last executing test programs: 1.95229364s ago: executing program 4 (id=15368): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r1, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) (async) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) (rerun: 64) accept4(r1, 0x0, 0x0, 0x400000000000000) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.368737443s ago: executing program 0 (id=15383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0x6}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x0, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000001}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 1.36778417s ago: executing program 3 (id=15384): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0x6b) sendto$inet(r1, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) 1.366612216s ago: executing program 2 (id=15385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.339565498s ago: executing program 1 (id=15386): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000feeb9a000f14c3e40000000000000000080001000100000008004500636d61000800030000000000"], 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x30, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x40}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x80}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) close(r1) 1.249279141s ago: executing program 0 (id=15387): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6d, 0x23}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 1.249094415s ago: executing program 3 (id=15388): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'macvtap0\x00', {0x3}, 0x8052}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.23639056s ago: executing program 0 (id=15389): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x455b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) 1.203936837s ago: executing program 1 (id=15390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a030000000000f3ffffff0100000009002f843403408ef1f79b73797a310000000008000340000000"], 0x34}}, 0x4000040) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4008080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) socket$netlink(0x10, 0x3, 0x13) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a030000000000f3ffffff0100000009002f843403408ef1f79b73797a310000000008000340000000"], 0x34}}, 0x4000040) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4008080) (async) 1.109999329s ago: executing program 2 (id=15391): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x6, 0x11, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.074206305s ago: executing program 3 (id=15392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x300, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 992.449094ms ago: executing program 2 (id=15393): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x6306, 0x9, 0x0, 0x5, 0x7, 0x81, 0xfff, 0x3, 0x1, 0x200]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004821}, 0x10000) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r4, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x4c}}, 0xeb64d656041b2f26) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0xc041) 969.114552ms ago: executing program 1 (id=15394): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) 922.365132ms ago: executing program 3 (id=15395): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0xc100000000000000, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 893.939147ms ago: executing program 4 (id=15396): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xe0, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xb, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x4, 0x5, 0x1, 0x7fffffff, 0x80008, 0x6}}, {0x10, 0x2, [0x40, 0x8, 0xfffc, 0x6, 0x5, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6127}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x77}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9}, @TCA_FQ_PIE_ALPHA={0x8}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xeb, 0xdb00, 0x5, 0x0, 0x1, 0x2a, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0xcc, 0x0, 0x1, 0x1, 0x2}}, {0x8, 0x2, [0x7, 0x7]}}]}]}, 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x65ef}, {0xb, 0x1203}]}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x89e2) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000000)={0x3}, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000050005000000180003"], 0x44}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$802154_dgram(r6, &(0x7f0000000580)={&(0x7f0000000140)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000000540)={&(0x7f0000000480)="07b39d6f6ea87b60cf68755974dca5d7c5f2f8874b1bf8a43406b783a3ac29cfeb5ce2afbfacb6710983226aa3407806dbddce15149e7ecf1f2528ba2273498b3cdfb035", 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket(0x15, 0x5, 0x0) connect$l2tp6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) ioctl(r9, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netpci0\x00', &(0x7f0000000600)=@ethtool_ringparam={0x11, 0x0, 0xf55, 0x4, 0x401, 0x7e000, 0x3, 0x81, 0x7}}) 881.346246ms ago: executing program 3 (id=15397): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)) 777.612507ms ago: executing program 1 (id=15398): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffeffff, 0x9, 0x1, 0x1, 0xeec, 0x6, 0x6, 0x5, 0x200, 0x7f, 0x3, 0x0, 0x2, 0x758, 0x81]}, &(0x7f0000000140)=0x100) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0x7f, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x80007, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fa, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x8000000, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c00008008001e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) 776.069762ms ago: executing program 2 (id=15399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000740)={0x38, 0xd, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@nl, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000640)=""/157, 0x9d}, 0x2021) 775.649002ms ago: executing program 3 (id=15400): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r0, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x212640, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0x0, 0xfffffffe}, 0x10}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = getgid() ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x8000}) ioctl$TUNSETGROUP(r2, 0x400454ce, r6) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x3, 0x0, &(0x7f0000000080)) bind$unix(r9, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$int_in(r8, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 685.640967ms ago: executing program 2 (id=15401): syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000005000000bbfe8000000000000000000000000000aa2b00fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r2 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r2, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000002c0)=0x1140a0, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x5, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10, 0x0, r8}, 0x10) bind$xdp(r7, &(0x7f0000000180)={0x2c, 0x1, r10, 0x0, r8}, 0x10) recvmmsg(r7, &(0x7f0000007440), 0x0, 0x160, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500", @ANYRESDEC=r5], 0x108}}, 0x24040800) 509.663763ms ago: executing program 4 (id=15402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x3a8, 0x138, 0x210, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '[%!\x1e\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '\r\xdb\xfa+*\')\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x3a8, 0x138, 0x210, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '[%!\x1e\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '\r\xdb\xfa+*\')\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48) (async) 353.541554ms ago: executing program 4 (id=15403): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r3, 0x40) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000001540)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 337.170217ms ago: executing program 1 (id=15404): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) r3 = epoll_create1(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000240), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 302.186225ms ago: executing program 0 (id=15405): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='pim6reg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x18}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 129.496566ms ago: executing program 0 (id=15406): r0 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r2, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x20020000) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c4, r2, 0x482, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x190f5777}, @TIPC_NLA_NODE_ID={0x79, 0x3, "9e4e4c10fdbeea5702518861c20332b8dfc189b2b992be26837f0f4b500cee3b9d2740fbfeb04b78d64a9976691cdae3f5e920a6d6fb45f3d0a58ef19db78a426586ab32c5ff0ba039421c69e68f0a020541a08a279b937b21a56ebfcdba2ae7b887c5fadcdc17e8a1c77948da3e2d1be5f131d4c1"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68144834}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x68f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x188, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private0, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x10, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @empty, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @local, 0xce}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket(0x40000000015, 0x805, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r2, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x20020000) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c4, r2, 0x482, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x190f5777}, @TIPC_NLA_NODE_ID={0x79, 0x3, "9e4e4c10fdbeea5702518861c20332b8dfc189b2b992be26837f0f4b500cee3b9d2740fbfeb04b78d64a9976691cdae3f5e920a6d6fb45f3d0a58ef19db78a426586ab32c5ff0ba039421c69e68f0a020541a08a279b937b21a56ebfcdba2ae7b887c5fadcdc17e8a1c77948da3e2d1be5f131d4c1"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68144834}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x68f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x188, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private0, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x10, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @empty, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @local, 0xce}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) 128.798302ms ago: executing program 4 (id=15407): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0xffffffffffffff80, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 101.942547ms ago: executing program 2 (id=15408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT=r0, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT=r0, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) 87.440826ms ago: executing program 1 (id=15409): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @null, 0x0, [@default, @null, @default, @netrom, @remote, @default]}, &(0x7f0000000140)=0x40, 0x41000) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000100)) 34.120083ms ago: executing program 0 (id=15410): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3f}, 0x1c) (async) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="feb8defb9d1fdc5e6d50b18da9f2e1939f40fce0c6e312b5101d44d38f4f8be7a294a85f1fb1d0dbca84e97e7b65bde2b94d11b429f6eeb68a0a0797fa77868310d85a1e50fcb3f339b1cdfdb1b4a2568465ba23724cc0c3ea01b458a95ca005d72d69811bdab6ec333abecdc68772fc97efa65ce95c6846ef2b0966863e20a1ec582b8aebf1924bd8edf86337a0fb6b0c100349117acc219ff91a5a7c568f62774167ac087ba9abbcb2dce06df67aaf34cb8204a86cc4b8219001203d49ea306b59cf3eaaa35b2ae5add30eea3f7a543670419c8143875f337c47e84b5c2eb3de3fd75aabaf5168fbd402b8980fd2f48486fe8a0ab33a8808355ff32f114b2966d115f8c2fe587618af47de0a9a2b10d7cc3169db127fdaf6a1cf9a731180680720c437cb09b1a4c289781b2af70fc2513bb89a51062df574374afef335ee5227c68db0bcfe0e51b9fba0e8c0658198a9de6fe19a0e29c3239818d5cd922d12725f9a2cf5f830655afd3cd90866e7b9e3c9867a3afa16d60242fb2569a67d8e2a077a1f8058179a5040e69d1854807ee5264dc62d688c78f1c3e5c8d0e200b9b8e54b569a3db22752e7c7c98302880cbc5047c8c575fa02cfb380b3aef9fe30bb5f59ce5861263f049be8a1fcdff70137dc658a712a755b556d5e7b0b759a1f87a8a19d8e2c3850c37a519b5b57351cb1b56dd57165964be22a1807d37340e9ef7949800990af954382b3b1e8f45dc56a84b065da15b377335146b4ce8b556a1ca40106a37696be4b5ba83c6fbe7f2a16ca83b2b7badf2b8a174951fc2c33b382ab14fdc62c3e87ca088324cd0c9a106ea7ca117e66418657478675277da07f5187da0d00766c9714d425c1c8af26cc526f40600f08ad40829ed0cb29934e8a4d8c29a62b0ad5e15aecc1768b268837db3bbba4156e0ea2a458d7e0159fd8905640449dc2e05cc52abfc0967d7239851e7308bea25a019d290740702523075f3a26d263a27c612e3d8d80473a21f6952062bc432bc0a8156a0e016edf1c80e35a6267517c04754d494ed0961c06e1a7308bf2b3175a4dd74aded5cdf2eabaac5d186175501b1052fdbf0b85fe4e2375b4717ef2eccd48d12545a2f1fad324c81f3ac35a09353f9824076031f449e08cdb5e4183492bd5c93a9244f4989e725e69ed242f610822daff8dd0e160cf21b73a80361eb000b447bd29fcb236193601e284a08c10d6dd5a359f269010528e774c82f0b62080516239e36e98d248182ded17a70b6ac1ac70cafbb9fbc339569fc606267aac59004918a5ebb4ab7978b0fd68ec77a223c0c79e454097469638816fc621deaceca47f5e42958e29ab84ace4b89ffeb6d3c05b9b65e048d70ddceb29c0a00c5db952637138b3e9edb8af209d9b813c9b425bf95651ab1ac35f9b650aa82994b9087c67102e16a1791cbf9a8c7be18cf1ca82a0bf11a758d07af677fda4e127ea4a1ddf067e72ba7efc7edfd40e40d754120d4d6c0de69ed0f1d45ca584c435847e91950583836ba68e6867347dfccfaf817c99448b2e9f4ccdba2313d6c39694f75305051795a355a1b9103183013faf6096f8c971dae4a693dfa18593ea7aa1c34e10ab7c53f51c66bcaa1c4e88942cb63e9cbee21fdd5752732ff870c95ec549ed3788134cb628f6ecd94bda04eca6ebe1ca529bc9b9c1468ae758c87a6adee4aa180f24bb6714e61689084ad321551883b85483035d3d5078d71b2419af06631343fa6c3109dc25972a785266cc17339aac5032af3e1076f08b5c593f96aaa9e5ff512d31c1b99bf0f2a64e45eb7515cea626d1c59413b2a2de0d953984e6f268aba70082cd7cd7da309dcf0783a34c795b6d87c5addc74929e4191516b97fc28785c6d7cc6bb51d42fbf0cd54139facbdae3d61a9f71883699f32630132afd59c67719592089067a173c754c13b1a54a50c4119c93f279166d82b075ed0df831bc3d6b62d4b8cb5cfedb48edf4b0e15b73170bad473efcf298095dd1d2c0017f782e", 0x7ab8}], 0x1}, 0x4000000) 0s ago: executing program 4 (id=15411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffee, 0xffff}}, [@TCA_INGRESS_BLOCK={0xffffffffffffff25, 0xd, 0xab33}]}, 0x2c}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffee, 0xffff}}, [@TCA_INGRESS_BLOCK={0xffffffffffffff25, 0xd, 0xab33}]}, 0x2c}}, 0x800) (async) kernel console output (not intermixed with test programs): 1053.405744][T17889] ? import_iovec+0x73/0xa0 [ 1053.405771][T17889] ___sys_sendmsg+0x2a5/0x360 [ 1053.405801][T17889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.405859][T17889] ? __fget_files+0x2a/0x420 [ 1053.405882][T17889] ? __fget_files+0x3a0/0x420 [ 1053.405915][T17889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1053.405940][T17889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1053.405972][T17889] ? __pfx_ksys_write+0x10/0x10 [ 1053.406001][T17889] do_syscall_64+0x14d/0xf80 [ 1053.406025][T17889] ? trace_irq_disable+0x3b/0x150 [ 1053.406048][T17889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.406066][T17889] ? clear_bhb_loop+0x40/0x90 [ 1053.406087][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.406105][T17889] RIP: 0033:0x7f318a39c629 [ 1053.406122][T17889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.406136][T17889] RSP: 002b:00007f318b26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.406155][T17889] RAX: ffffffffffffffda RBX: 00007f318a615fa0 RCX: 00007f318a39c629 [ 1053.406169][T17889] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1053.406181][T17889] RBP: 00007f318b26a090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.406192][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.406202][T17889] R13: 00007f318a616038 R14: 00007f318a615fa0 R15: 00007ffd23313dd8 [ 1053.406233][T17889] [ 1054.036596][T17925] __nla_validate_parse: 2 callbacks suppressed [ 1054.036616][T17925] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13933'. [ 1054.216775][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'. [ 1054.406608][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13939'. [ 1054.462118][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1054.650973][T17972] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13945'. [ 1054.659405][T17970] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1054.705341][T17970] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1054.723409][T17970] gretap1: entered promiscuous mode [ 1054.738700][T17970] gretap1: entered allmulticast mode [ 1054.902464][T17986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13949'. [ 1055.029207][T17996] FAULT_INJECTION: forcing a failure. [ 1055.029207][T17996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.113836][T17996] CPU: 0 UID: 0 PID: 17996 Comm: syz.3.13952 Not tainted syzkaller #0 PREEMPT(full) [ 1055.113862][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.113873][T17996] Call Trace: [ 1055.113881][T17996] [ 1055.113889][T17996] dump_stack_lvl+0xe8/0x150 [ 1055.113917][T17996] should_fail_ex+0x412/0x560 [ 1055.113945][T17996] _copy_to_user+0x31/0xb0 [ 1055.113971][T17996] simple_read_from_buffer+0xe1/0x170 [ 1055.114001][T17996] proc_fail_nth_read+0x1bb/0x230 [ 1055.114031][T17996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.114058][T17996] ? rw_verify_area+0x2a6/0x4d0 [ 1055.114076][T17996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.114100][T17996] vfs_read+0x20c/0xa70 [ 1055.114116][T17996] ? fdget_pos+0x246/0x320 [ 1055.114151][T17996] ? __pfx___mutex_lock+0x10/0x10 [ 1055.114170][T17996] ? __pfx_vfs_read+0x10/0x10 [ 1055.114189][T17996] ? __fget_files+0x2a/0x420 [ 1055.114217][T17996] ? __fget_files+0x3a0/0x420 [ 1055.114239][T17996] ? __fget_files+0x2a/0x420 [ 1055.114272][T17996] ksys_read+0x150/0x270 [ 1055.114292][T17996] ? __pfx_ksys_read+0x10/0x10 [ 1055.114324][T17996] do_syscall_64+0x14d/0xf80 [ 1055.114346][T17996] ? trace_irq_disable+0x3b/0x150 [ 1055.114367][T17996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.114384][T17996] ? clear_bhb_loop+0x40/0x90 [ 1055.114405][T17996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.114422][T17996] RIP: 0033:0x7f514615cece [ 1055.114438][T17996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1055.114453][T17996] RSP: 002b:00007f5146fd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1055.114471][T17996] RAX: ffffffffffffffda RBX: 00007f5146fd16c0 RCX: 00007f514615cece [ 1055.114484][T17996] RDX: 000000000000000f RSI: 00007f5146fd10a0 RDI: 0000000000000004 [ 1055.114495][T17996] RBP: 00007f5146fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.114507][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.114517][T17996] R13: 00007f5146416038 R14: 00007f5146415fa0 R15: 00007fff03a35ee8 [ 1055.114549][T17996] [ 1055.372718][T18010] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13958'. [ 1055.386970][T18008] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.13956'. [ 1055.425137][T18008] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1055.497728][T18016] netlink: 'syz.3.13959': attribute type 1 has an invalid length. [ 1055.540510][T18016] netlink: 'syz.3.13959': attribute type 2 has an invalid length. [ 1055.590524][T18016] netlink: 'syz.3.13959': attribute type 11 has an invalid length. [ 1055.631579][T18016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13959'. [ 1055.712129][T18035] openvswitch: netlink: Flow actions attr not present in new flow. [ 1055.749602][T18035] FAULT_INJECTION: forcing a failure. [ 1055.749602][T18035] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.875502][T18035] CPU: 1 UID: 0 PID: 18035 Comm: syz.2.13963 Not tainted syzkaller #0 PREEMPT(full) [ 1055.875527][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.875537][T18035] Call Trace: [ 1055.875544][T18035] [ 1055.875551][T18035] dump_stack_lvl+0xe8/0x150 [ 1055.875579][T18035] should_fail_ex+0x412/0x560 [ 1055.875604][T18035] should_failslab+0xa8/0x100 [ 1055.875625][T18035] __kmalloc_cache_noprof+0x88/0x660 [ 1055.875643][T18035] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1055.875666][T18035] ? sctp_add_bind_addr+0x8c/0x370 [ 1055.875692][T18035] sctp_add_bind_addr+0x8c/0x370 [ 1055.875718][T18035] sctp_copy_local_addr_list+0x314/0x4f0 [ 1055.875744][T18035] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1055.875766][T18035] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1055.875788][T18035] ? sctp_v6_is_any+0x64/0x80 [ 1055.875810][T18035] ? sctp_copy_one_addr+0x93/0x360 [ 1055.875835][T18035] sctp_bind_addr_copy+0xb3/0x3c0 [ 1055.875858][T18035] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1055.875881][T18035] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1055.875910][T18035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1055.875941][T18035] ? __local_bh_enable_ip+0xd0/0x130 [ 1055.875960][T18035] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1055.875978][T18035] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1055.876007][T18035] sctp_sendmsg+0x1528/0x2c10 [ 1055.876047][T18035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1055.876069][T18035] ? aa_sk_perm+0x15a/0x960 [ 1055.876101][T18035] ? aa_sk_perm+0x82d/0x960 [ 1055.876129][T18035] ? __pfx_aa_sk_perm+0x10/0x10 [ 1055.876151][T18035] ? sock_rps_record_flow+0x19/0x400 [ 1055.876177][T18035] ? inet_sendmsg+0x2f4/0x370 [ 1055.876202][T18035] __sys_sendto+0x627/0x7a0 [ 1055.876228][T18035] ? __pfx___sys_sendto+0x10/0x10 [ 1055.876248][T18035] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1055.876288][T18035] ? __fget_files+0x3a0/0x420 [ 1055.876323][T18035] ? ksys_write+0x242/0x270 [ 1055.876344][T18035] ? __pfx_ksys_write+0x10/0x10 [ 1055.876367][T18035] __x64_sys_sendto+0xde/0x100 [ 1055.876394][T18035] do_syscall_64+0x14d/0xf80 [ 1055.876417][T18035] ? trace_irq_disable+0x3b/0x150 [ 1055.876440][T18035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.876459][T18035] ? clear_bhb_loop+0x40/0x90 [ 1055.876480][T18035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.876497][T18035] RIP: 0033:0x7faa4139c629 [ 1055.876513][T18035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.876527][T18035] RSP: 002b:00007faa421fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1055.876546][T18035] RAX: ffffffffffffffda RBX: 00007faa41615fa0 RCX: 00007faa4139c629 [ 1055.876559][T18035] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1055.876571][T18035] RBP: 00007faa421fa090 R08: 0000200000000140 R09: 000000000000001c [ 1055.876582][T18035] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1055.876594][T18035] R13: 00007faa41616038 R14: 00007faa41615fa0 R15: 00007ffc5dd0b138 [ 1055.876626][T18035] [ 1056.196874][T18052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13966'. [ 1056.361063][T18060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13969'. [ 1056.383253][T18062] gretap0: entered promiscuous mode [ 1056.460578][T18062] gretap0: left promiscuous mode [ 1056.568207][T18062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.613373][T18062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.725346][T18069] syzkaller0: entered promiscuous mode [ 1056.733017][T18069] syzkaller0: entered allmulticast mode [ 1056.927346][T18099] openvswitch: netlink: Flow actions attr not present in new flow. [ 1057.012733][T18102] FAULT_INJECTION: forcing a failure. [ 1057.012733][T18102] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.036950][T18102] CPU: 0 UID: 0 PID: 18102 Comm: syz.0.13980 Not tainted syzkaller #0 PREEMPT(full) [ 1057.036976][T18102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.036986][T18102] Call Trace: [ 1057.036994][T18102] [ 1057.037002][T18102] dump_stack_lvl+0xe8/0x150 [ 1057.037030][T18102] should_fail_ex+0x412/0x560 [ 1057.037056][T18102] should_failslab+0xa8/0x100 [ 1057.037080][T18102] __kmalloc_cache_noprof+0x88/0x660 [ 1057.037097][T18102] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1057.037116][T18102] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1057.037135][T18102] ? sctp_add_bind_addr+0x8c/0x370 [ 1057.037159][T18102] sctp_add_bind_addr+0x8c/0x370 [ 1057.037191][T18102] sctp_copy_local_addr_list+0x314/0x4f0 [ 1057.037217][T18102] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1057.037236][T18102] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1057.037260][T18102] ? sctp_v6_is_any+0x64/0x80 [ 1057.037283][T18102] ? sctp_copy_one_addr+0x93/0x360 [ 1057.037307][T18102] sctp_bind_addr_copy+0xb3/0x3c0 [ 1057.037326][T18102] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1057.037349][T18102] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1057.037378][T18102] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1057.037407][T18102] ? __local_bh_enable_ip+0xd0/0x130 [ 1057.037427][T18102] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1057.037447][T18102] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1057.037474][T18102] sctp_sendmsg+0x1528/0x2c10 [ 1057.037513][T18102] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1057.037535][T18102] ? aa_sk_perm+0x15a/0x960 [ 1057.037553][T18102] ? aa_sk_perm+0x82d/0x960 [ 1057.037580][T18102] ? __pfx_aa_sk_perm+0x10/0x10 [ 1057.037601][T18102] ? sock_rps_record_flow+0x19/0x400 [ 1057.037626][T18102] ? inet_sendmsg+0x2f4/0x370 [ 1057.037653][T18102] __sys_sendto+0x627/0x7a0 [ 1057.037679][T18102] ? __pfx___sys_sendto+0x10/0x10 [ 1057.037700][T18102] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1057.037735][T18102] ? __fget_files+0x3a0/0x420 [ 1057.037769][T18102] ? ksys_write+0x242/0x270 [ 1057.037791][T18102] ? __pfx_ksys_write+0x10/0x10 [ 1057.037815][T18102] __x64_sys_sendto+0xde/0x100 [ 1057.037841][T18102] do_syscall_64+0x14d/0xf80 [ 1057.037865][T18102] ? trace_irq_disable+0x3b/0x150 [ 1057.037888][T18102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.037906][T18102] ? clear_bhb_loop+0x40/0x90 [ 1057.037928][T18102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.037945][T18102] RIP: 0033:0x7f985379c629 [ 1057.037963][T18102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.037977][T18102] RSP: 002b:00007f98546cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1057.037995][T18102] RAX: ffffffffffffffda RBX: 00007f9853a16090 RCX: 00007f985379c629 [ 1057.038009][T18102] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1057.038020][T18102] RBP: 00007f98546cd090 R08: 0000200000000140 R09: 000000000000001c [ 1057.038031][T18102] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1057.038042][T18102] R13: 00007f9853a16128 R14: 00007f9853a16090 R15: 00007ffc247b4c88 [ 1057.038072][T18102] [ 1057.188391][T18112] netlink: 'syz.2.13985': attribute type 10 has an invalid length. [ 1057.998360][T18148] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1059.419044][T18160] openvswitch: netlink: Message has 8 unknown bytes. [ 1059.449011][T18160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.577127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.762978][T18181] __nla_validate_parse: 5 callbacks suppressed [ 1059.763007][T18181] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.13999'. [ 1059.840128][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14000'. [ 1059.853470][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14001'. [ 1059.894393][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1059.902475][ C0] lec:lec_tx_timeout: lec0 [ 1059.915622][T18190] bond9: entered promiscuous mode [ 1059.920912][T18190] bond9: entered allmulticast mode [ 1059.931375][T18190] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1059.957331][T18184] macvlan3: entered promiscuous mode [ 1059.972962][T18184] macvlan3: entered allmulticast mode [ 1059.984960][T18184] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1059.997316][T18198] openvswitch: netlink: Flow actions attr not present in new flow. [ 1060.033739][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14005'. [ 1060.060609][T18204] FAULT_INJECTION: forcing a failure. [ 1060.060609][T18204] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.084858][T18204] CPU: 1 UID: 0 PID: 18204 Comm: syz.4.14004 Not tainted syzkaller #0 PREEMPT(full) [ 1060.084882][T18204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.084893][T18204] Call Trace: [ 1060.084901][T18204] [ 1060.084909][T18204] dump_stack_lvl+0xe8/0x150 [ 1060.084938][T18204] should_fail_ex+0x412/0x560 [ 1060.084969][T18204] should_failslab+0xa8/0x100 [ 1060.084992][T18204] __kmalloc_cache_noprof+0x88/0x660 [ 1060.085009][T18204] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1060.085028][T18204] ? sctp_add_bind_addr+0x8c/0x370 [ 1060.085054][T18204] sctp_add_bind_addr+0x8c/0x370 [ 1060.085077][T18204] sctp_copy_local_addr_list+0x314/0x4f0 [ 1060.085100][T18204] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1060.085121][T18204] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1060.085144][T18204] ? sctp_v6_is_any+0x64/0x80 [ 1060.085166][T18204] ? sctp_copy_one_addr+0x93/0x360 [ 1060.085190][T18204] sctp_bind_addr_copy+0xb3/0x3c0 [ 1060.085211][T18204] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1060.085232][T18204] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1060.085260][T18204] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1060.085291][T18204] ? __local_bh_enable_ip+0xd0/0x130 [ 1060.085308][T18204] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1060.085326][T18204] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1060.085354][T18204] sctp_sendmsg+0x1528/0x2c10 [ 1060.085392][T18204] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1060.085413][T18204] ? aa_sk_perm+0x15a/0x960 [ 1060.085434][T18204] ? aa_sk_perm+0x82d/0x960 [ 1060.085459][T18204] ? __pfx_aa_sk_perm+0x10/0x10 [ 1060.085481][T18204] ? sock_rps_record_flow+0x19/0x400 [ 1060.085509][T18204] ? inet_sendmsg+0x2f4/0x370 [ 1060.085537][T18204] __sys_sendto+0x627/0x7a0 [ 1060.085562][T18204] ? __pfx___sys_sendto+0x10/0x10 [ 1060.085582][T18204] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1060.085622][T18204] ? __fget_files+0x3a0/0x420 [ 1060.085657][T18204] ? ksys_write+0x242/0x270 [ 1060.085678][T18204] ? __pfx_ksys_write+0x10/0x10 [ 1060.085699][T18204] __x64_sys_sendto+0xde/0x100 [ 1060.085724][T18204] do_syscall_64+0x14d/0xf80 [ 1060.085748][T18204] ? trace_irq_disable+0x3b/0x150 [ 1060.085771][T18204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.085787][T18204] ? clear_bhb_loop+0x40/0x90 [ 1060.085810][T18204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.085827][T18204] RIP: 0033:0x7f318a39c629 [ 1060.085845][T18204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.085861][T18204] RSP: 002b:00007f318b249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1060.085878][T18204] RAX: ffffffffffffffda RBX: 00007f318a616090 RCX: 00007f318a39c629 [ 1060.085889][T18204] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1060.085900][T18204] RBP: 00007f318b249090 R08: 0000200000000140 R09: 000000000000001c [ 1060.085911][T18204] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1060.085922][T18204] R13: 00007f318a616128 R14: 00007f318a616090 R15: 00007ffd23313dd8 [ 1060.085955][T18204] [ 1060.169254][T18212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14005'. [ 1060.409314][T18194] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1060.454994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.463898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.581698][T18199] ±ÿ: renamed from team_slave_1 [ 1060.681176][T18205] syzkaller0: entered promiscuous mode [ 1060.696863][T18205] syzkaller0: entered allmulticast mode [ 1060.714962][T18229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14006'. [ 1060.795527][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14009'. [ 1060.869614][T18238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14010'. [ 1060.906603][T18234] team1: entered promiscuous mode [ 1060.911824][T18243] netlink: 'syz.2.14012': attribute type 4 has an invalid length. [ 1060.941289][T18234] team1: entered allmulticast mode [ 1061.002846][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14009'. [ 1061.033180][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14009'. [ 1061.546809][T18292] netlink: 'syz.4.14021': attribute type 1 has an invalid length. [ 1061.842241][T18292] bond1: entered promiscuous mode [ 1061.849051][T18292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1061.871469][T18274] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1061.882646][T18274] bond3 (unregistering): Released all slaves [ 1061.911944][T18284] bond1: (slave bridge3): making interface the new active one [ 1061.919708][T18284] bridge3: entered promiscuous mode [ 1061.926410][T18284] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1062.246205][T18319] syzkaller0: entered promiscuous mode [ 1062.251796][T18319] syzkaller0: entered allmulticast mode [ 1063.133106][T18351] net_ratelimit: 147 callbacks suppressed [ 1063.133128][T18351] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1063.578481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.587007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.595510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.603804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.612209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.620520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.038444][T18337] macvlan0: entered promiscuous mode [ 1064.044024][T18337] macvlan0: entered allmulticast mode [ 1064.050358][T18337] `: (slave macvlan0): Error -98 calling set_mac_address [ 1064.112132][T18340] ip6_vti0 speed is unknown, defaulting to 1000 [ 1064.266089][T18362] !: renamed from dummy0 (while UP) [ 1064.440861][T18373] netlink: 'syz.4.14042': attribute type 21 has an invalid length. [ 1064.605288][T18340] lo speed is unknown, defaulting to 1000 [ 1064.626923][T18383] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1064.750493][T18389] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1064.762925][T18389] bond10 (unregistering): Released all slaves [ 1064.791887][T18397] IPVS: length: 24 != 7992 [ 1064.969987][T18407] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1065.040666][T18409] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1065.139214][T18411] tap0: tun_chr_ioctl cmd 1074025676 [ 1065.145196][T18411] tap0: owner set to 0 [ 1065.175926][T18413] syzkaller1: entered promiscuous mode [ 1065.196261][T18413] syzkaller1: entered allmulticast mode [ 1065.234983][T18409] __nla_validate_parse: 10 callbacks suppressed [ 1065.235003][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14056'. [ 1065.247034][T18416] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1065.261107][T18417] netlink: 'syz.0.14058': attribute type 10 has an invalid length. [ 1065.286633][T18417] team0: Device ipvlan1 failed to register rx_handler [ 1065.618169][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14066'. [ 1065.686103][T18435] macvtap1: entered allmulticast mode [ 1065.691529][T18435] veth0_macvtap: entered allmulticast mode [ 1065.739417][T18443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14068'. [ 1065.801718][T18447] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14070'. [ 1065.845899][T18437] ip6_vti0 speed is unknown, defaulting to 1000 [ 1065.876226][T18443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14068'. [ 1066.150783][T18437] lo speed is unknown, defaulting to 1000 [ 1066.188318][T18466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14077'. [ 1066.389368][T18485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14083'. [ 1066.481484][T18487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14085'. [ 1066.560010][T18491] netlink: 'syz.0.14084': attribute type 4 has an invalid length. [ 1066.618873][T18496] netlink: 'syz.0.14084': attribute type 13 has an invalid length. [ 1066.651592][T18499] netlink: 'syz.3.14087': attribute type 5 has an invalid length. [ 1066.668241][T18501] delete_channel: no stack [ 1066.705257][T18491] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14084'. [ 1066.774678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.783171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.791563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.103147][T18523] s5ÿÿø: renamed from vlan1 (while UP) [ 1067.630300][T18578] netlink: 'syz.2.14117': attribute type 8 has an invalid length. [ 1067.830612][T18595] FAULT_INJECTION: forcing a failure. [ 1067.830612][T18595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.898983][T18595] CPU: 0 UID: 0 PID: 18595 Comm: syz.0.14123 Not tainted syzkaller #0 PREEMPT(full) [ 1067.899010][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1067.899021][T18595] Call Trace: [ 1067.899029][T18595] [ 1067.899037][T18595] dump_stack_lvl+0xe8/0x150 [ 1067.899073][T18595] should_fail_ex+0x412/0x560 [ 1067.899101][T18595] _copy_from_iter+0x1d3/0x1670 [ 1067.899123][T18595] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1067.899150][T18595] ? __pfx_policy_nodemask+0x10/0x10 [ 1067.899176][T18595] ? __pfx__copy_from_iter+0x10/0x10 [ 1067.899214][T18595] ? set_page_refcounted+0xa0/0x1e0 [ 1067.899237][T18595] ? page_copy_sane+0x4e/0x270 [ 1067.899262][T18595] copy_page_from_iter+0xdd/0x170 [ 1067.899289][T18595] tun_get_user+0x1d4b/0x3dd0 [ 1067.899311][T18595] ? tun_get_user+0x6ff/0x3dd0 [ 1067.899353][T18595] ? aa_file_perm+0x440/0x1630 [ 1067.899377][T18595] ? __pfx_tun_get_user+0x10/0x10 [ 1067.899421][T18595] ? ref_tracker_alloc+0x363/0x4d0 [ 1067.899446][T18595] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1067.899475][T18595] ? tun_get+0x1c/0x2f0 [ 1067.899503][T18595] ? tun_get+0x1c/0x2f0 [ 1067.899526][T18595] ? tun_get+0x1c/0x2f0 [ 1067.899553][T18595] tun_chr_write_iter+0x113/0x200 [ 1067.899580][T18595] vfs_write+0x61d/0xb90 [ 1067.899609][T18595] ? __pfx_vfs_write+0x10/0x10 [ 1067.899639][T18595] ? __fget_files+0x2a/0x420 [ 1067.899673][T18595] ksys_write+0x150/0x270 [ 1067.899696][T18595] ? __pfx_ksys_write+0x10/0x10 [ 1067.899727][T18595] do_syscall_64+0x14d/0xf80 [ 1067.899752][T18595] ? trace_irq_disable+0x3b/0x150 [ 1067.899775][T18595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.899793][T18595] ? clear_bhb_loop+0x40/0x90 [ 1067.899814][T18595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.899832][T18595] RIP: 0033:0x7f985375cece [ 1067.899849][T18595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.899864][T18595] RSP: 002b:00007f98546edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.899884][T18595] RAX: ffffffffffffffda RBX: 00007f98546ee6c0 RCX: 00007f985375cece [ 1067.899898][T18595] RDX: 000000000000007e RSI: 0000200000000000 RDI: 00000000000000c8 [ 1067.899911][T18595] RBP: 00007f98546ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.899923][T18595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.899935][T18595] R13: 00007f9853a16038 R14: 00007f9853a15fa0 R15: 00007ffc247b4c88 [ 1067.899967][T18595] [ 1068.312388][T18610] net_ratelimit: 3 callbacks suppressed [ 1068.312405][T18610] openvswitch: netlink: Flow actions attr not present in new flow. [ 1068.352293][T18610] FAULT_INJECTION: forcing a failure. [ 1068.352293][T18610] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.366167][T18610] CPU: 0 UID: 0 PID: 18610 Comm: syz.2.14129 Not tainted syzkaller #0 PREEMPT(full) [ 1068.366193][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1068.366204][T18610] Call Trace: [ 1068.366212][T18610] [ 1068.366220][T18610] dump_stack_lvl+0xe8/0x150 [ 1068.366252][T18610] should_fail_ex+0x412/0x560 [ 1068.366277][T18610] should_failslab+0xa8/0x100 [ 1068.366301][T18610] __kmalloc_cache_noprof+0x88/0x660 [ 1068.366319][T18610] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1068.366342][T18610] ? sctp_add_bind_addr+0x8c/0x370 [ 1068.366369][T18610] sctp_add_bind_addr+0x8c/0x370 [ 1068.366395][T18610] sctp_copy_local_addr_list+0x314/0x4f0 [ 1068.366422][T18610] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1068.366443][T18610] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1068.366466][T18610] ? sctp_v6_is_any+0x64/0x80 [ 1068.366489][T18610] ? sctp_copy_one_addr+0x93/0x360 [ 1068.366513][T18610] sctp_bind_addr_copy+0xb3/0x3c0 [ 1068.366537][T18610] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1068.366561][T18610] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1068.366589][T18610] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1068.366622][T18610] ? __local_bh_enable_ip+0xd0/0x130 [ 1068.366643][T18610] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1068.366664][T18610] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1068.366695][T18610] sctp_sendmsg+0x1528/0x2c10 [ 1068.366736][T18610] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1068.366758][T18610] ? aa_sk_perm+0x15a/0x960 [ 1068.366782][T18610] ? aa_sk_perm+0x82d/0x960 [ 1068.366810][T18610] ? __pfx_aa_sk_perm+0x10/0x10 [ 1068.366833][T18610] ? sock_rps_record_flow+0x19/0x400 [ 1068.366861][T18610] ? inet_sendmsg+0x2f4/0x370 [ 1068.366890][T18610] __sys_sendto+0x627/0x7a0 [ 1068.366915][T18610] ? __pfx___sys_sendto+0x10/0x10 [ 1068.366935][T18610] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1068.366976][T18610] ? __fget_files+0x3a0/0x420 [ 1068.367012][T18610] ? ksys_write+0x242/0x270 [ 1068.367033][T18610] ? __pfx_ksys_write+0x10/0x10 [ 1068.367059][T18610] __x64_sys_sendto+0xde/0x100 [ 1068.367086][T18610] do_syscall_64+0x14d/0xf80 [ 1068.367110][T18610] ? trace_irq_disable+0x3b/0x150 [ 1068.367134][T18610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.367159][T18610] ? clear_bhb_loop+0x40/0x90 [ 1068.367182][T18610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.367200][T18610] RIP: 0033:0x7faa4139c629 [ 1068.367219][T18610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.367235][T18610] RSP: 002b:00007faa421fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1068.367254][T18610] RAX: ffffffffffffffda RBX: 00007faa41615fa0 RCX: 00007faa4139c629 [ 1068.367267][T18610] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1068.367279][T18610] RBP: 00007faa421fa090 R08: 0000200000000140 R09: 000000000000001c [ 1068.367291][T18610] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1068.367303][T18610] R13: 00007faa41616038 R14: 00007faa41615fa0 R15: 00007ffc5dd0b138 [ 1068.367336][T18610] [ 1069.094149][T18648] Cannot find del_set index 4 as target [ 1069.113879][T18644] syzkaller0: entered promiscuous mode [ 1069.133189][T18644] syzkaller0: entered allmulticast mode [ 1069.319548][T18665] openvswitch: netlink: Invalid VLAN frame [ 1069.374616][T18664] netlink: 'syz.0.14148': attribute type 83 has an invalid length. [ 1069.410021][T18664] netlink: 'syz.0.14148': attribute type 83 has an invalid length. [ 1069.476546][T18677] netlink: 'syz.2.14149': attribute type 2 has an invalid length. [ 1069.864009][T18705] netlink: 'syz.1.14160': attribute type 30 has an invalid length. [ 1069.874863][T18702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.894687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.903224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.911668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.920125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.928530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.168248][ T30] audit: type=1800 audit(1771844826.487:15): pid=18721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14166" name="memory.events" dev="tmpfs" ino=1675 res=0 errno=0 [ 1070.196913][ T30] audit: type=1804 audit(1771844826.487:16): pid=18721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.14166" name="/newroot/327/memory.events" dev="tmpfs" ino=1675 res=1 errno=0 [ 1070.301634][T18728] __nla_validate_parse: 14 callbacks suppressed [ 1070.301653][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14167'. [ 1070.409126][T18734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14169'. [ 1070.611302][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14173'. [ 1070.650961][T18749] netlink: 'syz.3.14174': attribute type 21 has an invalid length. [ 1070.694187][T18749] IPv6: NLM_F_CREATE should be specified when creating new route [ 1070.733588][T18752] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14175'. [ 1070.906747][T18766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14180'. [ 1070.917577][T18766] netlink: 'syz.2.14180': attribute type 1 has an invalid length. [ 1070.925590][T18766] netlink: 'syz.2.14180': attribute type 1 has an invalid length. [ 1070.947951][T18768] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14181'. [ 1070.981925][T18766] syzkaller1: entered promiscuous mode [ 1070.987591][T18766] syzkaller1: entered allmulticast mode [ 1071.008133][T18771] netlink: 'syz.4.14182': attribute type 2 has an invalid length. [ 1071.047431][T18772] netlink: 'syz.1.14183': attribute type 12 has an invalid length. [ 1071.056601][T18772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14183'. [ 1071.170100][T18783] xt_bpf: check failed: parse error [ 1071.236197][T18788] smc: net device team0 applied user defined pnetid SYZ2 [ 1071.248257][T18788] smc: net device caif0 applied user defined pnetid SYZ2 [ 1071.360246][T18797] openvswitch: netlink: Flow actions attr not present in new flow. [ 1071.383333][T18797] FAULT_INJECTION: forcing a failure. [ 1071.383333][T18797] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.416443][T18797] CPU: 1 UID: 0 PID: 18797 Comm: syz.1.14191 Not tainted syzkaller #0 PREEMPT(full) [ 1071.416469][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.416480][T18797] Call Trace: [ 1071.416487][T18797] [ 1071.416495][T18797] dump_stack_lvl+0xe8/0x150 [ 1071.416523][T18797] should_fail_ex+0x412/0x560 [ 1071.416548][T18797] should_failslab+0xa8/0x100 [ 1071.416570][T18797] __kmalloc_cache_noprof+0x88/0x660 [ 1071.416588][T18797] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1071.416609][T18797] ? sctp_add_bind_addr+0x8c/0x370 [ 1071.416634][T18797] sctp_add_bind_addr+0x8c/0x370 [ 1071.416669][T18797] sctp_copy_local_addr_list+0x314/0x4f0 [ 1071.416695][T18797] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1071.416714][T18797] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1071.416737][T18797] ? sctp_v6_is_any+0x64/0x80 [ 1071.416760][T18797] ? sctp_copy_one_addr+0x93/0x360 [ 1071.416784][T18797] sctp_bind_addr_copy+0xb3/0x3c0 [ 1071.416804][T18797] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1071.416825][T18797] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1071.416851][T18797] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1071.416886][T18797] ? __local_bh_enable_ip+0xd0/0x130 [ 1071.416906][T18797] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1071.416925][T18797] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1071.416955][T18797] sctp_sendmsg+0x1528/0x2c10 [ 1071.416994][T18797] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1071.417015][T18797] ? aa_sk_perm+0x15a/0x960 [ 1071.417036][T18797] ? aa_sk_perm+0x82d/0x960 [ 1071.417063][T18797] ? __pfx_aa_sk_perm+0x10/0x10 [ 1071.417086][T18797] ? sock_rps_record_flow+0x19/0x400 [ 1071.417114][T18797] ? inet_sendmsg+0x2f4/0x370 [ 1071.417142][T18797] __sys_sendto+0x627/0x7a0 [ 1071.417168][T18797] ? __pfx___sys_sendto+0x10/0x10 [ 1071.417187][T18797] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1071.417225][T18797] ? __fget_files+0x3a0/0x420 [ 1071.417255][T18797] ? ksys_write+0x242/0x270 [ 1071.417274][T18797] ? __pfx_ksys_write+0x10/0x10 [ 1071.417295][T18797] __x64_sys_sendto+0xde/0x100 [ 1071.417319][T18797] do_syscall_64+0x14d/0xf80 [ 1071.417340][T18797] ? trace_irq_disable+0x3b/0x150 [ 1071.417361][T18797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.417379][T18797] ? clear_bhb_loop+0x40/0x90 [ 1071.417399][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.417416][T18797] RIP: 0033:0x7fddf9d9c629 [ 1071.417433][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.417447][T18797] RSP: 002b:00007fddfac9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1071.417466][T18797] RAX: ffffffffffffffda RBX: 00007fddfa015fa0 RCX: 00007fddf9d9c629 [ 1071.417478][T18797] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1071.417491][T18797] RBP: 00007fddfac9e090 R08: 0000200000000140 R09: 000000000000001c [ 1071.417501][T18797] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1071.417529][T18797] R13: 00007fddfa016038 R14: 00007fddfa015fa0 R15: 00007ffcd5994338 [ 1071.417560][T18797] [ 1071.422904][T18803] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14194'. [ 1071.949364][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14201'. [ 1072.026903][T18827] nbd: must specify an index to disconnect [ 1072.271439][T18850] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14210'. [ 1072.300016][T18851] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1072.590721][T18869] syz2: rxe_newlink: already configured on ip6_vti0 [ 1072.867705][T18889] netlink: 'syz.1.14219': attribute type 1 has an invalid length. [ 1072.876485][T18889] bond0: (slave gre0): Error: Device type is different from other slaves [ 1073.023207][T18903] syz.3.14228 (18903) used obsolete PPPIOCDETACH ioctl [ 1073.039363][T18905] netlink: 'syz.4.14225': attribute type 10 has an invalid length. [ 1073.094613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.130485][T18908] macvtap1: entered promiscuous mode [ 1073.136748][T18908] vlan0: entered promiscuous mode [ 1073.142124][T18908] macvtap1: entered allmulticast mode [ 1073.148210][T18908] vlan0: entered allmulticast mode [ 1073.148418][T18893] netlink: 'syz.4.14225': attribute type 10 has an invalid length. [ 1073.153335][T18908] veth0_vlan: entered allmulticast mode [ 1073.175659][T18905] : (slave wlan1): Opening slave failed [ 1073.178586][T18913] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1073.555190][T18929] ip6_vti0 speed is unknown, defaulting to 1000 [ 1073.774922][T18949] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1073.795290][T18950] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1073.914282][T18929] lo speed is unknown, defaulting to 1000 [ 1074.169058][T18962] macvlan0: entered promiscuous mode [ 1074.174913][T18962] macvlan0: entered allmulticast mode [ 1074.209564][T18962] `: (slave macvlan0): Error -98 calling set_mac_address [ 1074.269813][T31108] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.279300][T31108] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.367707][T31108] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.377416][T31108] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.491400][T18986] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1074.981078][T19019] macvlan2: entered promiscuous mode [ 1075.001387][T19019] macvlan2: entered allmulticast mode [ 1075.018895][T19021] net_ratelimit: 5 callbacks suppressed [ 1075.018914][T19021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.035704][T19019] : (slave macvlan2): Error -98 calling set_mac_address [ 1075.213609][T19030] IPv6: Can't replace route, no match found [ 1075.256533][T19035] validate_nla: 1 callbacks suppressed [ 1075.256551][T19035] netlink: 'syz.0.14267': attribute type 2 has an invalid length. [ 1075.270902][T19030] netlink: 'syz.3.14264': attribute type 10 has an invalid length. [ 1075.342640][T19047] netlink: 'syz.4.14268': attribute type 2 has an invalid length. [ 1075.411700][T19040] syzkaller0: entered promiscuous mode [ 1075.419337][T19040] syzkaller0: entered allmulticast mode [ 1075.553072][T19065] __nla_validate_parse: 10 callbacks suppressed [ 1075.553094][T19065] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14274'. [ 1075.706739][T19072] macvlan3: entered promiscuous mode [ 1075.744817][T19072] macvlan3: entered allmulticast mode [ 1075.752003][T19072] : (slave macvlan3): Opening slave failed [ 1075.939663][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14286'. [ 1075.969658][T19102] netlink: 1220 bytes leftover after parsing attributes in process `syz.0.14287'. [ 1076.059956][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14289'. [ 1076.071989][T19106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14289'. [ 1076.082804][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14288'. [ 1076.106488][T19108] netlink: 100 bytes leftover after parsing attributes in process `syz.4.14288'. [ 1076.214980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.223345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.231730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.240071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.248405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.256751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.265070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.273360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.492289][T19135] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14299'. [ 1076.666619][T19145] sctp: [Deprecated]: syz.1.14304 (pid 19145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1076.666619][T19145] Use struct sctp_sack_info instead [ 1076.806893][T19154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14308'. [ 1076.876834][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14309'. [ 1077.628068][T19218] x_tables: duplicate underflow at hook 2 [ 1078.341481][T31109] tipc: Subscription rejected, illegal request [ 1078.367039][T19269] macvlan2: entered promiscuous mode [ 1078.386735][T19281] openvswitch: netlink: Flow actions attr not present in new flow. [ 1078.396807][T19269] macvlan2: entered allmulticast mode [ 1078.403945][T19269] : (slave macvlan2): Error -98 calling set_mac_address [ 1078.431371][T19283] netlink: 'syz.2.14351': attribute type 29 has an invalid length. [ 1078.443089][T19283] netlink: 'syz.2.14351': attribute type 1 has an invalid length. [ 1078.454108][T19281] FAULT_INJECTION: forcing a failure. [ 1078.454108][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.484312][T19283] netlink: 'syz.2.14351': attribute type 29 has an invalid length. [ 1078.492992][T19281] CPU: 0 UID: 0 PID: 19281 Comm: syz.3.14350 Not tainted syzkaller #0 PREEMPT(full) [ 1078.493017][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.493028][T19281] Call Trace: [ 1078.493043][T19281] [ 1078.493051][T19281] dump_stack_lvl+0xe8/0x150 [ 1078.493081][T19281] should_fail_ex+0x412/0x560 [ 1078.493108][T19281] should_failslab+0xa8/0x100 [ 1078.493131][T19281] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1078.493160][T19281] ? __alloc_skb+0x1d0/0x7d0 [ 1078.493181][T19281] ? __local_bh_enable_ip+0xd0/0x130 [ 1078.493208][T19281] __alloc_skb+0x1d0/0x7d0 [ 1078.493235][T19281] _sctp_make_chunk+0x59/0x290 [ 1078.493262][T19281] sctp_make_datafrag_empty+0x12a/0x240 [ 1078.493287][T19281] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1078.493307][T19281] ? sctp_datamsg_from_user+0x88/0xef0 [ 1078.493325][T19281] ? sctp_auth_send_cid+0x69/0x250 [ 1078.493356][T19281] sctp_datamsg_from_user+0x729/0xef0 [ 1078.493398][T19281] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 1078.493421][T19281] ? __asan_memcpy+0x40/0x70 [ 1078.493454][T19281] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1078.493495][T19281] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1078.493519][T19281] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1078.493552][T19281] ? __local_bh_enable_ip+0xd0/0x130 [ 1078.493572][T19281] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1078.493592][T19281] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1078.493621][T19281] sctp_sendmsg+0x1b3d/0x2c10 [ 1078.493661][T19281] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1078.493683][T19281] ? aa_sk_perm+0x15a/0x960 [ 1078.493705][T19281] ? aa_sk_perm+0x82d/0x960 [ 1078.493732][T19281] ? __pfx_aa_sk_perm+0x10/0x10 [ 1078.493755][T19281] ? sock_rps_record_flow+0x19/0x400 [ 1078.493782][T19281] ? inet_sendmsg+0x2f4/0x370 [ 1078.493809][T19281] __sys_sendto+0x627/0x7a0 [ 1078.493834][T19281] ? __pfx___sys_sendto+0x10/0x10 [ 1078.493853][T19281] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1078.493896][T19281] ? __fget_files+0x3a0/0x420 [ 1078.493937][T19281] ? ksys_write+0x242/0x270 [ 1078.493958][T19281] ? __pfx_ksys_write+0x10/0x10 [ 1078.493982][T19281] __x64_sys_sendto+0xde/0x100 [ 1078.494009][T19281] do_syscall_64+0x14d/0xf80 [ 1078.494091][T19281] ? trace_irq_disable+0x3b/0x150 [ 1078.494114][T19281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.494133][T19281] ? clear_bhb_loop+0x40/0x90 [ 1078.494155][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.494174][T19281] RIP: 0033:0x7f514619c629 [ 1078.494192][T19281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.494207][T19281] RSP: 002b:00007f5146fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1078.494226][T19281] RAX: ffffffffffffffda RBX: 00007f5146415fa0 RCX: 00007f514619c629 [ 1078.494239][T19281] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1078.494250][T19281] RBP: 00007f5146fd1090 R08: 0000200000000140 R09: 000000000000001c [ 1078.494262][T19281] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1078.494273][T19281] R13: 00007f5146416038 R14: 00007f5146415fa0 R15: 00007fff03a35ee8 [ 1078.494304][T19281] [ 1079.192021][T19311] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1079.211140][T19311] bond5: (slave lo): Enslaving as an active interface with an up link [ 1079.238624][T19314] macvlan2: entered promiscuous mode [ 1079.254706][T19314] macvlan2: entered allmulticast mode [ 1079.263784][T19314] : (slave macvlan2): Error -98 calling set_mac_address [ 1079.299997][T19325] netlink: 'syz.1.14367': attribute type 1 has an invalid length. [ 1079.311430][ T2207] lo speed is unknown, defaulting to 1000 [ 1079.318314][ T9968] lo speed is unknown, defaulting to 1000 [ 1079.324048][ T9968] syz0: Port: 1 Link ACTIVE [ 1079.330511][T19323] bridge4: entered promiscuous mode [ 1079.340143][T19323] bridge4: entered allmulticast mode [ 1079.578625][T19341] FAULT_INJECTION: forcing a failure. [ 1079.578625][T19341] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.606298][T19341] CPU: 1 UID: 0 PID: 19341 Comm: syz.0.14371 Not tainted syzkaller #0 PREEMPT(full) [ 1079.606321][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.606332][T19341] Call Trace: [ 1079.606339][T19341] [ 1079.606347][T19341] dump_stack_lvl+0xe8/0x150 [ 1079.606376][T19341] should_fail_ex+0x412/0x560 [ 1079.606402][T19341] should_failslab+0xa8/0x100 [ 1079.606426][T19341] __kmalloc_cache_noprof+0x88/0x660 [ 1079.606443][T19341] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1079.606465][T19341] ? sctp_add_bind_addr+0x8c/0x370 [ 1079.606491][T19341] sctp_add_bind_addr+0x8c/0x370 [ 1079.606516][T19341] sctp_copy_local_addr_list+0x314/0x4f0 [ 1079.606542][T19341] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1079.606564][T19341] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1079.606586][T19341] ? sctp_v6_is_any+0x64/0x80 [ 1079.606608][T19341] ? sctp_copy_one_addr+0x93/0x360 [ 1079.606629][T19341] sctp_bind_addr_copy+0xb3/0x3c0 [ 1079.606651][T19341] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1079.606673][T19341] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1079.606702][T19341] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1079.606731][T19341] ? __local_bh_enable_ip+0xd0/0x130 [ 1079.606750][T19341] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1079.606770][T19341] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1079.606798][T19341] sctp_sendmsg+0x1528/0x2c10 [ 1079.606835][T19341] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1079.606856][T19341] ? aa_sk_perm+0x15a/0x960 [ 1079.606886][T19341] ? aa_sk_perm+0x82d/0x960 [ 1079.606912][T19341] ? __pfx_aa_sk_perm+0x10/0x10 [ 1079.606934][T19341] ? sock_rps_record_flow+0x19/0x400 [ 1079.606960][T19341] ? inet_sendmsg+0x2f4/0x370 [ 1079.606996][T19341] __sys_sendto+0x627/0x7a0 [ 1079.607022][T19341] ? __pfx___sys_sendto+0x10/0x10 [ 1079.607041][T19341] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1079.607080][T19341] ? __fget_files+0x3a0/0x420 [ 1079.607114][T19341] ? ksys_write+0x242/0x270 [ 1079.607136][T19341] ? __pfx_ksys_write+0x10/0x10 [ 1079.607160][T19341] __x64_sys_sendto+0xde/0x100 [ 1079.607187][T19341] do_syscall_64+0x14d/0xf80 [ 1079.607209][T19341] ? trace_irq_disable+0x3b/0x150 [ 1079.607231][T19341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.607250][T19341] ? clear_bhb_loop+0x40/0x90 [ 1079.607270][T19341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.607287][T19341] RIP: 0033:0x7f985379c629 [ 1079.607304][T19341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.607318][T19341] RSP: 002b:00007f98546ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1079.607336][T19341] RAX: ffffffffffffffda RBX: 00007f9853a15fa0 RCX: 00007f985379c629 [ 1079.607348][T19341] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 1079.607359][T19341] RBP: 00007f98546ee090 R08: 0000200000000140 R09: 000000000000001c [ 1079.607370][T19341] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1079.607381][T19341] R13: 00007f9853a16038 R14: 00007f9853a15fa0 R15: 00007ffc247b4c88 [ 1079.607410][T19341] [ 1080.124107][T19363] macvlan3: entered promiscuous mode [ 1080.147408][T19363] macvlan3: entered allmulticast mode [ 1080.189138][T19363] : (slave macvlan3): Opening slave failed [ 1080.422995][T19389] net_ratelimit: 4 callbacks suppressed [ 1080.423016][T19389] openvswitch: netlink: IP tunnel dst address not specified [ 1080.523640][T19393] netlink: 'syz.2.14393': attribute type 15 has an invalid length. [ 1080.534712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.564540][T19396] __nla_validate_parse: 83 callbacks suppressed [ 1080.564559][T19396] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14392'. [ 1080.592128][T19396] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.14392'. [ 1080.631766][T19399] netlink: 208 bytes leftover after parsing attributes in process `syz.2.14394'. [ 1080.788705][T19409] syzkaller0: entered promiscuous mode [ 1080.801017][T19409] syzkaller0: entered allmulticast mode [ 1080.825912][T19409] 0: reclassify loop, rule prio 0, protocol 800 [ 1080.839094][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1080.912217][T19413] syzkaller0: entered promiscuous mode [ 1080.917824][T19413] syzkaller0: entered allmulticast mode [ 1080.954473][T19416] macvlan3: entered promiscuous mode [ 1080.967043][T19416] macvlan3: entered allmulticast mode [ 1080.973868][T19416] : (slave macvlan3): Opening slave failed [ 1081.023823][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14402'. [ 1081.027802][T19419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14401'. [ 1081.112097][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14403'. [ 1081.182791][T19426] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14404'. [ 1081.187148][T19429] ip6_vti0 speed is unknown, defaulting to 1000 [ 1081.305731][T19439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1081.489230][T19453] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1081.515854][T19453] netlink: 'syz.0.14412': attribute type 1 has an invalid length. [ 1081.525515][T19455] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1081.617084][T19460] netlink: 208 bytes leftover after parsing attributes in process `syz.0.14415'. [ 1081.705952][T19429] lo speed is unknown, defaulting to 1000 [ 1081.751767][T19465] macvlan2: entered promiscuous mode [ 1081.756241][T19448] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1081.757507][T19465] macvlan2: entered allmulticast mode [ 1081.764805][T19463] nbd1: detected capacity change from 0 to 127 [ 1081.772154][T19465] : (slave macvlan2): Error -98 calling set_mac_address [ 1081.881723][T19472] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14418'. [ 1081.990524][T19477] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14419'. [ 1082.297240][T19490] syz2: rxe_newlink: already configured on ip6_vti0 [ 1082.344851][ T1641] block nbd1: Receive control failed (result -104) [ 1082.486798][T19502] team0: Device ip6gre2 is of different type [ 1082.648521][T19513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1082.722567][T19521] netlink: 'syz.0.14436': attribute type 1 has an invalid length. [ 1082.769777][T19521] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1082.849759][T19530] bond10: (slave veth7): Enslaving as an active interface with a down link [ 1082.968779][T19541] netlink: 'syz.0.14443': attribute type 11 has an invalid length. [ 1083.123608][T19554] x_tables: unsorted underflow at hook 3 [ 1083.234311][T19562] 8021q: VLANs not supported on gre0 [ 1083.328318][T19568] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1083.466192][T19580] netlink: 'syz.0.14458': attribute type 15 has an invalid length. [ 1084.018580][T19620] syzkaller0: entered promiscuous mode [ 1084.024228][T19620] syzkaller0: entered allmulticast mode [ 1084.050528][T19620] tipc: Enabled bearer , priority 0 [ 1084.061021][T19620] tipc: Enabling of bearer rejected, failed to enable media [ 1084.070642][T19620] netlink: 'syz.1.14471': attribute type 21 has an invalid length. [ 1084.317192][T19636] netlink: 'syz.0.14477': attribute type 10 has an invalid length. [ 1084.343073][T19636] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1084.576759][T19662] macvlan0: entered promiscuous mode [ 1084.582095][T19662] macvlan0: entered allmulticast mode [ 1084.589480][T19662] `: (slave macvlan0): Error -98 calling set_mac_address [ 1084.787563][T19619] tipc: Resetting bearer [ 1084.848223][T19619] tipc: Disabling bearer [ 1084.951252][T19685] IPv6: NLM_F_CREATE should be specified when creating new route [ 1085.216974][T19709] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1085.464307][T19727] netlink: 'syz.4.14505': attribute type 10 has an invalid length. [ 1085.595384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1085.688326][ T10] lo speed is unknown, defaulting to 1000 [ 1085.694207][ T10] syz0: Port: 1 Link DOWN [ 1085.766491][T19738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.817914][T19744] __nla_validate_parse: 24 callbacks suppressed [ 1085.817931][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14509'. [ 1085.894373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1085.902489][ C0] lec:lec_tx_timeout: lec0 [ 1085.954754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1086.121061][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1086.207545][T19770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1086.218023][T19770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1086.232311][T19770] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1086.289020][T19765] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1086.338416][T19765] bond3 (unregistering): Released all slaves [ 1086.378690][T19777] batman_adv: batadv0: Adding interface: dummy0 [ 1086.386385][T19777] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.415864][T19777] batman_adv: batadv0: Interface activated: dummy0 [ 1086.433575][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14518'. [ 1086.522090][T19787] syz2: rxe_newlink: already configured on ip6_vti0 [ 1086.636150][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14522'. [ 1086.772394][T19812] syzkaller0: entered promiscuous mode [ 1086.778420][T19812] syzkaller0: entered allmulticast mode [ 1086.859882][T31109] tipc: Subscription rejected, illegal request [ 1087.011064][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14530'. [ 1087.069694][T19829] openvswitch: netlink: Message has 132 unknown bytes. [ 1087.168008][T19834] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1087.210219][T19836] macvlan0: entered promiscuous mode [ 1087.216172][T19836] macvlan0: entered allmulticast mode [ 1087.221900][T19836] : (slave macvlan0): Error -98 calling set_mac_address [ 1087.581699][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14539'. [ 1087.729595][T19870] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1087.810566][T19872] netlink: 'syz.4.14545': attribute type 1 has an invalid length. [ 1087.849376][T19872] bond3: entered promiscuous mode [ 1087.855036][T19872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1087.940036][T19872] bond3: (slave bridge5): making interface the new active one [ 1087.957684][T19872] bridge5: entered promiscuous mode [ 1087.979867][T19872] bridge5: left promiscuous mode [ 1088.146714][T19899] Bluetooth: MGMT ver 1.23 [ 1088.254161][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14554'. [ 1088.254236][T19904] netlink: 'syz.1.14556': attribute type 5 has an invalid length. [ 1088.568354][T19923] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1088.881057][T19946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.932466][T19957] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1088.961809][T19957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.012653][T19964] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1089.485396][T19995] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1089.739618][T20019] geneve3: entered promiscuous mode [ 1089.757613][T20018] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1089.784770][T20019] geneve3: entered allmulticast mode [ 1089.892875][T20023] nbd5: detected capacity change from 0 to 127 [ 1089.923772][ T1641] block nbd5: Receive control failed (result -32) [ 1089.927245][T19470] block nbd5: Send control failed (result -32) [ 1089.966881][T19470] block nbd5: Request send failed, requeueing [ 1089.980773][ T2155] block nbd5: Dead connection, failed to find a fallback [ 1089.988301][ T2155] block nbd5: shutting down sockets [ 1089.993965][ T2155] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.005462][ T2155] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1090.013429][T19470] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.026180][T19470] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1090.033987][T19470] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.043837][T19470] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1090.051800][T19470] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.061922][T19470] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1090.070034][T19470] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.079561][T19470] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1090.087909][T19470] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.097694][T19470] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1090.110559][T19470] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.120627][T19470] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1090.128834][T19470] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.146414][T19470] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1090.155583][T19470] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.168339][T19470] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1090.272554][T19470] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.302601][T20052] syzkaller0: entered promiscuous mode [ 1090.329844][T20052] syzkaller0: entered allmulticast mode [ 1090.336645][T19470] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1090.361949][T19470] ldm_validate_partition_table(): Disk read failed. [ 1090.391846][T19470] Dev nbd5: unable to read RDB block 0 [ 1090.405173][T19470] nbd5: unable to read partition table [ 1090.447248][T19470] ldm_validate_partition_table(): Disk read failed. [ 1090.464718][T20067] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1090.472204][T20060] netlink: 'syz.1.14604': attribute type 3 has an invalid length. [ 1090.481946][T19470] Dev nbd5: unable to read RDB block 0 [ 1090.534098][T19470] nbd5: unable to read partition table [ 1090.681375][T20078] netlink: 'syz.2.14608': attribute type 3 has an invalid length. [ 1090.824846][T20094] __nla_validate_parse: 18 callbacks suppressed [ 1090.824866][T20094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14617'. [ 1090.880086][T20092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14616'. [ 1090.919519][T20102] FAULT_INJECTION: forcing a failure. [ 1090.919519][T20102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.937582][T20102] CPU: 1 UID: 0 PID: 20102 Comm: syz.4.14620 Not tainted syzkaller #0 PREEMPT(full) [ 1090.937606][T20102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.937615][T20102] Call Trace: [ 1090.937624][T20102] [ 1090.937631][T20102] dump_stack_lvl+0xe8/0x150 [ 1090.937658][T20102] should_fail_ex+0x412/0x560 [ 1090.937682][T20102] _copy_from_user+0x2d/0xb0 [ 1090.937706][T20102] ___sys_sendmsg+0x1c6/0x360 [ 1090.937735][T20102] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.937788][T20102] ? __fget_files+0x2a/0x420 [ 1090.937810][T20102] ? __fget_files+0x3a0/0x420 [ 1090.937842][T20102] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1090.937869][T20102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1090.937902][T20102] ? __pfx_ksys_write+0x10/0x10 [ 1090.937928][T20102] do_syscall_64+0x14d/0xf80 [ 1090.937951][T20102] ? trace_irq_disable+0x3b/0x150 [ 1090.937973][T20102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.937991][T20102] ? clear_bhb_loop+0x40/0x90 [ 1090.938013][T20102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.938031][T20102] RIP: 0033:0x7f318a39c629 [ 1090.938048][T20102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.938063][T20102] RSP: 002b:00007f318b26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.938082][T20102] RAX: ffffffffffffffda RBX: 00007f318a615fa0 RCX: 00007f318a39c629 [ 1090.938095][T20102] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1090.938106][T20102] RBP: 00007f318b26a090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.938118][T20102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.938128][T20102] R13: 00007f318a616038 R14: 00007f318a615fa0 R15: 00007ffd23313dd8 [ 1090.938165][T20102] [ 1091.047049][T20110] syz2: rxe_newlink: already configured on ip6_vti0 [ 1091.149666][T20114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1091.966125][T11362] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.984989][T11362] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.993434][T11362] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1092.016911][T11362] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.035671][T11362] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.050732][T11362] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1092.075871][T11362] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.084256][T11362] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.095501][T20147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14631'. [ 1092.110619][T20150] FAULT_INJECTION: forcing a failure. [ 1092.110619][T20150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.129211][T11362] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1092.169533][T20150] CPU: 1 UID: 0 PID: 20150 Comm: syz.1.14632 Not tainted syzkaller #0 PREEMPT(full) [ 1092.169559][T20150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.169570][T20150] Call Trace: [ 1092.169577][T20150] [ 1092.169585][T20150] dump_stack_lvl+0xe8/0x150 [ 1092.169616][T20150] should_fail_ex+0x412/0x560 [ 1092.169641][T20150] _copy_from_user+0x2d/0xb0 [ 1092.169666][T20150] __copy_msghdr+0x3c5/0x5b0 [ 1092.169695][T20150] ___sys_sendmsg+0x213/0x360 [ 1092.169726][T20150] ? __pfx____sys_sendmsg+0x10/0x10 [ 1092.169786][T20150] ? __fget_files+0x2a/0x420 [ 1092.169808][T20150] ? __fget_files+0x3a0/0x420 [ 1092.169842][T20150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1092.169874][T20150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1092.169906][T20150] ? __pfx_ksys_write+0x10/0x10 [ 1092.169936][T20150] do_syscall_64+0x14d/0xf80 [ 1092.169960][T20150] ? trace_irq_disable+0x3b/0x150 [ 1092.169983][T20150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.170002][T20150] ? clear_bhb_loop+0x40/0x90 [ 1092.170024][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.170042][T20150] RIP: 0033:0x7fddf9d9c629 [ 1092.170060][T20150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.170074][T20150] RSP: 002b:00007fddfac9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.170093][T20150] RAX: ffffffffffffffda RBX: 00007fddfa015fa0 RCX: 00007fddf9d9c629 [ 1092.170106][T20150] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1092.170117][T20150] RBP: 00007fddfac9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.170129][T20150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.170139][T20150] R13: 00007fddfa016038 R14: 00007fddfa015fa0 R15: 00007ffcd5994338 [ 1092.170171][T20150] [ 1092.173902][T11362] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.372046][T11362] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.381628][T11362] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1092.409209][T20165] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1092.453101][T20148] syzkaller0: entered promiscuous mode [ 1092.465870][T20148] syzkaller0: entered allmulticast mode [ 1092.549333][T20160] gtp0: entered promiscuous mode [ 1092.555282][T20160] gtp0: entered allmulticast mode [ 1092.662863][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14641'. [ 1094.300541][T20199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14646'. [ 1094.406078][T20208] syz2: rxe_newlink: already configured on ip6_vti0 [ 1094.707341][T20229] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14659'. [ 1094.976288][T20255] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1095.189383][T20269] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14668'. [ 1095.266547][T20274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.274205][T20274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.303524][T20276] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14671'. [ 1095.440064][T20282] batadv_slave_1: entered promiscuous mode [ 1095.514097][T20282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.525922][T20282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.543229][T20282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.557517][T20282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.595588][T20297] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1095.659276][T20280] batadv_slave_1: left promiscuous mode [ 1095.788391][T20312] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14681'. [ 1095.831449][T20314] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 1096.007526][T20331] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14689'. [ 1096.040027][T20325] tipc: Enabled bearer , priority 0 [ 1096.106622][T20325] syzkaller0: entered promiscuous mode [ 1096.112240][T20325] syzkaller0: entered allmulticast mode [ 1096.118942][T20325] tipc: Resetting bearer [ 1096.128920][T20334] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1096.141192][T20323] tipc: Resetting bearer [ 1096.909009][T20352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14694'. [ 1097.821937][T20323] tipc: Disabling bearer [ 1097.905783][T20368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14699'. [ 1098.061462][T20379] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1098.126990][T20386] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14706'. [ 1098.191131][T20380] syzkaller0: entered promiscuous mode [ 1098.197841][T20380] syzkaller0: entered allmulticast mode [ 1098.209437][T20393] netlink: 'syz.0.14709': attribute type 1 has an invalid length. [ 1098.275580][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14707'. [ 1098.285298][T20397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14707'. [ 1099.912311][T20393] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1099.915346][T20388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14708'. [ 1099.940195][T20413] tipc: Enabled bearer , priority 0 [ 1100.010715][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14714'. [ 1100.071558][T20414] syzkaller0: entered promiscuous mode [ 1100.090176][T20414] syzkaller0: entered allmulticast mode [ 1100.095458][T20427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14716'. [ 1100.096824][T20414] tipc: Resetting bearer [ 1100.133370][T20420] bond1: Invalid ad_actor_system MAC address. [ 1100.137376][T20432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14717'. [ 1100.139951][T20420] bond1: option ad_actor_system: invalid value (1) [ 1100.199285][T20420] bond1 (unregistering): Released all slaves [ 1100.264822][T20410] tipc: Resetting bearer [ 1101.796187][T20410] tipc: Disabling bearer [ 1101.808452][T20422] tipc: Enabled bearer , priority 0 [ 1101.889588][T20440] syzkaller0: entered promiscuous mode [ 1101.897045][T20440] syzkaller0: entered allmulticast mode [ 1101.903430][T20440] tipc: Resetting bearer [ 1101.964254][T20420] syzkaller0: entered promiscuous mode [ 1101.972180][T20420] syzkaller0: entered allmulticast mode [ 1102.060390][ T49] tipc: Resetting bearer [ 1103.618267][T20440] tipc: Resetting bearer [ 1103.952684][T20478] netlink: 'syz.2.14725': attribute type 20 has an invalid length. [ 1103.961112][T20478] IPv6: NLM_F_CREATE should be specified when creating new route [ 1105.141289][T20440] tipc: Disabling bearer [ 1105.284786][T20486] syz2: rxe_newlink: already configured on ip6_vti0 [ 1105.298074][T20489] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14728'. [ 1105.351886][T20485] tipc: Enabled bearer , priority 0 [ 1105.472962][T20485] syzkaller0: entered promiscuous mode [ 1105.482371][T20485] syzkaller0: entered allmulticast mode [ 1105.488985][T20485] tipc: Resetting bearer [ 1105.513297][T20504] pimreg3: entered allmulticast mode [ 1105.535680][T20484] tipc: Resetting bearer [ 1105.575739][T20512] netlink: 'syz.2.14736': attribute type 24 has an invalid length. [ 1107.087916][T20484] tipc: Disabling bearer [ 1107.100619][T20500] tipc: Enabled bearer , priority 0 [ 1107.114683][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14735'. [ 1107.142864][T20506] syzkaller0: entered promiscuous mode [ 1107.149377][T20506] syzkaller0: entered allmulticast mode [ 1107.156254][T20506] tipc: Resetting bearer [ 1107.252916][T20517] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14739'. [ 1107.303937][T20521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.313774][T11368] tipc: Resetting bearer [ 1107.330937][T20497] tipc: Resetting bearer [ 1107.468811][T20531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14744'. [ 1108.956943][T20497] tipc: Disabling bearer [ 1108.966541][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14735'. [ 1109.085815][T20543] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1109.478269][T20577] netlink: 'syz.0.14756': attribute type 1 has an invalid length. [ 1109.498214][T20577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14756'. [ 1109.709980][T20594] FAULT_INJECTION: forcing a failure. [ 1109.709980][T20594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.754468][T20594] CPU: 0 UID: 0 PID: 20594 Comm: syz.1.14760 Not tainted syzkaller #0 PREEMPT(full) [ 1109.754493][T20594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.754505][T20594] Call Trace: [ 1109.754513][T20594] [ 1109.754529][T20594] dump_stack_lvl+0xe8/0x150 [ 1109.754558][T20594] should_fail_ex+0x412/0x560 [ 1109.754580][T20594] _copy_from_user+0x2d/0xb0 [ 1109.754599][T20594] ___sys_sendmsg+0x1c6/0x360 [ 1109.754624][T20594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.754647][T20594] ? kstrtouint+0x6e/0xe0 [ 1109.754681][T20594] ? __fget_files+0x2a/0x420 [ 1109.754699][T20594] ? __fget_files+0x3a0/0x420 [ 1109.754724][T20594] __sys_sendmmsg+0x27c/0x4e0 [ 1109.754747][T20594] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1109.754764][T20594] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1109.754804][T20594] ? ksys_write+0x242/0x270 [ 1109.754820][T20594] ? __pfx_ksys_write+0x10/0x10 [ 1109.754838][T20594] __x64_sys_sendmmsg+0xa0/0xc0 [ 1109.754858][T20594] do_syscall_64+0x14d/0xf80 [ 1109.754877][T20594] ? trace_irq_disable+0x3b/0x150 [ 1109.754895][T20594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.754909][T20594] ? clear_bhb_loop+0x40/0x90 [ 1109.754925][T20594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.754939][T20594] RIP: 0033:0x7fddf9d9c629 [ 1109.754953][T20594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.754964][T20594] RSP: 002b:00007fddfac9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1109.754980][T20594] RAX: ffffffffffffffda RBX: 00007fddfa015fa0 RCX: 00007fddf9d9c629 [ 1109.754991][T20594] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000e [ 1109.755000][T20594] RBP: 00007fddfac9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.755008][T20594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.755017][T20594] R13: 00007fddfa016038 R14: 00007fddfa015fa0 R15: 00007ffcd5994338 [ 1109.755040][T20594] [ 1110.201287][T20616] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14765'. [ 1110.357428][T20625] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1110.428698][T20627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14769'. [ 1110.446319][T20621] tipc: Enabled bearer , priority 0 [ 1110.498924][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14772'. [ 1110.517939][T20621] syzkaller0: entered promiscuous mode [ 1110.523550][T20621] syzkaller0: entered allmulticast mode [ 1110.530735][T20621] tipc: Resetting bearer [ 1110.545852][T20627] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1110.659918][T20617] tipc: Resetting bearer [ 1110.747430][T20650] netlink: 'syz.0.14777': attribute type 1 has an invalid length. [ 1110.752766][T20654] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1110.782651][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1110.804673][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1112.332622][T20617] tipc: Disabling bearer [ 1112.348873][T20650] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1112.354855][T20671] bond0: (slave gre0): Error: Device type is different from other slaves [ 1112.464031][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14783'. [ 1112.569060][T20685] macvlan3: entered promiscuous mode [ 1112.584515][T20685] macvlan3: entered allmulticast mode [ 1112.596819][T20685] : (slave macvlan3): Opening slave failed [ 1112.645414][T20689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1112.830937][T20695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.843316][T20695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.891151][T20701] sctp: [Deprecated]: syz.3.14791 (pid 20701) Use of int in max_burst socket option. [ 1112.891151][T20701] Use struct sctp_assoc_value instead [ 1112.963547][T20695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.975990][T20695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.006978][T20711] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1113.110002][T20695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.123629][T20695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.137151][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1113.223507][T20695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.245912][T20695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.300581][T20723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14800'. [ 1113.473763][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.499691][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.550227][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.569020][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.594234][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.623882][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.650236][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.672023][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.711790][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14807'. [ 1113.742367][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14809'. [ 1114.289831][T20785] syzkaller0: entered promiscuous mode [ 1114.299597][T20785] syzkaller0: entered allmulticast mode [ 1114.551134][T20805] nbd: nbd3 already in use [ 1114.557344][T20805] block nbd3: NBD_DISCONNECT [ 1114.562136][T20805] block nbd3: Send disconnect failed -32 [ 1114.568454][T20805] block nbd3: shutting down sockets [ 1114.597541][T11368] bridge_slave_0: left allmulticast mode [ 1114.603292][T11368] bridge_slave_0: left promiscuous mode [ 1114.612882][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.769582][T20816] netlink: 'syz.2.14832': attribute type 4 has an invalid length. [ 1114.828469][T11368] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1114.839396][T11368] gretap1 (unregistering): left promiscuous mode [ 1114.978317][T11368] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1114.986555][T11368] bridge3 (unregistering): left promiscuous mode [ 1115.099447][T11368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.109391][T11368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.120386][T11368] bond0 (unregistering): Released all slaves [ 1115.129981][T11368] bond1 (unregistering): Released all slaves [ 1115.142937][T11368] bond2 (unregistering): Released all slaves [ 1115.155969][T11368] bond3 (unregistering): Released all slaves [ 1115.168484][T11368] bond4 (unregistering): Released all slaves [ 1115.183386][T11368] bond5 (unregistering): Released all slaves [ 1115.205387][T11368] bond6 (unregistering): Released all slaves [ 1115.217742][T11368] bond7 (unregistering): Released all slaves [ 1115.372411][T11368] tipc: Disabling bearer [ 1115.380405][T11368] tipc: Left network mode [ 1115.418678][T20824] xt_recent: Unsupported userspace flags (000000b1) [ 1115.427208][T20824] x_tables: duplicate underflow at hook 1 [ 1115.800768][T20854] netlink: 'syz.1.14841': attribute type 1 has an invalid length. [ 1115.809759][T20852] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1115.900138][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1115.947341][T20857] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1115.965013][T20857] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1115.996511][T20857] bond6: (slave vxcan3): making interface the new active one [ 1116.017900][T20857] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 1116.350310][T11368] hsr_slave_0: left promiscuous mode [ 1116.381178][T11368] hsr_slave_1: left promiscuous mode [ 1116.414145][T11368] pimreg (unregistering): left allmulticast mode [ 1116.574100][T20890] xt_HMARK: proto mask must be zero with L3 mode [ 1116.582024][T20889] __nla_validate_parse: 3 callbacks suppressed [ 1116.582041][T20889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14853'. [ 1116.663868][T11368] team0 (unregistering): Port device team_slave_1 removed [ 1116.926190][T20893] netem: change failed [ 1116.933800][T20897] tipc: Enabled bearer , priority 0 [ 1116.949436][T20898] vcan1: entered promiscuous mode [ 1116.957487][T20898] vcan1: entered allmulticast mode [ 1117.142148][T20903] syzkaller0: entered promiscuous mode [ 1117.157979][T20903] syzkaller0: entered allmulticast mode [ 1117.165153][T20903] tipc: Resetting bearer [ 1117.179057][T20886] tipc: Resetting bearer [ 1118.713731][T20886] tipc: Disabling bearer [ 1118.881965][T20928] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14862'. [ 1118.926774][T11368] IPVS: stop unused estimator thread 0... [ 1118.943308][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14861'. [ 1119.013499][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14861'. [ 1119.069483][T20943] netlink: 'syz.0.14866': attribute type 11 has an invalid length. [ 1119.078582][T20943] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.14866'. [ 1119.110765][T20941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14866'. [ 1119.120482][T20941] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14866'. [ 1119.195180][T20945] siw: device registration error -23 [ 1119.477173][T20975] openvswitch: netlink: IP tunnel dst address not specified [ 1119.513299][T20976] dvmrp0: entered allmulticast mode [ 1119.586797][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1119.599425][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14879'. [ 1119.608750][T20980] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1119.641236][T20984] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14881'. [ 1119.701102][T20989] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1120.128756][T21024] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1120.249967][T21034] netlink: 'syz.0.14897': attribute type 7 has an invalid length. [ 1120.276237][T21034] netlink: 'syz.0.14897': attribute type 8 has an invalid length. [ 1120.604098][T21057] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1120.778916][T21069] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1120.934404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1120.942450][ C0] lec:lec_tx_timeout: lec0 [ 1121.092532][T21090] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1121.552293][T21119] lo: Caught tx_queue_len zero misconfig [ 1121.792559][T21140] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1121.849553][T21136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.852594][T21136] __nla_validate_parse: 10 callbacks suppressed [ 1121.852614][T21136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14933'. [ 1121.888641][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14933'. [ 1121.898812][T21150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14934'. [ 1121.929735][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14933'. [ 1121.951263][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14934'. [ 1122.085593][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14934'. [ 1122.178831][T21169] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1122.204234][T21171] netlink: 'syz.0.14943': attribute type 2 has an invalid length. [ 1122.378846][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14947'. [ 1122.418387][T21182] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1122.486575][T21186] macvlan0: entered promiscuous mode [ 1122.492284][T21186] macvlan0: entered allmulticast mode [ 1122.498412][T21186] `: (slave macvlan0): Error -98 calling set_mac_address [ 1122.549084][T21193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.693916][T21202] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14956'. [ 1122.741052][T21204] wireguard0: entered promiscuous mode [ 1122.746774][T21204] wireguard0: entered allmulticast mode [ 1122.756105][T21204] team0: Device wireguard0 is of different type [ 1122.941004][T21217] syz2: rxe_newlink: already configured on ip6_vti0 [ 1123.019020][T21220] netlink: 'syz.3.14961': attribute type 6 has an invalid length. [ 1123.034180][T21214] netlink: 'syz.3.14961': attribute type 6 has an invalid length. [ 1123.070450][T21228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14965'. [ 1123.080797][T21228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14965'. [ 1123.383023][T21250] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1123.416265][T21248] wireguard0: entered promiscuous mode [ 1123.429094][T21248] wireguard0: entered allmulticast mode [ 1123.442399][T21248] team0: Device wireguard0 is of different type [ 1123.520200][T21254] ipvlan4: entered allmulticast mode [ 1123.534683][T21254] batadv_slave_1: entered allmulticast mode [ 1124.046114][T21290] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1124.168445][T21297] macvlan2: entered promiscuous mode [ 1124.177718][T21297] macvlan2: entered allmulticast mode [ 1124.195321][T21297] : (slave macvlan2): Error -98 calling set_mac_address [ 1124.247090][T21299] wireguard0: entered promiscuous mode [ 1124.273571][T21299] wireguard0: entered allmulticast mode [ 1124.297349][T21299] team0: Device wireguard0 is of different type [ 1124.389549][T21314] netlink: 'syz.0.14995': attribute type 11 has an invalid length. [ 1124.422076][T21316] sctp: [Deprecated]: syz.1.14992 (pid 21316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1124.422076][T21316] Use struct sctp_sack_info instead [ 1124.476733][T21318] netlink: 'syz.2.14993': attribute type 7 has an invalid length. [ 1124.490283][T21318] netlink: 'syz.2.14993': attribute type 7 has an invalid length. [ 1124.638762][T21331] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1124.790945][T21339] macvlan2: entered promiscuous mode [ 1124.812574][T21339] macvlan2: entered allmulticast mode [ 1124.828770][T21339] : (slave macvlan2): Error -98 calling set_mac_address [ 1124.993789][T21357] wireguard0: entered promiscuous mode [ 1124.999611][T21357] wireguard0: entered allmulticast mode [ 1125.021592][T21357] team0: Device wireguard0 is of different type [ 1125.047064][T21363] x_tables: duplicate underflow at hook 1 [ 1125.071851][T21364] netlink: 'syz.1.15010': attribute type 21 has an invalid length. [ 1125.194238][T21371] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1125.317180][T21378] sctp: [Deprecated]: syz.1.15018 (pid 21378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.317180][T21378] Use struct sctp_sack_info instead [ 1125.406809][T21387] netlink: 'syz.1.15021': attribute type 1 has an invalid length. [ 1125.425162][T21387] netlink: 'syz.1.15021': attribute type 2 has an invalid length. [ 1125.529087][T21393] ip6gre1: entered allmulticast mode [ 1125.722790][T21411] netlink: 'syz.1.15025': attribute type 1 has an invalid length. [ 1125.809958][T21416] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1125.870614][T21416] bond6: (slave lo): Enslaving as an active interface with an up link [ 1125.876964][T21422] netlink: 'syz.1.15030': attribute type 16 has an invalid length. [ 1125.887048][T21422] netlink: 'syz.1.15030': attribute type 17 has an invalid length. [ 1125.942714][T21416] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1125.995673][T21422] gretap0: entered promiscuous mode [ 1126.036981][T21422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1126.054012][T21425] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 1126.090447][T20139] ip6_vti0 speed is unknown, defaulting to 1000 [ 1126.098195][T20139] syz2: Port: 1 Link ACTIVE [ 1126.132284][T11368] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xc5 [ 1126.145973][T20139] ip6_vti0 speed is unknown, defaulting to 1000 [ 1126.314909][T21450] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1126.416049][T21456] netlink: 'syz.3.15039': attribute type 1 has an invalid length. [ 1126.432302][T21454] wireguard0: entered promiscuous mode [ 1126.452238][T21454] wireguard0: entered allmulticast mode [ 1126.463547][T21454] team0: Device wireguard0 is of different type [ 1126.489612][T21466] netlink: 'syz.2.15041': attribute type 11 has an invalid length. [ 1126.538800][T21463] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1126.565650][T21463] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1126.581230][T21463] bond3: (slave vxcan3): making interface the new active one [ 1126.589725][T21463] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 1126.651436][T21477] netlink: 'syz.2.15045': attribute type 1 has an invalid length. [ 1126.652406][T21474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1126.832133][T21484] bond1: entered promiscuous mode [ 1126.837555][T21484] bond1: entered allmulticast mode [ 1126.841700][T21488] netlink: 'syz.1.15049': attribute type 1 has an invalid length. [ 1126.843129][T21484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.962107][T21488] netlink: 'syz.1.15049': attribute type 1 has an invalid length. [ 1127.007197][T21488] bond8: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1127.058720][T21488] bond8: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 1127.084772][T21488] bond8: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode [ 1127.097541][T21509] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1127.188287][T21495] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 1127.238822][T21495] bond8: (slave vcan1): making interface the new active one [ 1127.275323][T21495] bond8: (slave vcan1): Enslaving as an active interface with an up link [ 1127.327368][ T1641] block nbd3: Receive control failed (result -32) [ 1127.389008][T21524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.417670][T21516] syzkaller0: entered promiscuous mode [ 1127.453686][T21516] syzkaller0: entered allmulticast mode [ 1127.552761][T21537] __nla_validate_parse: 31 callbacks suppressed [ 1127.552780][T21537] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15061'. [ 1127.571399][T21535] netlink: 232 bytes leftover after parsing attributes in process `syz.0.15062'. [ 1127.586961][T21538] wireguard0: entered promiscuous mode [ 1127.603961][T21538] wireguard0: entered allmulticast mode [ 1127.616677][T21535] nbd: couldn't find a device at index 0 [ 1127.623713][T21538] team0: Device wireguard0 is of different type [ 1127.642066][T21541] netlink: 'syz.3.15063': attribute type 11 has an invalid length. [ 1127.646232][T21544] sock: sock_timestamping_bind_phc: sock not bind to device [ 1127.651919][T21541] netlink: 'syz.3.15063': attribute type 11 has an invalid length. [ 1127.666217][T21541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15063'. [ 1127.945886][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15067'. [ 1128.125381][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1128.147736][T21575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1128.174706][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1128.216393][T21575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1128.487312][T21599] wireguard0: entered promiscuous mode [ 1128.492824][T21599] wireguard0: entered allmulticast mode [ 1128.514923][T21599] team0: Device wireguard0 is of different type [ 1128.605036][T21602] syzkaller0: entered promiscuous mode [ 1128.631894][T21602] syzkaller0: entered allmulticast mode [ 1129.055923][T21633] vxcan0: entered promiscuous mode [ 1129.271057][T12333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1129.280955][T12333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1129.289555][T12333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1129.297885][T12333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1129.308274][T12333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1129.354587][ T1641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1129.362950][ T1641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1129.374787][ T1641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1129.383137][ T1641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1129.391343][ T1641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1129.778241][T21665] x_tables: duplicate underflow at hook 3 [ 1129.791669][T21667] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15095'. [ 1129.809566][T21644] ip6_vti0 speed is unknown, defaulting to 1000 [ 1129.842092][T21667] gretap0: entered promiscuous mode [ 1129.866951][T21667] gretap0: left promiscuous mode [ 1129.937546][T21674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.953697][T21667] 8021q: adding VLAN 0 to HW filter on device  [ 1129.963112][T21667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.972631][T21667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1129.993958][T21672] netlink: 88 bytes leftover after parsing attributes in process `syz.0.15099'. [ 1130.116176][T21644] lo speed is unknown, defaulting to 1000 [ 1130.116764][T21677] ip6_vti0 speed is unknown, defaulting to 1000 [ 1130.181240][T21683] xt_cgroup: xt_cgroup: no path or classid specified [ 1130.560318][T21644] chnl_net:caif_netlink_parms(): no params data found [ 1130.607669][T21677] lo speed is unknown, defaulting to 1000 [ 1130.657424][T21704] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1130.921307][T21644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.956419][T21644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.973143][T21644] bridge_slave_0: entered allmulticast mode [ 1130.981497][T21644] bridge_slave_0: entered promiscuous mode [ 1131.028166][T21644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.051136][T21644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.058735][T21644] bridge_slave_1: entered allmulticast mode [ 1131.066656][T21644] bridge_slave_1: entered promiscuous mode [ 1131.143334][T21644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.156003][T21644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.219701][T21738] IPv6: NLM_F_CREATE should be specified when creating new route [ 1131.264582][T21644] team0: Port device team_slave_0 added [ 1131.273822][T21644] team0: Port device team_slave_1 added [ 1131.309348][T21745] netlink: 'syz.4.15120': attribute type 7 has an invalid length. [ 1131.329571][T21644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.334527][T21745] netlink: 'syz.4.15120': attribute type 8 has an invalid length. [ 1131.337036][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.374127][T21644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.388927][T21644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.396346][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.424541][T21644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.425784][ T1641] Bluetooth: hci1: command tx timeout [ 1131.519336][T21644] hsr_slave_0: entered promiscuous mode [ 1131.528801][T21644] hsr_slave_1: entered promiscuous mode [ 1131.536739][T21644] debugfs: 'hsr0' already exists in 'hsr' [ 1131.542930][T21644] Cannot create hsr debugfs directory [ 1131.820744][T21754] x_tables: duplicate underflow at hook 3 [ 1131.927617][T21758] IPv6: NLM_F_CREATE should be specified when creating new route [ 1132.164150][T21768] atomic_op ffff88807d1b4198 conn xmit_atomic 0000000000000000 [ 1132.250832][T21644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.282901][T21644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.382761][T21771] syzkaller0: entered promiscuous mode [ 1132.388570][T21771] syzkaller0: entered allmulticast mode [ 1132.470619][T21644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.481248][T21644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.513601][T21780] syzkaller0: entered promiscuous mode [ 1132.520444][T21780] syzkaller0: entered allmulticast mode [ 1132.599613][T21644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.610673][T21644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.727577][T21793] __nla_validate_parse: 8 callbacks suppressed [ 1132.727599][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15130'. [ 1132.748501][T21644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.764602][T21793] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1132.768692][T21644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.778671][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15130'. [ 1132.864885][T21791] netlink: 'syz.3.15132': attribute type 13 has an invalid length. [ 1133.128368][T21644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1133.128810][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15136'. [ 1133.155805][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15136'. [ 1133.157028][T21644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1133.185473][T21644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1133.208316][T21644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1133.383963][T21644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.407553][T21644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.421420][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.428623][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.492105][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.499324][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.505834][ T1641] Bluetooth: hci1: command tx timeout [ 1133.675352][T21829] nbd6: detected capacity change from 0 to 63 [ 1133.691678][ T1641] block nbd6: Receive control failed (result -32) [ 1133.706419][T19470] block nbd6: Send control failed (result -32) [ 1133.715325][T19470] block nbd6: Request send failed, requeueing [ 1133.735652][ T5160] block nbd6: Dead connection, failed to find a fallback [ 1133.742704][ T5160] block nbd6: shutting down sockets [ 1133.748236][ T5160] blk_print_req_error: 138 callbacks suppressed [ 1133.748252][ T5160] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.765356][ T5160] buffer_io_error: 138 callbacks suppressed [ 1133.765372][ T5160] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1133.779153][T19470] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.788929][T19470] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1133.797292][T19470] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.808440][T19470] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1133.816756][T19470] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.827903][T19470] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1133.836105][T19470] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.851082][T19470] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1133.865940][T19470] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.875775][T21846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15149'. [ 1133.876188][T19470] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1133.892619][T19470] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.902185][T21847] syz_tun: entered allmulticast mode [ 1133.934545][T19470] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1133.936269][T21851] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15152'. [ 1133.942353][T19470] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.977916][T19470] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1134.004560][T19470] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1134.017825][T19470] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1134.033691][T19470] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1134.048310][T19470] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1134.071254][T19470] ldm_validate_partition_table(): Disk read failed. [ 1134.087785][T19470] Dev nbd6: unable to read RDB block 0 [ 1134.097190][T19470] nbd6: unable to read partition table [ 1134.137075][T19470] ldm_validate_partition_table(): Disk read failed. [ 1134.143927][T21644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.152213][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15154'. [ 1134.172213][T21856] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1134.181311][T21845] syz_tun: left allmulticast mode [ 1134.199147][T19470] Dev nbd6: unable to read RDB block 0 [ 1134.222940][T19470] nbd6: unable to read partition table [ 1134.268087][T21644] veth0_vlan: entered promiscuous mode [ 1134.312003][T21644] veth1_vlan: entered promiscuous mode [ 1134.350030][T21869] netlink: 'syz.3.15159': attribute type 1 has an invalid length. [ 1134.359488][T21644] veth0_macvtap: entered promiscuous mode [ 1134.366405][T21869] netlink: 'syz.3.15159': attribute type 1 has an invalid length. [ 1134.370417][T21644] veth1_macvtap: entered promiscuous mode [ 1134.394203][T21644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.468164][T21644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.504977][T31116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.519424][T31116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.560142][T31116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.570269][T31116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.619847][T21883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15165'. [ 1134.657642][T21884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15165'. [ 1134.674267][T31108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.682756][T31108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.688307][T21886] syzkaller0: entered promiscuous mode [ 1134.696755][T21886] syzkaller0: entered allmulticast mode [ 1134.760167][T31116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.770462][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15167'. [ 1134.786456][T31116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.071325][T21904] netlink: 'syz.4.15170': attribute type 1 has an invalid length. [ 1135.100334][T21904] netlink: 'syz.4.15170': attribute type 1 has an invalid length. [ 1135.238407][T12333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1135.258054][T12333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1135.268673][T12333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1135.277880][T12333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1135.287297][T12333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1135.403555][T21913] ip6_vti0 speed is unknown, defaulting to 1000 [ 1135.577035][ T1641] Bluetooth: hci1: command tx timeout [ 1135.786484][T21913] lo speed is unknown, defaulting to 1000 [ 1136.133536][T21913] chnl_net:caif_netlink_parms(): no params data found [ 1136.170988][T21959] netlink: 'syz.4.15184': attribute type 1 has an invalid length. [ 1136.463903][T21970] atomic_op ffff88807e55d198 conn xmit_atomic 0000000000000000 [ 1136.493061][T21913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.500389][T21913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.508831][T21913] bridge_slave_0: entered allmulticast mode [ 1136.520793][T21913] bridge_slave_0: entered promiscuous mode [ 1136.530631][T21913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.539557][T21913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.547079][T21913] bridge_slave_1: entered allmulticast mode [ 1136.556095][T21913] bridge_slave_1: entered promiscuous mode [ 1136.593518][T21913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.607114][T21913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.646693][T21913] team0: Port device team_slave_0 added [ 1136.657403][T21913] team0: Port device team_slave_1 added [ 1136.692830][T21913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.706159][T21980] netlink: 'syz.1.15191': attribute type 10 has an invalid length. [ 1136.720228][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.747517][T21913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.782269][T21980] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1136.793546][T21980] siw: device registration error -23 [ 1136.800561][T21913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.809223][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.862852][T21913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.016754][T21913] hsr_slave_0: entered promiscuous mode [ 1137.023751][T21913] hsr_slave_1: entered promiscuous mode [ 1137.032090][T21913] debugfs: 'hsr0' already exists in 'hsr' [ 1137.081250][T21913] Cannot create hsr debugfs directory [ 1137.334862][ T1641] Bluetooth: hci5: command tx timeout [ 1137.374994][T22024] netlink: 'syz.1.15206': attribute type 1 has an invalid length. [ 1137.604289][T22043] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1137.639510][T22043] bond7 (unregistering): Released all slaves [ 1137.655671][ T1641] Bluetooth: hci1: command tx timeout [ 1137.826630][T22038] syzkaller0: entered promiscuous mode [ 1137.832156][T22038] syzkaller0: entered allmulticast mode [ 1137.864295][T22060] __nla_validate_parse: 13 callbacks suppressed [ 1137.871000][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15215'. [ 1139.417752][ T1641] Bluetooth: hci5: command tx timeout [ 1139.457166][T22066] syzkaller0: entered promiscuous mode [ 1139.462748][T22066] syzkaller0: entered allmulticast mode [ 1141.050083][T22084] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.15220'. [ 1141.061771][T22085] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.15220'. [ 1141.361385][T21913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1141.386349][T21913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1141.420813][T21913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1141.463936][T22090] syzkaller0: entered promiscuous mode [ 1141.471267][T22090] syzkaller0: entered allmulticast mode [ 1141.497914][ T1641] Bluetooth: hci5: command tx timeout [ 1141.505243][T21913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1141.709457][T22125] netlink: 'syz.4.15230': attribute type 11 has an invalid length. [ 1141.740534][T22125] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15230'. [ 1141.803330][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15232'. [ 1141.811062][T21913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.848683][T21913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.875551][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.882732][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.920488][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.927657][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.286713][T21913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.366723][T21913] veth0_vlan: entered promiscuous mode [ 1142.389233][T21913] veth1_vlan: entered promiscuous mode [ 1142.430165][T21913] veth0_macvtap: entered promiscuous mode [ 1142.450211][T21913] veth1_macvtap: entered promiscuous mode [ 1142.482212][T21913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.512882][T21913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.549869][T11362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.575548][T11362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.608803][T11362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.633784][T11362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.762015][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.785923][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.886988][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.906017][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.983567][T22195] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1143.019790][T22196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15255'. [ 1143.403072][T22218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1143.456068][T12333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1143.468087][T12333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1143.476914][T12333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1143.485986][T12333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1143.493784][T12333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1143.574823][ T1641] Bluetooth: hci5: command tx timeout [ 1143.601085][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.622465][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.644639][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.725902][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.748983][T22227] ip6_vti0 speed is unknown, defaulting to 1000 [ 1143.762536][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.817045][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.865140][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.913594][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.976518][T22230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1144.026230][T22227] lo speed is unknown, defaulting to 1000 [ 1144.332762][T22227] chnl_net:caif_netlink_parms(): no params data found [ 1144.506209][T22227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.513476][T22227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.540822][T22227] bridge_slave_0: entered allmulticast mode [ 1144.549127][T22227] bridge_slave_0: entered promiscuous mode [ 1144.647617][T22227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.663304][T22227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.673063][T22261] netlink: 'syz.1.15270': attribute type 1 has an invalid length. [ 1144.674644][T22227] bridge_slave_1: entered allmulticast mode [ 1144.689093][T22227] bridge_slave_1: entered promiscuous mode [ 1144.789646][T22264] bond1: (slave ip6gretap1): making interface the new active one [ 1144.799691][T22264] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1144.812199][T22264] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1144.821054][T22264] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1144.878180][T22227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.923599][T22227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.963163][T22278] Cannot find add_set index 2 as target [ 1145.021077][T22227] team0: Port device team_slave_0 added [ 1145.046289][T22227] team0: Port device team_slave_1 added [ 1145.066097][T22287] netlink: 'syz.2.15276': attribute type 30 has an invalid length. [ 1145.082726][T22286] macvlan0: entered promiscuous mode [ 1145.088250][T22286] macvlan0: entered allmulticast mode [ 1145.093942][T22286] : (slave macvlan0): Error -98 calling set_mac_address [ 1145.108468][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1145.120978][T22227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.128371][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.156072][T22227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.169266][T22227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.176418][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.203211][T22227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.262908][T22227] hsr_slave_0: entered promiscuous mode [ 1145.267799][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15278'. [ 1145.269699][T22227] hsr_slave_1: entered promiscuous mode [ 1145.284136][T22227] debugfs: 'hsr0' already exists in 'hsr' [ 1145.291542][T22227] Cannot create hsr debugfs directory [ 1145.575440][ T1641] Bluetooth: hci4: command tx timeout [ 1145.649760][T22313] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15285'. [ 1145.818073][T22315] syzkaller0: entered promiscuous mode [ 1145.826477][T22315] syzkaller0: entered allmulticast mode [ 1147.629816][T22323] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1147.654861][ T1641] Bluetooth: hci4: command tx timeout [ 1147.763826][T22350] x_tables: duplicate underflow at hook 2 [ 1147.764712][T22353] Cannot find add_set index 0 as target [ 1147.954593][T22353] xt_bpf: check failed: parse error [ 1147.986219][T22361] tipc: Disabling bearer [ 1149.734445][ T1641] Bluetooth: hci4: command tx timeout [ 1150.927404][T22366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.936288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1150.936309][ C0] lec:lec_tx_timeout: lec0 [ 1150.956399][T22227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1151.082528][T22227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1151.119938][T22391] netlink: 'syz.1.15304': attribute type 11 has an invalid length. [ 1151.136846][T22391] netlink: 'syz.1.15304': attribute type 11 has an invalid length. [ 1151.152273][T22389] wireguard0: entered promiscuous mode [ 1151.160299][T22391] netlink: 204 bytes leftover after parsing attributes in process `syz.1.15304'. [ 1151.170311][T22389] wireguard0: entered allmulticast mode [ 1151.185199][T22389] team0: Device wireguard0 is of different type [ 1151.203594][T22227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1151.218800][T22227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1151.390283][T22410] netlink: 'syz.1.15309': attribute type 19 has an invalid length. [ 1151.485802][T22227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.512260][T22227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.568305][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.575488][T11362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.594232][T31116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.601384][T31116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.625945][T22416] syzkaller0: entered promiscuous mode [ 1151.634902][T22416] syzkaller0: entered allmulticast mode [ 1151.721681][T22430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15316'. [ 1151.817994][ T1641] Bluetooth: hci4: command tx timeout [ 1151.927283][T22445] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15318'. [ 1151.943833][T22227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.953831][T22445] net_ratelimit: 24 callbacks suppressed [ 1151.953847][T22445] netlink: ct family unspecified [ 1151.960311][T22444] wireguard0: entered promiscuous mode [ 1151.971362][T22444] wireguard0: entered allmulticast mode [ 1151.979946][T22444] team0: Device wireguard0 is of different type [ 1152.022056][T22227] veth0_vlan: entered promiscuous mode [ 1152.032911][T22227] veth1_vlan: entered promiscuous mode [ 1152.065386][T22227] veth0_macvtap: entered promiscuous mode [ 1152.079205][T22227] veth1_macvtap: entered promiscuous mode [ 1152.098176][T22227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.130897][T22227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.150079][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.160057][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.177000][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.186182][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.546221][T22419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1154.724840][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.732715][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.896356][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.904826][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.292868][T22500] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15336'. [ 1155.592567][T22517] bond8: entered promiscuous mode [ 1155.612299][T22517] bond8: entered allmulticast mode [ 1155.619001][T22517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1155.653270][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15343'. [ 1155.672708][T22522] bridge_slave_1: left allmulticast mode [ 1155.690086][T22522] bridge_slave_1: left promiscuous mode [ 1155.708399][T22522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.740457][T22522] bridge_slave_0: left allmulticast mode [ 1155.748530][T22522] bridge_slave_0: left promiscuous mode [ 1155.754607][T22522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.248340][T22559] netlink: 27 bytes leftover after parsing attributes in process `syz.3.15355'. [ 1156.421785][T22569] Cannot find add_set index 0 as target [ 1156.642362][T22591] netlink: 'syz.0.15363': attribute type 1 has an invalid length. [ 1156.863759][T22601] netlink: 84 bytes leftover after parsing attributes in process `syz.4.15368'. [ 1156.918638][T22613] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1156.963657][T22611] netlink: 'syz.1.15371': attribute type 30 has an invalid length. [ 1156.972964][T22611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.198810][T22638] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1157.246014][T22640] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15381'. [ 1157.351701][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15383'. [ 1157.528551][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15390'. [ 1157.573208][T22664] netlink: 'syz.2.15391': attribute type 21 has an invalid length. [ 1157.590609][T22660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15390'. [ 1157.592952][T22664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15391'. [ 1157.620807][T22660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15390'. [ 1157.680074][T22670] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15392'. [ 1157.766899][T22674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15395'. [ 1157.851205][T22679] openvswitch: netlink: IP tunnel dst address not specified [ 1158.222816][T22703] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1158.248734][T22705] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1158.710136][ C0] [ 1158.712507][ C0] ================================ [ 1158.717619][ C0] WARNING: inconsistent lock state [ 1158.722738][ C0] syzkaller #0 Not tainted [ 1158.727165][ C0] -------------------------------- [ 1158.732271][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1158.739113][ C0] kworker/u8:19/31108 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 1158.745780][ C0] ffff88807d7ab760 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1158.755079][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1158.760783][ C0] lock_acquire+0xf0/0x2e0 [ 1158.765279][ C0] lock_sock_nested+0x48/0x100 [ 1158.770122][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 1158.775312][ C0] rds_tcp_listen_init+0x168/0x410 [ 1158.780492][ C0] rds_tcp_init_net+0x154/0x380 [ 1158.785415][ C0] ops_init+0x35c/0x5c0 [ 1158.789648][ C0] register_pernet_operations+0x343/0x830 [ 1158.795439][ C0] register_pernet_device+0x2a/0x80 [ 1158.800706][ C0] rds_tcp_init+0xcf/0x170 [ 1158.805194][ C0] do_one_initcall+0x250/0x8d0 [ 1158.810031][ C0] do_initcall_level+0x104/0x190 [ 1158.815047][ C0] do_initcalls+0x59/0xa0 [ 1158.819455][ C0] kernel_init_freeable+0x2a6/0x3e0 [ 1158.824733][ C0] kernel_init+0x1d/0x1d0 [ 1158.829138][ C0] ret_from_fork+0x51e/0xb90 [ 1158.833804][ C0] ret_from_fork_asm+0x1a/0x30 [ 1158.838730][ C0] irq event stamp: 1622098 [ 1158.843117][ C0] hardirqs last enabled at (1622098): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1158.853695][ C0] hardirqs last disabled at (1622097): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 1158.863832][ C0] softirqs last enabled at (1622040): [] __dev_queue_xmit+0x274/0x38a0 [ 1158.873712][ C0] softirqs last disabled at (1622041): [] do_softirq+0x76/0xd0 [ 1158.882810][ C0] [ 1158.882810][ C0] other info that might help us debug this: [ 1158.890846][ C0] Possible unsafe locking scenario: [ 1158.890846][ C0] [ 1158.898275][ C0] CPU0 [ 1158.901532][ C0] ---- [ 1158.904793][ C0] lock(k-sk_lock-AF_INET6); [ 1158.909452][ C0] [ 1158.912881][ C0] lock(k-sk_lock-AF_INET6); [ 1158.917719][ C0] [ 1158.917719][ C0] *** DEADLOCK *** [ 1158.917719][ C0] [ 1158.925840][ C0] 10 locks held by kworker/u8:19/31108: [ 1158.931361][ C0] #0: ffff888067b72148 ((wq_completion)krds_cp_wq#10/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1158.943269][ C0] #1: ffffc900034f7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1158.956038][ C0] #2: ffff88807d7a8260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1158.966028][ C0] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 1158.975501][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 1158.984449][ C0] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1158.993480][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 1159.003034][ C0] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 1159.011919][ C0] #8: ffff88807d7ab6e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 1159.021565][ C0] #9: ffff88807d7ab908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 1159.031558][ C0] [ 1159.031558][ C0] stack backtrace: [ 1159.037426][ C0] CPU: 0 UID: 0 PID: 31108 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1159.037443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1159.037455][ C0] Workqueue: krds_cp_wq#10/0 rds_send_worker [ 1159.037477][ C0] Call Trace: [ 1159.037484][ C0] [ 1159.037490][ C0] dump_stack_lvl+0xe8/0x150 [ 1159.037511][ C0] print_usage_bug+0x28b/0x2e0 [ 1159.037532][ C0] mark_lock_irq+0x410/0x420 [ 1159.037555][ C0] mark_lock+0x115/0x190 [ 1159.037574][ C0] __lock_acquire+0x689/0x2cf0 [ 1159.037594][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1159.037617][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1159.037641][ C0] lock_acquire+0xf0/0x2e0 [ 1159.037657][ C0] ? inet6_getname+0x15d/0x650 [ 1159.037675][ C0] lock_sock_nested+0x48/0x100 [ 1159.037691][ C0] ? inet6_getname+0x15d/0x650 [ 1159.037705][ C0] inet6_getname+0x15d/0x650 [ 1159.037724][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1159.037741][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1159.037763][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.037783][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1159.037799][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1159.037820][ C0] ? ip6_input+0x16a/0x270 [ 1159.037839][ C0] ? NF_HOOK+0x336/0x3c0 [ 1159.037858][ C0] ? process_backlog+0x7dd/0x1950 [ 1159.037876][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 1159.037894][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1159.037912][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1159.037926][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1159.037942][ C0] ? worker_thread+0xa50/0xfc0 [ 1159.037961][ C0] ? ret_from_fork+0x51e/0xb90 [ 1159.037983][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1159.038004][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1159.038022][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1159.038045][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1159.038069][ C0] __tcp_read_sock+0x196/0x970 [ 1159.038085][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1159.038102][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1159.038117][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.038140][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1159.038156][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1159.038178][ C0] tcp_rcv_established+0x19f4/0x2740 [ 1159.038205][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1159.038227][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1159.038242][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1159.038258][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1159.038275][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1159.038293][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1159.038320][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1159.038333][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1159.038349][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1159.038363][ C0] ? raw6_local_deliver+0x116/0x950 [ 1159.038386][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1159.038399][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1159.038431][ C0] ip6_input_finish+0x191/0x370 [ 1159.038457][ C0] NF_HOOK+0x336/0x3c0 [ 1159.038476][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1159.038492][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1159.038513][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1159.038532][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1159.038553][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1159.038582][ C0] ip6_input+0x16a/0x270 [ 1159.038602][ C0] ? ip6_input+0x23/0x270 [ 1159.038623][ C0] NF_HOOK+0x336/0x3c0 [ 1159.038641][ C0] ? __pfx_tcp_wfree+0x10/0x10 [ 1159.038656][ C0] ? skb_orphan+0x4f/0xd0 [ 1159.038676][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.038695][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1159.038715][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1159.038735][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.038759][ C0] ? process_backlog+0x3eb/0x1950 [ 1159.038776][ C0] process_backlog+0x7dd/0x1950 [ 1159.038802][ C0] __napi_poll+0xae/0x340 [ 1159.038816][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1159.038833][ C0] net_rx_action+0x627/0xf70 [ 1159.038850][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1159.038874][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1159.038898][ C0] ? sched_clock+0x3f/0x60 [ 1159.038919][ C0] handle_softirqs+0x22a/0x870 [ 1159.038939][ C0] ? do_softirq+0x76/0xd0 [ 1159.038958][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.038979][ C0] do_softirq+0x76/0xd0 [ 1159.038997][ C0] [ 1159.039002][ C0] [ 1159.039007][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1159.039026][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.039047][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1159.039074][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.039096][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1159.039118][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1159.039145][ C0] ? neigh_resolve_output+0x438/0x750 [ 1159.039164][ C0] ? eth_header+0x11b/0x200 [ 1159.039184][ C0] ? __asan_memcpy+0x40/0x70 [ 1159.039216][ C0] ? ip6_output+0x126/0x550 [ 1159.039251][ C0] ip6_output+0x340/0x550 [ 1159.039270][ C0] ip6_xmit+0x1149/0x1980 [ 1159.039292][ C0] ? ip6_xmit+0x283/0x1980 [ 1159.039310][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1159.039333][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1159.039353][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1159.039367][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1159.039381][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1159.039394][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1159.039425][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1159.039451][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1159.039472][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1159.039510][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1159.039531][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1159.039545][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1159.039563][ C0] rds_send_xmit+0x207e/0x28d0 [ 1159.039606][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1159.039628][ C0] rds_send_worker+0x7d/0x2e0 [ 1159.039653][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1159.039672][ C0] process_scheduled_works+0xb02/0x1830 [ 1159.039702][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1159.039724][ C0] ? assign_work+0x3d5/0x5e0 [ 1159.039744][ C0] worker_thread+0xa50/0xfc0 [ 1159.039774][ C0] kthread+0x388/0x470 [ 1159.039793][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1159.039811][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.039825][ C0] ret_from_fork+0x51e/0xb90 [ 1159.039845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.039863][ C0] ? __switch_to+0xc7d/0x1450 [ 1159.039880][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.039895][ C0] ret_from_fork_asm+0x1a/0x30 [ 1159.039929][ C0] [ 1159.659877][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1159.668647][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 31108, name: kworker/u8:19 [ 1159.678052][ C0] preempt_count: 303, expected: 0 [ 1159.683053][ C0] RCU nest depth: 5, expected: 0 [ 1159.687974][ C0] INFO: lockdep is turned off. [ 1159.692706][ C0] Preemption disabled at: [ 1159.692711][ C0] [] __dev_queue_xmit+0x281/0x38a0 [ 1159.703682][ C0] CPU: 0 UID: 0 PID: 31108 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1159.703696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1159.703703][ C0] Workqueue: krds_cp_wq#10/0 rds_send_worker [ 1159.703721][ C0] Call Trace: [ 1159.703727][ C0] [ 1159.703733][ C0] dump_stack_lvl+0xe8/0x150 [ 1159.703748][ C0] __might_resched+0x378/0x4d0 [ 1159.703765][ C0] ? __dev_queue_xmit+0x281/0x38a0 [ 1159.703782][ C0] lock_sock_nested+0x5d/0x100 [ 1159.703794][ C0] inet6_getname+0x15d/0x650 [ 1159.703808][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1159.703820][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1159.703835][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.703848][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1159.703859][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1159.703871][ C0] ? ip6_input+0x16a/0x270 [ 1159.703889][ C0] ? NF_HOOK+0x336/0x3c0 [ 1159.703901][ C0] ? process_backlog+0x7dd/0x1950 [ 1159.703914][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 1159.703925][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1159.703938][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1159.703947][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1159.703958][ C0] ? worker_thread+0xa50/0xfc0 [ 1159.703971][ C0] ? ret_from_fork+0x51e/0xb90 [ 1159.703986][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1159.704000][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1159.704011][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1159.704026][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1159.704041][ C0] __tcp_read_sock+0x196/0x970 [ 1159.704052][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1159.704063][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1159.704073][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.704086][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1159.704096][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1159.704110][ C0] tcp_rcv_established+0x19f4/0x2740 [ 1159.704128][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1159.704142][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1159.704153][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1159.704163][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1159.704174][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1159.704186][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1159.704204][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1159.704212][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1159.704223][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1159.704232][ C0] ? raw6_local_deliver+0x116/0x950 [ 1159.704247][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1159.704256][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1159.704276][ C0] ip6_input_finish+0x191/0x370 [ 1159.704296][ C0] NF_HOOK+0x336/0x3c0 [ 1159.704317][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1159.704336][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1159.704356][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1159.704374][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1159.704394][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1159.704419][ C0] ip6_input+0x16a/0x270 [ 1159.704442][ C0] ? ip6_input+0x23/0x270 [ 1159.704462][ C0] NF_HOOK+0x336/0x3c0 [ 1159.704480][ C0] ? __pfx_tcp_wfree+0x10/0x10 [ 1159.704495][ C0] ? skb_orphan+0x4f/0xd0 [ 1159.704514][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.704533][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1159.704551][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1159.704572][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.704595][ C0] ? process_backlog+0x3eb/0x1950 [ 1159.704611][ C0] process_backlog+0x7dd/0x1950 [ 1159.704636][ C0] __napi_poll+0xae/0x340 [ 1159.704651][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1159.704667][ C0] net_rx_action+0x627/0xf70 [ 1159.704683][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1159.704707][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1159.704729][ C0] ? sched_clock+0x3f/0x60 [ 1159.704750][ C0] handle_softirqs+0x22a/0x870 [ 1159.704769][ C0] ? do_softirq+0x76/0xd0 [ 1159.704788][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.704808][ C0] do_softirq+0x76/0xd0 [ 1159.704825][ C0] [ 1159.704830][ C0] [ 1159.704835][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1159.704852][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.704872][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1159.704902][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1159.704922][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1159.704943][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1159.704965][ C0] ? neigh_resolve_output+0x438/0x750 [ 1159.704982][ C0] ? eth_header+0x11b/0x200 [ 1159.705001][ C0] ? __asan_memcpy+0x40/0x70 [ 1159.705034][ C0] ? ip6_output+0x126/0x550 [ 1159.705051][ C0] ip6_output+0x340/0x550 [ 1159.705069][ C0] ip6_xmit+0x1149/0x1980 [ 1159.705090][ C0] ? ip6_xmit+0x283/0x1980 [ 1159.705108][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1159.705122][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1159.705135][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1159.705144][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1159.705153][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1159.705161][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1159.705184][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1159.705200][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1159.705213][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1159.705237][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1159.705250][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1159.705260][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1159.705271][ C0] rds_send_xmit+0x207e/0x28d0 [ 1159.705292][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1159.705306][ C0] rds_send_worker+0x7d/0x2e0 [ 1159.705319][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1159.705331][ C0] process_scheduled_works+0xb02/0x1830 [ 1159.705349][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1159.705362][ C0] ? assign_work+0x3d5/0x5e0 [ 1159.705375][ C0] worker_thread+0xa50/0xfc0 [ 1159.705394][ C0] kthread+0x388/0x470 [ 1159.705403][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1159.705415][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.705423][ C0] ret_from_fork+0x51e/0xb90 [ 1159.705436][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.705447][ C0] ? __switch_to+0xc7d/0x1450 [ 1159.705459][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.705467][ C0] ret_from_fork_asm+0x1a/0x30 [ 1159.705486][ C0]