1699ce59 [ 808.608643][T28250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.608662][T28250] RSP: 002b:00007f0c1777e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 808.608685][T28250] RAX: ffffffffffffffda RBX: 00007f0c16c15fa0 RCX: 00007f0c1699ce59 [ 808.608701][T28250] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 808.608713][T28250] RBP: 00007f0c1777e090 R08: 0000000000000000 R09: 0000000000000000 [ 808.608726][T28250] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 808.608739][T28250] R13: 00007f0c16c16038 R14: 00007f0c16c15fa0 R15: 00007ffd17347df8 [ 808.608772][T28250] [ 809.378615][T28279] gre1: entered allmulticast mode [ 809.443319][T28281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.975863][T28302] netlink: 'syz.3.5966': attribute type 1 has an invalid length. [ 810.195384][T28302] bond14: entered promiscuous mode [ 810.211164][T28302] 8021q: adding VLAN 0 to HW filter on device bond14 [ 810.773241][T28351] netlink: 'syz.4.5981': attribute type 1 has an invalid length. [ 810.792048][T28351] netlink: 'syz.4.5981': attribute type 11 has an invalid length. [ 810.812989][T28351] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5981'. [ 810.971803][T28347] syzkaller0: entered promiscuous mode [ 810.977379][T28347] syzkaller0: entered allmulticast mode [ 810.994959][T28347] tipc: Resetting bearer [ 811.028754][T28347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5979'. [ 811.220192][T28365] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 811.272100][T28368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5986'. [ 811.300961][T28369] netlink: 211472 bytes leftover after parsing attributes in process `syz.0.5987'. [ 811.317499][T28365] netlink: 6072 bytes leftover after parsing attributes in process `syz.2.5986'. [ 811.433884][T28368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5986'. [ 811.630442][T28380] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184 [ 811.813733][T28389] netlink: 'syz.0.5994': attribute type 2 has an invalid length. [ 811.824792][T28387] mac80211_hwsim hwsim82 syzkaller1: entered promiscuous mode [ 811.847205][T28387] mac80211_hwsim hwsim82 syzkaller1: entered allmulticast mode [ 811.888376][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5995'. [ 811.898444][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5995'. [ 812.119644][T28394] bond1 (unregistering): Released all slaves [ 812.354235][T28411] netlink: 'syz.3.5999': attribute type 1 has an invalid length. [ 812.476921][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 812.495697][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 812.506415][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.517941][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.527669][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 812.693979][T28419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6000'. [ 812.705837][T28414] 8021q: adding VLAN 0 to HW filter on device bond16 [ 812.716045][T28414] bond15: (slave bond16): making interface the new active one [ 812.724830][T28414] bond15: (slave bond16): Enslaving as an active interface with an up link [ 813.219460][T17133] syz_tun (unregistering): left allmulticast mode [ 813.230325][T28447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6006'. [ 813.247968][T17133] syz_tun (unregistering): left promiscuous mode [ 813.269310][T17133] bridge0: port 3(syz_tun) entered disabled state [ 813.472356][T28451] bond1: entered promiscuous mode [ 813.480149][T28463] netlink: 'syz.3.6009': attribute type 1 has an invalid length. [ 813.581575][T28454] bond2: entered promiscuous mode [ 813.587529][T28454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 814.298496][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.322522][T28484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6015'. [ 814.461807][T28491] netlink: 'syz.1.6016': attribute type 1 has an invalid length. [ 814.601448][ T5636] Bluetooth: hci5: command tx timeout [ 815.325796][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.121983][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.369080][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.451540][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.692139][ T5636] Bluetooth: hci5: command tx timeout [ 817.081339][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.409738][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.531398][ T4997] udevd[4997]: worker [16664] /devices/virtual/block/nbd0 is taking a long time [ 817.541518][ T4997] udevd[4997]: worker [11163] /devices/virtual/block/nbd4 timeout; kill it [ 817.559790][ T4997] udevd[4997]: seq 18604 '/devices/virtual/block/nbd4' killed [ 817.671520][T28413] virt_wifi0 speed is unknown, defaulting to 1000 [ 817.917697][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6020'. [ 817.956655][T28506] netlink: 'syz.0.6020': attribute type 16 has an invalid length. [ 817.997927][T28506] netlink: 'syz.0.6020': attribute type 17 has an invalid length. [ 818.015606][T28514] netlink: 'syz.1.6022': attribute type 62 has an invalid length. [ 818.196679][T28522] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 818.284515][T28506] syzkaller0: left promiscuous mode [ 818.289802][T28506] syzkaller0: left allmulticast mode [ 818.297742][T28506] tipc: Resetting bearer [ 818.312970][T28506] tipc: Resetting bearer [ 818.331297][T28506] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 818.415671][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6026'. [ 818.460956][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.749620][T28540] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6030'. [ 818.761401][ T5636] Bluetooth: hci5: command tx timeout [ 819.065705][T28413] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.073559][T28555] xt_hashlimit: size too large, truncated to 1048576 [ 819.074546][T28413] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.087923][T28413] bridge_slave_0: entered allmulticast mode [ 819.098460][T28413] bridge_slave_0: entered promiscuous mode [ 819.107824][T28413] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.115550][T28413] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.142788][T28413] bridge_slave_1: entered allmulticast mode [ 819.155742][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6034'. [ 819.172421][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.188738][T28413] bridge_slave_1: entered promiscuous mode [ 819.246922][T28564] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6037'. [ 819.257076][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6034'. [ 819.302723][T28413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.333250][T28413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.434710][T28561] x_tables: duplicate underflow at hook 3 [ 819.487051][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.496440][T28413] team0: Port device team_slave_0 added [ 819.511917][T28413] team0: Port device team_slave_1 added [ 819.550926][T28413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.558433][T28413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.606765][T28413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.654513][T28413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.680708][T28413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.708281][T28413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.723039][T28576] netlink: 'syz.3.6040': attribute type 1 has an invalid length. [ 819.867669][T28581] bond18: (slave veth7): Enslaving as an active interface with a down link [ 819.893177][T28576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6040'. [ 819.940482][T28588] mac80211_hwsim hwsim82 syzkaller1: left promiscuous mode [ 819.950436][T28588] mac80211_hwsim hwsim82 syzkaller1: left allmulticast mode [ 820.053236][T28576] 8021q: adding VLAN 0 to HW filter on device bond18 [ 820.101827][T28413] hsr_slave_0: entered promiscuous mode [ 820.118803][T28413] hsr_slave_1: entered promiscuous mode [ 820.126079][T28413] debugfs: 'hsr0' already exists in 'hsr' [ 820.140640][T28413] Cannot create hsr debugfs directory [ 820.341487][T28603] xt_recent: Unsupported userspace flags (000000b1) [ 820.406672][T28607] sctp: [Deprecated]: syz.4.6049 (pid 28607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.406672][T28607] Use struct sctp_sack_info instead [ 820.541063][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.759905][T28619] tipc: Started in network mode [ 820.771958][T28619] tipc: Node identity _, cluster identity 4711 [ 820.787955][T28619] tipc: Enabling of bearer rejected, failed to enable media [ 820.841265][ T5635] Bluetooth: hci5: command tx timeout [ 820.921861][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.971664][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6055'. [ 821.110190][T28633] ip6tnl1: entered promiscuous mode [ 821.414793][T28660] netlink: 'syz.0.6060': attribute type 1 has an invalid length. [ 821.431673][T28656] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6060'. [ 821.568618][T21997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.818240][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6064'. [ 821.918516][T28413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 821.952977][T28413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.982871][T28683] veth1_to_bond: entered promiscuous mode [ 821.995233][T28413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.022611][T28413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.031502][T28683] veth1_to_bond: entered allmulticast mode [ 822.043424][T28413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.056530][T28413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.122970][T28683] veth1_to_bond (unregistering): left promiscuous mode [ 822.130184][T28683] veth1_to_bond (unregistering): left allmulticast mode [ 822.147338][T28683] bond0: (slave bond_slave_1): Releasing backup interface [ 822.173832][T28413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 822.199745][T28413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.211558][T22146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.224008][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.566671][T28413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.619420][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.673315][T28413] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.710498][T28646] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.717861][T28646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.766630][T28646] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.773854][T28646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.989317][T28736] __nla_validate_parse: 7 callbacks suppressed [ 822.989337][T28736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6080'. [ 823.210170][T28751] netlink: 'syz.0.6084': attribute type 11 has an invalid length. [ 823.269336][T28748] bond3: option ad_user_port_key: invalid value (65535) [ 823.301092][T28748] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 823.352225][T28748] bond3 (unregistering): Released all slaves [ 823.652587][T21997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.742692][T28771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6087'. [ 824.068506][T28413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.147356][T28780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6091'. [ 824.235232][T28413] veth0_vlan: entered promiscuous mode [ 824.260179][T28413] veth1_vlan: entered promiscuous mode [ 824.379343][T28413] veth0_macvtap: entered promiscuous mode [ 824.433699][T28413] veth1_macvtap: entered promiscuous mode [ 824.546651][T28413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.595225][T28413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.634984][T28645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.668125][T28645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.717255][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.763494][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.772925][T28645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.782763][ T1655] block nbd0: Possible stuck request ffff8880a2830000: control (read@0,1024B). Runtime 120 seconds [ 824.793980][ T1655] block nbd0: Possible stuck request ffff8880a28301c0: control (read@1024,1024B). Runtime 120 seconds [ 824.805918][ T1655] block nbd0: Possible stuck request ffff8880a2830380: control (read@2048,1024B). Runtime 120 seconds [ 824.820839][ T1655] block nbd0: Possible stuck request ffff8880a2830540: control (read@3072,1024B). Runtime 120 seconds [ 824.845152][T28647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.086109][T28806] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 825.095397][T28808] netlink: 37 bytes leftover after parsing attributes in process `syz.4.6097'. [ 825.129073][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6099'. [ 825.198771][T28809] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 825.299019][T12743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.335531][T12743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.401668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.461947][T28649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.485104][T28649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.727626][T24162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.894574][T28838] netlink: 'syz.1.6104': attribute type 1 has an invalid length. [ 825.917056][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6104'. [ 826.159606][T28822] virt_wifi0 speed is unknown, defaulting to 1000 [ 826.768345][T24162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.872442][T28853] netlink: 'syz.0.6111': attribute type 3 has an invalid length. [ 826.902756][T28852] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6112'. [ 827.000959][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6112'. [ 827.058665][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 827.075228][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 827.084763][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 827.099790][T28858] xt_l2tp: v2 doesn't support IP mode [ 827.138944][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 827.146847][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 827.191789][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6112'. [ 827.254507][T28832] virt_wifi0 speed is unknown, defaulting to 1000 [ 827.811210][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.819922][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.924725][T17694] syz_tun (unregistering): left allmulticast mode [ 827.949486][T17694] team0: Port device syz_tun removed [ 828.854283][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.113843][T28856] virt_wifi0 speed is unknown, defaulting to 1000 [ 829.242887][ T5635] Bluetooth: hci1: command tx timeout [ 829.727806][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6126'. [ 829.885885][ T1617] block nbd4: Possible stuck request ffff888027d77000: control (read@0,1024B). Runtime 420 seconds [ 829.897006][ T1617] block nbd4: Possible stuck request ffff888027d771c0: control (read@1024,1024B). Runtime 420 seconds [ 829.909377][T21987] net_ratelimit: 2 callbacks suppressed [ 829.909397][T21987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.926203][ T1617] block nbd4: Possible stuck request ffff888027d77380: control (read@2048,1024B). Runtime 420 seconds [ 829.938013][ T1617] block nbd4: Possible stuck request ffff888027d77540: control (read@3072,1024B). Runtime 420 seconds [ 830.030387][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.044062][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.055968][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.070277][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.079029][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.088138][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.096701][T28946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.125071][T28950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.190726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.347747][T28960] siw: device registration error -23 [ 830.491307][T28856] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.512837][T28856] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.562336][T28856] bridge_slave_0: entered allmulticast mode [ 830.570164][T28967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6139'. [ 830.587167][T28856] bridge_slave_0: entered promiscuous mode [ 830.626253][T28968] netlink: 'syz.1.6139': attribute type 1 has an invalid length. [ 830.729669][T28856] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.746609][T28974] netlink: 'syz.0.6140': attribute type 1 has an invalid length. [ 830.748587][T28856] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.762780][T28856] bridge_slave_1: entered allmulticast mode [ 830.771718][T28856] bridge_slave_1: entered promiscuous mode [ 830.871004][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'. [ 830.919808][T28977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6139'. [ 831.007854][T28856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.023464][T28856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.183609][T28856] team0: Port device team_slave_0 added [ 831.194534][T28856] team0: Port device team_slave_1 added [ 831.241107][T28856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.248356][T28856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.288702][T28856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.321361][T28856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.328425][ T5635] Bluetooth: hci1: command tx timeout [ 831.345357][T28856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.371665][T28856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.617750][T28856] hsr_slave_0: entered promiscuous mode [ 831.626003][T28856] hsr_slave_1: entered promiscuous mode [ 831.633211][T28856] debugfs: 'hsr0' already exists in 'hsr' [ 831.639089][T28856] Cannot create hsr debugfs directory [ 832.069327][T28856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.081562][T28856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57634 - 0 [ 832.192546][T28856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.204978][T28856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57634 - 0 [ 832.285196][T28856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.298183][T28856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57634 - 0 [ 832.377879][T28856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.389523][T28856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57634 - 0 [ 832.978235][T29013] netlink: 67 bytes leftover after parsing attributes in process `syz.4.6151'. [ 833.035973][T29013] veth0_vlan: left promiscuous mode [ 833.043980][T29013] veth0_vlan: entered promiscuous mode [ 833.400838][ T5635] Bluetooth: hci1: command tx timeout [ 833.536048][T28967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.581717][T28856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 833.638271][T28856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.668904][T28856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.697203][T28856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.748660][T28856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 833.776452][T28856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.787633][T28856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 833.816129][T28856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.921874][T29034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.945751][T29037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6156'. [ 834.168055][T28856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.226719][T28856] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.243486][T28644] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.250759][T28644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.271790][T28644] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.279024][T28644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.327222][T29050] netlink: 'syz.0.6161': attribute type 1 has an invalid length. [ 834.731934][T29067] netlink: 'syz.0.6165': attribute type 1 has an invalid length. [ 834.774507][T29065] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6166'. [ 835.008208][T21987] net_ratelimit: 31 callbacks suppressed [ 835.008230][T21987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.028911][T29078] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6167'. [ 835.056686][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6167'. [ 835.093539][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.301420][T29088] syzkaller0: entered promiscuous mode [ 835.330106][T29088] syzkaller0: entered allmulticast mode [ 835.397451][T29092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.421871][T29092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.433083][T29095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6173'. [ 835.445175][T29092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.456658][T29092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.465970][T29089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.480127][T29089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.485101][ T5635] Bluetooth: hci1: command tx timeout [ 835.497048][T29096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'. [ 835.567436][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.575307][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.683751][T29101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.696786][T29087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.701134][T29101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.863729][T29087] tipc: Resetting bearer [ 835.900922][T29087] batman_adv: batadv0: Interface deactivated: gretap1 [ 835.947134][T29102] mac80211_hwsim hwsim82 syzkaller1: entered promiscuous mode [ 835.958697][T29102] mac80211_hwsim hwsim82 syzkaller1: entered allmulticast mode [ 835.976429][ T6267] syz0: Port: 1 Link DOWN [ 835.981340][T28647] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.010749][T28647] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.039375][T28856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.124560][T29108] netlink: 'syz.0.6175': attribute type 1 has an invalid length. [ 836.141350][T28647] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.151756][T28647] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.219638][T29109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6175'. [ 836.289128][T29108] bond7: entered promiscuous mode [ 836.295948][T29108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 836.343918][T29107] bond7: (slave bridge8): making interface the new active one [ 836.352791][T29107] bridge8: entered promiscuous mode [ 836.360356][T29107] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 836.514189][T28856] veth0_vlan: entered promiscuous mode [ 836.571528][T28856] veth1_vlan: entered promiscuous mode [ 836.705703][T28856] veth0_macvtap: entered promiscuous mode [ 836.745995][T28856] veth1_macvtap: entered promiscuous mode [ 836.782321][T28856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.807760][T28856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.846052][T28647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.865054][T28647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.887644][T29133] tipc: Started in network mode [ 836.901196][T29133] tipc: Node identity fef4ca07bfc4, cluster identity 4711 [ 836.917944][T29133] tipc: Enabled bearer , priority 0 [ 836.939326][T28647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.967436][T28647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.987044][T29136] syzkaller0: entered promiscuous mode [ 836.995067][T29136] syzkaller0: entered allmulticast mode [ 837.019079][T29133] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 837.063883][T29133] tipc: Resetting bearer [ 837.077056][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 837.116712][T29132] tipc: Resetting bearer [ 837.208309][T29132] tipc: Disabling bearer [ 837.285403][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 837.305831][T12763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.314060][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 837.333946][T12763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.518790][T28649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.539239][T28649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.567434][ T5635] Bluetooth: hci1: command tx timeout [ 838.565461][T29181] netlink: 'syz.1.6197': attribute type 1 has an invalid length. [ 838.691783][T29181] gretap3: entered promiscuous mode [ 838.763297][T29179] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 838.916003][T29193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6202'. [ 839.495744][T29214] netlink: 'syz.3.6208': attribute type 1 has an invalid length. [ 839.544436][T29214] dvmrp0: entered allmulticast mode [ 839.662741][T29187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 839.679444][T29187] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 839.914069][T29219] netlink: 'syz.4.6209': attribute type 21 has an invalid length. [ 839.948215][T29213] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.958422][T29187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 839.980707][T29187] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 840.292501][T22131] net_ratelimit: 142 callbacks suppressed [ 840.292522][T22131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.527379][T29225] __nla_validate_parse: 3 callbacks suppressed [ 840.527400][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6211'. [ 840.664966][T29187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 840.689738][T29187] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 840.698824][ T5635] block nbd5: Receive control failed (result -1) [ 840.897855][T29187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 840.914850][T29187] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 841.033306][T29187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 841.049009][T29187] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 841.161806][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.343710][T24162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.434264][T29252] IPv6: NLM_F_CREATE should be specified when creating new route [ 841.741053][T29270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.775847][T29271] netlink: zone id is out of range [ 841.814826][T29264] [ 841.817219][T29264] ====================================================== [ 841.824356][T29264] WARNING: possible circular locking dependency detected [ 841.831424][T29264] syzkaller #0 Not tainted [ 841.835881][T29264] ------------------------------------------------------ [ 841.842929][T29264] syz.4.6220/29264 is trying to acquire lock: [ 841.849021][T29264] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 841.858331][T29264] [ 841.858331][T29264] but task is already holding lock: [ 841.865734][T29264] ffffffff8ea5f240 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 841.875388][T29264] [ 841.875388][T29264] which lock already depends on the new lock. [ 841.875388][T29264] [ 841.885828][T29264] [ 841.885828][T29264] the existing dependency chain (in reverse order) is: [ 841.894866][T29264] [ 841.894866][T29264] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 841.902744][T29264] __mutex_lock+0x19d/0x1590 [ 841.908011][T29264] pcpu_alloc_noprof+0x231/0x1900 [ 841.913597][T29264] bpf_prog_alloc_no_stats+0x10b/0x4f0 [ 841.919616][T29264] bpf_prog_alloc+0x3c/0x1a0 [ 841.924859][T29264] __get_filter+0xf2/0x420 [ 841.929842][T29264] sk_attach_filter+0x24/0x140 [ 841.935204][T29264] sk_setsockopt+0x2635/0x2f10 [ 841.940527][T29264] do_sock_setsockopt+0x11b/0x1b0 [ 841.946096][T29264] __x64_sys_setsockopt+0x13d/0x1b0 [ 841.951917][T29264] do_syscall_64+0x174/0x580 [ 841.957067][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.963610][T29264] [ 841.963610][T29264] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 841.971376][T29264] lock_sock_nested+0x41/0x100 [ 841.976706][T29264] inet_shutdown+0x6a/0x390 [ 841.981769][T29264] nbd_mark_nsock_dead+0x2cb/0x550 [ 841.987516][T29264] recv_work+0x1cef/0x1e10 [ 841.992486][T29264] process_scheduled_works+0xa8e/0x14e0 [ 841.998578][T29264] worker_thread+0xa47/0xfb0 [ 842.003733][T29264] kthread+0x389/0x470 [ 842.008358][T29264] ret_from_fork+0x514/0xb70 [ 842.013500][T29264] ret_from_fork_asm+0x1a/0x30 [ 842.018902][T29264] [ 842.018902][T29264] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 842.026581][T29264] __mutex_lock+0x19d/0x1590 [ 842.031719][T29264] nbd_queue_rq+0x373/0x1150 [ 842.036855][T29264] blk_mq_dispatch_rq_list+0x499/0x1990 [ 842.042944][T29264] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 842.049913][T29264] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 842.056447][T29264] blk_mq_run_hw_queue+0x348/0x4f0 [ 842.062186][T29264] blk_mq_dispatch_list+0xd11/0xe10 [ 842.068017][T29264] blk_mq_flush_plug_list+0x45f/0x540 [ 842.073939][T29264] __blk_flush_plug+0x3ed/0x4d0 [ 842.079339][T29264] __submit_bio+0x465/0x560 [ 842.084383][T29264] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 842.090831][T29264] block_read_full_folio+0x599/0x830 [ 842.096673][T29264] filemap_read_folio+0x12c/0x3a0 [ 842.102602][T29264] do_read_cache_folio+0x354/0x590 [ 842.108263][T29264] read_part_sector+0xb6/0x2b0 [ 842.113603][T29264] adfspart_check_ICS+0xb1/0x960 [ 842.119173][T29264] bdev_disk_changed+0x82b/0x1780 [ 842.124833][T29264] blkdev_get_whole+0x372/0x510 [ 842.130237][T29264] bdev_open+0x324/0xd70 [ 842.135021][T29264] blkdev_open+0x461/0x600 [ 842.140000][T29264] do_dentry_open+0x816/0x1380 [ 842.145328][T29264] vfs_open+0x3b/0x340 [ 842.149972][T29264] path_openat+0x2e3b/0x3890 [ 842.155119][T29264] do_file_open+0x23e/0x4a0 [ 842.160174][T29264] do_sys_openat2+0x113/0x200 [ 842.165396][T29264] __x64_sys_openat+0x138/0x170 [ 842.170790][T29264] do_syscall_64+0x174/0x580 [ 842.176110][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.182550][T29264] [ 842.182550][T29264] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 842.189792][T29264] __mutex_lock+0x19d/0x1590 [ 842.194923][T29264] nbd_queue_rq+0xc1/0x1150 [ 842.199971][T29264] blk_mq_dispatch_rq_list+0x499/0x1990 [ 842.206065][T29264] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 842.212940][T29264] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 842.219463][T29264] blk_mq_run_hw_queue+0x348/0x4f0 [ 842.225120][T29264] blk_mq_dispatch_list+0xd11/0xe10 [ 842.230970][T29264] blk_mq_flush_plug_list+0x45f/0x540 [ 842.237003][T29264] __blk_flush_plug+0x3ed/0x4d0 [ 842.242402][T29264] __submit_bio+0x465/0x560 [ 842.247461][T29264] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 842.253666][T29264] block_read_full_folio+0x599/0x830 [ 842.259497][T29264] filemap_read_folio+0x12c/0x3a0 [ 842.265076][T29264] do_read_cache_folio+0x354/0x590 [ 842.270739][T29264] read_part_sector+0xb6/0x2b0 [ 842.276057][T29264] adfspart_check_ICS+0xb1/0x960 [ 842.281628][T29264] bdev_disk_changed+0x82b/0x1780 [ 842.287213][T29264] blkdev_get_whole+0x372/0x510 [ 842.292609][T29264] bdev_open+0x324/0xd70 [ 842.297393][T29264] blkdev_open+0x461/0x600 [ 842.302351][T29264] do_dentry_open+0x816/0x1380 [ 842.307664][T29264] vfs_open+0x3b/0x340 [ 842.312273][T29264] path_openat+0x2e3b/0x3890 [ 842.317423][T29264] do_file_open+0x23e/0x4a0 [ 842.322477][T29264] do_sys_openat2+0x113/0x200 [ 842.327699][T29264] __x64_sys_openat+0x138/0x170 [ 842.333090][T29264] do_syscall_64+0x174/0x580 [ 842.338234][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.344670][T29264] [ 842.344670][T29264] -> #3 (set->srcu){.+.+}-{0:0}: [ 842.351821][T29264] __synchronize_srcu+0xc9/0x2f0 [ 842.357299][T29264] elevator_switch+0x1e8/0x7b0 [ 842.362693][T29264] elevator_change+0x2fa/0x480 [ 842.368000][T29264] elevator_set_default+0x375/0x440 [ 842.374018][T29264] blk_register_queue+0x3f3/0x4e0 [ 842.379602][T29264] __add_disk+0x6cb/0xe30 [ 842.384481][T29264] add_disk_fwnode+0xfb/0x4b0 [ 842.389795][T29264] nbd_dev_add+0x733/0xb60 [ 842.394756][T29264] nbd_init+0x15f/0x1e0 [ 842.399607][T29264] do_one_initcall+0x250/0x870 [ 842.404913][T29264] do_initcall_level+0x10a/0x1a0 [ 842.410395][T29264] do_initcalls+0x59/0xa0 [ 842.415275][T29264] kernel_init_freeable+0x29d/0x3e0 [ 842.421014][T29264] kernel_init+0x1d/0x1d0 [ 842.425912][T29264] ret_from_fork+0x514/0xb70 [ 842.431044][T29264] ret_from_fork_asm+0x1a/0x30 [ 842.436354][T29264] [ 842.436354][T29264] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 842.444192][T29264] __mutex_lock+0x19d/0x1590 [ 842.449413][T29264] elevator_change+0x1af/0x480 [ 842.454714][T29264] elevator_set_none+0xb5/0x140 [ 842.460110][T29264] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 842.466469][T29264] nbd_start_device+0x189/0xb30 [ 842.471885][T29264] nbd_genl_connect+0x1597/0x1c10 [ 842.477496][T29264] genl_family_rcv_msg_doit+0x233/0x340 [ 842.483597][T29264] genl_rcv_msg+0x614/0x7a0 [ 842.488731][T29264] netlink_rcv_skb+0x226/0x4a0 [ 842.494037][T29264] genl_rcv+0x28/0x40 [ 842.498571][T29264] netlink_unicast+0x7bb/0x940 [ 842.503989][T29264] netlink_sendmsg+0x813/0xb40 [ 842.509295][T29264] ____sys_sendmsg+0x9b9/0xa20 [ 842.514604][T29264] ___sys_sendmsg+0x2a5/0x360 [ 842.519840][T29264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.525329][T29264] do_syscall_64+0x174/0x580 [ 842.530470][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.536911][T29264] [ 842.536911][T29264] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 842.545556][T29264] blk_alloc_queue+0x544/0x690 [ 842.550865][T29264] __blk_mq_alloc_disk+0x194/0x390 [ 842.556537][T29264] nbd_dev_add+0x494/0xb60 [ 842.561496][T29264] nbd_init+0x15f/0x1e0 [ 842.566545][T29264] do_one_initcall+0x250/0x870 [ 842.571852][T29264] do_initcall_level+0x10a/0x1a0 [ 842.577375][T29264] do_initcalls+0x59/0xa0 [ 842.582247][T29264] kernel_init_freeable+0x29d/0x3e0 [ 842.588085][T29264] kernel_init+0x1d/0x1d0 [ 842.592957][T29264] ret_from_fork+0x514/0xb70 [ 842.598089][T29264] ret_from_fork_asm+0x1a/0x30 [ 842.603476][T29264] [ 842.603476][T29264] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 842.610708][T29264] __lock_acquire+0x1520/0x2cd0 [ 842.616101][T29264] lock_acquire+0x106/0x350 [ 842.621145][T29264] fs_reclaim_acquire+0x71/0x100 [ 842.626652][T29264] prepare_alloc_pages+0x15b/0x650 [ 842.632315][T29264] __alloc_frozen_pages_noprof+0x12f/0x380 [ 842.638669][T29264] __alloc_pages_noprof+0x10/0x100 [ 842.644331][T29264] pcpu_populate_chunk+0x181/0xb30 [ 842.650001][T29264] pcpu_alloc_noprof+0xbca/0x1900 [ 842.655621][T29264] ipv6_add_dev+0x536/0x13a0 [ 842.660786][T29264] addrconf_notify+0x771/0x1050 [ 842.666194][T29264] notifier_call_chain+0x1a5/0x3d0 [ 842.671864][T29264] register_netdevice+0x18db/0x1f00 [ 842.677652][T29264] cfg80211_register_netdevice+0x138/0x2d0 [ 842.684093][T29264] ieee80211_if_add+0x108d/0x1600 [ 842.689664][T29264] ieee80211_register_hw+0x3e79/0x4a50 [ 842.695662][T29264] mac80211_hwsim_new_radio+0x3238/0x5680 [ 842.701934][T29264] hwsim_new_radio_nl+0xd8b/0xf90 [ 842.707509][T29264] genl_family_rcv_msg_doit+0x233/0x340 [ 842.713604][T29264] genl_rcv_msg+0x614/0x7a0 [ 842.718747][T29264] netlink_rcv_skb+0x226/0x4a0 [ 842.724071][T29264] genl_rcv+0x28/0x40 [ 842.728637][T29264] netlink_unicast+0x7bb/0x940 [ 842.733961][T29264] netlink_sendmsg+0x813/0xb40 [ 842.739274][T29264] ____sys_sendmsg+0x9b9/0xa20 [ 842.744619][T29264] ___sys_sendmsg+0x2a5/0x360 [ 842.749843][T29264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.755324][T29264] do_syscall_64+0x174/0x580 [ 842.760551][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.766988][T29264] [ 842.766988][T29264] other info that might help us debug this: [ 842.766988][T29264] [ 842.777232][T29264] Chain exists of: [ 842.777232][T29264] fs_reclaim --> sk_lock-AF_INET6 --> pcpu_alloc_mutex [ 842.777232][T29264] [ 842.790120][T29264] Possible unsafe locking scenario: [ 842.790120][T29264] [ 842.797598][T29264] CPU0 CPU1 [ 842.802990][T29264] ---- ---- [ 842.808391][T29264] lock(pcpu_alloc_mutex); [ 842.812922][T29264] lock(sk_lock-AF_INET6); [ 842.819970][T29264] lock(pcpu_alloc_mutex); [ 842.827052][T29264] lock(fs_reclaim); [ 842.831062][T29264] [ 842.831062][T29264] *** DEADLOCK *** [ 842.831062][T29264] [ 842.839214][T29264] 5 locks held by syz.4.6220/29264: [ 842.844424][T29264] #0: ffffffff8fe31888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 842.852793][T29264] #1: ffffffff8fe316c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 842.861901][T29264] #2: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3d6d/0x4a50 [ 842.871858][T29264] #3: ffff8880b06907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_register_hw+0x3d8b/0x4a50 [ 842.882367][T29264] #4: ffffffff8ea5f240 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 842.892420][T29264] [ 842.892420][T29264] stack backtrace: [ 842.898338][T29264] CPU: 1 UID: 0 PID: 29264 Comm: syz.4.6220 Not tainted syzkaller #0 PREEMPT(full) [ 842.898360][T29264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.898372][T29264] Call Trace: [ 842.898381][T29264] [ 842.898390][T29264] dump_stack_lvl+0xe8/0x150 [ 842.898411][T29264] print_circular_bug+0x2e1/0x300 [ 842.898437][T29264] check_noncircular+0x12e/0x150 [ 842.898462][T29264] __lock_acquire+0x1520/0x2cd0 [ 842.898482][T29264] ? __lock_acquire+0x683/0x2cd0 [ 842.898502][T29264] ? __lock_acquire+0x683/0x2cd0 [ 842.898523][T29264] ? prepare_alloc_pages+0x15b/0x650 [ 842.898549][T29264] lock_acquire+0x106/0x350 [ 842.898566][T29264] ? prepare_alloc_pages+0x15b/0x650 [ 842.898594][T29264] ? do_raw_spin_lock+0x12b/0x2f0 [ 842.898622][T29264] fs_reclaim_acquire+0x71/0x100 [ 842.898647][T29264] ? prepare_alloc_pages+0x15b/0x650 [ 842.898673][T29264] prepare_alloc_pages+0x15b/0x650 [ 842.898703][T29264] __alloc_frozen_pages_noprof+0x12f/0x380 [ 842.898733][T29264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 842.898768][T29264] ? pcpu_chunk_refresh_hint+0x80a/0x950 [ 842.898800][T29264] __alloc_pages_noprof+0x10/0x100 [ 842.898828][T29264] pcpu_populate_chunk+0x181/0xb30 [ 842.898856][T29264] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 842.898877][T29264] pcpu_alloc_noprof+0xbca/0x1900 [ 842.898909][T29264] ipv6_add_dev+0x536/0x13a0 [ 842.898933][T29264] addrconf_notify+0x771/0x1050 [ 842.898959][T29264] notifier_call_chain+0x1a5/0x3d0 [ 842.899005][T29264] register_netdevice+0x18db/0x1f00 [ 842.899034][T29264] ? __pfx_register_netdevice+0x10/0x10 [ 842.899053][T29264] ? debugfs_create_file_short+0x3f/0x60 [ 842.899076][T29264] ? ieee80211_debugfs_recreate_netdev+0x102b/0x14c0 [ 842.899102][T29264] cfg80211_register_netdevice+0x138/0x2d0 [ 842.899125][T29264] ieee80211_if_add+0x108d/0x1600 [ 842.899155][T29264] ieee80211_register_hw+0x3e79/0x4a50 [ 842.899181][T29264] ? ieee80211_register_hw+0x1991/0x4a50 [ 842.899212][T29264] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 842.899234][T29264] ? __asan_memset+0x22/0x50 [ 842.899257][T29264] ? __hrtimer_setup+0x1b7/0x260 [ 842.899279][T29264] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 842.899300][T29264] mac80211_hwsim_new_radio+0x3238/0x5680 [ 842.899332][T29264] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 842.899350][T29264] ? rcu_is_watching+0x15/0xb0 [ 842.899371][T29264] ? trace_kmalloc+0x2a/0xf0 [ 842.899398][T29264] hwsim_new_radio_nl+0xd8b/0xf90 [ 842.899434][T29264] genl_family_rcv_msg_doit+0x233/0x340 [ 842.899465][T29264] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 842.899497][T29264] ? bpf_lsm_capable+0x9/0x20 [ 842.899515][T29264] ? security_capable+0x7e/0x2c0 [ 842.899543][T29264] genl_rcv_msg+0x614/0x7a0 [ 842.899570][T29264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.899594][T29264] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 842.899623][T29264] ? __pfx_ref_tracker_free+0x10/0x10 [ 842.899647][T29264] netlink_rcv_skb+0x226/0x4a0 [ 842.899667][T29264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.899691][T29264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 842.899717][T29264] ? down_read+0x270/0x2e0 [ 842.899739][T29264] ? genl_rcv+0xd/0x40 [ 842.899769][T29264] genl_rcv+0x28/0x40 [ 842.899791][T29264] netlink_unicast+0x7bb/0x940 [ 842.899825][T29264] netlink_sendmsg+0x813/0xb40 [ 842.899849][T29264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.899870][T29264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.899898][T29264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.899921][T29264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.899942][T29264] ____sys_sendmsg+0x9b9/0xa20 [ 842.899962][T29264] ? __might_fault+0xaf/0x130 [ 842.899987][T29264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.900011][T29264] ? import_iovec+0x73/0xa0 [ 842.900033][T29264] ___sys_sendmsg+0x2a5/0x360 [ 842.900051][T29264] ? __lock_acquire+0x683/0x2cd0 [ 842.900071][T29264] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.900093][T29264] ? futex_wake+0x4d7/0x5b0 [ 842.900130][T29264] ? __fget_files+0x2a/0x420 [ 842.900151][T29264] ? __fget_files+0x3a2/0x420 [ 842.900178][T29264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.900198][T29264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.900222][T29264] ? rcu_is_watching+0x15/0xb0 [ 842.900246][T29264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.900266][T29264] do_syscall_64+0x174/0x580 [ 842.900288][T29264] ? clear_bhb_loop+0x40/0x90 [ 842.900309][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.900327][T29264] RIP: 0033:0x7f89ad59ce59 [ 842.900344][T29264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.900361][T29264] RSP: 002b:00007f89ae3ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.900380][T29264] RAX: ffffffffffffffda RBX: 00007f89ad815fa0 RCX: 00007f89ad59ce59 [ 842.900395][T29264] RDX: 0000000000000850 RSI: 0000200000000140 RDI: 0000000000000008 [ 842.900408][T29264] RBP: 00007f89ad632d6f R08: 0000000000000000 R09: 0000000000000000 [ 842.900420][T29264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.900431][T29264] R13: 00007f89ad816038 R14: 00007f89ad815fa0 R15: 00007ffe77eb8068 [ 842.900453][T29264] [ 843.408357][T22147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.416537][T22147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.425801][T29271] netlink: zone id is out of range [ 843.450557][T29271] netlink: zone id is out of range [ 843.459363][T29271] netlink: zone id is out of range [ 844.122753][T12743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.279823][T12743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.381100][T12743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.417543][T12743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.619471][T12743] bridge_slave_1: left allmulticast mode [ 844.632012][T12743] bridge_slave_1: left promiscuous mode [ 844.640782][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.663480][T12743] bridge_slave_0: left allmulticast mode [ 844.680581][T12743] bridge_slave_0: left promiscuous mode [ 844.686386][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.703156][T12743] dvmrp0: left allmulticast mode [ 844.863684][T12743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.887948][T12743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.898726][T12743] bond0 (unregistering): Released all slaves [ 845.266467][T12743] hsr_slave_0: left promiscuous mode [ 845.273103][T12743] hsr_slave_1: left promiscuous mode [ 845.279402][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.287208][T12743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.295015][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.303923][T12743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.315550][T12743] veth1_macvtap: left promiscuous mode [ 845.321173][T12743] veth0_macvtap: left promiscuous mode [ 845.326734][T12743] veth1_vlan: left promiscuous mode [ 845.332058][T12743] veth0_vlan: left promiscuous mode [ 845.461337][T12743] team0 (unregistering): Port device team_slave_1 removed [ 845.473146][T12743] team0 (unregistering): Port device team_slave_0 removed [ 845.483511][T21987] net_ratelimit: 383 callbacks suppressed [ 845.483529][T21987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.858369][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 845.879001][T12743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.928123][T12743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.986906][T12743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.031302][T12743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.175704][T12743] bridge_slave_1: left allmulticast mode [ 846.185027][T12743] bridge_slave_1: left promiscuous mode [ 846.192449][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.202484][T12743] bridge_slave_0: left allmulticast mode [ 846.208184][T12743] bridge_slave_0: left promiscuous mode [ 846.217883][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.315916][T12743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.327572][T12743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.337621][T12743] bond0 (unregistering): Released all slaves [ 846.346004][T12743] bond1 (unregistering): Released all slaves [ 846.356556][T12743] bond2 (unregistering): Released all slaves [ 846.367336][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 846.431170][T12743] tipc: Left network mode [ 846.731198][T12743] hsr_slave_0: left promiscuous mode [ 846.737181][T12743] hsr_slave_1: left promiscuous mode [ 846.744671][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.753708][T12743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.777595][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.785828][T12743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.798013][T12743] veth1_macvtap: left promiscuous mode [ 846.804745][T12743] veth0_macvtap: left promiscuous mode [ 846.810294][T12743] veth1_vlan: left promiscuous mode [ 846.815652][T12743] veth0_vlan: left promiscuous mode [ 846.955972][T12743] team0 (unregistering): Port device team_slave_1 removed [ 846.967930][T12743] team0 (unregistering): Port device team_slave_0 removed [ 847.043763][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 847.381510][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 847.646351][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 847.913103][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 848.183042][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 848.475201][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8