last executing test programs: 2m34.807005263s ago: executing program 1 (id=894): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="b2a53eb2fb46c46061e09791ef04003c800400a1800700480040240000040042800400678008000900f68c7c6640509f1bec03a124b53e769b9a034dca0711b230b24232ee86ff0a9447fd709cde843bb7b6dfe554dc340ad7be5ab2c1dc82ca60bb1ddefeda86ce736b2e25efc0c7fbcb6f1811f96e4bca161cd90c78", @ANYRES32=r3, @ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x810}, 0x40800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r16 = syz_open_procfs$namespace(r13, &(0x7f0000001780)='ns/ipc\x00') r17 = getpid() sendmmsg$unix(r12, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r17, r14}}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r18 = accept$nfc_llcp(r0, &(0x7f0000000700), &(0x7f0000000680)=0x60) r19 = epoll_create(0x8) sendmsg$netlink(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000340)={0xc4, 0x20, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@generic="af04719f81478b6d3f5048055bf3682ed8fd3edfd9918695effa78583308206b84290008f71b42c0eeae7aef72e96ccf5c10d99d2e57aec470a723c6200aff68f77bcc4fc9dc5ba68c1f6e856c46fd4566e6596a09c666a892d959a1d1a7888d96509f2aff1da28bc6f3845d24c2367384149c3120053a78d0dace8c1e5c2ed573e20c7db3e92a1d23e61359843f965ae0d093f69a60c19fafda66d7d677d3c906ea0a7777487c5981ebd0834c74073a0ae7"]}, 0xc4}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r15}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r18, 0xffffffffffffffff, r0, r19, r0, r0, r0]}}], 0x118, 0x1}, 0x20000851) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r20, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r20, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r20, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r20, 0x11a, 0x4, 0x0, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r21, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) 2m34.631786525s ago: executing program 1 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf252500000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}) 2m34.445914927s ago: executing program 1 (id=901): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7ffd, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x7}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040c1) 2m33.470173364s ago: executing program 1 (id=917): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) 2m33.049940487s ago: executing program 1 (id=922): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a310000003a4900010073797a30000000000800054000000021340000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000000800038004000080140000001000010000000000000000000084000a"], 0xb8}}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8954, 0x0) 2m32.546516661s ago: executing program 1 (id=933): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x22, 0x2, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, &(0x7f0000000800)) sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0xfffffffffffffd62}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x7, 0x7}, 0x8) 2m26.977774534s ago: executing program 0 (id=1005): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x20000005, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) 2m26.743876889s ago: executing program 0 (id=1008): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 2m26.533516494s ago: executing program 0 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007c000000ac00000000000000506374ccf0e657a8f25159454acf3f202dbc55d9fe62bbb05f0a0ce37a28472d49721e7e605f2f29"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007c000000ac00000000000000506374ccf0e657a8f25159454acf3f202dbc55d9fe62bbb05f0a0ce37a28472d49721e7e605f2f29"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) 2m26.377551919s ago: executing program 0 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x28, r8, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r9) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r9) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0004) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r14], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r14], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r3, 0x2f, 0xfd, 0x2, 0x1, 0x2, @local, @mcast2, 0x10, 0x7, 0xffffff00}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r3, 0x2f, 0xfd, 0x2, 0x1, 0x2, @local, @mcast2, 0x10, 0x7, 0xffffff00}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @loopback}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r13, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0xc0}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xeb73}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0855}, 0x40104) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000305fcff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000100008008000500", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000305fcff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000100008008000500", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m26.152883345s ago: executing program 0 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x9}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m25.513095725s ago: executing program 0 (id=1023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00004a2754a1befd7fa47ae4015617c00b25855e9bafc8e68773716778cb296ec789b1a4201d2612c81158759b6a70a87044908dbeb90e8a7fa1855cf7731dcf7655fb7736738cbe48dfb1f3e522e08f70064125df7c32a3379abde7e707f49a16be9d6ea35a9d1ec856a2519642cfd558f5cc69", @ANYRES16=r1, @ANYBLOB="01002abd7000fdffffff1e0000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) 2m17.397729164s ago: executing program 32 (id=933): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x22, 0x2, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, &(0x7f0000000800)) sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0xfffffffffffffd62}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x7, 0x7}, 0x8) 2m10.386742879s ago: executing program 33 (id=1023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00004a2754a1befd7fa47ae4015617c00b25855e9bafc8e68773716778cb296ec789b1a4201d2612c81158759b6a70a87044908dbeb90e8a7fa1855cf7731dcf7655fb7736738cbe48dfb1f3e522e08f70064125df7c32a3379abde7e707f49a16be9d6ea35a9d1ec856a2519642cfd558f5cc69", @ANYRES16=r1, @ANYBLOB="01002abd7000fdffffff1e0000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) 4.871734562s ago: executing program 4 (id=2752): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x715c, 0x3, 0xffffffffffffffff, 0x9323, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x4, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000040001901feffffff00000020017c00000c004280080009008f34922804000180040002800504dbee489f88e19390ab8a94121b4631803686464220a9d69ec976a1468b2ee97dd96a073a21bce16cdfaaf907909f84f92e4607d7379ddccdcd58ed86b248a3a7d712a7ee2601fe31d4b97c23eaf50026f7f731a98007aa1b68e2fab8eef1ff2969c64a97618efc1801c6a7fe1461470f9cfc57810874743a30b54c68e1ef7bc4a27774f6635b97f4bb0d6703e8d449813032b98c47189ee6c0"], 0x28}, 0x1, 0x0, 0x0, 0x48814}, 0x10) 4.197850404s ago: executing program 6 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x30e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x40c4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) 3.981426366s ago: executing program 2 (id=2764): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd61fbdff000283aff00000000000000000000ffffdd141434ff02000000000000000000000000f01c8900907800000000ff010000000000000000000000000001fe800000000000e9ffffff0000140011775051b6b602"], 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) r11 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r11, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) (async) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r6, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000128bd7000fedbdf2564000000080001000f00000008000300f4aaf49e928acf334cd55ff077059686259667c2a0800294a437fcbd50cc031ff82c96df2651f9848789574860cb7d3d699478de2775e81547f7b2cd03f3653c67bb04bdc0ab6eac3deb84a31f9db9c3969db54409cd5d122de76f9cada8529f66c8f5e18546f75a4f038bd3b26589cd9800", @ANYRES32=0x0, @ANYBLOB="0c009900ffff00003e000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r13, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0) 3.917545658s ago: executing program 4 (id=2765): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x15}}}}}, 0x30}}, 0x240048c4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) 3.571129254s ago: executing program 4 (id=2769): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}, @sadb_x_sec_ctx={0x1, 0x18, 0x10, 0xc3}]}, 0x88}}, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r4, r2, 0x0, 0xfffbffff) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f00000023c0)) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "e212c8449cc3850d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000844}, 0x24000000) 3.540749034s ago: executing program 4 (id=2770): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.365772217s ago: executing program 4 (id=2772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e099055628b6d6da05f136a7075c2a2dc7b846b"], &(0x7f0000000340)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) shutdown(r3, 0x1) (async) 3.268581552s ago: executing program 4 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) 3.216068615s ago: executing program 5 (id=2776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) 3.194591465s ago: executing program 6 (id=2777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7fffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x27}]}}]}, 0x3c}}, 0x20004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.082116613s ago: executing program 3 (id=2778): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) (async) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3.054576506s ago: executing program 5 (id=2779): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 2.884248503s ago: executing program 5 (id=2781): r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 2.834201962s ago: executing program 3 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`'], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0xa, [@datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x5, 0xfff, 0x6}, {0x1, 0xa41e, 0x9}, {0x3, 0x1, 0x8}, {0x1, 0x5, 0xffff}], "1c9b"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x61, 0x2e, 0x0, 0x0]}}, &(0x7f00000004c0)=""/89, 0x62, 0x59, 0x1}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r11) r12 = socket(0x80000000000000a, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r13) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r14}, &(0x7f0000000180), &(0x7f00000001c0)=r13}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r14, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r12}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x19, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x3, 0x4, 0x3, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x3, 0x1, 0xb, 0xa, 0x1, 0xfffffffffffffff0}], &(0x7f0000000100)='GPL\x00', 0x2, 0x95, &(0x7f00000005c0)=""/149, 0x40f00, 0x6a, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r10, r11, r14, r15], &(0x7f0000000800)=[{0x0, 0x2, 0x4, 0x3}, {0x5, 0x3, 0xd, 0x2}, {0x1, 0x3, 0x5, 0x2}]}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r4, 0x329, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 2.642015026s ago: executing program 6 (id=2783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb92", 0x6a}], 0x5}], 0x1, 0x4814) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010f00000000000000651200000008000700080000000800070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x86}, 0x40040) 2.635892954s ago: executing program 5 (id=2784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="aa81060b890aa824e14172fc77ec6274dd023e5c91e5c981a98d79be0410d42eacb4d82bb0093f0d6e440422c194d3dd32b4e0e1f19a6948c35441f894cd21ae0e04c8a2458a4aa15ac1bb3876098d305be76704255d36bae301853f694418fd53fdf4dc31", @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000300)="6a8b63bd33", 0x5) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10009000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getnetconf={0x14, 0x52, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0x140}, {&(0x7f0000000140)="448b7cff000000000000108a15df09", 0xf}], 0x2) 2.209198413s ago: executing program 6 (id=2785): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c905774c44cb2bc91021afc803dedba2961f36224f99f38fe24", 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x24008041) 2.11488827s ago: executing program 6 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff2, 0xfff7}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8004) 2.091292225s ago: executing program 2 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000002c000000180a01040000000000000000020000000c0005400f000000000000000900010073797a3000"], 0x68}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="000000fbda2c3f03b13130000000000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="fcffffff020000000000000000005bcb274800"/28], 0x48) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) (async) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000d80)=""/4113, 0x1011}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f00000006c0)=""/154, 0x3c}, {&(0x7f0000004200)=""/4108, 0x100c}, {&(0x7f0000000bc0)=""/248, 0xf8}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/98, 0x62}], 0xa}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) close(0x3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f0000000fc0)={0x0, 0x1, 0x1000, 0x4, 0x7, 0x6, 0x0, 0x1ff}, 0x0, &(0x7f0000001040)={0x8, 0x6, 0xfff, 0x6, 0x1, 0x3fc, 0x5, 0x9}, &(0x7f0000001180)={0x0, 0x989680}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="00082dbd7000f1dbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000a00000006001100400000000800150058000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040050}, 0x8000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r8) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="05000000c81c00ffffffffffffffff0000008510000005100000850000000000000095000810000000009500a5050000cfe39e7f2de7dd5b92eb95dff3b82e63135e7a0d0fe90393dac6de4ff7623557abac6d3a4227c0d616bf8665f8cf2d119f7530bd"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f0000001dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x6}, 0x94) (async) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090127bd7000ffdbdf2506a20190d589662d7896a89c00000008", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 1.914112742s ago: executing program 2 (id=2788): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = socket(0x3, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe020be2f1da48669}, 0x4011) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @initdev}, &(0x7f0000000280)=0xc) 1.901889488s ago: executing program 3 (id=2789): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x8}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x8}, 0x14}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r2, 0x16, 0x0, 0xfff, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 1.844513425s ago: executing program 2 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.759199654s ago: executing program 2 (id=2791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1005}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0xd00, 0x101, 0x2, 0x8ad1, 0x1, 0xf54c, 0xfffffffffffffffd, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000180)={r8, r8, 0x4, 0x0, 0x0, 0x9, 0x45, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) (async, rerun: 64) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r10, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000790000007900000004000000040000000000000c01000000010000000000000b03000000080000000000000c01000000040000000000000802000000090000000000000802000000080000000000000a020000000d0000000300000f010000db710000003c00000002000000040000000300000008000000010000000c000000040000003900000000305f00"], &(0x7f0000000740)=""/203, 0x98, 0xcb, 0x0, 0x470b8e32, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x6, &(0x7f0000000900)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000200)='GPL\x00', 0x7, 0x60, &(0x7f0000000240)=""/96, 0x41100, 0x2, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x3, 0x7ff, 0x5}, 0x10, 0xa9a1, r5, 0x1, &(0x7f0000000640)=[r4, r4, r4, r4, r4, r4], &(0x7f0000000600)=[{0x4, 0x2, 0x3, 0x9}], 0x10, 0x6}, 0x94) 1.654061292s ago: executing program 3 (id=2792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7fffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x27}]}}]}, 0x3c}}, 0x20004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 279.943666ms ago: executing program 5 (id=2793): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x180800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 231.185552ms ago: executing program 2 (id=2794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000006580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7f, 0x7ff, 0x1a8}}}}]}, 0x48}}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 211.325685ms ago: executing program 3 (id=2795): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) (async) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)='j', 0x83d60}], 0x1}, 0x25) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/151, 0x97}], 0x9, 0x100, 0x10) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 97.949131ms ago: executing program 6 (id=2796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {0x0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4041080) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x1, 0x70bd28, 0xfffffffc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17.259575ms ago: executing program 5 (id=2797): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r3, 0x2}, 0x20) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) recvfrom(r0, &(0x7f0000000040)=""/38, 0x26, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=2798): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x8, 0x60, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7f06, 0x376e, 0x7}}) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r3, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44800200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x2, 0x5}, {0xc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)={'bridge0\x00'}) kernel console output (not intermixed with test programs): x0 after dequeue, screwing up backlog [ 182.819547][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.827767][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.970039][ T9020] syzkaller1: entered promiscuous mode [ 183.005618][ T9020] syzkaller1: entered allmulticast mode [ 183.102575][ T9030] xt_hashlimit: size too large, truncated to 1048576 [ 183.229510][ T9033] bridge0: port 2(.) entered blocking state [ 183.236164][ T9033] bridge0: port 2(.) entered forwarding state [ 183.242890][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.250253][ T9033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.333432][ T9033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.537689][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.548018][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.570262][ T9039] syzkaller0: entered promiscuous mode [ 183.580377][ T9039] syzkaller0: entered allmulticast mode [ 183.748257][ T9043] xt_hashlimit: size too large, truncated to 1048576 [ 183.788409][ T9044] __nla_validate_parse: 9 callbacks suppressed [ 183.788427][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 183.806547][ T9044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.821'. [ 184.025675][ T9056] netlink: 'syz.2.825': attribute type 3 has an invalid length. [ 184.033385][ T9056] netlink: 224 bytes leftover after parsing attributes in process `syz.2.825'. [ 184.097560][ T9060] netlink: 'syz.2.825': attribute type 3 has an invalid length. [ 184.135738][ T9060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.825'. [ 184.137891][ T9061] syzkaller0: entered promiscuous mode [ 184.216550][ T9061] syzkaller0: entered allmulticast mode [ 184.242465][ T9062] tunl0: entered promiscuous mode [ 184.245249][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 184.261791][ T9067] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 184.279941][ T9062] netlink: 'syz.4.826': attribute type 3 has an invalid length. [ 184.288120][ T9062] netlink: 9 bytes leftover after parsing attributes in process `syz.4.826'. [ 184.298076][ T9066] sit0: entered promiscuous mode [ 184.316360][ T9066] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 184.334511][ T9066] netlink: 1 bytes leftover after parsing attributes in process `syz.2.829'. [ 184.404028][ T9067] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 184.481115][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 184.832539][ T9076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.852403][ T9076] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.864970][ T9076] gretap1: entered promiscuous mode [ 184.870553][ T9076] gretap1: entered allmulticast mode [ 184.938909][ T9092] team0: Device veth0_macvtap failed to register rx_handler [ 185.023550][ T9098] tipc: Enabled bearer , priority 0 [ 185.080470][ T9092] +: renamed from syzkaller0 [ 185.104870][ T9092] tipc: Disabling bearer [ 185.365920][ T9110] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 185.473963][ T9131] xt_hashlimit: size too large, truncated to 1048576 [ 186.507955][ T9192] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.595139][ T9195] tipc: Started in network mode [ 186.613292][ T9195] tipc: Node identity a6c21f48594a, cluster identity 4711 [ 186.639928][ T9195] tipc: Enabled bearer , priority 0 [ 186.665859][ T9201] syzkaller0: entered promiscuous mode [ 186.671894][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 186.675575][ T9201] syzkaller0: entered allmulticast mode [ 186.696666][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 186.746203][ T9195] tipc: Resetting bearer [ 186.757277][ T9195] Cannot find add_set index 1 as target [ 186.779379][ T9194] tipc: Resetting bearer [ 186.808056][ T9194] tipc: Disabling bearer [ 186.975951][ T984] net_ratelimit: 6 callbacks suppressed [ 186.976006][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.252413][ T9229] bond2: (slave veth3): Enslaving as an active interface with a down link [ 187.541953][ T9250] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 187.696865][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.018171][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.028874][ T9278] validate_nla: 5 callbacks suppressed [ 188.028894][ T9278] netlink: 'syz.4.890': attribute type 23 has an invalid length. [ 188.084114][ T9271] netlink: set zone limit has 4 unknown bytes [ 188.302642][ T9287] sctp: [Deprecated]: syz.3.893 (pid 9287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.302642][ T9287] Use struct sctp_sack_info instead [ 188.651555][ T9317] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 188.706830][ T9320] netlink: 'syz.1.901': attribute type 3 has an invalid length. [ 188.714752][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.755039][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.821793][ T9329] __nla_validate_parse: 6 callbacks suppressed [ 188.821812][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 188.983088][ T9334] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 189.056140][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.117669][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 189.296672][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.307955][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.347629][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.435415][ T9361] syzkaller0: entered promiscuous mode [ 189.441867][ T9361] syzkaller0: entered allmulticast mode [ 189.528344][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 189.569485][ T9362] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 189.651725][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.915'. [ 189.836915][ T9388] sctp: [Deprecated]: syz.4.920 (pid 9388) Use of int in max_burst socket option. [ 189.836915][ T9388] Use struct sctp_assoc_value instead [ 190.034135][ T9393] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 190.075845][ T9393] netlink: 228 bytes leftover after parsing attributes in process `syz.1.922'. [ 190.115883][ T9399] batadv_slave_1: entered promiscuous mode [ 190.128650][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'. [ 190.147925][ T9395] batadv_slave_1: left promiscuous mode [ 190.280158][ T9406] netlink: 'syz.4.927': attribute type 11 has an invalid length. [ 190.314787][ T9406] netlink: 'syz.4.927': attribute type 11 has an invalid length. [ 190.334969][ T9406] netlink: 224 bytes leftover after parsing attributes in process `syz.4.927'. [ 190.390093][ T9413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.928'. [ 190.484994][ T9422] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 190.768714][ T9431] bond0: Unable to set down delay as MII monitoring is disabled [ 190.780830][ T9431] bond0 (unregistering): Released all slaves [ 191.003186][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 191.065358][ T9452] xt_hashlimit: max too large, truncated to 1048576 [ 191.719828][ T9479] netlink: 'syz.3.945': attribute type 2 has an invalid length. [ 191.765776][ T9479] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 191.796090][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 192.177339][ T984] net_ratelimit: 5 callbacks suppressed [ 192.177360][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.883040][ T9536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.954707][ T9544] syzkaller1: entered promiscuous mode [ 192.997641][ T9544] syzkaller1: entered allmulticast mode [ 193.040751][ T9546] sctp: [Deprecated]: syz.3.963 (pid 9546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.040751][ T9546] Use struct sctp_sack_info instead [ 193.159874][ T9554] Bluetooth: MGMT ver 1.23 [ 193.215801][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.354142][ T9562] syzkaller1: entered promiscuous mode [ 193.388983][ T9562] syzkaller1: entered allmulticast mode [ 193.775879][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.954446][ T9589] netlink: 'syz.3.975': attribute type 21 has an invalid length. [ 193.986473][ T9589] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 194.244478][ T9601] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 194.257951][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.401558][ T9614] __nla_validate_parse: 6 callbacks suppressed [ 194.401580][ T9614] netlink: 120 bytes leftover after parsing attributes in process `syz.4.979'. [ 194.456599][ T9614] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 194.464396][ T9614] netlink: 64 bytes leftover after parsing attributes in process `syz.4.979'. [ 194.665252][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 194.744743][ T9629] openvswitch: netlink: IP tunnel dst address not specified [ 194.875396][ T5903] IPVS: starting estimator thread 0... [ 194.891281][ T9638] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.996816][ T9640] IPVS: using max 29 ests per chain, 69600 per kthread [ 195.056614][ T8160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.074622][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.161904][ T9649] : renamed from bond0 (while UP) [ 195.201481][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 195.264567][ T9658] syzkaller1: entered promiscuous mode [ 195.272618][ T9658] syzkaller1: entered allmulticast mode [ 195.342810][ T9656] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 195.426894][ T9664] netlink: 'syz.2.995': attribute type 27 has an invalid length. [ 195.530307][ T9666] lo speed is unknown, defaulting to 1000 [ 195.591992][ T9658] lo speed is unknown, defaulting to 1000 [ 196.116543][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 196.393660][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 196.428017][ T9722] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1008'. [ 196.438989][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 196.534016][ T9729] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 196.886168][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 196.911139][ T9755] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1016'. [ 197.011923][ T9757] tipc: Started in network mode [ 197.017872][ T9757] tipc: Node identity ead93df53e5, cluster identity 4711 [ 197.032903][ T9757] tipc: Enabled bearer , priority 0 [ 197.041975][ T9757] +: renamed from syzkaller0 [ 197.057058][ T9757] tipc: Disabling bearer [ 197.364931][ T9782] dvmrp6: entered allmulticast mode [ 197.379533][ T40] net_ratelimit: 8 callbacks suppressed [ 197.379554][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.396867][ T9784] syzkaller0: entered promiscuous mode [ 197.402574][ T9784] syzkaller0: entered allmulticast mode [ 197.843711][ T9814] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.024361][ T9823] vlan0: entered promiscuous mode [ 198.057659][ T9823] bridge0: entered promiscuous mode [ 198.147864][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.327264][ T9840] xt_hashlimit: size too large, truncated to 1048576 [ 198.398221][ T9842] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 198.417097][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.483139][ T9846] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 198.506857][ T9846] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 198.521406][ T9847] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 198.535584][ T9847] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 198.644843][ T9852] syzkaller1: entered promiscuous mode [ 198.680542][ T9852] syzkaller1: entered allmulticast mode [ 199.068709][ T9875] validate_nla: 1 callbacks suppressed [ 199.068725][ T9875] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 199.112361][ T9875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.159808][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.237874][ T9878] bond4: (slave bridge4): making interface the new active one [ 199.259327][ T9878] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 199.456417][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.507412][ T9889] __nla_validate_parse: 14 callbacks suppressed [ 199.507434][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 199.524254][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 199.637407][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.646419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.655886][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.664241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.133053][ T9901] syz.3.1060 (9901) used greatest stack depth: 17592 bytes left [ 200.197291][ T9904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 200.327002][ T9912] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 200.533079][ T9920] netlink: 'syz.4.1066': attribute type 16 has an invalid length. [ 200.541624][ T9920] netlink: 'syz.4.1066': attribute type 17 has an invalid length. [ 200.551171][ T9920] tunl0: left promiscuous mode [ 200.569051][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.576328][ T9920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.606811][ T9920] bridge0: left allmulticast mode [ 200.628058][ T9920] 8021q: adding VLAN 0 to HW filter on device ` [ 200.790428][ T9935] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1070'. [ 200.864153][ T9939] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 201.084861][ T9959] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 201.150756][ T9959] bond0: entered promiscuous mode [ 201.166787][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.204021][ T9959] bond0: (slave bridge4): making interface the new active one [ 201.222111][ T9959] bridge4: entered promiscuous mode [ 201.230386][ T9959] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 201.258515][ T9965] netlink: 'syz.3.1080': attribute type 11 has an invalid length. [ 201.266628][ T9965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1080'. [ 201.374739][ T9971] delete_channel: no stack [ 201.464693][ T9979] netlink: 'syz.2.1085': attribute type 11 has an invalid length. [ 201.491184][ T9983] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.494108][ T9979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1085'. [ 201.522283][ T9984] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 201.530416][ T9984] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1084'. [ 201.631878][ T9990] netlink: 'syz.2.1087': attribute type 30 has an invalid length. [ 201.688619][ T9995] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.700685][ T9990] bond0: option arp_missed_max: invalid value (0) [ 201.707778][ T9990] bond0: option arp_missed_max: allowed values 1 - 255 [ 201.718411][ T9990] bond0 (unregistering): Released all slaves [ 201.889092][ T9997] syzkaller1: entered promiscuous mode [ 201.910711][ T9997] syzkaller1: entered allmulticast mode [ 202.021995][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 202.224451][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1097'. [ 202.245029][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1097'. [ 202.581087][ T5922] net_ratelimit: 2049 callbacks suppressed [ 202.581108][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.773773][T10048] netlink: 'syz.4.1104': attribute type 17 has an invalid length. [ 202.789717][T10048] gretap0: entered promiscuous mode [ 202.797626][T10048] gretap0: left promiscuous mode [ 202.906034][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.940896][T10056] lo: entered promiscuous mode [ 202.953501][T10056] tunl0: entered promiscuous mode [ 202.963202][T10056] gre0: entered promiscuous mode [ 202.992943][T10056] gretap0: entered promiscuous mode [ 203.002279][T10056] erspan0: entered promiscuous mode [ 203.011211][T10056] ip_vti0: entered promiscuous mode [ 203.046709][T10060] bond5: Unable to set down delay as MII monitoring is disabled [ 203.058152][T10060] bond5 (unregistering): Released all slaves [ 203.190259][T10067] bond0: Error: Cannot enslave bond to itself. [ 203.461973][T10088] openvswitch: netlink: Unknown key attributes 2 [ 205.786876][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.804494][T10155] __nla_validate_parse: 14 callbacks suppressed [ 205.804515][T10155] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1141'. [ 205.820671][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.833242][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.843199][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.862712][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.935116][T10157] lo speed is unknown, defaulting to 1000 [ 206.174696][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.306054][T10184] netlink: 'syz.4.1147': attribute type 75 has an invalid length. [ 206.353745][T10187] sctp: [Deprecated]: syz.2.1146 (pid 10187) Use of int in max_burst socket option deprecated. [ 206.353745][T10187] Use struct sctp_assoc_value instead [ 206.392559][T10157] chnl_net:caif_netlink_parms(): no params data found [ 206.538915][T10191] syzkaller0: entered promiscuous mode [ 206.544759][T10191] syzkaller0: entered allmulticast mode [ 206.590139][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'. [ 206.639851][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.648052][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.656597][T10157] bridge_slave_0: entered allmulticast mode [ 206.668237][T10157] bridge_slave_0: entered promiscuous mode [ 206.695178][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.711234][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.721229][T10157] bridge_slave_1: entered allmulticast mode [ 206.742451][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 206.742459][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 206.748160][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 206.767062][T10157] bridge_slave_1: entered promiscuous mode [ 206.870208][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.895141][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.944056][T10157] team0: Port device team_slave_0 added [ 206.953392][T10157] team0: Port device team_slave_1 added [ 206.965394][T10208] openvswitch: netlink: IP tunnel TTL not specified. [ 207.023057][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.032608][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.062784][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.075390][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 207.076824][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.105783][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.139698][T10215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1153'. [ 207.184217][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.273894][T10157] hsr_slave_0: entered promiscuous mode [ 207.282843][T10157] hsr_slave_1: entered promiscuous mode [ 207.292904][T10157] debugfs: 'hsr0' already exists in 'hsr' [ 207.300444][T10157] Cannot create hsr debugfs directory [ 207.788691][T10243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.810041][T10157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.828794][T10157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.851670][T10157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.907698][T10157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.938608][ T5145] Bluetooth: hci5: command tx timeout [ 207.965151][T10249] netlink: 'syz.4.1163': attribute type 1 has an invalid length. [ 207.982854][T10249] netlink: 'syz.4.1163': attribute type 3 has an invalid length. [ 207.992210][T10249] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1163'. [ 208.001696][T10249] NCSI netlink: No device for ifindex 813332851 [ 208.024338][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 208.150277][T10157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.182315][T10157] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.231656][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.239004][ T8158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.270772][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.278100][ T8144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.331951][T10256] delete_channel: no stack [ 208.366112][T10268] netlink: 'syz.2.1168': attribute type 3 has an invalid length. [ 208.562007][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1170'. [ 208.723406][T10285] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1172'. [ 208.754821][T10290] batadv1: entered allmulticast mode [ 208.760711][T10285] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1172'. [ 208.771873][T10285] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1172'. [ 208.828827][T10157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.303072][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.318752][T10157] veth0_vlan: entered promiscuous mode [ 209.347496][T10157] veth1_vlan: entered promiscuous mode [ 209.427992][T10157] veth0_macvtap: entered promiscuous mode [ 209.452058][T10157] veth1_macvtap: entered promiscuous mode [ 209.504999][T10157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.542004][T10157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.558761][T10332] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 209.614515][ T8158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.624643][ T8158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.644935][T10332] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 209.711039][ T8158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.765854][ T8158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.805393][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.813170][T10345] IPv6: NLM_F_CREATE should be set when creating new route [ 209.820538][T10345] IPv6: NLM_F_CREATE should be set when creating new route [ 209.884336][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.916729][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.924428][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.965737][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.973596][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.019095][ T5145] Bluetooth: hci5: command tx timeout [ 210.076036][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.130637][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.146291][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.165585][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.166004][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.220714][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.278834][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.305890][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.313819][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.367102][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.388770][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.434511][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.452567][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.482162][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.517120][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.536653][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.544299][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.560051][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.576656][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.593594][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.621767][T10369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.918360][T10379] __nla_validate_parse: 41 callbacks suppressed [ 210.918381][T10379] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1198'. [ 210.943717][T10379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1198'. [ 211.050733][T10388] netlink: 'syz.4.1200': attribute type 2 has an invalid length. [ 211.334245][T10404] syzkaller1: entered promiscuous mode [ 211.343918][T10404] syzkaller1: entered allmulticast mode [ 211.383741][T10405] syzkaller0: entered promiscuous mode [ 211.389537][T10405] syzkaller0: entered allmulticast mode [ 212.100922][ T5145] Bluetooth: hci5: command tx timeout [ 212.795314][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.830778][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.845697][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.862530][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.881337][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.013581][T10417] netlink: 'syz.4.1209': attribute type 2 has an invalid length. [ 213.178406][T10431] lo speed is unknown, defaulting to 1000 [ 213.883252][T10477] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1221'. [ 213.959069][T10431] chnl_net:caif_netlink_parms(): no params data found [ 214.177236][ T5145] Bluetooth: hci5: command tx timeout [ 214.390973][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.398645][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.402653][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'. [ 214.406785][T10431] bridge_slave_0: entered allmulticast mode [ 214.422547][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 214.423864][T10431] bridge_slave_0: entered promiscuous mode [ 214.462896][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.480539][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.507377][T10431] bridge_slave_1: entered allmulticast mode [ 214.518423][T10431] bridge_slave_1: entered promiscuous mode [ 214.608570][T10431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.622316][T10431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.717548][T10431] team0: Port device team_slave_0 added [ 214.728578][T10431] team0: Port device team_slave_1 added [ 214.814775][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1234'. [ 214.826789][T10431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.833891][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.892088][T10431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.984188][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 214.994835][ T5145] Bluetooth: hci6: command tx timeout [ 215.066897][T10431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.077529][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.105217][T10431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.331360][T10431] hsr_slave_0: entered promiscuous mode [ 215.338504][T10431] hsr_slave_1: entered promiscuous mode [ 215.352942][T10431] debugfs: 'hsr0' already exists in 'hsr' [ 215.370389][T10431] Cannot create hsr debugfs directory [ 215.420660][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1240'. [ 215.607183][T10564] SET target dimension over the limit! [ 216.143983][T10573] syzkaller0: entered promiscuous mode [ 216.165541][T10573] syzkaller0: entered allmulticast mode [ 216.212467][T10590] netlink: 'syz.3.1250': attribute type 29 has an invalid length. [ 216.221166][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 216.268690][T10593] netlink: 'syz.5.1251': attribute type 13 has an invalid length. [ 217.057932][ T5145] Bluetooth: hci6: command tx timeout [ 217.842779][T10600] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.867235][T10600] syzkaller0: entered promiscuous mode [ 217.872738][T10600] syzkaller0: entered allmulticast mode [ 217.890111][T10607] vcan0: entered allmulticast mode [ 219.140798][ T5145] Bluetooth: hci6: command tx timeout [ 219.503341][T10431] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.569685][T10431] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.628813][T10431] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.644533][T10629] netlink: 'syz.5.1262': attribute type 17 has an invalid length. [ 219.662356][T10431] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.668928][T10626] netlink: 'syz.3.1259': attribute type 4 has an invalid length. [ 219.705383][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 219.735152][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1262'. [ 219.854563][T10649] netlink: 'syz.4.1263': attribute type 4 has an invalid length. [ 220.064590][T10431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.130215][T10431] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.195958][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.203521][ T8158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.237539][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.244861][ T8158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.272094][T10661] lo: Caught tx_queue_len zero misconfig [ 220.322836][T10667] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 220.723184][T10677] sch_fq: defrate 0 ignored. [ 220.931201][T10682] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 221.147417][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 221.199600][T10692] netlink: 'syz.2.1276': attribute type 8 has an invalid length. [ 221.206704][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 221.239834][ T5145] Bluetooth: hci6: command tx timeout [ 221.272366][T10431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.293928][T10694] netlink: 'syz.5.1277': attribute type 1 has an invalid length. [ 221.434454][T10690] geneve3: entered promiscuous mode [ 221.527294][T10690] geneve3: entered allmulticast mode [ 221.575307][T10694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1277'. [ 221.672952][T10703] veth3: entered promiscuous mode [ 222.198727][T10718] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 222.296589][T10431] veth0_vlan: entered promiscuous mode [ 222.332075][T10431] veth1_vlan: entered promiscuous mode [ 222.465371][T10431] veth0_macvtap: entered promiscuous mode [ 222.516208][T10431] veth1_macvtap: entered promiscuous mode [ 222.633702][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 222.649350][T10733] bond1 (unregistering): Released all slaves [ 222.752004][T10745] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 222.832946][T10745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.894972][T10752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.911025][T10752] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.923296][T10752] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 222.980432][T10745] veth5: entered promiscuous mode [ 222.997636][T10745] bond5: (slave veth5): Enslaving as an active interface with a down link [ 223.071359][T10756] vlan2: entered allmulticast mode [ 223.079414][T10756] bond5: entered allmulticast mode [ 223.277815][T10431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.340810][T10431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.373021][ T8155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.407596][ T8155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.454190][ T8155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.501149][ T8155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.564602][T10788] tipc: Enabling of bearer rejected, failed to enable media [ 223.607074][T10776] openvswitch: netlink: Flow actions attr not present in new flow. [ 223.617867][T10785] syzkaller1: entered promiscuous mode [ 223.623369][T10785] syzkaller1: entered allmulticast mode [ 223.646285][T10785] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1300'. [ 223.868345][ T8157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.888258][T10795] xt_cgroup: xt_cgroup: no path or classid specified [ 223.902088][ T8157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.009583][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.031475][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.150956][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 224.239941][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 224.275866][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 224.476089][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 224.485332][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 224.526105][T10824] syzkaller0: entered promiscuous mode [ 224.534277][T10824] syzkaller0: entered allmulticast mode [ 224.580596][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 224.623658][T10824] netlink: 'syz.3.1312': attribute type 21 has an invalid length. [ 224.636969][T10824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1312'. [ 225.110103][T10854] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 225.165291][T10858] netlink: 'syz.5.1323': attribute type 1 has an invalid length. [ 225.308163][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.403016][T10861] bond0: (slave veth0_to_bond): making interface the new active one [ 225.461548][T10861] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.083783][T10869] bond0: entered promiscuous mode [ 228.122227][T10869] veth0_to_bond: entered promiscuous mode [ 228.139375][T10869] bond0: entered allmulticast mode [ 228.152323][T10869] veth0_to_bond: entered allmulticast mode [ 228.760470][T10910] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 228.768805][T10909] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 229.007035][T10919] tipc: MTU too low for tipc bearer [ 229.492986][T10946] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 229.522496][T10947] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 229.617634][T10946] bond6: entered promiscuous mode [ 229.622987][T10946] bond6: entered allmulticast mode [ 229.645939][T10946] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.094001][T10967] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 230.174141][T10967] bond1: entered promiscuous mode [ 230.194829][T10967] bond1: entered allmulticast mode [ 230.245964][T10967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.545950][T10990] __nla_validate_parse: 1 callbacks suppressed [ 230.545972][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 230.663074][T10993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 231.261439][T11030] netlink: 'syz.6.1366': attribute type 32 has an invalid length. [ 231.474869][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 231.492649][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 231.569154][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 231.688303][T11050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 231.716737][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 231.732522][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 231.779365][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 232.286782][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 233.129933][T11124] netlink: 'syz.4.1396': attribute type 4 has an invalid length. [ 233.574278][T11149] syzkaller1: entered promiscuous mode [ 233.580609][T11149] syzkaller1: entered allmulticast mode [ 233.614758][T11152] netlink: 'syz.3.1402': attribute type 5 has an invalid length. [ 233.680977][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.096536][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.876035][T11216] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 234.926100][T11216] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.979384][T11223] tipc: Enabled bearer , priority 0 [ 235.027554][ T8158] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.067417][ T8158] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.108113][ T8158] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.182381][T11223] tipc: Disabling bearer [ 235.196810][T11236] netlink: 'syz.5.1434': attribute type 1 has an invalid length. [ 235.266292][T11232] can: request_module (can-proto-0) failed. [ 235.273743][ T8158] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.298767][T11241] sock: sock_set_timeout: `syz.6.1436' (pid 11241) tries to set negative timeout [ 235.940010][T11273] __nla_validate_parse: 27 callbacks suppressed [ 235.940034][T11273] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1445'. [ 236.047222][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1444'. [ 236.070111][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1444'. [ 236.342254][T11283] ip6gretap0: entered promiscuous mode [ 236.365194][T11283] erspan0: entered promiscuous mode [ 236.381564][T11283] debugfs: 'hsr1' already exists in 'hsr' [ 236.392822][T11283] Cannot create hsr debugfs directory [ 236.568852][T11304] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 236.572060][T11300] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1454'. [ 236.665141][T11308] bond7: entered allmulticast mode [ 236.708751][T11304] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.720162][T11308] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 236.804733][T11308] team0: Port device dummy0 added [ 236.819583][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 236.877770][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 237.010272][T11329] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1460'. [ 237.058586][T11332] tipc: Cannot configure node identity twice [ 237.091980][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1462'. [ 237.109286][T11332] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 237.114215][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1462'. [ 237.210899][T11332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.224834][T11345] Cannot find add_set index 2 as target [ 237.416864][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1467'. [ 237.586632][T11366] netlink: 'syz.4.1470': attribute type 16 has an invalid length. [ 237.604950][T11366] netlink: 'syz.4.1470': attribute type 17 has an invalid length. [ 237.621431][T11366] lo: left promiscuous mode [ 237.641288][T11366] tunl0: left promiscuous mode [ 237.661821][T11366] gre0: left promiscuous mode [ 237.828085][T11366] gretap0: left promiscuous mode [ 237.838447][T11366] erspan0: left promiscuous mode [ 237.866553][T11366] ip_vti0: left promiscuous mode [ 237.902204][T11366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.694959][T11407] openvswitch: netlink: Flow key attr not present in new flow. [ 238.948810][T11412] lo speed is unknown, defaulting to 1000 [ 239.718125][T11453] syzkaller1: entered promiscuous mode [ 239.723944][T11453] syzkaller1: entered allmulticast mode [ 240.192487][T11462] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 240.360751][T11473] tc_dump_action: action bad kind [ 240.998016][T11503] __nla_validate_parse: 13 callbacks suppressed [ 240.998039][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 241.043617][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 241.086970][T11505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 241.660348][T11526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.106825][T11553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1519'. [ 242.250208][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1521'. [ 242.303219][T11560] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.699088][T11572] syzkaller0: entered promiscuous mode [ 242.705065][T11572] syzkaller0: entered allmulticast mode [ 242.766949][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1526'. [ 243.409564][T11624] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.1537'. [ 244.724257][T11617] netem: unknown loss type 0 [ 244.729720][T11617] netem: change failed [ 244.746317][T11625] netlink: 'syz.2.1537': attribute type 2 has an invalid length. [ 244.766774][T11624] netlink: 'syz.2.1537': attribute type 2 has an invalid length. [ 244.949575][T11635] netlink: 'syz.3.1539': attribute type 6 has an invalid length. [ 244.958450][T11632] IPVS: length: 227 != 24 [ 244.990635][T11635] netlink: 'syz.3.1539': attribute type 6 has an invalid length. [ 245.101079][T11635] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 245.185386][T11653] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1543'. [ 245.336798][T11662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.931359][T11685] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 245.986983][T11685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'. [ 246.082996][T11687] openvswitch: netlink: IP tunnel dst address not specified [ 246.160011][T11698] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 246.222733][T11710] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 246.550119][T11727] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1565'. [ 246.595839][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1564'. [ 246.625657][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1565'. [ 246.644910][T11727] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1565'. [ 246.671597][T11727] netlink: 'syz.5.1565': attribute type 2 has an invalid length. [ 246.718120][T11727] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1565'. [ 246.794331][T11742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.811463][T11742] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 246.839210][T11742] bond0: (slave gre0): Error -95 calling set_mac_address [ 246.884228][T11750] bond0: (slave rose0): Error: Device can not be enslaved while up [ 247.119754][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'. [ 247.146947][T11765] IPv6: Can't replace route, no match found [ 247.284454][T11770] sit0: entered promiscuous mode [ 247.318026][T11770] netlink: 'syz.6.1575': attribute type 1 has an invalid length. [ 247.343236][T11770] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1575'. [ 247.472513][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 247.648746][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 247.736833][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1580'. [ 248.303005][ T8158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.341396][ T8158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.403955][ T8158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.445571][ T8158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.680423][T11827] geneve2: entered promiscuous mode [ 249.252802][T11863] pim6reg: entered allmulticast mode [ 249.531789][T11876] syzkaller1: entered promiscuous mode [ 249.538565][T11876] syzkaller1: entered allmulticast mode [ 249.808678][T11890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 249.846797][T11900] veth0: entered promiscuous mode [ 249.963514][T11901] veth0: left promiscuous mode [ 250.603612][T11936] bond4: Removing last ns target with arp_interval on [ 250.929113][T11961] netlink: 'syz.6.1619': attribute type 4 has an invalid length. [ 251.359729][T11981] sctp: [Deprecated]: syz.3.1625 (pid 11981) Use of int in maxseg socket option. [ 251.359729][T11981] Use struct sctp_assoc_value instead [ 251.483349][T11990] Cannot find add_set index 65532 as target [ 251.514099][T11991] Cannot find add_set index 65532 as target [ 251.644937][T12000] __nla_validate_parse: 8 callbacks suppressed [ 251.644960][T12000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 251.667078][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1629'. [ 251.745541][T12003] ip6t_srh: unknown srh invflags 4000 [ 251.797196][T12006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.059851][T12023] openvswitch: netlink: IP tunnel dst address not specified [ 252.519746][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1650'. [ 252.532385][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1650'. [ 252.542102][T12045] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1649'. [ 252.565683][T12045] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1649'. [ 252.706300][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 252.706940][T12055] pim6reg1: entered promiscuous mode [ 252.747987][T12055] pim6reg1: entered allmulticast mode [ 252.788982][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 252.828672][T12065] ip6gre1: entered allmulticast mode [ 252.861705][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1655'. [ 253.104051][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1660'. [ 253.474942][T12099] tipc: New replicast peer: 255.255.255.255 [ 253.493086][T12099] tipc: Enabled bearer , priority 10 [ 253.526080][T12104] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20000 [ 253.807395][T12126] netlink: 'syz.6.1673': attribute type 1 has an invalid length. [ 253.837712][T12126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.848304][T12128] netlink: 'syz.5.1674': attribute type 4 has an invalid length. [ 253.886567][T12134] netlink: 'syz.5.1674': attribute type 4 has an invalid length. [ 254.105381][T12144] syzkaller0: entered promiscuous mode [ 254.117415][T12144] syzkaller0: entered allmulticast mode [ 254.449200][T12163] FAULT_INJECTION: forcing a failure. [ 254.449200][T12163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.487993][ T5919] tipc: Node number set to 4287110984 [ 254.506362][T12163] CPU: 0 UID: 0 PID: 12163 Comm: syz.5.1684 Not tainted syzkaller #0 PREEMPT(full) [ 254.506389][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 254.506400][T12163] Call Trace: [ 254.506408][T12163] [ 254.506417][T12163] dump_stack_lvl+0xe8/0x150 [ 254.506449][T12163] should_fail_ex+0x412/0x560 [ 254.506479][T12163] _copy_from_user+0x2d/0xb0 [ 254.506507][T12163] ___sys_sendmsg+0x1c6/0x360 [ 254.506531][T12163] ? __lock_acquire+0x6b5/0x2cf0 [ 254.506563][T12163] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.506626][T12163] ? __fget_files+0x2a/0x420 [ 254.506646][T12163] ? __fget_files+0x3a0/0x420 [ 254.506679][T12163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 254.506706][T12163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.506741][T12163] ? __pfx_ksys_write+0x10/0x10 [ 254.506781][T12163] do_syscall_64+0xe2/0xf80 [ 254.506802][T12163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.506820][T12163] ? trace_irq_disable+0x37/0x100 [ 254.506838][T12163] ? clear_bhb_loop+0x60/0xb0 [ 254.506861][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.506879][T12163] RIP: 0033:0x7f33e919aeb9 [ 254.506897][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.506914][T12163] RSP: 002b:00007f33e73f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.506936][T12163] RAX: ffffffffffffffda RBX: 00007f33e9415fa0 RCX: 00007f33e919aeb9 [ 254.506949][T12163] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 254.506962][T12163] RBP: 00007f33e73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.506973][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.506985][T12163] R13: 00007f33e9416038 R14: 00007f33e9415fa0 R15: 00007ffe3ad1d258 [ 254.507017][T12163] [ 255.753825][T12229] FAULT_INJECTION: forcing a failure. [ 255.753825][T12229] name failslab, interval 1, probability 0, space 0, times 1 [ 255.799763][T12229] CPU: 1 UID: 0 PID: 12229 Comm: syz.5.1702 Not tainted syzkaller #0 PREEMPT(full) [ 255.799792][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.799805][T12229] Call Trace: [ 255.799813][T12229] [ 255.799822][T12229] dump_stack_lvl+0xe8/0x150 [ 255.799853][T12229] should_fail_ex+0x412/0x560 [ 255.799883][T12229] should_failslab+0xa8/0x100 [ 255.799906][T12229] __kmalloc_noprof+0xde/0x7e0 [ 255.799925][T12229] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 255.799958][T12229] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 255.799991][T12229] genl_family_rcv_msg_doit+0xd9/0x330 [ 255.800025][T12229] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 255.800057][T12229] ? apparmor_capable+0x137/0x1a0 [ 255.800086][T12229] ? bpf_lsm_capable+0x9/0x20 [ 255.800108][T12229] ? security_capable+0x7e/0x2c0 [ 255.800136][T12229] genl_rcv_msg+0x61c/0x7a0 [ 255.800167][T12229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.800201][T12229] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 255.800223][T12229] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 255.800243][T12229] ? __pfx_nl80211_post_doit+0x10/0x10 [ 255.800272][T12229] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.800304][T12229] netlink_rcv_skb+0x232/0x4b0 [ 255.800326][T12229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.800351][T12229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.800368][T12229] ? genl_rcv+0x19/0x40 [ 255.800411][T12229] ? down_read+0x272/0x2e0 [ 255.800430][T12229] ? genl_rcv+0xd/0x40 [ 255.800453][T12229] genl_rcv+0x28/0x40 [ 255.800476][T12229] netlink_unicast+0x80f/0x9b0 [ 255.800514][T12229] ? __pfx_netlink_unicast+0x10/0x10 [ 255.800540][T12229] ? __alloc_skb+0x193/0x390 [ 255.800562][T12229] ? netlink_sendmsg+0x650/0xb40 [ 255.800580][T12229] ? skb_put+0x11b/0x210 [ 255.800607][T12229] netlink_sendmsg+0x813/0xb40 [ 255.800636][T12229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.800659][T12229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.800682][T12229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.800704][T12229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.800723][T12229] ____sys_sendmsg+0xa68/0xad0 [ 255.800752][T12229] ? __might_fault+0xaf/0x130 [ 255.800787][T12229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.800821][T12229] ? import_iovec+0x73/0xa0 [ 255.800852][T12229] ___sys_sendmsg+0x2a5/0x360 [ 255.800876][T12229] ? __lock_acquire+0x6b5/0x2cf0 [ 255.800908][T12229] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.800970][T12229] ? __fget_files+0x2a/0x420 [ 255.800990][T12229] ? __fget_files+0x3a0/0x420 [ 255.801021][T12229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.801050][T12229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.801086][T12229] ? __pfx_ksys_write+0x10/0x10 [ 255.801127][T12229] do_syscall_64+0xe2/0xf80 [ 255.801147][T12229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.801165][T12229] ? trace_irq_disable+0x37/0x100 [ 255.801192][T12229] ? clear_bhb_loop+0x60/0xb0 [ 255.801216][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.801235][T12229] RIP: 0033:0x7f33e919aeb9 [ 255.801255][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.801272][T12229] RSP: 002b:00007f33e73f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.801294][T12229] RAX: ffffffffffffffda RBX: 00007f33e9415fa0 RCX: 00007f33e919aeb9 [ 255.801308][T12229] RDX: 0000000000000054 RSI: 0000200000000200 RDI: 0000000000000004 [ 255.801321][T12229] RBP: 00007f33e73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.801332][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.801343][T12229] R13: 00007f33e9416038 R14: 00007f33e9415fa0 R15: 00007ffe3ad1d258 [ 255.801377][T12229] [ 256.331547][T12240] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 256.370823][T12240] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 256.382265][T12240] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 256.390454][T12240] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 256.399027][T12240] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 256.407244][T12240] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 256.415128][T12240] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 256.556965][T12250] xt_socket: unknown flags 0x50 [ 256.700527][T12261] delete_channel: no stack [ 256.785922][T12263] ip6t_srh: unknown srh match flags 5F28 [ 256.957066][T12272] __nla_validate_parse: 8 callbacks suppressed [ 256.957088][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 257.251765][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1722'. [ 257.267128][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1722'. [ 257.286580][T12289] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.137045][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 258.256149][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 258.573264][T12356] xt_limit: Overflow, try lower: 604147548/4200216962 [ 258.897497][T12372] FAULT_INJECTION: forcing a failure. [ 258.897497][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 258.930817][T12372] CPU: 1 UID: 0 PID: 12372 Comm: syz.2.1741 Not tainted syzkaller #0 PREEMPT(full) [ 258.930846][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.930858][T12372] Call Trace: [ 258.930866][T12372] [ 258.930874][T12372] dump_stack_lvl+0xe8/0x150 [ 258.930905][T12372] should_fail_ex+0x412/0x560 [ 258.930935][T12372] should_failslab+0xa8/0x100 [ 258.930958][T12372] __kmalloc_noprof+0xde/0x7e0 [ 258.930977][T12372] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 258.931010][T12372] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 258.931044][T12372] genl_family_rcv_msg_doit+0xd9/0x330 [ 258.931076][T12372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 258.931108][T12372] ? apparmor_capable+0x137/0x1a0 [ 258.931135][T12372] ? bpf_lsm_capable+0x9/0x20 [ 258.931157][T12372] ? security_capable+0x7e/0x2c0 [ 258.931186][T12372] genl_rcv_msg+0x61c/0x7a0 [ 258.931229][T12372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.931252][T12372] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 258.931277][T12372] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 258.931298][T12372] ? __pfx_nl80211_post_doit+0x10/0x10 [ 258.931328][T12372] ? __pfx_ref_tracker_free+0x10/0x10 [ 258.931360][T12372] netlink_rcv_skb+0x232/0x4b0 [ 258.931382][T12372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.931409][T12372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.931427][T12372] ? genl_rcv+0x19/0x40 [ 258.931469][T12372] ? down_read+0x272/0x2e0 [ 258.931490][T12372] ? genl_rcv+0xd/0x40 [ 258.931517][T12372] genl_rcv+0x28/0x40 [ 258.931539][T12372] netlink_unicast+0x80f/0x9b0 [ 258.931579][T12372] ? __pfx_netlink_unicast+0x10/0x10 [ 258.931607][T12372] ? __alloc_skb+0x193/0x390 [ 258.931631][T12372] ? netlink_sendmsg+0x650/0xb40 [ 258.931650][T12372] ? skb_put+0x11b/0x210 [ 258.931678][T12372] netlink_sendmsg+0x813/0xb40 [ 258.931709][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.931734][T12372] ? aa_sock_msg_perm+0xf1/0x1b0 [ 258.931759][T12372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.931783][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.931803][T12372] ____sys_sendmsg+0xa68/0xad0 [ 258.931829][T12372] ? __might_fault+0xaf/0x130 [ 258.931864][T12372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.931901][T12372] ? import_iovec+0x73/0xa0 [ 258.931935][T12372] ___sys_sendmsg+0x2a5/0x360 [ 258.931958][T12372] ? __lock_acquire+0x6b5/0x2cf0 [ 258.931992][T12372] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.932058][T12372] ? __fget_files+0x2a/0x420 [ 258.932080][T12372] ? __fget_files+0x3a0/0x420 [ 258.932113][T12372] __x64_sys_sendmsg+0x1bd/0x2a0 [ 258.932142][T12372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.932179][T12372] ? __pfx_ksys_write+0x10/0x10 [ 258.932229][T12372] do_syscall_64+0xe2/0xf80 [ 258.932250][T12372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.932269][T12372] ? trace_irq_disable+0x37/0x100 [ 258.932287][T12372] ? clear_bhb_loop+0x60/0xb0 [ 258.932311][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.932331][T12372] RIP: 0033:0x7f677a79aeb9 [ 258.932349][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.932366][T12372] RSP: 002b:00007f677b575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.932388][T12372] RAX: ffffffffffffffda RBX: 00007f677aa15fa0 RCX: 00007f677a79aeb9 [ 258.932403][T12372] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 258.932416][T12372] RBP: 00007f677b575090 R08: 0000000000000000 R09: 0000000000000000 [ 258.932428][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.932440][T12372] R13: 00007f677aa16038 R14: 00007f677aa15fa0 R15: 00007fff9b8b2948 [ 258.932472][T12372] [ 259.417671][T12380] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 259.445012][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 259.521766][T12374] syzkaller0: entered promiscuous mode [ 259.591576][T12374] syzkaller0: entered allmulticast mode [ 259.746817][T12387] syzkaller0: entered promiscuous mode [ 259.752512][T12387] syzkaller0: entered allmulticast mode [ 261.471232][T12412] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 261.660723][T12429] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.1753'. [ 261.720535][T12430] xt_policy: too many policy elements [ 263.223316][T12443] tipc: Enabling of bearer rejected, failed to enable media [ 263.352142][T12452] FAULT_INJECTION: forcing a failure. [ 263.352142][T12452] name failslab, interval 1, probability 0, space 0, times 0 [ 263.388612][T12453] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 263.411612][T12452] CPU: 0 UID: 0 PID: 12452 Comm: syz.4.1754 Not tainted syzkaller #0 PREEMPT(full) [ 263.411642][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.411654][T12452] Call Trace: [ 263.411662][T12452] [ 263.411670][T12452] dump_stack_lvl+0xe8/0x150 [ 263.411702][T12452] should_fail_ex+0x412/0x560 [ 263.411732][T12452] should_failslab+0xa8/0x100 [ 263.411755][T12452] __kmalloc_noprof+0xde/0x7e0 [ 263.411775][T12452] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 263.411810][T12452] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 263.411843][T12452] genl_family_rcv_msg_doit+0xd9/0x330 [ 263.411877][T12452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 263.411911][T12452] ? apparmor_capable+0x137/0x1a0 [ 263.411940][T12452] ? bpf_lsm_capable+0x9/0x20 [ 263.411964][T12452] ? security_capable+0x7e/0x2c0 [ 263.411993][T12452] genl_rcv_msg+0x61c/0x7a0 [ 263.412025][T12452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.412048][T12452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 263.412073][T12452] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 263.412093][T12452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 263.412120][T12452] ? __pfx_ref_tracker_free+0x10/0x10 [ 263.412153][T12452] netlink_rcv_skb+0x232/0x4b0 [ 263.412175][T12452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.412199][T12452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.412216][T12452] ? genl_rcv+0x19/0x40 [ 263.412257][T12452] ? down_read+0x272/0x2e0 [ 263.412277][T12452] ? genl_rcv+0xd/0x40 [ 263.412302][T12452] genl_rcv+0x28/0x40 [ 263.412324][T12452] netlink_unicast+0x80f/0x9b0 [ 263.412369][T12452] ? __pfx_netlink_unicast+0x10/0x10 [ 263.412396][T12452] ? __alloc_skb+0x193/0x390 [ 263.412420][T12452] ? netlink_sendmsg+0x650/0xb40 [ 263.412437][T12452] ? skb_put+0x11b/0x210 [ 263.412464][T12452] netlink_sendmsg+0x813/0xb40 [ 263.412493][T12452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.412518][T12452] ? aa_sock_msg_perm+0xf1/0x1b0 [ 263.412542][T12452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.412564][T12452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.412583][T12452] ____sys_sendmsg+0xa68/0xad0 [ 263.412608][T12452] ? __might_fault+0xaf/0x130 [ 263.412649][T12452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.412685][T12452] ? import_iovec+0x73/0xa0 [ 263.412718][T12452] ___sys_sendmsg+0x2a5/0x360 [ 263.412741][T12452] ? __lock_acquire+0x6b5/0x2cf0 [ 263.412772][T12452] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.412837][T12452] ? __fget_files+0x2a/0x420 [ 263.412858][T12452] ? __fget_files+0x3a0/0x420 [ 263.412890][T12452] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.412920][T12452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.412956][T12452] ? __pfx_ksys_write+0x10/0x10 [ 263.412996][T12452] do_syscall_64+0xe2/0xf80 [ 263.413016][T12452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.413034][T12452] ? trace_irq_disable+0x37/0x100 [ 263.413052][T12452] ? clear_bhb_loop+0x60/0xb0 [ 263.413075][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.413093][T12452] RIP: 0033:0x7f12db19aeb9 [ 263.413111][T12452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.413127][T12452] RSP: 002b:00007f12dc095028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.413149][T12452] RAX: ffffffffffffffda RBX: 00007f12db415fa0 RCX: 00007f12db19aeb9 [ 263.413163][T12452] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 263.413175][T12452] RBP: 00007f12dc095090 R08: 0000000000000000 R09: 0000000000000000 [ 263.413187][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.413198][T12452] R13: 00007f12db416038 R14: 00007f12db415fa0 R15: 00007fffe39abd98 [ 263.413232][T12452] [ 263.862905][T12453] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1756'. [ 264.068850][T12472] netlink: 'syz.3.1760': attribute type 21 has an invalid length. [ 264.135136][T12472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1760'. [ 264.272740][T12472] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1760'. [ 264.339038][T12484] macsec3: entered promiscuous mode [ 264.692620][T12508] FAULT_INJECTION: forcing a failure. [ 264.692620][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 264.755964][T12508] CPU: 0 UID: 0 PID: 12508 Comm: syz.3.1769 Not tainted syzkaller #0 PREEMPT(full) [ 264.755994][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 264.756006][T12508] Call Trace: [ 264.756014][T12508] [ 264.756023][T12508] dump_stack_lvl+0xe8/0x150 [ 264.756054][T12508] should_fail_ex+0x412/0x560 [ 264.756100][T12508] should_failslab+0xa8/0x100 [ 264.756122][T12508] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 264.756152][T12508] ? __alloc_skb+0x1d7/0x390 [ 264.756173][T12508] ? __local_bh_enable_ip+0xd0/0x130 [ 264.756193][T12508] ? __alloc_skb+0x193/0x390 [ 264.756217][T12508] __alloc_skb+0x1d7/0x390 [ 264.756245][T12508] netlink_ack+0x146/0xa50 [ 264.756262][T12508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.756286][T12508] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 264.756312][T12508] ? __pfx_nl80211_post_doit+0x10/0x10 [ 264.756342][T12508] ? __pfx_ref_tracker_free+0x10/0x10 [ 264.756386][T12508] netlink_rcv_skb+0x2b6/0x4b0 [ 264.756407][T12508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.756434][T12508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.756451][T12508] ? genl_rcv+0x19/0x40 [ 264.756494][T12508] ? down_read+0x272/0x2e0 [ 264.756515][T12508] ? genl_rcv+0xd/0x40 [ 264.756541][T12508] genl_rcv+0x28/0x40 [ 264.756562][T12508] netlink_unicast+0x80f/0x9b0 [ 264.756600][T12508] ? __pfx_netlink_unicast+0x10/0x10 [ 264.756627][T12508] ? __alloc_skb+0x193/0x390 [ 264.756650][T12508] ? netlink_sendmsg+0x650/0xb40 [ 264.756669][T12508] ? skb_put+0x11b/0x210 [ 264.756696][T12508] netlink_sendmsg+0x813/0xb40 [ 264.756727][T12508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.756752][T12508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 264.756778][T12508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.756801][T12508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.756820][T12508] ____sys_sendmsg+0xa68/0xad0 [ 264.756845][T12508] ? __might_fault+0xaf/0x130 [ 264.756880][T12508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.756917][T12508] ? import_iovec+0x73/0xa0 [ 264.756950][T12508] ___sys_sendmsg+0x2a5/0x360 [ 264.756980][T12508] ? __lock_acquire+0x6b5/0x2cf0 [ 264.757012][T12508] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.757079][T12508] ? __fget_files+0x2a/0x420 [ 264.757099][T12508] ? __fget_files+0x3a0/0x420 [ 264.757129][T12508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 264.757152][T12508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.757181][T12508] ? __pfx_ksys_write+0x10/0x10 [ 264.757222][T12508] do_syscall_64+0xe2/0xf80 [ 264.757242][T12508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.757260][T12508] ? trace_irq_disable+0x37/0x100 [ 264.757278][T12508] ? clear_bhb_loop+0x60/0xb0 [ 264.757302][T12508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.757321][T12508] RIP: 0033:0x7f2336f9aeb9 [ 264.757340][T12508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.757355][T12508] RSP: 002b:00007f2337e3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.757385][T12508] RAX: ffffffffffffffda RBX: 00007f2337215fa0 RCX: 00007f2336f9aeb9 [ 264.757399][T12508] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 264.757411][T12508] RBP: 00007f2337e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 264.757422][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.757433][T12508] R13: 00007f2337216038 R14: 00007f2337215fa0 R15: 00007fffebde01d8 [ 264.757464][T12508] [ 265.299415][T12522] netlink: 'syz.3.1774': attribute type 13 has an invalid length. [ 265.557255][T12535] syz.4.1779 uses old SIOCAX25GETINFO [ 265.589621][T12533] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 265.607122][T12526] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 265.651533][T12526] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 265.677221][T12526] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 265.699353][T12526] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 265.751185][T12526] netlink: 'syz.6.1775': attribute type 29 has an invalid length. [ 266.198570][T12567] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 266.221460][T12568] tipc: Started in network mode [ 266.235541][T12568] tipc: Node identity a27d2c902707, cluster identity 4711 [ 266.263281][T12568] tipc: Enabled bearer , priority 0 [ 266.299720][T12568] syzkaller0: entered promiscuous mode [ 266.317300][T12568] syzkaller0: entered allmulticast mode [ 266.369001][T12576] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1791'. [ 266.390420][T12568] tipc: Resetting bearer [ 266.417561][T12577] ip6tnl0: Caught tx_queue_len zero misconfig [ 266.445830][T12564] tipc: Resetting bearer [ 266.484293][T12564] tipc: Disabling bearer [ 267.169947][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1803'. [ 267.781232][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 268.113403][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1815'. [ 268.157785][T12683] tipc: Enabled bearer , priority 10 [ 268.164271][T12678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1815'. [ 268.168070][T12684] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1817'. [ 268.193175][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 268.204428][T12683] tipc: Enabling of bearer rejected, already enabled [ 268.316841][T12683] validate_nla: 2 callbacks suppressed [ 268.316861][T12683] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 268.492090][T12685] bond1: (slave gretap1): making interface the new active one [ 268.535219][T12685] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 268.894422][T12712] __nla_validate_parse: 4 callbacks suppressed [ 268.894444][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 268.969212][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'. [ 269.083280][T12719] ip6gre0: Master is either lo or non-ether device [ 269.167581][T12728] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1829'. [ 269.267349][T12728] 0{X: renamed from gretap0 (while UP) [ 269.299095][T12728] 0{X: entered allmulticast mode [ 269.305394][T12728] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 269.362339][ T40] tipc: Node number set to 2239376528 [ 269.369888][T12736] tipc: Enabling of bearer rejected, media not registered [ 269.700364][T12754] FAULT_INJECTION: forcing a failure. [ 269.700364][T12754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.735034][T12754] CPU: 0 UID: 0 PID: 12754 Comm: syz.4.1837 Not tainted syzkaller #0 PREEMPT(full) [ 269.735063][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 269.735075][T12754] Call Trace: [ 269.735083][T12754] [ 269.735092][T12754] dump_stack_lvl+0xe8/0x150 [ 269.735124][T12754] should_fail_ex+0x412/0x560 [ 269.735155][T12754] _copy_to_user+0x31/0xb0 [ 269.735186][T12754] simple_read_from_buffer+0xe1/0x170 [ 269.735213][T12754] proc_fail_nth_read+0x1bb/0x230 [ 269.735244][T12754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.735275][T12754] ? rw_verify_area+0x2a6/0x4d0 [ 269.735301][T12754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.735330][T12754] vfs_read+0x20c/0xa70 [ 269.735355][T12754] ? fdget_pos+0x246/0x320 [ 269.735381][T12754] ? __pfx___mutex_lock+0x10/0x10 [ 269.735409][T12754] ? __pfx_vfs_read+0x10/0x10 [ 269.735436][T12754] ? __fget_files+0x2a/0x420 [ 269.735462][T12754] ? __fget_files+0x3a0/0x420 [ 269.735480][T12754] ? __fget_files+0x2a/0x420 [ 269.735508][T12754] ksys_read+0x150/0x270 [ 269.735536][T12754] ? __pfx_ksys_read+0x10/0x10 [ 269.735576][T12754] do_syscall_64+0xe2/0xf80 [ 269.735598][T12754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.735616][T12754] ? trace_irq_disable+0x37/0x100 [ 269.735635][T12754] ? clear_bhb_loop+0x60/0xb0 [ 269.735658][T12754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.735676][T12754] RIP: 0033:0x7f12db15b78e [ 269.735695][T12754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.735711][T12754] RSP: 002b:00007f12dc094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.735733][T12754] RAX: ffffffffffffffda RBX: 00007f12dc0956c0 RCX: 00007f12db15b78e [ 269.735748][T12754] RDX: 000000000000000f RSI: 00007f12dc0950a0 RDI: 0000000000000005 [ 269.735759][T12754] RBP: 00007f12dc095090 R08: 0000000000000000 R09: 0000000000000000 [ 269.735771][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.735783][T12754] R13: 00007f12db416038 R14: 00007f12db415fa0 R15: 00007fffe39abd98 [ 269.735816][T12754] [ 270.109531][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 270.227736][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1842'. [ 270.253447][T12764] bond2: option resend_igmp: invalid value (32767) [ 270.272358][T12764] bond2: option resend_igmp: allowed values 0 - 255 [ 270.317685][T12764] bond2 (unregistering): Released all slaves [ 270.776446][T12797] syzkaller0: entered promiscuous mode [ 270.815548][T12797] syzkaller0: entered allmulticast mode [ 271.129208][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 271.161502][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 271.358406][T12826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1858'. [ 272.056413][T12861] netlink: 'syz.6.1869': attribute type 6 has an invalid length. [ 272.530157][T12875] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1875'. [ 272.545247][T12875] netlink: 'syz.5.1875': attribute type 1 has an invalid length. [ 272.726285][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1881'. [ 273.444759][T12931] atomic_op ffff8880294b6198 conn xmit_atomic 0000000000000000 [ 273.906567][T12958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.920944][T12958] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 273.974796][T12960] netlink: 'syz.4.1906': attribute type 25 has an invalid length. [ 274.370691][T12972] __nla_validate_parse: 2 callbacks suppressed [ 274.370712][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'. [ 274.380783][T12976] netlink: 'syz.5.1912': attribute type 1 has an invalid length. [ 274.395003][T12976] netlink: 'syz.5.1912': attribute type 11 has an invalid length. [ 274.403792][T12976] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1912'. [ 274.718273][T12997] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 275.152684][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 275.163074][T13016] netlink: 'syz.5.1921': attribute type 1 has an invalid length. [ 275.251788][T13016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.310176][T13031] bond2: (slave ip6gretap1): making interface the new active one [ 275.370561][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1921'. [ 275.386859][T13031] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 275.519984][T13043] netlink: 'syz.2.1927': attribute type 16 has an invalid length. [ 275.561758][T13043] netlink: 'syz.2.1927': attribute type 17 has an invalid length. [ 275.636590][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.649213][T13042] bridge0: port 2(.) entered disabled state [ 275.739310][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'. [ 275.757014][T13043] gre0: left promiscuous mode [ 275.775817][T13043] gre0: left allmulticast mode [ 275.781999][T13043] gretap0: left promiscuous mode [ 275.843133][T13043] sit0: left promiscuous mode [ 276.040119][T13043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.121832][T13060] veth7: entered promiscuous mode [ 276.147666][T13060] veth7: entered allmulticast mode [ 276.361055][T13076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1938'. [ 276.672181][T13087] netlink: 'syz.3.1937': attribute type 11 has an invalid length. [ 276.692249][T13087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1937'. [ 277.050331][T13101] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1945'. [ 277.647560][T13124] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 277.702323][T13124] bond9 (unregistering): Released all slaves [ 277.862964][T13129] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 277.918787][T13129] bond3 (unregistering): Released all slaves [ 277.926660][T13144] netlink: 'syz.3.1958': attribute type 2 has an invalid length. [ 277.935364][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 278.279412][T13158] openvswitch: netlink: Multiple metadata blocks provided [ 278.852601][T13195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.889192][T13195] vcan0: entered allmulticast mode [ 279.059491][T13204] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 279.073247][T13210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1976'. [ 279.184754][T13204] bond9: (slave geneve3): making interface the new active one [ 279.231902][T13204] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 279.267910][ T8155] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.314674][ T8155] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.387635][ T8155] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.415816][ T8155] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.430005][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 279.497762][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 279.538505][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.684241][T13236] vcan0 (unregistering): left allmulticast mode [ 279.754646][T13249] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1983'. [ 279.776566][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.827820][T13249] netlink: 'syz.2.1983': attribute type 13 has an invalid length. [ 279.880517][T13249] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1983'. [ 279.919713][T13249] syz_tun: refused to change device tx_queue_len [ 280.009350][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1986'. [ 280.062836][T13256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.076602][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1987'. [ 280.129306][T13265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.221522][T13269] IPv6: NLM_F_REPLACE set, but no existing node found! [ 280.246465][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 280.351594][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1992'. [ 280.361071][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1992'. [ 280.603886][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1994'. [ 280.701148][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1994'. [ 280.819187][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.925581][T13310] sctp: [Deprecated]: syz.6.2000 (pid 13310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.925581][T13310] Use struct sctp_sack_info instead [ 281.199471][T13323] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 281.247463][T13323] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 281.302996][T13335] netlink: 'syz.2.2002': attribute type 11 has an invalid length. [ 281.441906][T13323] : (slave syz_tun): Enslaving as an active interface with an up link [ 281.463067][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.754919][T13352] netlink: 'syz.4.2012': attribute type 4 has an invalid length. [ 281.777087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.785798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.794432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.816640][T13356] netlink: 'syz.4.2012': attribute type 4 has an invalid length. [ 282.726269][T13404] netlink: 'syz.4.2025': attribute type 1 has an invalid length. [ 282.743687][T13404] NCSI netlink: No device for ifindex 0 [ 283.091991][T13415] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 283.123942][T13415] bond3 (unregistering): Released all slaves [ 284.133986][T13484] netlink: 'syz.6.2045': attribute type 3 has an invalid length. [ 284.154894][T13484] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 284.183381][T13484] NCSI netlink: No device for ifindex 813332851 [ 284.299285][T13494] syz_tun: entered allmulticast mode [ 284.976239][ T5919] net_ratelimit: 97 callbacks suppressed [ 284.976260][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.081678][T13489] syz_tun: left allmulticast mode [ 285.088481][T13523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.331337][T13535] vxcan1: mtu less than device minimum [ 285.337642][T13537] __nla_validate_parse: 12 callbacks suppressed [ 285.337662][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 285.354132][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 285.364443][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 285.366512][T13533] gre0: entered promiscuous mode [ 285.373994][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 285.388877][T13533] gre0: entered allmulticast mode [ 285.442076][T13533] sctp: [Deprecated]: syz.3.2055 (pid 13533) Use of int in maxseg socket option. [ 285.442076][T13533] Use struct sctp_assoc_value instead [ 285.625013][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.020580][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.033380][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 286.279913][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.294780][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.313357][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.323178][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.364460][T13584] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.382465][T13586] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 286.527553][T13592] netlink: 'syz.6.2074': attribute type 10 has an invalid length. [ 286.543838][T13592] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.573523][T13592] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.604574][T13596] bridge0: entered allmulticast mode [ 287.029352][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 287.059884][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.446133][T13640] bond0: Caught tx_queue_len zero misconfig [ 287.449985][T13641] netlink: 'syz.5.2085': attribute type 1 has an invalid length. [ 287.564614][T13646] team0: Caught tx_queue_len zero misconfig [ 287.587738][T13646] lo: Caught tx_queue_len zero misconfig [ 287.616548][T13646] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 288.096286][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.339577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.348413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.368223][T13684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.376095][T13684] IPv6: NLM_F_CREATE should be set when creating new route [ 288.383497][T13684] IPv6: NLM_F_CREATE should be set when creating new route [ 288.964960][T13709] syzkaller1: entered promiscuous mode [ 288.995324][T13709] syzkaller1: entered allmulticast mode [ 289.656018][T13737] netlink: 'syz.3.2115': attribute type 10 has an invalid length. [ 289.700496][T13737] bridge0: port 3(team0) entered blocking state [ 289.727509][T13737] bridge0: port 3(team0) entered disabled state [ 289.734133][T13737] team0: entered allmulticast mode [ 289.748672][T13737] team_slave_0: entered allmulticast mode [ 289.769534][T13737] team_slave_1: entered allmulticast mode [ 289.795658][T13737] dummy0: entered allmulticast mode [ 289.808213][T13737] team0: entered promiscuous mode [ 289.820475][T13737] team_slave_0: entered promiscuous mode [ 289.835913][T13737] team_slave_1: entered promiscuous mode [ 289.847619][T13737] dummy0: entered promiscuous mode [ 289.861062][T13737] bridge0: port 3(team0) entered blocking state [ 289.867640][T13737] bridge0: port 3(team0) entered forwarding state [ 290.178105][ T5888] net_ratelimit: 7 callbacks suppressed [ 290.178127][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.820451][T13804] netlink: 'syz.3.2134': attribute type 18 has an invalid length. [ 290.820451][T13802] netlink: 'syz.3.2134': attribute type 18 has an invalid length. [ 290.844799][T13806] __nla_validate_parse: 17 callbacks suppressed [ 290.844821][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2135'. [ 290.901539][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2135'. [ 291.077224][T13795] netlink: 'syz.5.2125': attribute type 4 has an invalid length. [ 291.085625][T13795] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2125'. [ 291.117855][T13795] `: renamed from bond0 (while UP) [ 291.220572][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.240160][T13828] team0: Cannot enslave team device to itself [ 292.259839][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.815721][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.070836][T13767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.299026][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.392883][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'. [ 293.403627][T13855] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2147'. [ 293.418275][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'. [ 293.514507][T13859] xt_TCPMSS: Only works on TCP SYN packets [ 293.536759][T13862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2152'. [ 293.551614][T13862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2152'. [ 293.616353][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.647745][ T8163] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.663364][ T8163] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.688473][ T8163] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.742888][ T8163] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.819097][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 293.997653][T13889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2161'. [ 294.074468][T13895] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20002 [ 294.336237][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.682574][T13922] lo speed is unknown, defaulting to 1000 [ 295.287749][T13941] tipc: MTU too low for tipc bearer [ 295.397397][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.631245][T13966] netlink: 'syz.5.2181': attribute type 2 has an invalid length. [ 295.892486][T13984] __nla_validate_parse: 4 callbacks suppressed [ 295.892507][T13984] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2185'. [ 295.946891][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 295.988595][T13987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 296.073493][T13989] netlink: 'syz.2.2184': attribute type 10 has an invalid length. [ 296.105861][T13989] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2184'. [ 296.292757][T13998] netlink: 'syz.5.2191': attribute type 19 has an invalid length. [ 296.455687][T14010] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 297.259655][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 297.289599][T14049] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2209'. [ 297.329184][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2210'. [ 297.334115][T14049] unsupported nlmsg_type 40 [ 297.404497][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2210'. [ 297.756309][T14079] team0: Device gtp0 is up. Set it down before adding it as a team port [ 298.328911][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'. [ 298.384537][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'. [ 298.490675][ T5903] IPVS: starting estimator thread 0... [ 298.606780][T14120] IPVS: using max 29 ests per chain, 69600 per kthread [ 298.654782][T14128] netlink: 'syz.5.2229': attribute type 39 has an invalid length. [ 298.996410][T14130] syzkaller0: entered promiscuous mode [ 299.002300][T14130] syzkaller0: entered allmulticast mode [ 299.648208][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 299.684089][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 299.696902][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 299.717391][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 299.777863][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 299.800069][T14158] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 300.208828][T14191] xt_l2tp: v2 doesn't support IP mode [ 300.956512][T14222] openvswitch: netlink: IP tunnel dst address not specified [ 301.038792][T14225] __nla_validate_parse: 15 callbacks suppressed [ 301.038816][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2263'. [ 301.091790][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2263'. [ 301.185104][T14228] lo speed is unknown, defaulting to 1000 [ 301.396293][T14248] xt_limit: Overflow, try lower: 271964/0 [ 301.407411][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 301.507083][T14249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.799039][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2275'. [ 301.833884][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 301.844068][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2275'. [ 302.106705][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'. [ 302.643228][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2289'. [ 302.672059][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'. [ 302.676013][T14318] validate_nla: 28 callbacks suppressed [ 302.676032][T14318] netlink: 'syz.3.2291': attribute type 30 has an invalid length. [ 302.780652][T14318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2291'. [ 302.794143][T14318] netlink: 'syz.3.2291': attribute type 6 has an invalid length. [ 302.802802][T14318] netlink: 'syz.3.2291': attribute type 5 has an invalid length. [ 303.609376][T14352] bond3: entered promiscuous mode [ 303.623719][T14352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.840327][T14356] ip6gre1: entered allmulticast mode [ 304.354184][T14386] netlink: 'syz.4.2314': attribute type 8 has an invalid length. [ 304.419060][T14377] macvtap1: entered promiscuous mode [ 304.424596][T14377] vlan0: entered promiscuous mode [ 304.430765][T14377] macvtap1: entered allmulticast mode [ 304.437584][T14377] vlan0: entered allmulticast mode [ 304.442961][T14377] veth0_vlan: entered allmulticast mode [ 304.599227][T14389] bond11: Unable to set up delay as MII monitoring is disabled [ 304.624012][T14389] bond11 (unregistering): Released all slaves [ 304.691994][T14391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.744381][T14402] netlink: 'syz.6.2319': attribute type 10 has an invalid length. [ 304.784020][T14391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.855998][T14402] bond0: (slave team0): Releasing backup interface [ 304.873737][T14402] bridge0: port 3(team0) entered blocking state [ 304.880804][T14402] bridge0: port 3(team0) entered disabled state [ 304.895121][T14402] team0: entered allmulticast mode [ 304.911407][T14402] team_slave_0: entered allmulticast mode [ 304.925817][T14402] team_slave_1: entered allmulticast mode [ 304.944389][T14402] team0: entered promiscuous mode [ 304.990459][T14402] team_slave_0: entered promiscuous mode [ 305.004645][T14402] team_slave_1: entered promiscuous mode [ 305.179091][T14419] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.338152][T14429] .: renamed from bridge_slave_1 (while UP) [ 305.535751][T14442] netlink: 'syz.6.2332': attribute type 10 has an invalid length. [ 305.543772][T14442] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 305.559289][T14442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.630211][T14447] gretap0: entered promiscuous mode [ 305.637900][T14446] netlink: 'syz.4.2334': attribute type 3 has an invalid length. [ 305.946101][T14461] xt_limit: Overflow, try lower: 271964/0 [ 306.151520][T14465] netlink: 'syz.6.2340': attribute type 32 has an invalid length. [ 306.160865][T14469] __nla_validate_parse: 26 callbacks suppressed [ 306.160884][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 306.222257][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2343'. [ 306.321229][T14469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.330094][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2343'. [ 306.378275][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 306.389403][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 306.404276][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 306.418081][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 306.433748][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 306.444025][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 306.464806][T14492] macvlan0: entered promiscuous mode [ 306.506493][T14491] macvlan0: left promiscuous mode [ 306.553724][T14486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2346'. [ 306.812897][T14512] netlink: 'syz.5.2352': attribute type 1 has an invalid length. [ 306.947722][T14512] bond0: entered promiscuous mode [ 306.953620][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.317866][T14546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.474427][T14550] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 307.653425][T14564] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 307.691489][T14564] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 307.951433][T14569] syzkaller0: entered promiscuous mode [ 307.989611][T14569] syzkaller0: entered allmulticast mode [ 309.786074][T14603] ip6tnl0: Caught tx_queue_len zero misconfig [ 310.110222][T14625] netlink: 'syz.5.2381': attribute type 1 has an invalid length. [ 310.178482][T14623] netlink: 'syz.5.2381': attribute type 1 has an invalid length. [ 310.457481][T14641] syzkaller0: entered allmulticast mode [ 310.533132][T14641] syzkaller0 (unregistering): left allmulticast mode [ 310.631975][T14649] bridge0: entered allmulticast mode [ 310.667328][T14658] netlink: 'syz.2.2389': attribute type 6 has an invalid length. [ 310.732085][T14656] syzkaller0: entered promiscuous mode [ 310.739505][T14656] syzkaller0: entered allmulticast mode [ 310.809526][T14662] netlink: 'syz.3.2391': attribute type 6 has an invalid length. [ 311.584238][T14714] netlink: 'syz.5.2403': attribute type 9 has an invalid length. [ 311.806394][T14725] openvswitch: netlink: IP tunnel dst address not specified [ 311.914283][T14733] openvswitch: netlink: IPv4 tunnel dst address is zero [ 312.024550][T14732] __nla_validate_parse: 18 callbacks suppressed [ 312.024572][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 312.198570][T14747] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 312.203816][T14750] netlink: 'syz.2.2417': attribute type 1 has an invalid length. [ 312.229275][T14747] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 312.332130][T14757] FAULT_INJECTION: forcing a failure. [ 312.332130][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 312.361271][T14757] CPU: 0 UID: 0 PID: 14757 Comm: syz.3.2418 Not tainted syzkaller #0 PREEMPT(full) [ 312.361300][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.361313][T14757] Call Trace: [ 312.361321][T14757] [ 312.361330][T14757] dump_stack_lvl+0xe8/0x150 [ 312.361361][T14757] should_fail_ex+0x412/0x560 [ 312.361391][T14757] should_failslab+0xa8/0x100 [ 312.361415][T14757] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 312.361445][T14757] ? __alloc_skb+0x193/0x390 [ 312.361467][T14757] ? __alloc_skb+0x1d7/0x390 [ 312.361487][T14757] ? __local_bh_enable_ip+0xd0/0x130 [ 312.361506][T14757] ? __alloc_skb+0x193/0x390 [ 312.361530][T14757] __alloc_skb+0x1d7/0x390 [ 312.361558][T14757] netlink_sendmsg+0x5d4/0xb40 [ 312.361600][T14757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.361625][T14757] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.361652][T14757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.361675][T14757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.361695][T14757] ____sys_sendmsg+0xa68/0xad0 [ 312.361721][T14757] ? __might_fault+0xaf/0x130 [ 312.361756][T14757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.361792][T14757] ? import_iovec+0x73/0xa0 [ 312.361822][T14757] ___sys_sendmsg+0x2a5/0x360 [ 312.361845][T14757] ? __lock_acquire+0x6b5/0x2cf0 [ 312.361874][T14757] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.361937][T14757] ? __fget_files+0x2a/0x420 [ 312.361958][T14757] ? __fget_files+0x3a0/0x420 [ 312.361989][T14757] __x64_sys_sendmsg+0x1bd/0x2a0 [ 312.362017][T14757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.362054][T14757] ? __pfx_ksys_write+0x10/0x10 [ 312.362092][T14757] do_syscall_64+0xe2/0xf80 [ 312.362113][T14757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.362132][T14757] ? trace_irq_disable+0x37/0x100 [ 312.362150][T14757] ? clear_bhb_loop+0x60/0xb0 [ 312.362172][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.362191][T14757] RIP: 0033:0x7f2336f9aeb9 [ 312.362209][T14757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.362226][T14757] RSP: 002b:00007f2337e1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.362248][T14757] RAX: ffffffffffffffda RBX: 00007f2337216090 RCX: 00007f2336f9aeb9 [ 312.362262][T14757] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 312.362274][T14757] RBP: 00007f2337e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 312.362286][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.362298][T14757] R13: 00007f2337216128 R14: 00007f2337216090 R15: 00007fffebde01d8 [ 312.362329][T14757] [ 312.438894][T14759] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 312.614258][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 312.649541][T14769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.053808][T14791] openvswitch: netlink: IP tunnel dst address not specified [ 313.066741][T14792] openvswitch: netlink: IP tunnel dst address not specified [ 313.151793][T14799] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2432'. [ 313.471363][T14815] netlink: 'syz.2.2439': attribute type 16 has an invalid length. [ 313.496340][T14815] netlink: 'syz.2.2439': attribute type 17 has an invalid length. [ 313.666751][T14825] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 313.687553][T14825] nbd: error processing sock list [ 313.713945][T14825] block nbd2: shutting down sockets [ 313.779918][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 313.812063][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 314.088775][T14857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.149111][T14861] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 314.231811][T14861] .: left allmulticast mode [ 314.255122][T14861] .: left promiscuous mode [ 314.271562][T14861] bridge0: port 2(.) entered disabled state [ 314.312569][T14861] bridge_slave_0: left allmulticast mode [ 314.319714][T14861] bridge_slave_0: left promiscuous mode [ 314.340249][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.538488][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2453'. [ 315.118096][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 315.261769][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 315.294821][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'. [ 315.849027][T14944] syzkaller0: entered promiscuous mode [ 315.860565][T14944] syzkaller0: entered allmulticast mode [ 315.869853][T14948] dummy0: left promiscuous mode [ 315.875180][T14948] dummy0: left allmulticast mode [ 315.894469][T14948] team0: Port device dummy0 removed [ 315.904273][T14948] batman_adv: batadv0: Adding interface: dummy0 [ 315.912227][T14948] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.944266][T14948] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 316.014627][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 317.809870][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 317.819304][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 318.003708][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.221053][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 318.268544][T14981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.338645][T14979] sit0: entered promiscuous mode [ 318.409877][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 318.475038][T14999] pim6reg: entered allmulticast mode [ 318.526603][T15001] pim6reg: left allmulticast mode [ 318.647195][T15010] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2487'. [ 318.683116][T15015] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2487'. [ 318.774965][T15025] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2491'. [ 318.867100][T15031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2495'. [ 319.017022][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2496'. [ 319.064751][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2496'. [ 319.269033][T15047] team0: Caught tx_queue_len zero misconfig [ 319.307972][T15054] lo speed is unknown, defaulting to 1000 [ 319.349283][T15061] veth5: entered allmulticast mode [ 319.510779][T15069] netlink: 'syz.2.2503': attribute type 2 has an invalid length. [ 319.667488][T15028] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.163542][T15150] bond6 (unregistering): Released all slaves [ 321.392959][T15157] ip6gre1: entered allmulticast mode [ 321.560588][T15171] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 322.327516][T15215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.575652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.306705][T15265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.402184][T15265] __nla_validate_parse: 9 callbacks suppressed [ 323.402208][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 323.615884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.660134][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 323.695644][T15284] nbd: must specify a size in bytes for the device [ 323.696988][ T8156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.002717][T15301] 8021q: VLANs not supported on ip6_vti0 [ 324.049817][T15301] 8021q: VLANs not supported on ip6_vti0 [ 324.154870][T15313] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2579'. [ 324.188579][T15313] netlink: 'syz.6.2579': attribute type 9 has an invalid length. [ 324.259896][T15313] pimreg3: entered allmulticast mode [ 324.292841][T15006] IPVS: starting estimator thread 0... [ 324.298797][T15320] IPVS: ip_vs_add_dest(): server weight less than zero [ 324.394866][T15324] IPVS: using max 26 ests per chain, 62400 per kthread [ 324.430934][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 324.612828][T15345] syzkaller1: entered promiscuous mode [ 324.631016][T15345] syzkaller1: entered allmulticast mode [ 324.647212][ T8156] nci: nci_rx_work: unknown MT 0x7 [ 324.655555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.699843][T15337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.902826][T15356] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2588'. [ 325.006272][T15361] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2589'. [ 325.021646][T15361] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2589'. [ 325.388124][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2597'. [ 325.539954][T15396] dvmrp6: entered allmulticast mode [ 325.695528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.710830][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 325.919353][T15414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2604'. [ 326.175011][T15437] lo: entered allmulticast mode [ 326.735849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.019106][T15473] bond0: (slave gre0): Error: Device can not be enslaved while up [ 327.099131][T15480] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.217829][T15484] netlink: 'syz.2.2627': attribute type 21 has an invalid length. [ 327.491176][T15490] macvtap1: entered promiscuous mode [ 327.496841][T15490] vlan0: entered promiscuous mode [ 327.502142][T15490] macvtap1: entered allmulticast mode [ 327.512080][T15490] vlan0: entered allmulticast mode [ 327.525815][T15490] veth0_vlan: entered allmulticast mode [ 327.653951][T15493] syzkaller0: entered promiscuous mode [ 327.677423][T15493] syzkaller0: entered allmulticast mode [ 327.685157][T15510] syzkaller1: entered promiscuous mode [ 327.696305][T15510] syzkaller1: entered allmulticast mode [ 327.761678][T15517] netlink: 'syz.3.2636': attribute type 5 has an invalid length. [ 327.775519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.148956][T15537] gtp0: entered promiscuous mode [ 328.171232][T15537] gtp0: entered allmulticast mode [ 328.207054][T15541] netlink: 'syz.3.2643': attribute type 5 has an invalid length. [ 328.547877][T15560] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 328.568891][T15562] __nla_validate_parse: 14 callbacks suppressed [ 328.568912][T15562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 328.815509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.948313][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2654'. [ 328.976652][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2654'. [ 329.123043][T15583] syzkaller0: entered promiscuous mode [ 329.134881][T15583] syzkaller0: entered allmulticast mode [ 329.152657][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2658'. [ 329.458008][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.618885][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 329.814516][T15630] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.907557][T15637] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2672'. [ 331.306666][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.171797][T15609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.335777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.444825][T15653] tipc: Enabled bearer , priority 0 [ 332.469823][T15657] syzkaller0: entered promiscuous mode [ 332.486050][T15657] syzkaller0: entered allmulticast mode [ 332.895296][T15667] syzkaller0: entered promiscuous mode [ 332.901743][T15667] syzkaller0: entered allmulticast mode [ 332.912706][T15675] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 332.974857][T15680] tipc: Resetting bearer [ 333.076189][T15649] tipc: Resetting bearer [ 333.170949][T15649] tipc: Disabling bearer [ 333.277503][T15684] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 333.298299][T15684] bond6 (unregistering): Released all slaves [ 333.345180][T15697] netlink: 'syz.6.2688': attribute type 23 has an invalid length. [ 333.375535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.455297][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 333.486619][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 333.564293][T15704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.612774][T15704] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2690'. [ 333.925059][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2697'. [ 333.950944][T15733] netlink: 'syz.3.2699': attribute type 1 has an invalid length. [ 334.099611][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2701'. [ 334.111477][T15746] netlink: 'syz.4.2702': attribute type 9 has an invalid length. [ 334.127249][T15738] 8021q: adding VLAN 0 to HW filter on device bond12 [ 334.137141][T15738] bond11: (slave bond12): making interface the new active one [ 334.146924][T15738] bond11: (slave bond12): Enslaving as an active interface with an up link [ 334.162842][T15733] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.177261][T15733] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 334.209079][T15743] team1: entered promiscuous mode [ 334.214566][T15743] team1: entered allmulticast mode [ 334.415838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.576137][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.592596][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 334.725964][T15772] dvmrp0: entered allmulticast mode [ 334.791034][T15776] unsupported nla_type 33542 [ 334.809348][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2711'. [ 334.959067][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 335.008723][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'. [ 335.031051][T15784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.368393][T15784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.455508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.825298][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 336.119713][T15818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2725'. [ 336.202247][T15823] gretap0: entered promiscuous mode [ 336.422095][T15832] sctp: [Deprecated]: syz.4.2727 (pid 15832) Use of int in max_burst socket option. [ 336.422095][T15832] Use struct sctp_assoc_value instead [ 336.452623][T15832] sctp: [Deprecated]: syz.4.2727 (pid 15832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.452623][T15832] Use struct sctp_sack_info instead [ 336.475218][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2732'. [ 336.495852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.256265][T15880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.466876][T15885] tipc: Started in network mode [ 337.472261][T15885] tipc: Node identity 7e785bd59662, cluster identity 4711 [ 337.495649][T15885] tipc: Enabled bearer , priority 10 [ 337.535832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.537385][T15885] syzkaller0: entered promiscuous mode [ 337.585551][T15885] syzkaller0: entered allmulticast mode [ 337.640613][T15892] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 337.650823][T15892] bond5: option packets_per_slave: allowed values 0 - 65535 [ 337.674021][T15892] bond5 (unregistering): Released all slaves [ 337.753404][T15885] tipc: Resetting bearer [ 337.809687][T15883] tipc: Resetting bearer [ 337.862092][T15883] tipc: Disabling bearer [ 337.925716][T15909] netlink: 'syz.2.2749': attribute type 7 has an invalid length. [ 338.027998][T15909] netlink: 'syz.2.2749': attribute type 7 has an invalid length. [ 338.112553][T15913] bridge5: port 1(veth0_to_bond) entered blocking state [ 338.128120][T15913] bridge5: port 1(veth0_to_bond) entered disabled state [ 338.136146][T15913] veth0_to_bond: entered allmulticast mode [ 338.143333][T15913] veth0_to_bond: entered promiscuous mode [ 338.585544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.679928][T15938] __nla_validate_parse: 8 callbacks suppressed [ 338.679949][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.698467][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.707869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.717732][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.727271][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.737550][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.748309][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 338.872798][T15946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2760'. [ 338.903775][T15946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2760'. [ 338.936797][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2762'. [ 338.967912][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2763'. [ 339.084794][T15959] xt_hashlimit: size too large, truncated to 1048576 [ 339.267607][T15969] team_slave_0: mtu less than device minimum [ 339.305010][T15967] netlink: 'syz.4.2765': attribute type 11 has an invalid length. [ 339.434313][T15973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.876886][T15995] netlink: 'syz.4.2775': attribute type 10 has an invalid length. [ 339.902530][T15995] bridge0: port 3(team0) entered blocking state [ 339.930259][T15995] bridge0: port 3(team0) entered disabled state [ 339.938390][T15995] team0: entered allmulticast mode [ 339.946191][T15995] team_slave_0: entered allmulticast mode [ 339.956747][T15995] team_slave_1: entered allmulticast mode [ 339.965359][T15995] team0: entered promiscuous mode [ 339.988447][T16013] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 339.992964][T15995] team_slave_0: entered promiscuous mode [ 340.003926][T15995] team_slave_1: entered promiscuous mode [ 340.256559][T16021] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 340.336810][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.404907][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056136800: rx timeout, send abort [ 340.416090][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888051f72800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 340.436107][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.446952][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.456343][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.471125][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.479706][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.647252][T16025] lo speed is unknown, defaulting to 1000 [ 340.761728][T16036] syzkaller0: entered promiscuous mode [ 340.772002][T16036] syzkaller0: entered allmulticast mode [ 340.914221][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056136800: abort rx timeout. Force session deactivation [ 342.259293][ T8160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.576067][ T5145] Bluetooth: hci7: command tx timeout [ 342.934570][T16072] tipc: Enabled bearer , priority 0 [ 342.986517][T16072] syzkaller0: entered promiscuous mode [ 343.001498][T16072] syzkaller0: entered allmulticast mode [ 343.049919][T16072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 343.139441][T16072] tipc: Resetting bearer [ 343.173433][T16069] tipc: Resetting bearer [ 343.193141][T16091] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 343.250816][T16069] tipc: Disabling bearer [ 343.296211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.314318][T16091] bond13: entered promiscuous mode [ 343.321626][T16091] 8021q: adding VLAN 0 to HW filter on device bond13 [ 343.520101][T16025] chnl_net:caif_netlink_parms(): no params data found [ 343.702668][T16119] __nla_validate_parse: 9 callbacks suppressed [ 343.702689][T16119] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2805'. [ 343.727141][T16117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 343.823626][T16123] netlink: 'syz.6.2805': attribute type 16 has an invalid length. [ 343.885581][T16123] netlink: 'syz.6.2805': attribute type 3 has an invalid length. [ 343.898933][T16117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 343.927539][T16123] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2805'. [ 343.995673][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.003657][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.013702][T16025] bridge_slave_0: entered allmulticast mode [ 344.022366][T16025] bridge_slave_0: entered promiscuous mode [ 344.035772][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.043411][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.051156][T16025] bridge_slave_1: entered allmulticast mode [ 344.060284][T16025] bridge_slave_1: entered promiscuous mode [ 344.108965][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.123443][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.177071][ T31] INFO: task syz.0.1023:9779 blocked for more than 143 seconds. [ 344.186890][T16025] team0: Port device team_slave_0 added [ 344.188453][ T31] Not tainted syzkaller #0 [ 344.198353][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.207563][ T31] task:syz.0.1023 state:D stack:27032 pid:9779 tgid:9777 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 344.211881][T16025] team0: Port device team_slave_1 added SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 344.220112][ T31] Call Trace: [ 344.245509][ T31] [ 344.248633][ T31] __schedule+0x14ea/0x5050 [ 344.253217][ T31] ? __pfx___schedule+0x10/0x10 [ 344.264204][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.272013][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.274446][ T31] ? schedule+0x90/0x360 [ 344.303684][ T31] schedule+0x164/0x360 [ 344.307981][ T31] schedule_preempt_disabled+0x13/0x30 [ 344.313496][ T31] __mutex_lock+0x7fe/0x1300 [ 344.319632][ T31] ? __mutex_lock+0x5ac/0x1300 [ 344.324549][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 344.327212][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.330780][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 344.346522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.356941][ T31] ? __nlmsg_put+0xef/0x1b0 [ 344.358562][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.361548][ T31] ? genlmsg_put+0x137/0x2e0 [ 344.373198][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 344.379222][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 344.384641][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 344.385843][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.391270][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 344.420222][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.448192][ T31] ? __asan_memcpy+0x40/0x70 [ 344.461598][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 344.475846][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 344.481237][ T31] genl_rcv_msg+0x61c/0x7a0 [ 344.485868][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.491022][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 344.494023][T16025] hsr_slave_0: entered promiscuous mode [ 344.498380][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 344.556844][T16025] hsr_slave_1: entered promiscuous mode [ 344.563650][ T31] netlink_rcv_skb+0x232/0x4b0 [ 344.563688][T16025] debugfs: 'hsr0' already exists in 'hsr' [ 344.590621][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.624126][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.629851][T16025] Cannot create hsr debugfs directory [ 344.646573][ T31] ? genl_rcv+0x19/0x40 [ 344.651343][ T31] ? down_read+0x272/0x2e0 [ 344.670369][ T5145] Bluetooth: hci7: command tx timeout [ 344.695497][ T31] ? genl_rcv+0xd/0x40 [ 344.699658][ T31] genl_rcv+0x28/0x40 [ 344.703766][ T31] netlink_unicast+0x80f/0x9b0 [ 344.765481][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 344.770962][ T31] ? __alloc_skb+0x193/0x390 [ 344.812138][ T31] ? netlink_sendmsg+0x650/0xb40 [ 344.835726][ T31] ? skb_put+0x11b/0x210 [ 344.840500][ T31] netlink_sendmsg+0x813/0xb40 [ 344.855771][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.861297][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 344.889858][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.897015][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.902385][ T31] ____sys_sendmsg+0xa68/0xad0 [ 344.925665][ T31] ? __might_fault+0xaf/0x130 [ 344.930646][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.945791][ T31] ? import_iovec+0x73/0xa0 [ 344.950599][ T31] ___sys_sendmsg+0x2a5/0x360 [ 344.966331][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 344.971456][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.002139][ T31] ? futex_wait+0x29a/0x380 [ 345.015615][ T31] ? __fget_files+0x2a/0x420 [ 345.020303][ T31] ? __fget_files+0x3a0/0x420 [ 345.025240][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.045454][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.051029][ T31] ? rcu_is_watching+0x15/0xb0 [ 345.066125][ T31] do_syscall_64+0xe2/0xf80 [ 345.070712][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.077434][ T31] ? trace_irq_disable+0x37/0x100 [ 345.082517][ T31] ? clear_bhb_loop+0x60/0xb0 [ 345.088294][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.094419][ T31] RIP: 0033:0x7eff2999aeb9 [ 345.099887][ T31] RSP: 002b:00007eff2a7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.109276][ T31] RAX: ffffffffffffffda RBX: 00007eff29c15fa0 RCX: 00007eff2999aeb9 [ 345.125654][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000009 [ 345.133872][ T31] RBP: 00007eff29a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 345.157466][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.172427][ T31] R13: 00007eff29c16038 R14: 00007eff29c15fa0 R15: 00007ffcea773158 [ 345.181182][ T31] [ 345.184279][ T31] [ 345.184279][ T31] Showing all locks held in the system: [ 345.193118][ T31] 1 lock held by khungtaskd/31: [ 345.198672][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 345.208937][ T31] 3 locks held by kworker/u8:5/1019: [ 345.214348][ T31] #0: ffff88814cab7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 345.228800][ T31] #1: ffffc9000393fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 345.242703][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 345.252531][ T31] 2 locks held by getty/5583: [ 345.257686][ T31] #0: ffff88814d8c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 345.267756][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 345.278024][ T31] 1 lock held by syz-executor/5825: [ 345.283392][ T31] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 345.294800][ T31] 3 locks held by kworker/u8:12/6086: [ 345.303745][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 345.316210][ T31] #1: ffffc9000b8f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 345.327855][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 345.337098][ T31] 2 locks held by syz.1.933/9424: [ 345.342161][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 345.350898][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 345.361524][ T31] 2 locks held by syz.0.1023/9779: [ 345.366670][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 345.375100][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 345.387102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.396312][ T31] 5 locks held by kworker/1:10/15004: [ 345.401737][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 345.412352][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 345.423140][ T31] #2: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x24a/0x7c0 [ 345.434520][ T31] #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x24a/0x940 [ 345.444318][ T31] #4: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 345.453530][ T31] 1 lock held by syz.6.2805/16118: [ 345.458970][ T31] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 345.519959][ T31] [ 345.522682][ T31] ============================================= [ 345.522682][ T31] [ 345.554115][ T31] NMI backtrace for cpu 0 [ 345.554135][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.554155][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.554165][ T31] Call Trace: [ 345.554172][ T31] [ 345.554179][ T31] dump_stack_lvl+0xe8/0x150 [ 345.554207][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 345.554229][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 345.554255][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 345.554280][ T31] sys_info+0x135/0x170 [ 345.554298][ T31] watchdog+0xf90/0xfe0 [ 345.554319][ T31] ? watchdog+0x209/0xfe0 [ 345.554343][ T31] kthread+0x726/0x8b0 [ 345.554365][ T31] ? __pfx_watchdog+0x10/0x10 [ 345.554381][ T31] ? __pfx_kthread+0x10/0x10 [ 345.554402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.554417][ T31] ? __pfx_kthread+0x10/0x10 [ 345.554437][ T31] ret_from_fork+0x51b/0xa40 [ 345.554457][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 345.554471][ T31] ? __switch_to+0xc82/0x1410 [ 345.554493][ T31] ? __pfx_kthread+0x10/0x10 [ 345.554522][ T31] ret_from_fork_asm+0x1a/0x30 [ 345.554559][ T31] [ 345.554565][ T31] Sending NMI from CPU 0 to CPUs 1: [ 345.683908][ C1] NMI backtrace for cpu 1 [ 345.683927][ C1] CPU: 1 UID: 0 PID: 15006 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 345.683946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.683956][ C1] Workqueue: events drain_vmap_area_work [ 345.683981][ C1] RIP: 0010:unwind_next_frame+0x484/0x23c0 [ 345.684008][ C1] Code: d2 84 c0 48 0f 45 d1 48 89 15 88 7c 83 11 48 85 d2 0f 84 40 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 345.684022][ C1] RSP: 0018:ffffc9001caef2f8 EFLAGS: 00000a06 [ 345.684035][ C1] RAX: 0000000000000000 RBX: ffffffff90106870 RCX: ffffffff90106878 [ 345.684046][ C1] RDX: ffffffff9090477e RSI: ffffffff90904748 RDI: ffffffff8c0739a0 [ 345.684057][ C1] RBP: dffffc0000000000 R08: 0000000000000013 R09: ffffffff8e55a360 [ 345.684068][ C1] R10: ffffc9001caef418 R11: ffffffff81afb170 R12: ffffffff90904782 [ 345.684079][ C1] R13: ffffffff90904783 R14: ffffc9001caef3c8 R15: ffffffff90106874 [ 345.684090][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 345.684104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.684115][ C1] CR2: 000055e4f8460ee8 CR3: 000000007cfa6000 CR4: 00000000003526f0 [ 345.684131][ C1] Call Trace: [ 345.684137][ C1] [ 345.684148][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 345.684173][ C1] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 345.684195][ C1] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 345.684217][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.684237][ C1] arch_stack_walk+0x11b/0x150 [ 345.684256][ C1] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 345.684279][ C1] stack_trace_save+0xa9/0x100 [ 345.684296][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.684318][ C1] save_stack+0x122/0x230 [ 345.684338][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 345.684360][ C1] ? __pfx_save_stack+0x10/0x10 [ 345.684379][ C1] ? __free_frozen_pages+0xbf8/0xd70 [ 345.684394][ C1] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 345.684421][ C1] ? page_ext_put+0x97/0xc0 [ 345.684443][ C1] __reset_page_owner+0x71/0x1f0 [ 345.684465][ C1] __free_frozen_pages+0xbf8/0xd70 [ 345.684483][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 345.684505][ C1] __apply_to_page_range+0xbdc/0x1420 [ 345.684530][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 345.684554][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 345.684573][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 345.684592][ C1] ? smp_call_function_many_cond+0xde6/0x1270 [ 345.684614][ C1] __kasan_release_vmalloc+0xa2/0xd0 [ 345.684635][ C1] purge_vmap_node+0x21c/0x8e0 [ 345.684658][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 345.684675][ C1] ? flush_tlb_kernel_range+0x350/0x460 [ 345.684697][ C1] __purge_vmap_area_lazy+0x77a/0xb00 [ 345.684716][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 345.684738][ C1] drain_vmap_area_work+0x27/0x40 [ 345.684753][ C1] process_scheduled_works+0xaec/0x17a0 [ 345.684785][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.684805][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.684823][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.684838][ C1] ? schedule+0x90/0x360 [ 345.684856][ C1] worker_thread+0xda6/0x1360 [ 345.684891][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 345.684909][ C1] kthread+0x726/0x8b0 [ 345.684926][ C1] ? __pfx_worker_thread+0x10/0x10 [ 345.684947][ C1] ? __pfx_kthread+0x10/0x10 [ 345.684964][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.684977][ C1] ? __pfx_kthread+0x10/0x10 [ 345.684994][ C1] ret_from_fork+0x51b/0xa40 [ 345.685009][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 345.685022][ C1] ? __switch_to+0xc82/0x1410 [ 345.685044][ C1] ? __pfx_kthread+0x10/0x10 [ 345.685061][ C1] ret_from_fork_asm+0x1a/0x30 [ 345.685087][ C1] [ 345.687190][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 345.687207][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.687227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.687236][ T31] Call Trace: [ 345.687244][ T31] [ 345.687251][ T31] vpanic+0x1e0/0x670 [ 345.687278][ T31] panic+0xc5/0xd0 [ 345.687298][ T31] ? __pfx_panic+0x10/0x10 [ 345.687321][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 345.687352][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 345.687380][ T31] watchdog+0xfda/0xfe0 [ 345.687413][ T31] ? watchdog+0x209/0xfe0 [ 345.687438][ T31] kthread+0x726/0x8b0 [ 345.687461][ T31] ? __pfx_watchdog+0x10/0x10 [ 345.687478][ T31] ? __pfx_kthread+0x10/0x10 [ 345.687501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.687518][ T31] ? __pfx_kthread+0x10/0x10 [ 345.687537][ T31] ret_from_fork+0x51b/0xa40 [ 345.687557][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 345.687573][ T31] ? __switch_to+0xc82/0x1410 [ 345.687599][ T31] ? __pfx_kthread+0x10/0x10 [ 345.687620][ T31] ret_from_fork_asm+0x1a/0x30 [ 345.687656][ T31] [ 346.185788][ T31] Kernel Offset: disabled [ 346.190399][ T31] Rebooting in 86400 seconds..