last executing test programs: 3.091155536s ago: executing program 1 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x8, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 2.851143181s ago: executing program 1 (id=2718): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61f7a9c6db9cf7da53c14750447d", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="a387b7f60040000012800b0001006255746164760000040002800a000100bbbbc5bbbbbb00000000"], 0x40}}, 0x20000840) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x800006) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000009040)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001700)=""/50, 0x32}, {&(0x7f0000001740)=""/251, 0xfb}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/52, 0x34}, {&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/19, 0x13}], 0x7, &(0x7f0000001a80)=""/94, 0x5e}}, {{&(0x7f0000001b00)=@ax25={{0x3, @netrom}, [@null, @remote, @default, @bcast, @remote, @remote, @bcast, @null]}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/110, 0x6e}], 0x1, &(0x7f0000001c40)=""/196, 0xc4}, 0xfffffffa}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/251, 0xfb}, {&(0x7f0000001ec0)=""/12, 0xc}, {&(0x7f0000001f00)=""/18, 0x12}, {&(0x7f0000001f40)=""/81, 0x51}, {&(0x7f0000001fc0)=""/183, 0xb7}, {&(0x7f0000002080)=""/100, 0x64}], 0x6, &(0x7f00000036c0)=""/4096, 0x1000}, 0x8000}, {{&(0x7f00000046c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004740)=""/47, 0x2f}, {&(0x7f0000004780)=""/50, 0x32}, {&(0x7f00000047c0)=""/151, 0x97}, {&(0x7f0000004880)=""/58, 0x3a}, {&(0x7f00000048c0)=""/196, 0xc4}, {&(0x7f00000049c0)=""/125, 0x7d}, {&(0x7f0000004a40)=""/207, 0xcf}, {&(0x7f0000004b40)=""/136, 0x88}, {&(0x7f0000004c00)=""/185, 0xb9}, {&(0x7f0000004cc0)=""/130, 0x82}], 0xa, &(0x7f0000004e40)=""/101, 0x65}, 0x5}, {{&(0x7f0000004ec0)=@ll, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/51, 0x33}, {&(0x7f0000004f80)=""/61, 0x3d}, {&(0x7f0000004fc0)=""/229, 0xe5}, {&(0x7f00000050c0)=""/186, 0xba}], 0x4, &(0x7f00000051c0)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f00000061c0)=@nfc, 0x80, &(0x7f0000006740)=[{&(0x7f0000006240)=""/102, 0x66}, {&(0x7f00000062c0)=""/63, 0x3f}, {&(0x7f0000006300)=""/187, 0xbb}, {&(0x7f00000063c0)=""/225, 0xe1}, {&(0x7f00000064c0)}, {&(0x7f0000006500)=""/194, 0xc2}, {&(0x7f0000006600)=""/47, 0x2f}, {&(0x7f0000006640)=""/35, 0x23}, {&(0x7f0000006680)=""/41, 0x29}, {&(0x7f00000066c0)=""/93, 0x5d}], 0xa}, 0x101}, {{&(0x7f0000006800)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006880)=""/169, 0xa9}, {&(0x7f0000006940)=""/192, 0xc0}, {&(0x7f0000006a00)=""/187, 0xbb}, {&(0x7f0000006ac0)=""/140, 0x8c}, {&(0x7f0000006b80)=""/103, 0x67}, {&(0x7f0000006c00)=""/33, 0x21}, {&(0x7f0000006c40)=""/189, 0xbd}], 0x7, &(0x7f0000006d80)=""/53, 0x35}, 0x5}, {{&(0x7f0000006dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000006e40)=""/96, 0x60}, {&(0x7f0000006ec0)=""/39, 0x27}, {&(0x7f0000006f00)=""/4096, 0x1000}, {&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/75, 0x4b}], 0x5, &(0x7f0000009000)=""/47, 0x2f}, 0x3}], 0x8, 0x40, &(0x7f0000009240)={0x0, 0x3938700}) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) connect$nfc_llcp(r3, &(0x7f0000001600)={0x27, r4, 0x3092, 0x6, 0xc, 0x2, "0e562d6527537b337dfcfabb51e96881c3e4b7c116d33dda0c1ba047c408dbc01e42f730f45263a90ec20fba5595e43f42837a83a6388cdadb7ea69621fa25", 0x10}, 0x60) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010102}, 0x61, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='team0\x00', 0xb1, 0x10000, 0xff01}) sendmsg$inet(r0, &(0x7f0000003400)={&(0x7f0000002180)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000003380)=[{&(0x7f00000021c0)="4cc929038ba79d356e855cfa097f442b6f6970cf11d79118d32c76585b8b521a503b4be05b66c7254ff35cd9feac5deaefdd5bb0d7a6ba1c21fe69907d0ede2238d194f54f94c2cf515c3315bec3bfea88f456feb3b7def97683c91624d31d8aec42e6a559198afa", 0x68}, {&(0x7f0000002240)="72aa5658b3ace6d3a06b15dcb9d6f8dce8f317d14f9a2d69cfb6656edb9fed87d1b10d10499ee57bb959684489a1bf0ba354fd2e9189303ed60d3bd32f4e035ba03156a3c3b8e14996b299ae5d9b3f55ed6c8aa98334559fe71cd7319d426609823e18716d91e4b8bbe58c316b30487d1a41978c259dfa7354e1e114c4d092bc5399c2f9d6c05345959b5ad366246abae786b19b91dccf5183ef8c590645260f6d2c9f55e6979229cedf097f10c94c720fdb5be9442504b259c4b4f9b83ddc7b5923455ba5611d55029ebe2f29e93378ff5b8eedbd743fe19a262493d82ac5baeacb391d989bbc7ec5872f279201fd87", 0xf0}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="e198bbede6e2332523989ba664884d796f0e230edfd0779da9702a4257c963e19c9bc6269cbe62c967b8318e513f9dfcc4c6c9f7f536084ca81ae10133", 0x3d}], 0x4, &(0x7f00000033c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x40040) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'geneve1\x00', 0x3}, 0x18) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001540)={{r0, &(0x7f00000001c0)='-.\\-\x00', 0x80, &(0x7f0000000280)={@_ha_fsid={[0x6, 0x3222d738]}, {0x9c36, 0x10, 0x4, 0x6}}, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0xb9da}, 0x3, &(0x7f00000014c0)=[{0x2, 0x4, &(0x7f0000000340)='\x00', &(0x7f0000000380), 0x0, 0x18}, {0x1, 0x10001, &(0x7f00000003c0)='veth0_to_bond\x00', &(0x7f0000000400)="652fe367f68aa24d3ac641224f79de39a9007e153f10338cb2bbcc74645fd58eb13da0e8e879323d4a91dd44141adc346004451c4e3e063a310077a688f40d2abcb7f43a6a70420903602489f86996443b", 0x51, 0x8}, {0x1, 0x6, &(0x7f0000000480)='TIPCv2\x00', &(0x7f00000004c0)="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", 0x1000, 0x8}]}) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, &(0x7f00000015c0)) 1.992370616s ago: executing program 0 (id=2726): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="0d010000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x5}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000180)="b4a0769db8d071f69ea3e6ab7dafcd5119615e404ea2a07082eefb237ac3ff3d40261174f61086394e0f62aae7ed85dc5ec1329828548f2e296bb643e2bd461b9c75", 0x42) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000300000000000008000a00", @ANYRES32=r10, @ANYBLOB="280012800900010076657468000000001800028014000100000000006e00df4443ce", @ANYRES32=0x0, @ANYBLOB="0800000002000000"], 0x50}}, 0x0) 1.843657652s ago: executing program 1 (id=2728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x5, 0x8, {{0x27, 0x4, 0x1, 0x3a, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@cipso={0x86, 0x1c, 0x1, [{0x2, 0x10, "26faa035ba7ad03648ab0e967d8f"}, {0x6, 0x6, "3fc301ef"}]}, @timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0x0, [{@local, 0x7}, {@multicast1, 0x8}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x53e1}, {@rand_addr=0x64010100, 0x45}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfd44}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x401}, {@remote, 0x8}]}, @lsrr={0x83, 0x1b, 0x40, [@loopback, @multicast2, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, 0x12, 0x300, 0x70bd26, 0x25dfdbff, {0x10, 0x5, 0x2, 0x3, {0x4e24, 0x4e20, [0x7fffffff, 0x3, 0x8, 0x9], [0x1, 0x1, 0x5, 0x101], r3, [0x8, 0x7f]}, 0x789, 0xcb7b}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "ed39959459d94036375b2a41"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "3624e52bbd16c5587290a63ff7bf6a85e9459b5ce8d36adf51a1e9a162318c034fa664bb464b905d765c76928d941025dd07c5f027a0c48ee290dce70d5585928ed453ca98ce0ebbca35dd7bc66a93f9e62118ea7d2a047a6de201718ff0b10efbccea30a70db2fc6a9268f54a6151bf9ba85f19b309e25a2c23d5dead965bf7680263ddfb7b86e5210da7cf7fac"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x79}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="9b5343cda895"}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84187cc10d211684eec447da94cb715e462e273186122", 0x2f}], 0x3) sendto$packet(r8, &(0x7f0000001280)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f0000001240)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 1.755211369s ago: executing program 0 (id=2730): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.713193292s ago: executing program 3 (id=2731): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) read$alg(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={r3, 0x15, "1290c668d3287de52a1f172c5a40655751541c28e0"}, &(0x7f0000000500)=0x1d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @remote}, &(0x7f0000000140)=0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r8 = socket(0x2, 0x3, 0xff) recvfrom$l2tp6(r8, 0x0, 0x0, 0x2022, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xe, 0x4}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x436, 0x2, {{0x2f, 0x4, 0x3, 0x15, 0xbc, 0x64, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x91, 0x0, 0x4, [0x854e]}, @cipso={0x86, 0x45, 0x0, [{0x4, 0x3, 'd'}, {0x7, 0x6, "5f5edd27"}, {0x6, 0x9, "64ed7b20dbcb41"}, {0x1, 0xd, "0c6cb6a44772deb74cc288"}, {0x4, 0x8, "1fb18f664bd8"}, {0x5, 0xa, "ef5401987a376d0e"}, {0x0, 0xe, "d75f1ef75a6a9cb02ec480a0"}]}, @noop, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x2, 0xf, "5dd553876fda0d299678d3ff55"}, {0x2, 0x5, "7eb41e"}, {0x7, 0xe, "c489a4afdf2e914dc8b33135"}, {0x2, 0xb, "dfb0569eca7d23f26e"}, {0x7, 0x10, "6404029fc950c1182f3ce69a647d"}, {0x1, 0x7, "a131a5df87"}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x7, 0x3, "d1"}]}]}}}}}) 1.631539229s ago: executing program 0 (id=2733): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1820000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd1) 1.511601396s ago: executing program 4 (id=2734): r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x42ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x2a5f13df9afa8791, 0x70bd2c, 0x27dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xffe1}, {0x1, 0xfff1}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x7, 0x4, {{0x2a, 0x4, 0x0, 0xf, 0xa8, 0x65, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x1f, 0x3, [{0x0, 0x7, "00c93c6665"}, {0x1, 0x12, "c7bad5e53c834c9ee511000000f853f4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x6e, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x81d8}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x75}, {@multicast2, 0x19}, {@rand_addr=0x64010101, 0x8}, {@local, 0x9}, {@multicast1, 0x7}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x1000}]}, @timestamp={0x44, 0x20, 0x7f, 0x0, 0x1, [0x6, 0x8, 0x6, 0x10, 0x0, 0x7, 0x1]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x40, 0x1, 0x5, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x10, 0xef, 0x0, 0xe, [0x1000, 0x45cc, 0x6]}, @end, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r12, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xb}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_vlan\x00'}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xfb}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0x7f800000}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000000)={@remote, r15}, 0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r15, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r14, 0x29, 0x1c, &(0x7f0000000040)={@remote, r15}, 0x14) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010028bd7000ffdbdf250f000000080034002400080008000300", @ANYRES32=r18, @ANYBLOB="050033"], 0x2c}}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x35c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x44}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf3, 0x7, 0xffffff80}, {0x6, 0x3, 0x9, 0x2}, {0x800, 0x24, 0xb, 0x10}, {0x3, 0x3, 0x9, 0x4}, {0x800, 0x7, 0x5, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0xd, 0x200000000000031f, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000081117000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.378837378s ago: executing program 3 (id=2736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x200000000000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x4000000) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x200000000000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x4000000) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) (async) 1.264403616s ago: executing program 3 (id=2737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x8041) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x9, 0x3, 0x5, 0x0, 0x7bed, 0xf6}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x2}, {0x7}, 0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)="a3580b8281ac88052ef13348d5efe26f946231263f8a064942f45f5dfadb1674ee74c9ba99e2af781c2ede5fdb152e6648", 0x31, 0x0, &(0x7f0000000240)={0x2, 0x1b9, {0x1, 0xc, 0xf1, "7766109bf22f98a9c8d32366e0331ac768669bc5defae51400834c1c806d28aa3ee1233fc2a1362e0848ff2102295f9cbd490c5f4ba19ac3e5ae1aacca84bd096d24a35b78e1938cd545c84fa2c42386631068f05d3bac6e6fb6eea3c1c75952631e99de9a61a88edac9a979242af0933e253a90bce9779896f1043e6743546869647b34b0bb9a360e7f3c9d40d5b017f05b614d1ee4e8fe47b5e7389e670445ec414baecf5301b16ca36014448890b66a7e316cb733c5a03bd671ddac8e687dfbfe7bf77ad963f506e84d9e15d5c04fa923824ca4cdc28c8a0c298be976f92147922c72bbb7cc786028fcdba55701d715", 0xbb, "a6592fb264d98a9b94cbb23c83176a5144ce8336e157439202c5903b7a4e09e8f54ee302b89d7c02994b16ebeec202fae41c8051b17407b9455ec39fdf93f5e887358868437c40fb48f4e8f9855fdbe2ded9a6a8526ca3d9a358b53c3d85082f6a596d40da726c28bda5f88f7dfcdad112836c60354d5a50e21ce47bafcf0eef650565cd650d7115533a5965e7f716fbacf9a53c3939f92b83de87f869ff4f035671c20f9ce5a6024b32d688af3275823e693ffc311447dcaf9379"}, 0x19, "af1625ac8a232ff4f9fd905b5a0b5058714b1c5826cc87a712"}, 0x1de}) pipe(&(0x7f0000000080)) 1.252522544s ago: executing program 2 (id=2738): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@bridge_newneigh={0x84, 0x1c, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x1, 0x6, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @NDA_LLADDR={0xa}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x22}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.224071043s ago: executing program 3 (id=2739): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 1.187256695s ago: executing program 2 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000020101010800000000000000030000001400108008000240000000070800034000000fff10000e800c"], 0x38}}, 0x24000881) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000100)=0xe, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x2c, 0x14, 0x8, 0x70bd25, 0x25dfdbff, {0x2, 0x80, 0x4a, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x8, 0x2, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.101561337s ago: executing program 3 (id=2741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd27, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c00000001040300b700000000000000030000090600064002030000"], 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x6, "4a906387cf45"}}) write(r8, &(0x7f0000000100)="520003000100", 0x6) sendmsg$NFT_BATCH(r7, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f000000e6c0)=ANY=[], 0x7470}, 0x1, 0x0, 0x0, 0x40001}, 0x95) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "d4e8aae02d642ebd8afdb46f124b17b07894554724289671c1af2333d4dcf114", "83172e34b35195679338eba50367f086a3222239f573c3986600bfd82d6e072c", "29ccbcbbd1302e04d2d150ec26b20210abec52665a545118b7dc65cd4428b276", "f704a2aad726d70d6ca5324535a03dbb62bd41361b4a302035e2a068c8ce7826", "262cb7322fb3f84aa55f5ffb34192e521a9b372200eb0d1e0ed4ccca37ff3ebe", "77237ab49da50eb71883c863", 0xd, 0x2, 0xd, 0x3, 0xf}}) 1.100962392s ago: executing program 2 (id=2742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) (async) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x10, 0x1, 0x51, 0xfffffffb}}], 0x10}, 0x4c040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005608f0ff0000000085000000b4000000b7000000000000009500000000000000ced8674ca081c44d5a8b7f76d084881f2401aca01703dbba9082820604de1f5a847175c1e78de5aa0e1a4b6b61280eb716aecb47f79698be0f4ba5403e7465b34bf6dec15e58fea50448a58214cec07c9e33e5e50e9c7f82d4ea0ac2708d63cf123632eda3e0773cdb9f59fe0d01a2683cca51768b99231f76098e1a419355e9f268d67b24"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 951.745741ms ago: executing program 2 (id=2743): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 947.6601ms ago: executing program 0 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x80800) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x10000002]}}) 925.295169ms ago: executing program 2 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40b}, 0x50) 755.860186ms ago: executing program 2 (id=2746): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) read$alg(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={r3, 0x15, "1290c668d3287de52a1f172c5a40655751541c28e0"}, &(0x7f0000000500)=0x1d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @remote}, &(0x7f0000000140)=0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xe, 0x4}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x436, 0x2, {{0x2f, 0x4, 0x3, 0x15, 0xbc, 0x64, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x91, 0x0, 0x4, [0x854e]}, @cipso={0x86, 0x45, 0x0, [{0x4, 0x3, 'd'}, {0x7, 0x6, "5f5edd27"}, {0x6, 0x9, "64ed7b20dbcb41"}, {0x1, 0xd, "0c6cb6a44772deb74cc288"}, {0x4, 0x8, "1fb18f664bd8"}, {0x5, 0xa, "ef5401987a376d0e"}, {0x0, 0xe, "d75f1ef75a6a9cb02ec480a0"}]}, @noop, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x2, 0xf, "5dd553876fda0d299678d3ff55"}, {0x2, 0x5, "7eb41e"}, {0x7, 0xe, "c489a4afdf2e914dc8b33135"}, {0x2, 0xb, "dfb0569eca7d23f26e"}, {0x7, 0x10, "6404029fc950c1182f3ce69a647d"}, {0x1, 0x7, "a131a5df87"}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x7, 0x3, "d1"}]}]}}}}}) 755.470017ms ago: executing program 0 (id=2747): unshare(0x72030080) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'geneve0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'geneve0\x00', @broadcast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, r0, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, r0, 0xfffff000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095", @ANYBLOB="2807000000000000005349977fe28f4a256e3253c384e54f8b1b2a5143e5cfd26bad9c08e2211e000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x97}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900010073797a3000000000090002007301eb00000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) (async) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900010073797a3000000000090002007301eb00000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) socket$unix(0x1, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r12}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r11}, 0x20) 649.604636ms ago: executing program 1 (id=2748): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1003}, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000c80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xe, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff1}}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@l2={0x1f, 0x0, @none}, &(0x7f0000000280)=0x80, 0x800) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x14013, r3, 0x180000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x20}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 628.883707ms ago: executing program 4 (id=2749): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x1409, 0x100, 0x70bd25, 0x25dfdbf9}, 0x10}, 0x1, 0x0, 0x0, 0x2400c181}, 0x8067) r1 = socket(0xa, 0x5, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x401}) 515.643419ms ago: executing program 1 (id=2750): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 350.902716ms ago: executing program 0 (id=2751): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) pwritev(r1, &(0x7f0000000980)=[{&(0x7f0000000100)="2cfa446fb3164f6f8b94f2e3a632609fd74369d432ec88e4d3d5db9d80eca5706d4c1da31495f4c76b12118bdd4a0df301dc0843b64dada950c1ed07becff944f9f7f3311402e77336b8f2519025060fba40bc45e7d9b5674e12523bdfd91fbc964d19fa411b1d6d81bdd84bb201632ed9fda9fd3b78a86b87c5a4547beb85354e65e9b4da3a940b02f9b1347d42dd8a6e2c70", 0x93}, {&(0x7f00000003c0)="c3947a62557cd6c97d2042bfbf2a7ec1fded4d25e04f42be640a689de4ddad0014d42e84aa7d1ddd8d660c0aab5885b345b834ec03b4f082eec35886173869ad457610d77e6554c6b8", 0x49}, {&(0x7f0000000440)="2da9f1e63227b3926addd106b70be247f5424ba17f1458fda0d29c94376462b77193a83886c45a5606649210a33cd59271bae40d27aa553a0ee7890398c4fd585826183102cb2f306d64fde395c75a92c8698894d2f05c41d8ecf4a1b9754862c7ad5d53f7edb4a961731477f7368e4ac13b68368f496c40ff36705c36f379b90c8f11c722319d4dc2667ac5ea4fa7", 0x8f}, {&(0x7f0000000500)="48be069896a8f7b593243305511ef682ceb1326dc9e8bc63c38737142ad736e81ed4db41a3667c017d9d6de4ce4a3ea8837b83eedb6ff68886a4569434753a70ec019f83499b0a6a5dd84cae1dc414832077b57099b6e3d67093298afc25a6a27d81c7bd03fe8cfe1dc1a80284306b7d892f6eeef2b40f3656fabcc6d197c009191daa7c16f3521a8a1ff7b036a51bfaaa1b692c638ac9635a4c5082b7ea6f8fd3397b371b2051a8", 0xa8}, {&(0x7f00000005c0)="7c80304d883ea6fc7a0a85e8dae886a30eeca45fda293875da197eaf0c6c49c7a977510c90fade240d29602da171711b9e79370dcec411b2e2aeaf8fb877b50b2430d2b97451b8a51bde5e24a568d1fc0e37e38d3f7c9aacf507", 0x5a}, {&(0x7f0000000640)="532036579cc5c5b53d3c8571aba834d4ffa01835e15961add07c5a832fb6f07b32bdcb310c1e094bea064811fa95b70c2684ac28248b8f268138e2d2002eaad561a5", 0x42}, {&(0x7f00000006c0)="4d707b8b096f214121e7bd6cc00725abc6c250fcc8e33d353d0b5fc1f6c878f0e5d980dc128dc9b6b5330a41fa4c172ef5b3fac74cc4e9504830e5ffd41afe8690c23ecb170bf7a1f74295d8ef2a604d1a82c9fbbef097b10e08e740e7b25d8c6343f54218f1b0231ed4412a4ce7b3029868b635831d0c5289ea3ca0a1015f9e194d50c05c60296c835b81132354aaf06c9457317af27d0bc932ca36a8d67e56ebcab5074bd60c38b41422c81af2e1b7a28d9d817963fb56ec46ada90196f9668f09a6717e65db2574dce926e8e890e9642e4d4a102de2b384942876b8156097a907", 0xe2}, {&(0x7f00000007c0)="690f2c902904f22af3597bcd5971817a50b451f9cc28695d7725e1311aa1eea36a801fc395259b4bf4080e84f6b93a92a206c939d77ae1a0c65944a14991012f36ad26f2a0cfe6f90af35026cef855b753303032b7b0a7afdf1a616d9d37764a3ba05846d0b78a56694f74c001ae406a9a5493ab629f6e259d4725629ea241b12e894d95e4787a6a71af823305c0770ad5f5afb01df103d34e6be46e15f1e6a4710fc162bf41365c68d3f75e23666e6ad8771cbf9ee6a10bd38b4f0c673e729ba75507d42d8c16", 0xc7}, {&(0x7f00000008c0)="68c67b9def8382f12c895c724522977311052acb447df46e813ec62e344c10839ec56933dfe6587f5ad5814932ee915fe1f6f5292c6e1e5742e026059a92578f98a477ccd1b2a917bfbc48a1bafe4f242b3542ab2a27952e13769e35fa656bae096f71963c9a9971f80b06e846d1a390ced33a34f5bf044daefe0ed61bf9d5a8b2a54e1a0e5bb26664166dd38cb1", 0x8e}], 0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xd) 332.985168ms ago: executing program 4 (id=2752): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x83}, [@alu={0x7, 0x1, 0x7, 0x2, 0x7, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xb2}, @call={0x85, 0x0, 0x0, 0x69}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x3, 0x0, 0x3, 0x3, 0x3, 0xfffffffffffffff8, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x98}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)={r0, r1}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x30, 0xffffffffffff0000, 0x7}, &(0x7f0000000100)=0x18) (async) socket$netlink(0x10, 0x3, 0x0) 243.591644ms ago: executing program 4 (id=2753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb70300000800feffb704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 243.363458ms ago: executing program 4 (id=2754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x258, 0x25, 0x20, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x234, 0x2d, 0x0, 0x1, [@nested={0x22d, 0x122, 0x0, 0x1, [@nested={0x178, 0x6c, 0x0, 0x1, [@generic="92f36d489f21d5b8f93497db39a4ab39eaf4dc00fecd41d9147497d42513f31299563fb5fe02248d33442ebbdc23852823f91f0ce103b66506f7f3b21df02a7cd8c9838ad5beea99495101d6035bf9d218f7f2576b68b13c5ab5fce8e849fc740600b2a7b4de083e596a2fd6438002e6532e0b1b762cfdc195db7e47562421e25fb9efd6ac466f75373a6cd372e06c4d860342f27fcb74", @generic="22a435233a6dbbcb6b2cabaac64249fd8c8954258c1ee7112c9471704f14513a05026491be7e73b2142e8223ad28c0c0b0b88dd3db4fad0f92ebaa834b08ebcba34bdb460bc5d4bb55847470651a4b7ed238709d7ab9654823339ebaea0d415d80804940aa666b3bdb68f0f9dced9751f4d089253d57c42667e9c60562f513d4bddc5b176d119b40f8b4fc545596c4fc490b8fb34384f717ec5170d36a62db1ac657f88e1c8aeec8097cd28d28276bf1a583f79a07420ed5296b4e8332727e2b3def2ce745d8bf6297f210ca7e6d39704713144f7e", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="47127442804b7a8f5dc5c199f5e8574d0f1e2be4f3a926e9e6000c8e8a188f947dd6a269047ad902cf45ab61d148a43ab41d443853c4903f47df756d2a908a6decf265e1da285abab2da78b47edca73e116f20f48b", @generic="a4e22f89ad8caa64bd855d2fd7b9b1aa6623ea17bba39fb4a0c51dc16113e14a999b1eda99214c2a9edfc5", @typed={0x6, 0x117, 0x0, 0x0, @str=',\x00'}, @generic="482e09e680d6350ca6be5a2cda", @nested={0x4, 0x118}, @nested={0x18, 0xcf, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x3}]}]}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x10b, 0x0, 0x0, @fd}]}, 0x258}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 166.918904ms ago: executing program 4 (id=2755): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x4000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028015}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0xfe33) (async) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) 80.54514ms ago: executing program 1 (id=2756): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x130, 0x98, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@empty, @private=0xa010101, 0xff, 0xff000000, 'pim6reg0\x00', 'ip6_vti0\x00', {}, {}, 0x11, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x3c55a5d2, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r3, 0x0, 0x7f, 0xc) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000080)={0x802b}) 0s ago: executing program 3 (id=2757): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000060000000000000700000000ff"], 0x0, 0x2d, 0x0, 0x1, 0x1ff}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f11800000000000000240000002400000002000000000000000200000400000003000000090000000000000000000000000000000c000000000000"], 0xffffffffffffffff, 0x3e, 0xb2, 0x2}, 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_PORT_SELF={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$sock(r2, &(0x7f0000001880)={&(0x7f00000002c0)=@in={0x2, 0x7ff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)="fa1aa1", 0x3}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="6f546a79dbc849a7cef22564a43f03c705490ae7a69f6066cce395db0c51c9f4509acd499c4b94a7f0632d91aff603eae4642f6612e70a9af6647a894dbd84a8f154035b6d1106d1cc955254043b306ebc2b548cc178f7b017778bd6f8ca4ee63754d525aba9c083822180a39edf917116d5cb0b458ee55776df0f0c80fe26bf443ddfc48e8de08ae5c13a815c3918280fa73fe572903d26fb2bad2a4091e07d7956971c8acea88648c36999bd03d1234f4640def430fd96c5a73d2ea10e9db3a58e094ead2ed08a3c130a069afedc57dc5d2d9070", 0xd5}], 0x3}, 0x4009880) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r0, 0x58, &(0x7f0000002040)}, 0x6d) kernel console output (not intermixed with test programs): 335][T11446] tunl0: entered allmulticast mode [ 303.735752][T11446] gre0: entered promiscuous mode [ 303.743532][T11446] gre0: entered allmulticast mode [ 303.750720][T11446] gretap0: entered promiscuous mode [ 303.755999][T11446] gretap0: entered allmulticast mode [ 303.763169][T11446] erspan0: entered promiscuous mode [ 303.768780][T11450] sctp: [Deprecated]: syz.1.1368 (pid 11450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.768780][T11450] Use struct sctp_sack_info instead [ 303.784521][T11446] erspan0: entered allmulticast mode [ 303.797691][T11446] ip_vti0: entered promiscuous mode [ 303.821746][T11446] ip_vti0: entered allmulticast mode [ 303.838434][T11446] ip6_vti0: entered promiscuous mode [ 303.852529][T11446] ip6_vti0: entered allmulticast mode [ 303.865060][T11446] sit0: entered promiscuous mode [ 303.876856][T11446] sit0: entered allmulticast mode [ 303.889316][T11446] ip6tnl0: entered promiscuous mode [ 303.904866][T11446] ip6tnl0: entered allmulticast mode [ 303.913339][T11446] ip6gre0: entered promiscuous mode [ 303.926432][T11446] ip6gre0: entered allmulticast mode [ 303.944789][T11446] syz_tun: entered promiscuous mode [ 303.960431][T11446] syz_tun: entered allmulticast mode [ 303.986185][T11446] ip6gretap0: entered promiscuous mode [ 304.016758][T11446] ip6gretap0: entered allmulticast mode [ 304.030240][T11446] bridge0: entered promiscuous mode [ 304.041562][T11446] bridge0: entered allmulticast mode [ 304.049399][T11446] vcan0: entered promiscuous mode [ 304.054496][T11446] vcan0: entered allmulticast mode [ 304.064051][T11446] bond0: entered promiscuous mode [ 304.069457][T11446] bond_slave_0: entered promiscuous mode [ 304.075315][T11446] bond_slave_1: entered promiscuous mode [ 304.082186][T11446] bond0: entered allmulticast mode [ 304.088075][T11446] bond_slave_0: entered allmulticast mode [ 304.093828][T11446] bond_slave_1: entered allmulticast mode [ 304.100807][T11446] team0: entered promiscuous mode [ 304.105878][T11446] team_slave_0: entered promiscuous mode [ 304.111892][T11446] team_slave_1: entered promiscuous mode [ 304.118101][T11446] team0: entered allmulticast mode [ 304.123222][T11446] team_slave_0: entered allmulticast mode [ 304.129304][T11446] team_slave_1: entered allmulticast mode [ 304.135954][T11446] dummy0: entered promiscuous mode [ 304.141454][T11446] dummy0: entered allmulticast mode [ 304.147673][T11446] nlmon0: entered promiscuous mode [ 304.152860][T11446] nlmon0: entered allmulticast mode [ 304.159593][T11446] batadv0: entered promiscuous mode [ 304.164835][T11446] batadv0: entered allmulticast mode [ 304.171712][T11446] vxcan0: entered promiscuous mode [ 304.177839][T11446] vxcan0: entered allmulticast mode [ 304.183784][T11446] vxcan1: entered promiscuous mode [ 304.189700][T11446] vxcan1: entered allmulticast mode [ 304.196289][T11446] veth1: entered promiscuous mode [ 304.201687][T11446] veth1: entered allmulticast mode [ 304.208845][T11446] wg0: entered promiscuous mode [ 304.213744][T11446] wg0: entered allmulticast mode [ 304.220068][T11446] wg1: entered promiscuous mode [ 304.224970][T11446] wg1: entered allmulticast mode [ 304.231964][T11446] wg2: entered promiscuous mode [ 304.237085][T11446] wg2: entered allmulticast mode [ 304.243188][T11446] veth0_to_bridge: entered promiscuous mode [ 304.249624][T11446] veth0_to_bridge: entered allmulticast mode [ 304.258599][T11446] veth1_to_bridge: entered promiscuous mode [ 304.264579][T11446] veth1_to_bridge: entered allmulticast mode [ 304.275262][T11446] veth0_to_bond: entered promiscuous mode [ 304.281658][T11446] veth0_to_bond: entered allmulticast mode [ 304.293199][T11446] veth1_to_bond: entered promiscuous mode [ 304.299328][T11446] veth1_to_bond: entered allmulticast mode [ 304.313317][T11446] veth0_to_team: entered promiscuous mode [ 304.319275][T11446] veth0_to_team: entered allmulticast mode [ 304.327039][T11446] veth1_to_team: entered promiscuous mode [ 304.332890][T11446] veth1_to_team: entered allmulticast mode [ 304.341083][T11446] veth0_to_batadv: entered promiscuous mode [ 304.347204][T11446] veth0_to_batadv: entered allmulticast mode [ 304.353983][T11446] batadv_slave_0: entered promiscuous mode [ 304.359942][T11446] batadv_slave_0: entered allmulticast mode [ 304.366607][T11446] veth1_to_batadv: entered promiscuous mode [ 304.373420][T11446] veth1_to_batadv: entered allmulticast mode [ 304.380606][T11446] batadv_slave_1: entered promiscuous mode [ 304.386522][T11446] batadv_slave_1: entered allmulticast mode [ 304.393806][T11446] xfrm0: entered promiscuous mode [ 304.401346][T11446] xfrm0: entered allmulticast mode [ 304.407867][T11446] veth0_to_hsr: entered promiscuous mode [ 304.413624][T11446] veth0_to_hsr: entered allmulticast mode [ 304.420537][T11446] hsr_slave_0: entered allmulticast mode [ 304.426945][T11446] veth1_to_hsr: entered promiscuous mode [ 304.432699][T11446] veth1_to_hsr: entered allmulticast mode [ 304.444021][T11446] hsr_slave_1: entered allmulticast mode [ 304.453432][T11446] hsr0: entered promiscuous mode [ 304.458491][T11446] hsr0: entered allmulticast mode [ 304.464255][T11446] veth1_virt_wifi: entered promiscuous mode [ 304.470626][T11446] veth1_virt_wifi: entered allmulticast mode [ 304.478815][T11446] veth0_virt_wifi: entered promiscuous mode [ 304.484790][T11446] veth0_virt_wifi: entered allmulticast mode [ 304.492035][T11446] virt_wifi0: entered promiscuous mode [ 304.498233][T11446] virt_wifi0: entered allmulticast mode [ 304.504833][T11446] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.081829][T11496] tipc: Enabled bearer , priority 0 [ 305.238668][T11500] syzkaller0: entered promiscuous mode [ 305.244471][T11500] syzkaller0: entered allmulticast mode [ 305.251312][T11500] tipc: Resetting bearer [ 305.304846][T11488] tipc: Resetting bearer [ 306.063825][T11537] __nla_validate_parse: 1 callbacks suppressed [ 306.063844][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 307.679898][T11488] tipc: Disabling bearer [ 307.690268][T11521] lo speed is unknown, defaulting to 1000 [ 307.702515][T11523] lo: left allmulticast mode [ 307.719171][T11523] tunl0: left allmulticast mode [ 307.737451][T11523] gre0: left allmulticast mode [ 307.747807][T11523] gretap0: left allmulticast mode [ 307.761945][T11523] erspan0: left allmulticast mode [ 307.777480][T11523] ip_vti0: left allmulticast mode [ 307.784667][T11523] ip6_vti0: left allmulticast mode [ 307.837753][T11521] lo speed is unknown, defaulting to 1000 [ 307.882226][T11521] lo speed is unknown, defaulting to 1000 [ 307.932330][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 308.025044][T11568] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 308.066193][T11565] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 308.264902][T11573] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 308.352825][T11577] macvlan2: entered promiscuous mode [ 308.369117][T11577] macvlan2: entered allmulticast mode [ 308.381547][T11577] bond3: entered promiscuous mode [ 308.392392][T11577] bridge6: entered promiscuous mode [ 308.407788][T11577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.427590][T11577] bond3: left promiscuous mode [ 308.438826][T11577] bridge6: left promiscuous mode [ 308.489979][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 308.518341][T11571] wg1 speed is unknown, defaulting to 1000 [ 308.544946][T11564] wg1 speed is unknown, defaulting to 1000 [ 308.588840][T11521] infiniband sqz0: set active [ 308.600869][T11521] infiniband sqz0: added lo [ 308.639762][T11521] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 308.662676][T11521] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 308.696925][T11521] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 308.739644][T11584] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1392'. [ 308.743701][ T8778] lo speed is unknown, defaulting to 1000 [ 308.843758][T11521] RDS/IB: sqz0: added [ 308.867183][T11521] smc: adding ib device sqz0 with port count 1 [ 308.887615][T11521] smc: ib device sqz0 port 1 has no pnetid [ 308.954640][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1392'. [ 308.984415][T11589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1392'. [ 309.000910][T11521] lo speed is unknown, defaulting to 1000 [ 309.019529][ T8778] lo speed is unknown, defaulting to 1000 [ 309.429980][T11521] lo speed is unknown, defaulting to 1000 [ 309.608113][T11603] syzkaller0: entered promiscuous mode [ 309.622206][T11603] syzkaller0: entered allmulticast mode [ 309.649912][T11603] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1399'. [ 309.672952][T11603] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 309.778729][T11521] lo speed is unknown, defaulting to 1000 [ 309.892751][T11609] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.955284][T11609] netlink: 'syz.1.1401': attribute type 11 has an invalid length. [ 310.117562][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 310.224328][T11521] lo speed is unknown, defaulting to 1000 [ 310.503897][T11521] lo speed is unknown, defaulting to 1000 [ 310.821281][T11521] lo speed is unknown, defaulting to 1000 [ 311.055597][T11620] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 311.174400][T11521] lo speed is unknown, defaulting to 1000 [ 311.278699][T11627] pimreg: tun_chr_ioctl cmd 1074025677 [ 311.286014][T11627] pimreg: linktype set to 823 [ 311.830434][T11637] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 311.936008][T11647] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1416'. [ 311.966677][T11647] .70·X: renamed from veth1_virt_wifi [ 312.016028][T11647] .70·X: entered allmulticast mode [ 312.028665][T11647] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 312.719466][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1425'. [ 312.731891][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 312.780788][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1425'. [ 312.945747][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 313.238954][T11692] netem: change failed [ 313.324400][T11693] bond4: invalid ARP target 0.0.0.0 specified for addition [ 313.364788][T11693] bond4: option arp_ip_target: invalid value (0) [ 313.393085][T11693] bond4 (unregistering): Released all slaves [ 313.422993][T11705] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1435'. [ 314.220172][T11737] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 314.227260][T11736] FAULT_INJECTION: forcing a failure. [ 314.227260][T11736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.342364][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.1.1446 Not tainted syzkaller #0 PREEMPT(full) [ 314.342396][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.342418][T11736] Call Trace: [ 314.342427][T11736] [ 314.342435][T11736] dump_stack_lvl+0xe8/0x150 [ 314.342463][T11736] should_fail_ex+0x412/0x560 [ 314.342494][T11736] _copy_to_iter+0x404/0x17d0 [ 314.342520][T11736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.342555][T11736] ? __pfx__copy_to_iter+0x10/0x10 [ 314.342581][T11736] ? traverse+0x544/0x580 [ 314.342613][T11736] seq_read_iter+0x2e9/0xe10 [ 314.342632][T11736] ? __pfx_aa_file_perm+0x10/0x10 [ 314.342664][T11736] ? __kmalloc_noprof+0x37d/0x760 [ 314.342702][T11736] do_iter_readv_writev+0x619/0x8c0 [ 314.342736][T11736] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 314.342776][T11736] ? rw_verify_area+0x2a6/0x4d0 [ 314.342808][T11736] vfs_readv+0x288/0x840 [ 314.342840][T11736] ? __pfx_vfs_readv+0x10/0x10 [ 314.342877][T11736] ? __fget_files+0x2a/0x420 [ 314.342912][T11736] ? __fget_files+0x3a0/0x420 [ 314.342935][T11736] ? __fget_files+0x2a/0x420 [ 314.342968][T11736] __x64_sys_preadv+0x19f/0x2a0 [ 314.343001][T11736] ? __pfx___x64_sys_preadv+0x10/0x10 [ 314.343041][T11736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.343063][T11736] do_syscall_64+0x15f/0xf80 [ 314.343082][T11736] ? clear_bhb_loop+0x40/0x90 [ 314.343107][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.343127][T11736] RIP: 0033:0x7f307999cdd9 [ 314.343144][T11736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.343162][T11736] RSP: 002b:00007f307a923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 314.343183][T11736] RAX: ffffffffffffffda RBX: 00007f3079c15fa0 RCX: 00007f307999cdd9 [ 314.343215][T11736] RDX: 100000000000004b RSI: 00002000000002c0 RDI: 0000000000000004 [ 314.343229][T11736] RBP: 00007f307a923090 R08: 00000000fffffffe R09: 0000000000000000 [ 314.343243][T11736] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 314.343255][T11736] R13: 00007f3079c16038 R14: 00007f3079c15fa0 R15: 00007ffd50e86ba8 [ 314.343290][T11736] [ 314.587519][T11733] xt_hashlimit: size too large, truncated to 1048576 [ 314.628974][T11737] wg1 speed is unknown, defaulting to 1000 [ 314.724898][T11742] bond7: entered promiscuous mode [ 314.803848][T11737] lo speed is unknown, defaulting to 1000 [ 314.864543][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 315.097217][T11769] pim6reg: entered allmulticast mode [ 315.140228][T11769] pim6reg: left allmulticast mode [ 315.533595][T11738] bridge0: entered promiscuous mode [ 315.540003][T11738] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.552074][T11738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.620355][T11738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.636158][T11738] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 315.685409][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.692676][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.759991][ T5835] wg1 speed is unknown, defaulting to 1000 [ 315.768504][ T5835] syz0: Port: 1 Link ACTIVE [ 315.858071][T11789] FAULT_INJECTION: forcing a failure. [ 315.858071][T11789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.871954][T11789] CPU: 0 UID: 0 PID: 11789 Comm: syz.2.1459 Not tainted syzkaller #0 PREEMPT(full) [ 315.871981][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.871994][T11789] Call Trace: [ 315.872002][T11789] [ 315.872010][T11789] dump_stack_lvl+0xe8/0x150 [ 315.872040][T11789] should_fail_ex+0x412/0x560 [ 315.872073][T11789] _copy_to_iter+0x589/0x17d0 [ 315.872100][T11789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.872138][T11789] ? __pfx__copy_to_iter+0x10/0x10 [ 315.872166][T11789] ? traverse+0x544/0x580 [ 315.872199][T11789] seq_read_iter+0x2e9/0xe10 [ 315.872219][T11789] ? __pfx_aa_file_perm+0x10/0x10 [ 315.872253][T11789] ? __kmalloc_noprof+0x37d/0x760 [ 315.872293][T11789] do_iter_readv_writev+0x619/0x8c0 [ 315.872328][T11789] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 315.872371][T11789] ? rw_verify_area+0x2a6/0x4d0 [ 315.872405][T11789] vfs_readv+0x288/0x840 [ 315.872437][T11789] ? __pfx_vfs_readv+0x10/0x10 [ 315.872477][T11789] ? __fget_files+0x2a/0x420 [ 315.872506][T11789] ? __fget_files+0x3a0/0x420 [ 315.872531][T11789] ? __fget_files+0x2a/0x420 [ 315.872574][T11789] __x64_sys_preadv+0x19f/0x2a0 [ 315.872610][T11789] ? __pfx___x64_sys_preadv+0x10/0x10 [ 315.872671][T11789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.872695][T11789] do_syscall_64+0x15f/0xf80 [ 315.872714][T11789] ? trace_irq_disable+0x3b/0x140 [ 315.872746][T11789] ? clear_bhb_loop+0x40/0x90 [ 315.872774][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.872803][T11789] RIP: 0033:0x7fcc6c79cdd9 [ 315.872824][T11789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.872843][T11789] RSP: 002b:00007fcc6d699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 315.872866][T11789] RAX: ffffffffffffffda RBX: 00007fcc6ca15fa0 RCX: 00007fcc6c79cdd9 [ 315.872882][T11789] RDX: 100000000000004b RSI: 00002000000002c0 RDI: 0000000000000004 [ 315.872896][T11789] RBP: 00007fcc6d699090 R08: 00000000fffffffe R09: 0000000000000000 [ 315.872911][T11789] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 315.872923][T11789] R13: 00007fcc6ca16038 R14: 00007fcc6ca15fa0 R15: 00007ffeb1bf1758 [ 315.872958][T11789] [ 316.099843][T11791] sctp: [Deprecated]: syz.0.1458 (pid 11791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.099843][T11791] Use struct sctp_sack_info instead [ 316.201836][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'. [ 316.624767][T11807] syzkaller0: entered promiscuous mode [ 316.642214][T11807] syzkaller0: entered allmulticast mode [ 316.660926][T11807] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 316.697162][T11810] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1466'. [ 316.732339][T11810] xt_hashlimit: invalid rate [ 317.102237][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 317.141862][T11827] FAULT_INJECTION: forcing a failure. [ 317.141862][T11827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.155103][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.2.1471 Not tainted syzkaller #0 PREEMPT(full) [ 317.155127][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.155139][T11827] Call Trace: [ 317.155146][T11827] [ 317.155154][T11827] dump_stack_lvl+0xe8/0x150 [ 317.155180][T11827] should_fail_ex+0x412/0x560 [ 317.155211][T11827] _copy_to_user+0x31/0xb0 [ 317.155241][T11827] simple_read_from_buffer+0xe1/0x170 [ 317.155269][T11827] proc_fail_nth_read+0x1bb/0x230 [ 317.155297][T11827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.155324][T11827] ? rw_verify_area+0x2a6/0x4d0 [ 317.155350][T11827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.155375][T11827] vfs_read+0x20c/0xa70 [ 317.155406][T11827] ? __pfx___mutex_lock+0x10/0x10 [ 317.155426][T11827] ? __pfx_vfs_read+0x10/0x10 [ 317.155453][T11827] ? __fget_files+0x2a/0x420 [ 317.155486][T11827] ? __fget_files+0x3a0/0x420 [ 317.155508][T11827] ? __fget_files+0x2a/0x420 [ 317.155538][T11827] ksys_read+0x150/0x270 [ 317.155566][T11827] ? __pfx_ksys_read+0x10/0x10 [ 317.155601][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.155621][T11827] do_syscall_64+0x15f/0xf80 [ 317.155638][T11827] ? trace_irq_disable+0x3b/0x140 [ 317.155666][T11827] ? clear_bhb_loop+0x40/0x90 [ 317.155688][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.155707][T11827] RIP: 0033:0x7fcc6c75d60e [ 317.155723][T11827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.155740][T11827] RSP: 002b:00007fcc6d698fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.155760][T11827] RAX: ffffffffffffffda RBX: 00007fcc6d6996c0 RCX: 00007fcc6c75d60e [ 317.155773][T11827] RDX: 000000000000000f RSI: 00007fcc6d6990a0 RDI: 0000000000000005 [ 317.155785][T11827] RBP: 00007fcc6d699090 R08: 0000000000000000 R09: 0000000000000000 [ 317.155796][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.155806][T11827] R13: 00007fcc6ca16038 R14: 00007fcc6ca15fa0 R15: 00007ffeb1bf1758 [ 317.155837][T11827] [ 317.997037][T11847] pimreg: tun_chr_ioctl cmd 1074025677 [ 318.002685][T11847] pimreg: linktype set to 823 [ 318.218578][T11851] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1481'. [ 318.239108][T11852] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1481'. [ 318.388069][T11857] netlink: 'syz.2.1482': attribute type 16 has an invalid length. [ 318.416322][T11858] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1483'. [ 318.426560][T11857] netlink: 'syz.2.1482': attribute type 3 has an invalid length. [ 318.434940][T11857] netlink: 9522 bytes leftover after parsing attributes in process `syz.2.1482'. [ 319.002705][T11888] vlan3: entered promiscuous mode [ 319.007777][T11888] bridge0: entered promiscuous mode [ 319.083099][T11888] netlink: 'syz.3.1493': attribute type 4 has an invalid length. [ 319.525243][T11899] netlink: 'syz.3.1497': attribute type 39 has an invalid length. [ 319.584835][T11901] pimreg: tun_chr_ioctl cmd 1074025677 [ 319.590656][T11901] pimreg: linktype set to 823 [ 320.012482][T11914] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 320.215238][T11916] : entered promiscuous mode [ 320.352258][T11927] netlink: 'syz.0.1507': attribute type 298 has an invalid length. [ 320.378988][T11930] ip6erspan0: entered allmulticast mode [ 320.499027][T11926] wg1 speed is unknown, defaulting to 1000 [ 320.510157][T11926] lo speed is unknown, defaulting to 1000 [ 320.587610][T11945] FAULT_INJECTION: forcing a failure. [ 320.587610][T11945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.601589][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.4.1512 Not tainted syzkaller #0 PREEMPT(full) [ 320.601630][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.601642][T11945] Call Trace: [ 320.601650][T11945] [ 320.601658][T11945] dump_stack_lvl+0xe8/0x150 [ 320.601686][T11945] should_fail_ex+0x412/0x560 [ 320.601717][T11945] _copy_from_user+0x2d/0xb0 [ 320.601747][T11945] __copy_msghdr+0x3c5/0x5b0 [ 320.601781][T11945] ___sys_sendmsg+0x213/0x360 [ 320.601810][T11945] ? __lock_acquire+0x6b5/0x2cf0 [ 320.601836][T11945] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.601900][T11945] ? __fget_files+0x2a/0x420 [ 320.601924][T11945] ? __fget_files+0x3a0/0x420 [ 320.601959][T11945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.601991][T11945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.602031][T11945] ? __pfx_ksys_write+0x10/0x10 [ 320.602069][T11945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.602090][T11945] do_syscall_64+0x15f/0xf80 [ 320.602108][T11945] ? trace_irq_disable+0x3b/0x140 [ 320.602137][T11945] ? clear_bhb_loop+0x40/0x90 [ 320.602168][T11945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.602188][T11945] RIP: 0033:0x7f1630d9cdd9 [ 320.602227][T11945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.602270][T11945] RSP: 002b:00007f1631ca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.602293][T11945] RAX: ffffffffffffffda RBX: 00007f1631015fa0 RCX: 00007f1630d9cdd9 [ 320.602309][T11945] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 320.602323][T11945] RBP: 00007f1631ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 320.602336][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.602348][T11945] R13: 00007f1631016038 R14: 00007f1631015fa0 R15: 00007ffffa75a828 [ 320.602383][T11945] [ 320.874581][T11947] pimreg: tun_chr_ioctl cmd 1074025677 [ 320.881032][T11947] pimreg: linktype set to 823 [ 321.404168][T11960] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.648706][T11960] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.869041][T11969] tipc: Enabling of bearer rejected, already enabled [ 321.970814][T11973] FAULT_INJECTION: forcing a failure. [ 321.970814][T11973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.984307][T11973] CPU: 0 UID: 0 PID: 11973 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) [ 321.984333][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.984346][T11973] Call Trace: [ 321.984353][T11973] [ 321.984362][T11973] dump_stack_lvl+0xe8/0x150 [ 321.984389][T11973] should_fail_ex+0x412/0x560 [ 321.984421][T11973] _copy_from_user+0x2d/0xb0 [ 321.984450][T11973] ____sys_sendmsg+0x308/0x9f0 [ 321.984491][T11973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.984531][T11973] ? import_iovec+0x73/0xa0 [ 321.984562][T11973] ___sys_sendmsg+0x2a5/0x360 [ 321.984591][T11973] ? __lock_acquire+0x6b5/0x2cf0 [ 321.984617][T11973] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.984681][T11973] ? __fget_files+0x2a/0x420 [ 321.984705][T11973] ? __fget_files+0x3a0/0x420 [ 321.984737][T11973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.984771][T11973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.984811][T11973] ? __pfx_ksys_write+0x10/0x10 [ 321.984848][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.984870][T11973] do_syscall_64+0x15f/0xf80 [ 321.984888][T11973] ? trace_irq_disable+0x3b/0x140 [ 321.984918][T11973] ? clear_bhb_loop+0x40/0x90 [ 321.984942][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.984966][T11973] RIP: 0033:0x7fcc6c79cdd9 [ 321.984985][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.985002][T11973] RSP: 002b:00007fcc6d699028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.985042][T11973] RAX: ffffffffffffffda RBX: 00007fcc6ca15fa0 RCX: 00007fcc6c79cdd9 [ 321.985058][T11973] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 321.985070][T11973] RBP: 00007fcc6d699090 R08: 0000000000000000 R09: 0000000000000000 [ 321.985083][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.985095][T11973] R13: 00007fcc6ca16038 R14: 00007fcc6ca15fa0 R15: 00007ffeb1bf1758 [ 321.985130][T11973] [ 322.244860][T11960] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.294220][T11982] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1524'. [ 322.444407][T11986] pimreg: tun_chr_ioctl cmd 1074025677 [ 322.452305][T11986] pimreg: linktype set to 823 [ 322.514678][T11960] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.572591][T11990] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 322.580400][T11990] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1526'. [ 322.589376][T11990] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1526'. [ 322.598269][T11990] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 322.632457][T11990] netlink: 634 bytes leftover after parsing attributes in process `syz.0.1526'. [ 322.976508][ T3268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 322.995753][ T3268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.028295][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.036852][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.235917][T11994] bridge_slave_1: left allmulticast mode [ 323.241800][T11994] bridge_slave_1: left promiscuous mode [ 323.248127][T11994] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.264176][T11994] team0: Port device team_slave_0 removed [ 323.283882][T11994] team0: Port device team_slave_1 removed [ 323.295952][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.303402][T11994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.318173][T11994] bond3: (slave bridge3): Releasing active interface [ 323.324923][T11994] bridge3: left promiscuous mode [ 323.330236][T11994] bridge3: left allmulticast mode [ 323.406993][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.451360][T11994] ip6gre2: entered allmulticast mode [ 323.459196][T11994] team0: Refused to change device type [ 323.527435][T11998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1531'. [ 323.553801][T12005] tipc: Enabled bearer , priority 0 [ 323.565586][T12004] tipc: Disabling bearer [ 323.673752][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 323.845874][T12018] smc: removing ib device sqz0 [ 323.907723][T12018] smbdirect: ib_dev[sqz0] removed [ 325.006579][T12062] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1547'. [ 325.069420][T12054] can: request_module (can-proto-0) failed. [ 325.210214][T12066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1548'. [ 325.370884][T12068] pim6reg: entered allmulticast mode [ 325.377791][T12068] pim6reg: left allmulticast mode [ 326.571945][T12102] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 326.581650][T12102] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1561'. [ 326.613300][T12105] netlink: 'syz.0.1556': attribute type 39 has an invalid length. [ 327.102851][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'. [ 327.313488][T12133] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 327.335073][T12133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 327.382680][T12134] netlink: 'syz.2.1571': attribute type 1 has an invalid length. [ 327.400427][T12139] __nla_validate_parse: 1 callbacks suppressed [ 327.400444][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'. [ 327.451125][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1572'. [ 327.486346][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 327.504628][T12133] dummy0: left promiscuous mode [ 327.510499][T12133] dummy0: left allmulticast mode [ 327.628723][T12146] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1574'. [ 327.641353][T12146] bond0 (unregistering): Released all slaves [ 327.790941][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 328.436418][T12179] netlink: 'syz.0.1586': attribute type 29 has an invalid length. [ 328.523221][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 328.677662][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 328.753671][T12205] tipc: Enabling of bearer rejected, failed to enable media [ 329.042269][T12214] FAULT_INJECTION: forcing a failure. [ 329.042269][T12214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.056131][T12214] CPU: 0 UID: 0 PID: 12214 Comm: syz.3.1595 Not tainted syzkaller #0 PREEMPT(full) [ 329.056159][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.056172][T12214] Call Trace: [ 329.056181][T12214] [ 329.056189][T12214] dump_stack_lvl+0xe8/0x150 [ 329.056220][T12214] should_fail_ex+0x412/0x560 [ 329.056255][T12214] _copy_to_user+0x31/0xb0 [ 329.056289][T12214] simple_read_from_buffer+0xe1/0x170 [ 329.056320][T12214] proc_fail_nth_read+0x1bb/0x230 [ 329.056351][T12214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.056382][T12214] ? rw_verify_area+0x2a6/0x4d0 [ 329.056412][T12214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.056440][T12214] vfs_read+0x20c/0xa70 [ 329.056476][T12214] ? __pfx___mutex_lock+0x10/0x10 [ 329.056498][T12214] ? __pfx_vfs_read+0x10/0x10 [ 329.056528][T12214] ? __fget_files+0x2a/0x420 [ 329.056566][T12214] ? __fget_files+0x3a0/0x420 [ 329.056590][T12214] ? __fget_files+0x2a/0x420 [ 329.056626][T12214] ksys_read+0x150/0x270 [ 329.056658][T12214] ? __pfx_ksys_read+0x10/0x10 [ 329.056701][T12214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.056724][T12214] do_syscall_64+0x15f/0xf80 [ 329.056742][T12214] ? trace_irq_disable+0x3b/0x140 [ 329.056774][T12214] ? clear_bhb_loop+0x40/0x90 [ 329.056800][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.056822][T12214] RIP: 0033:0x7f101535d60e [ 329.056842][T12214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 329.056860][T12214] RSP: 002b:00007f101627afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.056889][T12214] RAX: ffffffffffffffda RBX: 00007f101627b6c0 RCX: 00007f101535d60e [ 329.056905][T12214] RDX: 000000000000000f RSI: 00007f101627b0a0 RDI: 000000000000000a [ 329.056918][T12214] RBP: 00007f101627b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.056931][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.056943][T12214] R13: 00007f1015616128 R14: 00007f1015616090 R15: 00007ffd549d1c58 [ 329.056978][T12214] [ 329.480412][T12229] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 329.528306][T12234] IPVS: nq: FWM 3 0x00000003 - no destination available [ 329.754318][T12248] pimreg: tun_chr_ioctl cmd 1074025677 [ 329.763539][T12248] pimreg: linktype set to 823 [ 330.520184][T12262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.556146][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 330.565225][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 330.680388][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1612'. [ 330.699052][T12270] wg1 speed is unknown, defaulting to 1000 [ 331.512333][T12295] FAULT_INJECTION: forcing a failure. [ 331.512333][T12295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.527666][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.2.1621 Not tainted syzkaller #0 PREEMPT(full) [ 331.527695][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.527708][T12295] Call Trace: [ 331.527717][T12295] [ 331.527725][T12295] dump_stack_lvl+0xe8/0x150 [ 331.527755][T12295] should_fail_ex+0x412/0x560 [ 331.527789][T12295] _copy_to_user+0x31/0xb0 [ 331.527822][T12295] simple_read_from_buffer+0xe1/0x170 [ 331.527854][T12295] proc_fail_nth_read+0x1bb/0x230 [ 331.527885][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.527916][T12295] ? rw_verify_area+0x2a6/0x4d0 [ 331.527945][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.527974][T12295] vfs_read+0x20c/0xa70 [ 331.528009][T12295] ? __pfx___mutex_lock+0x10/0x10 [ 331.528032][T12295] ? __pfx_vfs_read+0x10/0x10 [ 331.528074][T12295] ? __fget_files+0x2a/0x420 [ 331.528102][T12295] ? __fget_files+0x3a0/0x420 [ 331.528124][T12295] ? __fget_files+0x2a/0x420 [ 331.528157][T12295] ksys_read+0x150/0x270 [ 331.528187][T12295] ? __pfx_ksys_read+0x10/0x10 [ 331.528223][T12295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.528244][T12295] do_syscall_64+0x15f/0xf80 [ 331.528262][T12295] ? trace_irq_disable+0x3b/0x140 [ 331.528291][T12295] ? clear_bhb_loop+0x40/0x90 [ 331.528316][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.528335][T12295] RIP: 0033:0x7fcc6c75d60e [ 331.528352][T12295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.528369][T12295] RSP: 002b:00007fcc6d698fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.528390][T12295] RAX: ffffffffffffffda RBX: 00007fcc6d6996c0 RCX: 00007fcc6c75d60e [ 331.528404][T12295] RDX: 000000000000000f RSI: 00007fcc6d6990a0 RDI: 0000000000000004 [ 331.528416][T12295] RBP: 00007fcc6d699090 R08: 0000000000000000 R09: 0000000000000000 [ 331.528428][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.528439][T12295] R13: 00007fcc6ca16038 R14: 00007fcc6ca15fa0 R15: 00007ffeb1bf1758 [ 331.528471][T12295] [ 331.838529][T12297] pimreg: tun_chr_ioctl cmd 1074025677 [ 331.844179][T12297] pimreg: linktype set to 823 [ 332.502371][T12321] __nla_validate_parse: 3 callbacks suppressed [ 332.502390][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1630'. [ 332.614178][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 332.656622][T12324] veth1_to_team: entered promiscuous mode [ 332.663535][T12324] gretap0: entered promiscuous mode [ 332.688416][T12324] debugfs: 'hsr1' already exists in 'hsr' [ 332.694193][T12324] Cannot create hsr debugfs directory [ 332.699607][T12324] hsr1: entered promiscuous mode [ 332.721934][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.730187][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.738417][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.818031][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.820342][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 333.000629][T12330] bond2: entered promiscuous mode [ 333.344725][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 333.385712][T12356] wg1 speed is unknown, defaulting to 1000 [ 333.842506][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1650'. [ 333.950075][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 334.063435][T12388] netlink: 'syz.0.1653': attribute type 2 has an invalid length. [ 334.124890][T12385] wg1 speed is unknown, defaulting to 1000 [ 334.204333][T12390] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 334.215429][T12390] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 334.281540][T12394] netlink: 'syz.0.1654': attribute type 7 has an invalid length. [ 334.330927][T12390] bond3: entered promiscuous mode [ 334.336540][T12390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.498233][T12402] syzkaller0: entered promiscuous mode [ 334.515622][T12402] syzkaller0: entered allmulticast mode [ 334.584586][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 334.594540][T12402] netlink: 'syz.2.1656': attribute type 2 has an invalid length. [ 334.602304][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 334.800330][T12420] IPVS: nq: FWM 3 0x00000003 - no destination available [ 334.856593][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'. [ 334.873047][T12422] tipc: Enabling of bearer rejected, failed to enable media [ 334.978680][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 335.113421][T12437] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 335.186672][T12437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.215330][T12443] bond8: (slave veth3): Enslaving as an active interface with a down link [ 335.271936][T12444] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 335.401154][T12444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.417818][T12444] netlink: 'syz.3.1668': attribute type 4 has an invalid length. [ 335.434079][T12449] bond0: (slave geneve3): making interface the new active one [ 335.443720][T12449] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 335.455673][ T150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.475089][T12444] netlink: 'syz.3.1668': attribute type 4 has an invalid length. [ 335.483603][ T150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.496846][ T150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.505083][ T150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.164378][T12487] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 336.474571][T12504] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.781287][T12512] syzkaller1: entered promiscuous mode [ 336.826819][T12512] syzkaller1: entered allmulticast mode [ 336.843445][T12522] syzkaller1: entered promiscuous mode [ 336.864820][T12522] syzkaller1: entered allmulticast mode [ 338.293527][T12552] __nla_validate_parse: 7 callbacks suppressed [ 338.293545][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1698'. [ 338.308725][T12552] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1698'. [ 338.473822][T12562] netlink: 'syz.2.1702': attribute type 2 has an invalid length. [ 338.494203][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1702'. [ 338.541861][T12562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.549221][T12562] IPv6: NLM_F_CREATE should be set when creating new route [ 338.580259][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1702'. [ 338.982773][T12574] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1705'. [ 339.047768][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 339.068662][T12574] bond4 (unregistering): Released all slaves [ 339.209738][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 339.267354][T12579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.548961][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1713'. [ 339.561984][T12593] nbd: must specify a device to reconfigure [ 339.600612][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 340.189829][T12617] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1722'. [ 341.006690][T12663] pimreg: tun_chr_ioctl cmd 1074025677 [ 341.045160][T12663] pimreg: linktype set to 823 [ 341.195046][T12671] netlink: 'syz.4.1736': attribute type 3 has an invalid length. [ 342.525088][T12722] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 342.775956][T12732] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 342.786998][T12732] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 342.915803][T12722] bond0: (slave gretap1): making interface the new active one [ 342.954405][T12722] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 343.139775][T12742] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 343.641084][T12740] macvlan5: entered promiscuous mode [ 343.646438][T12740] macvlan5: entered allmulticast mode [ 343.722596][T12742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.873460][T12749] bond4: (slave gretap2): making interface the new active one [ 343.882403][T12749] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 343.941802][T12755] pimreg: tun_chr_ioctl cmd 1074025677 [ 343.948975][T12755] pimreg: linktype set to 823 [ 344.258206][T12770] IPVS: nq: FWM 3 0x00000003 - no destination available [ 344.335421][ T30] audit: type=1804 audit(1778294367.963:7): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1764" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=1911 res=1 errno=0 [ 344.447230][ T30] audit: type=1800 audit(1778294367.963:8): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1764" name="cgroup.controllers" dev="tmpfs" ino=1911 res=0 errno=0 [ 344.892294][T12794] __nla_validate_parse: 8 callbacks suppressed [ 344.892313][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 345.047067][T12796] openvswitch: netlink: Flow key attr not present in new flow. [ 345.298265][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.305717][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.549945][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.560564][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.896015][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.916561][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.959518][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.004802][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.786118][ T30] audit: type=1804 audit(1778294370.413:9): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1785" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1761 res=1 errno=0 [ 346.940503][T12861] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 346.949391][ T30] audit: type=1800 audit(1778294370.413:10): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1785" name="cgroup.controllers" dev="tmpfs" ino=1761 res=0 errno=0 [ 347.089642][T12868] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.100818][T12868] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 347.138980][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 347.291460][T12878] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 1, id = 0 [ 347.320773][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 347.347666][T12869] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1787'. [ 347.352536][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'. [ 347.416692][T12871] wg1 speed is unknown, defaulting to 1000 [ 348.252731][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 348.346412][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 348.909018][T12881] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.963713][T12881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.203832][T12881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.214226][T12881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.228277][T12881] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 349.841232][ T5635] block nbd0: Receive control failed (result -32) [ 349.957001][ T5635] block nbd1: Receive control failed (result -32) [ 350.685426][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'. [ 351.240887][T13005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1816'. [ 351.514004][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 351.558131][T13016] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 351.644000][T13021] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 351.754473][T13029] pimreg: tun_chr_ioctl cmd 1074025677 [ 351.760470][T13029] pimreg: linktype set to 823 [ 351.869265][T13031] macsec0: entered promiscuous mode [ 352.453473][T13043] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1830'. [ 352.487719][T13043] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1830'. [ 352.688989][ T10] hsr0: entered promiscuous mode [ 352.705065][T13055] netlink: 'syz.4.1833': attribute type 9 has an invalid length. [ 352.733429][T13055] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1833'. [ 352.796300][T13058] wg1 speed is unknown, defaulting to 1000 [ 353.002684][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 353.034963][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 353.298918][T13068] ipt_ECN: cannot use operation on non-tcp rule [ 353.453666][T13078] netlink: 'syz.2.1837': attribute type 2 has an invalid length. [ 354.474644][T13086] syzkaller0: entered promiscuous mode [ 354.480178][T13086] syzkaller0: entered allmulticast mode [ 354.637301][T13111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1845'. [ 354.687599][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 357.027425][T13115] wg1 speed is unknown, defaulting to 1000 [ 357.496323][T13146] __nla_validate_parse: 1 callbacks suppressed [ 357.496341][T13146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1854'. [ 357.535194][T13144] tipc: New replicast peer: 255.255.255.255 [ 357.544656][T13144] tipc: Enabled bearer , priority 5 [ 357.632546][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 357.799245][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 358.536519][T13158] .70·X: left allmulticast mode [ 358.546054][T13158] macvtap0: left allmulticast mode [ 358.616197][T13158] ip6tnl1: left allmulticast mode [ 358.627418][T13158] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 358.636097][T13158] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 358.651277][T13158] ip6gre1: left promiscuous mode [ 358.667290][T13158] ip6gre1: left allmulticast mode [ 358.717593][T13158] macvlan4: left allmulticast mode [ 358.763464][T13158] vlan3: left promiscuous mode [ 358.770269][T13158] bond3: left promiscuous mode [ 358.775234][T13158] vlan3: left allmulticast mode [ 358.793645][T13158] bond3: left allmulticast mode [ 358.801002][T13158] geneve2: left promiscuous mode [ 358.805979][T13158] geneve2: left allmulticast mode [ 358.813037][T13158] ip6erspan0: left allmulticast mode [ 358.857143][T13158] macvlan5: left promiscuous mode [ 358.862254][T13158] macvlan5: left allmulticast mode [ 358.882438][T13161] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 358.923583][ T9814] wg1 speed is unknown, defaulting to 1000 [ 358.937697][ T9814] syz0: Port: 1 Link DOWN [ 358.962796][ T3268] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 358.995533][ T3268] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.049900][ T3268] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.058405][ T3268] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.306328][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 359.405140][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 359.416834][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 359.635819][T13194] wg1 speed is unknown, defaulting to 1000 [ 359.732167][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 360.414356][T13212] wg1 speed is unknown, defaulting to 1000 [ 360.818077][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 360.832335][T13230] IPVS: set_ctl: invalid protocol: 95 172.20.20.48:20003 [ 361.304037][T13255] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 361.837689][T13264] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 361.868826][T13264] bond6: entered promiscuous mode [ 361.874420][T13264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.898779][T13266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.922638][T13266] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 361.932968][T13266] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 361.947094][T13266] bond6: (slave ip6gre3): making interface the new active one [ 361.954600][T13266] ip6gre3: entered promiscuous mode [ 361.961493][T13266] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 362.193198][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 362.452218][T13281] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 362.586198][T13281] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 363.493473][T13312] ip6gretap1: entered promiscuous mode [ 363.588467][T13317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 363.597555][T13317] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1893'. [ 364.382965][T13332] wg1 speed is unknown, defaulting to 1000 [ 365.231581][T13355] bond6: option min_links: invalid value (18446744073709551612) [ 365.239361][T13355] bond6: option min_links: allowed values 0 - 2147483647 [ 365.278713][T13355] bond6 (unregistering): Released all slaves [ 365.492751][T13362] wg1 speed is unknown, defaulting to 1000 [ 365.786735][T13381] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 365.827619][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 366.126852][T13385] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1916'. [ 366.171325][T13386] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1916'. [ 366.286273][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 367.327212][T13413] syzkaller0: entered promiscuous mode [ 367.332756][T13413] syzkaller0: entered allmulticast mode [ 367.339154][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 367.579695][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 367.588711][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 369.756712][T13437] pimreg: tun_chr_ioctl cmd 1074025677 [ 369.762349][T13437] pimreg: linktype set to 823 [ 369.881656][T13440] netlink: 'syz.2.1933': attribute type 11 has an invalid length. [ 370.324469][T13449] wg1 speed is unknown, defaulting to 1000 [ 370.399275][T13447] wg1 speed is unknown, defaulting to 1000 [ 371.605506][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 371.998006][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 372.319246][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 372.500941][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 372.514821][T13504] veth0_macvtap: left promiscuous mode [ 373.204062][T13531] syzkaller0: entered promiscuous mode [ 373.209601][T13531] syzkaller0: entered allmulticast mode [ 373.221194][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1956'. [ 373.230192][T13531] openvswitch: netlink: Flow key attr not present in new flow. [ 374.328869][T13573] netlink: 'syz.0.1969': attribute type 39 has an invalid length. [ 374.844713][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 374.889230][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 375.188717][T13603] syzkaller0: entered promiscuous mode [ 375.194254][T13603] syzkaller0: entered allmulticast mode [ 375.373824][T13622] FAULT_INJECTION: forcing a failure. [ 375.373824][T13622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.387017][T13622] CPU: 1 UID: 0 PID: 13622 Comm: syz.4.1986 Not tainted syzkaller #0 PREEMPT(full) [ 375.387043][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.387060][T13622] Call Trace: [ 375.387071][T13622] [ 375.387079][T13622] dump_stack_lvl+0xe8/0x150 [ 375.387109][T13622] should_fail_ex+0x412/0x560 [ 375.387142][T13622] _copy_from_user+0x2d/0xb0 [ 375.387175][T13622] ___sys_sendmsg+0x1c6/0x360 [ 375.387218][T13622] ? __lock_acquire+0x6b5/0x2cf0 [ 375.387244][T13622] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.387310][T13622] ? __fget_files+0x2a/0x420 [ 375.387334][T13622] ? __fget_files+0x3a0/0x420 [ 375.387374][T13622] __x64_sys_sendmsg+0x1bd/0x2a0 [ 375.387408][T13622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.387447][T13622] ? __pfx_ksys_write+0x10/0x10 [ 375.387485][T13622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.387506][T13622] do_syscall_64+0x15f/0xf80 [ 375.387524][T13622] ? trace_irq_disable+0x3b/0x140 [ 375.387554][T13622] ? clear_bhb_loop+0x40/0x90 [ 375.387578][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.387597][T13622] RIP: 0033:0x7f1630d9cdd9 [ 375.387616][T13622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.387633][T13622] RSP: 002b:00007f1631ca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.387654][T13622] RAX: ffffffffffffffda RBX: 00007f1631015fa0 RCX: 00007f1630d9cdd9 [ 375.387669][T13622] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 375.387681][T13622] RBP: 00007f1631ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 375.387693][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.387704][T13622] R13: 00007f1631016038 R14: 00007f1631015fa0 R15: 00007ffffa75a828 [ 375.387735][T13622] [ 375.938192][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1989'. [ 375.963631][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 376.079249][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 378.117224][T13644] erspan0: left promiscuous mode [ 378.301743][T13662] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 378.333311][T13662] ip6gre1: entered allmulticast mode [ 378.348440][T13662] team0: Device ip6gre1 is of different type [ 378.648846][T13680] __nla_validate_parse: 2 callbacks suppressed [ 378.648890][T13680] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2000'. [ 378.677005][T13680] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2000'. [ 378.680556][T13668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.738136][T13682] batadv_slave_1: entered promiscuous mode [ 378.748896][T13681] batadv_slave_1: left promiscuous mode [ 378.909666][T13688] netlink: 'syz.1.2002': attribute type 6 has an invalid length. [ 379.108289][T13695] pimreg: tun_chr_ioctl cmd 1074025677 [ 379.113935][T13695] pimreg: linktype set to 823 [ 379.335750][T13668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.667947][T13668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.987657][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 380.038410][T13668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.537515][ T3268] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.576400][ T3268] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.597187][ T3268] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.635210][ T3268] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.829849][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'. [ 381.139434][T13749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2020'. [ 381.148359][T13749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2020'. [ 381.199981][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'. [ 381.450158][T13759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'. [ 381.501539][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'. [ 381.537174][T13767] netlink: 'syz.1.2024': attribute type 7 has an invalid length. [ 381.544974][T13767] netlink: 'syz.1.2024': attribute type 8 has an invalid length. [ 381.552736][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 381.773295][T13779] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 381.862486][T13779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.874536][T13781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.927822][T13779] bond4: (slave ip6gretap1): making interface the new active one [ 381.974407][T13779] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 382.933057][T13814] wg1 speed is unknown, defaulting to 1000 [ 383.183670][T13836] pimreg: tun_chr_ioctl cmd 1074025677 [ 383.193868][T13836] pimreg: linktype set to 823 [ 383.690553][T13847] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 383.703731][T13845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.844046][T13847] bond9: entered promiscuous mode [ 383.849604][T13847] 8021q: adding VLAN 0 to HW filter on device bond9 [ 383.886633][T13851] vlan2: entered allmulticast mode [ 383.891808][T13851] bond9: entered allmulticast mode [ 383.963069][T13847] bond9: (slave bridge6): making interface the new active one [ 383.970592][T13847] bridge6: entered promiscuous mode [ 383.992642][T13847] bridge6: entered allmulticast mode [ 383.999830][T13847] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 384.049859][T13856] wg1 speed is unknown, defaulting to 1000 [ 384.438418][T13862] __nla_validate_parse: 2 callbacks suppressed [ 384.438458][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 384.498890][T13855] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 384.506683][T13855] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2048'. [ 384.735024][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'. [ 385.325399][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 385.555819][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 385.713025][T13888] FAULT_INJECTION: forcing a failure. [ 385.713025][T13888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.726146][T13888] CPU: 1 UID: 0 PID: 13888 Comm: syz.1.2060 Not tainted syzkaller #0 PREEMPT(full) [ 385.726173][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.726185][T13888] Call Trace: [ 385.726193][T13888] [ 385.726201][T13888] dump_stack_lvl+0xe8/0x150 [ 385.726230][T13888] should_fail_ex+0x412/0x560 [ 385.726262][T13888] _copy_to_user+0x31/0xb0 [ 385.726294][T13888] simple_read_from_buffer+0xe1/0x170 [ 385.726324][T13888] proc_fail_nth_read+0x1bb/0x230 [ 385.726355][T13888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.726384][T13888] ? rw_verify_area+0x2a6/0x4d0 [ 385.726418][T13888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.726446][T13888] vfs_read+0x20c/0xa70 [ 385.726479][T13888] ? __pfx___mutex_lock+0x10/0x10 [ 385.726501][T13888] ? __pfx_vfs_read+0x10/0x10 [ 385.726535][T13888] ? __fget_files+0x2a/0x420 [ 385.726564][T13888] ? __fget_files+0x3a0/0x420 [ 385.726594][T13888] ? __fget_files+0x2a/0x420 [ 385.726627][T13888] ksys_read+0x150/0x270 [ 385.726658][T13888] ? __pfx_ksys_read+0x10/0x10 [ 385.726695][T13888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.726717][T13888] do_syscall_64+0x15f/0xf80 [ 385.726735][T13888] ? trace_irq_disable+0x3b/0x140 [ 385.726765][T13888] ? clear_bhb_loop+0x40/0x90 [ 385.726789][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.726809][T13888] RIP: 0033:0x7f307995d60e [ 385.726828][T13888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.726846][T13888] RSP: 002b:00007f307a922fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.726866][T13888] RAX: ffffffffffffffda RBX: 00007f307a9236c0 RCX: 00007f307995d60e [ 385.726880][T13888] RDX: 000000000000000f RSI: 00007f307a9230a0 RDI: 0000000000000006 [ 385.726892][T13888] RBP: 00007f307a923090 R08: 0000000000000000 R09: 0000000000000000 [ 385.726904][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.726915][T13888] R13: 00007f3079c16038 R14: 00007f3079c15fa0 R15: 00007ffd50e86ba8 [ 385.726948][T13888] [ 386.044105][T13904] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 386.276271][T13905] pimreg: tun_chr_ioctl cmd 1074025677 [ 386.283810][T13905] pimreg: linktype set to 823 [ 386.370378][T13912] bond4: entered promiscuous mode [ 386.894169][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 386.914485][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 386.929070][T13933] xfrm1: entered promiscuous mode [ 386.934148][T13933] xfrm1: entered allmulticast mode [ 386.940111][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 387.354357][T13949] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 387.478384][T13957] pimreg: tun_chr_ioctl cmd 1074025677 [ 387.499646][T13957] pimreg: linktype set to 823 [ 387.926268][T13975] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.947787][T13972] tipc: Enabled bearer , priority 0 [ 388.031437][T13972] syzkaller0: entered promiscuous mode [ 388.036965][T13972] syzkaller0: entered allmulticast mode [ 388.043232][T13972] tipc: Resetting bearer [ 388.054341][T13971] tipc: Resetting bearer [ 388.328947][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 388.410343][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 390.250670][T13971] tipc: Disabling bearer [ 390.374167][T13993] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 390.430063][T13993] bond5 (unregistering): Released all slaves [ 390.447480][T13999] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 390.520156][ T9815] tipc: Node number set to 2121606010 [ 390.543988][T13982] wg1 speed is unknown, defaulting to 1000 [ 391.411599][T14037] sctp: [Deprecated]: syz.1.2103 (pid 14037) Use of int in maxseg socket option. [ 391.411599][T14037] Use struct sctp_assoc_value instead [ 391.438984][T14037] netlink: 'syz.1.2103': attribute type 2 has an invalid length. [ 391.458986][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 391.526485][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 391.627133][T14042] vlan0: entered promiscuous mode [ 392.041532][T14050] sctp: [Deprecated]: syz.1.2109 (pid 14050) Use of int in max_burst socket option deprecated. [ 392.041532][T14050] Use struct sctp_assoc_value instead [ 392.207035][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 392.231258][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 392.352798][T14060] bond7: entered promiscuous mode [ 392.358895][T14060] bond7: entered allmulticast mode [ 392.365806][T14060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.715326][T14085] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2122'. [ 392.756204][ T30] audit: type=1804 audit(1778294416.383:11): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2120" name="/newroot/450/cgroup.controllers" dev="tmpfs" ino=2331 res=1 errno=0 [ 392.787914][ T30] audit: type=1800 audit(1778294416.383:12): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2120" name="cgroup.controllers" dev="tmpfs" ino=2331 res=0 errno=0 [ 392.999858][T14094] syzkaller0: entered promiscuous mode [ 393.005390][T14094] syzkaller0: entered allmulticast mode [ 393.027144][T14094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2124'. [ 393.057613][T14094] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2124'. [ 393.192702][T14101] xt_bpf: check failed: parse error [ 393.346928][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 393.748205][T14133] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 393.755712][T14133] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2134'. [ 393.807238][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 393.907600][T14138] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 394.278404][T14155] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 394.515803][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2144'. [ 394.622382][T14168] netlink: 'syz.4.2140': attribute type 49 has an invalid length. [ 394.882668][T14176] tipc: Enabling of bearer rejected, failed to enable media [ 394.891074][T14176] netlink: 'syz.1.2146': attribute type 4 has an invalid length. [ 395.138489][T14186] netlink: 'syz.1.2147': attribute type 30 has an invalid length. [ 395.367045][T14200] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 395.456444][T14206] sctp: [Deprecated]: syz.2.2154 (pid 14206) Use of int in max_burst socket option. [ 395.456444][T14206] Use struct sctp_assoc_value instead [ 395.708178][T14218] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 395.715962][T14218] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 395.970552][T14231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.690663][T14248] ipt_ECN: cannot use operation on non-tcp rule [ 397.362204][T14261] netlink: 'syz.0.2171': attribute type 2 has an invalid length. [ 397.369993][T14261] __nla_validate_parse: 5 callbacks suppressed [ 397.370008][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 397.473507][T14261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.480768][T14261] IPv6: NLM_F_CREATE should be set when creating new route [ 397.561208][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2171'. [ 399.211664][T14305] netlink: 'syz.0.2183': attribute type 3 has an invalid length. [ 399.376970][T14315] netem: change failed [ 399.659116][T14328] netlink: 'syz.3.2189': attribute type 13 has an invalid length. [ 399.667018][T14328] netlink: 'syz.3.2189': attribute type 17 has an invalid length. [ 400.378395][T14328] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.415945][T14328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.718667][T14328] veth1_to_batadv: left allmulticast mode [ 400.825434][T14328] veth1_vlan: left promiscuous mode [ 400.832114][T14328] veth0_vlan: left promiscuous mode [ 400.838353][T14328] veth0_vlan: entered promiscuous mode [ 400.849166][T14328] veth1_vlan: entered promiscuous mode [ 400.858747][T14353] sctp: [Deprecated]: syz.0.2193 (pid 14353) Use of int in max_burst socket option. [ 400.858747][T14353] Use struct sctp_assoc_value instead [ 400.889002][T14328] tipc: Resetting bearer [ 400.894808][T14328] tipc: Resetting bearer [ 400.916548][T14328] 8021q: adding VLAN 0 to HW filter on device eth0 [ 400.939985][T14328] 8021q: adding VLAN 0 to HW filter on device eth1 [ 400.953711][T14355] Unsupported ieee802154 address type: 0 [ 400.962162][T14356] Unsupported ieee802154 address type: 0 [ 400.969851][T14355] sctp: [Deprecated]: syz.4.2198 (pid 14355) Use of int in max_burst socket option. [ 400.969851][T14355] Use struct sctp_assoc_value instead [ 400.976165][T14328] 8021q: adding VLAN 0 to HW filter on device eth2 [ 401.011146][T14356] sctp: [Deprecated]: syz.4.2198 (pid 14356) Use of int in max_burst socket option. [ 401.011146][T14356] Use struct sctp_assoc_value instead [ 401.030067][T14328] 8021q: adding VLAN 0 to HW filter on device eth3 [ 401.113762][T14358] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20001 [ 401.162352][T14328] bond1: left promiscuous mode [ 401.170030][T14328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.178506][T14328] bridge1: left allmulticast mode [ 401.185907][T14328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.193875][T14328] vlan2: left allmulticast mode [ 401.198754][T14328] veth0_to_bond: left allmulticast mode [ 401.206690][T14328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.230922][T14328] bond4: left promiscuous mode [ 401.236099][T14328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.244627][T14328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.252697][T14328] geneve2: left promiscuous mode [ 401.257655][T14328] geneve2: left allmulticast mode [ 401.274146][T14328] hsr1: left promiscuous mode [ 401.282188][T14328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.296462][T14328] bond6: left promiscuous mode [ 401.301277][T14328] ip6gre3: left promiscuous mode [ 401.306983][T14328] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.320341][T14328] bond7: left promiscuous mode [ 401.325156][T14328] bond7: left allmulticast mode [ 401.346610][T14328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 401.432518][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.491747][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.509514][ T5969] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.539668][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.598864][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.684857][ T13] bond2: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 401.693940][ T13] bond2: (slave vlan2): making interface the new active one [ 401.708429][ T13] bond2: active interface up! [ 401.714606][T14363] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2200'. [ 401.769029][T14363] tc_dump_action: action bad kind [ 401.920433][T14375] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 401.967656][T14375] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 401.978577][T14375] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 402.085918][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 402.096344][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2204'. [ 402.968970][T14413] tipc: Enabled bearer , priority 0 [ 402.983512][T14420] pimreg: tun_chr_ioctl cmd 1074025677 [ 402.989258][T14420] pimreg: linktype set to 823 [ 403.041554][T14413] syzkaller0: entered promiscuous mode [ 403.077141][T14413] syzkaller0: entered allmulticast mode [ 403.203200][T14413] tipc: Resetting bearer [ 403.215891][T14412] tipc: Resetting bearer [ 403.272521][T14412] tipc: Disabling bearer [ 403.288464][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 404.061946][T14464] netlink: 'syz.1.2227': attribute type 21 has an invalid length. [ 404.075812][T14465] netlink: 'syz.1.2227': attribute type 21 has an invalid length. [ 404.088387][T14464] netlink: 'syz.1.2227': attribute type 6 has an invalid length. [ 404.097454][T14464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2227'. [ 404.108118][T14465] netlink: 'syz.1.2227': attribute type 6 has an invalid length. [ 404.120321][T14465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2227'. [ 404.223634][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 404.656240][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 405.326070][T14496] tipc: Enabling of bearer rejected, already enabled [ 405.336109][T14496] tipc: Resetting bearer [ 405.854459][T14505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 405.866513][T14505] batman_adv: batadv0: Adding interface: ip6gretap2 [ 405.873141][T14505] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.917220][T14505] batman_adv: batadv0: Interface activated: ip6gretap2 [ 406.021907][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.143163][T14508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 406.650268][T14517] netlink: 'syz.4.2244': attribute type 3 has an invalid length. [ 406.658057][T14517] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 406.665793][T14517] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2244'. [ 406.674848][T14517] NCSI netlink: No device for ifindex 0 [ 407.078690][T14527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2248'. [ 407.294929][T14533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2252'. [ 407.341924][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 407.667190][T14542] netlink: 'syz.2.2255': attribute type 3 has an invalid length. [ 408.088291][T14553] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 408.570404][T14583] pimreg: tun_chr_ioctl cmd 1074025677 [ 408.619698][T14583] pimreg: linktype set to 823 [ 408.830494][T14589] wg1 speed is unknown, defaulting to 1000 [ 409.110127][T14597] netlink: 'syz.0.2269': attribute type 16 has an invalid length. [ 409.117998][T14597] netlink: 'syz.0.2269': attribute type 17 has an invalid length. [ 409.302808][T14605] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 409.342440][T14602] __nla_validate_parse: 1 callbacks suppressed [ 409.342459][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 409.385835][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 409.541090][T14609] bond5: (slave veth7): Enslaving as an active interface with a down link [ 409.574703][T14605] bond5: (slave veth9): Enslaving as an active interface with a down link [ 409.732412][T14605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2272'. [ 409.788776][T14605] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2272'. [ 409.818008][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.245651][T14637] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2283'. [ 410.531222][T14634] netlink: 'syz.4.2281': attribute type 13 has an invalid length. [ 410.609645][T14649] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 410.943602][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 410.952998][T14665] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2290'. [ 411.105438][T14665] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.115233][T14665] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.124987][T14665] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 411.293834][T14677] Unsupported ieee802154 address type: 0 [ 411.422221][T14682] bond6: entered promiscuous mode [ 411.427459][T14682] bond6: entered allmulticast mode [ 411.433088][T14682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.578042][T14665] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.607547][T14665] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.617352][T14665] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 411.755670][T14690] netlink: 'syz.4.2297': attribute type 13 has an invalid length. [ 411.764812][T14690] netlink: 'syz.4.2297': attribute type 17 has an invalid length. [ 411.899979][T14690] bridge0: left promiscuous mode [ 411.906536][T14690] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.918513][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.106958][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 412.276998][T14690] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.295070][T14690] veth1_macvtap: left promiscuous mode [ 412.304205][T14690] veth0_macvtap: left promiscuous mode [ 412.319433][T14690] veth0_macvtap: entered promiscuous mode [ 412.388328][T14690] veth1_macvtap: entered promiscuous mode [ 412.402622][T14690] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 412.607568][ T8781] wg1 speed is unknown, defaulting to 1000 [ 412.620794][ T8781] syz0: Port: 1 Link ACTIVE [ 412.627750][T14702] wg1 speed is unknown, defaulting to 1000 [ 412.759524][ T5969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.809721][T14712] netlink: zone id is out of range [ 412.818268][T14712] netlink: zone id is out of range [ 412.828734][T14712] netlink: zone id is out of range [ 412.833882][T14712] netlink: zone id is out of range [ 412.839018][T14712] netlink: zone id is out of range [ 412.844147][T14712] netlink: zone id is out of range [ 412.849279][T14712] netlink: zone id is out of range [ 412.854412][T14712] netlink: zone id is out of range [ 412.859539][T14712] netlink: zone id is out of range [ 412.868237][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 412.882725][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'. [ 412.958521][T14665] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.968334][T14665] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.978106][T14665] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.022857][ T5969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.032553][ T5969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.072750][T14715] lo: left promiscuous mode [ 413.100846][T14715] tunl0: left promiscuous mode [ 413.111483][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 413.121024][T14715] gre0: left promiscuous mode [ 413.129797][T14715] gretap0: left promiscuous mode [ 413.136124][T14715] ip_vti0: left promiscuous mode [ 413.141878][T14715] ip6_vti0: left promiscuous mode [ 413.147555][T14715] sit0: left promiscuous mode [ 413.152253][T14715] sit0: left allmulticast mode [ 413.184784][T14715] ip6tnl0: left promiscuous mode [ 413.189881][T14715] ip6tnl0: left allmulticast mode [ 413.196480][T14715] ip6gre0: left promiscuous mode [ 413.201454][T14715] ip6gre0: left allmulticast mode [ 413.208409][T14715] syz_tun: left promiscuous mode [ 413.213398][T14715] syz_tun: left allmulticast mode [ 413.220195][T14715] ip6gretap0: left promiscuous mode [ 413.225829][T14715] ip6gretap0: left allmulticast mode [ 413.233539][T14715] bridge0: left promiscuous mode [ 413.238951][T14715] bridge0: left allmulticast mode [ 413.245019][T14715] vcan0: left promiscuous mode [ 413.249821][T14715] vcan0: left allmulticast mode [ 413.255571][T14715] bond0: left promiscuous mode [ 413.260568][T14715] bond0: left allmulticast mode [ 413.266549][T14715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.293242][T14715] team0: left promiscuous mode [ 413.298381][T14715] team0: left allmulticast mode [ 413.305530][T14715] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.315220][T14715] nlmon0: left promiscuous mode [ 413.320102][T14715] nlmon0: left allmulticast mode [ 413.325839][T14715] batadv0: left promiscuous mode [ 413.330838][T14715] batadv0: left allmulticast mode [ 413.337394][T14715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.344928][T14715] vxcan0: left promiscuous mode [ 413.349792][T14715] vxcan0: left allmulticast mode [ 413.356000][T14715] vxcan1: left promiscuous mode [ 413.360878][T14715] vxcan1: left allmulticast mode [ 413.366565][T14715] veth0: left promiscuous mode [ 413.371775][T14715] veth0: left allmulticast mode [ 413.377825][T14715] veth1: left promiscuous mode [ 413.382640][T14715] veth1: left allmulticast mode [ 413.410437][T14715] wg0: left promiscuous mode [ 413.415163][T14715] wg0: left allmulticast mode [ 413.421953][T14715] wg1: left promiscuous mode [ 413.427375][T14715] wg1: left allmulticast mode [ 413.439250][T14715] wg2: left promiscuous mode [ 413.450712][T14715] wg2: left allmulticast mode [ 413.461833][T14715] veth0_to_bridge: left promiscuous mode [ 413.468282][T14715] veth0_to_bridge: left allmulticast mode [ 413.481848][T14715] veth1_to_bridge: left promiscuous mode [ 413.488699][T14715] veth1_to_bridge: left allmulticast mode [ 413.502918][T14715] veth0_to_bond: left promiscuous mode [ 413.510106][T14715] veth0_to_bond: left allmulticast mode [ 413.520675][T14715] bond_slave_0: left promiscuous mode [ 413.527158][T14715] bond_slave_0: left allmulticast mode [ 413.534531][T14715] veth1_to_bond: left promiscuous mode [ 413.541252][T14715] veth1_to_bond: left allmulticast mode [ 413.550653][T14715] bond_slave_1: left promiscuous mode [ 413.556629][T14715] bond_slave_1: left allmulticast mode [ 413.566424][T14715] veth0_to_team: left promiscuous mode [ 413.574351][T14715] veth0_to_team: left allmulticast mode [ 413.584936][T14715] team_slave_0: left promiscuous mode [ 413.591751][T14715] team_slave_0: left allmulticast mode [ 413.601384][T14715] veth1_to_team: left promiscuous mode [ 413.607823][T14715] veth1_to_team: left allmulticast mode [ 413.617637][T14715] team_slave_1: left promiscuous mode [ 413.623959][T14715] team_slave_1: left allmulticast mode [ 413.634428][T14715] veth0_to_batadv: left promiscuous mode [ 413.641616][T14715] veth0_to_batadv: left allmulticast mode [ 413.648810][T14715] batadv_slave_0: left promiscuous mode [ 413.654385][T14715] batadv_slave_0: left allmulticast mode [ 413.660820][T14715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.668334][T14715] veth1_to_batadv: left promiscuous mode [ 413.673984][T14715] veth1_to_batadv: left allmulticast mode [ 413.680694][T14715] batadv_slave_1: left promiscuous mode [ 413.686268][T14715] batadv_slave_1: left allmulticast mode [ 413.692756][T14715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.700340][T14715] xfrm0: left promiscuous mode [ 413.705146][T14715] xfrm0: left allmulticast mode [ 413.711276][T14715] veth0_to_hsr: left promiscuous mode [ 413.716689][T14715] veth0_to_hsr: left allmulticast mode [ 413.723518][T14715] veth1_to_hsr: left promiscuous mode [ 413.728894][T14715] veth1_to_hsr: left allmulticast mode [ 413.735893][T14715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.768581][T14715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.779997][T14715] hsr0: left promiscuous mode [ 413.784898][T14715] hsr0: left allmulticast mode [ 413.789855][T14715] hsr_slave_0: left allmulticast mode [ 413.795247][T14715] hsr_slave_1: left allmulticast mode [ 413.801700][T14715] veth1_virt_wifi: left promiscuous mode [ 413.807351][T14715] veth1_virt_wifi: left allmulticast mode [ 413.814349][T14715] veth0_virt_wifi: left promiscuous mode [ 413.820093][T14715] veth0_virt_wifi: left allmulticast mode [ 413.826786][T14715] virt_wifi0: left promiscuous mode [ 413.831999][T14715] virt_wifi0: left allmulticast mode [ 413.838562][T14715] veth1_vlan: left promiscuous mode [ 413.845071][T14715] veth0_vlan: left promiscuous mode [ 413.851313][T14715] veth0_vlan: entered promiscuous mode [ 413.873689][T14715] veth1_vlan: entered promiscuous mode [ 413.885231][T14715] veth0_macvtap: left promiscuous mode [ 413.891925][T14715] veth0_macvtap: entered promiscuous mode [ 413.902556][T14715] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 413.910056][T14715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.918464][T14715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.926925][T14715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.935028][T14715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.947391][T14715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.955616][T14715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.967321][T14715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.998711][T14715] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 414.006985][T14715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.047122][T14715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.055408][T14715] veth0: entered promiscuous mode [ 414.060501][T14715] veth0: entered allmulticast mode [ 414.065828][T14715] macvtap1: left promiscuous mode [ 414.070972][T14715] macvtap1: left allmulticast mode [ 414.076080][T14715] veth0: left allmulticast mode [ 414.081755][T14715] bond6: left promiscuous mode [ 414.102562][T14715] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.109938][T14715] sit1: left promiscuous mode [ 414.116929][T14715] geneve2: left promiscuous mode [ 414.122986][T14715] gretap0: entered promiscuous mode [ 414.130390][T14715] bond7: left promiscuous mode [ 414.135510][T14715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.145847][T14715] 8021q: adding VLAN 0 to HW filter on device bond8 [ 414.158548][T14715] ip6gretap1: left promiscuous mode [ 414.165061][T14715] bond9: left promiscuous mode [ 414.169846][T14715] bridge6: left promiscuous mode [ 414.175870][T14715] vlan2: left allmulticast mode [ 414.180726][T14715] bond9: left allmulticast mode [ 414.185587][T14715] bridge6: left allmulticast mode [ 414.193085][T14715] xfrm1: left promiscuous mode [ 414.212900][T14715] xfrm1: left allmulticast mode [ 414.249001][ T5969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.259126][ T5969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.270439][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.279189][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.287965][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.350053][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.358192][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.389603][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.397710][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.625169][T14665] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.634976][T14665] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.665621][T14665] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 414.854154][ T136] bond8: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 414.863165][ T136] bond8: (slave veth3): making interface the new active one [ 414.901630][ T136] bond8: active interface up! [ 414.957629][ T5973] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.965865][ T5973] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 414.974538][ T5973] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.036436][ T5969] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.044670][ T5969] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.052932][ T5969] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.097366][ T5973] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.109979][ T5973] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.120155][ T5973] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.163257][ T136] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.200408][ T136] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.223718][ T136] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.454690][T14773] syzkaller1: entered promiscuous mode [ 415.460208][T14773] syzkaller1: entered allmulticast mode [ 415.555363][T14772] wg1 speed is unknown, defaulting to 1000 [ 415.669529][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 416.627743][T14788] __nla_validate_parse: 1 callbacks suppressed [ 416.627763][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 416.642842][T14788] bond0: option min_links: invalid value (18446744072809121575) [ 416.710580][T14788] bond0: option min_links: allowed values 0 - 2147483647 [ 416.976550][T14802] IPVS: length: 204 != 8 [ 417.053832][T14802] hmó3)óÿ: entered promiscuous mode [ 417.191870][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 417.261308][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 417.387886][T14814] wg1 speed is unknown, defaulting to 1000 [ 419.851709][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2340'. [ 420.175333][T14866] netlink: 'syz.2.2341': attribute type 11 has an invalid length. [ 420.410860][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 421.301408][T14884] net_ratelimit: 341 callbacks suppressed [ 421.301428][T14884] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 421.467058][T14890] syzkaller1: tun_chr_ioctl cmd 35108 [ 421.533855][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'. [ 421.813762][T14898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2351'. [ 422.153800][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 422.187477][T14915] Bluetooth: MGMT ver 1.23 [ 422.230011][T14915] ipt_ECN: cannot use operation on non-tcp rule [ 422.317575][T14915] syzkaller1: entered promiscuous mode [ 422.336153][T14915] syzkaller1: entered allmulticast mode [ 422.458546][T14914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 422.468905][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 422.712980][T14919] netlink: 'syz.2.2359': attribute type 8 has an invalid length. [ 423.735585][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 423.792068][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 423.846795][T14943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.920270][T14949] 8021q: adding VLAN 0 to HW filter on device bond7 [ 423.929094][T14949] bond6: (slave bond7): Enslaving as an active interface with an up link [ 424.047719][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 424.198314][T14943] bond6 (unregistering): (slave bond7): Releasing backup interface [ 424.216165][T14943] bond6 (unregistering): Released all slaves [ 424.307106][T14947] wg1 speed is unknown, defaulting to 1000 [ 425.147435][T14992] tipc: Enabled bearer , priority 0 [ 425.171782][T14985] syzkaller0: entered promiscuous mode [ 425.177390][T14985] syzkaller0: entered allmulticast mode [ 425.184554][T14996] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2382'. [ 425.194142][T14996] netlink: Conntrack attr has 3 unknown bytes [ 425.290815][T14985] tipc: Resetting bearer [ 425.364574][T14984] tipc: Resetting bearer [ 425.420711][T14984] tipc: Disabling bearer [ 425.466305][T15000] x_tables: duplicate underflow at hook 3 [ 425.533028][T15003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2383'. [ 425.853862][T15019] gre0: entered promiscuous mode [ 425.858870][T15019] gre0: entered allmulticast mode [ 426.206237][T15032] netlink: 'syz.3.2393': attribute type 1 has an invalid length. [ 426.214103][T15032] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2393'. [ 426.247509][T15032] netlink: 'syz.3.2393': attribute type 1 has an invalid length. [ 426.492930][T15043] sock: sock_timestamping_bind_phc: sock not bind to device [ 426.575031][T15046] sch_fq: defrate 4294967293 ignored. [ 426.673091][T15054] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 426.681938][T15054] netlink: 'syz.4.2398': attribute type 2 has an invalid length. [ 426.708612][T15054] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 426.717910][T15054] netlink: 'syz.4.2398': attribute type 3 has an invalid length. [ 427.163580][T15073] netlink: 'syz.4.2403': attribute type 61 has an invalid length. [ 427.328796][T15079] __nla_validate_parse: 3 callbacks suppressed [ 427.328815][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 427.446642][T15075] syzkaller1: tun_chr_ioctl cmd 35108 [ 427.691523][T15088] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2408'. [ 427.856297][T15094] wg1 speed is unknown, defaulting to 1000 [ 428.394477][T15107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2415'. [ 428.421853][T15108] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 428.513595][T15108] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 428.524495][T15108] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 428.599390][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2416'. [ 428.650364][T15112] bond6: (slave bridge39): Enslaving as an active interface with a down link [ 428.706607][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 428.746900][T15094] netlink: zone id is out of range [ 428.752060][T15094] netlink: zone id is out of range [ 428.757188][T15094] netlink: zone id is out of range [ 428.762315][T15094] netlink: zone id is out of range [ 428.767439][T15094] netlink: zone id is out of range [ 428.826539][T15094] netlink: zone id is out of range [ 428.831709][T15094] netlink: zone id is out of range [ 428.836841][T15094] netlink: zone id is out of range [ 428.841965][T15094] netlink: zone id is out of range [ 428.847086][T15094] netlink: zone id is out of range [ 428.878062][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 428.886974][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2410'. [ 429.475948][T15128] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 429.719437][T15139] netlink: 'syz.0.2423': attribute type 21 has an invalid length. [ 429.749776][T15139] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.762395][T15139] Bluetooth: MGMT ver 1.23 [ 429.842887][T15128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.885329][T15139] bond6: (slave ip6erspan0): making interface the new active one [ 429.896521][T15139] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 430.040755][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 430.780786][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 430.889750][T15170] 8021q: adding VLAN 0 to HW filter on device bond10 [ 430.923354][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 431.040843][T15170] 8021q: adding VLAN 0 to HW filter on device bond11 [ 431.049765][T15170] bond10: (slave bond11): Enslaving as an active interface with an up link [ 431.178431][T15182] bond10 (unregistering): (slave bond11): Releasing backup interface [ 431.206936][T15182] bond10 (unregistering): Released all slaves [ 431.260778][T15181] pimreg: tun_chr_ioctl cmd 1074025677 [ 431.266451][T15181] pimreg: linktype set to 823 [ 431.788038][T15210] pimreg: tun_chr_ioctl cmd 1074025677 [ 431.793656][T15210] pimreg: linktype set to 823 [ 431.938844][T15204] nbd: nbd64 already in use [ 432.224618][T13810] udevd[13810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 432.307124][T15222] validate_nla: 1 callbacks suppressed [ 432.307141][T15222] netlink: 'syz.0.2445': attribute type 8 has an invalid length. [ 432.657099][T15239] bond8: entered promiscuous mode [ 433.224602][T15261] x_tables: duplicate underflow at hook 1 [ 433.593489][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.613105][T15276] netlink: 'syz.1.2461': attribute type 8 has an invalid length. [ 435.108719][T15328] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 435.132287][T15328] __nla_validate_parse: 4 callbacks suppressed [ 435.132339][T15328] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2475'. [ 435.412293][T15335] net_ratelimit: 335 callbacks suppressed [ 435.412329][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.030136][T15358] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 437.169649][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 437.189986][T15370] netlink: 'syz.2.2487': attribute type 12 has an invalid length. [ 437.962349][T15399] x_tables: duplicate underflow at hook 3 [ 437.971325][T15399] openvswitch: netlink: IP tunnel dst address not specified [ 438.151266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.162137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.340137][T15406] netlink: 'syz.0.2496': attribute type 9 has an invalid length. [ 438.417533][T15406] bridge9: entered allmulticast mode [ 438.815543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.824303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.832937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.879319][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 438.945943][T15426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2501'. [ 438.968050][T15422] pim6reg: entered allmulticast mode [ 439.048145][T15430] pimreg: tun_chr_ioctl cmd 1074025677 [ 439.065604][T15430] pimreg: linktype set to 823 [ 439.264128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.278079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.290875][T15433] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 439.298646][T15433] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2503'. [ 439.866420][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 439.942264][T15443] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2506'. [ 440.353871][T15453] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 440.378980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.785927][T15467] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2511'. [ 440.795032][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2511'. [ 441.190112][T15487] nbd: nbd0 already in use [ 441.198283][T15487] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 441.273349][T15487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 441.354463][T15487] block nbd0: NBD_DISCONNECT [ 441.374511][T15487] block nbd0: Send disconnect failed -32 [ 441.390635][T15487] block nbd0: shutting down sockets [ 441.434253][T15489] bond8: (slave geneve3): making interface the new active one [ 441.443600][T15489] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 441.453097][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 441.461473][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 441.498974][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 441.503356][ C1] net_ratelimit: 1 callbacks suppressed [ 441.503408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.515082][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 441.522425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.755227][T15502] netlink: 'syz.0.2521': attribute type 8 has an invalid length. [ 441.807400][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.815849][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.247791][T15521] nbd: must specify a size in bytes for the device [ 442.258709][T15525] nbd: must specify a size in bytes for the device [ 442.399916][T15527] tipc: Enabling of bearer rejected, failed to enable media [ 442.469855][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 442.574037][T15534] bond7: option broadcast_neighbor: invalid value (30) [ 442.582703][T15534] bond7 (unregistering): Released all slaves [ 442.614573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.624023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.141052][T15560] netlink: 181256 bytes leftover after parsing attributes in process `syz.3.2539'. [ 443.205849][T15564] netlink: 'syz.2.2540': attribute type 58 has an invalid length. [ 443.245993][T15566] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 443.385603][T15570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2542'. [ 443.441584][T15570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2542'. [ 443.729872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.747086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.961101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.032277][T15579] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.105415][T15585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2548'. [ 444.369795][T15594] wg1 speed is unknown, defaulting to 1000 [ 444.419098][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'. [ 444.439203][T15601] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2553'. [ 444.453849][T15598] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 444.548381][T15598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 444.582321][T15603] bond9: (slave geneve4): making interface the new active one [ 444.592429][T15603] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 445.366617][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2561'. [ 446.019616][T15655] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 446.236416][T15628] tipc: Resetting bearer [ 446.282089][T15628] tipc: Resetting bearer [ 446.390755][T15669] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2566'. [ 446.656292][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 446.754391][T15682] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2569'. [ 446.780208][T15674] wg1 speed is unknown, defaulting to 1000 [ 446.927701][ C1] net_ratelimit: 11 callbacks suppressed [ 446.927720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.943092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.951423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.960617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.202846][ T5288] veth1_macvtap: left promiscuous mode [ 447.332444][T15703] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 447.631126][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 447.710159][T15719] xt_HMARK: proto mask must be zero with L3 mode [ 447.966854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.977123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.005013][T15710] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 448.031304][T15710] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 448.208530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.478725][T15734] IPv6: sit4: Disabled Multicast RS [ 448.733863][T15734] bond7: option ad_user_port_key: invalid value (65535) [ 448.775291][T15734] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 449.007035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.015911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.026611][T15734] bond7 (unregistering): Released all slaves [ 449.282635][T15740] wg1 speed is unknown, defaulting to 1000 [ 450.311381][T15766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.320144][T15766] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.335192][T15766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.492510][T15766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.522133][T15766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.541837][T15766] 0·: left allmulticast mode [ 450.547332][T15766] hsr_slave_0: left allmulticast mode [ 450.553474][T15766] hsr_slave_1: left allmulticast mode [ 450.571881][T15766] .70·X: left allmulticast mode [ 450.596078][T15766] veth1_vlan: left promiscuous mode [ 450.609440][T15766] veth0_vlan: left promiscuous mode [ 450.620908][T15766] veth0_vlan: entered promiscuous mode [ 450.644302][T15766] tipc: Resetting bearer [ 450.657307][T15766] tipc: Resetting bearer [ 450.675423][T15766] veth1_vlan: entered promiscuous mode [ 450.720559][T15766] veth0_macvtap: left promiscuous mode [ 450.733388][T15766] veth0_macvtap: entered promiscuous mode [ 450.795065][T15766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.854942][T15766] bond2: left promiscuous mode [ 450.861950][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 450.864786][T15766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.875548][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 450.883985][T15766] bond3: left promiscuous mode [ 450.889952][T15803] netlink: 'syz.0.2597': attribute type 18 has an invalid length. [ 451.148618][T15766] pimreg0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.172799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.222764][T15766] macsec0: left promiscuous mode [ 451.288137][T15766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.350212][T15766] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.362668][T15766] 8021q: adding VLAN 0 to HW filter on device eth0 [ 451.373279][T15766] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.382749][T15766] 8021q: adding VLAN 0 to HW filter on device eth2 [ 451.393828][T15766] 8021q: adding VLAN 0 to HW filter on device eth3 [ 451.417911][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.425200][ T60] bridge0: port 2(bridge_slave_1) entered listening state [ 451.481674][ T150] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.491518][ T150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.520427][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2597'. [ 451.545878][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2597'. [ 451.636136][ T150] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.661831][ T150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.682591][ T150] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.714569][ T150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.730916][ T150] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.749269][ T150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.793992][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 451.959764][T15821] netlink: 'syz.0.2602': attribute type 2 has an invalid length. [ 451.972103][T15821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2602'. [ 452.055585][ T5969] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 452.097170][ T9809] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 452.104942][ T5969] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 452.349465][ T9809] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 452.500337][T15840] netlink: 'syz.4.2608': attribute type 3 has an invalid length. [ 452.741842][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 453.104012][ T9809] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 453.382990][T15852] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 453.528025][T15852] bond10: entered promiscuous mode [ 453.533361][T15852] bond10: entered allmulticast mode [ 453.539160][T15852] 8021q: adding VLAN 0 to HW filter on device bond10 [ 453.613285][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 453.653957][T15856] erspan2: entered allmulticast mode [ 453.674429][T15856] bond10: (slave erspan2): making interface the new active one [ 453.685683][T15856] erspan2: entered promiscuous mode [ 453.696081][T15856] bond10: (slave erspan2): Enslaving as an active interface with an up link [ 453.724656][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 454.348488][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2623'. [ 454.391655][T15881] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 454.406232][T15881] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.620749][T15906] FAULT_INJECTION: forcing a failure. [ 454.620749][T15906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.635977][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.3.2626 Not tainted syzkaller #0 PREEMPT(full) [ 454.636006][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.636019][T15906] Call Trace: [ 454.636027][T15906] [ 454.636036][T15906] dump_stack_lvl+0xe8/0x150 [ 454.636066][T15906] should_fail_ex+0x412/0x560 [ 454.636100][T15906] _copy_from_user+0x2d/0xb0 [ 454.636131][T15906] bpf_test_init+0xd8/0x150 [ 454.636175][T15906] bpf_prog_test_run_xdp+0x529/0x1160 [ 454.636222][T15906] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.636259][T15906] ? __fget_files+0x2a/0x420 [ 454.636291][T15906] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.636323][T15906] bpf_prog_test_run+0x2c7/0x340 [ 454.636348][T15906] __sys_bpf+0x643/0x950 [ 454.636382][T15906] ? __pfx___sys_bpf+0x10/0x10 [ 454.636430][T15906] ? ksys_write+0x242/0x270 [ 454.636463][T15906] ? __pfx_ksys_write+0x10/0x10 [ 454.636497][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.636520][T15906] __x64_sys_bpf+0x7c/0x90 [ 454.636550][T15906] do_syscall_64+0x15f/0xf80 [ 454.636573][T15906] ? clear_bhb_loop+0x40/0x90 [ 454.636599][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.636619][T15906] RIP: 0033:0x7f101539cdd9 [ 454.636639][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.636657][T15906] RSP: 002b:00007f101629c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.636678][T15906] RAX: ffffffffffffffda RBX: 00007f1015615fa0 RCX: 00007f101539cdd9 [ 454.636694][T15906] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 454.636707][T15906] RBP: 00007f101629c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.636720][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.636732][T15906] R13: 00007f1015616038 R14: 00007f1015615fa0 R15: 00007ffd549d1c58 [ 454.636765][T15906] [ 454.886690][T15908] netlink: 'syz.0.2628': attribute type 4 has an invalid length. [ 454.940016][T15908] netlink: 'syz.0.2628': attribute type 4 has an invalid length. [ 454.988483][T15916] wg1 speed is unknown, defaulting to 1000 [ 455.225910][T15924] netlink: 'syz.4.2634': attribute type 1 has an invalid length. [ 455.275973][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 455.356597][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 455.652748][T15942] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 455.752718][T15940] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 456.007184][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 456.235656][T15958] FAULT_INJECTION: forcing a failure. [ 456.235656][T15958] name failslab, interval 1, probability 0, space 0, times 0 [ 456.248281][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.1.2641 Not tainted syzkaller #0 PREEMPT(full) [ 456.248300][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.248309][T15958] Call Trace: [ 456.248315][T15958] [ 456.248322][T15958] dump_stack_lvl+0xe8/0x150 [ 456.248343][T15958] should_fail_ex+0x412/0x560 [ 456.248367][T15958] should_failslab+0xa8/0x100 [ 456.248391][T15958] __kvmalloc_node_noprof+0x178/0x8a0 [ 456.248415][T15958] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 456.248444][T15958] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 456.248470][T15958] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 456.248499][T15958] ? __pfx_autoremove_wake_function+0x10/0x10 [ 456.248524][T15958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 456.248562][T15958] ? 0xffffffffa02036e8 [ 456.248574][T15958] ? 0xffffffffa0203770 [ 456.248586][T15958] ? 0xffffffffa020704c [ 456.248627][T15958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 456.248648][T15958] ? _copy_from_user+0x94/0xb0 [ 456.248669][T15958] ? bpf_test_init+0x113/0x150 [ 456.248686][T15958] ? xdp_convert_md_to_buff+0x5b/0x330 [ 456.248709][T15958] bpf_prog_test_run_xdp+0x81c/0x1160 [ 456.248740][T15958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 456.248763][T15958] ? __fget_files+0x2a/0x420 [ 456.248784][T15958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 456.248805][T15958] bpf_prog_test_run+0x2c7/0x340 [ 456.248822][T15958] __sys_bpf+0x643/0x950 [ 456.248844][T15958] ? __pfx___sys_bpf+0x10/0x10 [ 456.248875][T15958] ? ksys_write+0x242/0x270 [ 456.248897][T15958] ? __pfx_ksys_write+0x10/0x10 [ 456.248919][T15958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.248934][T15958] __x64_sys_bpf+0x7c/0x90 [ 456.248954][T15958] do_syscall_64+0x15f/0xf80 [ 456.248967][T15958] ? trace_irq_disable+0x3b/0x140 [ 456.248988][T15958] ? clear_bhb_loop+0x40/0x90 [ 456.249005][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.249018][T15958] RIP: 0033:0x7f307999cdd9 [ 456.249052][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.249065][T15958] RSP: 002b:00007f307a923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.249081][T15958] RAX: ffffffffffffffda RBX: 00007f3079c15fa0 RCX: 00007f307999cdd9 [ 456.249092][T15958] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 456.249101][T15958] RBP: 00007f307a923090 R08: 0000000000000000 R09: 0000000000000000 [ 456.249110][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.249118][T15958] R13: 00007f3079c16038 R14: 00007f3079c15fa0 R15: 00007ffd50e86ba8 [ 456.249141][T15958] [ 456.752534][T15964] pim6reg1: entered allmulticast mode [ 457.149939][T15984] __nla_validate_parse: 32 callbacks suppressed [ 457.149959][T15984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2650'. [ 458.013704][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'. [ 458.074234][T16028] xt_nfacct: accounting object `syz0' does not exist [ 458.089364][T16020] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2660'. [ 458.419329][T16044] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 458.476159][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 458.485111][T16047] netlink: 'syz.0.2669': attribute type 2 has an invalid length. [ 458.492931][T16047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2669'. [ 458.833227][T16064] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 458.945613][T16071] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2678'. [ 459.010732][T16072] lo speed is unknown, defaulting to 1000 [ 459.019007][T16072] lo speed is unknown, defaulting to 1000 [ 459.025886][T16072] lo speed is unknown, defaulting to 1000 [ 459.068705][T16037] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 459.629444][T16072] infiniband sqz0: set active [ 459.634244][ T8781] lo speed is unknown, defaulting to 1000 [ 459.669427][T16072] infiniband sqz0: added lo [ 459.728837][T16072] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 459.743921][T16072] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 459.862840][T16072] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 459.896791][T16105] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2689'. [ 459.921523][T16105] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2689'. [ 459.933471][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 459.948787][T16072] RDS/IB: sqz0: added [ 459.953251][T16072] smc: adding ib device sqz0 with port count 1 [ 459.959801][T16072] smc: ib device sqz0 port 1 has no pnetid [ 459.966056][ T8781] lo speed is unknown, defaulting to 1000 [ 459.971827][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 459.981946][T16072] lo speed is unknown, defaulting to 1000 [ 459.996529][T16096] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 460.468296][T16072] lo speed is unknown, defaulting to 1000 [ 460.782007][T16072] lo speed is unknown, defaulting to 1000 [ 461.616988][T16072] lo speed is unknown, defaulting to 1000 [ 461.953559][T16190] netlink: 'syz.1.2704': attribute type 2 has an invalid length. [ 461.961340][T16190] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 462.359725][T16072] lo speed is unknown, defaulting to 1000 [ 462.456361][T16200] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.473676][T16213] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 462.507305][T16213] bond7: entered promiscuous mode [ 462.512481][T16213] bond7: entered allmulticast mode [ 462.518603][T16213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 462.560302][T16213] erspan1: entered allmulticast mode [ 462.610970][T16213] bond7: (slave erspan1): making interface the new active one [ 462.618521][T16213] erspan1: entered promiscuous mode [ 462.624741][T16213] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 463.129642][T16233] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 463.378793][T16246] __nla_validate_parse: 5 callbacks suppressed [ 463.378815][T16246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2718'. [ 464.149647][T16284] netlink: 'syz.0.2726': attribute type 1 has an invalid length. [ 464.210099][T16284] bond11: entered promiscuous mode [ 464.215950][T16284] 8021q: adding VLAN 0 to HW filter on device bond11 [ 464.222885][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 464.259522][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2727'. [ 464.373759][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 464.681959][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2734'. [ 464.685345][T16307] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 464.698926][T16307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.967216][T16324] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2740'. [ 465.263717][T16338] IPv6: sit1: Disabled Multicast RS [ 465.585517][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 465.598226][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 465.634475][T16357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.702353][T16358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.710859][T16358] bond8: (slave bond9): Enslaving as an active interface with an up link [ 465.726108][T16360] bond8 (unregistering): (slave bond9): Releasing backup interface [ 465.736992][T16360] bond8 (unregistering): Released all slaves [ 466.091622][ T136] [ 466.094001][ T136] ====================================================== [ 466.101036][ T136] WARNING: possible circular locking dependency detected [ 466.108084][ T136] syzkaller #0 Not tainted [ 466.112516][ T136] ------------------------------------------------------ [ 466.119554][ T136] kworker/u8:5/136 is trying to acquire lock: [ 466.125632][ T136] ffff88802cb38ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 466.134712][ T136] [ 466.134712][ T136] but task is already holding lock: [ 466.142095][ T136] ffff8880594dd558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 466.151986][ T136] [ 466.151986][ T136] which lock already depends on the new lock. [ 466.151986][ T136] [ 466.162403][ T136] [ 466.162403][ T136] the existing dependency chain (in reverse order) is: [ 466.171425][ T136] [ 466.171425][ T136] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 466.179697][ T136] _raw_spin_lock+0x2e/0x40 [ 466.184746][ T136] sch_direct_xmit+0x15f/0x4c0 [ 466.190047][ T136] __dev_queue_xmit+0x180f/0x3950 [ 466.195600][ T136] hsr_forward_skb+0x167e/0x2a80 [ 466.201075][ T136] hsr_dev_xmit+0x242/0x360 [ 466.206123][ T136] dev_hard_start_xmit+0x2cd/0x830 [ 466.211762][ T136] __dev_queue_xmit+0x14d9/0x3950 [ 466.217326][ T136] ip6_output+0x340/0x550 [ 466.222197][ T136] NF_HOOK+0x177/0x4f0 [ 466.226799][ T136] mld_sendpack+0x8b4/0xe40 [ 466.231835][ T136] mld_ifc_work+0x835/0xe70 [ 466.236878][ T136] process_scheduled_works+0xb5d/0x1860 [ 466.242970][ T136] worker_thread+0xa53/0xfc0 [ 466.248111][ T136] kthread+0x388/0x470 [ 466.252709][ T136] ret_from_fork+0x514/0xb70 [ 466.257824][ T136] ret_from_fork_asm+0x1a/0x30 [ 466.263133][ T136] [ 466.263133][ T136] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 466.270868][ T136] __lock_acquire+0x15a5/0x2cf0 [ 466.276245][ T136] lock_acquire+0x106/0x350 [ 466.281281][ T136] _raw_spin_lock_bh+0x36/0x50 [ 466.286582][ T136] hsr_dev_xmit+0x237/0x360 [ 466.291624][ T136] dev_hard_start_xmit+0x2cd/0x830 [ 466.297275][ T136] __dev_queue_xmit+0x14d9/0x3950 [ 466.302833][ T136] NF_HOOK+0x33a/0x3c0 [ 466.307428][ T136] arp_xmit+0x16c/0x270 [ 466.312111][ T136] arp_solicit+0xbe0/0xe40 [ 466.317061][ T136] __neigh_event_send+0xf05/0x14d0 [ 466.322711][ T136] neigh_resolve_output+0x198/0x750 [ 466.328448][ T136] ip_finish_output2+0xca9/0x1070 [ 466.334007][ T136] ip_output+0x29f/0x450 [ 466.338777][ T136] iptunnel_xmit+0x621/0xd10 [ 466.343905][ T136] ip_tunnel_xmit+0x193a/0x1f20 [ 466.349288][ T136] __gre_xmit+0x19e/0x240 [ 466.354143][ T136] erspan_xmit+0xa41/0x14d0 [ 466.359192][ T136] dev_hard_start_xmit+0x2cd/0x830 [ 466.364829][ T136] sch_direct_xmit+0x251/0x4c0 [ 466.370127][ T136] __dev_queue_xmit+0x180f/0x3950 [ 466.375700][ T136] alb_send_lp_vid+0x348/0x550 [ 466.381009][ T136] alb_send_learning_packets+0x12c/0x300 [ 466.387173][ T136] bond_alb_monitor+0x3d5/0x17e0 [ 466.392639][ T136] process_scheduled_works+0xb5d/0x1860 [ 466.398713][ T136] worker_thread+0xa53/0xfc0 [ 466.403836][ T136] kthread+0x388/0x470 [ 466.408438][ T136] ret_from_fork+0x514/0xb70 [ 466.413551][ T136] ret_from_fork_asm+0x1a/0x30 [ 466.418847][ T136] [ 466.418847][ T136] other info that might help us debug this: [ 466.418847][ T136] [ 466.429084][ T136] Possible unsafe locking scenario: [ 466.429084][ T136] [ 466.436555][ T136] CPU0 CPU1 [ 466.441925][ T136] ---- ---- [ 466.447312][ T136] lock(&qdisc_xmit_lock_key#3); [ 466.452366][ T136] lock(&hsr->seqnr_lock); [ 466.459395][ T136] lock(&qdisc_xmit_lock_key#3); [ 466.466955][ T136] lock(&hsr->seqnr_lock); [ 466.471472][ T136] [ 466.471472][ T136] *** DEADLOCK *** [ 466.471472][ T136] [ 466.479626][ T136] 11 locks held by kworker/u8:5/136: [ 466.484913][ T136] #0: ffff88805613b140 ((wq_completion)bond7#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 466.495977][ T136] #1: ffffc90002e3fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 466.508892][ T136] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 466.518489][ T136] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 466.528431][ T136] #4: ffff88804d483228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 466.541062][ T136] #5: ffff8880594dd558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 466.551362][ T136] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 466.560272][ T136] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 466.570070][ T136] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 466.578887][ T136] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 466.588831][ T136] #10: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 466.598082][ T136] [ 466.598082][ T136] stack backtrace: [ 466.604080][ T136] CPU: 1 UID: 0 PID: 136 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 466.604099][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.604111][ T136] Workqueue: bond7 bond_alb_monitor [ 466.604136][ T136] Call Trace: [ 466.604144][ T136] [ 466.604152][ T136] dump_stack_lvl+0xe8/0x150 [ 466.604171][ T136] print_circular_bug+0x2e1/0x300 [ 466.604195][ T136] check_noncircular+0x12e/0x150 [ 466.604218][ T136] __lock_acquire+0x15a5/0x2cf0 [ 466.604238][ T136] ? __siphash_unaligned+0x25f/0x3b0 [ 466.604267][ T136] ? skb_network_protocol+0x23d/0x400 [ 466.604295][ T136] ? hsr_dev_xmit+0x237/0x360 [ 466.604312][ T136] lock_acquire+0x106/0x350 [ 466.604328][ T136] ? hsr_dev_xmit+0x237/0x360 [ 466.604348][ T136] ? __pfx_netif_skb_features+0x10/0x10 [ 466.604363][ T136] ? hsr_dev_xmit+0x237/0x360 [ 466.604380][ T136] _raw_spin_lock_bh+0x36/0x50 [ 466.604402][ T136] ? hsr_dev_xmit+0x237/0x360 [ 466.604419][ T136] hsr_dev_xmit+0x237/0x360 [ 466.604436][ T136] ? hsr_dev_xmit+0x2d/0x360 [ 466.604454][ T136] dev_hard_start_xmit+0x2cd/0x830 [ 466.604475][ T136] __dev_queue_xmit+0x14d9/0x3950 [ 466.604497][ T136] ? __local_bh_enable_ip+0xd0/0x130 [ 466.604515][ T136] ? __dev_queue_xmit+0x2b6/0x3950 [ 466.604540][ T136] ? arpt_do_table+0x256/0x1e30 [ 466.604566][ T136] ? arpt_do_table+0x256/0x1e30 [ 466.604589][ T136] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.604608][ T136] ? __pfx_arpt_do_table+0x10/0x10 [ 466.604630][ T136] ? trace_kmem_cache_alloc+0x29/0xe0 [ 466.604658][ T136] ? NF_HOOK+0xa2/0x3c0 [ 466.604674][ T136] NF_HOOK+0x33a/0x3c0 [ 466.604689][ T136] ? __pfx_arp_xmit_finish+0x10/0x10 [ 466.604704][ T136] ? NF_HOOK+0xa2/0x3c0 [ 466.604717][ T136] ? __pfx_NF_HOOK+0x10/0x10 [ 466.604731][ T136] ? lock_acquire+0x106/0x350 [ 466.604747][ T136] ? __pfx_arp_xmit_finish+0x10/0x10 [ 466.604762][ T136] ? inet_addr_type_dev_table+0x25/0x190 [ 466.604780][ T136] arp_xmit+0x16c/0x270 [ 466.604794][ T136] ? arp_xmit+0x23/0x270 [ 466.604819][ T136] arp_solicit+0xbe0/0xe40 [ 466.604836][ T136] ? arp_solicit+0x119/0xe40 [ 466.604850][ T136] ? __pfx_arp_solicit+0x10/0x10 [ 466.604870][ T136] ? __pfx_arp_solicit+0x10/0x10 [ 466.604884][ T136] __neigh_event_send+0xf05/0x14d0 [ 466.604925][ T136] neigh_resolve_output+0x198/0x750 [ 466.604947][ T136] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 466.604968][ T136] ? ip_finish_output2+0x3c2/0x1070 [ 466.604984][ T136] ip_finish_output2+0xca9/0x1070 [ 466.605001][ T136] ? ip_skb_dst_mtu+0x80b/0xa50 [ 466.605018][ T136] ? ip_finish_output+0x40e/0x530 [ 466.605034][ T136] ip_output+0x29f/0x450 [ 466.605048][ T136] ? ip_output+0x5b/0x450 [ 466.605063][ T136] iptunnel_xmit+0x621/0xd10 [ 466.605087][ T136] ip_tunnel_xmit+0x193a/0x1f20 [ 466.605111][ T136] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 466.605128][ T136] ? __pfx_gre_build_header+0x10/0x10 [ 466.605155][ T136] __gre_xmit+0x19e/0x240 [ 466.605179][ T136] ? __pfx___gre_xmit+0x10/0x10 [ 466.605200][ T136] ? iptunnel_handle_offloads+0x2fd/0x630 [ 466.605222][ T136] erspan_xmit+0xa41/0x14d0 [ 466.605250][ T136] ? ret_from_fork_asm+0x1a/0x30 [ 466.605270][ T136] ? __pfx_erspan_xmit+0x10/0x10 [ 466.605297][ T136] dev_hard_start_xmit+0x2cd/0x830 [ 466.605318][ T136] sch_direct_xmit+0x251/0x4c0 [ 466.605340][ T136] ? __pfx_sch_direct_xmit+0x10/0x10 [ 466.605360][ T136] ? kthread+0x2b0/0x470 [ 466.605383][ T136] __dev_queue_xmit+0x180f/0x3950 [ 466.605401][ T136] ? __dev_queue_xmit+0x2b6/0x3950 [ 466.605422][ T136] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.605438][ T136] ? rcu_is_watching+0x15/0xb0 [ 466.605457][ T136] ? trace_kmem_cache_alloc+0x29/0xe0 [ 466.605478][ T136] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 466.605510][ T136] ? alb_send_lp_vid+0x14e/0x550 [ 466.605534][ T136] alb_send_lp_vid+0x348/0x550 [ 466.605558][ T136] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 466.605586][ T136] alb_send_learning_packets+0x12c/0x300 [ 466.605609][ T136] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 466.605631][ T136] ? bond_alb_monitor+0xf8/0x17e0 [ 466.605654][ T136] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 466.605677][ T136] bond_alb_monitor+0x3d5/0x17e0 [ 466.605700][ T136] ? bond_alb_monitor+0xf8/0x17e0 [ 466.605723][ T136] ? __pfx_bond_alb_monitor+0x10/0x10 [ 466.605745][ T136] ? process_scheduled_works+0xa70/0x1860 [ 466.605760][ T136] ? process_scheduled_works+0xa70/0x1860 [ 466.605776][ T136] process_scheduled_works+0xb5d/0x1860 [ 466.605804][ T136] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.605823][ T136] ? assign_work+0x3d5/0x5e0 [ 466.605839][ T136] worker_thread+0xa53/0xfc0 [ 466.605866][ T136] kthread+0x388/0x470 [ 466.605887][ T136] ? __pfx_worker_thread+0x10/0x10 [ 466.605902][ T136] ? __pfx_kthread+0x10/0x10 [ 466.605922][ T136] ret_from_fork+0x514/0xb70 [ 466.605940][ T136] ? __pfx_ret_from_fork+0x10/0x10 [ 466.605956][ T136] ? __switch_to+0xc79/0x1410 [ 466.605980][ T136] ? __pfx_kthread+0x10/0x10 [ 466.606000][ T136] ret_from_fork_asm+0x1a/0x30 [ 466.606025][ T136] [ 467.103367][T16381] tipc: Enabled bearer , priority 5 [ 467.120787][T16385] x_tables: duplicate underflow at hook 3 [ 467.177040][T16387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'. [ 469.967202][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!