last executing test programs: 4.910239123s ago: executing program 3 (id=5709): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x1, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x81}, @TCA_CAKE_RAW={0x8, 0xc, 0x4}]}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000004c0)={0x0, '[cQ\t\x00'}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000014c0)={r4, 0x100000000, 0x2, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0x33) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r12 = epoll_create(0x1006) sendfile(r5, r12, 0x0, 0x10000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000180)=0x80000000, 0x4) 4.414783184s ago: executing program 3 (id=5716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x38, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x8, 0x2, 0x1, 0x5}, 0xab, 0x1, 0x4, 0x0, 0x1, 0xa, 0x1f, 0x1c, 0x4, 0x651, {0x5, 0xfffffff6, 0x4bc, 0xffffffff, 0x3c00, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008800) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.673608767s ago: executing program 0 (id=5722): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, @in={0x2, 0x4e20, @multicast2}], 0x2c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r9, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) 3.637764388s ago: executing program 3 (id=5723): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.434245487s ago: executing program 3 (id=5725): r0 = epoll_create(0x5) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) connect$can_bcm(r2, &(0x7f0000000100), 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x50002000}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x34}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, [@RTA_PREF={0x5, 0x14, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.08415901s ago: executing program 3 (id=5728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x18, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000005ffffb4000800060000000000080001006452b7607f00000000000000000000000000009470e59d9d707453810e34ac005387745c"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.934972757s ago: executing program 3 (id=5729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0xe, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) listen(r7, 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x60, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x18, 0x10, 0x7, 0x0, 0x3, {[@md5sig={0x13, 0x12, "d3df6e648319d1cc42dba2ddf395853d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @remote, 0x8}, @timestamp={0x8, 0xa, 0x57c, 0x1}, @exp_fastopen={0xfe, 0x11, 0xf989, "fe0df31472a5b1eda37a74146d"}, @md5sig={0x13, 0x12, "00ab2e7baa5598bf75aae4632e6313d3"}]}}}}}}}}, 0x0) sendmmsg$inet6(r11, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0xc8040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f00000000c0)={0x2, 'geneve0\x00', {0xffffffff}, 0xa}) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) splice(r11, 0x0, r5, 0x0, 0x7ffff000, 0x6) recvfrom$phonet(r5, &(0x7f0000000200)=""/236, 0xec, 0x11001, &(0x7f0000000040)={0x23, 0xc, 0x8}, 0x10) 2.790726895s ago: executing program 0 (id=5731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) 2.604249841s ago: executing program 4 (id=5734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xc4, 0x432, 0xc}}]}]}]}, 0x64}}, 0x0) 2.29020702s ago: executing program 0 (id=5736): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) (async, rerun: 64) r5 = getpid() (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB="c640d5e562650cdc5d1565fe65f1d01775809aa55ea82742c2319d2f7ac1999d6a3109629280693c0842fa44fb35db4bf2a6ed87a1f4bae69c60f76688045013b7f42c550165fd05b3895701dfc13710c43f235a"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r8 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) (async, rerun: 64) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x9, &(0x7f0000002500)=ANY=[@ANYBLOB="1800000004000000000000000500000018600000050000000000000007000000032600000c00000018000000070000000000000000800000d1ba000010000000950000000000000011b8d4550fe48a9691e34a82d22ab55a85c49dab4fbd6df1680d22d40c775d8eb1acaa9cca2d5a2e335ce689fe87a16044967cb917f147d968469d32836b292c2c2bfc6e5a7ab04d0b"], &(0x7f0000000500)='syzkaller\x00', 0xd33, 0x88, &(0x7f0000000bc0)=""/136, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x0, 0x5}, {0x4, 0x1, 0xc, 0x2}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x5, 0x1, 0x5}, {0x2, 0x3, 0x7, 0x1}], 0x10, 0xa}, 0x94) (async, rerun: 64) r12 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000e80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000fc0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) r18 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r18, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x34, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r19}, @nested={0x4, 0x2}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x34}], 0x1}, 0x0) (async) r20 = getgid() sendmsg$netlink(r0, &(0x7f0000001180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000001340)={0x1034, 0x17, 0x400, 0x70bd2a, 0x25dfdbff, "", [@generic="17980246c0aeefe36c2ff7139263ae39adc28cadedf60d3fee165aaaa4a181a045a0f62e61fec864664a4692d15c2c02c0cc2099273357c574cfcc57b2a8051412f46d06e8902a933f01a5d2c28b4193b63852b0ff016688f2adfd2fb698e4954c38d9d0e013783041ea5d3aed414a0eae365c7c5e69bdac28a38fc225a3b000436b83b1c806ce35d6b41525c59a6396df88bf838576482b6fbacda8ab8de62f8380599b0560e8c86bd0cee67c4fc0b73c166ab4520beacd339630623b93d47d6e7025f4e38637679037fcfe8da0964421fa5ba54e50eed9fa6290409e6adedbc556fa734e23117194866d8dade57118faec0a55b4e562ebf5a971c51340bb211ff75b4ee547ad19ee5ed88ed37a4b003ceaeed986f5641f486b166bf85b6860c3715d6d0375ec59c5cdf068bb5f25f012259b60cccb7693f20984fa44c0e600cec01b92a2896339125f64bbd0f29e6cf16f2509d0aec796f1cba3a5bea6c54da439a2781500b3ffffa1ddd972b9c44313b90504b7514fc3253ef6cd0c71325a88bff4f04d3806a8caf05a2fe537a8d23a13a69d8d1e004d731d3296baf2fd9c4d865ed44a1ddf770ec3b5aacd92282077fd771dcefa7d58ca7e751b233d92c12b3b330b023b64d30d26be8b08f7bb2a4aa07a67dd0815c6df396a595d8d42bcd3f4a2ac8a77d02775666371fab56f9f6ee35e08ea48d9ee154a572f1432e0c35e8f8b976b3d377c49684b44ec13f6025e18f5f6773b9b3efbbe4de9938189eef1f4c14752c431ae19d13e5be164354a3b70748937feea85425f1be11ced77b09afe0be8002d42d2f42d071210b80689c8cb1913dd30ffb40d03655c5c6e7ab604f3b5e5b7bf9233c6e9de35096cdf720f30e7906f2340a1155a4c827bf35a09e309e867037fb5b60d6bd0c72a3874f327a9581b23a4fd7a7896470cd7ea4cbac7a71a8e2eb7b1404f18eff522fb85b3d49f365dd5b0a6d2250bf26c43b227745950ce5830472bbe4228b8635d6d4c40f888b89274c0e78d769de9e32fb8f8fe95ce51436dac3eeb7af55f30f3c123214493782723d3a23fe2430f0ffee0e4f220c77e6369d21044bee330d47fd5e91ddac944dda3560a6a137acb87d8c0906472830cd97daea22c75f8bcdb892ac5aae84d9a1097409e2c11a912ddc5c040fba135e4c2ac49707e0cafecc9c78e05729ca454bfcd6319387c65f21b53ccda2581241afe5b8b4aed13e69138d6a86eb7a0f3cd3bdb1bdfda9fdc55d79171cda2e36c9eea065c7c066f06c207e1a0e46c2f7e6ab5337912a8bf92651587113942b3423bfba587de10dadd5218fe76573d2aecb0ea3df54ea30bf2bdad9be7482aed77184c5e88afa67302e4652507f53a2e5f5485a9800a50fc39f6c5d590c8d400ec7806ca7b68b27dd0ccce1bd78b32123c6bde626df9b109ad8b1922f15d70a8a267c245034ab00297eedda126015bf098e44d5ee62adac234fe5312119615590ed4461807291891d106d37e94eadb04edebeae192748166e0511a68cce6999f8af9248767681393741a0d933460aedeff3dce0a863785c864df01fba8516301283bbffc05df62a0c8aadf2e49ce393e771a9139f6ca45ab61cf25b95f965fab623a1f000dcaf9acde38363cc6bb081358f6d5e9f0e2be658be8dff459517e6a3a676be2754c07d5c7a476ce8d9a010dcc55192ca43ceb143f39af86792c5c31dfd268aacf29148cea27c61a7a5a575bd507876f9f2ac500c08460597f11d94416c757045e3718bbcd0020fd4983ef7d59079caac8f5e049c5dda4b9679253da2dcb9a9614ad48c9f8a2ad14a8a53210df003d73ecd66fbcf503318fc99b5bacbef0159589a46d037b985cc15e528e9d11a0490600959fb57ab5358c769380a955315896207eef76c51045dc8cee2b2c18b21df82aa74a57a28419ee772780755d63a6a01bcaf668f9385ed7e5c52c2d4505de15076ff2dd6c4f839fbfad41bd4b509840db22403e683c594f7f0a7eac4572d2609e39dba2bfbcfdf77cc25d3ef71aa31f596fee6e5254af6dfacbee22bffa35cefbaec86dc8e2f742a8b31c2528cbb1a476924fd2a6780f57f531cd4ffe1aad848aaac9f1e2c2b838e81d3ec4f9bf0de3eca599ccc3c766013eeb4057afccfad11706f6aa21e38831378c3731b954ac2489d9cfbd9bdddc1a11a5bc3f8b17088fe4b7b93a87a63d955dd292a9292b5fc622924a72a05b29398503c9bb014399969fd9a1a6f9406dec8932537b16176bc56eb212708149d00d18a9a5bc153393c590d1889c02de333639fd96cd94daf72143dbaae24580253fefd317195aabc18dcbf58d2b664d4b706efa1e3a018c1ee63e1f01c4e43fce178a9ab12fa836322bb55d88208f83a4253618aa08a66afa39c8b2cd50bdcc4f32572aa15d7bc5252957de38534d545058bf5ecd165e7ef73aad5e4f9017a7114111e2f29340b905a76fbc3db0a2cb316fed54dc2f8a1e1bbb4f8357a72918fe7ff4f03196bbcfa8fec5aa0b24b4a2bcbf52bc567bbf1aae701d1edcbd4f98b116cc399a0487d280516075ed0ff64b6456476dd69b12f3c2d8b9f844a3624ec1b8efb42d67b0b19bfef0e8930af600b5a94a5e48e0825848f8cdb8956fa7193eb77078b0ac82b2c234ba4efbd84e260338a06b83d387afcaa873d89b813eb0f3dcdc6c0e76ced24de3f7b297a0e6770feeda4b7fd60970404b3239f808c3c30fa9c2fd9730da4b921f7bded47c791acc45aa0b44076001cd52a9a4d44d31d55f30136145c2bbc46224e1120a70d4d6bac65ad8a0fec0226640f34d46318bab2c361deb8b131b3d94feaaa03cbbe09b47d1ee529f3ee3d8f9e1caaffaa6ecfb1ab1796c0122a15c7eb9f52a251663270f7a41512e28b05eee026db4195e796410b78a40df1575f4e9aa1fe68ca5a047da5acae95ec2d03877f7e3af47938706a3598714bdd5b6bf784c8282ea26651b86a9d62e792727be9587a48ab456d25c02f3948bb6f8ac7d2a5fffc463b7522f4b7544a7aa69012fd64b0d8a0c97b62a4114de5cab0feb903fae5f2c1322277c4650ae6e1537a12d987076412538fb0fb094f2a4068019a306e024d4e0f14931af99dc1678ae47451000d18e4f56c54a27e5ef50c85a3bf4c75d233240d62c650c992eaa2fd99db2e6a5008bf44ff0fa16aa9a71f1faa982b032368178ad7fd71b9b303c268d9f3a24d31dab6420fbafb2d26ca08248751603ae3e52d08a2a912050c92475a88c9b96476cc27be3e3b35967a5e3aeaaedd68745e0a50767b2cabcd01657563e946c2e97096e77a44db188eb3cbc7c9f7cd5dfe6b32160e95fb97590ae634447f3d27bc7cfda2a133f649a7a9a07c434f6d0bc5b32afaf69f88f1c54afeb0675125bed477edc82b24f034618aedeac313c828137c0fb9a02e31b808881b4f8bd02ad68f9a7a4d07571e8353605dcd6c6e93d2b8959094b1c39b0b8fbf33b8489d9619bd498ba43870b87e820118dc2fb600a7acb4fcd679d7cc883c7507223500a059c3a36bfb37e871f41e8053c20fdabeb96dd58972bdac600e9f1f51948fa6ae9cde26b2f893c708e81de98c86d00d83159a0b1f228de3ac7f55dddb0a7e3494268ad5312a0025f8ac234b10ee7306defc0775a763250b99d7ab33f45e16fcd54167b9327d79313df00dabca16a727b296bd9374529583f9582773edcfb607875b6aa96adc74ce5796aeffcb086e5a3728b70f2f5f18e3b4ededcccc9307592e5d22a104b0d28cd0946a6948f017c69fc060c2d0a8122f92a5d10010da07c69b47964e6088f21098675079d3e8aaf7d7afaeb7b91ca3690f7920b647e03fd857ec4d0130e5f1e793ba34d86a933310603c19a98fb7195b757fd2cc7bbf7c32b375687565c651dc7bedd6124fc820ee04ab3fc6749e1dbfacd70f0571b73c12a445c0d1f7dcf27ea7795dc95fb9a619e71caf2b64b21d36d20275ef51176b546e9322b2e0149ed2962ace4ada60be2d711a08ce093e9cd676c23f0dee1e884e35394c0024fc5234bd047142530408bf27d864dfc0cd5576b2e7a3016e22e0aada0fc89849c662407f167ee17c02470767c24f5fd6637f2de06ca34137259128139b9f7326dd9d44194b683bf7b731e4b1a2ab3cf17b2c0f289d95cfeebcd96e898930f7ba5aecfd382159acd7ead1c51499a2c8546f1eedb7e16236be1857e81f841cac6a6a5099a2b722c1328b2face41d9f67fc27758ad958f53398d1e468df44b3f761badc199fd6fac0b74ed3346ac6e1683f05e483948465e161cb984bc49435aa037bf53c42f0375cd2ee15dfe56cdb5166b9a08d8a27288171a8574c3394662acf9d22c5b564039ebb70dd7bfc1b582f9969fc5b6ac2afd57d1f615e7744bd64b931270eda954292cfede94707a31ed582e2a8c2434c13d2e6d2bab75c05ff17c864845e6ec0d13f984e3073b0640ae7bac7ba1ecfc4e459fbfa36eb2df2a77089d68977ca03a7c42faa2c60142b0136d65be9271bb48f5c8a1eb41726296bedaa7abc5a0f26495fe685d49bf5371cb55a4fded6456f95476c8df259208f330da4d93d768456d13d4f1c729f00d6833bfb734e05878083ff5439d45dfa06ce9428deb4561f33b24e33b0988429301784af83da7ebf70e70b9acf056e8bf10551f131267ceae4fe49da0cc37ffb635bfeb6b6d504b563b67f3d02c66dbc326e1c3768913447cf0f8324b4c8b7784d4df5e1e8f8984588308f5e27b380f15480bde5eb46783930e4efad9dfd75f9b71b2202d6f0c3e5d9aac44a0c009d8cc87506b28561403b9105639c8cfc91c3fb2163c9d59b6660e4a02246f392af16e326fafc49aa40499e0fcebaaa17b7f536b0a0bf16bd003a091195d2b7f851a9603b36233890963b9d06e26092dddbef8af92caaffe16f41a237b782d720be9bbdcf667bcc904dfcb4510149b3856a1b7fdf097113f72dd327981862d044963aa059ba1988b76750efcc8ba6861e9600a533c01f54eddcf3b50390fb0d1f121d5a37c1ef8c711290191dbef66c842a082ec959c1102ede6e5d1bbc6221f4e2f4180fb669075077bbd824f90a6cafaa8b5baa6a43bce36a8d3cf29855091d980c2c44afa0cdf2887f3048e7ce316c1e47d2cccfb3da6edafcaf2246bb35e9c21a3f512e9df80333c41d267da26fdbf5fa6829dbb05312eb776422871be3c930363a25f0f0fcab50da64736ba3146f8eba6f02b054e8a51502e9738cde2c089f0cb29b69d1d62587958c9be183bbfefff4b835be28cc0ad3d24f6fedc52b4a29d1eea2b1913f5e403022e1cff5b34ae122a6958a3e25db6012e11e5cfb80aeb35cb2f058effa8bb1217afbc7c28f4058b13bd73005f2bfc31bd04c569a5aad44bf6c82ee3adbaeed033d14ea26dfa914593a1f8211be62b67235507a3ce8c5b4a94b3c6e22fe86a3254f8a6ac8e4c0f5b987540b39a70ce8083fc77932eebaa9a149ffc338f803029e3f8b2648fd9d46d813b0e4237b3cb209564be3a6c3afe81f5d34bdf0da5749bffaf8fc538eb5d535663e17d572fcb8a78a9c538068cd98386884514451875aba76e7474bd49b417d742007e9f994e0d90af3d18366a560d34b1cf8ab9b50ee55f7c9111adb92025627e49e30d2aa1b514040e5ed84498bc879bee8439a1c4674e7b2fc7ab1cd1e2503426c873c95cf24d05538c3885261d4499191d3e876150e22afc8f71348a3ea0d63af7fad0ac5ba4300ce8fbae0e9c8ec720a689688fb6022c2ace968268ccfa8992dee2c4af09f4ae497b1578", @generic="8a08b4ea1fc6f7ad336aa2dc242e1248854bd722a1c59dacd57ed3b1d7afb9603317"]}, 0x1034}, {&(0x7f0000000140)={0x78, 0x1f, 0x200, 0x7, 0x25dfdbfd, "", [@typed={0x8, 0x9, 0x0, 0x0, @fd}, @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x7ff}, @generic="f4b567583aa977ecee033e1f3484b044369328d6023a83c085d33071cc0d709f68a890d890e71af7df50fb2555675674575a524a0425624948a7ebae591feaaaad6737a6b3ac00087d82392087b625a2a5d4c7c7b23710"]}, 0x78}, {&(0x7f0000000880)={0x308, 0x26, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0xf0, 0x5, 0x0, 0x1, [@generic="c8c0765ec7c68e4b081f74ed35b00022b81422b15ff96e35336e9f454c2de052126704fef4e2b314140564e3c0df2e85855a6857ad9b492d3960bc02", @nested={0x4, 0x60}, @nested={0x4, 0x13f}, @nested={0x4, 0x127}, @typed={0x8, 0x56, 0x0, 0x0, @pid}, @generic="967718ce77144400514c148630f0802744f24e003be838b3881ece69d28dbffe89d5a1b4ef739a3471ff37fe2431eaf818e3c9e2c8b5af342ae8f3829932f9f2529bba5f8e340ae47a5161b9102d10984b94d0dbf95d55073cf501242850debbf8c7606e75b8c9f92bc455c7c59a6cab94d4310021c3f572119ac44db11dabc2dd8e4e8e167eca555c094b8e7098a79d50febf7b08ed203f8290ea00"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0xf4, 0xcb, 0x0, 0x1, [@generic="c04841d78c04aba00c2b5ca8c6f2ae13ed4252ca715c0987e44dfedd2af6f1ca2a4f5033e5a6b83cbd481cf28d2733fb7c985fcb70ff027af6997570471702cad93c286faf7097d3fef3f2097b4039d5e4bbb34297f8ddf6787b3a4436ba9e957e5a23a64aa1fa9e2dbbedf11733d8250b283f04659f0aa5ea5b1ae2305a22f8a34f6d9a5b4a606b0f229ffd61bbf0f51c86c7828930fd47b834899b592ab7c64743ee5db7445c28892df08f3c5efeedf4977223f4731a6fe15653c8292422331c78ee1798781949c0c9ba9d6210c4943028536baba1aecaa0ce5cd5cbdc543910d62440f5fd2dbb", @nested={0x4, 0x19}, @nested={0x4, 0x148}]}, @nested={0xdf, 0x10, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @uid}, @generic="40cb09a5ffb5b512792c70bccb1c86a4664996410b0de0ebd378704c2c7580988300405ba911977f35b5020103e036fdb4f173146ab07c082d6037225cc0e75ef409bf968db33382fb2deb830d8c97361ac50f1748f04b42e994dfd6f9f13f6a5dd2655337c859e97b9e700265986d24b017e1e77a25cee39c1599f73309c3939b0b83db7c12cde92509c29d1c06c6822b26113f632b915bbab08ec534a0a1e30b0c586572526e06873ec14108eb16e52e9d4cc2610ccb59fbb390b4ab7ef3", @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0x6f, 0x0, 0x0, @pid}, @nested={0x10, 0xea, 0x0, 0x1, [@nested={0x4, 0xce}, @typed={0x8, 0x10f, 0x0, 0x0, @fd=r0}]}]}, 0x308}, {&(0x7f0000002380)={0x180, 0x40, 0x10, 0x70bd25, 0x25dfdbfd, "", [@generic="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", @typed={0x8, 0x119, 0x0, 0x0, @uid=r4}, @generic="73f563e845da452fe5af019d768b094405330b667fd3847a", @typed={0x7, 0x68, 0x0, 0x0, @str=',{\x00'}, @typed={0xc, 0x82, 0x0, 0x0, @u64=0x3}, @generic, @typed={0x3b, 0x1b, 0x0, 0x0, @binary="75708d3a45f68706197051fcdfac41acdb6449dccbe358c2daaa713ac02fe7118c70a74943898754ea73b7c44cbbb32055f97be2cecfef"}]}, 0x180}], 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="e20000003400000000004b47d440b50000010000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r13, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x1}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r21, 0x3, 0x6}, 0x10) close(0x4) 2.289915409s ago: executing program 4 (id=5737): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) r1 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='bond\x00', 0x5) 2.21277488s ago: executing program 0 (id=5739): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) unshare(0x24020400) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x40, 0x4a, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r3, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x400c800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x604400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="836507000100007e6aa7457d002400128009000100697069700000000014000280050009000000000008000300ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) 1.78381936s ago: executing program 2 (id=5742): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="08001300", @ANYBLOB="20110002e8d1000008001c00", @ANYRES32, @ANYBLOB="400000001000175622d57000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB='\b\x00.'], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c844) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0xfffff354}, 0x28) listen(r3, 0xfffffffc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1a3dd79532a74c52}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0xf8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc1, 0x8, "b4900bfbfcbe29712fa5ca2b6226f7c935f6e35abce84aea50af6f426ec491ab2fe9f036c1e6aa93191fea6f86d5a7b2811827da99709edee55c6e31577b0ae4402cf54773f72a82bc299e3a80f7a3eb18a0372a5249f939fa7f39317a0f53cb60e9a8fab6555ebe8ffb09b3e4a4c7204e76a5cd8b927c7573cf98a079e83cc8484826baed9fde5f44d678b4e8a84e607ed676272cd14b195b867254aa899dbe99a89eec586c16b1aa669269873c4351cb13c68bfa296c0d516df5c4c3"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "f85bfb8ceba32f6d370af47bcd38"}]}, @NFT_MSG_DELSET={0x27c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x160, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_DESC={0xfc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa081}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x634}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3bb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4}, {0x4}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x404}, 0x1, 0x0, 0x0, 0x40000}, 0x40000440) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r10}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2018, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r12, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000", 0x53}], 0x1) 1.499146547s ago: executing program 1 (id=5745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="eaffffff00000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.498706493s ago: executing program 2 (id=5746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x40}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="19f86c", 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) mkdirat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x1ff) 1.341242975s ago: executing program 1 (id=5747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async, rerun: 32) r5 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x50}}, 0x2000a100) (rerun: 64) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r4}, 0x10) 1.293386745s ago: executing program 4 (id=5748): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x2}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback, 0xfffffffc}, 0x1c) 1.211051304s ago: executing program 0 (id=5749): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='6\x00'], 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1000008, 0xfffffffffffffff6) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f0000000540)={@private, @private, @multicast2}, &(0x7f0000000580)=0xc) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) unshare(0x2a020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffffffffff96}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.186240348s ago: executing program 2 (id=5750): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x6, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb3cc, 0x0, 0x0, 0x0, 0x8000000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000700)=""/111, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64) 984.195639ms ago: executing program 2 (id=5751): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0xffe4}, 0x20000034) close(0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 938.819782ms ago: executing program 4 (id=5752): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x120, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000600)="9bba9ff09c40cac5bbb249a66c7b31fcc9c7a333ff4f853a3d63637b0de338483e77aa1386aed3927e96255aa69d082ee334c184b4c75cdd3a4f9bf4cc40c0079bd738463c812fea6137802e639d52e87b68cedcfdd617f9625aabeafe1332f3a4bb688636a176b5f4664ec8242f970d66c4c8854277987c9d10cc023d786283691a192c9caa1ad094168ffabf52af99eb9c4336472da88d7bb019e29110ad6c2b1863b0fb1a426ac597b07a35ea3baed84b5b39c859925ba2d503eec78e5a6938a3241bac719d1f23d69b23b1b4d57eede376eaa92faf53c1c24ceb148375b077037766a7a0258021", &(0x7f0000000740)=""/152, 0x4}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e0ff040108000a00", @ANYRES32], 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b20000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000ffff00020000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 932.340206ms ago: executing program 1 (id=5753): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 904.045594ms ago: executing program 2 (id=5754): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) accept4$inet6(r8, 0x0, &(0x7f0000000180), 0x80000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) unshare(0x20000400) r10 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r10, 0x8907, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) 839.349164ms ago: executing program 1 (id=5755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000240)=""/232, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20000000}, 0x94) 678.387234ms ago: executing program 1 (id=5756): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c1cdba0a0aa67978cbf56efdb952b9a812cee45c1af574b8300f21bf14af3c9e37c0304ffbb82982e5bb76d6dfbe2f651de12901bc12cc05fa25fc4bae99acf0fbe0535760a2bc0da2691f42f336fe894e608fe93a8fb481b7c8bbc7f956496c93817b5276d2974829e78e350a46b49afbf259ea196ca0991db", @ANYRESDEC=r5, @ANYRES8=r4, @ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000150a0101000000000000003317edf523d514b9c5703c2361f49a86e2185e00010000050800034000000009080003400000000a0900020073797a32000000000c0006a52d619d0a9938d1040c00064000000000000016040900010073797a30000000002000080062e13e10383553f0bd58b106a92fe838b2af699439"], 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740"], 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000140)=0x14) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x35, r10, 0x2}, 0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth1_to_bridge\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$inet6(0xa, 0x80000, 0x40007) 401.545843ms ago: executing program 4 (id=5757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c0000000200"], 0x23c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) 291.811951ms ago: executing program 0 (id=5758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x8000, 0x1, 0x80, 0x3, r7}, &(0x7f0000000380)=0x10) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc000000190001000000000000000000ac1414aa000000000000000000000000fc00000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90a034b8d8a132e510000000000000000000000000000080000000000000000ffffffffffff096441780fb7e5f2000000000000000000000000000000000000000a000000000000fdffffffff7f40000000000000000008000000080000000500000000000000007e0eaef9e0f719"], 0xbc}}, 0x20000088) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) write(r10, &(0x7f0000000b00)="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", 0x7f1) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 186.967412ms ago: executing program 1 (id=5759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}}, 0x20000040) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f000000f840), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f000000f980)={0x0, 0x0, &(0x7f000000f940)={&(0x7f0000000600)={0x38, r8, 0x405, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x11}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}}, 0x54) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[&$-+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r12, 0x10, 0x70bd2a, 0x2, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004891}, 0x24000040) bind$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 458.031µs ago: executing program 2 (id=5760): socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x500000000000000, 0x8811}, 0x0) 0s ago: executing program 4 (id=5761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0xb7, 0xfffff014}, {0x6, 0x6, 0x5, 0xfffffffb}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x28, 0x0, &(0x7f0000000080)="c1188e99136a02ff4284860186ddb30a20700a1abe6c769cfed78b6cbc50c07dad660af116404719", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRESOCT=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000057c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0xc0f00, 0x37, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000005800)={0x0, 0xfffffffe, 0x8002, 0xffffffff}, 0x10}, 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r9, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/30, 0x1e}, {&(0x7f0000001340)=""/202, 0xca}, {&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/21, 0x15}, {&(0x7f0000001740)=""/210, 0xd2}], 0x8, &(0x7f00000018c0)=""/38, 0x26}, 0x9}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/236, 0xec}, {&(0x7f0000001a40)=""/93, 0x5d}, {&(0x7f0000001ac0)=""/207, 0xcf}, {&(0x7f0000001bc0)=""/143, 0x8f}], 0x5, &(0x7f0000001d00)=""/54, 0x36}, 0xf31}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/85, 0x55}], 0x2, &(0x7f0000001f00)=""/9, 0x9}, 0xff}, {{&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/211, 0xd3}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002180)=""/84, 0x54}, 0xfffff5b3}, {{&(0x7f0000002200)=@tipc=@name, 0x80, &(0x7f0000002500)=[{&(0x7f0000002280)=""/43, 0x2b}, {&(0x7f00000022c0)=""/173, 0xad}, {&(0x7f0000002380)=""/182, 0xb6}, {&(0x7f0000002440)=""/190, 0xbe}], 0x4, &(0x7f0000003800)=""/66, 0x42}, 0x1ff}, {{&(0x7f0000002580)=@ieee802154, 0x80, &(0x7f0000003880)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/251, 0xfb}, {&(0x7f0000003700)=""/87, 0x57}, {&(0x7f0000005140)=""/232, 0xe8}], 0x4, &(0x7f00000038c0)=""/131, 0x83}, 0x9}, {{&(0x7f0000003980)=@nl=@proc, 0x80, &(0x7f0000003780)=[{&(0x7f0000003a00)=""/83, 0x53}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/96, 0x60}, {&(0x7f0000004b00)=""/94, 0x5e}, {&(0x7f0000001140)=""/187, 0xbb}], 0x5}, 0x3}, {{&(0x7f0000004bc0)=@un=@abs, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c40)=""/196, 0xc4}, {&(0x7f0000004d40)=""/136, 0x88}, {&(0x7f0000004e00)=""/150, 0x96}], 0x3, &(0x7f0000004f00)=""/18, 0x12}, 0x7}], 0x8, 0x123, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000100000000020000003c000480380001800b00010064796e73657400002800028008000440000000110900010073797a310000000008000340adcd1f8c135bdfb0a186b00000000108000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) preadv(r8, &(0x7f0000005700)=[{&(0x7f0000002540)=""/42, 0x2a}, {&(0x7f0000005240)=""/221, 0xdd}, {&(0x7f0000004a80)=""/103, 0x67}, {&(0x7f0000004b80)=""/44, 0x2c}, {&(0x7f0000005340)=""/172, 0xac}, {&(0x7f0000005400)=""/224, 0xe0}, {&(0x7f0000005500)=""/214, 0xd6}, {0x0}], 0x8, 0x2, 0x1000) kernel console output (not intermixed with test programs): ed allmulticast mode [ 565.508147][T24431] batadv1: entered promiscuous mode [ 565.525211][T24439] net_ratelimit: 7 callbacks suppressed [ 565.525227][T24439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.543875][T24439] netlink: 'syz.1.4527': attribute type 2 has an invalid length. [ 565.554876][T24439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4527'. [ 565.799144][T24449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.870717][T24447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4528'. [ 565.920070][T24449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.930597][ T4302] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 565.940177][ T4302] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 566.046425][T24449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.172288][T24449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.440570][ T7320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.569420][T24477] syzkaller0: entered allmulticast mode [ 566.579496][ T7320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.603791][T24478] syzkaller0: entered promiscuous mode [ 566.618561][T24484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4535'. [ 566.641129][T24482] syzkaller0 (unregistering): left allmulticast mode [ 566.648131][T24482] syzkaller0 (unregistering): left promiscuous mode [ 566.704214][ T7320] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.724629][ T7320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.744900][T24468] netlink: 'syz.1.4533': attribute type 13 has an invalid length. [ 566.853164][T24491] tipc: Enabling of bearer rejected, failed to enable media [ 567.593868][T24494] netlink: 'syz.2.4537': attribute type 1 has an invalid length. [ 567.627976][T24496] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4538'. [ 567.627980][T24497] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4538'. [ 567.927694][T24509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.561277][T24543] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4547'. [ 569.915933][T24566] netlink: 'syz.2.4551': attribute type 13 has an invalid length. [ 570.261207][T24602] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x85 [ 570.586209][T24608] netlink: 'syz.2.4558': attribute type 1 has an invalid length. [ 570.774018][T24608] bond6: entered promiscuous mode [ 570.784736][T24608] bond6: entered allmulticast mode [ 570.790367][T24608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.806629][T24612] veth0_to_bridge: entered allmulticast mode [ 571.443676][T24637] tipc: Enabling of bearer rejected, failed to enable media [ 571.734910][T24647] syzkaller0: entered promiscuous mode [ 571.740899][T24647] syzkaller0: entered allmulticast mode [ 572.576689][T24663] netlink: 'syz.3.4571': attribute type 21 has an invalid length. [ 572.584863][T24663] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4571'. [ 573.910501][T24663] netlink: 'syz.3.4571': attribute type 4 has an invalid length. [ 573.919252][T24663] netlink: 'syz.3.4571': attribute type 5 has an invalid length. [ 573.928593][T24663] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4571'. [ 573.975395][ T7316] vlan2: left allmulticast mode [ 573.985415][ T7316] x9: left allmulticast mode [ 573.990219][ T7316] vlan2: left promiscuous mode [ 574.005739][ T7316] x9: left promiscuous mode [ 574.018074][ T7316] bridge0: port 1(vlan2) entered disabled state [ 574.079146][T24671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.808542][ T7316] bond1 (unregistering): Released all slaves [ 574.821348][ T7316] bond0 (unregistering): Released all slaves [ 575.008941][T24694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4577'. [ 575.040262][ T7316] : left promiscuous mode [ 575.116312][T24699] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 575.169594][ T7316] : left promiscuous mode [ 575.280422][ T5904] IPVS: starting estimator thread 0... [ 575.326863][ T7316] tipc: Left network mode [ 575.375916][T24710] IPVS: using max 27 ests per chain, 64800 per kthread [ 575.540873][T24723] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4585'. [ 575.617921][T24714] syzkaller0: entered promiscuous mode [ 575.629467][T24714] syzkaller0: entered allmulticast mode [ 575.708045][T24734] netlink: 'syz.1.4585': attribute type 1 has an invalid length. [ 575.745064][T24734] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4585'. [ 575.798197][T24723] IPv6: sit1: Disabled Multicast RS [ 575.829197][T24723] sit1: entered allmulticast mode [ 577.535842][T24734] syz_tun: entered promiscuous mode [ 577.541494][T24734] macvtap1: entered promiscuous mode [ 577.912188][ T7316] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 577.930516][T24774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4593'. [ 577.958300][T24773] netlink: 'syz.0.4594': attribute type 32 has an invalid length. [ 577.984972][T24773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 578.108027][T24773] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 578.329583][T24778] vxcan0: Caught tx_queue_len zero misconfig [ 578.346072][T24784] netlink: 'syz.0.4597': attribute type 29 has an invalid length. [ 578.385581][T24784] tipc: Enabled bearer , priority 10 [ 578.420607][T24784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4597'. [ 578.484672][T24784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4597'. [ 578.919261][T24793] syzkaller0: entered promiscuous mode [ 578.954486][T24793] syzkaller0: entered allmulticast mode [ 579.005913][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4602'. [ 580.744092][ T7316] hsr_slave_0: left promiscuous mode [ 580.757743][ T7316] hsr_slave_1: left promiscuous mode [ 580.767865][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.778776][ T7316] batman_adv: batadv0: Removing interface: dummy0 [ 581.106499][T24836] netlink: 'syz.4.4605': attribute type 10 has an invalid length. [ 581.452934][ T7316] team_slave_1 (unregistering): left promiscuous mode [ 581.459996][ T7316] team_slave_1 (unregistering): left allmulticast mode [ 581.468096][ T7316] team0 (unregistering): Port device team_slave_1 removed [ 581.506120][ T7316] team_slave_0 (unregistering): left promiscuous mode [ 581.512929][ T7316] team_slave_0 (unregistering): left allmulticast mode [ 581.520816][ T7316] team0 (unregistering): Port device team_slave_0 removed [ 581.923549][T24840] bridge_slave_1: left allmulticast mode [ 581.929388][T24840] bridge_slave_1: left promiscuous mode [ 581.948177][T24840] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.975475][T24840] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 582.029768][T24841] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 582.221662][T24858] netlink: 'syz.4.4613': attribute type 22 has an invalid length. [ 582.285780][T24862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4614'. [ 582.324633][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4613'. [ 582.433799][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.433837][T24858] netlink: 'syz.4.4613': attribute type 22 has an invalid length. [ 582.444258][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.477717][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4613'. [ 582.492875][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.539743][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.707235][ T7316] IPVS: stop unused estimator thread 0... [ 582.726927][T24843] netlink: 'syz.0.4610': attribute type 13 has an invalid length. [ 583.036671][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4617'. [ 583.049739][T24857] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 583.056123][T24894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4617'. [ 583.070301][T24857] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 583.120176][T24857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.130364][T24857] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 583.140919][T24857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.159475][T24857] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 583.193406][T24857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.208910][T24857] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 583.221779][T24857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.244808][T24857] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 583.262587][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4618'. [ 583.599853][T24918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4623'. [ 584.060070][T24942] delete_channel: no stack [ 584.285586][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4630'. [ 584.673142][T24960] syzkaller0: entered promiscuous mode [ 584.684259][T24960] syzkaller0: entered allmulticast mode [ 584.717367][T24965] --map-set only usable from mangle table [ 586.271074][T24966] tipc: Enabling of bearer rejected, failed to enable media [ 586.399842][T24983] GUP no longer grows the stack in syz.4.4636 (24983): 200000003000-20000000a000 (200000001000) [ 586.411374][T24983] CPU: 1 UID: 0 PID: 24983 Comm: syz.4.4636 Not tainted syzkaller #0 PREEMPT(full) [ 586.411397][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.411408][T24983] Call Trace: [ 586.411415][T24983] [ 586.411422][T24983] dump_stack_lvl+0xe8/0x150 [ 586.411449][T24983] __get_user_pages+0x2453/0x29d0 [ 586.411492][T24983] ? __gup_longterm_locked+0xc4e/0x1630 [ 586.411514][T24983] ? down_read_killable+0x1bb/0x340 [ 586.411535][T24983] ? try_get_folio+0xec/0x650 [ 586.411561][T24983] __gup_longterm_locked+0xdcf/0x1630 [ 586.411604][T24983] gup_fast_fallback+0x1d82/0x22e0 [ 586.411656][T24983] ? __pfx_gup_fast_fallback+0x10/0x10 [ 586.411680][T24983] ? is_valid_gup_args+0x11f/0x200 [ 586.411703][T24983] ? get_user_pages_fast+0x4d/0xb0 [ 586.411725][T24983] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 586.411756][T24983] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 586.411780][T24983] iov_iter_get_pages2+0x5e/0xa0 [ 586.411806][T24983] __se_sys_vmsplice+0x7b3/0x1490 [ 586.411843][T24983] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 586.411863][T24983] ? __pfx_futex_wait+0x10/0x10 [ 586.411910][T24983] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 586.411966][T24983] do_syscall_64+0xe2/0xf80 [ 586.411992][T24983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.412008][T24983] ? trace_irq_disable+0x37/0x100 [ 586.412024][T24983] ? clear_bhb_loop+0x60/0xb0 [ 586.412044][T24983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.412061][T24983] RIP: 0033:0x7f711d39aeb9 [ 586.412077][T24983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.412091][T24983] RSP: 002b:00007f711e294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 586.412110][T24983] RAX: ffffffffffffffda RBX: 00007f711d616090 RCX: 00007f711d39aeb9 [ 586.412123][T24983] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 586.412134][T24983] RBP: 00007f711d408c1f R08: 0000000000000000 R09: 0000000000000000 [ 586.412144][T24983] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 586.412155][T24983] R13: 00007f711d616128 R14: 00007f711d616090 R15: 00007ffc2e23d9b8 [ 586.412185][T24983] [ 586.853356][T24997] netlink: 'syz.3.4638': attribute type 2 has an invalid length. [ 586.880274][T25000] FAULT_INJECTION: forcing a failure. [ 586.880274][T25000] name failslab, interval 1, probability 0, space 0, times 0 [ 586.946282][T25000] CPU: 1 UID: 0 PID: 25000 Comm: syz.0.4640 Not tainted syzkaller #0 PREEMPT(full) [ 586.946308][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.946318][T25000] Call Trace: [ 586.946325][T25000] [ 586.946333][T25000] dump_stack_lvl+0xe8/0x150 [ 586.946360][T25000] should_fail_ex+0x412/0x560 [ 586.946385][T25000] should_failslab+0xa8/0x100 [ 586.946406][T25000] __kvmalloc_node_noprof+0x166/0x8d0 [ 586.946426][T25000] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 586.946451][T25000] bpf_test_run_xdp_live+0x223/0x1cf0 [ 586.946475][T25000] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 586.946507][T25000] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 586.946528][T25000] ? __pfx_autoremove_wake_function+0x10/0x10 [ 586.946548][T25000] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 586.946586][T25000] ? 0xffffffffa0201654 [ 586.946621][T25000] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 586.946651][T25000] ? _copy_from_user+0x94/0xb0 [ 586.946672][T25000] ? bpf_test_init+0x113/0x150 [ 586.946687][T25000] ? xdp_convert_md_to_buff+0x5b/0x330 [ 586.946707][T25000] bpf_prog_test_run_xdp+0x81c/0x1160 [ 586.946739][T25000] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.946773][T25000] ? __fget_files+0x2a/0x420 [ 586.946794][T25000] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.946814][T25000] bpf_prog_test_run+0x2c7/0x340 [ 586.946835][T25000] __sys_bpf+0x5cb/0x920 [ 586.946853][T25000] ? __pfx___sys_bpf+0x10/0x10 [ 586.946882][T25000] ? ksys_write+0x242/0x270 [ 586.946905][T25000] ? __pfx_ksys_write+0x10/0x10 [ 586.946934][T25000] __x64_sys_bpf+0x7c/0x90 [ 586.946956][T25000] do_syscall_64+0xe2/0xf80 [ 586.946977][T25000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.946993][T25000] ? trace_irq_disable+0x37/0x100 [ 586.947008][T25000] ? clear_bhb_loop+0x60/0xb0 [ 586.947028][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.947043][T25000] RIP: 0033:0x7f957519aeb9 [ 586.947057][T25000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.947071][T25000] RSP: 002b:00007f95760c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.947090][T25000] RAX: ffffffffffffffda RBX: 00007f9575415fa0 RCX: 00007f957519aeb9 [ 586.947102][T25000] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 586.947112][T25000] RBP: 00007f95760c5090 R08: 0000000000000000 R09: 0000000000000000 [ 586.947126][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.947136][T25000] R13: 00007f9575416038 R14: 00007f9575415fa0 R15: 00007ffc68eddf68 [ 586.947163][T25000] [ 587.253256][T24997] !9: entered promiscuous mode [ 587.421568][T24992] netlink: 'syz.4.4639': attribute type 13 has an invalid length. [ 587.432308][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4642'. [ 587.659297][T24999] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 587.676877][T25011] netlink: 'syz.0.4641': attribute type 2 has an invalid length. [ 587.787696][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 588.058061][T25014] IPv6: sit1: Disabled Multicast RS [ 588.089895][T25019] bridge_slave_0: left allmulticast mode [ 588.104678][T25019] bridge_slave_0: left promiscuous mode [ 588.110635][T25019] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.388417][T25033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4645'. [ 588.550946][T25035] syzkaller0: entered promiscuous mode [ 588.558089][T25035] syzkaller0: entered allmulticast mode [ 588.585008][T25039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4647'. [ 590.308981][T25061] FAULT_INJECTION: forcing a failure. [ 590.308981][T25061] name failslab, interval 1, probability 0, space 0, times 0 [ 590.323259][T25061] CPU: 0 UID: 0 PID: 25061 Comm: syz.4.4652 Not tainted syzkaller #0 PREEMPT(full) [ 590.323281][T25061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 590.323290][T25061] Call Trace: [ 590.323296][T25061] [ 590.323303][T25061] dump_stack_lvl+0xe8/0x150 [ 590.323326][T25061] should_fail_ex+0x412/0x560 [ 590.323360][T25061] should_failslab+0xa8/0x100 [ 590.323378][T25061] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 590.323394][T25061] ? page_pool_create_percpu+0x76/0xb80 [ 590.323418][T25061] page_pool_create_percpu+0x76/0xb80 [ 590.323437][T25061] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 590.323459][T25061] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 590.323480][T25061] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 590.323507][T25061] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 590.323525][T25061] ? __pfx_autoremove_wake_function+0x10/0x10 [ 590.323546][T25061] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 590.323579][T25061] ? 0xffffffffa0201654 [ 590.323613][T25061] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 590.323638][T25061] ? _copy_from_user+0x94/0xb0 [ 590.323658][T25061] ? bpf_test_init+0x113/0x150 [ 590.323671][T25061] ? xdp_convert_md_to_buff+0x5b/0x330 [ 590.323689][T25061] bpf_prog_test_run_xdp+0x81c/0x1160 [ 590.323717][T25061] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 590.323737][T25061] ? __fget_files+0x2a/0x420 [ 590.323757][T25061] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 590.323774][T25061] bpf_prog_test_run+0x2c7/0x340 [ 590.323794][T25061] __sys_bpf+0x5cb/0x920 [ 590.323810][T25061] ? __pfx___sys_bpf+0x10/0x10 [ 590.323837][T25061] ? ksys_write+0x242/0x270 [ 590.323857][T25061] ? __pfx_ksys_write+0x10/0x10 [ 590.323882][T25061] __x64_sys_bpf+0x7c/0x90 [ 590.323902][T25061] do_syscall_64+0xe2/0xf80 [ 590.323920][T25061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.323933][T25061] ? trace_irq_disable+0x37/0x100 [ 590.323947][T25061] ? clear_bhb_loop+0x60/0xb0 [ 590.323964][T25061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.323978][T25061] RIP: 0033:0x7f711d39aeb9 [ 590.323992][T25061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.324004][T25061] RSP: 002b:00007f711e2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.324022][T25061] RAX: ffffffffffffffda RBX: 00007f711d615fa0 RCX: 00007f711d39aeb9 [ 590.324032][T25061] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 590.324041][T25061] RBP: 00007f711e2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 590.324050][T25061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.324059][T25061] R13: 00007f711d616038 R14: 00007f711d615fa0 R15: 00007ffc2e23d9b8 [ 590.324084][T25061] [ 590.660427][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4653'. [ 590.999950][T25063] vlan4: entered promiscuous mode [ 591.098221][T25069] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 591.157166][T25069] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4654'. [ 591.232977][T25069] netlink: 'syz.1.4654': attribute type 9 has an invalid length. [ 591.264511][T25069] netlink: 'syz.1.4654': attribute type 11 has an invalid length. [ 591.272355][T25069] netlink: 'syz.1.4654': attribute type 12 has an invalid length. [ 591.304587][T25069] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4654'. [ 591.316442][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'. [ 592.745155][T25090] netlink: 'syz.3.4658': attribute type 13 has an invalid length. [ 592.849889][T25124] FAULT_INJECTION: forcing a failure. [ 592.849889][T25124] name failslab, interval 1, probability 0, space 0, times 0 [ 592.881861][T25124] CPU: 1 UID: 0 PID: 25124 Comm: syz.0.4663 Not tainted syzkaller #0 PREEMPT(full) [ 592.881888][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 592.881896][T25124] Call Trace: [ 592.881903][T25124] [ 592.881909][T25124] dump_stack_lvl+0xe8/0x150 [ 592.881932][T25124] should_fail_ex+0x412/0x560 [ 592.881951][T25124] should_failslab+0xa8/0x100 [ 592.881967][T25124] __kvmalloc_node_noprof+0x166/0x8d0 [ 592.881982][T25124] ? page_pool_create_percpu+0x2dd/0xb80 [ 592.882000][T25124] ? page_pool_create_percpu+0xaf/0xb80 [ 592.882021][T25124] page_pool_create_percpu+0x2dd/0xb80 [ 592.882045][T25124] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 592.882065][T25124] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 592.882091][T25124] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 592.882107][T25124] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.882125][T25124] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 592.882154][T25124] ? 0xffffffffa020165c [ 592.882185][T25124] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 592.882207][T25124] ? _copy_from_user+0x94/0xb0 [ 592.882225][T25124] ? bpf_test_init+0x113/0x150 [ 592.882238][T25124] ? xdp_convert_md_to_buff+0x5b/0x330 [ 592.882254][T25124] bpf_prog_test_run_xdp+0x81c/0x1160 [ 592.882280][T25124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 592.882298][T25124] ? __fget_files+0x2a/0x420 [ 592.882316][T25124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 592.882331][T25124] bpf_prog_test_run+0x2c7/0x340 [ 592.882348][T25124] __sys_bpf+0x5cb/0x920 [ 592.882369][T25124] ? __pfx___sys_bpf+0x10/0x10 [ 592.882393][T25124] ? ksys_write+0x242/0x270 [ 592.882412][T25124] ? __pfx_ksys_write+0x10/0x10 [ 592.882434][T25124] __x64_sys_bpf+0x7c/0x90 [ 592.882452][T25124] do_syscall_64+0xe2/0xf80 [ 592.882468][T25124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.882481][T25124] ? trace_irq_disable+0x37/0x100 [ 592.882493][T25124] ? clear_bhb_loop+0x60/0xb0 [ 592.882509][T25124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.882521][T25124] RIP: 0033:0x7f957519aeb9 [ 592.882533][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.882544][T25124] RSP: 002b:00007f95760c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.882560][T25124] RAX: ffffffffffffffda RBX: 00007f9575415fa0 RCX: 00007f957519aeb9 [ 592.882569][T25124] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 592.882578][T25124] RBP: 00007f95760c5090 R08: 0000000000000000 R09: 0000000000000000 [ 592.882586][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.882594][T25124] R13: 00007f9575416038 R14: 00007f9575415fa0 R15: 00007ffc68eddf68 [ 592.882615][T25124] [ 592.882625][T25124] page_pool_create_percpu() gave up with errno -12 [ 593.358544][T25126] syzkaller0: entered promiscuous mode [ 593.371771][T25126] syzkaller0: entered allmulticast mode [ 593.602436][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4667'. [ 595.675465][T25164] vlan2: left promiscuous mode [ 595.680279][T25164] bond5: left promiscuous mode [ 595.687795][T25164] vlan2: left allmulticast mode [ 595.692867][T25164] bond5: left allmulticast mode [ 595.701395][T25164] vlan3: left promiscuous mode [ 595.727659][T25164] vlan4: left allmulticast mode [ 595.739656][T25164] dummy0: left allmulticast mode [ 595.785647][T25164] bond6: left promiscuous mode [ 595.790732][T25164] bond6: left allmulticast mode [ 595.805515][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 595.825927][T25174] netlink: 'syz.0.4670': attribute type 29 has an invalid length. [ 595.911379][T25184] netlink: 'syz.0.4670': attribute type 29 has an invalid length. [ 595.915704][T25172] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.994852][T25187] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.002652][T25187] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.010209][T25187] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.017698][T25187] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.061288][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4672'. [ 596.870864][T25206] netlink: 'syz.3.4677': attribute type 13 has an invalid length. [ 597.328273][T25218] sctp: [Deprecated]: syz.1.4678 (pid 25218) Use of int in maxseg socket option. [ 597.328273][T25218] Use struct sctp_assoc_value instead [ 597.652199][T25230] syzkaller0: entered promiscuous mode [ 597.658036][T25230] syzkaller0: entered allmulticast mode [ 597.996561][T25249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4684'. [ 598.109052][T25251] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4685'. [ 599.348547][T25239] team_slave_0: left promiscuous mode [ 599.357469][T25239] vlan2: left promiscuous mode [ 599.362248][T25239] batadv0: left promiscuous mode [ 599.372087][T25239] gretap1: left allmulticast mode [ 599.386800][T25246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4684'. [ 599.597240][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 599.626876][T25273] tipc: Resetting bearer [ 599.687266][T25269] vlan4: entered promiscuous mode [ 599.852697][T25284] netlink: 'syz.2.4694': attribute type 13 has an invalid length. [ 599.871594][T25284] netlink: 14589 bytes leftover after parsing attributes in process `syz.2.4694'. [ 599.910593][T25278] lo: Caught tx_queue_len zero misconfig [ 600.019085][T25296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4696'. [ 600.438462][T25304] syzkaller0: entered promiscuous mode [ 600.496505][T25304] syzkaller0: entered allmulticast mode [ 600.523864][T25306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.857667][T25326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4701'. [ 601.112586][T25334] openvswitch: netlink: IP tunnel dst address not specified [ 602.406000][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4701'. [ 602.571377][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 602.606407][T25360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4710'. [ 602.692151][T25368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.876988][T25378] vlan2: left promiscuous mode [ 602.941022][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4714'. [ 603.410544][T25403] geneve0: left promiscuous mode [ 603.468143][ T7316] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.494568][ T7316] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.517592][ T7316] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.536628][ T7316] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.559045][ T7316] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.604586][ T7316] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.635038][ T7316] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.676344][ T7316] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.702254][T25410] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 603.721872][T25410] geneve0: entered promiscuous mode [ 603.737768][T25410] geneve0: entered allmulticast mode [ 603.757017][T25420] tipc: New replicast peer: 255.255.255.255 [ 603.763895][T25420] tipc: Enabled bearer , priority 10 [ 603.769260][T25429] netlink: 'syz.4.4721': attribute type 13 has an invalid length. [ 604.091163][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4724'. [ 604.201104][T25438] netlink: 'syz.1.4725': attribute type 10 has an invalid length. [ 604.201104][T25437] netlink: 'syz.1.4725': attribute type 10 has an invalid length. [ 604.245782][T25437] team0: Port device geneve0 added [ 604.278919][T25438] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 604.551897][T25422] ip6erspan0: entered allmulticast mode [ 604.671096][T25443] nr2: entered promiscuous mode [ 604.803623][T25443] nr2: entered allmulticast mode [ 605.222854][T25477] __nla_validate_parse: 2 callbacks suppressed [ 605.222873][T25477] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4733'. [ 605.322379][T25479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4734'. [ 605.364175][T25479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4734'. [ 605.375496][T25479] netlink: 'syz.4.4734': attribute type 5 has an invalid length. [ 605.783572][T25498] netlink: 29 bytes leftover after parsing attributes in process `syz.4.4737'. [ 606.644676][T25518] wg1: entered promiscuous mode [ 606.649981][T25518] wg1: entered allmulticast mode [ 606.680500][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4741'. [ 606.699212][T25518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4740'. [ 607.344142][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 607.465471][T25549] lo: Caught tx_queue_len zero misconfig [ 607.465489][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 607.528015][T25555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4745'. [ 607.553962][ T4302] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.565930][ T4302] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.585086][ T4302] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.642906][ T4302] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.958387][T25571] syzkaller0: entered promiscuous mode [ 607.976131][T25571] syzkaller0: entered allmulticast mode [ 607.988169][T25576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'. [ 609.077797][T25614] netlink: 'syz.0.4759': attribute type 10 has an invalid length. [ 609.090763][T25613] netlink: 'syz.0.4759': attribute type 10 has an invalid length. [ 609.105265][T25613] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 609.225185][T25622] sit1: entered promiscuous mode [ 609.935765][T25648] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 610.108475][T25659] x_tables: duplicate underflow at hook 1 [ 610.119760][T25659] netlink: 'syz.0.4769': attribute type 3 has an invalid length. [ 610.399157][T25669] __nla_validate_parse: 1 callbacks suppressed [ 610.399178][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4771'. [ 610.530039][T25669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4771'. [ 610.615069][T25678] netlink: 'syz.4.4773': attribute type 1 has an invalid length. [ 611.222679][T25671] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:21 [ 611.629332][T25723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.652252][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4781'. [ 611.676559][T25723] macvlan0: entered promiscuous mode [ 611.724657][T25730] vxcan1: Caught tx_queue_len zero misconfig [ 611.807802][T25732] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 611.896386][T25731] syzkaller0: entered promiscuous mode [ 611.905214][T25731] syzkaller0: entered allmulticast mode [ 612.012078][T25746] sit2: entered promiscuous mode [ 612.362375][T25758] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20001 [ 614.833955][T25829] netlink: 'syz.3.4806': attribute type 1 has an invalid length. [ 615.076522][T25829] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.084066][T25830] bond7: entered promiscuous mode [ 615.122024][T25833] bond7: (slave dummy0): making interface the new active one [ 615.130348][T25833] dummy0: entered promiscuous mode [ 615.137240][T25833] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 615.152754][T25834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'. [ 615.161880][T25834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'. [ 615.171014][T25834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4806'. [ 615.342525][T25834] bond7: left promiscuous mode [ 615.354647][T25834] dummy0: left promiscuous mode [ 615.844665][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4815'. [ 615.905533][T25874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4815'. [ 616.176234][T25893] syzkaller0: entered promiscuous mode [ 616.181872][T25893] syzkaller0: entered allmulticast mode [ 616.201176][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4820'. [ 616.976743][T25935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4829'. [ 617.057018][T25935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4829'. [ 617.263894][T25940] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 617.382795][T25943] netlink: 'syz.0.4831': attribute type 1 has an invalid length. [ 617.413140][T25943] bond2: entered promiscuous mode [ 617.419548][T25943] bond2: entered allmulticast mode [ 617.428305][T25943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4831'. [ 617.440202][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'. [ 617.452901][T25943] bond2: left promiscuous mode [ 617.464597][T25943] bond2: left allmulticast mode [ 617.469919][T25943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.668088][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'. [ 617.716116][T25956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4835'. [ 617.880548][T25967] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 617.900327][T25968] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 617.927063][T25965] ip6erspan1: entered allmulticast mode [ 617.987722][T25965] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 618.023502][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4838'. [ 618.181128][T25982] netlink: 'syz.2.4841': attribute type 1 has an invalid length. [ 619.340136][T26014] macvlan0: entered promiscuous mode [ 619.868342][T26040] netlink: 'syz.1.4854': attribute type 2 has an invalid length. [ 620.928674][T26089] bond2: (slave netdevsim1): Device is not bonding slave [ 620.950048][T26089] bond2: option active_slave: invalid value (netdevsim1) [ 620.970754][T26089] bond2 (unregistering): Released all slaves [ 622.775844][T26156] __nla_validate_parse: 12 callbacks suppressed [ 622.775863][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4879'. [ 622.819242][T26149] 9: renamed from lo [ 623.320902][T26183] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 623.342087][T26183] openvswitch: netlink: Message has 16 unknown bytes. [ 623.446132][T26185] lo: Caught tx_queue_len zero misconfig [ 623.455268][T26185] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 623.831625][T26214] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4892'. [ 624.256025][T26230] netlink: 250 bytes leftover after parsing attributes in process `syz.2.4897'. [ 624.363953][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.426324][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4901'. [ 624.446531][T26247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4901'. [ 624.651844][T26261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4904'. [ 624.714148][ T36] bridge_slave_1: left allmulticast mode [ 624.725516][ T36] bridge_slave_1: left promiscuous mode [ 624.747068][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.807989][ T36] bridge_slave_0: left allmulticast mode [ 624.829398][ T36] bridge_slave_0: left promiscuous mode [ 624.854296][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.529557][ T36] batman_adv: batadv0: Removing interface: gretap3 [ 626.110661][ T36] bond2 (unregistering): (slave macvlan0): Releasing backup interface [ 626.124590][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.134982][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.144884][ T36] bond0 (unregistering): Released all slaves [ 626.156239][ T36] bond1 (unregistering): Released all slaves [ 626.255969][ T36] bond2 (unregistering): Released all slaves [ 626.352717][ T36] bond3 (unregistering): Released all slaves [ 626.365040][ T36] bond4 (unregistering): Released all slaves [ 626.480163][ T36] bond5 (unregistering): (slave bond6): Releasing backup interface [ 626.489878][ T36] bond5 (unregistering): Released all slaves [ 626.613847][ T36] bond6 (unregistering): Released all slaves [ 626.626087][ T36] bond7 (unregistering): Released all slaves [ 626.782413][ T36] bond8 (unregistering): Released all slaves [ 626.879928][ T36] bond9 (unregistering): Released all slaves [ 626.894317][T26263] IPv6: sit2: Disabled Multicast RS [ 626.971117][T26309] bond0: (slave sit0): Error: Device type is different from other slaves [ 627.138494][T26322] netlink: 'syz.3.4918': attribute type 2 has an invalid length. [ 627.190527][ T36] tipc: Left network mode [ 627.389157][T26333] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4920'. [ 627.491402][T26336] tipc: Enabled bearer , priority 0 [ 627.703288][T26336] syzkaller0: entered promiscuous mode [ 627.735397][T26336] syzkaller0: entered allmulticast mode [ 627.766256][T26336] tipc: Resetting bearer [ 627.833825][T26335] tipc: Resetting bearer [ 627.937407][T26365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4927'. [ 629.629307][T26335] tipc: Disabling bearer [ 629.737381][T26392] netlink: 'syz.2.4931': attribute type 3 has an invalid length. [ 629.748098][T26392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4931'. [ 629.776916][T26390] xfrm0: entered promiscuous mode [ 629.915101][T26403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4933'. [ 629.944701][T26403] openvswitch: netlink: Flow key attr not present in new flow. [ 630.025708][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 630.043061][T26413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4936'. [ 630.062613][T26408] xt_hashlimit: max too large, truncated to 1048576 [ 630.085008][T26408] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 630.389681][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4940'. [ 630.432656][T26428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4940'. [ 630.521582][T26437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4942'. [ 630.562398][T26428] geneve2: entered promiscuous mode [ 630.569800][T26428] geneve2: entered allmulticast mode [ 630.838836][ T4302] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.855426][ T4302] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.867826][ T4302] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.885981][ T4302] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.236293][T26460] tipc: Enabling of bearer rejected, failed to enable media [ 631.381865][T26460] syzkaller0: entered promiscuous mode [ 631.388006][T26460] syzkaller0: entered allmulticast mode [ 632.173235][T26493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4953'. [ 633.517257][ T36] hsr_slave_0: left promiscuous mode [ 633.523860][ T36] hsr_slave_1: left promiscuous mode [ 633.530098][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.538024][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.165506][T26492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4953'. [ 634.615350][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 634.633147][T26524] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 634.735416][T26524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4962'. [ 634.939368][T26528] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 635.237370][ T36] IPVS: stop unused estimator thread 0... [ 635.420022][T26545] tipc: Enabling of bearer rejected, failed to enable media [ 635.539947][T26563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 635.578453][T26545] syzkaller0: entered promiscuous mode [ 635.609186][T26545] syzkaller0: entered allmulticast mode [ 635.617814][T26567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4970'. [ 635.808049][T26576] netlink: 'syz.4.4973': attribute type 1 has an invalid length. [ 635.841451][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4973'. [ 637.704348][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4981'. [ 638.059295][T26632] tipc: Resetting bearer [ 638.129717][T26654] netlink: 712 bytes leftover after parsing attributes in process `syz.3.4988'. [ 638.154514][T26654] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.4988'. [ 638.171471][T26632] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 638.191794][T26654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4988'. [ 638.488789][T26641] netlink: 'syz.0.4987': attribute type 39 has an invalid length. [ 638.858373][T26685] tipc: Enabling of bearer rejected, failed to enable media [ 639.021381][T26685] syzkaller0: entered promiscuous mode [ 639.042801][T26685] syzkaller0: entered allmulticast mode [ 639.970461][T26706] __nla_validate_parse: 2 callbacks suppressed [ 639.970479][T26706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4998'. [ 640.774940][T26704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4998'. [ 641.137044][T26734] lo speed is unknown, defaulting to 1000 [ 641.139065][T26740] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 641.322393][T26734] lo speed is unknown, defaulting to 1000 [ 641.412332][T26734] lo speed is unknown, defaulting to 1000 [ 641.619691][T26760] tipc: Enabling of bearer rejected, failed to enable media [ 641.815741][T26760] syzkaller0: entered promiscuous mode [ 641.832006][T26760] syzkaller0: entered allmulticast mode [ 642.155148][T26792] netlink: 'syz.1.5017': attribute type 5 has an invalid length. [ 642.177465][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5017'. [ 642.264731][T26734] infiniband syz0: set down [ 642.290567][T26734] infiniband syz0: added lo [ 642.297636][T26734] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 642.299628][T26734] infiniband syz0: Couldn't open port 1 [ 642.331863][T26734] RDS/IB: syz0: added [ 642.336160][T26734] smc: adding ib device syz0 with port count 1 [ 642.342343][T26734] smc: ib device syz0 port 1 has no pnetid [ 643.576215][ T5904] lo speed is unknown, defaulting to 1000 [ 643.611602][ T5956] lo speed is unknown, defaulting to 1000 [ 643.644935][T26734] lo speed is unknown, defaulting to 1000 [ 643.718979][T26801] nft_compat: unsupported protocol 1 [ 643.920185][T26814] netlink: 'syz.0.5022': attribute type 1 has an invalid length. [ 644.161575][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5024'. [ 644.191322][ T4302] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.221889][T26822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5024'. [ 644.228848][ T4302] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.262985][ T4302] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.296797][T26734] lo speed is unknown, defaulting to 1000 [ 644.302629][ T4302] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.415912][T26836] netlink: 'syz.3.5026': attribute type 1 has an invalid length. [ 644.550540][T26836] 8021q: adding VLAN 0 to HW filter on device bond8 [ 644.588401][T26836] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5026'. [ 644.680205][T26836] bond8: entered promiscuous mode [ 644.686889][T26836] bond8: entered allmulticast mode [ 644.736105][T26852] macvlan0: left promiscuous mode [ 644.749042][T26852] sit2: left promiscuous mode [ 644.960946][T26860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5029'. [ 645.034453][T26862] netlink: 'syz.0.5031': attribute type 5 has an invalid length. [ 645.042310][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 645.103681][T26868] tipc: Enabling of bearer rejected, failed to enable media [ 645.171075][T26734] lo speed is unknown, defaulting to 1000 [ 645.822368][T26859] syzkaller0: entered promiscuous mode [ 645.844582][T26859] syzkaller0: entered allmulticast mode [ 647.461596][T26734] lo speed is unknown, defaulting to 1000 [ 647.463886][T26883] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5034'. [ 647.494552][T26883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.077149][T26918] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5040'. [ 648.077599][T26734] lo speed is unknown, defaulting to 1000 [ 648.131853][T26918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5040'. [ 648.155523][T26920] netlink: 'syz.4.5042': attribute type 5 has an invalid length. [ 648.163367][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5042'. [ 648.538618][T26939] tipc: Enabling of bearer rejected, failed to enable media [ 648.671219][T26939] syzkaller0: entered promiscuous mode [ 648.677663][T26939] syzkaller0: entered allmulticast mode [ 648.691269][T26734] lo speed is unknown, defaulting to 1000 [ 650.190626][T26951] syzkaller0: entered promiscuous mode [ 650.196380][T26951] syzkaller0: entered allmulticast mode [ 650.204793][T26734] lo speed is unknown, defaulting to 1000 [ 650.424808][T26959] bond0: (slave rose0): Releasing backup interface [ 650.592695][T26734] lo speed is unknown, defaulting to 1000 [ 651.351752][T27001] tipc: Enabling of bearer rejected, failed to enable media [ 651.487360][T27011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5061'. [ 651.503627][T27001] syzkaller0: entered promiscuous mode [ 651.510113][T27001] syzkaller0: entered allmulticast mode [ 653.294127][T27020] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 653.418890][T27036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5067'. [ 653.437420][T26950] lo speed is unknown, defaulting to 1000 [ 653.494955][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 653.553646][T27042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5069'. [ 653.905638][T27062] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 654.060611][T27064] syzkaller0: entered promiscuous mode [ 654.068854][T27069] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5075'. [ 654.090400][T27064] syzkaller0: entered allmulticast mode [ 655.838289][ T30] audit: type=1107 audit(1770230305.635:11): pid=27082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 655.979106][T27083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5080'. [ 656.207321][T27092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5082'. [ 656.270736][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5082'. [ 656.300797][T27097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'. [ 656.400844][T27097] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 656.822065][T27108] wg1: left promiscuous mode [ 656.827510][T27108] wg1: left allmulticast mode [ 656.850320][T27108] veth0_to_bridge: left allmulticast mode [ 656.945258][T27108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.974024][T27108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.108804][T27108] gretap2: left allmulticast mode [ 657.115053][T27108] vlan2: left promiscuous mode [ 657.119854][T27108] bridge0: left promiscuous mode [ 657.128676][T27108] vlan3: left promiscuous mode [ 657.136121][T27108] sit1: left allmulticast mode [ 657.142960][T27108] macvtap1: left promiscuous mode [ 657.190285][ T1318] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.217775][ T1318] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.237367][ T1318] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.254561][ T1318] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.292769][T27125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5088'. [ 657.510176][T27130] syzkaller0: entered promiscuous mode [ 657.515838][T27130] syzkaller0: entered allmulticast mode [ 657.522849][T27136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5092'. [ 659.023805][T27087] lo speed is unknown, defaulting to 1000 [ 659.196093][T27150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5096'. [ 659.259598][T27150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5096'. [ 659.454248][T27166] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 660.110507][T27160] lo speed is unknown, defaulting to 1000 [ 660.728760][T27196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 660.758621][T27196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 660.770645][T27196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 660.788882][T27196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 660.858416][ T30] audit: type=1107 audit(1770230310.645:12): pid=27187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 660.927959][T27188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.949544][T27188] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.985286][T27188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.026482][ T5904] lo speed is unknown, defaulting to 1000 [ 661.042581][ T5904] syz0: Port: 1 Link ACTIVE [ 661.062290][ T40] lo speed is unknown, defaulting to 1000 [ 661.243435][T27211] syzkaller1: entered promiscuous mode [ 661.249350][T27211] syzkaller1: entered allmulticast mode [ 661.352366][T27217] syzkaller0: entered promiscuous mode [ 661.358315][T27217] syzkaller0: entered allmulticast mode [ 663.731394][T27236] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5110'. [ 664.055480][T27273] syzkaller0: entered promiscuous mode [ 664.061112][T27273] syzkaller0: entered allmulticast mode [ 664.089986][T27280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5121'. [ 665.547001][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5121'. [ 666.048027][T27258] lo speed is unknown, defaulting to 1000 [ 666.117836][T27322] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 666.504672][T27339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5134'. [ 666.575723][T27339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5134'. [ 666.811680][T27350] syzkaller0: entered promiscuous mode [ 666.817500][T27350] syzkaller0: entered allmulticast mode [ 667.091625][ T4302] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 667.328530][T27384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5146'. [ 667.376360][T27387] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5147'. [ 667.394131][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5147'. [ 667.405000][T27387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5147'. [ 667.524330][T27394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5148'. [ 668.795529][T27306] lo speed is unknown, defaulting to 1000 [ 668.795551][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5148'. [ 669.075580][T27413] veth0: entered promiscuous mode [ 669.087898][T27413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5152'. [ 669.148540][T27413] veth0 (unregistering): left promiscuous mode [ 670.069093][T27459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'. [ 670.139359][T27452] syzkaller0: entered promiscuous mode [ 670.197738][T27452] syzkaller0: entered allmulticast mode [ 670.212141][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'. [ 670.386961][T27471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5165'. [ 670.515086][T27472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5165'. [ 672.007228][T27415] lo speed is unknown, defaulting to 1000 [ 672.383330][T27494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'. [ 672.559392][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 672.708407][T27499] : entered promiscuous mode [ 672.890151][T27501] hsr_slave_1 (unregistering): left promiscuous mode [ 673.187809][T27486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5167'. [ 673.247606][T27519] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 673.253657][T27519] pim6reg1: linktype set to 776 [ 673.482750][T27525] syzkaller0: entered promiscuous mode [ 673.499138][T27525] syzkaller0: entered allmulticast mode [ 673.603620][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5177'. [ 675.086761][T27481] lo speed is unknown, defaulting to 1000 [ 675.236637][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5181'. [ 675.342700][T27547] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5184'. [ 675.524103][T27557] netlink: zone id is out of range [ 675.531605][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.547588][T27557] netlink: zone id is out of range [ 675.552720][T27557] netlink: zone id is out of range [ 675.568948][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.598276][T27557] netlink: zone id is out of range [ 675.607999][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.617528][T27557] netlink: zone id is out of range [ 675.622723][T27557] netlink: zone id is out of range [ 675.649539][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.689687][T27557] netlink: zone id is out of range [ 675.713766][T27557] netlink: zone id is out of range [ 675.723836][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.735906][T27557] netlink: zone id is out of range [ 675.741032][T27557] netlink: zone id is out of range [ 675.750688][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.823753][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 675.854995][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 676.031095][T27574] IPVS: persistence engine module ip_vs_pe_ not found [ 676.242254][T27580] syzkaller0: entered promiscuous mode [ 676.259353][T27580] syzkaller0: entered allmulticast mode [ 678.259483][T27612] netlink: 'syz.4.5198': attribute type 1 has an invalid length. [ 678.455399][T27628] x_tables: duplicate underflow at hook 2 [ 678.789633][T27650] netlink: 'syz.2.5206': attribute type 10 has an invalid length. [ 678.831564][T27650] team0: Failed to send options change via netlink (err -105) [ 678.854821][T27650] team0: Port device dummy0 added [ 678.860709][T27654] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 678.942706][T27656] wg1 speed is unknown, defaulting to 1000 [ 678.958387][T27656] wg1 speed is unknown, defaulting to 1000 [ 678.977157][T27656] wg1 speed is unknown, defaulting to 1000 [ 679.029214][T27656] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 679.071977][T27656] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 679.206576][T27666] syzkaller0: entered promiscuous mode [ 679.212176][T27666] syzkaller0: entered allmulticast mode [ 679.329556][T27656] wg1 speed is unknown, defaulting to 1000 [ 679.439537][T27685] netlink: 'syz.4.5212': attribute type 15 has an invalid length. [ 679.546214][T27690] netlink: 'syz.0.5215': attribute type 3 has an invalid length. [ 680.965594][T27677] __nla_validate_parse: 66 callbacks suppressed [ 680.965607][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5212'. [ 680.982199][T27656] wg1 speed is unknown, defaulting to 1000 [ 680.989896][T27656] wg1 speed is unknown, defaulting to 1000 [ 680.997823][T27656] wg1 speed is unknown, defaulting to 1000 [ 681.161130][T27706] netlink: 208244 bytes leftover after parsing attributes in process `syz.2.5217'. [ 681.171093][T27706] net_ratelimit: 35 callbacks suppressed [ 681.171110][T27706] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 682.340314][T19182] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 682.364966][T19182] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 682.480750][T19182] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 682.843483][T19182] bond1 (unregistering): (slave bond2): Releasing backup interface [ 682.852149][T19182] bond1 (unregistering): Released all slaves [ 682.948492][T19182] bond2 (unregistering): Released all slaves [ 683.042635][T19182] bond3 (unregistering): Released all slaves [ 683.143762][T19182] bond0 (unregistering): Released all slaves [ 683.251067][T19182] bond4 (unregistering): (slave bond5): Releasing backup interface [ 683.259922][T19182] bond4 (unregistering): Released all slaves [ 683.357019][T19182] bond5 (unregistering): Released all slaves [ 683.453882][T19182] bond6 (unregistering): Released all slaves [ 683.467364][T19182] bond7 (unregistering): Released all slaves [ 683.479330][T19182] bond8 (unregistering): Released all slaves [ 683.490265][T27656] wg1 speed is unknown, defaulting to 1000 [ 683.529817][T27711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5220'. [ 683.580607][T27713] vlan4: entered allmulticast mode [ 683.602931][T27713] macvtap0: entered allmulticast mode [ 683.608972][T27717] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5221'. [ 683.678445][T27656] wg1 speed is unknown, defaulting to 1000 [ 683.686007][T27715] netlink: 'syz.0.5222': attribute type 5 has an invalid length. [ 683.694284][T19182] tipc: Disabling bearer [ 683.751694][T19182] tipc: Disabling bearer [ 683.808775][T19182] tipc: Left network mode [ 683.817174][T27656] wg1 speed is unknown, defaulting to 1000 [ 683.817411][T27723] dummy0: Caught tx_queue_len zero misconfig [ 683.923701][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.963123][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.983486][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.002149][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5228'. [ 684.002552][T27723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.038292][T27723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.049481][T27723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.062118][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.069395][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5228'. [ 684.072440][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.139384][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.254003][T27756] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 684.394320][T27754] xfrm1: entered allmulticast mode [ 684.499771][T27772] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5234'. [ 684.577764][T27778] netlink: 708 bytes leftover after parsing attributes in process `syz.2.5236'. [ 684.589843][T27758] syzkaller0: entered promiscuous mode [ 684.618253][T27758] syzkaller0: entered allmulticast mode [ 685.026559][T27803] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5238'. [ 685.798106][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.582652][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5243'. [ 686.646069][T27826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5246'. [ 686.690074][T27827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5244'. [ 686.712662][T27821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5244'. [ 686.896518][T27837] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5248'. [ 687.239277][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5252'. [ 687.272498][T27849] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5252'. [ 687.287390][T27847] syzkaller0: entered promiscuous mode [ 687.298935][T27847] syzkaller0: entered allmulticast mode [ 687.312500][T27849] x_tables: duplicate underflow at hook 1 [ 687.547278][T27860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5253'. [ 689.124603][T27793] lo speed is unknown, defaulting to 1000 [ 689.133173][ T5483] veth0_vlan: left promiscuous mode [ 689.185989][ T5483] veth0_vlan: entered promiscuous mode [ 689.233966][T27872] tipc: Enabled bearer , priority 0 [ 689.242152][T27871] syzkaller0: entered promiscuous mode [ 689.248079][T27871] syzkaller0: entered allmulticast mode [ 689.425178][T27870] tipc: Resetting bearer [ 689.522794][T27870] tipc: Disabling bearer [ 689.615482][T27897] xfrm0: left promiscuous mode [ 689.620911][T27897] geneve2: left promiscuous mode [ 689.626621][T27897] bond8: left promiscuous mode [ 689.776975][T27793] wg1 speed is unknown, defaulting to 1000 [ 690.209369][T19182] hsr_slave_0: left promiscuous mode [ 690.222479][T19182] hsr_slave_1: left promiscuous mode [ 690.230544][T19182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.238970][T19182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.358937][T27935] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20003 [ 690.775070][T19182] team0 (unregistering): Port device team_slave_1 removed [ 690.811665][T19182] team0 (unregistering): Port device team_slave_0 removed [ 690.821108][ T36] smc: removing ib device !yz! [ 690.889222][ T50] smc: removing ib device sy [ 691.098245][T19182] team0 (unregistering): Port device 4@0 removed [ 691.229966][T27921] syzkaller0: entered promiscuous mode [ 691.235798][T27921] syzkaller0: entered allmulticast mode [ 691.558354][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5268'. [ 691.614503][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5268'. [ 691.626229][T27953] netlink: 'syz.3.5268': attribute type 8 has an invalid length. [ 693.480205][T27960] veth0_vlan: left promiscuous mode [ 693.869134][T27986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5278'. [ 694.014753][T27994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5279'. [ 694.890767][T28017] syzkaller0: entered promiscuous mode [ 694.896421][T28017] syzkaller0: entered allmulticast mode [ 694.924919][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5286'. [ 697.327680][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5285'. [ 697.336963][T28027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5285'. [ 697.346000][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5285'. [ 697.355125][T28027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5285'. [ 697.364112][T28027] netlink: 'syz.3.5285': attribute type 6 has an invalid length. [ 697.374897][T28036] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 697.560374][T28069] IPVS: length: 132 != 8 [ 697.576050][T28075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5292'. [ 697.742245][T28081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5293'. [ 697.790519][T28081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5293'. [ 697.859450][T19182] IPVS: stop unused estimator thread 0... [ 697.956493][T28095] FAULT_INJECTION: forcing a failure. [ 697.956493][T28095] name failslab, interval 1, probability 0, space 0, times 0 [ 698.015414][T28095] CPU: 1 UID: 0 PID: 28095 Comm: syz.4.5297 Not tainted syzkaller #0 PREEMPT(full) [ 698.015438][T28095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 698.015448][T28095] Call Trace: [ 698.015454][T28095] [ 698.015462][T28095] dump_stack_lvl+0xe8/0x150 [ 698.015487][T28095] should_fail_ex+0x412/0x560 [ 698.015512][T28095] should_failslab+0xa8/0x100 [ 698.015532][T28095] __kvmalloc_node_noprof+0x166/0x8d0 [ 698.015551][T28095] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 698.015573][T28095] alloc_netdev_mqs+0x8a6/0x11b0 [ 698.015596][T28095] l2tp_eth_create+0x1c5/0xbe0 [ 698.015615][T28095] ? lockdep_hardirqs_on+0x7a/0x110 [ 698.015635][T28095] ? __local_bh_enable_ip+0xd0/0x130 [ 698.015650][T28095] ? l2tp_tunnel_get+0x392/0x420 [ 698.015672][T28095] ? __pfx_l2tp_eth_create+0x10/0x10 [ 698.015700][T28095] l2tp_nl_cmd_session_create+0x766/0xc60 [ 698.015728][T28095] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 698.015754][T28095] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 698.015784][T28095] genl_family_rcv_msg_doit+0x22a/0x330 [ 698.015810][T28095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.015845][T28095] ? bpf_lsm_capable+0x9/0x20 [ 698.015864][T28095] ? security_capable+0x7e/0x2c0 [ 698.015890][T28095] genl_rcv_msg+0x61c/0x7a0 [ 698.015919][T28095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.015939][T28095] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 698.015971][T28095] netlink_rcv_skb+0x232/0x4b0 [ 698.015991][T28095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.016012][T28095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.016026][T28095] ? genl_rcv+0x19/0x40 [ 698.016062][T28095] ? down_read+0x272/0x2e0 [ 698.016081][T28095] ? genl_rcv+0xd/0x40 [ 698.016103][T28095] genl_rcv+0x28/0x40 [ 698.016122][T28095] netlink_unicast+0x80f/0x9b0 [ 698.016148][T28095] ? __pfx_netlink_unicast+0x10/0x10 [ 698.016168][T28095] ? netlink_sendmsg+0x650/0xb40 [ 698.016185][T28095] ? skb_put+0x11b/0x210 [ 698.016209][T28095] netlink_sendmsg+0x813/0xb40 [ 698.016237][T28095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.016268][T28095] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.016289][T28095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.016309][T28095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.016326][T28095] ____sys_sendmsg+0xa68/0xad0 [ 698.016347][T28095] ? __might_fault+0xaf/0x130 [ 698.016376][T28095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.016407][T28095] ? import_iovec+0x73/0xa0 [ 698.016433][T28095] ___sys_sendmsg+0x2a5/0x360 [ 698.016454][T28095] ? __lock_acquire+0x6b5/0x2cf0 [ 698.016479][T28095] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.016538][T28095] ? __fget_files+0x2a/0x420 [ 698.016555][T28095] ? __fget_files+0x3a0/0x420 [ 698.016582][T28095] __x64_sys_sendmsg+0x1bd/0x2a0 [ 698.016605][T28095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.016635][T28095] ? __pfx_ksys_write+0x10/0x10 [ 698.016669][T28095] do_syscall_64+0xe2/0xf80 [ 698.016689][T28095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.016704][T28095] ? trace_irq_disable+0x37/0x100 [ 698.016720][T28095] ? clear_bhb_loop+0x60/0xb0 [ 698.016740][T28095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.016755][T28095] RIP: 0033:0x7f711d39aeb9 [ 698.016770][T28095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.016783][T28095] RSP: 002b:00007f711e2b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.016801][T28095] RAX: ffffffffffffffda RBX: 00007f711d615fa0 RCX: 00007f711d39aeb9 [ 698.016812][T28095] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000008 [ 698.016823][T28095] RBP: 00007f711e2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 698.016832][T28095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.016841][T28095] R13: 00007f711d616038 R14: 00007f711d615fa0 R15: 00007ffc2e23d9b8 [ 698.016871][T28095] [ 698.525851][T28106] syzkaller0: entered promiscuous mode [ 698.531362][T28106] syzkaller0: entered allmulticast mode [ 700.525278][T28134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5307'. [ 700.581405][T28134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5307'. [ 700.771138][T28151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5311'. [ 700.846106][T28151] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 700.858053][T28152] lo speed is unknown, defaulting to 1000 [ 700.938005][T28160] syzkaller1: entered promiscuous mode [ 700.964520][T28160] syzkaller1: entered allmulticast mode [ 701.064882][T28162] nbd8: detected capacity change from 0 to 63 [ 701.120284][ T5828] block nbd8: Receive control failed (result -104) [ 701.429970][T28181] syzkaller0: entered promiscuous mode [ 701.440294][T28181] syzkaller0: entered allmulticast mode [ 702.195212][T28211] netlink: 'syz.0.5327': attribute type 10 has an invalid length. [ 702.251975][T28212] netlink: 'syz.0.5327': attribute type 10 has an invalid length. [ 703.220484][T28148] lo speed is unknown, defaulting to 1000 [ 703.231935][T28152] wg1 speed is unknown, defaulting to 1000 [ 703.302085][T28210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 703.332801][T28211] bond0: (slave dummy0): Releasing backup interface [ 703.360182][T28224] __nla_validate_parse: 4 callbacks suppressed [ 703.360200][T28224] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5330'. [ 703.365830][T28212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 703.367497][T28224] net_ratelimit: 6 callbacks suppressed [ 703.367512][T28224] netlink: ct family unspecified [ 703.422814][T28219] : renamed from veth0_to_bond [ 703.588095][T28232] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5332'. [ 703.619064][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5333'. [ 703.722107][T28236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5333'. [ 703.757795][T28250] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 703.773394][T28249] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 703.850973][T28148] wg1 speed is unknown, defaulting to 1000 [ 703.863409][T28254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5337'. [ 704.095306][T28264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.155966][T28270] xfrm1: left allmulticast mode [ 704.568887][T28286] netlink: 'syz.3.5345': attribute type 16 has an invalid length. [ 704.615315][T28286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5345'. [ 705.137377][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'. [ 705.185675][T28313] bond8: option all_slaves_active: invalid value (13) [ 705.196064][T28313] bond8 (unregistering): Released all slaves [ 705.216755][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5353'. [ 705.226434][T28319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5354'. [ 705.307867][T28319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5354'. [ 705.471176][T28334] nbd: couldn't find a device at index 0 [ 705.621993][T28346] macvtap1: entered promiscuous mode [ 705.638982][T28346] dummy0: entered promiscuous mode [ 705.652394][T28346] macvtap1: entered allmulticast mode [ 705.674434][T28346] dummy0: entered allmulticast mode [ 705.737432][T28354] dummy0: left allmulticast mode [ 705.762843][T28354] dummy0: left promiscuous mode [ 705.771976][T28357] netlink: 'syz.0.5362': attribute type 15 has an invalid length. [ 705.771999][T28352] netlink: 'syz.0.5362': attribute type 15 has an invalid length. [ 706.164794][T28378] syzkaller1: entered promiscuous mode [ 706.181326][T28378] syzkaller1: entered allmulticast mode [ 706.224787][T28373] syzkaller0: entered promiscuous mode [ 706.230309][T28373] syzkaller0: entered allmulticast mode [ 707.122577][T28419] lo speed is unknown, defaulting to 1000 [ 707.470458][T28437] tunl0: Caught tx_queue_len zero misconfig [ 707.904169][T28419] wg1 speed is unknown, defaulting to 1000 [ 708.285394][T28475] ipvlan2: entered promiscuous mode [ 708.899149][T28509] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 709.033311][T28509] __nla_validate_parse: 15 callbacks suppressed [ 709.033333][T28509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5401'. [ 709.054621][T28509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 709.129341][T28509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5401'. [ 709.138802][T28509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 709.332618][T28523] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5404'. [ 709.384036][T28523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5404'. [ 709.420430][T28527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5403'. [ 709.453787][T28523] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5404'. [ 709.470920][T28527] netlink: 'syz.2.5403': attribute type 21 has an invalid length. [ 709.484855][T28527] netlink: 'syz.2.5403': attribute type 22 has an invalid length. [ 709.521130][T28527] netlink: 'syz.2.5403': attribute type 23 has an invalid length. [ 709.534612][T28527] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5403'. [ 709.651861][T28534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5406'. [ 709.950828][T28545] macvtap1: left promiscuous mode [ 709.962175][T28545] macvtap1: left allmulticast mode [ 709.995107][T28544] syzkaller1: entered promiscuous mode [ 710.000623][T28544] syzkaller1: entered allmulticast mode [ 710.125010][T28554] ip6tnl0: Caught tx_queue_len zero misconfig [ 710.144606][T28554] ipvlan2: entered promiscuous mode [ 710.150567][T28554] bridge0: port 3(ipvlan2) entered blocking state [ 710.157446][T28554] bridge0: port 3(ipvlan2) entered disabled state [ 710.167099][T28554] ipvlan2: entered allmulticast mode [ 710.188264][T28554] bridge0: entered allmulticast mode [ 710.217831][T28554] ipvlan2: left allmulticast mode [ 710.222915][T28554] bridge0: left allmulticast mode [ 710.975951][T28589] sch_tbf: peakrate 18 is lower than or equals to rate 16799418373617911012 ! [ 711.258936][T28604] netlink: 'syz.1.5422': attribute type 32 has an invalid length. [ 711.297237][T28608] FAULT_INJECTION: forcing a failure. [ 711.297237][T28608] name failslab, interval 1, probability 0, space 0, times 0 [ 711.310348][T28608] CPU: 1 UID: 0 PID: 28608 Comm: syz.2.5423 Not tainted syzkaller #0 PREEMPT(full) [ 711.310373][T28608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 711.310383][T28608] Call Trace: [ 711.310389][T28608] [ 711.310397][T28608] dump_stack_lvl+0xe8/0x150 [ 711.310422][T28608] should_fail_ex+0x412/0x560 [ 711.310448][T28608] should_failslab+0xa8/0x100 [ 711.310467][T28608] kmem_cache_alloc_noprof+0x87/0x6e0 [ 711.310491][T28608] ? skb_clone+0x212/0x3a0 [ 711.310518][T28608] skb_clone+0x212/0x3a0 [ 711.310537][T28608] ? llc_rcv+0x9d/0xd00 [ 711.310558][T28608] llc_rcv+0xbf/0xd00 [ 711.310575][T28608] ? is_bpf_text_address+0x26/0x2b0 [ 711.310592][T28608] ? lock_acquire+0x106/0x330 [ 711.310617][T28608] __netif_receive_skb_core+0x2904/0x3150 [ 711.310635][T28608] ? is_bpf_text_address+0x26/0x2b0 [ 711.310658][T28608] ? is_bpf_text_address+0x292/0x2b0 [ 711.310679][T28608] ? kernel_text_address+0xa5/0xe0 [ 711.310701][T28608] ? unwind_get_return_address+0x4d/0x90 [ 711.310717][T28608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.310742][T28608] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 711.310785][T28608] ? kasan_save_track+0x4f/0x80 [ 711.310800][T28608] ? kasan_save_track+0x3e/0x80 [ 711.310814][T28608] ? __kasan_slab_alloc+0x6c/0x80 [ 711.310829][T28608] ? kmem_cache_alloc_bulk_noprof+0x48c/0x740 [ 711.310852][T28608] __netif_receive_skb_list_core+0x24d/0x810 [ 711.310884][T28608] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 711.310915][T28608] netif_receive_skb_list_internal+0x995/0xcf0 [ 711.310940][T28608] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 711.310967][T28608] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 711.310996][T28608] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 711.311025][T28608] netif_receive_skb_list+0x54/0x410 [ 711.311046][T28608] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 711.311086][T28608] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 711.311116][T28608] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 711.311158][T28608] ? 0xffffffffa02017dc [ 711.311201][T28608] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 711.311231][T28608] ? _copy_from_user+0x94/0xb0 [ 711.311254][T28608] ? bpf_test_init+0x113/0x150 [ 711.311270][T28608] ? xdp_convert_md_to_buff+0x5b/0x330 [ 711.311293][T28608] bpf_prog_test_run_xdp+0x81c/0x1160 [ 711.311329][T28608] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 711.311353][T28608] ? __fget_files+0x2a/0x420 [ 711.311377][T28608] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 711.311397][T28608] bpf_prog_test_run+0x2c7/0x340 [ 711.311420][T28608] __sys_bpf+0x5cb/0x920 [ 711.311439][T28608] ? __pfx___sys_bpf+0x10/0x10 [ 711.311473][T28608] ? ksys_write+0x242/0x270 [ 711.311498][T28608] ? __pfx_ksys_write+0x10/0x10 [ 711.311527][T28608] __x64_sys_bpf+0x7c/0x90 [ 711.311550][T28608] do_syscall_64+0xe2/0xf80 [ 711.311571][T28608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.311587][T28608] ? trace_irq_disable+0x37/0x100 [ 711.311602][T28608] ? clear_bhb_loop+0x60/0xb0 [ 711.311623][T28608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.311639][T28608] RIP: 0033:0x7f36c679aeb9 [ 711.311655][T28608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.311669][T28608] RSP: 002b:00007f36c7719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.311689][T28608] RAX: ffffffffffffffda RBX: 00007f36c6a15fa0 RCX: 00007f36c679aeb9 [ 711.311702][T28608] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 711.311713][T28608] RBP: 00007f36c7719090 R08: 0000000000000000 R09: 0000000000000000 [ 711.311724][T28608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.311735][T28608] R13: 00007f36c6a16038 R14: 00007f36c6a15fa0 R15: 00007fff29543a28 [ 711.311766][T28608] [ 712.169276][T28633] batadv_slave_0: Caught tx_queue_len zero misconfig [ 712.301887][T28641] netlink: 'syz.2.5429': attribute type 12 has an invalid length. [ 712.387103][ T1318] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.409085][ T1318] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.469684][T28653] FAULT_INJECTION: forcing a failure. [ 712.469684][T28653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.483001][ T1318] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.489733][T28653] CPU: 1 UID: 0 PID: 28653 Comm: syz.4.5432 Not tainted syzkaller #0 PREEMPT(full) [ 712.489757][T28653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 712.489767][T28653] Call Trace: [ 712.489774][T28653] [ 712.489781][T28653] dump_stack_lvl+0xe8/0x150 [ 712.489806][T28653] should_fail_ex+0x412/0x560 [ 712.489830][T28653] _copy_to_user+0x31/0xb0 [ 712.489854][T28653] simple_read_from_buffer+0xe1/0x170 [ 712.489876][T28653] proc_fail_nth_read+0x1bb/0x230 [ 712.489907][T28653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.489931][T28653] ? rw_verify_area+0x2a6/0x4d0 [ 712.489951][T28653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.489973][T28653] vfs_read+0x20c/0xa70 [ 712.489993][T28653] ? __get_user_nocheck_8+0x20/0x20 [ 712.490012][T28653] ? vsock_connectible_getsockopt+0xf8/0x3c0 [ 712.490035][T28653] ? __pfx_vfs_read+0x10/0x10 [ 712.490058][T28653] ? __asan_memset+0x22/0x50 [ 712.490078][T28653] ? __pfx_vsock_connectible_getsockopt+0x10/0x10 [ 712.490100][T28653] ? do_sock_getsockopt+0x2d3/0x3f0 [ 712.490129][T28653] ksys_read+0x150/0x270 [ 712.490151][T28653] ? __pfx_ksys_read+0x10/0x10 [ 712.490172][T28653] ? __x64_sys_getsockopt+0x1a4/0x240 [ 712.490200][T28653] do_syscall_64+0xe2/0xf80 [ 712.490219][T28653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.490234][T28653] ? trace_irq_disable+0x37/0x100 [ 712.490249][T28653] ? clear_bhb_loop+0x60/0xb0 [ 712.490268][T28653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.490284][T28653] RIP: 0033:0x7f711d35b78e [ 712.490306][T28653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.490319][T28653] RSP: 002b:00007f711e2b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.490337][T28653] RAX: ffffffffffffffda RBX: 00007f711e2b56c0 RCX: 00007f711d35b78e [ 712.490348][T28653] RDX: 000000000000000f RSI: 00007f711e2b50a0 RDI: 0000000000000005 [ 712.490358][T28653] RBP: 00007f711e2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 712.490368][T28653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.490378][T28653] R13: 00007f711d616038 R14: 00007f711d615fa0 R15: 00007ffc2e23d9b8 [ 712.490406][T28653] [ 712.734643][ T1318] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.781509][T28661] netlink: 'syz.1.5434': attribute type 1 has an invalid length. [ 712.887814][T28665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.898352][T28665] bond2: (slave bond3): making interface the new active one [ 712.908749][T28665] bond2: (slave bond3): Enslaving as an active interface with an up link [ 713.011581][T28661] bond2: (slave gretap3): Enslaving as a backup interface with an up link [ 713.053500][T28665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.092075][T28686] netlink: 'syz.2.5439': attribute type 33 has an invalid length. [ 713.104062][T28661] vlan4: entered promiscuous mode [ 713.127457][T28661] bond2: entered promiscuous mode [ 713.139363][T28661] bond3: entered promiscuous mode [ 713.191111][T28686] `: renamed from team0 (while UP) [ 713.408311][T28696] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 713.480055][T28716] xt_ecn: cannot match TCP bits for non-tcp packets [ 713.490448][T28696] bond4 (unregistering): Released all slaves [ 713.531283][T28708] tipc: Enabling of bearer rejected, failed to enable media [ 713.552033][T28717] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 713.605458][T28703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.658561][T28724] ip6gretap0: entered promiscuous mode [ 713.715873][T28703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.818183][T28723] ip6gretap0: left promiscuous mode [ 713.900605][T28703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.944851][T28736] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 713.970295][T28739] lo speed is unknown, defaulting to 1000 [ 714.136489][T28747] __nla_validate_parse: 22 callbacks suppressed [ 714.136517][T28747] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5452'. [ 714.206869][T28703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.241834][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5451'. [ 714.456298][T28767] netlink: 'syz.0.5455': attribute type 1 has an invalid length. [ 714.464522][T28767] netlink: 'syz.0.5455': attribute type 2 has an invalid length. [ 714.804697][ T7316] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.812947][ T7316] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.997966][T19182] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.046904][T19182] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.095457][T28739] wg1 speed is unknown, defaulting to 1000 [ 715.200245][T28782] lo speed is unknown, defaulting to 1000 [ 715.636447][T28804] macvtap0: entered allmulticast mode [ 715.694263][T28804] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 715.756172][T28816] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5461'. [ 716.223544][T28835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5467'. [ 716.250858][T28782] wg1 speed is unknown, defaulting to 1000 [ 716.488326][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5470'. [ 716.539509][T28852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5470'. [ 716.555710][T28847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5470'. [ 716.806929][T28857] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5472'. [ 717.146636][T28877] netlink: 'syz.1.5478': attribute type 1 has an invalid length. [ 717.208356][T28880] FAULT_INJECTION: forcing a failure. [ 717.208356][T28880] name failslab, interval 1, probability 0, space 0, times 0 [ 717.221095][T28880] CPU: 0 UID: 0 PID: 28880 Comm: syz.3.5479 Not tainted syzkaller #0 PREEMPT(full) [ 717.221154][T28880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 717.221166][T28880] Call Trace: [ 717.221175][T28880] [ 717.221183][T28880] dump_stack_lvl+0xe8/0x150 [ 717.221210][T28880] should_fail_ex+0x412/0x560 [ 717.221236][T28880] should_failslab+0xa8/0x100 [ 717.221258][T28880] kmem_cache_alloc_noprof+0x87/0x6e0 [ 717.221283][T28880] ? skb_clone+0x212/0x3a0 [ 717.221311][T28880] skb_clone+0x212/0x3a0 [ 717.221331][T28880] ? llc_rcv+0x9d/0xd00 [ 717.221355][T28880] llc_rcv+0xbf/0xd00 [ 717.221386][T28880] __netif_receive_skb_core+0x2904/0x3150 [ 717.221405][T28880] ? is_bpf_text_address+0x26/0x2b0 [ 717.221429][T28880] ? is_bpf_text_address+0x292/0x2b0 [ 717.221452][T28880] ? kernel_text_address+0xa5/0xe0 [ 717.221475][T28880] ? unwind_get_return_address+0x4d/0x90 [ 717.221493][T28880] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 717.221518][T28880] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 717.221556][T28880] ? put_cpu_partial+0x88/0x280 [ 717.221580][T28880] ? kasan_save_track+0x4f/0x80 [ 717.221595][T28880] ? kasan_save_track+0x3e/0x80 [ 717.221609][T28880] ? __kasan_slab_alloc+0x6c/0x80 [ 717.221624][T28880] ? kmem_cache_alloc_bulk_noprof+0x48c/0x740 [ 717.221646][T28880] __netif_receive_skb_list_core+0x24d/0x810 [ 717.221679][T28880] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 717.221709][T28880] netif_receive_skb_list_internal+0x995/0xcf0 [ 717.221734][T28880] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 717.221754][T28880] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 717.221782][T28880] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 717.221811][T28880] netif_receive_skb_list+0x54/0x410 [ 717.221833][T28880] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 717.221873][T28880] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 717.221903][T28880] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 717.221945][T28880] ? 0xffffffffa0201748 [ 717.221997][T28880] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 717.222029][T28880] ? _copy_from_user+0x94/0xb0 [ 717.222053][T28880] ? bpf_test_init+0x113/0x150 [ 717.222070][T28880] ? xdp_convert_md_to_buff+0x5b/0x330 [ 717.222092][T28880] bpf_prog_test_run_xdp+0x81c/0x1160 [ 717.222134][T28880] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 717.222158][T28880] ? __fget_files+0x2a/0x420 [ 717.222182][T28880] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 717.222203][T28880] bpf_prog_test_run+0x2c7/0x340 [ 717.222227][T28880] __sys_bpf+0x5cb/0x920 [ 717.222246][T28880] ? __pfx___sys_bpf+0x10/0x10 [ 717.222280][T28880] ? ksys_write+0x242/0x270 [ 717.222305][T28880] ? __pfx_ksys_write+0x10/0x10 [ 717.222334][T28880] __x64_sys_bpf+0x7c/0x90 [ 717.222358][T28880] do_syscall_64+0xe2/0xf80 [ 717.222379][T28880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.222396][T28880] ? trace_irq_disable+0x37/0x100 [ 717.222412][T28880] ? clear_bhb_loop+0x60/0xb0 [ 717.222440][T28880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.222457][T28880] RIP: 0033:0x7f3af399aeb9 [ 717.222475][T28880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.222489][T28880] RSP: 002b:00007f3af48bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.222509][T28880] RAX: ffffffffffffffda RBX: 00007f3af3c15fa0 RCX: 00007f3af399aeb9 [ 717.222522][T28880] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 717.222534][T28880] RBP: 00007f3af48bd090 R08: 0000000000000000 R09: 0000000000000000 [ 717.222545][T28880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.222556][T28880] R13: 00007f3af3c16038 R14: 00007f3af3c15fa0 R15: 00007ffc151d1cd8 [ 717.222585][T28880] [ 717.603361][T28884] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5480'. [ 717.614217][T28866] netlink: 'syz.2.5475': attribute type 13 has an invalid length. [ 717.622190][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5475'. [ 717.907394][T28889] bond5: (slave bridge5): making interface the new active one [ 717.928948][T28889] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 718.100453][T28903] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 718.140868][T28903] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 718.790715][T28943] FAULT_INJECTION: forcing a failure. [ 718.790715][T28943] name failslab, interval 1, probability 0, space 0, times 0 [ 718.803385][T28943] CPU: 1 UID: 0 PID: 28943 Comm: syz.4.5493 Not tainted syzkaller #0 PREEMPT(full) [ 718.803408][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 718.803418][T28943] Call Trace: [ 718.803426][T28943] [ 718.803434][T28943] dump_stack_lvl+0xe8/0x150 [ 718.803459][T28943] should_fail_ex+0x412/0x560 [ 718.803483][T28943] should_failslab+0xa8/0x100 [ 718.803504][T28943] kmem_cache_alloc_noprof+0x87/0x6e0 [ 718.803527][T28943] ? skb_clone+0x212/0x3a0 [ 718.803553][T28943] skb_clone+0x212/0x3a0 [ 718.803571][T28943] ? llc_rcv+0x9d/0xd00 [ 718.803593][T28943] llc_rcv+0xbf/0xd00 [ 718.803622][T28943] __netif_receive_skb_core+0x2904/0x3150 [ 718.803640][T28943] ? is_bpf_text_address+0x26/0x2b0 [ 718.803661][T28943] ? is_bpf_text_address+0x292/0x2b0 [ 718.803682][T28943] ? kernel_text_address+0xa5/0xe0 [ 718.803704][T28943] ? unwind_get_return_address+0x4d/0x90 [ 718.803722][T28943] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 718.803744][T28943] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 718.803781][T28943] ? put_cpu_partial+0x88/0x280 [ 718.803801][T28943] ? kasan_save_track+0x4f/0x80 [ 718.803813][T28943] ? kasan_save_track+0x3e/0x80 [ 718.803825][T28943] ? __kasan_slab_alloc+0x6c/0x80 [ 718.803839][T28943] ? kmem_cache_alloc_bulk_noprof+0x48c/0x740 [ 718.803860][T28943] __netif_receive_skb_list_core+0x24d/0x810 [ 718.803891][T28943] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 718.803919][T28943] netif_receive_skb_list_internal+0x995/0xcf0 [ 718.803943][T28943] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 718.803961][T28943] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 718.803990][T28943] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 718.804017][T28943] netif_receive_skb_list+0x54/0x410 [ 718.804037][T28943] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 718.804084][T28943] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 718.804112][T28943] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 718.804151][T28943] ? 0xffffffffa0201754 [ 718.804190][T28943] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 718.804220][T28943] ? _copy_from_user+0x94/0xb0 [ 718.804243][T28943] ? bpf_test_init+0x113/0x150 [ 718.804260][T28943] ? xdp_convert_md_to_buff+0x5b/0x330 [ 718.804283][T28943] bpf_prog_test_run_xdp+0x81c/0x1160 [ 718.804316][T28943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 718.804342][T28943] ? __fget_files+0x2a/0x420 [ 718.804364][T28943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 718.804383][T28943] bpf_prog_test_run+0x2c7/0x340 [ 718.804405][T28943] __sys_bpf+0x5cb/0x920 [ 718.804424][T28943] ? __pfx___sys_bpf+0x10/0x10 [ 718.804454][T28943] ? ksys_write+0x242/0x270 [ 718.804478][T28943] ? __pfx_ksys_write+0x10/0x10 [ 718.804505][T28943] __x64_sys_bpf+0x7c/0x90 [ 718.804528][T28943] do_syscall_64+0xe2/0xf80 [ 718.804549][T28943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.804564][T28943] ? trace_irq_disable+0x37/0x100 [ 718.804581][T28943] ? clear_bhb_loop+0x60/0xb0 [ 718.804602][T28943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.804618][T28943] RIP: 0033:0x7f711d39aeb9 [ 718.804634][T28943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.804649][T28943] RSP: 002b:00007f711e2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.804669][T28943] RAX: ffffffffffffffda RBX: 00007f711d615fa0 RCX: 00007f711d39aeb9 [ 718.804682][T28943] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 718.804693][T28943] RBP: 00007f711e2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 718.804705][T28943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.804716][T28943] R13: 00007f711d616038 R14: 00007f711d615fa0 R15: 00007ffc2e23d9b8 [ 718.804745][T28943] [ 719.332136][T28952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.340807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.360017][T28944] __nla_validate_parse: 4 callbacks suppressed [ 719.360036][T28944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5492'. [ 719.897573][T28967] netlink: 'syz.2.5498': attribute type 13 has an invalid length. [ 719.942911][T28977] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5502'. [ 720.037636][T28977] netlink: 'syz.4.5502': attribute type 1 has an invalid length. [ 720.049978][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5503'. [ 720.061764][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5502'. [ 720.081074][T28977] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5502'. [ 720.142917][T28984] netlink: 'syz.0.5504': attribute type 1 has an invalid length. [ 720.223823][T28984] bond4: entered promiscuous mode [ 720.230139][T28984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.289757][T28987] bond4: (slave bridge1): making interface the new active one [ 720.305066][T28987] bridge1: entered promiscuous mode [ 720.340078][T28987] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 720.390987][T28996] netlink: 'syz.3.5507': attribute type 1 has an invalid length. [ 720.480723][T29001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5510'. [ 720.520683][T28993] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 720.541927][T28993] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 720.578434][T29007] siw: device registration error -23 [ 720.730509][T28996] bond9: (slave gretap2): making interface the new active one [ 720.753555][T28996] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 720.792082][T29006] macvlan2: entered promiscuous mode [ 720.832470][T29006] macvlan2: entered allmulticast mode [ 720.848235][T29006] bond9: entered promiscuous mode [ 720.904639][T29006] gretap2: entered promiscuous mode [ 720.910817][T29006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.926505][T29006] bond9: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 720.947653][T29006] bond9: left promiscuous mode [ 720.952448][T29006] gretap2: left promiscuous mode [ 721.088636][T29031] lo speed is unknown, defaulting to 1000 [ 721.170891][T29038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5518'. [ 721.226403][T29038] vlan3: entered allmulticast mode [ 721.241088][T29038] hsr0: entered allmulticast mode [ 721.251213][T29038] hsr_slave_0: entered allmulticast mode [ 721.269653][T29038] hsr_slave_1: entered allmulticast mode [ 721.342196][T29047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5521'. [ 721.380990][T29047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5521'. [ 721.602007][T29031] wg1 speed is unknown, defaulting to 1000 [ 721.894984][T29084] netlink: 'syz.1.5529': attribute type 5 has an invalid length. [ 722.351133][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5534'. [ 722.595719][T29111] vlan3: entered allmulticast mode [ 722.615198][T29111] bond0: entered allmulticast mode [ 722.917036][T29134] netlink: 'syz.4.5541': attribute type 1 has an invalid length. [ 722.990788][T29099] netlink: 'syz.0.5532': attribute type 13 has an invalid length. [ 723.260949][T29157] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 723.481595][T29169] netlink: 'syz.1.5549': attribute type 28 has an invalid length. [ 723.519916][T29169] netlink: 'syz.1.5549': attribute type 3 has an invalid length. [ 724.092647][T29197] netlink: 'syz.2.5557': attribute type 4 has an invalid length. [ 724.114592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.150079][T29202] netlink: 'syz.2.5557': attribute type 4 has an invalid length. [ 724.172324][T19677] lo speed is unknown, defaulting to 1000 [ 724.178492][T19677] syz0: Port: 1 Link DOWN [ 724.182900][T19677] lo speed is unknown, defaulting to 1000 [ 724.233545][ T40] lo speed is unknown, defaulting to 1000 [ 724.240057][ T40] syz0: Port: 1 Link ACTIVE [ 724.252052][ T5904] lo speed is unknown, defaulting to 1000 [ 724.410960][T29213] syzkaller0: entered promiscuous mode [ 724.424675][T29213] syzkaller0: entered allmulticast mode [ 724.496156][T29220] FAULT_INJECTION: forcing a failure. [ 724.496156][T29220] name failslab, interval 1, probability 0, space 0, times 0 [ 724.522955][T29220] CPU: 1 UID: 0 PID: 29220 Comm: syz.2.5564 Not tainted syzkaller #0 PREEMPT(full) [ 724.522981][T29220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 724.522992][T29220] Call Trace: [ 724.522999][T29220] [ 724.523007][T29220] dump_stack_lvl+0xe8/0x150 [ 724.523034][T29220] should_fail_ex+0x412/0x560 [ 724.523059][T29220] should_failslab+0xa8/0x100 [ 724.523080][T29220] __kmalloc_cache_noprof+0x83/0x6e0 [ 724.523095][T29220] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.523116][T29220] ? __request_module+0x2d0/0x610 [ 724.523136][T29220] __request_module+0x2d0/0x610 [ 724.523155][T29220] ? rtnl_link_ops_get+0x23/0x250 [ 724.523177][T29220] ? __pfx___request_module+0x10/0x10 [ 724.523204][T29220] ? rtnl_link_ops_get+0x23/0x250 [ 724.523222][T29220] ? rtnl_link_ops_get+0x23/0x250 [ 724.523243][T29220] ? rtnl_link_ops_get+0x215/0x250 [ 724.523267][T29220] rtnl_newlink+0x620/0x1be0 [ 724.523287][T29220] ? kasan_save_track+0x4f/0x80 [ 724.523302][T29220] ? kasan_save_track+0x3e/0x80 [ 724.523316][T29220] ? kasan_save_free_info+0x46/0x50 [ 724.523344][T29220] ? __kasan_slab_free+0x5c/0x80 [ 724.523362][T29220] ? __netlink_deliver_tap+0x5ad/0x850 [ 724.523380][T29220] ? netlink_deliver_tap+0x19c/0x1b0 [ 724.523397][T29220] ? netlink_unicast+0x7e3/0x9b0 [ 724.523411][T29220] ? netlink_sendmsg+0x813/0xb40 [ 724.523431][T29220] ? __pfx_rtnl_newlink+0x10/0x10 [ 724.523455][T29220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.523506][T29220] ? kasan_quarantine_put+0xbb/0x1f0 [ 724.523528][T29220] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.523551][T29220] ? kmem_cache_free+0x195/0x610 [ 724.523566][T29220] ? nlmon_xmit+0xb0/0x100 [ 724.523594][T29220] ? __lock_acquire+0x6b5/0x2cf0 [ 724.523622][T29220] ? __local_bh_enable_ip+0xd0/0x130 [ 724.523639][T29220] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.523657][T29220] ? __dev_queue_xmit+0x274/0x3850 [ 724.523678][T29220] ? __local_bh_enable_ip+0xd0/0x130 [ 724.523692][T29220] ? __dev_queue_xmit+0x274/0x3850 [ 724.523721][T29220] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 724.523754][T29220] ? __pfx_rtnl_newlink+0x10/0x10 [ 724.523772][T29220] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 724.523795][T29220] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 724.523812][T29220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 724.523830][T29220] ? ref_tracker_free+0x693/0x840 [ 724.523848][T29220] ? __copy_skb_header+0xa3/0x4a0 [ 724.523871][T29220] ? __pfx_ref_tracker_free+0x10/0x10 [ 724.523900][T29220] netlink_rcv_skb+0x232/0x4b0 [ 724.523921][T29220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 724.523943][T29220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.523972][T29220] ? netlink_deliver_tap+0x2e/0x1b0 [ 724.523995][T29220] netlink_unicast+0x80f/0x9b0 [ 724.524019][T29220] ? __pfx_netlink_unicast+0x10/0x10 [ 724.524036][T29220] ? netlink_sendmsg+0x650/0xb40 [ 724.524052][T29220] ? skb_put+0x11b/0x210 [ 724.524074][T29220] netlink_sendmsg+0x813/0xb40 [ 724.524101][T29220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.524122][T29220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 724.524145][T29220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 724.524166][T29220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.524184][T29220] ____sys_sendmsg+0xa68/0xad0 [ 724.524207][T29220] ? __might_fault+0xaf/0x130 [ 724.524233][T29220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.524262][T29220] ? import_iovec+0x73/0xa0 [ 724.524288][T29220] ___sys_sendmsg+0x2a5/0x360 [ 724.524309][T29220] ? __lock_acquire+0x6b5/0x2cf0 [ 724.524337][T29220] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.524385][T29220] ? __fget_files+0x2a/0x420 [ 724.524401][T29220] ? __fget_files+0x3a0/0x420 [ 724.524428][T29220] __x64_sys_sendmsg+0x1bd/0x2a0 [ 724.524460][T29220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.524491][T29220] ? __pfx_ksys_write+0x10/0x10 [ 724.524524][T29220] do_syscall_64+0xe2/0xf80 [ 724.524545][T29220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.524561][T29220] ? trace_irq_disable+0x37/0x100 [ 724.524578][T29220] ? clear_bhb_loop+0x60/0xb0 [ 724.524598][T29220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.524614][T29220] RIP: 0033:0x7f36c679aeb9 [ 724.524630][T29220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.524646][T29220] RSP: 002b:00007f36c7719028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.524666][T29220] RAX: ffffffffffffffda RBX: 00007f36c6a15fa0 RCX: 00007f36c679aeb9 [ 724.524679][T29220] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 724.524691][T29220] RBP: 00007f36c7719090 R08: 0000000000000000 R09: 0000000000000000 [ 724.524702][T29220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.524713][T29220] R13: 00007f36c6a16038 R14: 00007f36c6a15fa0 R15: 00007fff29543a28 [ 724.524743][T29220] [ 725.301528][T29254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.369468][T29257] dummy0: Caught tx_queue_len zero misconfig [ 725.673923][T29273] syzkaller0: entered promiscuous mode [ 725.679842][T29273] syzkaller0: entered allmulticast mode [ 725.760897][T29273] syzkaller1: entered promiscuous mode [ 725.796139][T29273] syzkaller1: entered allmulticast mode [ 726.017199][T29290] netlink: 'syz.0.5578': attribute type 1 has an invalid length. [ 726.141636][T29255] netlink: 'syz.1.5568': attribute type 13 has an invalid length. [ 726.183218][T29290] 8021q: adding VLAN 0 to HW filter on device bond5 [ 726.314890][T29309] __nla_validate_parse: 11 callbacks suppressed [ 726.314909][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 726.333714][T29299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 726.363437][T29299] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 726.408593][T29299] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 726.417292][T29315] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 726.442666][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 726.479765][T29302] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 726.488950][T29302] bond5: (slave wlan0): Opening slave failed [ 726.736070][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5584'. [ 726.749761][T29330] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5585'. [ 726.770443][T29330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5585'. [ 726.776962][T29332] syzkaller1: entered promiscuous mode [ 726.785095][T29332] syzkaller1: entered allmulticast mode [ 726.795450][T29332] x_tables: duplicate entry at hook 1 [ 727.664036][T29367] ip6gretap4: entered promiscuous mode [ 727.674201][T29349] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5591'. [ 727.845255][T29379] batman_adv: batadv0: Adding interface: macvtap1 [ 727.853380][T29379] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.937718][T29379] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 727.972245][T29380] lo speed is unknown, defaulting to 1000 [ 728.201312][T29384] lo speed is unknown, defaulting to 1000 [ 728.208370][T29380] wg1 speed is unknown, defaulting to 1000 [ 728.507076][T29400] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 728.521007][T29406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5604'. [ 728.558699][T29400] bond4: left promiscuous mode [ 728.584477][T29400] bridge1: left promiscuous mode [ 728.596192][T29409] : renamed from bond_slave_0 [ 728.604670][T29414] netlink: 'syz.4.5604': attribute type 11 has an invalid length. [ 728.739489][T29384] wg1 speed is unknown, defaulting to 1000 [ 728.753871][T29412] syzkaller0: entered promiscuous mode [ 728.759958][T29412] syzkaller0: entered allmulticast mode [ 728.888793][T29423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 729.590134][T29446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5615'. [ 729.613011][T29446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5615'. [ 729.643508][T29449] nftables ruleset with unbound set [ 729.676476][T29450] tunl0: Caught tx_queue_len zero misconfig [ 729.695470][T29449] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 729.724221][T29449] bond8: entered promiscuous mode [ 729.798518][T29449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 729.814937][T29460] FAULT_INJECTION: forcing a failure. [ 729.814937][T29460] name failslab, interval 1, probability 0, space 0, times 0 [ 729.827627][T29460] CPU: 0 UID: 0 PID: 29460 Comm: syz.1.5618 Not tainted syzkaller #0 PREEMPT(full) [ 729.827675][T29460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 729.827700][T29460] Call Trace: [ 729.827717][T29460] [ 729.827734][T29460] dump_stack_lvl+0xe8/0x150 [ 729.827789][T29460] should_fail_ex+0x412/0x560 [ 729.827850][T29460] should_failslab+0xa8/0x100 [ 729.827899][T29460] kmem_cache_alloc_noprof+0x87/0x6e0 [ 729.827954][T29460] ? skb_clone+0x212/0x3a0 [ 729.827981][T29460] skb_clone+0x212/0x3a0 [ 729.828001][T29460] ? llc_rcv+0x9d/0xd00 [ 729.828025][T29460] llc_rcv+0xbf/0xd00 [ 729.828057][T29460] __netif_receive_skb_core+0x2904/0x3150 [ 729.828076][T29460] ? is_bpf_text_address+0x26/0x2b0 [ 729.828101][T29460] ? is_bpf_text_address+0x292/0x2b0 [ 729.828125][T29460] ? kernel_text_address+0xa5/0xe0 [ 729.828148][T29460] ? unwind_get_return_address+0x4d/0x90 [ 729.828166][T29460] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.828189][T29460] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 729.828229][T29460] ? put_cpu_partial+0x88/0x280 [ 729.828252][T29460] ? kasan_save_track+0x4f/0x80 [ 729.828266][T29460] ? kasan_save_track+0x3e/0x80 [ 729.828280][T29460] ? __kasan_slab_alloc+0x6c/0x80 [ 729.828296][T29460] ? kmem_cache_alloc_bulk_noprof+0x48c/0x740 [ 729.828318][T29460] __netif_receive_skb_list_core+0x24d/0x810 [ 729.828351][T29460] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 729.828382][T29460] netif_receive_skb_list_internal+0x995/0xcf0 [ 729.828407][T29460] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 729.828427][T29460] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 729.828456][T29460] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 729.828485][T29460] netif_receive_skb_list+0x54/0x410 [ 729.828507][T29460] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 729.828547][T29460] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 729.828577][T29460] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 729.828619][T29460] ? 0xffffffffa0201754 [ 729.828663][T29460] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 729.828693][T29460] ? _copy_from_user+0x94/0xb0 [ 729.828717][T29460] ? bpf_test_init+0x113/0x150 [ 729.828734][T29460] ? xdp_convert_md_to_buff+0x5b/0x330 [ 729.828755][T29460] bpf_prog_test_run_xdp+0x81c/0x1160 [ 729.828791][T29460] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 729.828816][T29460] ? __fget_files+0x2a/0x420 [ 729.828840][T29460] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 729.828860][T29460] bpf_prog_test_run+0x2c7/0x340 [ 729.828884][T29460] __sys_bpf+0x5cb/0x920 [ 729.828904][T29460] ? __pfx___sys_bpf+0x10/0x10 [ 729.828944][T29460] ? ksys_write+0x242/0x270 [ 729.828969][T29460] ? __pfx_ksys_write+0x10/0x10 [ 729.828999][T29460] __x64_sys_bpf+0x7c/0x90 [ 729.829023][T29460] do_syscall_64+0xe2/0xf80 [ 729.829044][T29460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.829060][T29460] ? trace_irq_disable+0x37/0x100 [ 729.829077][T29460] ? clear_bhb_loop+0x60/0xb0 [ 729.829098][T29460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.829115][T29460] RIP: 0033:0x7f83af99aeb9 [ 729.829131][T29460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.829145][T29460] RSP: 002b:00007f83b0778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 729.829165][T29460] RAX: ffffffffffffffda RBX: 00007f83afc15fa0 RCX: 00007f83af99aeb9 [ 729.829179][T29460] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 729.829190][T29460] RBP: 00007f83b0778090 R08: 0000000000000000 R09: 0000000000000000 [ 729.829200][T29460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.829211][T29460] R13: 00007f83afc16038 R14: 00007f83afc15fa0 R15: 00007ffca8a40418 [ 729.829241][T29460] [ 730.597630][T29476] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 730.977166][T29503] netlink: 'syz.3.5629': attribute type 29 has an invalid length. [ 730.988171][T29503] netlink: 'syz.3.5629': attribute type 29 has an invalid length. [ 731.094083][T29510] lo speed is unknown, defaulting to 1000 [ 731.241398][ T97] block nbd8: Possible stuck request ffff888025400000: control (read@0,1024B). Runtime 30 seconds [ 731.254841][ T97] block nbd8: Possible stuck request ffff888025400200: control (read@1024,1024B). Runtime 30 seconds [ 731.266185][ T97] block nbd8: Possible stuck request ffff888025400400: control (read@2048,1024B). Runtime 30 seconds [ 731.278757][ T97] block nbd8: Possible stuck request ffff888025400600: control (read@3072,1024B). Runtime 30 seconds [ 731.552727][T29551] __nla_validate_parse: 2 callbacks suppressed [ 731.552746][T29551] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.5635'. [ 731.604453][T29551] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 731.643246][T29553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 731.654182][T29551] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5635'. [ 731.709121][T29510] wg1 speed is unknown, defaulting to 1000 [ 731.709132][T29528] lo speed is unknown, defaulting to 1000 [ 731.888673][T29558] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 731.974760][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5640'. [ 732.008978][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5640'. [ 732.219726][T29533] lo speed is unknown, defaulting to 1000 [ 732.249344][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5642'. [ 732.262927][T29577] netlink: 480 bytes leftover after parsing attributes in process `syz.3.5643'. [ 732.281333][T29579] netlink: 480 bytes leftover after parsing attributes in process `syz.3.5643'. [ 732.298010][T29577] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 732.324642][T29579] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 732.632998][T29548] lo speed is unknown, defaulting to 1000 [ 732.892092][T29606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5648'. [ 732.917311][T29606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5648'. [ 732.960373][T29528] wg1 speed is unknown, defaulting to 1000 [ 733.004241][T29533] wg1 speed is unknown, defaulting to 1000 [ 733.048783][T29548] wg1 speed is unknown, defaulting to 1000 [ 733.560548][T29622] netlink: 'syz.0.5649': attribute type 29 has an invalid length. [ 733.851019][T29639] geneve2: left allmulticast mode [ 733.899312][T29639] bond8: left allmulticast mode [ 733.999470][T29639] vlan3: left allmulticast mode [ 734.008727][T29639] bond0: left allmulticast mode [ 734.016250][T29639] ip6gretap4: left promiscuous mode [ 734.021806][ T7316] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.031147][ T7316] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.181086][ T7316] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.190416][ T7316] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.203701][T29646] syzkaller0: entered promiscuous mode [ 734.210066][T29646] syzkaller0: entered allmulticast mode [ 734.242843][T29646] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 734.787112][T29686] lo speed is unknown, defaulting to 1000 [ 735.352399][T29686] wg1 speed is unknown, defaulting to 1000 [ 735.759478][T29739] syzkaller0: entered promiscuous mode [ 735.765397][T29739] syzkaller0: entered allmulticast mode [ 736.148201][T29753] : entered promiscuous mode [ 736.281322][T29761] batadv_slave_0: entered promiscuous mode [ 736.289904][T29761] netlink: 'syz.0.5682': attribute type 2 has an invalid length. [ 736.314531][T29752] lo speed is unknown, defaulting to 1000 [ 736.342800][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.367304][T29764] xt_bpf: check failed: parse error [ 736.380708][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.402752][T29764] xt_bpf: check failed: parse error [ 736.431451][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.464034][T29764] xt_bpf: check failed: parse error [ 736.490631][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.513381][T29764] xt_bpf: check failed: parse error [ 736.539375][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.560766][T29764] xt_bpf: check failed: parse error [ 736.576036][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.599622][T29764] xt_bpf: check failed: parse error [ 736.615601][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.632610][T29764] xt_bpf: check failed: parse error [ 736.643661][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.674966][T29764] xt_bpf: check failed: parse error [ 736.688294][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.706226][T29764] xt_bpf: check failed: parse error [ 736.727647][T29764] xt_hashlimit: max too large, truncated to 1048576 [ 736.749252][T29764] xt_bpf: check failed: parse error [ 737.159798][T29791] geneve2: entered promiscuous mode [ 737.174105][T29791] geneve2: entered allmulticast mode [ 737.196123][ T7320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.204772][ T7320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.223118][T29752] wg1 speed is unknown, defaulting to 1000 [ 737.256760][ T7320] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.281156][ T7320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.386261][T29798] __nla_validate_parse: 30 callbacks suppressed [ 737.386280][T29798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5689'. [ 737.411981][T29798] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5689'. [ 737.728915][T29821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 737.752808][T29819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5695'. [ 738.068495][T29837] syzkaller0: entered promiscuous mode [ 738.074006][T29837] syzkaller0: entered allmulticast mode [ 738.141157][T29843] netlink: 'syz.1.5701': attribute type 9 has an invalid length. [ 738.368299][T29844] syzkaller0: entered promiscuous mode [ 738.409161][T29844] syzkaller0: entered allmulticast mode [ 738.566439][T29864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.601438][T29860] delete_channel: no stack [ 738.722220][T29873] syzkaller0: entered promiscuous mode [ 738.738151][T29873] syzkaller0: entered allmulticast mode [ 738.761564][T29872] tipc: Enabled bearer , priority 0 [ 738.823599][T29872] tipc: Resetting bearer [ 738.841209][T29872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.853619][T29871] tipc: Resetting bearer [ 738.882235][T29871] tipc: Disabling bearer [ 738.906543][T29877] lo speed is unknown, defaulting to 1000 [ 738.915558][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5709'. [ 738.941964][T29883] netlink: 'syz.3.5709': attribute type 1 has an invalid length. [ 739.036258][T29888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5709'. [ 739.236826][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.250774][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.295717][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.313850][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.388571][T29911] netlink: 'syz.3.5716': attribute type 1 has an invalid length. [ 739.391751][T29908] ip6gretap2: entered promiscuous mode [ 739.403102][T29909] nbd: socks must be embedded in a SOCK_ITEM attr [ 739.425761][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.529228][T29911] bond10: entered promiscuous mode [ 739.568980][T29911] 8021q: adding VLAN 0 to HW filter on device bond10 [ 739.649017][T29900] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 739.678945][T29911] tipc: Enabled bearer , priority 0 [ 739.703752][T29911] syzkaller0: entered promiscuous mode [ 739.729073][T29911] syzkaller0: entered allmulticast mode [ 739.801813][T29877] wg1 speed is unknown, defaulting to 1000 [ 739.823136][T29911] tipc: Resetting bearer [ 739.877886][T29911] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 739.898539][T29911] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 739.909083][T29911] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 740.031779][T29910] tipc: Resetting bearer [ 740.039691][T29942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5721'. [ 740.051403][T29942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5721'. [ 740.062158][T29910] tipc: Disabling bearer [ 740.224838][T29947] xt_hashlimit: size too large, truncated to 1048576 [ 740.267468][T29954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5722'. [ 740.463003][T29958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.652737][T29958] macsec1: entered promiscuous mode [ 740.754035][T29978] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 741.175631][T30005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5731'. [ 741.217618][T30008] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 741.272204][T30010] nbd: must specify a size in bytes for the device [ 741.493484][T30017] xt_ecn: cannot match TCP bits for non-tcp packets [ 741.533560][T30020] bond9: option miimon: invalid value (18446744073709551607) [ 741.571726][T30020] bond9: option miimon: allowed values 0 - 2147483647 [ 741.670418][T30020] bond9 (unregistering): Released all slaves [ 741.811740][T30032] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 742.064747][T30053] validate_nla: 60 callbacks suppressed [ 742.064771][T30053] netlink: 'syz.1.5743': attribute type 61 has an invalid length. [ 742.085219][T30053] netlink: 'syz.1.5743': attribute type 62 has an invalid length. [ 742.428061][T30068] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.461032][T30064] bond7: Removing last arp target with arp_interval on [ 742.540209][T30072] __nla_validate_parse: 4 callbacks suppressed [ 742.540225][T30072] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5747'. [ 742.583546][T30072] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5747'. [ 743.024479][T30096] netlink: 'syz.4.5752': attribute type 16 has an invalid length. [ 743.043751][T30102] netlink: 'syz.2.5754': attribute type 1 has an invalid length. [ 743.054708][T30096] netlink: 'syz.4.5752': attribute type 17 has an invalid length. [ 743.099537][T30111] x_tables: unsorted underflow at hook 3 [ 743.210540][T30114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5754'. [ 743.226904][T30096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.265242][T30096] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.298448][T30096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.371258][T30107] bond8: (slave veth7): Enslaving as an active interface with a down link [ 743.430683][T30102] bond8: (slave veth9): Enslaving as an active interface with a down link [ 743.461918][T30114] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.480934][T30115] bridge0: entered allmulticast mode [ 743.716455][T30127] [ 743.718824][T30127] ====================================================== [ 743.725844][T30127] WARNING: possible circular locking dependency detected [ 743.732877][T30127] syzkaller #0 Not tainted [ 743.737293][T30127] ------------------------------------------------------ [ 743.744303][T30127] syz.1.5759/30127 is trying to acquire lock: [ 743.750366][T30127] ffff888024f47800 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 743.759785][T30127] [ 743.759785][T30127] but task is already holding lock: [ 743.767150][T30127] ffff888024f472c0 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 743.777357][T30127] [ 743.777357][T30127] which lock already depends on the new lock. [ 743.777357][T30127] [ 743.787789][T30127] [ 743.787789][T30127] the existing dependency chain (in reverse order) is: [ 743.796793][T30127] [ 743.796793][T30127] -> #6 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 743.805390][T30127] blk_alloc_queue+0x52f/0x610 [ 743.810765][T30127] __blk_mq_alloc_disk+0x197/0x390 [ 743.816386][T30127] nbd_dev_add+0x499/0xb50 [ 743.821314][T30127] nbd_init+0x168/0x1f0 [ 743.825981][T30127] do_one_initcall+0x250/0x840 [ 743.831260][T30127] do_initcall_level+0x104/0x190 [ 743.836710][T30127] do_initcalls+0x59/0xa0 [ 743.841551][T30127] kernel_init_freeable+0x2a6/0x3d0 [ 743.847265][T30127] kernel_init+0x1d/0x1d0 [ 743.852101][T30127] ret_from_fork+0x51b/0xa40 [ 743.857201][T30127] ret_from_fork_asm+0x1a/0x30 [ 743.862473][T30127] [ 743.862473][T30127] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 743.869675][T30127] fs_reclaim_acquire+0x71/0x100 [ 743.875126][T30127] kmem_cache_alloc_node_noprof+0x48/0x6f0 [ 743.881445][T30127] __alloc_skb+0x1d0/0x7d0 [ 743.886369][T30127] __ip6_append_data+0x2a44/0x3c50 [ 743.891990][T30127] ip6_append_data+0x10f/0x280 [ 743.897264][T30127] rawv6_sendmsg+0x12d3/0x18e0 [ 743.902542][T30127] ____sys_sendmsg+0x894/0xad0 [ 743.907821][T30127] ___sys_sendmsg+0x2a5/0x360 [ 743.913007][T30127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 743.918451][T30127] do_syscall_64+0xe2/0xf80 [ 743.923462][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.929864][T30127] [ 743.929864][T30127] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 743.937597][T30127] lock_sock_nested+0x48/0x100 [ 743.942885][T30127] inet_shutdown+0x6a/0x390 [ 743.947897][T30127] nbd_mark_nsock_dead+0x2e9/0x560 [ 743.953532][T30127] sock_shutdown+0x15e/0x260 [ 743.958644][T30127] nbd_clear_sock+0x24/0x170 [ 743.963754][T30127] nbd_config_put+0x2dd/0x580 [ 743.968947][T30127] nbd_genl_connect+0x19d5/0x1cf0 [ 743.974489][T30127] genl_family_rcv_msg_doit+0x22a/0x330 [ 743.980555][T30127] genl_rcv_msg+0x61c/0x7a0 [ 743.985627][T30127] netlink_rcv_skb+0x232/0x4b0 [ 743.990913][T30127] genl_rcv+0x28/0x40 [ 743.995425][T30127] netlink_unicast+0x80f/0x9b0 [ 744.000698][T30127] netlink_sendmsg+0x813/0xb40 [ 744.005970][T30127] ____sys_sendmsg+0xa68/0xad0 [ 744.011249][T30127] ___sys_sendmsg+0x2a5/0x360 [ 744.016437][T30127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.021922][T30127] do_syscall_64+0xe2/0xf80 [ 744.026934][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.033337][T30127] [ 744.033337][T30127] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 744.040971][T30127] __mutex_lock+0x19f/0x1300 [ 744.046074][T30127] nbd_queue_rq+0x37b/0x1100 [ 744.051172][T30127] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.057224][T30127] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 744.064059][T30127] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.070541][T30127] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.076170][T30127] blk_mq_dispatch_list+0xd16/0xe10 [ 744.081880][T30127] blk_mq_flush_plug_list+0x48d/0x570 [ 744.087848][T30127] __blk_flush_plug+0x3ed/0x4d0 [ 744.093203][T30127] __submit_bio+0x4c6/0x5d0 [ 744.098226][T30127] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 744.104379][T30127] block_read_full_folio+0x7b7/0x830 [ 744.110185][T30127] filemap_read_folio+0x137/0x3b0 [ 744.115728][T30127] do_read_cache_folio+0x358/0x590 [ 744.121364][T30127] read_part_sector+0xb6/0x2b0 [ 744.126638][T30127] adfspart_check_ICS+0xa5/0xa40 [ 744.132088][T30127] bdev_disk_changed+0x765/0x14c0 [ 744.137618][T30127] blkdev_get_whole+0x380/0x510 [ 744.142977][T30127] bdev_open+0x31e/0xd30 [ 744.147726][T30127] blkdev_open+0x470/0x610 [ 744.152656][T30127] do_dentry_open+0x7ce/0x1420 [ 744.157938][T30127] vfs_open+0x3b/0x340 [ 744.162523][T30127] path_openat+0x3486/0x3e20 [ 744.167629][T30127] do_filp_open+0x22d/0x490 [ 744.172647][T30127] do_sys_openat2+0x12f/0x220 [ 744.177852][T30127] __x64_sys_openat+0x138/0x170 [ 744.183215][T30127] do_syscall_64+0xe2/0xf80 [ 744.188232][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.194631][T30127] [ 744.194631][T30127] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 744.201832][T30127] __mutex_lock+0x19f/0x1300 [ 744.206932][T30127] nbd_queue_rq+0xc6/0x1100 [ 744.211944][T30127] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.217993][T30127] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 744.224829][T30127] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.231323][T30127] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.236947][T30127] blk_mq_dispatch_list+0xd16/0xe10 [ 744.242655][T30127] blk_mq_flush_plug_list+0x48d/0x570 [ 744.248539][T30127] __blk_flush_plug+0x3ed/0x4d0 [ 744.253896][T30127] __submit_bio+0x4c6/0x5d0 [ 744.258907][T30127] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 744.265044][T30127] block_read_full_folio+0x7b7/0x830 [ 744.270842][T30127] filemap_read_folio+0x137/0x3b0 [ 744.276373][T30127] do_read_cache_folio+0x358/0x590 [ 744.281993][T30127] read_part_sector+0xb6/0x2b0 [ 744.287262][T30127] adfspart_check_ICS+0xa5/0xa40 [ 744.292702][T30127] bdev_disk_changed+0x765/0x14c0 [ 744.298228][T30127] blkdev_get_whole+0x380/0x510 [ 744.303581][T30127] bdev_open+0x31e/0xd30 [ 744.308331][T30127] blkdev_open+0x470/0x610 [ 744.313252][T30127] do_dentry_open+0x7ce/0x1420 [ 744.318517][T30127] vfs_open+0x3b/0x340 [ 744.323089][T30127] path_openat+0x3486/0x3e20 [ 744.328188][T30127] do_filp_open+0x22d/0x490 [ 744.333200][T30127] do_sys_openat2+0x12f/0x220 [ 744.338381][T30127] __x64_sys_openat+0x138/0x170 [ 744.343741][T30127] do_syscall_64+0xe2/0xf80 [ 744.348751][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.355148][T30127] [ 744.355148][T30127] -> #1 (set->srcu){.+.+}-{0:0}: [ 744.362259][T30127] __synchronize_srcu+0xca/0x3e0 [ 744.367704][T30127] elevator_switch+0x1e8/0x750 [ 744.372970][T30127] elevator_change+0x2cc/0x450 [ 744.378244][T30127] elevator_set_default+0x36c/0x430 [ 744.383947][T30127] blk_register_queue+0x34e/0x3f0 [ 744.389477][T30127] __add_disk+0x677/0xd50 [ 744.394312][T30127] add_disk_fwnode+0xfb/0x480 [ 744.399498][T30127] nbd_dev_add+0x72c/0xb50 [ 744.404442][T30127] nbd_init+0x168/0x1f0 [ 744.409102][T30127] do_one_initcall+0x250/0x840 [ 744.414374][T30127] do_initcall_level+0x104/0x190 [ 744.419826][T30127] do_initcalls+0x59/0xa0 [ 744.424664][T30127] kernel_init_freeable+0x2a6/0x3d0 [ 744.430371][T30127] kernel_init+0x1d/0x1d0 [ 744.435204][T30127] ret_from_fork+0x51b/0xa40 [ 744.440305][T30127] ret_from_fork_asm+0x1a/0x30 [ 744.445578][T30127] [ 744.445578][T30127] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 744.453382][T30127] __lock_acquire+0x15a5/0x2cf0 [ 744.458743][T30127] lock_acquire+0x106/0x330 [ 744.463760][T30127] __mutex_lock+0x19f/0x1300 [ 744.468866][T30127] elevator_change+0x1b3/0x450 [ 744.474133][T30127] elevator_set_none+0xb5/0x140 [ 744.479487][T30127] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 744.485801][T30127] nbd_start_device+0x17f/0xb10 [ 744.491162][T30127] nbd_genl_connect+0x165b/0x1cf0 [ 744.496696][T30127] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.502750][T30127] genl_rcv_msg+0x61c/0x7a0 [ 744.507764][T30127] netlink_rcv_skb+0x232/0x4b0 [ 744.513037][T30127] genl_rcv+0x28/0x40 [ 744.517542][T30127] netlink_unicast+0x80f/0x9b0 [ 744.522836][T30127] netlink_sendmsg+0x813/0xb40 [ 744.528123][T30127] ____sys_sendmsg+0xa68/0xad0 [ 744.533411][T30127] ___sys_sendmsg+0x2a5/0x360 [ 744.538601][T30127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.544053][T30127] do_syscall_64+0xe2/0xf80 [ 744.549067][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.555470][T30127] [ 744.555470][T30127] other info that might help us debug this: [ 744.555470][T30127] [ 744.565675][T30127] Chain exists of: [ 744.565675][T30127] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 744.565675][T30127] [ 744.579406][T30127] Possible unsafe locking scenario: [ 744.579406][T30127] [ 744.586844][T30127] CPU0 CPU1 [ 744.592196][T30127] ---- ---- [ 744.597546][T30127] lock(&q->q_usage_counter(io)#59); [ 744.603002][T30127] lock(fs_reclaim); [ 744.609584][T30127] lock(&q->q_usage_counter(io)#59); [ 744.617468][T30127] lock(&q->elevator_lock); [ 744.622043][T30127] [ 744.622043][T30127] *** DEADLOCK *** [ 744.622043][T30127] [ 744.630167][T30127] 6 locks held by syz.1.5759/30127: [ 744.635345][T30127] #0: ffffffff8fa1ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.643526][T30127] #1: ffffffff8fa1a948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.652477][T30127] #2: ffff88802538b1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 744.663876][T30127] #3: ffff88802538b0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 744.674842][T30127] #4: ffff888024f472c0 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 744.685453][T30127] #5: ffff888024f472f8 (&q->q_usage_counter(queue)#43){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 744.696320][T30127] [ 744.696320][T30127] stack backtrace: [ 744.702193][T30127] CPU: 0 UID: 0 PID: 30127 Comm: syz.1.5759 Not tainted syzkaller #0 PREEMPT(full) [ 744.702211][T30127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 744.702221][T30127] Call Trace: [ 744.702228][T30127] [ 744.702235][T30127] dump_stack_lvl+0xe8/0x150 [ 744.702256][T30127] print_circular_bug+0x2e1/0x300 [ 744.702273][T30127] check_noncircular+0x12e/0x150 [ 744.702290][T30127] __lock_acquire+0x15a5/0x2cf0 [ 744.702318][T30127] ? elevator_change+0x1b3/0x450 [ 744.702332][T30127] lock_acquire+0x106/0x330 [ 744.702351][T30127] ? elevator_change+0x1b3/0x450 [ 744.702369][T30127] __mutex_lock+0x19f/0x1300 [ 744.702389][T30127] ? elevator_change+0x1b3/0x450 [ 744.702405][T30127] ? rcu_is_watching+0x15/0xb0 [ 744.702420][T30127] ? elevator_change+0x1b3/0x450 [ 744.702435][T30127] ? __pfx___mutex_lock+0x10/0x10 [ 744.702454][T30127] ? enable_work+0x17f/0x230 [ 744.702469][T30127] ? lockdep_hardirqs_on+0x7a/0x110 [ 744.702490][T30127] ? __cancel_work_sync+0xf7/0x110 [ 744.702505][T30127] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 744.702524][T30127] elevator_change+0x1b3/0x450 [ 744.702541][T30127] elevator_set_none+0xb5/0x140 [ 744.702556][T30127] ? __pfx_elevator_set_none+0x10/0x10 [ 744.702572][T30127] ? xa_load+0x1db/0x210 [ 744.702593][T30127] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 744.702616][T30127] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 744.702635][T30127] ? kernfs_add_one+0x46f/0x5c0 [ 744.702656][T30127] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 744.702678][T30127] ? sysfs_add_file_mode_ns+0x259/0x300 [ 744.702698][T30127] nbd_start_device+0x17f/0xb10 [ 744.702721][T30127] ? device_create_file+0xf4/0x1b0 [ 744.702742][T30127] nbd_genl_connect+0x165b/0x1cf0 [ 744.702766][T30127] ? __pfx_nbd_genl_connect+0x10/0x10 [ 744.702793][T30127] ? rcu_is_watching+0x15/0xb0 [ 744.702808][T30127] ? __nla_parse+0x40/0x60 [ 744.702828][T30127] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 744.702852][T30127] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.702876][T30127] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 744.702900][T30127] ? __lock_acquire+0x6b5/0x2cf0 [ 744.702922][T30127] genl_rcv_msg+0x61c/0x7a0 [ 744.702944][T30127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.702963][T30127] ? __pfx_nbd_genl_connect+0x10/0x10 [ 744.702986][T30127] netlink_rcv_skb+0x232/0x4b0 [ 744.703003][T30127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.703023][T30127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.703038][T30127] ? genl_rcv+0x19/0x40 [ 744.703062][T30127] ? down_read+0x272/0x2e0 [ 744.703081][T30127] ? genl_rcv+0xd/0x40 [ 744.703100][T30127] genl_rcv+0x28/0x40 [ 744.703118][T30127] netlink_unicast+0x80f/0x9b0 [ 744.703136][T30127] ? __pfx_netlink_unicast+0x10/0x10 [ 744.703151][T30127] ? netlink_sendmsg+0x650/0xb40 [ 744.703167][T30127] ? skb_put+0x11b/0x210 [ 744.703186][T30127] netlink_sendmsg+0x813/0xb40 [ 744.703206][T30127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.703224][T30127] ? aa_sock_msg_perm+0xf1/0x1b0 [ 744.703242][T30127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 744.703258][T30127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.703274][T30127] ____sys_sendmsg+0xa68/0xad0 [ 744.703294][T30127] ? __might_fault+0xaf/0x130 [ 744.703316][T30127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.703339][T30127] ? import_iovec+0x73/0xa0 [ 744.703361][T30127] ___sys_sendmsg+0x2a5/0x360 [ 744.703379][T30127] ? __lock_acquire+0x6b5/0x2cf0 [ 744.703400][T30127] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.703422][T30127] ? futex_wake+0x4ac/0x580 [ 744.703445][T30127] ? __fget_files+0x2a/0x420 [ 744.703461][T30127] ? __fget_files+0x3a0/0x420 [ 744.703479][T30127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.703500][T30127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.703522][T30127] ? rcu_is_watching+0x15/0xb0 [ 744.703541][T30127] do_syscall_64+0xe2/0xf80 [ 744.703559][T30127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.703573][T30127] ? trace_irq_disable+0x37/0x100 [ 744.703587][T30127] ? clear_bhb_loop+0x60/0xb0 [ 744.703604][T30127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.703618][T30127] RIP: 0033:0x7f83af99aeb9 [ 744.703633][T30127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.703647][T30127] RSP: 002b:00007f83b0778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e SYZFAIL: failed to recv rpc fd=3 want=23572 recv=14076 n=-1 (errno 104: Connection reset by peer) [ 744.703662][T30127] RAX: ffffffffffffffda RBX: 00007f83afc15fa0 RCX: 00007f83af99aeb9 [ 744.703674][T30127] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 744.703684][T30127] RBP: 00007f83afa08c1f R08: 0000000000000000 R09: 0000000000000000 [ 744.703695][T30127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.703704][T30127] R13: 00007f83afc16038 R14: 00007f83afc15fa0 R15: 00007ffca8a40418 [ 744.703722][T30127] [ 745.829316][T30148] block nbd10: Receive control failed (result -32) [ 745.838621][ T5828] block nbd10: Receive control failed (result -32) [ 747.236897][ T1299] ieee802154 phy0 wpan0: encryption failed: -22