last executing test programs: 2.956192517s ago: executing program 3 (id=2317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x0, @multicast}, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth1_virt_wifi\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xd, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2.955550625s ago: executing program 4 (id=2318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711212000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r2, r2, 0x2f}, 0x20) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="2f0000003020000004000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r1, r0, 0x2d, 0x2028, 0x0, @void, @void, @value=r5}, 0x20) 2.892478712s ago: executing program 0 (id=2320): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback, r1, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000faffffff8500000005000000bf09200000000000650901001c20692566000000ffffff80180100002020692500000000002020207b1a00fe00000000de9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000200)=""/24, 0x18}], 0x7}, 0x12000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000700", @ANYRES16=r3, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000104010100000000000000000000000805000100030000000a0002000000000800000000080004400000000008000440000000090a00020000000007000000003680a4ec128dbe264789b61fee50089260c5"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x801, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000380), &(0x7f0000000340)=@tcp6=r7}, 0x20) 2.775824231s ago: executing program 3 (id=2321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "43d68639481025c6f5ffb9d31f7442dcc1a3817bd7ced357a7dff6187f21f964", "584b90020a243c96dcb21833f25e777c3dbb2318b67c772fd36fc260c54d593b", "bc4729c68f806b935a5c5cbfb491ee479cad82fcc9bb3485af9cd5b2fa7e8555", "a74e8cd5af21481e63b9b0c38a487a869806d132ab250b55b6adddb0419a41fe", "c4a25e1066a242ee7cb283e9beebd00e6aa0f32a0ed1a1d9e249558b27201488", "57c79ecfcbef3c57a5aa9707", 0x7, 0x5, 0x5478, 0x8, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) close(0x3) 2.720243105s ago: executing program 4 (id=2323): socket$pppoe(0x18, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x3, 0x1) (async) r0 = socket(0x1d, 0x3, 0x1) getsockname$netlink(r0, 0x0, &(0x7f0000000140)) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x94) 2.543293789s ago: executing program 4 (id=2325): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.464233164s ago: executing program 0 (id=2326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x800, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.410563824s ago: executing program 4 (id=2328): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0x1e, 0x4, 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) shutdown(r2, 0x0) recvmmsg(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/40, 0x28}], 0x3, &(0x7f0000002cc0)=""/4096, 0x1000}, 0x7}], 0x1, 0x40000040, &(0x7f0000003d00)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000540), &(0x7f0000000740)=r5}, 0x20) bind$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3d4, r7, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x661}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3526}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd0000000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1400000}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5ed6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf96d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb04}]}, @TIPC_NLA_MEDIA={0x148, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fc7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fce9e37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x251d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2e2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x672}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00100000314555b25bd7000ffdbdf250900020073797a3000000000080041007278650014003300636169663000000000000000000000000900020073797a31000000000800410072786500140033007663616e3000000000000000000000000900020073797a30000000000800ad00727865001400330073797a6b616c6c6572310000000000000900020073797a320000000008004100736977001400330064756d6d7930000000000000000000000900020073797a320000000008004100727865001400330070696d367265670000000000000000000900020073797a32000000000800410072786500140033006261746164765f736c6176655f3100000900020073797a300000000008004100727865001400330064766d727031000000000000000000000900020073797a32000000000800410073697700140033006e7230000000000000000000000000000900020073797a300000000008004100727865001400330076657468315f766972745f77696669000900020073797a32000000000800410072786500140033006e657470636930000000000000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x41) 2.292210689s ago: executing program 0 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0xfffffffffffffdb8, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xd, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2.12424884s ago: executing program 0 (id=2334): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000037711811000d", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x400, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x5, @remote, 0x4}}]}, 0x110) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.01065314s ago: executing program 0 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40850) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@ipv6_newaddrlabel={0x38, 0x49, 0x1, 0x70bd2d, 0x7, {0xa, 0x0, 0x80, 0x0, 0x0, 0x728a}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @empty, 0x1000}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c0000000200000000000800000000000000ffffe000000200000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d26c000000d6000000e00000020000000000000000000000000000000005"], 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r10, &(0x7f00000009c0)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, "38b256", 0xf0, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x6, 0x3, 0x1, 0x3, 0x7, 0x1}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x0, 0x1, 0x1, 0x2, 0x0, 0x4}, 0x2, {0x567, 0x1000, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "5e945860b65d9389858f8a4aa1afe0de5e98ab6b303f56cfd198bb8ea02c5bf2dc96fdd348e16c20063cfd015794e13cdd234f1ac6743273614f9d07a94d9d2dad09a3bd7a0dbc8c18758f1201f5be13514d809f41850000a4cc0860c56bae551d2de6df169a860f40ffec2588d4276d6547d3d377c152140285a61a593851f7b968b6169bd9dc772e3130bab47ad8a18f8063cfed4d727499edc6caaa838f1074134cf0e7b884ec833f40ed"}}}}}, 0x118) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f0000000400)=',\x00', 0x6000, &(0x7f0000000440)={@align=0x4000000000000000, {0x45, 0x6, 0xfffffffe, 0x6}}, 0x5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)}) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xffffff00, 0xff, 0xff], [0xffffff00, 0xffff00, 0xffffffff], 'syzkaller1\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xd, 0x19cd33d636c04710, 0x5f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xff000000, 0xffffff00, 0x7fffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'pimreg1\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x3c, 0x9, 0x5, 0x2}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x10f, 0x1000, 0x8, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 1.834902398s ago: executing program 0 (id=2337): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8a6e1000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r6, 0x0, 0x0) 1.707354558s ago: executing program 2 (id=2340): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0xa}, @struct={0x0, 0x0, 0x0, 0x4, 0x1}]}}, &(0x7f0000000340)=""/184, 0x32, 0xb8, 0x1}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25fe80000000000000000000000000002aff020000000000000000000000000001000400004e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0xc880}, 0x2014) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000840)={0x8, 0xa, 0x2, 0x6, 0x3, 0x0, 0x100}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6020400) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) shutdown(r5, 0x1) listen(r5, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r8], 0x30}}], 0x1, 0xc0) shutdown(r5, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000480)={0xec, 0x41, 0x107, 0x70bd2b, 0xfffffdfe, {0x4, 0x7c}, [@typed={0xc, 0x3c, 0x0, 0x0, @u64=0x40}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="eea83b07ef95c649fe76ae426ce54ed81026b32da59198d5f3fe197b9710c5034bd052b439addf0cc5d30b1b2d69e9148438291fde1b3b510e47012ac4c54b7d9cc95c01d279c25f2e65382f74317499b19ffe61ffb714fb8f1a605fbd7c36ac0d9a3c8ccd651ec35f52143b5fe10c84cbe67563617013f4025011d5e06ba2f3a0a8654268b540e981c821aeecec6dcdc0741d63dd09c30e6560f0f569f39f56e7a8afa77a96de4f338dde243f87996342e1a49198795e2a529a452e4f31"]}, 0xec}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800"/12, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r9, 0x29, 0xcf, &(0x7f00000008c0), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000cc0)={0x24c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x228, 0x84, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xec}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5754}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="9859c6b4c16dd80d096549be2a2142db2d07939a48997ef5bd3b67a21b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="f292e3b1bce0cde18a14d9ac00230a5c3b5e0f3e4a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x800}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffff04}, @NL80211_BAND_LC={0x8, 0x5, 0x7fe0000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x800}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x91c}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x52d0f566}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="5907fa564a7ee098"}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="0b4aa8e01977"}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x37ab}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="d251e528a4ddd9af086e49f7f5cbeaf07ab6f48da9e613a2b85e3fd584c5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x328}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="c49f25f13e0ef91326c9dc596657b1c1a1e16a0db94ee4c427b2"}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 1.706915965s ago: executing program 3 (id=2341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x800, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x87}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.687128231s ago: executing program 1 (id=2342): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "010100008000"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002bbd7000feff01004400000008000300", @ANYRES32=r7, @ANYBLOB="0a00180003030303030300000800260044160000080027000000008e0800a00006"], 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "2fda27ec82884cce", "f509d956bf114bfc9c775a631cb447cf", 'J.es', "743bcb1517518c09"}, 0x28) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x64, 0x4a, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, 0x0, 0xb3f}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000001d0000000000000000000000000000000000000000000000000000000000000000feffffef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000a9a7ce2e059c184e56b400000000000000000000000000000000000000ffffffff0000"]}, 0x108) (async) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="289984c2dc198452be00000047177da52d0007012bbd7000fedbdf25067c00000cf3a1e2"], 0x28}}, 0x4008030) (async) listen(r10, 0x12) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1017, 0x301, 0x70bd25, 0xffffffff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x4000844) ppoll(&(0x7f00000001c0)=[{r10, 0x318}, {r12, 0x8130}, {r8, 0x8028}, {r10, 0x300}, {r12, 0x400}], 0x5, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 1.526927998s ago: executing program 1 (id=2343): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34008098) sendmmsg(r1, &(0x7f0000000680), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="431904000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000159cf030e8f59057d48b8", @ANYRES32=r5, @ANYBLOB="010029bd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0088a801000b00000014"], 0x36) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000050000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bfa300000000000056080000000000008500000052000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.524079635s ago: executing program 3 (id=2344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x6}, {0xfff1, 0xffff}, {0xd, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3f, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e0, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd851, 0xe01, 0xbb6, 0x9, 0x4, 0x9, 0x5, 0x1]}}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x6}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0x4}, {}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb39, 0x1, 0x9, 0xdb3, 0x0, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x6, 0xa6e, 0x2, 0x3, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x800, 0x0, 0x2, 0x7, 0xb6, 0x7, 0x4f4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x986b, 0x8, 0x40, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xa}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x20, 0xb, 0x30, 0x30, 0x5, 0x36, 0x9, 0x0, 0x1e, 0x12, 0x2, 0x12, 0x1b, 0x18, 0x24, 0x6c]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x4, 0x1b, 0x1b, 0x6c, 0x30, 0x6c, 0x16, 0xb, 0x1, 0x69, 0x2, 0x1, 0xb, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x14, 0xd53a, 0xfe, 0x0, 0x8aa9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x10, 0x3, 0xd, 0x6, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x7, 0x7, 0x8, 0xad, 0x3, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0x1}, {}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {}, {0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x2}, {0x3, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x2}, {}, {0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000800) 1.356012848s ago: executing program 4 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88f0ffffff000104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001000000000008000740000000000800084000000011a8e3f6d074910a80050001000000000014000180080001000000000008000200e00000021c001880080002400000000008000140000000000800034000000000"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88f0ffffff000104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001000000000008000740000000000800084000000011a8e3f6d074910a80050001000000000014000180080001000000000008000200e00000021c001880080002400000000008000140000000000800034000000000"], 0x88}}, 0x0) (async) 1.203484958s ago: executing program 4 (id=2346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x3, {0x2}, 0xfd}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0xb90, 0x0, &(0x7f00000002c0)="000000005b4eba7aeaccd2c62b2b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x50, 0x8, 0x4001, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x3, 0x5, 0x6, [0xe, 0xfc]}}) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) 1.18469257s ago: executing program 2 (id=2347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xff7, &(0x7f00000014c0)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x190, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x87}]}}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_USERDATA={0xe1, 0xd, 0x1, 0x0, "d48182c74701c5266b353eb4c030f2a3b88d932ea57d83339485893d4ba159f07ba49ffe02b72f7da89ad7ebd41e0da7cc6410481229add778631cb76e571540a414e2f354db302b17dd420de098e98842ae83875c5d733278d8b564dd907b9b299d6671cf3b4b9e82ca5c7f8e080d6452c2520f52e1ab9493edb60a75675bdd5235db358830fab610197b90e310bd0ec64d6019231ea40a867a7c551679e58ce5fc01dccf8f06d4910706885eb7815b6e683198572446fd1750369ba8e4447359b2607bcd2c0d914b4abff7c5aa5b3fce2a2ed06644a23fb928980f44"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 967.376851ms ago: executing program 1 (id=2348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="060000927e875800040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r5 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r2, r1, r2, r1]}}], 0xffffffffffffffbc, 0x80}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r12 = socket(0x8000000010, 0x2, 0x4) write(r12, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 955.741681ms ago: executing program 2 (id=2349): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 831.701951ms ago: executing program 3 (id=2350): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r2, @local, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB="0a00021f349a8e3fc0162795"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 692.225578ms ago: executing program 2 (id=2351): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r1, 0xf15, 0x4, &(0x7f0000000580)="32f828a09cc4bfc206385c4483e4f51b8eec873acc0a4b94ee67c4ebf8a97d483e19e48432ee44515c6b48c17913dd7dc7d027b5a6198b0af4da28ff3073273360031287c11120d9b723282b219ba3df8b821698ce0ca11cd844f5e8e716821a6fe22b687b638bec0f37f6e661f1493d8d63f583cc304133124529b5fcda4301c28174754b818b5690504c75b9603b9e7c11d757e58aa5f5efa40b3f8778b88abe6fd9747cc7928c4a54154ca22d92bf4ec850c648988049e54fa5a28f08", 0xbe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="007a767aaf255900f9ff0800010000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004090) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRES8=r0], 0x1c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) writev(r4, &(0x7f0000000800)=[{&(0x7f00000006c0)="46c99b63eec23ac782d6993879447960b9da27c699b97df306a123674865c0b5a436b34c25cd2fd847c017bae2d7fb9f8550744fd65bd4874b009b2442e7483d2804996040a583dfc28a490d5abbde99fad310bc1beab9634db784ea7ff1dc96b470202fcd8e5534b216452cf2ada5", 0x6f}, {&(0x7f0000000740)="7fd7d9a31f34eafa20c8130ad467dddb0c161ec6b092243267c7fad3597f2f1b5fc07ebc566bddafbda0143193a8707d542cfcb17f61294b47dbe0a80826d01344b195374410a9d1acaab3e12df6fc0c2cf32258cf695f5db95fa1d73b811bb93a9a2089802595f4fd05dd5eaff21025e8c2cf450029f5758dc250909190171a64cf16bf3e0a689a2a13b670", 0x8c}], 0x2) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) r6 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r6, &(0x7f0000000640)="1cb7a2d59936477aa3cada5f28b8945c613baf1d2244dfe31a4626b080007abe6a071cc31e504747cb51a376353e990f0e6a443f14a67512ee9b8c1ee5bdca6c96d3342d61ef1e603a680d84d06ae68ab225c3886311ebb03d912cb75ac927eff5cb58585d97b97bba25", 0x6a, 0x10, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000540)={&(0x7f0000000280)=0x3, 0x3e, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000500)}) 483.812731ms ago: executing program 1 (id=2352): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 353.844682ms ago: executing program 2 (id=2353): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 260.308056ms ago: executing program 1 (id=2354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x800, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x87}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 131.644595ms ago: executing program 1 (id=2355): r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x94, '\x00', 0x0, r1, 0x1, 0x2}, 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88}, {0x0, 0x800000000000, 0x3, 0x3}, {0x0, 0x4, 0xffffffffffffffff, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @empty}}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 89.735351ms ago: executing program 2 (id=2356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xec2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ifreq(r4, 0x8915, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_ivalue=0xa80}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000ac0)={{r3, &(0x7f0000000200)='\x00', 0x0, &(0x7f0000000240)={@align, {0x9, 0x7, 0x9, 0x40}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x4}, 0x8, &(0x7f00000009c0)=[{0x3, 0x7685, &(0x7f0000000300)='*(*\x00', &(0x7f0000000340)="50d8d899fed6615dd320774ba16256b6121f9f57111a7fde7d2f2805cd01ce585cff09ee3a6e94b9d2dee0a5e3d7d8f87456523f16fd47bef571a9561b3ecfb0b6968e85bd5d3054215115fac0fe54e07134ecc83443aa4097277c004cf72136930aa3b4fc94eb0b92d9bc26100608624cfa1bed620ef8d77304ebcc871bd743ab7b5d6811f80f49234ef6d7a69043b4325f5c692dc70f81546dc78523fcc3713fe6403899a87bd57ba2183d2870161029b8d28a17c9b2ea2d86af8a3262093c4901e55ee8c1fbd043ba402572cb62a76ee1238fa779546a843612d05d7c9cfca8474f5a3c", 0xe5}, {0x3, 0x101, &(0x7f0000000440)='@\x00', &(0x7f0000000480)="1182d3b8aa3f713ae7e2a2f5a5ab0aea79932fd367cc44e1f6c2c9673b6805319a0ee71a2c048f4bd4f26e1c2d28d85d02e02e4a8519b3ed9117bccd4c1faa8a1c6a6e6896315e0d345bd2d55b1d5ae469a2d54078b41fe9d8db87d5b83f6b4fe663ee2580bc61ecd3adb18d1f8cd05210b2660b356496c0c2cdfe63f17566", 0x7f, 0x30}, {0x2, 0x160, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', &(0x7f0000000540)="238b92241dc185f9a39849469101f8a1eca5c6a40e4a34d8f67db0b792f9d055df28262766d0652861e9d485cc7060d65eecc1d843637ca3e09420e165d3bffcdd10f16e7d41e536037fce4089b7805906d84611bfd8fb4431953553fe90b0f00afe4abad3fb8f52e8cb13c98fd006c44587852b8ca5e7ebd9795fb20da4cdc7184cae2a16c552f173bd8b9ae67865c20fcde0eed60614c1c9e79a00f09ebc68b217", 0xa2, 0x28}, {0x2, 0xaf, &(0x7f0000000600)='hugetlb.1GB.rsvd.usage_in_bytes\x00', &(0x7f0000000640)="c98df883d6b1e9328c60e39b88c544dc92dc0143e4c7316c9cbcf957ddb335649163a0affd", 0x25, 0x10}, {0x1, 0x6, &(0x7f0000000680)='\xef@\x00', &(0x7f00000006c0)='M', 0x1}, {0x2, 0x6, &(0x7f0000000700)='hugetlb.1GB.rsvd.usage_in_bytes\x00', &(0x7f0000000740)="30345826dae3bbb30f2569b9a62f36a3edfa8e96e3ac7f7e82cb1e503c3a4277cba4f408c92d532c11f3eeeb3c6c0c6431edde696f20823ab8b0e9f4c05712f47d4a929bcf7d317eb8f3a13ea9a843660f782260fc2e817a5f4ee74811545b4e08dd155962da3784f944055d988e32ccf927779101958841c650ff704993475a8241b41d21319d82c0fa7341efed1c04dbf42318964bcbe425a01ea66e4b3d22f9", 0xa1, 0x2}, {0x1, 0xc35f, &(0x7f0000000800)='hugetlb.1GB.rsvd.usage_in_bytes\x00', &(0x7f0000000840)="7b2493daa052f76aab83ba4d3eed5138bdfbf283a2f1486bdeb1f3b101f55944f9bed98627384e187ef4b86bca88b2c84d70b151acb47cd473e291790c742ec92b4605c5a244907bbc75ddd5951dbf7784111b82ee51c3290575dee5e64567b40dc3c18c75ee0ac6f766baf9f2875913bddfc93e9c42951ea997e66ea55a35e7ec729fff990743e0d466383d957b48c31c428a62d19b2c9b7e18607a35be5b10569c79789ae141f289f71170c44da1f4", 0xb0, 0x32}, {0x3, 0x3, &(0x7f0000000900)='hugetlb.1GB.rsvd.usage_in_bytes\x00', &(0x7f0000000940)="b89969874eefed5661842acda251deb428bf5601b0fb32220cff02e0aa456ebb5c8e92757c1e6e91dca3fd9b62d7048190218aeb2486c2677b6969d198dcae75182dfa1ffa2416b5db08ca7bc57acb571cb828871457390063d4c0447416aed406c5", 0x62, 0x8}]}) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000b40)=@assoc_value={r1, 0x10000}, &(0x7f0000000b80)=0x8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000bc0)={'TPROXY\x00'}, &(0x7f0000000c00)=0x1e) close(r3) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000c40), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000c80)={0x1, 0x1, 0x4, 0x800, 0x4, 0x6}) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_id=r2, &(0x7f0000000d00)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000d40)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000fc0)={{r6}, r8, 0x8, @inherit={0x70, &(0x7f0000000f40)={0x0, 0x5, 0x4, 0xff, {0x28, 0xdb9, 0x8, 0xffffffffffffffba, 0x40}, [0x7ff, 0x5, 0xb0, 0x9, 0x7f]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001fc0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000002000)={0x0, 'veth1_virt_wifi\x00', {0x1}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xd7a6}]}]}, 0x30}}, 0x840) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000002140)=0x9, 0x4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002280)=0x0, &(0x7f00000022c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x14, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x3, 0x2, 0x0, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x1, 0x8, 0x46f0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002380)=[r5, r5, r5, r4, r4, r5, r5, r4], 0x0, 0x10, 0xfffffffe}, 0x94) splice(r6, &(0x7f0000002480)=0x3, r5, &(0x7f00000024c0)=0xfffffffffffffffc, 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002580)="3752d21e6d8cacbd63ec36f5204cc486", 0x10) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000025c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002640)=@generic={&(0x7f0000002600)='./file0\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2357): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07ad0000000000000000010000000000000002410000000000067564703a51797a3000000000a53bc1e93ed3fa9b38a533bc2e2b8e425dbe58045f8683554c6d5138aba3dad91c339025aeff7798b22cab887ec00e1a332cd771ae5ce15688e71223922682bfa2dd9640f0d06db9d2c7d8ff9f9b91559e4f54c40e759191650c0fb0bf7c684fd1e3285461eaf0f7dced7fac869eea9673b52db712e261b93e3b070dca55891ba68bae57536055a9d11cc896f57c"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7bcc950a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000080) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r12 = socket(0x10, 0x803, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$packet_int(r12, 0x107, 0xb, &(0x7f0000000540)=0x5, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xe, 0x2}, {0xffff, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r1, r13, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) kernel console output (not intermixed with test programs): 48210][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 181.910277][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 182.084041][ T8877] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.312479][ T8889] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 182.329934][ T8889] netlink: 'syz.0.731': attribute type 6 has an invalid length. [ 182.863446][ T8908] syzkaller1: entered allmulticast mode [ 183.007041][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.079244][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.698409][ T8937] lo speed is unknown, defaulting to 1000 [ 183.888931][ T8955] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 184.028189][ T8955] geneve3: entered promiscuous mode [ 184.033809][ T8955] geneve3: entered allmulticast mode [ 184.050109][ T8950] lo speed is unknown, defaulting to 1000 [ 185.024311][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.033513][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.095454][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.124005][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.189116][ T8998] lo: entered promiscuous mode [ 185.254489][ T8998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.321150][ T8341] lo speed is unknown, defaulting to 1000 [ 185.339538][ T8341] syz0: Port: 1 Link DOWN [ 185.392626][ T9001] syzkaller0: entered promiscuous mode [ 185.423009][ T9001] syzkaller0: entered allmulticast mode [ 185.555752][ T9011] bond3 (unregistering): Released all slaves [ 185.860135][ T9016] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 186.086890][ T9027] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 186.692237][ T9050] pimreg: entered allmulticast mode [ 186.719454][ T9050] pimreg: left allmulticast mode [ 187.445231][ T9060] sctp: [Deprecated]: syz.0.776 (pid 9060) Use of int in max_burst socket option. [ 187.445231][ T9060] Use struct sctp_assoc_value instead [ 187.562238][ T9060] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 187.586658][ T9060] __nla_validate_parse: 11 callbacks suppressed [ 187.586680][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 187.770750][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 188.234074][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 188.257581][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 188.282632][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 188.297492][ T9088] syzkaller0: entered promiscuous mode [ 188.303606][ T9088] syzkaller0: entered allmulticast mode [ 188.317874][ T9088] tipc: Enabled bearer , priority 0 [ 188.405823][ T9088] tipc: Resetting bearer [ 188.495404][ T9088] tipc: Disabling bearer [ 189.076948][ T9120] lo: Caught tx_queue_len zero misconfig [ 189.141261][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 189.162931][ T9120] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.550606][ T9143] xt_hashlimit: max too large, truncated to 1048576 [ 189.590075][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.797'. [ 189.630359][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.797'. [ 189.869952][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'. [ 189.899284][ T9158] netlink: 'syz.1.799': attribute type 7 has an invalid length. [ 189.916952][ T9158] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 189.925176][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 189.945940][ T9164] netlink: 'syz.4.801': attribute type 23 has an invalid length. [ 190.111079][ T9172] block nbd4: not configured, cannot reconfigure [ 190.480690][ T9188] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 190.755566][ T9201] netlink: 'syz.3.815': attribute type 13 has an invalid length. [ 190.783170][ T9202] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 190.944156][ T9202] bond3: entered promiscuous mode [ 190.949883][ T9202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.991781][ T9210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.007865][ T9210] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 191.020498][ T9210] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 191.033972][ T9210] bond3: (slave ipip0): making interface the new active one [ 191.041338][ T9210] ipip0: entered promiscuous mode [ 191.056864][ T9210] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 191.873301][ T9252] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 191.990422][ T9252] team0 (unregistering): Port device team_slave_0 removed [ 192.065985][ T9252] team0 (unregistering): Port device team_slave_1 removed [ 192.604917][ T9283] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.731293][ T9282] __nla_validate_parse: 13 callbacks suppressed [ 192.731315][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 192.785205][ T9283] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.836'. [ 192.829818][ T9285] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.836'. [ 192.915645][ T9294] wireguard0: entered promiscuous mode [ 192.955734][ T9294] wireguard0: entered allmulticast mode [ 193.240404][ T9304] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 193.282264][ T9304] netlink: 128 bytes leftover after parsing attributes in process `syz.3.842'. [ 193.338803][ T9304] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 193.350461][ T9304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.842'. [ 194.539892][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546356][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.743112][ T9355] netlink: 'syz.3.857': attribute type 10 has an invalid length. [ 194.772257][ T9355] syz_tun: entered promiscuous mode [ 194.785610][ T9355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 194.808035][ T9355] netlink: 11 bytes leftover after parsing attributes in process `syz.3.857'. [ 194.834390][ T9355] bond0: entered allmulticast mode [ 194.839793][ T9355] bond_slave_0: entered allmulticast mode [ 194.845728][ T9355] bond_slave_1: entered allmulticast mode [ 194.851701][ T9355] syz_tun: entered allmulticast mode [ 195.099988][ T9376] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 195.110926][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.201903][ T9377] nbd3: detected capacity change from 0 to 63 [ 195.228439][ T9378] block nbd3: NBD_DISCONNECT [ 195.265002][ T9378] block nbd3: Disconnected due to user request. [ 195.273006][ T9378] block nbd3: shutting down sockets [ 195.295728][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.305691][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 195.314058][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.323675][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 195.331542][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.341178][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 195.349022][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.358666][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 195.391517][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.404302][ T1628] Buffer I/O error on dev nbd3, logical block 0, async page read [ 195.414902][ T1628] Buffer I/O error on dev nbd3, logical block 1, async page read [ 195.422851][ T1628] Buffer I/O error on dev nbd3, logical block 2, async page read [ 195.431717][ T1628] Buffer I/O error on dev nbd3, logical block 3, async page read [ 195.442627][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.452587][ T1628] Buffer I/O error on dev nbd3, logical block 0, async page read [ 195.460866][ T1628] Buffer I/O error on dev nbd3, logical block 1, async page read [ 195.469378][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.479813][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.490137][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.504196][ T1628] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.515064][ T5811] ldm_validate_partition_table(): Disk read failed. [ 195.524522][ T5811] Dev nbd3: unable to read RDB block 0 [ 195.533140][ T5811] nbd3: unable to read partition table [ 195.566058][ T5811] ldm_validate_partition_table(): Disk read failed. [ 195.579018][ T5811] Dev nbd3: unable to read RDB block 0 [ 195.593972][ T5811] nbd3: unable to read partition table [ 195.823127][ T9400] x_tables: unsorted underflow at hook 2 [ 195.832893][ T9400] netlink: 'syz.1.868': attribute type 18 has an invalid length. [ 195.865298][ T9401] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 196.493341][ T9409] tipc: Resetting bearer [ 196.502247][ T9409] tipc: Resetting bearer [ 196.534788][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.558690][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.910785][ T9423] syzkaller1: entered promiscuous mode [ 196.925733][ T9423] syzkaller1: entered allmulticast mode [ 196.940344][ T9423] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 196.971049][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 196.993524][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 197.036717][ T9425] netlink: 'syz.2.875': attribute type 15 has an invalid length. [ 197.164436][ T9428] syzkaller1: entered promiscuous mode [ 197.170273][ T9428] syzkaller1: entered allmulticast mode [ 197.194518][ T95] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 197.220370][ T95] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 197.346610][ T95] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 197.359418][ T95] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 197.641789][ T9445] syzkaller1: entered promiscuous mode [ 197.653983][ T9445] syzkaller1: entered allmulticast mode [ 197.932529][ T9451] syzkaller1: entered promiscuous mode [ 197.965910][ T9451] syzkaller1: entered allmulticast mode [ 198.181867][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'. [ 198.592537][ T9485] tipc: Enabled bearer , priority 0 [ 199.087109][ T9501] netlink: 'syz.0.890': attribute type 9 has an invalid length. [ 199.236996][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 199.269996][ T9508] netlink: 'syz.1.893': attribute type 20 has an invalid length. [ 199.289135][ T9508] netlink: 'syz.1.893': attribute type 21 has an invalid length. [ 199.324209][ T9510] syzkaller0: entered promiscuous mode [ 199.344137][ T9510] syzkaller0: entered allmulticast mode [ 199.395606][ T9510] tipc: Enabled bearer , priority 0 [ 199.434943][ T9506] tipc: Resetting bearer [ 199.506553][ T9506] tipc: Disabling bearer [ 199.705291][ T8341] tipc: Node number set to 2393433425 [ 199.807522][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 199.856555][ T9528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.640294][ T9545] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.880722][ T9551] xt_CT: No such helper "netbios-ns" [ 200.961081][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 201.140636][ T9565] netlink: 'syz.0.909': attribute type 39 has an invalid length. [ 201.332158][ T9565] openvswitch: netlink: Key type 106 is out of range max 32 [ 201.348804][ T9567] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 201.364311][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 201.383546][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 201.497869][ T9569] syzkaller1: entered promiscuous mode [ 201.547921][ T9569] syzkaller1: entered allmulticast mode [ 201.598808][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 201.651309][ T9569] tipc: Enabling of bearer rejected, failed to enable media [ 201.749208][ T9580] tipc: New replicast peer: 255.255.255.255 [ 201.788950][ T9580] tipc: Enabled bearer , priority 10 [ 201.802880][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 201.975125][ T9590] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 201.992654][ T9590] nbd: error processing sock list [ 202.038755][ T9590] block nbd0: shutting down sockets [ 202.285054][ T9611] ipvlan2: entered promiscuous mode [ 202.304278][ T9611] team0: Device ipvlan2 failed to register rx_handler [ 202.603553][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 202.669833][ T9634] ipvlan2: entered allmulticast mode [ 202.707272][ T9634] syz_tun: entered allmulticast mode [ 202.894030][ T8351] tipc: Node number set to 617372085 [ 203.271167][ T9655] syzkaller0: refused to change device tx_queue_len [ 203.346456][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.929'. [ 203.403460][ T9661] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 203.597774][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'. [ 204.025153][ T9679] bond5: entered promiscuous mode [ 204.052319][ T9679] bond5: entered allmulticast mode [ 204.085299][ T9679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.193263][ T9702] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 204.401625][ T9702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.525623][ T9705] bond4: (slave veth9): Enslaving as an active interface with a down link [ 204.578409][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.591731][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.604734][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.617127][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.632940][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.665335][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.687246][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.719196][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.753200][ T9702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.761619][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.825812][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.833205][ T9707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.867055][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.883102][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.905272][ T1154] net_ratelimit: 94 callbacks suppressed [ 204.905291][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.920044][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.933017][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.942944][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.954579][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.963650][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.989778][ T9707] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 205.009579][ T9710] bridge_slave_1 (unregistering): left allmulticast mode [ 205.017652][ T9710] bridge_slave_1 (unregistering): left promiscuous mode [ 205.026379][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.066245][ T9705] 8021q: VLANs not supported on ip6gre0 [ 205.110672][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 205.122252][ T9729] bond4: (slave batadv2): making interface the new active one [ 205.132127][ T9729] batadv2: entered promiscuous mode [ 205.139446][ T9729] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 205.190178][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.197485][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.388929][ T9744] netlink: 128 bytes leftover after parsing attributes in process `syz.1.948'. [ 205.640018][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 205.640603][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 206.095658][ T9774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.957'. [ 206.224509][ T9770] syzkaller0: entered promiscuous mode [ 206.238349][ T9770] syzkaller0: entered allmulticast mode [ 206.403563][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 206.694043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.699153][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.911781][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 208.711936][ T9814] __nla_validate_parse: 1 callbacks suppressed [ 208.711955][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 208.876899][ T9821] xt_hashlimit: size too large, truncated to 1048576 [ 208.919548][ T9824] tipc: Resetting bearer [ 208.986689][ T9824] bond0: (slave syz_tun): Releasing backup interface [ 209.030329][ T9824] syz_tun: left allmulticast mode [ 209.069219][ T9824] bridge_slave_0: left allmulticast mode [ 209.095216][ T9824] bridge_slave_0: left promiscuous mode [ 209.107698][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.157253][ T9824] bridge_slave_1: left promiscuous mode [ 209.178756][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.217741][ T9824] bond0: (slave bond_slave_0): Releasing backup interface [ 209.245101][ T9824] bond_slave_0: left allmulticast mode [ 209.254516][ C1] openvswitch: cpu_id mismatch with handler threads [ 209.259520][ T9824] bond0: (slave bond_slave_1): Releasing backup interface [ 209.321205][ T9824] bond_slave_1: left allmulticast mode [ 209.355464][ T9824] team0: Port device team_slave_0 removed [ 209.385204][ T9824] team0: Port device team_slave_1 removed [ 209.399708][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.424855][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.439425][ T9824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.486993][ T9827] @0Ù: renamed from bond_slave_1 (while UP) [ 209.508427][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 209.535293][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 209.690486][ T9852] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.979'. [ 210.055738][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.242294][ T9872] vti1: entered promiscuous mode [ 210.308356][ T9872] vti1: entered allmulticast mode [ 210.438470][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 210.496689][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 210.535103][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.545753][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.556252][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.564516][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.573205][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.715656][ T9901] bond0: option arp_validate: invalid value (55553) [ 210.731276][ T9905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.991'. [ 210.747420][ T9904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.991'. [ 210.909867][ T9901] netlink: 'syz.2.990': attribute type 3 has an invalid length. [ 210.928745][ T9912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.173496][ T9923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.300079][ T9928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.998'. [ 211.338866][ T9928] nbd: must specify at least one socket [ 211.949984][ T9958] pimreg: entered allmulticast mode [ 212.100412][ T9962] sctp: [Deprecated]: syz.2.1008 (pid 9962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.100412][ T9962] Use struct sctp_sack_info instead [ 212.188893][ T9966] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 212.361026][ T9965] bond3: (slave geneve3): making interface the new active one [ 212.401202][ T9965] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 212.444470][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.474764][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.501454][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.530660][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.746572][ T9991] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 212.789053][ T9982] 8021q: VLANs not supported on vxcan0 [ 212.824221][ T9953] pimreg: left allmulticast mode [ 213.262225][T10014] xt_hl: Unknown TTL match mode: 237 [ 213.330659][T10012] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1023'. [ 213.381929][T10012] netlink: 'syz.4.1023': attribute type 2 has an invalid length. [ 213.459089][T10012] : entered promiscuous mode [ 213.511492][T10023] netlink: 'syz.0.1026': attribute type 9 has an invalid length. [ 213.565860][T10022] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.947972][T10036] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 213.983465][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 214.059362][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 214.167899][T10036] bond4: entered promiscuous mode [ 214.202883][T10036] bond4: entered allmulticast mode [ 214.235435][T10036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.358291][T10043] erspan1: entered allmulticast mode [ 214.386329][T10043] bond4: (slave erspan1): making interface the new active one [ 214.394253][T10043] erspan1: entered promiscuous mode [ 214.402598][T10043] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 214.476249][T10065] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1033'. [ 214.520494][T10066] 0: reclassify loop, rule prio 0, protocol 03 [ 214.557147][T10068] syz_tun: entered allmulticast mode [ 214.570822][T10068] syz_tun: left allmulticast mode [ 214.623112][T10072] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 214.837382][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'. [ 215.063344][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 215.101377][T10092] netlink: 'syz.1.1040': attribute type 34 has an invalid length. [ 215.109714][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 215.320713][T10100] Cannot find set identified by id 0 to match [ 215.409410][T10101] veth11: entered allmulticast mode [ 215.539043][T10101] veth11: entered allmulticast mode [ 215.673491][ T3346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.709676][T10118] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 215.779629][T10107] lo speed is unknown, defaulting to 1000 [ 215.842241][T10101] veth11: entered allmulticast mode [ 215.939245][T10118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.041037][T10101] veth11: entered allmulticast mode [ 216.101567][T10128] syzkaller0: entered promiscuous mode [ 216.119602][T10128] syzkaller0: entered allmulticast mode [ 216.185741][ T1167] batadv2: left promiscuous mode [ 216.225346][T10101] veth11: entered allmulticast mode [ 216.300482][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.309405][ T3346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.318359][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.327477][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.336434][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.527036][T10144] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 216.554942][T10144] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 216.719787][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 217.006293][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 217.018016][T10167] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1059'. [ 217.143648][T10167] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 217.474914][T10171] syzkaller0: entered promiscuous mode [ 217.499997][T10171] syzkaller0: entered allmulticast mode [ 217.510149][T10182] xt_hashlimit: size too large, truncated to 1048576 [ 217.599123][T10188] bridge_slave_0 (unregistering): left allmulticast mode [ 217.670446][T10188] bridge_slave_0 (unregistering): left promiscuous mode [ 217.714194][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.081108][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 218.536269][T10216] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 218.600436][T10217] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 220.146148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.422518][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 220.431897][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 220.435729][T10208] syzkaller1: entered promiscuous mode [ 220.447392][T10208] syzkaller1: entered allmulticast mode [ 220.492812][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 220.522654][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 220.673049][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 220.821350][T10232] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 220.842557][T10232] bond7 (unregistering): Released all slaves [ 220.897005][T10228] lo speed is unknown, defaulting to 1000 [ 220.976114][T10242] bond1: entered promiscuous mode [ 221.196096][T10248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1079'. [ 221.414874][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.430935][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.441594][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.803441][T10281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1083'. [ 221.999952][T10294] sctp: [Deprecated]: syz.1.1087 (pid 10294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.999952][T10294] Use struct sctp_sack_info instead [ 222.054888][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.066187][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.074682][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.111370][T10297] sctp: [Deprecated]: syz.1.1087 (pid 10297) Use of int in max_burst socket option. [ 222.111370][T10297] Use struct sctp_assoc_value instead [ 222.229554][T10299] Bluetooth: MGMT ver 1.23 [ 222.404351][T10285] gre1: entered promiscuous mode [ 222.414318][T10285] gre1: entered allmulticast mode [ 222.426841][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 222.455438][T10288] tunl0: Caught tx_queue_len zero misconfig [ 222.783001][T10314] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.832047][T10315] ip6tnl0: Caught tx_queue_len zero misconfig [ 222.917809][T10323] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1094'. [ 222.982804][T10323] unsupported nlmsg_type 40 [ 223.855186][T10336] bond_slave_0: mtu less than device minimum [ 224.197881][T10355] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 224.288365][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 224.356058][T10355] bond3: entered promiscuous mode [ 224.377517][T10355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.522901][T10359] bond3: (slave bridge3): making interface the new active one [ 224.555008][T10359] bridge3: entered promiscuous mode [ 224.580847][T10359] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 224.881314][T10384] nbd: couldn't find a device at index 65546 [ 225.019094][T10388] pimreg: entered allmulticast mode [ 225.037562][T10388] pimreg: left allmulticast mode [ 225.314954][T10405] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 225.361186][T10402] ipvlan0: Caught tx_queue_len zero misconfig [ 225.528527][T10414] macvlan0: entered promiscuous mode [ 225.547285][T10414] __nla_validate_parse: 4 callbacks suppressed [ 225.547304][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 225.576478][T10414] netlink: 'syz.3.1119': attribute type 10 has an invalid length. [ 225.601582][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 225.631370][T10408] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 225.646534][T10408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1118'. [ 225.661111][T10414] geneve2: entered promiscuous mode [ 225.666864][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 225.678593][T10414] geneve2: entered allmulticast mode [ 225.686493][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 225.696937][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 225.831487][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 225.844649][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 225.970478][T10429] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 226.410505][T10436] lo speed is unknown, defaulting to 1000 [ 227.177003][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.186059][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.195032][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.208283][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.277853][T10489] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1138'. [ 227.386668][T10491] syzkaller0: entered promiscuous mode [ 227.408827][T10491] syzkaller0: entered allmulticast mode [ 227.460725][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1136'. [ 227.818702][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.828080][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.961891][T10529] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 228.293115][T10554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.485519][T10571] netlink: 'syz.1.1154': attribute type 15 has an invalid length. [ 228.797494][T10584] netlink: 'syz.0.1162': attribute type 322 has an invalid length. [ 228.811263][T10589] netlink: 'syz.0.1162': attribute type 322 has an invalid length. [ 228.820595][T10586] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 228.909892][T10592] netlink: 'syz.3.1164': attribute type 8 has an invalid length. [ 229.525057][T10618] bridge2: entered promiscuous mode [ 229.541861][T10618] bridge2: entered allmulticast mode [ 229.575096][T10618] team0: Port device bridge2 added [ 229.690421][T10624] bridge0: port 1(team0) entered blocking state [ 229.734339][T10624] bridge0: port 1(team0) entered disabled state [ 229.753276][T10624] team0: entered allmulticast mode [ 229.769109][T10624] team0: entered promiscuous mode [ 229.970377][T10642] dvmrp0: entered allmulticast mode [ 230.018560][T10646] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 230.200073][T10646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.447431][T10650] bond7: (slave veth7): Enslaving as an active interface with a down link [ 230.513876][T10661] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 230.568557][T10653] tipc: Resetting bearer [ 230.592293][T10653] tipc: Resetting bearer [ 230.667577][T10657] tipc: Resetting bearer [ 230.741052][T10657] syz_tun: left promiscuous mode [ 230.763280][T10657] bond0: left allmulticast mode [ 230.830953][T10657] bridge_slave_1: left allmulticast mode [ 230.900403][T10657] macvlan0: left promiscuous mode [ 230.975184][T10657] bond3: left promiscuous mode [ 230.984155][T10657] bond4: left promiscuous mode [ 230.991442][T10657] bond5: left promiscuous mode [ 230.997415][T10657] bond5: left allmulticast mode [ 231.005915][T10657] geneve2: left promiscuous mode [ 231.011041][T10657] geneve2: left allmulticast mode [ 231.056995][T10661] team0: Device wg2 is of different type [ 231.109490][T10646] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 231.120320][T10646] bond7: (slave batadv2): making interface the new active one [ 231.130284][T10646] batadv2: entered promiscuous mode [ 231.138865][T10646] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 231.234653][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.269611][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.300155][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.327223][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.409558][T10685] tc_dump_action: action bad kind [ 231.509151][T10687] __nla_validate_parse: 12 callbacks suppressed [ 231.509170][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 231.779606][T10701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.850968][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 231.900401][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 232.050928][T10713] netlink: 'syz.2.1200': attribute type 21 has an invalid length. [ 232.313136][T10721] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.638289][T10741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.738394][T10737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.812381][T10751] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1212'. [ 232.939185][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.948232][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.956441][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.971228][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.009259][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 233.068386][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 233.092680][T10751] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 233.112175][ T8341] lo speed is unknown, defaulting to 1000 [ 233.121375][ T8341] syz0: Port: 1 Link ACTIVE [ 233.132848][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 233.152301][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 233.167251][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 233.204577][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.219747][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.250770][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.278367][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.574441][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.583378][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.623043][T10790] netdevsim netdevsim1: Direct firmware load for .® failed with error -2 [ 233.636042][T10790] netdevsim netdevsim1: Falling back to sysfs fallback for: .® [ 233.809860][T10795] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 233.842883][T10795] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 233.870931][T10795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 233.930287][T10803] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 233.940383][T10803] netlink: 'syz.2.1225': attribute type 2 has an invalid length. [ 234.234790][T10814] netlink: NAT attribute has 5 unknown bytes [ 234.257120][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.254483][T10850] netlink: 'syz.1.1238': attribute type 6 has an invalid length. [ 236.370829][T10894] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 236.429987][T10894] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.478701][T10896] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 236.487005][T10896] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 236.495791][T10896] veth0_virt_wifi: entered allmulticast mode [ 236.511577][T10896] veth0_virt_wifi: entered promiscuous mode [ 236.519438][T10896] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 236.526823][T10896] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 236.539373][T10898] 8021q: VLANs not supported on vcan0 [ 236.582229][T10898] 8021q: VLANs not supported on vxcan1 [ 236.928118][T10915] __nla_validate_parse: 12 callbacks suppressed [ 236.928141][T10915] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1261'. [ 237.087233][T10924] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 237.123877][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 237.228333][T10925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.391696][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 237.402499][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 237.448467][T10947] syzkaller0: entered promiscuous mode [ 237.458783][T10947] syzkaller0: entered allmulticast mode [ 237.473655][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 237.651793][T10954] nbd: must specify at least one socket [ 237.840796][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 237.864814][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 237.874287][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 238.066698][ T57] net_ratelimit: 6 callbacks suppressed [ 238.066719][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.554036][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 238.671729][T10990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1281'. [ 238.697962][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.706187][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.714379][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.722520][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.089656][T11006] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 239.226804][T11022] ÿ: renamed from bond_slave_0 [ 239.334201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.356045][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.487306][T11035] tipc: Resetting bearer [ 239.602606][T11035] team0: Port device syz_tun added [ 240.166391][T11046] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 242.613572][T11046] bond2 (unregistering): Released all slaves [ 242.707972][T11067] netlink: 'syz.0.1303': attribute type 158 has an invalid length. [ 243.116679][T11081] __nla_validate_parse: 4 callbacks suppressed [ 243.116699][T11081] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1307'. [ 243.181271][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.220546][T11086] xt_recent: Unsupported userspace flags (000000c5) [ 243.232123][T11084] xt_recent: Unsupported userspace flags (000000c5) [ 243.264230][T11084] syzkaller1: entered promiscuous mode [ 243.269859][T11084] syzkaller1: entered allmulticast mode [ 243.345813][T11093] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1308'. [ 243.362822][T11088] syzkaller0: entered allmulticast mode [ 243.385248][T11088] syzkaller0: entered promiscuous mode [ 243.557131][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.814855][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.040472][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 244.068243][T11132] netlink: 58712 bytes leftover after parsing attributes in process `syz.4.1319'. [ 244.119409][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 244.143144][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1319'. [ 244.218784][T11136] netlink: 'syz.3.1321': attribute type 2 has an invalid length. [ 244.414945][T11145] Cannot find add_set index 34 as target [ 244.454398][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.463249][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.472233][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.493855][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.526144][T11148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.563459][T11152] batman_adv: batadv0: Adding interface: veth0 [ 244.570475][T11152] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.581691][T11148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.620050][T11152] batman_adv: batadv0: Interface activated: veth0 [ 244.680207][T11148] bond5: Removing last ns target with arp_interval on [ 244.841860][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 244.867013][T11168] block nbd1: not configured, cannot reconfigure [ 244.907114][T11163] Can't find ip_set type hash: [ 245.374905][T11192] netlink: 'syz.4.1338': attribute type 3 has an invalid length. [ 245.410153][T11186] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.457325][T11186] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.543348][T11186] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.621089][T11186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.633681][T11204] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1342'. [ 245.926407][ T13] smbdirect: ib_dev[syz2] removed [ 246.125103][T11228] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 246.278251][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 246.502654][T11244] syzkaller0: entered promiscuous mode [ 246.529912][T11244] syzkaller0: entered allmulticast mode [ 246.641176][T11244] team0: Caught tx_queue_len zero misconfig [ 247.176407][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 247.219068][T11270] netlink: 'syz.4.1362': attribute type 18 has an invalid length. [ 247.335213][T11277] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.355154][T11279] netlink: 'syz.2.1366': attribute type 11 has an invalid length. [ 247.361268][T11277] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.581353][T11277] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.643617][T11277] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.184276][T11322] __nla_validate_parse: 4 callbacks suppressed [ 248.184297][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1378'. [ 248.335676][T11326] xt_connbytes: Forcing CT accounting to be enabled [ 248.510667][T11277] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.528539][T11277] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.652139][T11277] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.683631][T11277] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.810874][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 248.828203][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 248.853142][T11340] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 248.892878][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 248.934926][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.214113][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.243786][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.258893][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.275125][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.292415][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.323553][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.374256][ T1007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.400816][ T1007] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.574891][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.842889][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 249.937408][T11392] veth3: entered allmulticast mode [ 250.215496][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.224301][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.232957][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.241737][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.303482][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 250.404778][T11407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1401'. [ 250.440186][T11407] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 250.766323][T11417] ipvlan2: entered promiscuous mode [ 250.789748][T11417] bridge0: port 3(ipvlan2) entered blocking state [ 250.820089][T11417] bridge0: port 3(ipvlan2) entered disabled state [ 250.844261][T11417] ipvlan2: entered allmulticast mode [ 250.866071][T11417] bridge0: entered allmulticast mode [ 250.894150][T11417] ipvlan2: left allmulticast mode [ 250.910761][T11417] bridge0: left allmulticast mode [ 251.195832][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.467969][T11441] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1411'. [ 251.680593][T11446] sctp: [Deprecated]: syz.0.1413 (pid 11446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.680593][T11446] Use struct sctp_sack_info instead [ 252.063887][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'. [ 252.336833][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.355779][T11471] netlink: 'syz.2.1419': attribute type 12 has an invalid length. [ 252.368746][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.408770][T11468] syzkaller0: entered promiscuous mode [ 252.455295][T11468] syzkaller0: entered allmulticast mode [ 252.534097][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.573048][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.647609][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.702423][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.963684][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 253.256444][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 253.507286][T11502] netlink: 271 bytes leftover after parsing attributes in process `syz.2.1426'. [ 253.746492][T11511] netlink: 'syz.0.1429': attribute type 10 has an invalid length. [ 253.823373][T11520] netlink: 'syz.0.1429': attribute type 9 has an invalid length. [ 254.043447][T11516] syzkaller1: entered allmulticast mode [ 254.051913][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1433'. [ 254.070781][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.098521][T11528] bridge_slave_0: Caught tx_queue_len zero misconfig [ 254.129245][T11532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1434'. [ 254.227402][T11534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1435'. [ 254.240221][T11534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1435'. [ 254.412302][T11539] syzkaller0: entered promiscuous mode [ 254.425479][T11539] syzkaller0: entered allmulticast mode [ 254.909350][T11572] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 255.334967][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.347910][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'. [ 255.357910][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'. [ 255.976158][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.985037][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.986027][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010911][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.019804][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.466341][T11572] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 257.715267][T11580] lo speed is unknown, defaulting to 1000 [ 257.775696][T11595] syzkaller0: entered promiscuous mode [ 257.783902][T11595] syzkaller0: entered allmulticast mode [ 257.830257][T11606] trusted_key: syz.0.1448 sent an empty control message without MSG_MORE. [ 257.976046][T11611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.307951][T11622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1452'. [ 258.698432][T11646] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 258.728897][T11647] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 258.745541][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 258.928957][T11647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.422538][T11670] netlink: 'syz.4.1463': attribute type 21 has an invalid length. [ 259.486312][T11660] pim6reg: entered allmulticast mode [ 259.531366][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1463'. [ 259.586648][T11678] netlink: 'syz.3.1465': attribute type 22 has an invalid length. [ 259.649341][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1465'. [ 259.677218][T11660] pim6reg: left allmulticast mode [ 259.814437][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.112887][T11695] team0: left allmulticast mode [ 260.128659][T11695] bridge2: left allmulticast mode [ 260.144514][T11695] team0: left promiscuous mode [ 260.158328][T11695] bridge2: left promiscuous mode [ 260.175790][T11695] bridge0: port 1(team0) entered disabled state [ 260.259697][T11695] batman_adv: batadv0: Interface deactivated: veth0 [ 260.282050][T11695] batman_adv: batadv0: Removing interface: veth0 [ 260.302155][T11695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.377088][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.465010][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 260.485327][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'. [ 261.169872][T11749] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 261.227242][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 261.302328][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 261.734688][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.742988][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.751217][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.768799][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.792429][T11778] IPVS: set_ctl: invalid protocol: 144 127.0.0.1:20002 [ 262.277269][T11802] tipc: Enabling of bearer rejected, failed to enable media [ 262.315256][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 262.347783][ T30] audit: type=1804 audit(1787807488.818:7): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1492" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1405 res=1 errno=0 [ 262.385240][ T30] audit: type=1800 audit(1787807488.818:8): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1492" name="cgroup.controllers" dev="tmpfs" ino=1405 res=0 errno=0 [ 263.093198][T11830] netlink: 4700 bytes leftover after parsing attributes in process `syz.4.1501'. [ 263.350888][T11840] bond6: entered promiscuous mode [ 263.356516][T11840] bond6: entered allmulticast mode [ 263.362212][T11840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.575137][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 263.597047][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 263.631212][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 263.652086][T11852] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 263.676160][T11852] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.1509'. [ 263.789675][T11859] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 263.805812][T11859] bond7 (unregistering): Released all slaves [ 263.996244][T11875] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 264.036801][T11878] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 264.048554][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1514'. [ 264.095387][T11869] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 264.102915][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.110727][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.253515][T11884] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.263657][ T1154] IPVS: starting estimator thread 0... [ 264.353982][T11888] IPVS: using max 30 ests per chain, 72000 per kthread [ 264.532973][T11869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.567219][T11869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.672176][T11869] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 264.687744][T11869] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 264.714839][T11878] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 264.717719][T11870] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 264.740481][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 264.740521][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.773255][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 264.791633][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.809517][T11892] netlink: 'syz.1.1515': attribute type 3 has an invalid length. [ 264.813342][T11870] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 264.881993][T11870] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 264.894189][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 264.908484][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.946004][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 264.967476][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.013123][T11899] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 265.061261][T11899] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 265.128010][T11899] netlink: 'syz.2.1516': attribute type 2 has an invalid length. [ 265.311321][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 265.582347][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.066218][T11962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.102462][T11962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.216206][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.426520][T11978] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.449959][T11978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.457334][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 266.464687][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 266.471978][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 266.498645][T11985] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1536'. [ 266.613059][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 266.676654][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 266.825755][T11991] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 266.863228][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.889374][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.896672][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.934160][T11996] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 267.167748][ T5274] veth1_vlan: left promiscuous mode [ 267.343684][T12023] netlink: 'syz.1.1545': attribute type 10 has an invalid length. [ 267.496601][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.505318][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.522640][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.559787][T12023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.582867][T12023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.626965][T12022] syzkaller0: entered promiscuous mode [ 267.648773][T12022] syzkaller0: entered allmulticast mode [ 270.034635][ T57] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.084059][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.125304][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.171281][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.480551][T12105] RDS: rds_bind could not find a transport for fe80::a8, load rds_tcp or rds_rdma? [ 270.614288][ C0] net_ratelimit: 2 callbacks suppressed [ 270.614308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.630069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.638518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.703564][T12109] rdma_rxe: rxe_newlink: failed to add lo [ 271.339136][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.935579][T12161] __nla_validate_parse: 6 callbacks suppressed [ 271.935597][T12161] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1581'. [ 271.981755][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.006774][T12171] pimreg: entered allmulticast mode [ 272.046317][T12171] pimreg: left allmulticast mode [ 272.088914][T12176] nftables ruleset with unbound chain [ 272.279604][T12184] openvswitch: netlink: Multiple metadata blocks provided [ 272.615327][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.624209][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.758538][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 272.814543][T12210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1595'. [ 272.901136][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 272.910320][T12214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.925215][T12214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.944284][T12214] batman_adv: batadv0: Removing interface: ip6gretap1 [ 272.967561][T12214] batman_adv: batadv0: Removing interface: ip6gretap2 [ 272.983497][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 272.993585][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 273.014130][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1598'. [ 273.230185][T12228] netlink: NAT attribute has 4 unknown bytes [ 273.254743][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.487921][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1604'. [ 273.594264][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'. [ 274.233648][ T48] IPVS: starting estimator thread 0... [ 274.334265][T12272] IPVS: using max 29 ests per chain, 69600 per kthread [ 274.470324][T12283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1619'. [ 274.668602][T12290] netlink: 'syz.2.1620': attribute type 13 has an invalid length. [ 275.099190][T12305] bond_slave_0: entered promiscuous mode [ 275.113335][T12305] bond_slave_0: entered allmulticast mode [ 275.883629][T12356] net_ratelimit: 3 callbacks suppressed [ 275.883651][T12356] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.761190][T12395] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 277.095793][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.340347][T12416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.491777][T12420] __nla_validate_parse: 18 callbacks suppressed [ 277.491821][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 277.516328][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 277.870253][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'. [ 277.987937][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 278.125421][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.133228][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.399376][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.423571][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.796069][T12419] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 278.915111][T12432] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 278.977617][ T57] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.001041][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.013103][ T57] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.017325][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1649'. [ 279.026003][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.123984][ T1167] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.134620][ T1167] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.160563][ T1167] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.185995][ T1167] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.365115][T12481] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 279.414201][T12490] sit0: entered promiscuous mode [ 279.492473][T12490] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 279.560616][T12490] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1654'. [ 279.692675][T12477] lo speed is unknown, defaulting to 1000 [ 279.740767][T12489] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 279.816646][T12489] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 279.880603][T12489] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 280.021086][T12489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 280.151136][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 280.180513][T12503] lo speed is unknown, defaulting to 1000 [ 280.754079][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1661'. [ 280.814167][T12526] tipc: Enabled bearer , priority 10 [ 280.967435][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 281.051343][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 281.065677][T12532] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 281.076421][T12532] gre0: Caught tx_queue_len zero misconfig [ 281.090501][T12532] netlink: 'syz.3.1667': attribute type 29 has an invalid length. [ 281.715290][T12563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.815216][ T8354] tipc: Node number set to 690956530 [ 282.284961][T12592] bond4: Unable to set up delay as MII monitoring is disabled [ 282.296864][T12592] bond4 (unregistering): Released all slaves [ 283.132162][T12633] __nla_validate_parse: 1 callbacks suppressed [ 283.132184][T12633] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1691'. [ 283.256820][T12627] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1689'. [ 283.467035][T12646] bond7: option fail_over_mac: invalid value (3) [ 283.495333][T12646] bond7 (unregistering): Released all slaves [ 283.511302][T12649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1694'. [ 283.564422][T12651] netlink: 'syz.4.1695': attribute type 4 has an invalid length. [ 283.670939][T12655] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 284.148146][T12674] netlink: 'syz.0.1703': attribute type 2 has an invalid length. [ 284.498205][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.569689][T12690] 8021q: VLANs not supported on ip_vti0 [ 284.670239][T12704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.788727][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.821377][T12717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1710'. [ 285.074568][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 285.128679][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 285.136006][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 285.169844][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 285.494094][T12753] xt_hashlimit: size too large, truncated to 1048576 [ 285.518222][T12753] xt_hashlimit: max too large, truncated to 1048576 [ 285.536416][T12753] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old? [ 285.645738][ T30] audit: type=1804 audit(1787807512.118:9): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1720" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=1903 res=1 errno=0 [ 285.677382][ T30] audit: type=1800 audit(1787807512.118:10): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1720" name="cgroup.controllers" dev="tmpfs" ino=1903 res=0 errno=0 [ 285.729309][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 286.098758][T12776] netlink: 'syz.2.1723': attribute type 4 has an invalid length. [ 286.132080][T12776] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1723'. [ 286.466125][T12782] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 286.752794][T12776] team0: Port device team_slave_0 removed [ 287.136003][T12820] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.167966][T12820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.434681][T12839] xt_ecn: cannot match TCP bits for non-tcp packets [ 287.581399][T12844] xfrm1: entered promiscuous mode [ 287.586926][T12844] xfrm1: entered allmulticast mode [ 287.800089][T12853] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.902926][T12860] sctp: [Deprecated]: syz.2.1743 (pid 12860) Use of int in max_burst socket option deprecated. [ 287.902926][T12860] Use struct sctp_assoc_value instead [ 288.071507][T12869] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 288.512546][T12889] bond1: option mode: unable to set because the bond device is up [ 288.557764][T12890] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 288.568137][T12890] bond1: (slave macvlan3): making interface the new active one [ 288.578986][T12890] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 288.613179][T12889] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 288.689100][ T8354] bond_slave_0: entered promiscuous mode [ 288.696579][ T8354] @0Ù: entered promiscuous mode [ 289.193538][T12912] __nla_validate_parse: 13 callbacks suppressed [ 289.193557][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1759'. [ 289.239083][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 289.519979][T12930] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 289.698550][T12930] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.822297][T12930] bond7: (slave dummy0): making interface the new active one [ 289.854705][T12930] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 290.543885][T12960] netlink: 'syz.4.1770': attribute type 2 has an invalid length. [ 291.100688][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 291.117289][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 291.470369][T12985] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1777'. [ 291.628103][T12990] netlink: zone id is out of range [ 291.634332][T12990] netlink: zone id is out of range [ 291.639544][T12990] netlink: zone id is out of range [ 291.646364][T12990] netlink: zone id is out of range [ 291.651579][T12990] netlink: zone id is out of range [ 291.658387][T12990] netlink: zone id is out of range [ 291.663580][T12990] netlink: zone id is out of range [ 291.669399][T12990] netlink: zone id is out of range [ 291.675677][T12990] netlink: zone id is out of range [ 291.680981][T12990] netlink: set zone limit has 4 unknown bytes [ 292.108016][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'. [ 292.213326][T13013] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1785'. [ 292.350304][T13018] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 292.629506][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'. [ 292.897165][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 293.062113][T13050] can: request_module (can-proto-0) failed. [ 293.156484][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 293.338106][T13050] nbd2: detected capacity change from 0 to 63 [ 293.502576][T13070] team0: entered promiscuous mode [ 293.527328][T13070] team_slave_0: entered promiscuous mode [ 293.550464][T13070] team_slave_1: entered promiscuous mode [ 293.580873][T13070] syz_tun: entered promiscuous mode [ 293.645340][ T5624] block nbd2: Receive control failed (result -104) [ 293.974515][T13085] lo speed is unknown, defaulting to 1000 [ 294.349063][T13096] syzkaller0: entered promiscuous mode [ 294.355972][T13096] syzkaller0: entered allmulticast mode [ 294.418245][T13096] netlink: 'syz.3.1802': attribute type 5 has an invalid length. [ 294.851167][T13127] __nla_validate_parse: 6 callbacks suppressed [ 294.851187][T13127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1807'. [ 295.257838][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'. [ 295.401365][T13139] netlink: 'syz.1.1811': attribute type 8 has an invalid length. [ 295.662307][ T1628] block nbd2: Connection timed out, retrying (0/1 alive) [ 295.681348][ T9392] block nbd2: Dead connection, failed to find a fallback [ 295.694543][ T1628] block nbd2: Connection timed out, retrying (0/1 alive) [ 295.707589][ T1628] block nbd2: Connection timed out, retrying (0/1 alive) [ 295.715350][ T1628] block nbd2: Connection timed out, retrying (0/1 alive) [ 295.735223][T13165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1817'. [ 295.972980][T13176] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1821'. [ 296.031609][T13176] syzkaller1: entered promiscuous mode [ 296.037413][T13176] syzkaller1: entered allmulticast mode [ 296.050374][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 296.080544][T13176] syzkaller1: left promiscuous mode [ 296.098281][T13176] syzkaller1: left allmulticast mode [ 296.491711][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 296.533656][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 296.557482][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 296.577606][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 296.587810][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 297.158038][T13215] netlink: 'syz.1.1833': attribute type 2 has an invalid length. [ 297.380817][T13224] net_ratelimit: 2 callbacks suppressed [ 297.380840][T13224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.108254][ T48] IPVS: starting estimator thread 0... [ 298.203844][T13258] IPVS: using max 29 ests per chain, 69600 per kthread [ 298.325692][T13269] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 298.612998][T13279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.241384][T13308] syzkaller0: entered promiscuous mode [ 299.266003][T13308] syzkaller0: entered allmulticast mode [ 300.076520][T13341] __nla_validate_parse: 34 callbacks suppressed [ 300.076540][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 300.115913][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 300.371684][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 300.920258][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 301.185764][T13380] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 301.198318][T13380] pim6reg0: persist disabled [ 301.353341][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 301.937716][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 302.145930][T13412] vlan1: entered promiscuous mode [ 302.153407][T13417] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.164657][T13412] geneve0: entered promiscuous mode [ 302.561738][T13428] netlink: 1420 bytes leftover after parsing attributes in process `syz.4.1891'. [ 302.984375][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1894'. [ 303.024020][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1894'. [ 303.160468][T13448] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 303.268796][T13450] syzkaller0: entered promiscuous mode [ 303.278890][T13450] syzkaller0: entered allmulticast mode [ 303.396175][T13452] pimreg: tun_chr_ioctl cmd 1074025677 [ 303.401932][T13452] pimreg: linktype set to 270 [ 303.407863][T13457] pimreg: tun_chr_ioctl cmd 1074025677 [ 303.417386][T13457] pimreg: linktype set to 270 [ 303.552065][T13462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1899'. [ 303.680623][T13468] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 303.700206][T13468] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 303.921474][T13477] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.938902][T13477] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.127364][T13484] bond8: entered promiscuous mode [ 304.209768][T13490] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 304.293158][T13490] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.349139][T13496] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 304.361344][T13496] bond8: (slave batadv1): making interface the new active one [ 304.370599][T13496] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 304.462000][T13500] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.492519][T13498] syzkaller0: entered promiscuous mode [ 304.510246][T13498] syzkaller0: entered allmulticast mode [ 304.535275][T13498] netlink: 'syz.3.1910': attribute type 13 has an invalid length. [ 304.562635][T13498] netlink: 'syz.3.1910': attribute type 17 has an invalid length. [ 304.618307][T13498] tipc: Resetting bearer [ 304.648059][T13498] tipc: Resetting bearer [ 304.779664][T13498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.790412][T13498] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.808149][T13517] netlink: 'syz.2.1914': attribute type 32 has an invalid length. [ 304.820146][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.966884][T13498] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.987841][T13498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.108234][T13517] bond4: option coupled_control: invalid value (10) [ 305.128866][T13529] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 305.139994][T13517] bond4 (unregistering): Released all slaves [ 305.181217][T13534] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 305.382838][T13537] ì: renamed from bond_slave_0 [ 305.405866][ T8339] lo speed is unknown, defaulting to 1000 [ 305.405890][ T29] lo speed is unknown, defaulting to 1000 [ 305.419826][T13541] FAULT_INJECTION: forcing a failure. [ 305.419826][T13541] name failslab, interval 1, probability 0, space 0, times 1 [ 305.448608][T13541] CPU: 0 UID: 0 PID: 13541 Comm: syz.1.1920 Not tainted syzkaller #0 PREEMPT(full) [ 305.448640][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.448668][T13541] Call Trace: [ 305.448677][T13541] [ 305.448686][T13541] dump_stack_lvl+0xe8/0x150 [ 305.448726][T13541] should_fail_ex+0x410/0x560 [ 305.448765][T13541] should_failslab+0xa8/0x100 [ 305.448799][T13541] __kmalloc_cache_noprof+0xa8/0x660 [ 305.448830][T13541] ? u32_init+0x193/0x6b0 [ 305.448854][T13541] ? u32_init+0x193/0x6b0 [ 305.448886][T13541] u32_init+0x193/0x6b0 [ 305.448916][T13541] tcf_proto_create+0x248/0x330 [ 305.448949][T13541] tc_new_tfilter+0x13a6/0x1810 [ 305.449001][T13541] ? __pfx_tc_new_tfilter+0x10/0x10 [ 305.449042][T13541] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 305.449091][T13541] ? __pfx_tc_new_tfilter+0x10/0x10 [ 305.449114][T13541] rtnetlink_rcv_msg+0x802/0xc00 [ 305.449143][T13541] ? netlink_sendmsg+0x5d4/0xb40 [ 305.449170][T13541] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 305.449207][T13541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.449239][T13541] ? __lock_acquire+0x683/0x2cf0 [ 305.449286][T13541] netlink_rcv_skb+0x226/0x4a0 [ 305.449309][T13541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.449342][T13541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.449378][T13541] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.449400][T13541] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.449428][T13541] netlink_unicast+0x7bd/0x940 [ 305.449473][T13541] netlink_sendmsg+0x813/0xb40 [ 305.449506][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.449533][T13541] ? aa_sock_msg_perm+0xf6/0x1c0 [ 305.449578][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.449600][T13541] sock_sendmsg_nosec+0x13a/0x180 [ 305.449630][T13541] ____sys_sendmsg+0x54e/0x850 [ 305.449669][T13541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.449714][T13541] ? import_iovec+0x73/0xa0 [ 305.449741][T13541] ___sys_sendmsg+0x2a5/0x360 [ 305.449772][T13541] ? __lock_acquire+0x683/0x2cf0 [ 305.449808][T13541] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.449882][T13541] ? __fget_files+0x2a/0x420 [ 305.449910][T13541] ? __fget_files+0x3a2/0x420 [ 305.449952][T13541] __x64_sys_sendmsg+0x1b1/0x290 [ 305.449989][T13541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.450047][T13541] do_syscall_64+0x166/0x520 [ 305.450072][T13541] ? trace_irq_disable+0x3b/0x140 [ 305.450101][T13541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.450123][T13541] ? clear_bhb_loop+0x70/0xc0 [ 305.450151][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.450173][T13541] RIP: 0033:0x7fe101f9e0d9 [ 305.450194][T13541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.450229][T13541] RSP: 002b:00007fe102df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.450252][T13541] RAX: ffffffffffffffda RBX: 00007fe102225fa0 RCX: 00007fe101f9e0d9 [ 305.450269][T13541] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 305.450283][T13541] RBP: 00007fe102df6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.450297][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.450310][T13541] R13: 00007fe102226038 R14: 00007fe102225fa0 R15: 00007ffe3c449fd8 [ 305.450346][T13541] [ 305.989371][T13557] netlink: 'syz.2.1926': attribute type 11 has an invalid length. [ 306.061868][T13560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.119903][T13563] __nla_validate_parse: 10 callbacks suppressed [ 306.119925][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 306.221914][T13551] sctp: [Deprecated]: syz.4.1923 (pid 13551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.221914][T13551] Use struct sctp_sack_info instead [ 306.234068][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 306.261697][T13567] netlink: 'syz.1.1927': attribute type 7 has an invalid length. [ 306.284630][T13567] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1927'. [ 306.681535][T13565] syzkaller0: entered promiscuous mode [ 306.698545][T13565] syzkaller0: entered allmulticast mode [ 306.870224][T13593] FAULT_INJECTION: forcing a failure. [ 306.870224][T13593] name failslab, interval 1, probability 0, space 0, times 0 [ 306.883457][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.2.1934 Not tainted syzkaller #0 PREEMPT(full) [ 306.883485][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.883499][T13593] Call Trace: [ 306.883507][T13593] [ 306.883516][T13593] dump_stack_lvl+0xe8/0x150 [ 306.883553][T13593] should_fail_ex+0x410/0x560 [ 306.883591][T13593] should_failslab+0xa8/0x100 [ 306.883623][T13593] __kmalloc_cache_noprof+0xa8/0x660 [ 306.883651][T13593] ? __kmalloc_cache_noprof+0x152/0x660 [ 306.883680][T13593] ? u32_init+0x379/0x6b0 [ 306.883704][T13593] ? u32_init+0x379/0x6b0 [ 306.883736][T13593] u32_init+0x379/0x6b0 [ 306.883765][T13593] tcf_proto_create+0x248/0x330 [ 306.883796][T13593] tc_new_tfilter+0x13a6/0x1810 [ 306.883849][T13593] ? __pfx_tc_new_tfilter+0x10/0x10 [ 306.883891][T13593] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 306.883940][T13593] ? __pfx_tc_new_tfilter+0x10/0x10 [ 306.883962][T13593] rtnetlink_rcv_msg+0x802/0xc00 [ 306.883992][T13593] ? netlink_sendmsg+0x5d4/0xb40 [ 306.884018][T13593] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 306.884047][T13593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.884090][T13593] ? __lock_acquire+0x683/0x2cf0 [ 306.884136][T13593] netlink_rcv_skb+0x226/0x4a0 [ 306.884159][T13593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.884193][T13593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.884228][T13593] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.884250][T13593] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.884276][T13593] netlink_unicast+0x7bd/0x940 [ 306.884320][T13593] netlink_sendmsg+0x813/0xb40 [ 306.884353][T13593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.884380][T13593] ? aa_sock_msg_perm+0xf6/0x1c0 [ 306.884419][T13593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.884440][T13593] sock_sendmsg_nosec+0x13a/0x180 [ 306.884468][T13593] ____sys_sendmsg+0x54e/0x850 [ 306.884506][T13593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.884548][T13593] ? import_iovec+0x73/0xa0 [ 306.884575][T13593] ___sys_sendmsg+0x2a5/0x360 [ 306.884604][T13593] ? __lock_acquire+0x683/0x2cf0 [ 306.884641][T13593] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.884715][T13593] ? __fget_files+0x2a/0x420 [ 306.884743][T13593] ? __fget_files+0x3a2/0x420 [ 306.884784][T13593] __x64_sys_sendmsg+0x1b1/0x290 [ 306.884819][T13593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.884876][T13593] do_syscall_64+0x166/0x520 [ 306.884901][T13593] ? trace_irq_disable+0x3b/0x140 [ 306.884929][T13593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.884951][T13593] ? clear_bhb_loop+0x70/0xc0 [ 306.884979][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.885001][T13593] RIP: 0033:0x7f982519e0d9 [ 306.885022][T13593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.885040][T13593] RSP: 002b:00007f9825fcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.885072][T13593] RAX: ffffffffffffffda RBX: 00007f9825425fa0 RCX: 00007f982519e0d9 [ 306.885088][T13593] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 306.885102][T13593] RBP: 00007f9825fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.885115][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.885128][T13593] R13: 00007f9825426038 R14: 00007f9825425fa0 R15: 00007ffcd93dcaa8 [ 306.885163][T13593] [ 307.845535][T13617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1941'. [ 307.896288][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 308.542185][T13637] syzkaller0: entered promiscuous mode [ 308.564656][T13637] syzkaller0: entered allmulticast mode [ 308.571230][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 308.582854][T13640] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 308.612266][T13637] tipc: Enabled bearer , priority 0 [ 308.640553][T13637] tipc: Resetting bearer [ 308.672869][T13636] tipc: Resetting bearer [ 308.765720][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 308.814692][T13649] netlink: 'syz.4.1949': attribute type 2 has an invalid length. [ 308.829528][T13636] tipc: Disabling bearer [ 308.858273][T13649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1949'. [ 308.925321][T13655] netlink: 'syz.4.1949': attribute type 3 has an invalid length. [ 308.983128][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 309.069213][T13654] batadv0: entered promiscuous mode [ 309.113459][T13654] macsec1: entered promiscuous mode [ 309.122503][T13654] macsec1: entered allmulticast mode [ 309.128476][T13654] batadv0: entered allmulticast mode [ 309.136407][T13654] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 309.144862][T13654] batadv0: left allmulticast mode [ 309.150244][T13654] batadv0: left promiscuous mode [ 309.359675][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 309.635375][T13681] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 309.702528][T13683] macvlan4: entered promiscuous mode [ 309.716727][T13683] macvlan4: entered allmulticast mode [ 309.728254][T13683] bond7: (slave macvlan4): Error -98 calling set_mac_address [ 309.788334][T13703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.978124][T13693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.994915][T13693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.053529][T13693] bond_slave_0: entered promiscuous mode [ 310.090166][T13693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.119824][T13693] batadv_slave_1: left promiscuous mode [ 310.143572][T13693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.178262][T13693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.210554][T13693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.234926][T13693] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 310.259870][T13693] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 310.356918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.364280][ T13] bridge0: port 1(bridge_slave_0) entered listening state [ 310.405968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.413194][ T13] bridge0: port 2(bridge_slave_1) entered listening state [ 310.707569][T13715] lo speed is unknown, defaulting to 1000 [ 311.020712][T13747] nbd: must specify at least one socket [ 313.159885][T13749] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 313.182784][T13749] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 313.400548][T13764] veth1_to_bond: entered allmulticast mode [ 313.440418][T13770] __nla_validate_parse: 2 callbacks suppressed [ 313.440439][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'. [ 313.483319][T13774] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1976'. [ 313.494972][T13770] bridge_slave_1: left promiscuous mode [ 313.506655][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.539076][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 313.567537][T13770] bridge_slave_0: left allmulticast mode [ 313.580244][T13770] bridge_slave_0: left promiscuous mode [ 313.607905][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.782259][T13764] veth1_to_bond: left allmulticast mode [ 313.897248][T13792] xt_cgroup: path and classid specified [ 313.993282][T13794] syzkaller1: entered promiscuous mode [ 314.025797][T13794] syzkaller1: entered allmulticast mode [ 314.107959][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 314.242467][T13806] ipvlan2: entered promiscuous mode [ 314.276581][T13806] team0: Device ipvlan2 failed to register rx_handler [ 314.767320][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'. [ 314.798065][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1988'. [ 314.817412][T13828] bridge0: port 1(veth0) entered blocking state [ 314.838194][T13828] bridge0: port 1(veth0) entered disabled state [ 314.845531][T13828] veth0: entered allmulticast mode [ 314.852906][T13828] veth0: entered promiscuous mode [ 314.859416][T13828] bridge0: port 1(veth0) entered blocking state [ 314.865909][T13828] bridge0: port 1(veth0) entered forwarding state [ 315.115043][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 315.385746][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1998'. [ 315.407136][T13859] lo: left promiscuous mode [ 315.437211][T13859] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.444539][T13859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.452218][T13859] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.459514][T13859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.546265][T13859] team0: left promiscuous mode [ 315.587600][T13859] team_slave_0: left promiscuous mode [ 315.605801][T13859] team_slave_1: left promiscuous mode [ 315.636869][T13875] netlink: 'syz.1.2003': attribute type 3 has an invalid length. [ 315.647677][T13859] syz_tun: left promiscuous mode [ 315.660187][T13875] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2003'. [ 315.670954][T13859] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.733046][T13859] hsr0: left promiscuous mode [ 315.740009][T13859] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.008648][T13885] netlink: 'syz.4.2008': attribute type 24 has an invalid length. [ 316.033801][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 316.053372][T13885] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 316.143045][T13890] lo: Caught tx_queue_len zero misconfig [ 316.161621][T13888] sctp: [Deprecated]: syz.4.2008 (pid 13888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.161621][T13888] Use struct sctp_sack_info instead [ 317.422917][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.434363][T13953] Cannot find add_set index 4 as target [ 317.757071][T13973] netlink: 'syz.3.2031': attribute type 4 has an invalid length. [ 317.816223][T13962] netlink: 'syz.3.2031': attribute type 4 has an invalid length. [ 317.884521][T13983] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 317.934827][T13982] nbd: nbd64 already in use [ 318.130235][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 318.812096][T13996] __nla_validate_parse: 12 callbacks suppressed [ 318.812116][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 319.750657][T13996] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 319.915577][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 319.979693][T14004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'. [ 320.234263][T14014] lo speed is unknown, defaulting to 1000 [ 320.359453][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 320.415631][T14021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2046'. [ 320.601468][T14021] bond8: entered promiscuous mode [ 320.629139][T14021] bond8: entered allmulticast mode [ 320.638386][T14021] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.688012][T14019] lo speed is unknown, defaulting to 1000 [ 320.849365][T14029] syzkaller0: entered promiscuous mode [ 320.863903][T14029] syzkaller0: entered allmulticast mode [ 321.310260][T14049] netlink: 'syz.0.2052': attribute type 11 has an invalid length. [ 321.477486][T14050] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 321.516125][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2052'. [ 321.628941][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2055'. [ 321.905412][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 322.393363][T14096] tipc: Started in network mode [ 322.403259][T14098] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 322.413001][T14096] tipc: Node identity -, cluster identity 4711 [ 322.444099][T14098] bond9: entered promiscuous mode [ 322.448614][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 322.450617][T14098] 8021q: adding VLAN 0 to HW filter on device bond9 [ 322.474703][T14098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 322.912172][T14127] FAULT_INJECTION: forcing a failure. [ 322.912172][T14127] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 322.962869][T14127] CPU: 0 UID: 0 PID: 14127 Comm: syz.0.2073 Not tainted syzkaller #0 PREEMPT(full) [ 322.962902][T14127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.962914][T14127] Call Trace: [ 322.962923][T14127] [ 322.962932][T14127] dump_stack_lvl+0xe8/0x150 [ 322.962970][T14127] should_fail_ex+0x410/0x560 [ 322.963009][T14127] _copy_from_user+0x2d/0xb0 [ 322.963034][T14127] ___sys_sendmsg+0x1c6/0x360 [ 322.963068][T14127] ? __lock_acquire+0x683/0x2cf0 [ 322.963105][T14127] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.963176][T14127] ? __fget_files+0x2a/0x420 [ 322.963206][T14127] ? __fget_files+0x3a2/0x420 [ 322.963255][T14127] __x64_sys_sendmsg+0x1b1/0x290 [ 322.963293][T14127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.963350][T14127] do_syscall_64+0x166/0x520 [ 322.963375][T14127] ? trace_irq_disable+0x3b/0x140 [ 322.963405][T14127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.963428][T14127] ? clear_bhb_loop+0x70/0xc0 [ 322.963455][T14127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.963477][T14127] RIP: 0033:0x7fb4f099e0d9 [ 322.963497][T14127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.963516][T14127] RSP: 002b:00007fb4f17b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.963540][T14127] RAX: ffffffffffffffda RBX: 00007fb4f0c25fa0 RCX: 00007fb4f099e0d9 [ 322.963556][T14127] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 322.963570][T14127] RBP: 00007fb4f17b1090 R08: 0000000000000000 R09: 0000000000000000 [ 322.963584][T14127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.963597][T14127] R13: 00007fb4f0c26038 R14: 00007fb4f0c25fa0 R15: 00007fff47aa5b18 [ 322.963633][T14127] [ 323.169647][T14122] hsr_slave_0: left promiscuous mode [ 323.182734][T14122] hsr_slave_1: left promiscuous mode [ 323.192327][T14133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.205166][T14133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.450840][T14146] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 323.486782][T14146] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.606661][T14146] bond9 (unregistering): Released all slaves [ 323.801678][T14157] No such timeout policy "syz0" [ 323.898025][T14169] team_slave_1: Caught tx_queue_len zero misconfig [ 324.102049][T14177] x_tables: unsorted entry at hook 2 [ 324.271908][T14189] geneve1: entered promiscuous mode [ 324.583199][T14203] __nla_validate_parse: 5 callbacks suppressed [ 324.583221][T14203] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2094'. [ 325.003536][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 325.145930][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 325.877079][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 326.038257][T14284] sctp: [Deprecated]: syz.1.2115 (pid 14284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.038257][T14284] Use struct sctp_sack_info instead [ 326.070260][T14281] syzkaller0: entered promiscuous mode [ 326.086987][T14281] syzkaller0: entered allmulticast mode [ 326.114089][T14287] sctp: [Deprecated]: syz.1.2115 (pid 14287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.114089][T14287] Use struct sctp_sack_info instead [ 326.207590][T14284] tipc: Enabled bearer , priority 20 [ 326.219226][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 326.229441][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 326.403657][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2123'. [ 326.432189][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2123'. [ 326.611896][T14306] netlink: 'syz.2.2125': attribute type 2 has an invalid length. [ 326.822662][T14315] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2129'. [ 326.985916][T14320] geneve0: Caught tx_queue_len zero misconfig [ 327.113227][T14323] syzkaller0: entered promiscuous mode [ 327.132894][T14323] syzkaller0: entered allmulticast mode [ 327.329427][T14335] FAULT_INJECTION: forcing a failure. [ 327.329427][T14335] name failslab, interval 1, probability 0, space 0, times 0 [ 327.367918][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.3.2136 Not tainted syzkaller #0 PREEMPT(full) [ 327.367950][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.367963][T14335] Call Trace: [ 327.367971][T14335] [ 327.367981][T14335] dump_stack_lvl+0xe8/0x150 [ 327.368017][T14335] should_fail_ex+0x410/0x560 [ 327.368057][T14335] should_failslab+0xa8/0x100 [ 327.368088][T14335] __kmalloc_cache_noprof+0xa8/0x660 [ 327.368115][T14335] ? xfrm_policy_alloc+0x78/0x2b0 [ 327.368135][T14335] ? xfrm_policy_alloc+0x78/0x2b0 [ 327.368163][T14335] xfrm_policy_alloc+0x78/0x2b0 [ 327.368187][T14335] xfrm_policy_construct+0x39/0x6b0 [ 327.368225][T14335] xfrm_add_policy+0x273/0x690 [ 327.368258][T14335] ? __pfx_xfrm_add_policy+0x10/0x10 [ 327.368281][T14335] ? apparmor_capable+0x126/0x170 [ 327.368315][T14335] ? __nla_parse+0x40/0x60 [ 327.368344][T14335] xfrm_user_rcv_msg+0x7a8/0xf30 [ 327.368376][T14335] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 327.368437][T14335] ? __mutex_trylock_common+0x15f/0x270 [ 327.368467][T14335] ? __pfx___mutex_trylock_common+0x10/0x10 [ 327.368494][T14335] ? rcu_is_watching+0x16/0xb0 [ 327.368517][T14335] ? trace_contention_end+0x3d/0x140 [ 327.368550][T14335] netlink_rcv_skb+0x226/0x4a0 [ 327.368573][T14335] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 327.368600][T14335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.368638][T14335] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.368659][T14335] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.368683][T14335] xfrm_netlink_rcv+0x79/0x90 [ 327.368706][T14335] netlink_unicast+0x7bd/0x940 [ 327.368751][T14335] netlink_sendmsg+0x813/0xb40 [ 327.368783][T14335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.368808][T14335] ? aa_sock_msg_perm+0xf6/0x1c0 [ 327.368859][T14335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.368881][T14335] sock_sendmsg_nosec+0x13a/0x180 [ 327.368909][T14335] ____sys_sendmsg+0x54e/0x850 [ 327.368950][T14335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.368994][T14335] ? import_iovec+0x73/0xa0 [ 327.369022][T14335] ___sys_sendmsg+0x2a5/0x360 [ 327.369055][T14335] ? __lock_acquire+0x683/0x2cf0 [ 327.369092][T14335] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.369170][T14335] ? __fget_files+0x2a/0x420 [ 327.369198][T14335] ? __fget_files+0x3a2/0x420 [ 327.369239][T14335] __x64_sys_sendmsg+0x1b1/0x290 [ 327.369277][T14335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.369333][T14335] do_syscall_64+0x166/0x520 [ 327.369357][T14335] ? trace_irq_disable+0x3b/0x140 [ 327.369385][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.369407][T14335] ? clear_bhb_loop+0x70/0xc0 [ 327.369433][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.369456][T14335] RIP: 0033:0x7f73d039e0d9 [ 327.369477][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.369496][T14335] RSP: 002b:00007f73d1243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.369520][T14335] RAX: ffffffffffffffda RBX: 00007f73d0625fa0 RCX: 00007f73d039e0d9 [ 327.369536][T14335] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 327.369550][T14335] RBP: 00007f73d1243090 R08: 0000000000000000 R09: 0000000000000000 [ 327.369563][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.369576][T14335] R13: 00007f73d0626038 R14: 00007f73d0625fa0 R15: 00007ffefa6db948 [ 327.369610][T14335] [ 327.998693][T14322] team0: Port device dummy0 removed [ 328.006352][T14322] bridge_slave_0: left allmulticast mode [ 328.012063][T14322] bridge_slave_0: left promiscuous mode [ 328.019951][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.044739][T14322] bridge_slave_1: left allmulticast mode [ 328.050557][T14322] bridge_slave_1: left promiscuous mode [ 328.056962][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.087585][T14322] team0: Port device team_slave_1 removed [ 328.101893][T14322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.150411][T14351] team0: Port device xfrm0 added [ 328.428339][T14370] x_tables: duplicate underflow at hook 1 [ 328.437838][T14360] syzkaller0: entered promiscuous mode [ 328.473256][T14360] syzkaller0: entered allmulticast mode [ 328.586091][T14380] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 328.627248][T14376] macsec1: entered promiscuous mode [ 328.711342][T14383] FAULT_INJECTION: forcing a failure. [ 328.711342][T14383] name failslab, interval 1, probability 0, space 0, times 0 [ 328.725286][T14383] CPU: 1 UID: 0 PID: 14383 Comm: syz.3.2149 Not tainted syzkaller #0 PREEMPT(full) [ 328.725312][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.725324][T14383] Call Trace: [ 328.725331][T14383] [ 328.725339][T14383] dump_stack_lvl+0xe8/0x150 [ 328.725371][T14383] should_fail_ex+0x410/0x560 [ 328.725405][T14383] should_failslab+0xa8/0x100 [ 328.725436][T14383] __kmalloc_cache_noprof+0xa8/0x660 [ 328.725465][T14383] ? xfrm_policy_alloc+0x78/0x2b0 [ 328.725488][T14383] ? xfrm_policy_alloc+0x78/0x2b0 [ 328.725516][T14383] xfrm_policy_alloc+0x78/0x2b0 [ 328.725538][T14383] xfrm_policy_construct+0x39/0x6b0 [ 328.725577][T14383] xfrm_add_policy+0x273/0x690 [ 328.725610][T14383] ? __pfx_xfrm_add_policy+0x10/0x10 [ 328.725632][T14383] ? apparmor_capable+0x126/0x170 [ 328.725665][T14383] ? __nla_parse+0x40/0x60 [ 328.725694][T14383] xfrm_user_rcv_msg+0x7a8/0xf30 [ 328.725733][T14383] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 328.725793][T14383] ? __mutex_trylock_common+0x15f/0x270 [ 328.725821][T14383] ? __pfx___mutex_trylock_common+0x10/0x10 [ 328.725848][T14383] ? rcu_is_watching+0x16/0xb0 [ 328.725872][T14383] ? trace_contention_end+0x3d/0x140 [ 328.725904][T14383] netlink_rcv_skb+0x226/0x4a0 [ 328.725927][T14383] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 328.725955][T14383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.725992][T14383] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.726012][T14383] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.726037][T14383] xfrm_netlink_rcv+0x79/0x90 [ 328.726061][T14383] netlink_unicast+0x7bd/0x940 [ 328.726106][T14383] netlink_sendmsg+0x813/0xb40 [ 328.726140][T14383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.726167][T14383] ? aa_sock_msg_perm+0xf6/0x1c0 [ 328.726208][T14383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.726229][T14383] sock_sendmsg_nosec+0x13a/0x180 [ 328.726258][T14383] ____sys_sendmsg+0x54e/0x850 [ 328.726297][T14383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.726342][T14383] ? import_iovec+0x73/0xa0 [ 328.726368][T14383] ___sys_sendmsg+0x2a5/0x360 [ 328.726400][T14383] ? __lock_acquire+0x683/0x2cf0 [ 328.726434][T14383] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.726501][T14383] ? __fget_files+0x2a/0x420 [ 328.726528][T14383] ? __fget_files+0x3a2/0x420 [ 328.726568][T14383] __x64_sys_sendmsg+0x1b1/0x290 [ 328.726603][T14383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.726659][T14383] do_syscall_64+0x166/0x520 [ 328.726685][T14383] ? trace_irq_disable+0x3b/0x140 [ 328.726724][T14383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.726747][T14383] ? clear_bhb_loop+0x70/0xc0 [ 328.726774][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.726795][T14383] RIP: 0033:0x7f73d039e0d9 [ 328.726815][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.726834][T14383] RSP: 002b:00007f73d1243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.726858][T14383] RAX: ffffffffffffffda RBX: 00007f73d0625fa0 RCX: 00007f73d039e0d9 [ 328.726873][T14383] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 328.726887][T14383] RBP: 00007f73d1243090 R08: 0000000000000000 R09: 0000000000000000 [ 328.726901][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.726912][T14383] R13: 00007f73d0626038 R14: 00007f73d0625fa0 R15: 00007ffefa6db948 [ 328.726954][T14383] [ 329.136269][T14385] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 329.144298][T14385] netlink: 'syz.2.2148': attribute type 12 has an invalid length. [ 329.152210][T14385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2148'. [ 331.643211][T14362] lo speed is unknown, defaulting to 1000 [ 331.801943][T14404] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2154'. [ 331.811355][T14400] syzkaller0: entered promiscuous mode [ 331.817281][T14400] syzkaller0: entered allmulticast mode [ 331.824423][T14404] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2154'. [ 331.952455][T14407] veth1_to_bridge: mtu greater than device maximum [ 332.208318][T14417] syzkaller0: entered promiscuous mode [ 332.246635][T14417] syzkaller0: entered allmulticast mode [ 332.318918][ T30] audit: type=1804 audit(1787807558.788:11): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2161" name="/newroot/413/cgroup.controllers" dev="tmpfs" ino=2144 res=1 errno=0 [ 332.393480][ T30] audit: type=1800 audit(1787807558.788:12): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2161" name="cgroup.controllers" dev="tmpfs" ino=2144 res=0 errno=0 [ 332.835543][T14440] lo speed is unknown, defaulting to 1000 [ 332.995346][T14453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.042127][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 333.111842][T14461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2174'. [ 333.154934][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 333.166840][ T1007] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.190552][ T1007] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.403912][ T6155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.426897][ T6155] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.439679][T14472] netlink: 4772 bytes leftover after parsing attributes in process `syz.2.2178'. [ 333.561411][T14478] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2180'. [ 333.602960][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'. [ 333.700352][T14486] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.401419][T14509] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 334.504944][T14509] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 334.815783][T14533] netlink: NAT attribute has 5 unknown bytes [ 334.863355][T14533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.918131][T14539] Bluetooth: ISO socket layer initialized [ 335.023348][T14540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2196'. [ 335.066408][T14540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2196'. [ 335.094471][T14543] tipc: Enabled bearer , priority 0 [ 335.226433][T14557] syzkaller0: entered allmulticast mode [ 335.696444][T14556] lo speed is unknown, defaulting to 1000 [ 335.803610][T14541] tipc: Disabling bearer [ 336.062231][T14568] syzkaller0: entered promiscuous mode [ 336.076031][T14568] syzkaller0: entered allmulticast mode [ 336.212470][T14582] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 336.233167][T14582] netlink: 'syz.2.2209': attribute type 4 has an invalid length. [ 336.368961][T14585] bond9: option lacp_rate: invalid value (3) [ 336.387919][T14585] bond9 (unregistering): Released all slaves [ 353.742033][ T4979] udevd[4979]: worker [5811] /devices/virtual/block/nbd2 is taking a long time [ 378.855389][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.075556][T14605] __nla_validate_parse: 4 callbacks suppressed [ 434.075633][T14605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2214'. [ 434.102249][T14605] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 434.123517][T14605] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 434.196690][T14602] block nbd0: server does not support multiple connections per device. [ 434.218378][T14602] block nbd0: shutting down sockets [ 434.256006][T14602] syzkaller0: entered promiscuous mode [ 434.274702][T14602] syzkaller0: entered allmulticast mode [ 434.434221][T14616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 434.713524][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 434.998419][T14630] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 435.022973][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.076906][T14630] tipc: Invalid UDP bearer configuration [ 435.076968][T14630] tipc: Enabling of bearer rejected, failed to enable media [ 435.309319][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 435.380826][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2223'. [ 435.709309][T14646] tipc: Resetting bearer [ 435.761344][T14646] bridge0: port 1(veth0) entered disabled state [ 436.172072][T14646] geneve1: left promiscuous mode [ 436.223334][T14646] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 436.252674][T14646] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 436.297281][T14646] xfrm1: left promiscuous mode [ 436.308451][T14646] xfrm1: left allmulticast mode [ 436.333409][T14646] bond8: left promiscuous mode [ 436.343547][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 436.392193][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 436.841506][T14667] bridge0: port 1(wlan1) entered blocking state [ 436.854043][T14667] bridge0: port 1(wlan1) entered disabled state [ 436.861795][T14667] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 436.888489][T14667] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 436.930749][T14679] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 436.955469][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 436.966367][T14679] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 436.998451][T14679] bridge0: port 1(wlan1) entered disabled state [ 437.178093][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 437.250705][T14684] debugfs: '!ù' already exists in 'ieee80211' [ 437.328900][T14689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2236'. [ 437.358042][T14688] ipt_ECN: cannot use operation on non-tcp rule [ 438.210396][T14735] sctp: [Deprecated]: syz.0.2251 (pid 14735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.210396][T14735] Use struct sctp_sack_info instead [ 438.398813][T14751] x_tables: duplicate underflow at hook 2 [ 438.529240][T14756] batman_adv: batadv0: Adding interface: macvtap1 [ 438.536247][T14756] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.564424][T14756] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 438.633153][T14756] batman_adv: batadv0: Removing interface: macvtap1 [ 438.648562][T14762] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 438.746231][T14762] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.868273][T14770] syzkaller0: create flow: hash 1121480222 index 0 [ 438.976334][T14770] syzkaller0 (unregistered): delete flow: hash 1121480222 index 0 [ 439.414762][T14797] No such timeout policy "syz1" [ 439.662715][T14821] __nla_validate_parse: 3 callbacks suppressed [ 439.662735][T14821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2274'. [ 439.774344][T14821] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2274'. [ 439.777293][T14826] netlink: 'syz.4.2276': attribute type 11 has an invalid length. [ 439.814524][T14821] netlink: 'syz.2.2274': attribute type 9 has an invalid length. [ 439.841288][T14829] netlink: 'syz.2.2274': attribute type 8 has an invalid length. [ 439.859023][T14821] netlink: 'syz.2.2274': attribute type 3 has an invalid length. [ 439.893496][T14821] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 440.259740][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2285'. [ 440.295823][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308912][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.684331][T14864] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 441.093475][T14884] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 441.103551][T14884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.195003][T14884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.191330][T14878] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 443.201026][T14878] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 443.211385][T14878] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 443.259731][T14879] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 443.300773][T14879] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 443.314086][T14879] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 443.851159][T14904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2298'. [ 444.201682][T14919] macsec1: entered allmulticast mode [ 444.226276][T14919] veth1_macvtap: entered allmulticast mode [ 444.245813][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 444.257737][T14919] veth1_macvtap: left allmulticast mode [ 444.653221][ T30] audit: type=1804 audit(1787807671.118:13): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2309" name="/newroot/446/cgroup.controllers" dev="tmpfs" ino=2310 res=1 errno=0 [ 444.711781][ T30] audit: type=1800 audit(1787807671.118:14): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2309" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 444.735905][T14935] xt_CT: No such helper "netbios-ns" [ 444.741673][ T30] audit: type=1804 audit(1787807671.168:15): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2309" name="/newroot/446/cgroup.controllers" dev="tmpfs" ino=2310 res=1 errno=0 [ 445.404274][T14971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2320'. [ 445.432398][T14971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2320'. [ 445.997186][T15012] lo speed is unknown, defaulting to 1000 [ 446.107270][T15019] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 446.573859][T15038] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2340'. [ 446.601334][T15032] ip6gre2: entered promiscuous mode [ 446.631272][T15038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 446.637723][T15032] ip6gre2: entered allmulticast mode [ 446.709748][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.747394][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.755516][ T8354] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.854056][ T8354] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.864945][T15041] macvlan1: entered promiscuous mode [ 446.893084][T15052] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2344'. [ 447.169414][ T8354] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.387120][T15068] vlan3: entered promiscuous mode [ 447.397481][T15068] vlan0: entered promiscuous mode [ 447.861593][T15080] netlink: 'syz.2.2353': attribute type 2 has an invalid length. [ 447.995560][ T31] INFO: task kworker/0:2H:9392 blocked for more than 143 seconds. [ 448.006186][ T31] Not tainted syzkaller #0 [ 448.011241][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.070128][ T31] task:kworker/0:2H state:D stack:26568 pid:9392 tgid:9392 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 448.089097][ T31] Workqueue: kblockd blk_mq_requeue_work [ 448.095618][ T31] Call Trace: [ 448.099480][ T31] [ 448.105117][ T31] __schedule+0x17d4/0x5630 [ 448.166200][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2357'. [ 448.180077][ T31] ? __lock_acquire+0x683/0x2cf0 [ 448.186006][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.191957][ T31] ? __pfx___schedule+0x10/0x10 [ 448.197317][ T31] ? schedule+0x90/0x2b0 [ 448.201653][ T31] schedule+0x164/0x2b0 [ 448.206771][ T31] schedule_timeout+0x152/0x2c0 [ 448.211789][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 448.217625][ T31] ? __pfx_process_timeout+0x10/0x10 [ 448.223046][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.229291][ T31] ? prepare_to_wait_event+0x436/0x480 [ 448.270311][ T31] nbd_queue_rq+0x889/0x1150 [ 448.276300][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 448.281513][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 448.287902][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 448.293910][ T31] ? sbitmap_get+0x229/0x390 [ 448.298762][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 448.321416][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 448.328994][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 448.335801][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 448.342682][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 448.348856][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 448.354324][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 448.359678][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 448.365910][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 448.371271][ T31] blk_mq_run_hw_queue+0x34a/0x4f0 [ 448.377483][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 448.382778][ T31] blk_mq_requeue_work+0x703/0x760 [ 448.388256][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 448.394141][ T31] ? rcu_is_watching+0x16/0xb0 [ 448.399027][ T31] ? process_scheduled_works+0xa1a/0x14c0 [ 448.405137][ T31] process_scheduled_works+0xa88/0x14c0 [ 448.410837][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.417034][ T31] ? assign_work+0x3cf/0x5d0 [ 448.421730][ T31] worker_thread+0xa47/0xfb0 [ 448.426652][ T31] ? __kthread_parkme+0x71/0x1f0 [ 448.431765][ T31] kthread+0x38b/0x480 [ 448.436027][ T31] ? __pfx_worker_thread+0x10/0x10 [ 448.441319][ T31] ? __pfx_kthread+0x10/0x10 [ 448.446093][ T31] ret_from_fork+0x514/0xb70 [ 448.450892][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.456227][ T31] ? __switch_to+0xc89/0x1420 [ 448.461101][ T31] ? __pfx_kthread+0x10/0x10 [ 448.465940][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.471007][ T31] [ 448.475278][ T31] [ 448.475278][ T31] Showing all locks held in the system: [ 448.490126][ T31] locks held by kworker/0:1/10: 3, on CPU#0: [ 448.512299][ T31] #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 448.523206][ T31] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 448.532404][ T31] #2: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.542416][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 448.548765][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 448.558863][ T31] locks held by udevd/4979: 1, last CPU#1: [ 448.564835][ T31] #0: ffff88802b3ced30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 448.574090][ T31] locks held by getty/5366: 2, on CPU#1: [ 448.579766][ T31] #0: ffff8880355260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 448.589890][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 448.600674][ T31] locks held by syz-executor/5608: 2, last CPU#1: [ 448.607285][ T31] #0: ffff8880b873b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 448.618082][ T31] #1: ffff8880b873b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 448.628306][ T31] locks held by udevd/5811: 1, on CPU#0: [ 448.634162][ T31] #0: ffff888026c89350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 448.643779][ T31] locks held by kworker/u8:12/6155: 7, last CPU#1: [ 448.650405][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 448.665707][ T31] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 448.678474][ T31] #2: ffff8880b8726018 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 448.688546][ T31] #3: ffffffff9a9eb678 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 448.716982][ T31] #4: ffffffff9a7d3748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 448.726862][ T31] #5: ffffffff8ec933d0 (kfree_rcu_sheaf_map-wait-type-override){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x1f/0x5f0 [ 448.739033][ T31] #6: ffffe8ffffd00530 ((local_lock_t *)&pcs->lock){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x1f/0x5f0 [ 448.750321][ T31] locks held by kworker/0:2H/9392: 4, on CPU#0: [ 448.756912][ T31] #0: ffff88801eeb3d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 448.768420][ T31] #1: ffffc9000d0ffc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 448.791839][ T31] #2: ffff88802635d298 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 448.802595][ T31] #3: ffff888026e751f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 448.811962][ T31] locks held by syz.0.2337/15025: 2, last CPU#1: [ 448.818847][T15057] Can't find ip_set type bitmap:ip [ 448.824669][ T31] #0: ffffffff9ac944a0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 448.843700][ T31] #1: ffff8880b873b4e0 (&rq->__lock){-.-.}-{2:2}, at: hash_ipportip6_add+0x82d/0x23f0 [ 448.864190][ T31] locks held by syz.4.2346/15057: 1, on CPU#0: [ 448.874286][ T31] #0: ffffffff9ac944a0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: load_settype+0x5f/0xe0 [ 448.903803][ T31] locks held by syz.3.2357/15086: 3, on CPU#1: [ 448.925522][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x26/0x520 [ 448.942224][ T31] #1: ffffffff90039c80 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 448.953913][ T31] #2: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 448.965071][ T31] [ 448.967563][ T31] ============================================= [ 448.967563][ T31] [ 448.976099][ T31] NMI backtrace for cpu 0 [ 448.976123][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.976148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.976160][ T31] Call Trace: [ 448.976169][ T31] [ 448.976179][ T31] dump_stack_lvl+0xe8/0x150 [ 448.976216][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 448.976366][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.976408][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 448.976445][ T31] sys_info+0x135/0x170 [ 448.976498][ T31] watchdog+0xfd7/0x1030 [ 448.976551][ T31] ? watchdog+0x1c7/0x1030 [ 448.976589][ T31] kthread+0x38b/0x480 [ 448.976621][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.976656][ T31] ? __pfx_kthread+0x10/0x10 [ 448.976688][ T31] ret_from_fork+0x514/0xb70 [ 448.976723][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.976752][ T31] ? __switch_to+0xc89/0x1420 [ 448.976781][ T31] ? __pfx_kthread+0x10/0x10 [ 448.976812][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.976861][ T31] [ 448.976869][ T31] Sending NMI from CPU 0 to CPUs 1: [ 449.092818][ C1] NMI backtrace for cpu 1 [ 449.092836][ C1] CPU: 1 UID: 0 PID: 5598 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 449.092859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.092870][ C1] RIP: 0010:rcu_read_lock_sched_held+0x22/0x70 [ 449.092900][ C1] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 06 a7 2d 0a 85 c0 74 29 31 db e8 fb f6 00 00 84 c0 74 23 e8 62 3c 01 00 84 c0 74 1a <48> c7 c7 a0 a2 b5 8e be ff ff ff ff e8 9d a3 2d 0a 85 c0 74 0e bb [ 449.092918][ C1] RSP: 0018:ffffc9000389f800 EFLAGS: 00000002 [ 449.092935][ C1] RAX: 1ffffffff1d6bf01 RBX: 0000000000000000 RCX: 8000000000000003 [ 449.092949][ C1] RDX: 0000000000000000 RSI: ffffffff8c4cd760 RDI: ffff8880b873c528 [ 449.092962][ C1] RBP: ffff8880768e4440 R08: ffffffff90589237 R09: 1ffffffff20b1246 [ 449.092976][ C1] R10: dffffc0000000000 R11: fffffbfff20b1247 R12: ffffffff8eb9c040 [ 449.092990][ C1] R13: ffff88803083a440 R14: 000000000000a6ae R15: ffff8880768e3f00 [ 449.093005][ C1] FS: 0000555573a32540(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 449.093021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.093034][ C1] CR2: 00007f44861ed158 CR3: 0000000022b5e000 CR4: 00000000003526f0 [ 449.093052][ C1] Call Trace: [ 449.093059][ C1] [ 449.093067][ C1] update_se+0x317/0x1020 [ 449.093098][ C1] update_curr+0x69/0x470 [ 449.093134][ C1] __dequeue_task+0x11b/0x26d0 [ 449.093156][ C1] ? rcu_is_watching+0x16/0xb0 [ 449.093179][ C1] ? trace_sched_util_est_cfs_tp+0x3b/0x150 [ 449.093208][ C1] __schedule+0x709/0x5630 [ 449.093228][ C1] ? __lock_acquire+0x683/0x2cf0 [ 449.093260][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 449.093290][ C1] ? __pfx___schedule+0x10/0x10 [ 449.093314][ C1] ? schedule+0x90/0x2b0 [ 449.093334][ C1] schedule+0x164/0x2b0 [ 449.093352][ C1] do_nanosleep+0x21e/0x6a0 [ 449.093380][ C1] ? do_nanosleep+0x7e/0x6a0 [ 449.093409][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 449.093436][ C1] ? __asan_memset+0x22/0x50 [ 449.093478][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 449.093498][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 449.093523][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 449.093547][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 449.093571][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 449.093602][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 449.093632][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 449.093660][ C1] do_syscall_64+0x166/0x520 [ 449.093738][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.093772][ C1] ? clear_bhb_loop+0x70/0xc0 [ 449.093791][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.093807][ C1] RIP: 0033:0x7fca7e159257 [ 449.093822][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 449.093836][ C1] RSP: 002b:00007ffc2ae22380 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 449.093851][ C1] RAX: ffffffffffffffda RBX: 0000555573a32540 RCX: 00007fca7e159257 [ 449.093863][ C1] RDX: 00007ffc2ae223c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.093874][ C1] RBP: 00007ffc2ae228a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.093883][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 449.093893][ C1] R13: 00007ffc2ae223fc R14: 00007ffc2ae22490 R15: 0000000000000000 [ 449.093913][ C1] [ 449.118156][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 449.118226][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.118297][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.118331][ T31] Call Trace: [ 449.118361][ T31] [ 449.118383][ T31] vpanic+0x56d/0xa60 [ 449.118492][ T31] ? __pfx___schedule+0x10/0x10 [ 449.118558][ T31] ? __pfx_vpanic+0x10/0x10 [ 449.118666][ T31] panic+0xc5/0xd0 [ 449.118747][ T31] ? __pfx_panic+0x10/0x10 [ 449.118821][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 449.118884][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 449.118954][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 449.119048][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 449.119137][ T31] watchdog+0x1030/0x1030 [ 449.119239][ T31] ? watchdog+0x1c7/0x1030 [ 449.119347][ T31] kthread+0x38b/0x480 [ 449.119458][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.119526][ T31] ? __pfx_kthread+0x10/0x10 [ 449.119610][ T31] ret_from_fork+0x514/0xb70 [ 449.119654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 449.119735][ T31] ? __switch_to+0xc89/0x1420 [ 449.119819][ T31] ? __pfx_kthread+0x10/0x10 [ 449.119912][ T31] ret_from_fork_asm+0x1a/0x30 [ 449.120039][ T31] [ 449.549030][ T31] Kernel Offset: disabled [ 449.553358][ T31] Rebooting in 86400 seconds..