last executing test programs: 2.443910441s ago: executing program 4 (id=5396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x368, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "e334437f58f499552a161b0a9c2c31f2fc16bd16d9e40c15801393ee44eeb06fbe4de6a703abd2f1b3a2f4f2f2e338b8033c98bfff12c0a225badeb8bf3a6c8e69c945b1c8f8fffb6834fb1b2be830c8e14fb7503166a1598c99677fa162dcf61fe6c53216f3a173a9"}, @NFTA_RULE_USERDATA={0xe1, 0x7, 0x1, 0x0, "5b71bb42d3964b62d4e6187ed87824700d7de0ad8e8727e9f933847280d9edf898f63f0c3851ac3d800a608fe987acf20c156fb5318251e23bce55ff5e9cf272eba12e9690f17e37e1d939869990d90f35a8dd5323bf643a1047b7b1c978f5ab6c9fc8d5771699f245d1667022737ea3d1a2df1dcfea24128860dcbde5f582b856049b54dbabbe436ea366e422e1ffb603ce7eda482655efe8406838ecf8aab3b8f8fc366f3cfa0d69436ca34eff2ba6a8d884ac6b8c1b88f52714719ca140712fb32a838a5d521a27a7ea614f680cdf67afc9feb175011144c357fe9f"}, @NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xa7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xd2, 0x7, 0x1, 0x0, "cca75adba58c6131d1a81eb985eee9ce7c586dec50a58ffc88803033fa91d860e1cec3327d1c7589d0d2a49b14f913020d55e2282f70a42adc0c553e088f74892ec3c7e39a8209625469f69cae8bb2e3b6084c703137135f62192dfc7ebbbafeeffa2413e5bbaeff291e9d3d2f0ab9908ab33817c2178844bbda1fb4732aebc30bd982513f6590e433131059047b0829727e7e519134df573c3fe40de3286e35162938bfe1148aefa1385386179fdffb4b8f5d5d8426815aa8e570512a0ff68336972c7b88edb8986ac633aac76c"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x8d8, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13c, 0x3, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "8612a9770a559d26c098aced958b3654a07df055a3107a51d92b369e4ad335ab7cf964c9d071943e0f0f6566ef8d161762b5ba92803d35b8cdf60cee340860471554fafc60a0272c58fd0a64d820473d63962be0746dfbaa53c6b2d7846ab812ac5a6b4f9c597b8eb92ded6ed4f720a96e397fc2d11cd26af25ed02a4c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x65, 0x1, "1ad7c6596558e5a2606954c0c2dfdb0c6178f355337f93c7e5140a7597ac0a7aec466473b79c43d5d3084fb4520c409e5535e356249acb7d160875b107fd5d02b6c212e6ff12ab04ca4b817e576724d3f356c803583685b77ea6cdd03985356463"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x770, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x102, 0x6, 0x1, 0x0, "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"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x240, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "21b2b5c0cc07da5499cd4bfdff50079a1b1d2e9e984b962ee644142ab88fa89a874667a712fc75f9d01fbcf5521f368ed88d4f956050833d9dba009e766b4811348d566da4291229352ddcb269ecd5a1a94a465d2ce638105f97c5b8dff46cfadae702ffb54fa4a9537abe0a0ab531c0d1e6a1af5d2a5c7d2ac95865abed51c9e3ba35955b4a11486d454313ee937f34e9e882a16955b193da377f6b2271e9584fadb3453d89b87f442af7c11a6a5c1f10d8cceacc317396b1e9889bec5c0a69a97bcfa1a698113d0f5067c2888fc3ffef365985c1b3f55efeb3df5756f336f81c8e41c509fb73004bf787dc6f27a6ade1f833c50b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "bea13e54c85360d1a1d5ad44651cd0b41ca877f5b165f1cbea74be36e9cedf9d75970ac11d5f3c194809f8dfb4fdd5a3b95d56d3ac4c2ed1c820f105fbb8b95484656603aff58681e2333dd9c1b24d59d56bb12ec09be63a1bd754c5a048d160fcee643a691dc966f43e30e485123494a9c5d0c5f0cc36ae2f157d75daa4a5fcddf5feb48412d341ddaf2823dff134ecd53110f87e52673fb85247e8fa0a62af1c0771ff489199dc1abb929ab8436ec4db3d2fa92cb1406fea"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f813fda0f09af397f549f4d827b51c9ffb1f34d71942b484bf65b08527cdb0cff8d4a4c023c5c5515d931195d7f9210a89fc1a7c681f05e6c4dff3734b01891c24b5828648992d2416b4a76c5e05b29ca11f18644ddab196c5"}]}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "beed0a8c62c4fe2ee4c173a450b04b6fa04b1e73d6980b2e38df3a67b6a26de08688ecf9e05051879f8265b60b4a10a3af81cb886ff098926e002340d65a232ca2c3e9503b9a18f11df2408370"}]}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xa, 0x6, 0x1, 0x0, "6e381d41e91d"}, @NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "b35f3488c16d088d26c6f6f9c2481d30ca51c572e96230c4d1fb91af1e8e06a747c081bcf6e5078425e3efa68c5df031839c694ca4b47982767ef3b2e6c9aa066a12e50af295551081db1b779fc01fae50016480b4935198d8138284f9f10ee1ab6f1b8142339604dd021f3d55a8a0d57a778984c8295e98aa3a9705953a7f130d"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "e5f5d4a6c7260da060f9d21f1a378e8828b35ee2ac113e5fae68527d3d666a4ceb1be7893cd4c9e3f6a2b55f41585e383e930edf10a79e51c514"}, @NFTA_DATA_VALUE={0x66, 0x1, "bbd1a04bb34926967da8df5e055acbd2607b43fa6e56beadae9fcf2bc918feee06daea31a4c31023f555a012b60b2b4e4fcf9e6574678844b8e03d2f748890458040bf6fcdde193de1bd5380dfe659367132f3c9a0ebb72449d6d2756c22feb16623"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "b1e129276c6e533560dadd5046467c01d05c545953745d9d64df170a86e5dbcc79a57d5daffe23e3e9e31c491cecd60494ae3a4bb0a631d75faeba3da7dd19bfacc9fdee925746cc483e087436ae1c48faa690e0cbc116e4fbabed5c961d481c50fbcd040e2d1cb1897d213eeb896c9e4a8752d189f61c5a52d0f08205b1c9f8e09df49f58"}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "2715a14ae5b8edbe0f9620d46e62b15d4d0d6b5ca23a55491eb6d1e1400c41ae8963e7ce61192c4299907d9d6fba4b188da542eef2d5de4338fd1734f7635531ef0f734e32b49335492e2323fa8010984173b9bf851d2470ef4d826e1db2cea65c88708b85e2d4e2138976400d7a9f8840503863b3cd2624258a4577654311f0feca9e5f53ff13326244e7ff272387af80c9af3ae279a3d49968f59dfc3e428c649d932e6309ec303beedf25c1136501f52312b0b16a3431b460e70b6f9613c1f1d6b7cbfe0b73a22db4e54ef3c33210779d1c2f4b5a52d119b606e206d37986d74a016a387e8477b0"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc68}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000200000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 2.234491817s ago: executing program 1 (id=5398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000090a01040000000000000000000000080900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d0800034000000130080008400000e70108000c"], 0x7c}, 0x1, 0x0, 0x0, 0x4044050}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000) 2.147028842s ago: executing program 4 (id=5400): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) 2.018481519s ago: executing program 4 (id=5403): unshare(0x62000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000080)=0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000440)={0x2, 0x1, 0xc030, 0x5d5, 0x5, 0xee9, 0x6000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x98, 0x1d0, 0x0, 0x98, 0x138, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x310}}, {{@ip={@empty, @local, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5e, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x0, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448c9}, 0x24000080) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffe, 0x20}, 0xc) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000005380), 0x0, 0x4090) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 1.876617436s ago: executing program 1 (id=5406): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004045}, 0x48801) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$kcm(r2, &(0x7f0000000880)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)="9037c42fe2f30f03283baacd6f0c792c298b4bd053be400ea41e8198ed464d725c95e1266f76cd6435fb36af71d0b607c9efa73723395d307dbe78aceaba6872ba03de5ec26e6d21bf38f122ec16888a1bd52d0401bd5665d00d2d2cd49d80c0d9321cf9df8c388e7a8b4c2a2a8c924d393949767b616e81b3f1f8b16a17730d9e46f84baa4f39ac66f5d2737eb13d5ffa5028", 0x93}, {&(0x7f0000000280)="c6b894a72f44f5610cbca334edab58e421fb7ce0cbb97c424e7dce0d4b26971e93c5f0417998824bc0e236d1fcac1a8308c97f7a09fb", 0x36}, {&(0x7f0000000600)="56b932150e15800ce2f6fa7dcbab6f39a464500d72e1f1844d81396912aed6273c57d03eb55ff054eaee93ae5d3a2ec95313279ae02f127a501d68dfcd8d4af3ef01f15f3178befe95fba1e3908dee17dea655b6f6e2f649881d56b864f7c07a75e5fe06d5122c5ae0c704fca4c8d1341138ee30f10dde59dd52e1e806c777f554bf213464154b0ae12986037d79ab0d8f37f321884bf268395db4e8cbea13cc6b471621ed651c3300df2f7d990f63f01b665f6c9a3a257dba51f1528a187797c7103dd8974adfbbe5d3d80a5629e7ab60de431f09a5067e08ea30494ef21003a4ab48d0de7a80529c", 0xe9}, {&(0x7f0000000500)="4042f910cf38bf86bd72e49624b3b888f80ceea922683c9f144202dd83cc6f86e754e8f0d28a037e808ac28d3d1788242ec1c16a86262966e38e3d79b2c2a85613d14764984be20aae9ce1495389ffe9cf5ed5b4644814970585c8a2cd6c7d674bd0e81671723aeb69b1cc813d7c538adcc10b", 0x73}, {&(0x7f0000000700)="99db9f47e4079a5077bf9ae8a933caf4d78077ee41e311229dd1d1ce8087876f1e1bc2d4c8ae1e8847cca3e1030b858b84511758254e321cd3547389f3d7371b82c475478c000c57df4d", 0x4a}, {&(0x7f0000000580)="852901283d9064338068fc15deef69c56ab90b0e9690d49756fa78c99d3d4580ea52cbef9b9b06b8007a1ec4faf66cb272c6360c4720c6fc", 0x38}], 0x6, &(0x7f0000000800)=[{0x58, 0x114, 0x6, "b06bb30ecc2780369dccd5474a088236021ee1664a15ac69f2107ffb4868618749637cae44799ee205999248ea22b231bfb7507b21e446cc1990cd7d0dba14d4bf"}], 0x58}, 0xe7b016b04281a1e9) close(r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000007, 0x4010, r1, 0x5f453000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r7, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0xe56}], 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000100)={@qipcrtr={0x2a, 0x4, 0x7fff}, {&(0x7f0000000000)=""/130, 0x82}, &(0x7f00000000c0), 0x40}, 0xa0) 1.834003496s ago: executing program 3 (id=5407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x6, 0x0, 0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.701323854s ago: executing program 3 (id=5409): unshare(0x20040600) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x555}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x555}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.657156824s ago: executing program 2 (id=5411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x8, 0x4, @local}]}]}}}, @IFLA_PROMISCUITY={0x0, 0x1e, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) 1.588249845s ago: executing program 3 (id=5412): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000000)="063149e918573e35990c43519d754d0338708289d157d9392806d554798a6d8eb81d", 0x22}, {&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="aa325cb20bae33ee3582fe8096ab741366b7df1d79e40c1a007608391afc079baff05ce1760471d63ddbf2d915b95e67be087667ec1478ea1f076fea87be4b11c2aa285c603568b4454f110586d8d2d57f3597799ee50a6189eec6768456ffc1c9ee004daec40408772c2dc6b900f02803fe9d56ea40582d48aec2747376447faf91cf50ae17118bd8284d89a24a98e7befc483390b148d507c22e72df3eb2093990a60cef01d9de269db3016f27d049a2118d128695c9f7e33c8789139c2c0939e4671fcbe73d6621014565e4a7a59b1d153e979a4d74ac", 0xd8}, {&(0x7f0000002140)="06a17df0433be18badb109aa2794883881b9ab329853dabea6781345bee0e844502b7027da30e771", 0x28}], 0x5, &(0x7f0000002200)=[{0x88, 0x10b, 0x8, "bc4fbff52ccaa9cd88024ea4a3bef0663f73a6b80e749f9da31b9f85bf43bfdcb4d7cb0453452b39eb428d872ad7f71e818a5917df5a88f6cf75ba1016b83988acd91d8c11be012f56dbfb461c5b9197051ab2bb663868bdfb2549745fee795363086656f319b3fdf6455cad0a8ddaba46b43acf9c"}, {0x20, 0x116, 0xfffffffe, "389b0f574f66306798b23b0e0e94c8d8"}, {0x90, 0x115, 0x100, "a318541db6e8b29c5153f9a722dbd0a3f637c1fe4d0bb7a097a3f5e33fa29a665a2335cab58d29e6e4201b677ecebc5da3acc296a8a8facdf3872c21c0615e080c2cfb77be56a7ae25a2fca80d2495ea251e6b4b4cdb0b73354de4027f92bfdb883713290a641a18aa6ec56ef8819e00114ece2f03c52286e4"}], 0x138}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000002380)={0x2, 0x0, @broadcast}, &(0x7f00000023c0)=0x10) listen(r0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000002400)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000002480)="bb098b283b45ac36b2555b91f1906ff74fe4372c9f73536834035e6370678a2943bfe9dd5b64eff1d9e91f726669f598c3bd1c26e41591fd88701553132afd95fe586c98d0780b95b6416d1f8b0de48ec95f52f2607398e21fce1da28c0e6732187af0c71922bf5fdfc9170dfa974adecf404d2102577a5466620b176c27be512b35abd24ddb416651336ec26500668db8a5d63c74de7eafbdfc66666ad3ca9aefae181cfd519d7c45612611247956c7a67838a5011544bf47fbbe60802e89cca443a803fa6770861c5d0f536c14939fb33fa8e91ba4af5ee2afea3d82fbf7a5b3fa32", 0xe3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000025c0)={'vcan0\x00', &(0x7f0000002580)=@ethtool_ts_info}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002600)={0xb, 0x1, {0x80, @struct={0x217, 0x4}, 0x0, 0x10000, 0x24e, 0x7, 0x1, 0x5, 0x10, @struct={0x80000000, 0x3}, 0x8, 0x8, [0x5, 0x3474bd92, 0xc, 0xf3c6, 0x6, 0x95]}, {0x4, @usage=0x44, 0x0, 0x9, 0xd45c, 0x7fff, 0x5, 0x948c, 0x11, @struct={0x4, 0x5}, 0x8, 0xffffff01, [0x4, 0x0, 0xd9, 0xffffffffffffffff, 0x800]}, {0x7, @struct={0x9, 0xe}, 0x0, 0x100, 0x5, 0xf, 0x0, 0x9, 0x44, @usage=0x8, 0xff, 0xfff, [0x4, 0x85, 0x7, 0xdc, 0x6]}, {0xa, 0xffffffffffffffff, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002a00)={r2, 0x40000000000, 0x7fffffffffffffff, 0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000002e00)=0xfe6, 0x4) r4 = accept4(r0, &(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000002ec0)=0x80, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000002f00)=[{{0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x20) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000002f40)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002f80)) write$bt_hci(r4, &(0x7f0000002fc0)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xb) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) listen(r1, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r4) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) r6 = accept4$phonet_pipe(r4, &(0x7f00000030c0), &(0x7f0000003100)=0x10, 0x1c00) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000003140), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000031c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003300), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000034c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003340)={0x134, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7c70}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x134}}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003500)={'team_slave_1\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000003540)={0x0, 0x5, {0x7, @usage=0x2, r2, 0x81, 0x6da7, 0x4, 0x3, 0x6, 0x42b, @usage=0x68, 0x1, 0x9, [0x0, 0x8000000000000, 0x9, 0xd0, 0x6, 0x4]}, {0x4, @struct={0xe, 0x1}, r3, 0x8, 0x1, 0x280000, 0x7fff, 0xd, 0x8, @usage=0x5, 0xffffffff, 0x7f1, [0x4, 0x2, 0xffffffffffffffff, 0x5, 0x8]}, {0x4, @struct={0x4, 0xfff}, r3, 0x101f, 0x0, 0x1, 0x5, 0x80, 0x40, @struct={0x3, 0x1}, 0x2, 0x7, [0x3, 0x8, 0x9, 0x0, 0x978]}, {0x200, 0x3, 0x800}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000003940)={0x7, 0x1, {0x2, @usage=0x5, r9, 0x4, 0x100000001, 0xfffffffffffffff9, 0x4, 0x0, 0x41, @struct={0x2, 0x8}, 0xe, 0x1, [0x5, 0x3, 0x400, 0xe3d7, 0x0, 0x4]}, {0x81, @usage=0x8, r3, 0xa, 0x1, 0x7, 0x81, 0xe, 0x91, @usage=0xca9, 0x7fff, 0xcfa, [0x4, 0x4, 0x4, 0x3, 0x4b, 0x7b]}, {0x6, @usage=0x101, r3, 0x8, 0x1f13, 0x785b, 0xb3, 0x5b26, 0x8, @struct={0x1, 0x10000}, 0xd97, 0x9c0, [0x8, 0x8000000000000000, 0x4, 0x5, 0x7, 0x5]}, {0x7, 0x4, 0xfff}}) 1.463473593s ago: executing program 2 (id=5414): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, r1, {0xf, 0xd}, {0x3, 0x2}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) (async) r4 = socket$rds(0x15, 0x5, 0x0) recvmsg(r4, &(0x7f0000000080)={&(0x7f0000000100)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002580)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f00000014c0)=""/176, 0xb0}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x5, &(0x7f0000000000)=""/48, 0x30}, 0x40000000) bind$rds(r4, &(0x7f0000000040)={0x2, 0x1001, @local}, 0x10) 1.374566477s ago: executing program 0 (id=5416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x20048000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x20048000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) (async) 1.168823537s ago: executing program 0 (id=5417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x200000000000006a, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x45, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2b2}, 0x94) 1.124621461s ago: executing program 4 (id=5418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="2804070010180000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="ef9d21f1a84175c60c62bb9cdc42ecd1b5ab2082845cb9c9eda48e48c6f9beba5ecc6374e661a3cc04956f52939ba8c0ba57caaca2fc2cd3ad1e78a0710b20a9437dcdee56fb85ed156ce0e9f3bd962f34d0452a8a85d3a3a00000000000009a06216272ef95dff8afaac8b2792b038e42b2e4000000000000cb0000000000000000007802f28b0f139dadbdcb24d1c4c1d8c753a2222b1adee5c630f434660b45abced2e0178d61fbd8"], 0x40}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.038979986s ago: executing program 0 (id=5419): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 941.06416ms ago: executing program 1 (id=5420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x844, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x818, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x7a, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0xc, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x6, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x86, 0x3, 0xfe000000, 0x3, 0x9, 0xff, 0xffff1cac, 0x2892, 0x6, 0x18c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x1003, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0xd, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x7d73, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x800081, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x1485, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x5, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x8, 0x4, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x3, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x2, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0xa, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="9771000011000000ba5eb13c65772450f37e05e4ebfe5c10906a0d390c2782453b60598d23f82c95164078e7bfecdd1c351f02cc0d61303696d967463eec78"], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)='\a', 0x1}], 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000060000005dea000000000000", @ANYRES32, @ANYBLOB="1c0000000000000900000000fbffffffffffffff708fef6ffbd4a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r6}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001) write(r8, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010003904fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000002c000280140003000000000000000000000000000000000114000200fc0200000000000000000000000000000000000000000000000000000000005e982ecc7175f2239d44d7eae9b418a3b0da609e7d637ce1cc79ff0da0a74e259618738ec7caa30f33ba4b0174947757d74592"], 0x5c}}, 0x0) 940.083598ms ago: executing program 4 (id=5421): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x101, 0xfffffffffffffe0a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000050000000900010073797a30000000004c000000030a01080000000000000000050000000900010073797a30000000000900030073797a320000000014000480080002400000001408000140000000020b000700e6696c746572"], 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000000c0)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x80) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000140)=0x68) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x5) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000300)='\x00', 0xa00, &(0x7f0000000340)={@_ha_fsid={[0xffffffff, 0x5fc]}, {0x4, 0x3, 0x3, 0x4}}, 0xffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x2641}, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000480)={r9, 0x80000000, 0x634, 0x1ff}, 0x10) 817.376047ms ago: executing program 0 (id=5422): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0xfffffffffffffeb8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 802.675127ms ago: executing program 1 (id=5423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xedf, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xfffffff7, @empty, 0x5}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0xf1, @local}, @in={0x2, 0x4e22, @multicast2}], 0x6c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8, 0x4, [0x6, 0x100, 0x2, 0x7]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r2, 0xe}, 0x8) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={r2, 0x9, 0x9, 0x9, 0x7, 0x244, 0x1ff, 0xfffffff8, {r2, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x8, 0x3, 0x6, 0x6, 0xc}}, &(0x7f0000000240)=0xb0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x8090}, 0x4004) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r4, 0x9}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000480)={r8, 0x0, 0x6c}, &(0x7f00000004c0)=0x8) (async) r9 = socket$inet6(0xa, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000500)={0x5, 0x3, 0xd, 0x20, 0xd, 0xab, 0x6, 0x8, 0xfe, 0x2, 0xe4, 0x6, 0x7, 0x88}, 0xe) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000580)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000640)=0x5, 0x4) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000680)={'batadv_slave_1\x00', 0x200}) (async) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r5) sendmsg$SMC_PNETID_GET(r11, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r13, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x1) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000900)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x3, 0x9, 0x2, 0x4008, 0xffffffffffffffff, 0x1, '\x00', 0x0, r12, 0x1, 0x4, 0x1, 0x1}, 0x50) 581.23304ms ago: executing program 0 (id=5424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x401, 0x0, 0x10000}, 0x609d, 0x4, 0x8, 0xfffffffa, 0x2738, 0x2, 0x18, 0x1, 0x6, 0xe, {0xe389, 0x5, 0x5, 0x0, 0x9, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x7, 0x0, 0xa8, 0x0, 0x2, 0x65}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x24008080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x8}}}}}}}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r8 = bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r7}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r9], 0x20}}, 0x4000) 580.194717ms ago: executing program 3 (id=5425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) unshare(0x8040480) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 564.229821ms ago: executing program 1 (id=5426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x90) 545.835199ms ago: executing program 2 (id=5427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xf51a, 0xb0, &(0x7f0000000200)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0, r2]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) 333.044001ms ago: executing program 3 (id=5428): r0 = getpid() r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) unshare(0x8040480) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x27, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xffffffffffffff81, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci, @DEVLINK_ATTR_NETNS_PID={0x0, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 326.925079ms ago: executing program 2 (id=5429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r9, 0x301, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 314.345695ms ago: executing program 4 (id=5430): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xd0256000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a5bd681f5807f70cafc37317f221f64a2ed24f5fdbe31ece0e089e8e5789717adcb39d07ef9517052f9926b42a6d9cc315195ac9244400c4e7cd709fa21ab28afd7059212f906abdbf12e55c4ac2e098daf982081e8ae6b401056a9740f9c06da4e3b23ac4ba93593992f099f2b5f53b1d84428517da38bca362b32d6e8d922abbdaed046dfec9fc04a246f76c2f149bdad7998d47f3ea898675049b14130f93b6be87ed767c064330dccc13ef2ba1798bf6303a6cadd37a43606647be860"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010024bd70e1f4dbdf25030000000c00018008001c00", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@delchain={0x34, 0x11, 0x1, 0x20001f, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0xd}, {}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xa3}}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000f00000000000000080000002a290000000000009500000000000000818494b26df507816d9b6123e62f4465eedaf2ba23fa5e37d2ee9aa9c90e391b6a29ada6b4b799f67b30617659fbe07fc6ea3966b64efb1012f3811a36820944ceed1f603fd2b32dae436897ed61c4efab72379edd165c9652aeecb06ab523d2363d036f3e7fa9eafb40a290bc3c05293c6a764749e961564ff0f0"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x40, &(0x7f00000008c0)=""/64, 0x40f00, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x6, 0x10000}, 0x10, 0x155f2, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) pread64(r11, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) readv(r10, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x8, @none, 0x2, 0x2}, 0xe) 192.383951ms ago: executing program 0 (id=5431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x10, '\x00', 0x0, @fallback=0x16}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000000000008400000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c86daf8ae7d67f28da2efdee376b9c0f8dbe853a1f75f2d204809cde448510e7ba5944dd80061f9e595b5607372f820c1e5d3baf8cd93eea12e08e4a231c2a11150c3dd7e3ea3ccf76d533d56861c325ec7df7f8601e4594b35a677f27eb0d362085154e5db3e900b97bf17f9defb92e3ad906c718eb00ae356a67099a7c01cc9ad45c03158c098db3697319e2f0bea5d0e50daf8fb33df93158cf41822559b77e0ecbb0ae5a39c433d55c76f6d2b0908d466973cfa124befce1b55440fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, 0x0, 0x20000000, 0x4}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@nfc_llcp, &(0x7f00000004c0)=0x80, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) pselect6(0xfffffffffffffdc6, &(0x7f0000000040)={0x3, 0x3, 0xd, 0x7fc0000000000003, 0x1, 0x1004, 0x2000000000000007, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r10, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1000}) socket(0x29, 0x4, 0x6) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000a40)="2e9b3d0007e03dd6e4cf52c0e272b38d8864", 0x12}, {&(0x7f0000000280)="0000001c13ee818c790a49ec82d6c24e51f916c156ec9ad24ba51ff4c7edb494994e4d2b80b9139540334ffe28550c052079f2b66b9a1b536490c4223d17b06fee8b24d29d61882790617127aa5ffb23feb1602f45fa60ef497d667185fcc27ecf076c08670bfce6501f9b16827db902957acfeab7762011ca1eb6e9b5570298bdc0f757a2b289991c13ab88da72b4dd05ebd00b897e213ae4f87d7f3c222a8446161e87a3c34cbcf129e445bba96002e79c8ba4fc77236afb245b455753f1ecfb889c47", 0xc4}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="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", 0xb55}], 0x4) 33.952511ms ago: executing program 2 (id=5432): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 33.377321ms ago: executing program 3 (id=5433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) pipe(&(0x7f00000007c0)) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES16=r0, @ANYBLOB="00006a1e000000000000000000000000000000006897bf4f156e22b5a18f71b06205d62ee7f29981f7294844e479f11674ec858bf026839cc6665f5fb77813c8b8ea10ba839d1a2889f0980107728057c6bb4d6bfe632484cac559c1ff3ccdb4df658d913ed054a9d9a59b72009820de4dd14e4c01b3531e3e22c7cd861efb88f63b3c6aa2142ba899a954a0029dbab69267aee44c52b70a338983c46ac8ec3981cc8bfff78f196388816e64126e6d80cae97194558519946a61dc9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) socket(0x15, 0x5, 0x0) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, 0x0, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r9, 0xab7bb000) openat$cgroup_ro(r9, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r9, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r11, &(0x7f0000000100)=[{&(0x7f00000001c0)="8ed092", 0x3}], 0x1, 0x8001, 0x80) close(r11) socket$netlink(0x10, 0x3, 0x4) sendfile(r11, r10, 0x0, 0x101) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8000, @loopback, 0xffff}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8000, @loopback, 0xffff}, 0x1c) 30.254973ms ago: executing program 2 (id=5434): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xb, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) r2 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xff, @private0, 0x3}}, 0x6, 0xffff, 0xc0b9, 0xc, 0x11, 0xf0, 0xc}, &(0x7f0000000200)=0x9c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x13, 0x3}}) r6 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@short={0xb, @dev, @bcast}, &(0x7f0000000300)=0x1c, 0x80000) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000082}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r8, 0x3c4e299bbe7b2853, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x7b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfa0}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004891}, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x30, r4, 0x8126b000) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}}, 0x4) socket$l2tp6(0xa, 0x2, 0x73) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x294, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3}, [@CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0xc000}, 0x4084) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r11, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r8, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendto(r3, &(0x7f0000000c40)="95f55e3fd72ef5d8164717a710685d6d59e7414a7a06febdb95fb417ac4d0cf92e7232265efe7cb04549dd23bc415d798752ed8375bd7bf858ef8c77097b3fb47ae50df11378e2462a1697320827cd754ea65964f87c7253aa5e863ff67cbeed862b5379eaf8856d248fd9c6afb9009c9522ed1404aa9249e7bbba24e64cadb9891402cb7e5fdbc75949433ee09be61b0d8d0b96307a720dc49300f1cf269a21f10b0401423a2bc268d1cae5ce27e8d6771df1fd4e4950e7881d0774362049", 0xbf, 0x1, &(0x7f0000000d00)=@sco={0x1f, @none}, 0x80) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000d80)=""/2, &(0x7f0000000dc0)=0x2) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000e00)={{0x2, 0x4e22, @local}, {0x306}, 0x40, {0x2, 0x4e24, @remote}, 'sit0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xaa204f1e2ba48aff}, 0x4004891) 0s ago: executing program 1 (id=5435): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r4, 0x2f, 0x20}, 0x20) getsockname$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 415.924152][T20168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3705'. [ 415.935963][T20168] netlink: 'syz.1.3705': attribute type 7 has an invalid length. [ 415.945018][T20168] netlink: 'syz.1.3705': attribute type 8 has an invalid length. [ 415.961278][T20168] bridge0: entered promiscuous mode [ 415.972203][T20168] syz_tun: entered promiscuous mode [ 415.977428][T20170] net_ratelimit: 6 callbacks suppressed [ 415.977442][T20170] IPVS: rr: FWM 3 0x00000003 - no destination available [ 415.982098][T20168] erspan0: entered promiscuous mode [ 415.983169][T17650] IPVS: starting estimator thread 0... [ 415.991891][T20168] debugfs: 'hsr1' already exists in 'hsr' [ 416.012254][T20168] Cannot create hsr debugfs directory [ 416.096092][T20171] IPVS: using max 27 ests per chain, 64800 per kthread [ 417.958316][T20283] xt_CT: No such helper "netbios-ns" [ 419.514184][T20210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.758655][T20303] __nla_validate_parse: 7 callbacks suppressed [ 419.758676][T20303] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3731'. [ 419.816513][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 420.116869][T20328] pim6reg: entered allmulticast mode [ 420.292202][T20328] pim6reg: left allmulticast mode [ 420.420491][T20344] dummy0: left promiscuous mode [ 420.925283][T20349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 420.965829][T20361] lo speed is unknown, defaulting to 1000 [ 421.020478][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 421.092408][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 421.558274][T20403] netlink: 'syz.1.3754': attribute type 1 has an invalid length. [ 421.599126][T20403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3754'. [ 421.615004][T20405] lo speed is unknown, defaulting to 1000 [ 421.694364][T20416] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 421.733499][T20422] syzkaller0: entered promiscuous mode [ 421.739171][T20422] syzkaller0: entered allmulticast mode [ 422.014030][T20431] veth0: entered promiscuous mode [ 422.023704][T20430] veth0: left promiscuous mode [ 422.068244][T20437] netlink: 'syz.2.3765': attribute type 10 has an invalid length. [ 422.094140][T20437] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 422.216473][T20445] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 422.224762][T20445] netlink: 'syz.2.3769': attribute type 22 has an invalid length. [ 422.301110][T20445] macsec2: entered promiscuous mode [ 422.317206][T20445] geneve1: entered promiscuous mode [ 422.336590][T20445] macsec2: entered allmulticast mode [ 422.341906][T20445] geneve1: entered allmulticast mode [ 422.385410][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3772'. [ 422.415681][T20451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3772'. [ 422.424674][T20451] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3772'. [ 422.456417][T20457] netlink: 'syz.1.3772': attribute type 1 has an invalid length. [ 422.471468][T20451] netlink: 'syz.1.3772': attribute type 3 has an invalid length. [ 422.480401][T20457] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3772'. [ 422.502901][T20451] netlink: 'syz.1.3772': attribute type 2 has an invalid length. [ 422.511326][T20451] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3772'. [ 422.531150][T20457] netlink: 'syz.1.3772': attribute type 1 has an invalid length. [ 422.555487][T20457] netlink: 'syz.1.3772': attribute type 8 has an invalid length. [ 422.555498][T20451] netlink: 'syz.1.3772': attribute type 2 has an invalid length. [ 422.657691][T20475] lo speed is unknown, defaulting to 1000 [ 423.260056][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.270732][T20497] bond0: (slave team0): Enslaving as an active interface with an up link [ 424.132526][T20537] veth0_to_batadv: entered promiscuous mode [ 424.146359][T20537] veth0_to_batadv: entered allmulticast mode [ 424.340491][T20549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.374474][T20549] bond4: (slave geneve2): making interface the new active one [ 424.408798][ T5147] Bluetooth: hci4: link tx timeout [ 424.414664][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.426044][T20549] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 424.435059][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.474809][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.543119][T20556] lo speed is unknown, defaulting to 1000 [ 424.551673][ T156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.638306][ T156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.696205][T20575] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 424.982564][T20595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.995303][T20600] __nla_validate_parse: 7 callbacks suppressed [ 425.038929][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 425.130921][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3818'. [ 425.168444][T20610] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 425.179146][T20595] bond4 (unregistering): Released all slaves [ 425.200757][T20611] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 425.233577][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3821'. [ 425.245258][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3821'. [ 425.254569][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3821'. [ 425.264042][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3821'. [ 425.274001][T20609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3821'. [ 425.339787][T20615] lo speed is unknown, defaulting to 1000 [ 425.681451][T20632] syzkaller0: entered promiscuous mode [ 425.687003][T20632] syzkaller0: entered allmulticast mode [ 425.697212][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.704646][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.711452][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.718259][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.725020][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.730130][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 425.731799][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.747531][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.754291][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.761093][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.767897][T20632] tc action pedit offset must be on 32 bit boundaries [ 425.774683][T20632] TC_ACT_REPEAT abuse ? [ 425.872541][T20654] team0: Device veth1_macvtap failed to register rx_handler [ 425.940787][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 426.064581][T20634] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3829'. [ 426.323629][T20672] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 426.329681][T20672] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 426.347985][T20672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.356133][T20672] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 426.371534][T20672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.379096][T20672] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 426.452725][T20672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.468674][T20672] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 426.486248][T17878] Bluetooth: hci4: command 0x0406 tx timeout [ 426.606426][T20672] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 426.618699][T20672] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 426.764370][T20685] sctp: [Deprecated]: syz.3.3840 (pid 20685) Use of int in maxseg socket option. [ 426.764370][T20685] Use struct sctp_assoc_value instead [ 426.782381][T20685] validate_nla: 12 callbacks suppressed [ 426.782398][T20685] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 426.844996][T20691] pim6reg: entered allmulticast mode [ 426.868136][T20688] pim6reg: left allmulticast mode [ 427.016433][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.029082][T20700] netlink: 'syz.2.3846': attribute type 2 has an invalid length. [ 427.038765][T20709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.062598][T20712] netlink: 'syz.4.3850': attribute type 7 has an invalid length. [ 427.154489][T20717] netlink: 'syz.3.3849': attribute type 4 has an invalid length. [ 427.187565][T20713] lo speed is unknown, defaulting to 1000 [ 427.261290][T20707] lo speed is unknown, defaulting to 1000 [ 427.299567][T20719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.300695][T20724] netlink: 'syz.4.3853': attribute type 1 has an invalid length. [ 427.572954][T20724] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 427.608329][T20739] veth5: entered promiscuous mode [ 427.619523][T20739] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 427.636553][T20339] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 427.637346][T20728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.760782][T20343] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 428.036876][T20777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.044141][T20777] IPv6: NLM_F_CREATE should be set when creating new route [ 428.295065][T20797] netlink: 'syz.1.3872': attribute type 13 has an invalid length. [ 428.324404][T20797] netlink: 'syz.1.3872': attribute type 17 has an invalid length. [ 428.339031][T20799] netlink: 'syz.2.3875': attribute type 4 has an invalid length. [ 428.362089][T20802] netlink: 'syz.0.3874': attribute type 6 has an invalid length. [ 428.375052][T20802] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.470508][T20787] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.477788][T20787] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.842446][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.872547][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.102427][T17651] lo speed is unknown, defaulting to 1000 [ 429.117632][T17651] syz2: Port: 1 Link DOWN [ 429.233390][T20797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.241506][T20797] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.251556][T20797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.278640][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.297569][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.316840][T17651] lo speed is unknown, defaulting to 1000 [ 429.322591][T17651] syz2: Port: 1 Link ACTIVE [ 429.344022][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.358378][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.630683][T17651] IPVS: starting estimator thread 0... [ 429.643097][T20842] 8021q: VLANs not supported on sit0 [ 429.735471][T20843] IPVS: using max 29 ests per chain, 69600 per kthread [ 429.916422][T20868] netlink: 'syz.0.3895': attribute type 2 has an invalid length. [ 430.071769][T20879] __nla_validate_parse: 12 callbacks suppressed [ 430.071785][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 430.364215][T20895] pimreg: tun_chr_ioctl cmd 35108 [ 430.430166][T20890] lo speed is unknown, defaulting to 1000 [ 430.956933][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 30 seconds [ 430.969205][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 30 seconds [ 430.980159][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 30 seconds [ 430.991496][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 30 seconds [ 431.126138][ T29] audit: type=1800 audit(1774914991.658:9): pid=20908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3907" name="cgroup.controllers" dev="tmpfs" ino=721 res=0 errno=0 [ 431.280496][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 431.309408][T20920] unsupported nla_type 216 [ 431.528576][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 431.796733][T20952] syzkaller1: entered promiscuous mode [ 431.806934][T20952] syzkaller1: entered allmulticast mode [ 432.002131][T20961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.045855][T20964] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 432.091435][T20963] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 432.152212][T20961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.286413][T20961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.369002][T20972] FAULT_INJECTION: forcing a failure. [ 432.369002][T20972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.391024][T20972] CPU: 0 UID: 0 PID: 20972 Comm: syz.3.3925 Not tainted syzkaller #0 PREEMPT(full) [ 432.391050][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.391060][T20972] Call Trace: [ 432.391068][T20972] [ 432.391076][T20972] dump_stack_lvl+0xe8/0x150 [ 432.391105][T20972] should_fail_ex+0x412/0x560 [ 432.391137][T20972] _copy_from_user+0x2d/0xb0 [ 432.391158][T20972] ___sys_recvmsg+0x175/0x590 [ 432.391181][T20972] ? __lock_acquire+0x6b5/0x2cf0 [ 432.391218][T20972] ? __pfx____sys_recvmsg+0x10/0x10 [ 432.391276][T20972] do_recvmmsg+0x334/0x800 [ 432.391306][T20972] ? __pfx_do_recvmmsg+0x10/0x10 [ 432.391338][T20972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.391378][T20972] __x64_sys_recvmmsg+0x198/0x250 [ 432.391401][T20972] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 432.391428][T20972] do_syscall_64+0x14d/0xf80 [ 432.391447][T20972] ? trace_irq_disable+0x3b/0x150 [ 432.391459][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.391473][T20972] ? clear_bhb_loop+0x40/0x90 [ 432.391491][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.391510][T20972] RIP: 0033:0x7f632b19c819 [ 432.391526][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.391537][T20972] RSP: 002b:00007f632bfe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 432.391553][T20972] RAX: ffffffffffffffda RBX: 00007f632b415fa0 RCX: 00007f632b19c819 [ 432.391563][T20972] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 432.391572][T20972] RBP: 00007f632bfe9090 R08: 0000000000000000 R09: 0000000000000000 [ 432.391581][T20972] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 432.391589][T20972] R13: 00007f632b416038 R14: 00007f632b415fa0 R15: 00007ffc9bc389a8 [ 432.391613][T20972] [ 432.636309][T20961] bond0: (slave netdevsim0): Releasing backup interface [ 432.683151][T20961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.727565][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 432.763765][T20984] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3930'. [ 432.792383][T20984] openvswitch: netlink: Message has 3 unknown bytes. [ 432.874454][T20983] SET target dimension over the limit! [ 432.884620][T20990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3931'. [ 432.897623][T20988] lo speed is unknown, defaulting to 1000 [ 432.927312][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'. [ 432.937230][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 432.944527][T20990] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.955616][T20992] validate_nla: 3 callbacks suppressed [ 432.955662][T20992] netlink: 'syz.4.3932': attribute type 7 has an invalid length. [ 433.006492][T20339] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.051899][T20342] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.121581][T20342] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.140351][T20997] netlink: 'syz.4.3933': attribute type 1 has an invalid length. [ 433.152288][ T5822] IPVS: starting estimator thread 0... [ 433.197265][T20339] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.245536][T21000] IPVS: using max 31 ests per chain, 74400 per kthread [ 433.262793][T21002] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 433.274347][T21002] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 433.300700][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'. [ 433.320508][T20997] bond5: (slave gretap1): making interface the new active one [ 433.333572][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3934'. [ 433.348398][T20997] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 433.716171][T21007] erspan1: left promiscuous mode [ 433.721155][T21007] erspan1: left allmulticast mode [ 433.736919][T21002] macvlan1: entered promiscuous mode [ 433.742635][T21002] macvlan1: entered allmulticast mode [ 433.749379][T21002] bond5: entered promiscuous mode [ 433.754458][T21002] gretap1: entered promiscuous mode [ 433.761298][T21002] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 433.772518][T21002] bond5: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 433.785249][T21002] bond5: left promiscuous mode [ 433.790413][T21002] gretap1: left promiscuous mode [ 433.813449][T21010] smc: net device hsr0 applied user defined pnetid SYZ2 [ 433.822024][ T5822] lo speed is unknown, defaulting to 1000 [ 433.828133][ T5822] syz2: Port: 1 Link DOWN [ 434.052827][T21021] syzkaller0: entered promiscuous mode [ 434.066569][T21021] syzkaller0: entered allmulticast mode [ 434.078402][T21019] FAULT_INJECTION: forcing a failure. [ 434.078402][T21019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.125610][T21019] CPU: 0 UID: 0 PID: 21019 Comm: syz.4.3939 Not tainted syzkaller #0 PREEMPT(full) [ 434.125636][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.125654][T21019] Call Trace: [ 434.125660][T21019] [ 434.125666][T21019] dump_stack_lvl+0xe8/0x150 [ 434.125693][T21019] should_fail_ex+0x412/0x560 [ 434.125719][T21019] _copy_from_user+0x2d/0xb0 [ 434.125739][T21019] ___sys_recvmsg+0x175/0x590 [ 434.125760][T21019] ? __lock_acquire+0x6b5/0x2cf0 [ 434.125785][T21019] ? __pfx____sys_recvmsg+0x10/0x10 [ 434.125846][T21019] do_recvmmsg+0x334/0x800 [ 434.125878][T21019] ? __pfx_do_recvmmsg+0x10/0x10 [ 434.125914][T21019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.125956][T21019] __x64_sys_recvmmsg+0x198/0x250 [ 434.125981][T21019] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 434.126022][T21019] do_syscall_64+0x14d/0xf80 [ 434.126046][T21019] ? trace_irq_disable+0x3b/0x150 [ 434.126062][T21019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.126081][T21019] ? clear_bhb_loop+0x40/0x90 [ 434.126103][T21019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.126121][T21019] RIP: 0033:0x7f1aafd9c819 [ 434.126138][T21019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.126153][T21019] RSP: 002b:00007f1ab0c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 434.126172][T21019] RAX: ffffffffffffffda RBX: 00007f1ab0015fa0 RCX: 00007f1aafd9c819 [ 434.126183][T21019] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 434.126193][T21019] RBP: 00007f1ab0c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 434.126203][T21019] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 434.126212][T21019] R13: 00007f1ab0016038 R14: 00007f1ab0015fa0 R15: 00007fff1d643538 [ 434.126236][T21019] [ 434.384107][T21032] x_tables: duplicate underflow at hook 1 [ 434.392060][T21033] pim6reg1: entered allmulticast mode [ 434.565865][T21047] Cannot find del_set index 1 as target [ 435.172403][T21064] ip6gre1: entered promiscuous mode [ 435.185501][T21064] ip6gre1: entered allmulticast mode [ 435.203928][T21064] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.707495][T20342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.733287][T20342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.735584][T17637] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.048490][T21093] wg1: entered promiscuous mode [ 436.156367][T21089] bond3 (unregistering): Released all slaves [ 436.169970][T21098] __nla_validate_parse: 6 callbacks suppressed [ 436.169987][T21098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3966'. [ 436.367475][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 436.415777][T17637] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.562935][T21129] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 436.638252][T19318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.981523][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 437.001148][T21159] Cannot find set identified by id 0 to match [ 437.045068][T21165] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3983'. [ 437.058475][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3983'. [ 437.113215][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 437.126056][T21165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3983'. [ 437.354789][T21176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3990'. [ 437.369762][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3989'. [ 437.678119][T21193] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3996'. [ 438.163303][T21227] lo speed is unknown, defaulting to 1000 [ 438.409558][T21248] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 438.884409][T21270] netlink: 'syz.3.4016': attribute type 1 has an invalid length. [ 438.955018][T21269] lo speed is unknown, defaulting to 1000 [ 439.013744][T21271] lo speed is unknown, defaulting to 1000 [ 439.161064][T21276] 8021q: VLANs not supported on wg1 [ 439.919773][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.928964][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.075679][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.097133][T21296] lo speed is unknown, defaulting to 1000 [ 440.444293][T21319] tun0: tun_chr_ioctl cmd 1074025675 [ 440.451273][T21319] tun0: persist enabled [ 440.455912][T21319] tun0: tun_chr_ioctl cmd 1074025675 [ 440.461217][T21319] tun0: persist enabled [ 440.502022][T21319] tun0: tun_chr_ioctl cmd 1074025673 [ 440.553918][T21328] netlink: 'syz.2.4037': attribute type 5 has an invalid length. [ 440.890639][T21342] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 441.181123][T21358] __nla_validate_parse: 9 callbacks suppressed [ 441.181140][T21358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4048'. [ 441.555297][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 441.728800][T21396] batadv_slave_1: entered promiscuous mode [ 441.769838][T21396] batadv_slave_1: left promiscuous mode [ 442.330050][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4071'. [ 442.501984][T21440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4074'. [ 442.587211][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 442.600108][T21446] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 442.758342][T21467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4081'. [ 442.798461][T21465] FAULT_INJECTION: forcing a failure. [ 442.798461][T21465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.811828][T21465] CPU: 1 UID: 0 PID: 21465 Comm: syz.3.4080 Not tainted syzkaller #0 PREEMPT(full) [ 442.811851][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.811862][T21465] Call Trace: [ 442.811870][T21465] [ 442.811877][T21465] dump_stack_lvl+0xe8/0x150 [ 442.811906][T21465] should_fail_ex+0x412/0x560 [ 442.811937][T21465] _copy_from_user+0x2d/0xb0 [ 442.811958][T21465] ___sys_recvmsg+0x175/0x590 [ 442.811979][T21465] ? __lock_acquire+0x6b5/0x2cf0 [ 442.812007][T21465] ? __pfx____sys_recvmsg+0x10/0x10 [ 442.812067][T21465] do_recvmmsg+0x334/0x800 [ 442.812099][T21465] ? __pfx_do_recvmmsg+0x10/0x10 [ 442.812134][T21465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.812184][T21465] __x64_sys_recvmmsg+0x198/0x250 [ 442.812211][T21465] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 442.812246][T21465] do_syscall_64+0x14d/0xf80 [ 442.812270][T21465] ? trace_irq_disable+0x3b/0x150 [ 442.812286][T21465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.812305][T21465] ? clear_bhb_loop+0x40/0x90 [ 442.812327][T21465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.812344][T21465] RIP: 0033:0x7f632b19c819 [ 442.812362][T21465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.812377][T21465] RSP: 002b:00007f632bfe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 442.812396][T21465] RAX: ffffffffffffffda RBX: 00007f632b415fa0 RCX: 00007f632b19c819 [ 442.812409][T21465] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 442.812421][T21465] RBP: 00007f632bfe9090 R08: 0000000000000000 R09: 0000000000000000 [ 442.812432][T21465] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 442.812443][T21465] R13: 00007f632b416038 R14: 00007f632b415fa0 R15: 00007ffc9bc389a8 [ 442.812471][T21465] [ 443.193092][T21483] syzkaller0: entered promiscuous mode [ 443.221922][T21483] syzkaller0: entered allmulticast mode [ 443.637591][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4092'. [ 443.850735][T21508] geneve2: entered promiscuous mode [ 443.979762][T21516] bond4: option xmit_hash_policy: invalid value (10) [ 444.008962][T21516] bond4 (unregistering): Released all slaves [ 444.103390][T20021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.137094][T20021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.169780][T20021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.219715][T20021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.242355][T21537] syzkaller0: entered promiscuous mode [ 444.257226][T21537] syzkaller0: entered allmulticast mode [ 444.295042][T21537] syzkaller1: entered promiscuous mode [ 444.325412][T21537] syzkaller1: entered allmulticast mode [ 444.361671][T21537] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 444.534956][T21554] lo speed is unknown, defaulting to 1000 [ 444.945248][T21586] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 445.084408][T21586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.113136][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 445.195276][T21600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4113'. [ 445.214254][T21605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.343921][T21611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4117'. [ 445.848536][T21646] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002 [ 445.904136][T21646] sit1: entered promiscuous mode [ 445.979478][T21657] netlink: 'syz.4.4131': attribute type 1 has an invalid length. [ 445.996586][T21657] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 446.000820][T21654] syzkaller1: entered promiscuous mode [ 446.016138][T21654] syzkaller1: entered allmulticast mode [ 446.122222][T21666] netlink: 'syz.2.4134': attribute type 7 has an invalid length. [ 446.140590][T21666] netlink: 'syz.2.4134': attribute type 8 has an invalid length. [ 446.171612][T21668] lo speed is unknown, defaulting to 1000 [ 446.191606][T21666] __nla_validate_parse: 3 callbacks suppressed [ 446.191625][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4134'. [ 446.244726][T21666] erspan0: entered promiscuous mode [ 446.251427][T21666] erspan0: left promiscuous mode [ 446.274733][T21677] bond4 (unregistering): Released all slaves [ 446.679724][T21701] bridge0: entered promiscuous mode [ 446.704502][T21701] macvlan3: entered allmulticast mode [ 446.710091][T21701] bridge0: entered allmulticast mode [ 446.719960][T21701] bridge0: port 3(macvlan3) entered blocking state [ 446.727677][T21701] bridge0: port 3(macvlan3) entered disabled state [ 446.754417][T21701] bridge0: left allmulticast mode [ 446.763290][T21701] bridge0: left promiscuous mode [ 446.889106][T21710] sit1: entered promiscuous mode [ 447.206353][T21727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4150'. [ 447.247812][T21725] netlink: 'syz.4.4149': attribute type 39 has an invalid length. [ 447.333432][T21731] FAULT_INJECTION: forcing a failure. [ 447.333432][T21731] name failslab, interval 1, probability 0, space 0, times 0 [ 447.350334][T21733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4152'. [ 447.372519][T21733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4152'. [ 447.375482][T21731] CPU: 1 UID: 0 PID: 21731 Comm: syz.2.4153 Not tainted syzkaller #0 PREEMPT(full) [ 447.375504][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.375515][T21731] Call Trace: [ 447.375522][T21731] [ 447.375530][T21731] dump_stack_lvl+0xe8/0x150 [ 447.375559][T21731] should_fail_ex+0x412/0x560 [ 447.375590][T21731] should_failslab+0xa8/0x100 [ 447.375614][T21731] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 447.375634][T21731] ? __alloc_skb+0x186/0x7d0 [ 447.375653][T21731] ? __alloc_skb+0x1d0/0x7d0 [ 447.375670][T21731] ? __local_bh_enable_ip+0xd0/0x130 [ 447.375697][T21731] __alloc_skb+0x1d0/0x7d0 [ 447.375721][T21731] alloc_skb_with_frags+0xca/0x890 [ 447.375762][T21731] sock_alloc_send_pskb+0x878/0x990 [ 447.375802][T21731] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 447.375835][T21731] ? iov_iter_advance+0x8b/0x1c0 [ 447.375856][T21731] tun_get_user+0x92d/0x3dd0 [ 447.375887][T21731] ? aa_file_perm+0x192/0x15e0 [ 447.375908][T21731] ? aa_file_perm+0x50e/0x15e0 [ 447.375924][T21731] ? __pfx_tun_get_user+0x10/0x10 [ 447.375942][T21731] ? aa_file_perm+0x192/0x15e0 [ 447.375963][T21731] ? __lock_acquire+0x6b5/0x2cf0 [ 447.375995][T21731] ? ref_tracker_alloc+0x35c/0x4c0 [ 447.376023][T21731] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 447.376054][T21731] ? tun_get+0x1c/0x2f0 [ 447.376078][T21731] ? tun_get+0x1c/0x2f0 [ 447.376096][T21731] ? tun_get+0x1c/0x2f0 [ 447.376119][T21731] tun_chr_write_iter+0x113/0x200 [ 447.376141][T21731] vfs_write+0x61d/0xb90 [ 447.376168][T21731] ? __pfx_vfs_write+0x10/0x10 [ 447.376197][T21731] ? __fget_files+0x2a/0x420 [ 447.376230][T21731] ksys_write+0x150/0x270 [ 447.376252][T21731] ? __pfx_ksys_write+0x10/0x10 [ 447.376281][T21731] do_syscall_64+0x14d/0xf80 [ 447.376304][T21731] ? trace_irq_disable+0x3b/0x150 [ 447.376319][T21731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.376337][T21731] ? clear_bhb_loop+0x40/0x90 [ 447.376359][T21731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.376375][T21731] RIP: 0033:0x7fcd9c59c819 [ 447.376392][T21731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.376406][T21731] RSP: 002b:00007fcd9d44c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.376425][T21731] RAX: ffffffffffffffda RBX: 00007fcd9c815fa0 RCX: 00007fcd9c59c819 [ 447.376437][T21731] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 447.376448][T21731] RBP: 00007fcd9d44c090 R08: 0000000000000000 R09: 0000000000000000 [ 447.376459][T21731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.376470][T21731] R13: 00007fcd9c816038 R14: 00007fcd9c815fa0 R15: 00007fffb07b9908 [ 447.376497][T21731] [ 447.798583][T21750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4156'. [ 447.812708][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'. [ 448.083324][T21772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.116121][T20342] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.125050][T20342] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.160015][T21760] netlink: 'syz.4.4159': attribute type 13 has an invalid length. [ 448.174217][T21760] netlink: 'syz.4.4159': attribute type 17 has an invalid length. [ 448.202490][T21760] erspan0: left promiscuous mode [ 448.251175][T21760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.261142][T21760] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.272823][T21760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.302135][T20342] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.337175][T20342] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.572938][T21789] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 448.591062][T21789] team0: Device macvlan1 is already an upper device of the team interface [ 448.817808][T21804] netlink: 'syz.1.4173': attribute type 142 has an invalid length. [ 448.880706][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'. [ 448.927501][T21811] lo speed is unknown, defaulting to 1000 [ 448.944020][T21816] bond0: (slave rose0): Releasing backup interface [ 449.097185][T21824] netlink: 'syz.1.4178': attribute type 89 has an invalid length. [ 449.344923][T21844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4180'. [ 449.355943][T21848] netlink: 'syz.4.4184': attribute type 1 has an invalid length. [ 449.363694][T21848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4184'. [ 449.559181][T21841] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4180'. [ 450.044583][T21890] lo speed is unknown, defaulting to 1000 [ 450.073556][T21883] lo speed is unknown, defaulting to 1000 [ 450.157465][T21900] validate_nla: 1 callbacks suppressed [ 450.157482][T21900] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 450.890043][T21937] netlink: 'syz.2.4206': attribute type 10 has an invalid length. [ 450.993190][T21934] macvlan2: entered promiscuous mode [ 450.999882][T21934] macvlan2: entered allmulticast mode [ 451.005277][T21934] veth1_to_batadv: entered allmulticast mode [ 452.144586][T22020] netlink: 'syz.2.4222': attribute type 10 has an invalid length. [ 452.175803][T22020] __nla_validate_parse: 4 callbacks suppressed [ 452.175821][T22020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4222'. [ 452.274712][T19319] lo speed is unknown, defaulting to 1000 [ 452.284003][T22020] team0: entered promiscuous mode [ 452.308036][T22020] team_slave_0: entered promiscuous mode [ 452.356757][T22020] team_slave_1: entered promiscuous mode [ 452.362620][T22020] team0: entered allmulticast mode [ 452.379990][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4223'. [ 452.411391][T22020] team_slave_0: entered allmulticast mode [ 452.435588][T22020] team_slave_1: entered allmulticast mode [ 452.453891][T22020] bond0: (slave team0): Releasing backup interface [ 452.468212][T22032] netlink: 205712 bytes leftover after parsing attributes in process `syz.3.4223'. [ 452.483481][T22020] bridge0: port 3(team0) entered blocking state [ 452.512971][T22020] bridge0: port 3(team0) entered disabled state [ 452.658284][T22037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4225'. [ 452.721446][T22039] bridge0: left allmulticast mode [ 452.765991][T22042] syzkaller0: entered promiscuous mode [ 452.771525][T22042] syzkaller0: entered allmulticast mode [ 452.783169][T22042] TC_ACT_REPEAT abuse ? [ 453.068869][T22053] netlink: 'syz.0.4228': attribute type 1 has an invalid length. [ 453.203910][T22062] tipc: Enabling of bearer rejected, failed to enable media [ 453.225814][T22063] netlink: 'syz.0.4232': attribute type 1 has an invalid length. [ 453.245600][T22063] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4232'. [ 453.273931][T22063] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4232'. [ 453.311079][T22063] netlink: 'syz.0.4232': attribute type 1 has an invalid length. [ 453.373041][T22071] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 453.381769][T22071] syzkaller1: linktype set to 823 [ 453.527265][T22074] vlan3: entered promiscuous mode [ 453.566360][T22077] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 453.577885][T22077] bond3 (unregistering): Released all slaves [ 453.603987][T22074] syzkaller1: entered promiscuous mode [ 453.610010][T22074] syzkaller1: entered allmulticast mode [ 453.620996][T22081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.930330][T22094] lo speed is unknown, defaulting to 1000 [ 454.573408][T22139] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 454.603796][T22142] syzkaller1: entered promiscuous mode [ 454.621369][T22142] syzkaller1: entered allmulticast mode [ 454.651100][T22142] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4252'. [ 454.817410][T22157] netlink: 'syz.1.4256': attribute type 2 has an invalid length. [ 454.834699][T22157] hmac(sha224): entered promiscuous mode [ 454.847306][T22157] netlink: 'syz.1.4256': attribute type 2 has an invalid length. [ 454.864395][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'. [ 454.874978][T22165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4259'. [ 454.886317][T22165] netlink: 'syz.2.4259': attribute type 7 has an invalid length. [ 454.905573][T22165] netlink: 'syz.2.4259': attribute type 8 has an invalid length. [ 454.913457][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'. [ 455.088874][T22184] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 455.102221][T22184] bond7 (unregistering): Released all slaves [ 455.292372][T22200] netlink: 'syz.2.4268': attribute type 62 has an invalid length. [ 455.313237][T22202] netlink: 'syz.4.4269': attribute type 1 has an invalid length. [ 455.332374][T22202] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 455.371509][T22210] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 455.455434][T22210] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 455.770901][T22208] Cannot find set identified by id 65534 to match [ 455.792769][T22231] netlink: 'syz.3.4278': attribute type 4 has an invalid length. [ 456.588027][T22287] syz_tun: entered allmulticast mode [ 456.607353][T22282] syz_tun: left allmulticast mode [ 456.709170][T22293] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 456.770525][T22293] netlink: 'syz.4.4298': attribute type 2 has an invalid length. [ 456.778672][T22293] netlink: 'syz.4.4298': attribute type 1 has an invalid length. [ 456.860378][T22305] SET target dimension over the limit! [ 456.866662][T22303] syzkaller0: entered promiscuous mode [ 456.872143][T22303] syzkaller0: entered allmulticast mode [ 457.024969][T22320] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 457.172168][T22329] tls: option downdelay: invalid value (18446744073709547007) [ 457.172282][T22336] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 457.180787][T22329] tls: option downdelay: allowed values 0 - 2147483647 [ 457.195091][T22329] tls (unregistering): Released all slaves [ 457.452294][T22350] FAULT_INJECTION: forcing a failure. [ 457.452294][T22350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.466573][T22350] CPU: 1 UID: 0 PID: 22350 Comm: syz.4.4313 Not tainted syzkaller #0 PREEMPT(full) [ 457.466598][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.466609][T22350] Call Trace: [ 457.466616][T22350] [ 457.466622][T22350] dump_stack_lvl+0xe8/0x150 [ 457.466651][T22350] should_fail_ex+0x412/0x560 [ 457.466680][T22350] _copy_from_user+0x2d/0xb0 [ 457.466701][T22350] ___sys_recvmsg+0x175/0x590 [ 457.466721][T22350] ? __lock_acquire+0x6b5/0x2cf0 [ 457.466745][T22350] ? __pfx____sys_recvmsg+0x10/0x10 [ 457.466803][T22350] do_recvmmsg+0x334/0x800 [ 457.466829][T22350] ? __pfx_do_recvmmsg+0x10/0x10 [ 457.466856][T22350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.466897][T22350] __x64_sys_recvmmsg+0x198/0x250 [ 457.466923][T22350] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 457.466955][T22350] do_syscall_64+0x14d/0xf80 [ 457.466979][T22350] ? trace_irq_disable+0x3b/0x150 [ 457.466995][T22350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.467012][T22350] ? clear_bhb_loop+0x40/0x90 [ 457.467034][T22350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.467051][T22350] RIP: 0033:0x7f1aafd9c819 [ 457.467068][T22350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.467083][T22350] RSP: 002b:00007f1ab0c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 457.467103][T22350] RAX: ffffffffffffffda RBX: 00007f1ab0015fa0 RCX: 00007f1aafd9c819 [ 457.467116][T22350] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 457.467127][T22350] RBP: 00007f1ab0c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 457.467138][T22350] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 457.467149][T22350] R13: 00007f1ab0016038 R14: 00007f1ab0015fa0 R15: 00007fff1d643538 [ 457.467177][T22350] [ 457.791822][T22361] __nla_validate_parse: 10 callbacks suppressed [ 457.791840][T22361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'. [ 457.795147][T22358] bond3: entered promiscuous mode [ 457.839255][T22364] lo: entered allmulticast mode [ 457.846329][T22364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.873080][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4318'. [ 458.288131][T22400] syzkaller1: entered promiscuous mode [ 458.293776][T22400] syzkaller1: entered allmulticast mode [ 458.296094][T22397] FAULT_INJECTION: forcing a failure. [ 458.296094][T22397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.320797][T22397] CPU: 0 UID: 0 PID: 22397 Comm: syz.2.4327 Not tainted syzkaller #0 PREEMPT(full) [ 458.320818][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.320827][T22397] Call Trace: [ 458.320834][T22397] [ 458.320841][T22397] dump_stack_lvl+0xe8/0x150 [ 458.320866][T22397] should_fail_ex+0x412/0x560 [ 458.320890][T22397] _copy_from_user+0x2d/0xb0 [ 458.320908][T22397] ___sys_recvmsg+0x175/0x590 [ 458.320926][T22397] ? __lock_acquire+0x6b5/0x2cf0 [ 458.320948][T22397] ? __pfx____sys_recvmsg+0x10/0x10 [ 458.320999][T22397] do_recvmmsg+0x334/0x800 [ 458.321028][T22397] ? __pfx_do_recvmmsg+0x10/0x10 [ 458.321055][T22397] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.321085][T22397] __x64_sys_recvmmsg+0x198/0x250 [ 458.321109][T22397] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 458.321142][T22397] do_syscall_64+0x14d/0xf80 [ 458.321164][T22397] ? trace_irq_disable+0x3b/0x150 [ 458.321177][T22397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.321193][T22397] ? clear_bhb_loop+0x40/0x90 [ 458.321213][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.321229][T22397] RIP: 0033:0x7fcd9c59c819 [ 458.321246][T22397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.321261][T22397] RSP: 002b:00007fcd9d44c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 458.321280][T22397] RAX: ffffffffffffffda RBX: 00007fcd9c815fa0 RCX: 00007fcd9c59c819 [ 458.321291][T22397] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 458.321303][T22397] RBP: 00007fcd9d44c090 R08: 0000000000000000 R09: 0000000000000000 [ 458.321313][T22397] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 458.321323][T22397] R13: 00007fcd9c816038 R14: 00007fcd9c815fa0 R15: 00007fffb07b9908 [ 458.321349][T22397] [ 458.942816][T22435] pim6reg: entered allmulticast mode [ 459.019451][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'. [ 459.031891][T22435] pim6reg: left allmulticast mode [ 459.156287][T22449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4340'. [ 459.189130][T22451] netlink: 'syz.1.4341': attribute type 1 has an invalid length. [ 459.235075][T22458] netlink: 'syz.0.4344': attribute type 2 has an invalid length. [ 459.243948][T22458] netlink: 'syz.0.4344': attribute type 2 has an invalid length. [ 459.251888][T22458] netlink: 'syz.0.4344': attribute type 2 has an invalid length. [ 459.260253][T22458] netlink: 'syz.0.4344': attribute type 1 has an invalid length. [ 459.327498][T22454] FAULT_INJECTION: forcing a failure. [ 459.327498][T22454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.332333][T22451] bond4: entered promiscuous mode [ 459.346437][T22451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.362261][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 459.372189][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 459.399635][T22454] CPU: 0 UID: 0 PID: 22454 Comm: syz.4.4342 Not tainted syzkaller #0 PREEMPT(full) [ 459.399660][T22454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.399671][T22454] Call Trace: [ 459.399679][T22454] [ 459.399686][T22454] dump_stack_lvl+0xe8/0x150 [ 459.399716][T22454] should_fail_ex+0x412/0x560 [ 459.399745][T22454] _copy_from_user+0x2d/0xb0 [ 459.399766][T22454] ___sys_recvmsg+0x175/0x590 [ 459.399787][T22454] ? __lock_acquire+0x6b5/0x2cf0 [ 459.399814][T22454] ? __pfx____sys_recvmsg+0x10/0x10 [ 459.399870][T22454] do_recvmmsg+0x334/0x800 [ 459.399901][T22454] ? __pfx_do_recvmmsg+0x10/0x10 [ 459.399934][T22454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.399975][T22454] __x64_sys_recvmmsg+0x198/0x250 [ 459.400001][T22454] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 459.400035][T22454] do_syscall_64+0x14d/0xf80 [ 459.400062][T22454] ? trace_irq_disable+0x3b/0x150 [ 459.400077][T22454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.400095][T22454] ? clear_bhb_loop+0x40/0x90 [ 459.400115][T22454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.400133][T22454] RIP: 0033:0x7f1aafd9c819 [ 459.400149][T22454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.400164][T22454] RSP: 002b:00007f1ab0c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 459.400182][T22454] RAX: ffffffffffffffda RBX: 00007f1ab0015fa0 RCX: 00007f1aafd9c819 [ 459.400195][T22454] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 459.400206][T22454] RBP: 00007f1ab0c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 459.400216][T22454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 459.400226][T22454] R13: 00007f1ab0016038 R14: 00007f1ab0015fa0 R15: 00007fff1d643538 [ 459.400252][T22454] [ 459.616975][T22466] bond4: (slave bridge3): making interface the new active one [ 459.624475][T22466] bridge3: entered promiscuous mode [ 459.631470][T22466] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 459.741630][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4349'. [ 459.769211][T22477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4347'. [ 459.857394][T22486] sctp: [Deprecated]: syz.0.4351 (pid 22486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.857394][T22486] Use struct sctp_sack_info instead [ 459.963373][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4354'. [ 459.964003][T22494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4353'. [ 460.265000][T22502] FAULT_INJECTION: forcing a failure. [ 460.265000][T22502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.285606][T22502] CPU: 1 UID: 0 PID: 22502 Comm: syz.0.4357 Not tainted syzkaller #0 PREEMPT(full) [ 460.285630][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.285642][T22502] Call Trace: [ 460.285650][T22502] [ 460.285657][T22502] dump_stack_lvl+0xe8/0x150 [ 460.285688][T22502] should_fail_ex+0x412/0x560 [ 460.285718][T22502] _copy_from_user+0x2d/0xb0 [ 460.285741][T22502] ___sys_recvmsg+0x175/0x590 [ 460.285764][T22502] ? __lock_acquire+0x6b5/0x2cf0 [ 460.285793][T22502] ? __pfx____sys_recvmsg+0x10/0x10 [ 460.285851][T22502] do_recvmmsg+0x334/0x800 [ 460.285884][T22502] ? __pfx_do_recvmmsg+0x10/0x10 [ 460.285919][T22502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.285962][T22502] __x64_sys_recvmmsg+0x198/0x250 [ 460.285989][T22502] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 460.286024][T22502] do_syscall_64+0x14d/0xf80 [ 460.286049][T22502] ? trace_irq_disable+0x3b/0x150 [ 460.286063][T22502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.286082][T22502] ? clear_bhb_loop+0x40/0x90 [ 460.286104][T22502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.286121][T22502] RIP: 0033:0x7f6a5bb9c819 [ 460.286138][T22502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.286152][T22502] RSP: 002b:00007f6a5c98d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.286172][T22502] RAX: ffffffffffffffda RBX: 00007f6a5be15fa0 RCX: 00007f6a5bb9c819 [ 460.286184][T22502] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 460.286196][T22502] RBP: 00007f6a5c98d090 R08: 0000000000000000 R09: 0000000000000000 [ 460.286206][T22502] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 460.286217][T22502] R13: 00007f6a5be16038 R14: 00007f6a5be15fa0 R15: 00007ffc01b18ce8 [ 460.286246][T22502] [ 460.563968][T22515] validate_nla: 2 callbacks suppressed [ 460.563987][T22515] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 460.938843][T22530] IPv6: Can't replace route, no match found [ 460.945291][T22530] IPv6: Can't replace route, no match found [ 461.056049][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 60 seconds [ 461.067963][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 60 seconds [ 461.079346][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 60 seconds [ 461.091940][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 60 seconds [ 461.189637][T22536] openvswitch: netlink: Flow key attr not present in new flow. [ 461.259642][T22512] veth0_to_batadv: left allmulticast mode [ 461.279737][T22512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.336237][T22512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.779800][T22512] vlan2: left allmulticast mode [ 461.784698][T22512] geneve1: left allmulticast mode [ 461.796638][T22512] gretap1: left allmulticast mode [ 461.858115][T22512] xfrm1: left allmulticast mode [ 461.876608][T22512] macvlan2: left allmulticast mode [ 461.897003][T22514] netlink: 'syz.2.4359': attribute type 2 has an invalid length. [ 461.922885][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.962624][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.996473][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.025896][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.044014][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.077914][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.103201][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.133107][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.868904][T22608] __nla_validate_parse: 13 callbacks suppressed [ 462.868925][T22608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'. [ 462.898530][T22610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.905804][T22610] IPv6: NLM_F_CREATE should be set when creating new route [ 462.913072][T22610] IPv6: NLM_F_CREATE should be set when creating new route [ 462.926424][T22610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4385'. [ 463.171916][T22621] netlink: 'syz.1.4389': attribute type 2 has an invalid length. [ 463.760042][T22636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.289182][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4404'. [ 464.327825][T22660] FAULT_INJECTION: forcing a failure. [ 464.327825][T22660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.341485][T22660] CPU: 0 UID: 0 PID: 22660 Comm: syz.0.4406 Not tainted syzkaller #0 PREEMPT(full) [ 464.341509][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.341519][T22660] Call Trace: [ 464.341526][T22660] [ 464.341534][T22660] dump_stack_lvl+0xe8/0x150 [ 464.341562][T22660] should_fail_ex+0x412/0x560 [ 464.341592][T22660] _copy_from_user+0x2d/0xb0 [ 464.341612][T22660] ___sys_recvmsg+0x175/0x590 [ 464.341633][T22660] ? __lock_acquire+0x6b5/0x2cf0 [ 464.341659][T22660] ? __pfx____sys_recvmsg+0x10/0x10 [ 464.341715][T22660] do_recvmmsg+0x334/0x800 [ 464.341748][T22660] ? __pfx_do_recvmmsg+0x10/0x10 [ 464.341782][T22660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.341825][T22660] __x64_sys_recvmmsg+0x198/0x250 [ 464.341850][T22660] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 464.341885][T22660] do_syscall_64+0x14d/0xf80 [ 464.341909][T22660] ? trace_irq_disable+0x3b/0x150 [ 464.341924][T22660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.341942][T22660] ? clear_bhb_loop+0x40/0x90 [ 464.341965][T22660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.341981][T22660] RIP: 0033:0x7f6a5bb9c819 [ 464.341999][T22660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.342014][T22660] RSP: 002b:00007f6a5c98d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 464.342033][T22660] RAX: ffffffffffffffda RBX: 00007f6a5be15fa0 RCX: 00007f6a5bb9c819 [ 464.342046][T22660] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 464.342058][T22660] RBP: 00007f6a5c98d090 R08: 0000000000000000 R09: 0000000000000000 [ 464.342069][T22660] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 464.342079][T22660] R13: 00007f6a5be16038 R14: 00007f6a5be15fa0 R15: 00007ffc01b18ce8 [ 464.342116][T22660] [ 464.557458][T22673] netlink: 'syz.2.4407': attribute type 2 has an invalid length. [ 464.565224][T22673] netlink: 'syz.2.4407': attribute type 11 has an invalid length. [ 464.578235][T22673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4407'. [ 464.652131][T22680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.685250][T22683] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4409'. [ 464.710222][T22680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.727201][T22681] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4410'. [ 464.772067][T22680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.799887][T22686] netlink: 'syz.3.4411': attribute type 1 has an invalid length. [ 464.809692][T22686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4411'. [ 464.856409][T22680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.946998][T20343] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.974146][T20343] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.996786][T22693] netlink: zone id is out of range [ 465.002073][T22693] netlink: get zone limit has 4 unknown bytes [ 465.011445][T20343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.029940][T20343] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.120876][T22702] gretap3: entered promiscuous mode [ 465.235784][ T5195] udevd[5195]: worker [16797] /devices/virtual/block/nbd3 is taking a long time [ 465.308168][T22714] FAULT_INJECTION: forcing a failure. [ 465.308168][T22714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.328392][T22714] CPU: 1 UID: 0 PID: 22714 Comm: syz.1.4419 Not tainted syzkaller #0 PREEMPT(full) [ 465.328418][T22714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.328429][T22714] Call Trace: [ 465.328436][T22714] [ 465.328444][T22714] dump_stack_lvl+0xe8/0x150 [ 465.328474][T22714] should_fail_ex+0x412/0x560 [ 465.328504][T22714] _copy_from_user+0x2d/0xb0 [ 465.328526][T22714] ___sys_recvmsg+0x175/0x590 [ 465.328548][T22714] ? __lock_acquire+0x6b5/0x2cf0 [ 465.328576][T22714] ? __pfx____sys_recvmsg+0x10/0x10 [ 465.328634][T22714] do_recvmmsg+0x334/0x800 [ 465.328665][T22714] ? __pfx_do_recvmmsg+0x10/0x10 [ 465.328699][T22714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.328750][T22714] __x64_sys_recvmmsg+0x198/0x250 [ 465.328777][T22714] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 465.328811][T22714] do_syscall_64+0x14d/0xf80 [ 465.328836][T22714] ? trace_irq_disable+0x3b/0x150 [ 465.328851][T22714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.328869][T22714] ? clear_bhb_loop+0x40/0x90 [ 465.328890][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.328908][T22714] RIP: 0033:0x7f7dbb59c819 [ 465.328926][T22714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.328941][T22714] RSP: 002b:00007f7dbc4c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 465.328961][T22714] RAX: ffffffffffffffda RBX: 00007f7dbb815fa0 RCX: 00007f7dbb59c819 [ 465.328973][T22714] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 465.328985][T22714] RBP: 00007f7dbc4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 465.328995][T22714] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 465.329006][T22714] R13: 00007f7dbb816038 R14: 00007f7dbb815fa0 R15: 00007ffec6295ee8 [ 465.329035][T22714] [ 465.640762][T22732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4414'. [ 465.732510][T22735] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 465.740618][T22735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4422'. [ 466.189060][T22749] openvswitch: netlink: Actions may not be safe on all matching packets [ 466.200850][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4428'. [ 466.222233][ T29] audit: type=1107 audit(1774915026.748:10): pid=22760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ξə¾u} L.ÃÒ‚lÇåÑo¬/“Bl~©ðRSÛ8÷$š&äæïÚìþ»*©ì4­°ðVx·ë#hUzwÇõäÝáÞv»ˆ¢ëMvÐéfž‹,ý>BÙþüÎdlÔº‹Õv{ÜgYCôGƒhÁÌéxsÙîv9;T:{Ä¢«ß“yò@'Á÷7¼¬Y6NŒWË<Õ0¦zÙÖœ½UoXHz—@‘˜`Ö`Ùr¤,\aûàØŸ¡¬Ç yU“ªÓÎËêвÞñÖWÝh„¿ 7' [ 466.293238][T22749] hsr_slave_1 (unregistering): left promiscuous mode [ 466.696771][T22791] netlink: 'syz.2.4435': attribute type 1 has an invalid length. [ 466.826779][T22788] lo speed is unknown, defaulting to 1000 [ 467.112512][ T650] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.121219][ T650] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.199799][ T650] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.237110][T22813] IPv6: sit2: Disabled Multicast RS [ 467.259977][ T650] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.648650][T22851] netlink: 'syz.2.4450': attribute type 9 has an invalid length. [ 467.985437][T22873] __nla_validate_parse: 4 callbacks suppressed [ 467.985461][T22873] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4458'. [ 468.017368][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4459'. [ 468.451657][T22906] macvtap0: entered promiscuous mode [ 468.457804][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4466'. [ 468.578855][T22913] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4466'. [ 468.597580][T22906] macvtap0 (unregistering): left promiscuous mode [ 468.629018][T22909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.673352][T22907] gretap2: entered promiscuous mode [ 468.681676][T22907] batman_adv: batadv0: Adding interface: gretap2 [ 468.690708][T22907] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 468.726966][T22907] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 468.836915][T22910] syzkaller0: entered promiscuous mode [ 468.852271][T22910] syzkaller0: entered allmulticast mode [ 468.909749][T22923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4472'. [ 470.704246][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4474'. [ 470.715091][T22934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4474'. [ 470.823950][T22940] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4475'. [ 470.872251][T22950] netlink: 'syz.3.4479': attribute type 1 has an invalid length. [ 470.897562][T22950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4479'. [ 470.990451][T22960] block nbd4: Unsupported socket: should be TCP or UNIX. [ 471.144388][T22967] lo speed is unknown, defaulting to 1000 [ 471.228919][T22979] geneve4: entered promiscuous mode [ 471.239202][T22979] geneve4: entered allmulticast mode [ 471.255076][T22982] sctp: [Deprecated]: syz.0.4487 (pid 22982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.255076][T22982] Use struct sctp_sack_info instead [ 471.279673][T22983] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 471.374017][T22986] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 471.386121][T22986] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 471.440887][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 471.578671][T22999] netlink: 'syz.3.4492': attribute type 4 has an invalid length. [ 471.622424][T22983] bond5: (slave gretap1): making interface the new active one [ 471.650948][T22983] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 471.694273][T22986] macvlan2: entered promiscuous mode [ 471.703454][T22986] macvlan2: entered allmulticast mode [ 471.736581][T22986] bond5: entered promiscuous mode [ 471.742193][T22986] gretap1: entered promiscuous mode [ 471.749320][T22986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.762310][T22986] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 471.781079][T22986] bond5: left promiscuous mode [ 471.786212][T22986] gretap1: left promiscuous mode [ 472.069613][T23034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.120515][T23038] vti0: entered promiscuous mode [ 472.176819][T23052] bridge_slave_1: left allmulticast mode [ 472.182493][T23052] bridge_slave_1: left promiscuous mode [ 472.190451][T23052] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.204882][T23052] bridge_slave_0: left allmulticast mode [ 472.213517][T23052] bridge_slave_0: left promiscuous mode [ 472.226747][T23052] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.552269][T23103] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 472.615934][T23107] lo speed is unknown, defaulting to 1000 [ 472.645291][T23117] ipt_ECN: cannot use operation on non-tcp rule [ 472.707633][T23117] lo speed is unknown, defaulting to 1000 [ 472.780136][T23125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.036142][T23147] __nla_validate_parse: 6 callbacks suppressed [ 473.036160][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4523'. [ 473.051773][T23139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4522'. [ 473.058104][T23147] netem: incorrect ge model size [ 473.067120][T23147] netem: change failed [ 473.199898][T23155] netlink: 'syz.3.4526': attribute type 1 has an invalid length. [ 473.211694][T23155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4526'. [ 473.341951][T23165] netlink: 'syz.4.4528': attribute type 21 has an invalid length. [ 473.365462][T23165] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4528'. [ 473.402853][T23165] netlink: 'syz.4.4528': attribute type 4 has an invalid length. [ 473.413297][T23165] netlink: 'syz.4.4528': attribute type 5 has an invalid length. [ 473.421827][T23165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4528'. [ 473.455597][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4530'. [ 473.485077][T23171] netlink: 'syz.3.4530': attribute type 1 has an invalid length. [ 473.493011][T23171] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4530'. [ 473.563287][T23170] netlink: 'syz.3.4530': attribute type 1 has an invalid length. [ 473.571840][T23170] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4530'. [ 473.680589][T23186] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 473.707747][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4534'. [ 473.730123][T23191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4535'. [ 473.746778][T23190] netlink: 'syz.4.4536': attribute type 1 has an invalid length. [ 474.387461][T23241] TCP: TCP_TX_DELAY enabled [ 475.659547][T23310] delete_channel: no stack [ 475.939720][T23341] IPVS: length: 157 != 24 [ 476.221892][T23370] validate_nla: 4 callbacks suppressed [ 476.221910][T23370] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 476.239775][T23361] bond8 (unregistering): Released all slaves [ 476.318945][T23370] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.389045][T23373] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 476.451810][T23373] bond6: (slave batadv1): making interface the new active one [ 476.479851][T23373] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 476.528397][T23370] bond6 (unregistering): (slave batadv1): Releasing active interface [ 476.563829][T23370] bond6 (unregistering): Released all slaves [ 476.583893][T23399] netlink: 'syz.2.4586': attribute type 1 has an invalid length. [ 476.627421][T23402] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 476.639364][T23402] bond4 (unregistering): Released all slaves [ 476.664249][T23397] Cannot find del_set index 4 as target [ 476.800187][T23414] ip6erspan0: entered allmulticast mode [ 476.945703][T23424] netlink: 'syz.3.4593': attribute type 4 has an invalid length. [ 476.965088][T23424] netlink: 'syz.3.4593': attribute type 4 has an invalid length. [ 477.171377][T23432] netlink: 'syz.4.4595': attribute type 10 has an invalid length. [ 477.673681][T23462] syzkaller1: entered promiscuous mode [ 477.680675][T23462] syzkaller1: entered allmulticast mode [ 477.891181][T23471] netlink: 'syz.0.4607': attribute type 1 has an invalid length. [ 477.982426][T23475] netlink: 'syz.1.4609': attribute type 9 has an invalid length. [ 478.099411][T23487] __nla_validate_parse: 86 callbacks suppressed [ 478.099431][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'. [ 478.124892][T23492] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 478.173455][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4615'. [ 478.189454][T23495] netlink: 'syz.4.4614': attribute type 1 has an invalid length. [ 478.231435][T23495] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.238612][T23502] netlink: 'syz.0.4616': attribute type 2 has an invalid length. [ 478.277905][T23495] bond8: (slave veth17): Enslaving as an active interface with a down link [ 478.303746][T23506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4617'. [ 478.314473][T23502] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 478.629910][T23521] netlink: 'syz.4.4622': attribute type 1 has an invalid length. [ 478.643655][T23521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4622'. [ 478.780452][T23528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4626'. [ 478.820787][T23529] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4626'. [ 478.840413][T23529] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4626'. [ 478.874413][T23533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4627'. [ 478.888055][T23533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4627'. [ 478.940834][T23537] mac80211_hwsim hwsim45 syzkaller0: Caught tx_queue_len zero misconfig [ 491.117152][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 90 seconds [ 491.128061][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 90 seconds [ 491.138995][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 90 seconds [ 491.150362][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 90 seconds [ 496.256884][T23112] bridge_slave_1: left allmulticast mode [ 496.262525][T23112] bridge_slave_1: left promiscuous mode [ 496.269180][T23112] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.278206][T23112] bridge_slave_0: left allmulticast mode [ 496.283826][T23112] bridge_slave_0: left promiscuous mode [ 496.290451][T23112] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.305057][T23112] dvmrp8: left allmulticast mode [ 496.400986][T23112] gretap0 (unregistering): left promiscuous mode [ 496.618606][T23112] bond6 (unregistering): (slave bridge4): Releasing active interface [ 496.678859][T23112] bond0 (unregistering): left promiscuous mode [ 496.685019][T23112] bond_slave_0: left promiscuous mode [ 496.690764][T23112] @0Ù: left promiscuous mode [ 496.695973][T23112] dummy0: left promiscuous mode [ 496.705481][T23112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.715281][T23112] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 496.725255][T23112] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 496.735044][T23112] bond0 (unregistering): Released all slaves [ 496.744478][T23112] bond1 (unregistering): Released all slaves [ 496.756988][T23112] bond2 (unregistering): Released all slaves [ 496.769392][T23112] bond3 (unregistering): Released all slaves [ 496.787027][T23112] bond4 (unregistering): Released all slaves [ 496.800637][T23112] bond5 (unregistering): Released all slaves [ 496.812379][T23112] bond6 (unregistering): Released all slaves [ 496.826841][T23112] bond7 (unregistering): Released all slaves [ 496.843368][T23112] bond8 (unregistering): Released all slaves [ 496.941848][T23112] : left promiscuous mode [ 496.983742][T23112] tipc: Disabling bearer [ 496.989230][T23112] tipc: Left network mode [ 497.523352][T23112] hsr_slave_0: left promiscuous mode [ 497.529257][T23112] hsr_slave_1: left promiscuous mode [ 497.676290][T23112] team_slave_1 (unregistering): left promiscuous mode [ 497.683592][T23112] team0 (unregistering): Port device team_slave_1 removed [ 497.696627][T23112] team_slave_0 (unregistering): left promiscuous mode [ 497.703919][T23112] team0 (unregistering): Port device team_slave_0 removed [ 498.094446][T23112] IPVS: stop unused estimator thread 0... [ 501.357818][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.197100][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 120 seconds [ 521.208056][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 120 seconds [ 521.219476][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 120 seconds [ 521.230915][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 120 seconds [ 540.632697][T23567] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 540.657780][T23571] netlink: 'syz.1.4638': attribute type 1 has an invalid length. [ 540.671824][T23567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4636'. [ 540.767039][T23571] bond6: entered promiscuous mode [ 540.772563][T23571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.918904][T23589] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4643'. [ 540.962381][T23582] veth0_to_bond: left allmulticast mode [ 541.029527][T23597] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 541.091496][T23599] xt_bpf: check failed: parse error [ 541.110741][T23601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4647'. [ 541.150956][T23601] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 541.170735][T23601] bond9: (slave lo): Enslaving as an active interface with an up link [ 541.186980][T23601] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 541.204187][T17652] lo speed is unknown, defaulting to 1000 [ 541.211044][T17637] lo speed is unknown, defaulting to 1000 [ 541.218433][T17652] syz2: Port: 1 Link ACTIVE [ 541.259220][T23606] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 541.280604][T23608] netlink: 'syz.0.4650': attribute type 1 has an invalid length. [ 541.293835][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4648'. [ 541.317555][T23606] ip6tnl3: entered promiscuous mode [ 541.317586][T23610] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4649'. [ 541.505741][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4653'. [ 541.560191][T23626] netlink: 'syz.1.4654': attribute type 4 has an invalid length. [ 541.711531][T23632] netlink: 'syz.1.4658': attribute type 27 has an invalid length. [ 541.766086][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'. [ 541.798016][T23632] sit1: left promiscuous mode [ 541.862922][T23632] bond4: left promiscuous mode [ 541.869778][T23632] bridge3: left promiscuous mode [ 541.890286][T23632] ip6erspan0: left allmulticast mode [ 541.946944][T23632] bond6: left promiscuous mode [ 542.050237][T23637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4656'. [ 542.530689][T23653] lo speed is unknown, defaulting to 1000 [ 542.604961][T23680] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 542.614308][T23680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4667'. [ 542.697861][ T5822] IPVS: starting estimator thread 0... [ 542.785440][T23686] IPVS: using max 29 ests per chain, 69600 per kthread [ 542.905136][T23696] tipc: Enabled bearer , priority 0 [ 542.918914][T23696] syzkaller0: entered promiscuous mode [ 542.940688][T23696] syzkaller0: entered allmulticast mode [ 543.008720][T23696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4673'. [ 543.030219][T23696] tipc: Resetting bearer [ 543.045092][T23695] tipc: Resetting bearer [ 543.059608][T23695] tipc: Disabling bearer [ 543.078490][T23707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.086547][T23707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.209315][T23714] netlink: 'syz.4.4678': attribute type 1 has an invalid length. [ 543.376804][T23725] netlink: 'syz.4.4682': attribute type 11 has an invalid length. [ 543.394703][T23728] netlink: 'syz.2.4684': attribute type 2 has an invalid length. [ 543.398343][T23729] bridge_slave_1: left promiscuous mode [ 543.410386][T23729] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.420649][T23729] bridge_slave_0: left promiscuous mode [ 543.426669][T23729] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.544890][T23739] netlink: 'syz.4.4687': attribute type 13 has an invalid length. [ 543.611881][T23739] lo: left allmulticast mode [ 543.709690][T23739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.719021][T23739] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.730927][T23739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.113377][T23767] syzkaller0: entered promiscuous mode [ 544.126182][T23767] syzkaller0: entered allmulticast mode [ 544.300038][T23772] IPv6: sit2: Disabled Multicast RS [ 544.682019][T23797] lo speed is unknown, defaulting to 1000 [ 545.105247][T23835] bridge0: entered promiscuous mode [ 545.140328][T23835] bridge0: entered allmulticast mode [ 545.165238][T23835] team0: Port device bridge0 added [ 545.318028][T23859] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 545.391057][T23865] tap0: tun_chr_ioctl cmd 1074025676 [ 545.397598][T23865] tap0: owner set to 0 [ 545.603806][T23879] syzkaller1: entered promiscuous mode [ 545.621231][T23879] syzkaller1: entered allmulticast mode [ 545.691626][T23885] __nla_validate_parse: 15 callbacks suppressed [ 545.691645][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4723'. [ 545.810468][T23892] macvlan2: entered promiscuous mode [ 545.819781][T23892] bond0: entered promiscuous mode [ 545.824841][T23892] bond_slave_0: entered promiscuous mode [ 545.835240][T23892] bond_slave_1: entered promiscuous mode [ 545.843589][T23892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.878483][T23892] team0: Port device macvlan2 added [ 546.107685][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4733'. [ 546.204103][T23918] syzkaller1: entered promiscuous mode [ 546.214406][T23918] syzkaller1: entered allmulticast mode [ 546.601959][T23940] validate_nla: 3 callbacks suppressed [ 546.601977][T23940] netlink: 'syz.4.4740': attribute type 2 has an invalid length. [ 546.622927][T23940] !: entered promiscuous mode [ 546.750892][T23946] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4743'. [ 546.785516][T23946] openvswitch: netlink: Message has 16 unknown bytes. [ 546.809912][T23932] xt_l2tp: v2 tid > 0xffff: 37482740 [ 547.430207][T23970] sctp: [Deprecated]: syz.3.4749 (pid 23970) Use of int in max_burst socket option. [ 547.430207][T23970] Use struct sctp_assoc_value instead [ 547.563368][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 547.672492][T24007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4756'. [ 547.690395][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4755'. [ 547.795731][T24007] can: request_module (can-proto-5) failed. [ 548.268421][T24054] IPv6: Can't replace route, no match found [ 548.274635][T24054] IPv6: Can't replace route, no match found [ 548.956929][T24070] Bluetooth: MGMT ver 1.23 [ 551.135081][T24039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.291330][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 150 seconds [ 551.306295][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 150 seconds [ 551.318072][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 150 seconds [ 551.329448][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 150 seconds [ 551.429662][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 551.454912][T24085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.505147][T24085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.557682][T24100] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 551.687438][T24107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4781'. [ 551.912888][T24117] lo speed is unknown, defaulting to 1000 [ 552.107040][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4786'. [ 552.501514][T24148] xt_HMARK: proto mask must be zero with L3 mode [ 562.798099][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.356184][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 180 seconds [ 581.366935][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 180 seconds [ 581.378211][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 180 seconds [ 581.389244][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 180 seconds [ 582.782739][ T5195] udevd[5195]: worker [16797] /devices/virtual/block/nbd3 timeout; kill it [ 582.791552][ T5195] udevd[5195]: seq 27333 '/devices/virtual/block/nbd3' killed [ 594.497853][T24166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4797'. [ 594.518997][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4800'. [ 594.537344][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 594.782420][T24170] lo speed is unknown, defaulting to 1000 [ 594.783554][T24181] batadv_slave_0: entered promiscuous mode [ 594.838384][T24181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4802'. [ 594.892537][T24180] batadv_slave_0: left promiscuous mode [ 595.110707][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4812'. [ 595.280459][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'. [ 595.290566][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 595.300512][T24221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4814'. [ 595.520095][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4818'. [ 595.592783][T24236] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 595.627919][T24243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4818'. [ 595.730435][T24243] bond5: entered promiscuous mode [ 595.741119][T24243] bond5: entered allmulticast mode [ 595.747067][T24243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.762779][T24246] erspan1: entered promiscuous mode [ 595.768373][T24246] erspan1: entered allmulticast mode [ 595.970385][T24260] netlink: 'syz.3.4823': attribute type 1 has an invalid length. [ 595.998528][T24260] netlink: 'syz.3.4823': attribute type 2 has an invalid length. [ 596.012676][T24260] netlink: 'syz.3.4823': attribute type 1 has an invalid length. [ 596.034714][T24260] netlink: 'syz.3.4823': attribute type 3 has an invalid length. [ 596.136190][T24273] tipc: Started in network mode [ 596.147813][T24273] tipc: Node identity 080211, cluster identity 4711 [ 596.165585][T24273] tipc: Enabled bearer , priority 0 [ 596.252049][T24273] syzkaller0: mtu less than device minimum [ 596.338521][T24282] netlink: 'syz.0.4828': attribute type 10 has an invalid length. [ 596.592794][T24294] netlink: 'syz.4.4832': attribute type 2 has an invalid length. [ 597.267953][T24333] 8021q: VLANs not supported on syzkaller1 [ 597.315020][T17652] tipc: Node number set to 134353152 [ 597.353318][T24343] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 597.444631][T24343] : entered promiscuous mode [ 597.748319][T24380] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 597.811996][T24387] netlink: 'syz.2.4850': attribute type 32 has an invalid length. [ 598.662379][T24437] netlink: 'syz.2.4866': attribute type 1 has an invalid length. [ 598.725461][T24430] lo speed is unknown, defaulting to 1000 [ 598.756085][T24437] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 598.766468][T24437] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 598.780044][T24437] bond6: (slave ip6gre1): making interface the new active one [ 598.791206][T24437] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 599.060293][T24463] netlink: 'syz.4.4874': attribute type 1 has an invalid length. [ 599.168344][T24463] 8021q: adding VLAN 0 to HW filter on device bond9 [ 599.193447][T24465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.240901][T24465] bond9: (slave batadv0): making interface the new active one [ 599.275154][T24465] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 599.495824][T24470] bond9 (unregistering): (slave batadv0): Releasing active interface [ 599.509953][T24470] bond9 (unregistering): Released all slaves [ 599.717883][T24482] __nla_validate_parse: 15 callbacks suppressed [ 599.717902][T24482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4879'. [ 599.782224][T24487] tap0: tun_chr_ioctl cmd 2147767521 [ 600.095907][T24512] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20002 [ 600.708091][T24544] batadv_slave_1: entered promiscuous mode [ 600.744369][T24543] batadv_slave_1: left promiscuous mode [ 601.169284][T24579] netlink: 'syz.2.4909': attribute type 1 has an invalid length. [ 601.189285][T24580] netlink: 'syz.2.4909': attribute type 1 has an invalid length. [ 601.228841][T24579] netlink: 'syz.2.4909': attribute type 1 has an invalid length. [ 601.324585][T24587] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4911'. [ 601.335181][T24589] xt_cluster: node mask cannot exceed total number of nodes [ 601.511167][T24603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4917'. [ 601.906556][T24627] lo speed is unknown, defaulting to 1000 [ 601.964623][T24633] team0 (unregistering): Port device team_slave_0 removed [ 601.979066][T24633] team0 (unregistering): Port device team_slave_1 removed [ 602.127286][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 602.427634][T24661] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.4934'. [ 602.689072][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 602.733346][T24672] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4938'. [ 602.741711][T24674] geneve2: entered promiscuous mode [ 602.762639][T23109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.771790][T23109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.810461][T23109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.903307][T24676] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 602.926555][T24676] bond10 (unregistering): Released all slaves [ 602.944321][T24689] netlink: 'syz.2.4944': attribute type 1 has an invalid length. [ 603.077260][T23109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.089125][T24699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.115241][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 603.259556][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4945'. [ 603.307847][T24715] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4949'. [ 603.410775][T24721] syzkaller1: entered promiscuous mode [ 603.417258][T24721] syzkaller1: entered allmulticast mode [ 603.423786][T24722] netlink: 'syz.2.4950': attribute type 1 has an invalid length. [ 603.433980][T24722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.500656][T24733] netlink: 'syz.3.4953': attribute type 13 has an invalid length. [ 603.518260][T24733] netlink: 'syz.3.4953': attribute type 17 has an invalid length. [ 603.676910][T24745] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 603.709810][T24733] erspan0: left promiscuous mode [ 603.850319][T24733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.882483][T24733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.962966][T24769] netlink: 'syz.1.4962': attribute type 2 has an invalid length. [ 603.972527][T24769] netlink: 'syz.1.4962': attribute type 8 has an invalid length. [ 604.040405][T24777] batadv_slave_0: entered promiscuous mode [ 604.047648][T24777] batadv_slave_0: entered allmulticast mode [ 604.054765][T24777] netlink: 'syz.1.4965': attribute type 61 has an invalid length. [ 604.091180][T24780] tipc: Resetting bearer [ 604.305800][T24772] nbd4: detected capacity change from 0 to 127 [ 604.353522][T17878] block nbd4: Receive control failed (result -104) [ 604.353533][ T5147] block nbd4: Receive control failed (result -32) [ 604.511904][T24802] bond9: entered promiscuous mode [ 604.547294][T24802] 8021q: adding VLAN 0 to HW filter on device bond9 [ 604.887469][T24830] gretap2: entered allmulticast mode [ 604.896385][T24830] bond11: (slave gretap2): making interface the new active one [ 604.905514][T24830] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 604.921148][T24833] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x67 [ 605.066299][T24845] __nla_validate_parse: 16 callbacks suppressed [ 605.066317][T24845] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4984'. [ 605.129781][T24849] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4985'. [ 605.516786][T24868] netlink: 34 bytes leftover after parsing attributes in process `syz.4.4992'. [ 605.920870][T24891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4997'. [ 605.935791][T24886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4995'. [ 605.955062][T24891] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4997'. [ 605.955117][T24892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4997'. [ 606.765576][T24902] netlink: zone id is out of range [ 606.771001][T24902] netlink: zone id is out of range [ 606.788355][T24902] netlink: zone id is out of range [ 606.798407][T24902] netlink: zone id is out of range [ 606.804454][T24899] lo speed is unknown, defaulting to 1000 [ 606.811920][T24902] netlink: zone id is out of range [ 606.822637][T24902] netlink: zone id is out of range [ 606.979462][T24906] siw: device registration error -23 [ 607.193692][T24927] validate_nla: 2 callbacks suppressed [ 607.193710][T24927] netlink: 'syz.2.5009': attribute type 3 has an invalid length. [ 607.199669][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5006'. [ 607.289344][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 607.556910][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5013'. [ 607.631993][T24956] netlink: 'syz.1.5015': attribute type 39 has an invalid length. [ 607.718669][T24962] netlink: 'syz.1.5015': attribute type 5 has an invalid length. [ 608.269143][T24978] veth5: entered promiscuous mode [ 608.382817][T25004] bridge0: entered allmulticast mode [ 608.463510][T25007] vlan4: entered promiscuous mode [ 608.473314][T25007] gretap2: entered promiscuous mode [ 608.809160][T25039] netlink: 'syz.4.5033': attribute type 13 has an invalid length. [ 608.865593][T25039] netlink: 'syz.4.5033': attribute type 17 has an invalid length. [ 608.903052][T25039] netlink: 'syz.4.5033': attribute type 27 has an invalid length. [ 609.135859][T25039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.162644][T25039] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.236981][T25039] net_ratelimit: 9 callbacks suppressed [ 609.236994][T25039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.434898][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.444301][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.456170][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.464734][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.877931][T25101] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 610.586058][T25147] __nla_validate_parse: 8 callbacks suppressed [ 610.586076][T25147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5059'. [ 610.586522][T25148] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 610.617590][T25147] netlink: 'syz.3.5059': attribute type 7 has an invalid length. [ 610.648535][T25150] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5061'. [ 610.668303][T25147] netlink: 'syz.3.5059': attribute type 8 has an invalid length. [ 610.685455][T25150] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 610.725656][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'. [ 610.870963][T25156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5061'. [ 610.901328][T25156] openvswitch: netlink: Flow key attr not present in new flow. [ 611.016279][T25158] batadv_slave_0: left promiscuous mode [ 611.055812][T25158] batadv_slave_0: left allmulticast mode [ 611.066672][T25158] bridge0: left allmulticast mode [ 611.096149][T25158] bond0: left promiscuous mode [ 611.112326][T25158] bond_slave_0: left promiscuous mode [ 611.141909][T25158] bond_slave_1: left promiscuous mode [ 611.161519][T25158] macvlan2: left promiscuous mode [ 611.467318][ T25] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 210 seconds [ 611.478616][ T25] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 210 seconds [ 611.490330][ T25] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 210 seconds [ 611.502910][ T25] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 210 seconds [ 611.564835][T25176] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5066'. [ 611.620035][T25177] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5066'. [ 611.768259][T25185] netlink: 'syz.1.5069': attribute type 89 has an invalid length. [ 611.835688][T23112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.857463][T23112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.871576][T25186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5067'. [ 611.961076][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5070'. [ 611.963648][T25163] lec:lec_atm_close: lec0: Shut down! [ 612.288150][T25218] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5074'. [ 612.339849][T25218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5074'. [ 612.428624][T25224] ip6tnl4: entered promiscuous mode [ 612.657868][T25235] xt_CT: No such helper "snmp_trap" [ 613.232978][T25272] netlink: 'syz.0.5087': attribute type 3 has an invalid length. [ 613.267747][T25272] nbd: must specify at least one socket [ 613.290005][T25272] nbd: couldn't find device at index 0 [ 613.370702][T25272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 613.417213][T25286] lo: left allmulticast mode [ 613.442810][T25286] tunl0: left allmulticast mode [ 613.510847][T25286] gre0: left allmulticast mode [ 613.530234][T25286] gretap0: left allmulticast mode [ 613.537594][T25286] erspan0: left allmulticast mode [ 613.570124][T25286] ip_vti0: left allmulticast mode [ 613.595187][T25286] ip6_vti0: left allmulticast mode [ 613.612761][T25286] sit0: left allmulticast mode [ 613.646703][T25286] ip6tnl0: left allmulticast mode [ 613.663802][T25286] ip6gre0: left allmulticast mode [ 613.673603][T25286] ip6gretap0: left allmulticast mode [ 613.683119][T25286] vcan0: left allmulticast mode [ 613.692457][T25286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.714599][T25286] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.724014][T25286] nlmon0: left allmulticast mode [ 613.730861][T25286] caif0: left allmulticast mode [ 613.736381][T25286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.782682][T25309] batadv_slave_0: entered promiscuous mode [ 613.950497][T25314] batadv_slave_0: left promiscuous mode [ 614.003027][T25320] syzkaller0: entered promiscuous mode [ 614.008807][T25320] syzkaller0: entered allmulticast mode [ 614.067259][T25326] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20000 [ 614.139480][T25331] netlink: 'syz.4.5100': attribute type 10 has an invalid length. [ 614.194861][T25339] netlink: 'syz.4.5100': attribute type 10 has an invalid length. [ 614.293839][T25331] team0: Port device dummy0 added [ 614.458258][T25339] team0: Port device dummy0 removed [ 614.560108][T25339] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 615.536989][T25407] bridge_slave_0 (unregistering): left allmulticast mode [ 615.565403][T25407] bridge_slave_0 (unregistering): left promiscuous mode [ 615.572451][T25407] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.765802][T25429] __nla_validate_parse: 14 callbacks suppressed [ 615.765823][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5120'. [ 615.798038][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5120'. [ 615.915978][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.961860][T25442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5121'. [ 616.015515][T25442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5121'. [ 616.171792][T25462] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5127'. [ 616.516789][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.526046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.761399][T25496] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5134'. [ 616.793450][T25503] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5136'. [ 616.825444][T25496] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 616.906012][T25501] syzkaller0: entered promiscuous mode [ 616.914256][T25501] 0: reclassify loop, rule prio 0, protocol 800 [ 616.981629][T25511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5134'. [ 617.010290][T25511] openvswitch: netlink: Flow key attr not present in new flow. [ 617.311618][T25527] tipc: Enabling of bearer rejected, failed to enable media [ 617.409237][T25526] tipc: Enabling of bearer rejected, failed to enable media [ 617.512136][T25526] netlink: 'syz.1.5139': attribute type 10 has an invalid length. [ 617.520418][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5139'. [ 617.989731][T25560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5143'. [ 618.110810][ T5491] lec:lec_start_xmit: lec0:No lecd attached [ 618.288882][T25564] lo speed is unknown, defaulting to 1000 [ 618.680800][T25576] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 619.232304][T25582] lo speed is unknown, defaulting to 1000 [ 619.330682][T25605] IPVS: Scheduler module ip_vs_ not found [ 619.494978][T25603] syzkaller1: entered promiscuous mode [ 619.500726][T25603] syzkaller1: entered allmulticast mode [ 619.510119][T25603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.519581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.531527][T25603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.540137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.665101][T25623] tipc: Resetting bearer [ 620.171332][T25641] syzkaller1: entered promiscuous mode [ 620.176940][T25641] syzkaller1: entered allmulticast mode [ 620.421586][T25650] 8021q: VLANs not supported on vcan0 [ 620.570132][T25660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.594253][T25658] netlink: 'syz.4.5170': attribute type 10 has an invalid length. [ 620.604551][T25656] netlink: 'syz.0.5169': attribute type 2 has an invalid length. [ 620.668138][T25656] netlink: 'syz.0.5169': attribute type 12 has an invalid length. [ 620.765037][T25670] netlink: 'syz.4.5174': attribute type 1 has an invalid length. [ 620.865980][T25670] bond12: entered promiscuous mode [ 620.871539][T25670] 8021q: adding VLAN 0 to HW filter on device bond12 [ 620.880890][T25678] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 620.928263][T25670] 8021q: adding VLAN 0 to HW filter on device bond12 [ 620.936484][T25670] bond12: (slave vti1): The slave device specified does not support setting the MAC address [ 620.948726][T25670] bond12: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 620.964351][T25670] bond12: (slave vti1): making interface the new active one [ 620.973642][T25670] vti1: entered promiscuous mode [ 620.980608][T25670] bond12: (slave vti1): Enslaving as an active interface with an up link [ 621.360807][T25716] bridge6: entered promiscuous mode [ 621.387442][T25716] bridge6: entered allmulticast mode [ 621.415929][T25716] team0: Port device bridge6 added [ 621.535562][T25723] __nla_validate_parse: 11 callbacks suppressed [ 621.535580][T25723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5187'. [ 621.564298][T25726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5188'. [ 622.203953][T25746] syzkaller0: entered allmulticast mode [ 622.266503][T25746] syzkaller0 (unregistering): left allmulticast mode [ 622.434893][T25768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5198'. [ 622.459526][T25768] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5198'. [ 622.478822][T25768] tipc: Invalid UDP bearer configuration [ 622.478879][T25768] tipc: Enabling of bearer rejected, failed to enable media [ 622.505795][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 622.544402][T25768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5198'. [ 622.604583][T25774] lo speed is unknown, defaulting to 1000 [ 622.632940][T25770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5199'. [ 623.319434][T25802] bond13: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 623.369704][T25802] bond13 (unregistering): Released all slaves [ 623.498563][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5211'. [ 623.512652][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5211'. [ 623.536231][T25800] netlink: 'syz.3.5210': attribute type 29 has an invalid length. [ 623.633047][T25806] lo speed is unknown, defaulting to 1000 [ 623.756092][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 623.764970][ C0] lec:lec_tx_timeout: lec0 [ 623.770013][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 623.995838][T25853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5222'. [ 624.072947][T25858] netlink: 'syz.2.5221': attribute type 11 has an invalid length. [ 624.082020][T25858] netlink: 'syz.2.5221': attribute type 23 has an invalid length. [ 624.239498][ T1304] net_ratelimit: 2048 callbacks suppressed [ 624.239518][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.257429][T25848] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.305514][ T24] IPVS: starting estimator thread 0... [ 624.327334][T25872] netlink: 'syz.4.5224': attribute type 1 has an invalid length. [ 624.362437][T25869] gretap1: entered promiscuous mode [ 624.395485][T25871] IPVS: using max 28 ests per chain, 67200 per kthread [ 624.441142][T25872] bond13: entered promiscuous mode [ 624.467373][T25872] 8021q: adding VLAN 0 to HW filter on device bond13 [ 624.528108][T25877] bond13: (slave bridge4): making interface the new active one [ 624.536883][T25877] bridge4: entered promiscuous mode [ 624.544436][T25877] bridge4: left promiscuous mode [ 624.828305][T25882] xt_CT: No such helper "syz1" [ 625.576598][T25934] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 625.746613][T25947] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 625.746613][T25946] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 625.914705][T25947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 626.024419][T25949] bond7: (slave veth5): Enslaving as an active interface with a down link [ 626.159857][T25964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.394246][T25985] netlink: 'syz.0.5248': attribute type 96 has an invalid length. [ 626.431888][T25987] netlink: 'syz.0.5248': attribute type 96 has an invalid length. [ 626.626432][T26003] macsec2: entered allmulticast mode [ 626.825446][T26010] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 626.887335][T26018] lo speed is unknown, defaulting to 1000 [ 626.998538][T26010] __nla_validate_parse: 6 callbacks suppressed [ 626.998558][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'. [ 627.014155][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5261'. [ 627.024501][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5261'. [ 627.138659][T26034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5262'. [ 627.168100][T26010] bond6: entered promiscuous mode [ 627.199029][T26010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.219512][T26034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5262'. [ 627.291271][T26024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.326071][T26024] bond6: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 627.346675][T26024] bond6: (slave ip6tnl2): Error -95 calling set_mac_address [ 627.400967][T26050] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5266'. [ 627.563372][T26057] FAULT_INJECTION: forcing a failure. [ 627.563372][T26057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.653820][T26057] CPU: 0 UID: 0 PID: 26057 Comm: syz.4.5269 Not tainted syzkaller #0 PREEMPT(full) [ 627.653877][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.653889][T26057] Call Trace: [ 627.653898][T26057] [ 627.653906][T26057] dump_stack_lvl+0xe8/0x150 [ 627.653938][T26057] should_fail_ex+0x412/0x560 [ 627.653971][T26057] _copy_to_user+0x31/0xb0 [ 627.653994][T26057] simple_read_from_buffer+0xe1/0x170 [ 627.654027][T26057] proc_fail_nth_read+0x1bb/0x230 [ 627.654057][T26057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.654087][T26057] ? rw_verify_area+0x2a6/0x4d0 [ 627.654106][T26057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.654134][T26057] vfs_read+0x20c/0xa70 [ 627.654153][T26057] ? fdget_pos+0x246/0x320 [ 627.654175][T26057] ? __pfx___mutex_lock+0x10/0x10 [ 627.654203][T26057] ? __pfx_vfs_read+0x10/0x10 [ 627.654225][T26057] ? __fget_files+0x2a/0x420 [ 627.654256][T26057] ? __fget_files+0x3a0/0x420 [ 627.654282][T26057] ? __fget_files+0x2a/0x420 [ 627.654316][T26057] ksys_read+0x150/0x270 [ 627.654340][T26057] ? __pfx_ksys_read+0x10/0x10 [ 627.654372][T26057] do_syscall_64+0x14d/0xf80 [ 627.654397][T26057] ? trace_irq_disable+0x3b/0x150 [ 627.654414][T26057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.654433][T26057] ? clear_bhb_loop+0x40/0x90 [ 627.654455][T26057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.654473][T26057] RIP: 0033:0x7f1aafd5d04e [ 627.654491][T26057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.654506][T26057] RSP: 002b:00007f1ab0c2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.654526][T26057] RAX: ffffffffffffffda RBX: 00007f1ab0c2c6c0 RCX: 00007f1aafd5d04e [ 627.654539][T26057] RDX: 000000000000000f RSI: 00007f1ab0c2c0a0 RDI: 0000000000000004 [ 627.654550][T26057] RBP: 00007f1ab0c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 627.654562][T26057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.654573][T26057] R13: 00007f1ab0016038 R14: 00007f1ab0015fa0 R15: 00007fff1d643538 [ 627.654604][T26057] [ 628.316967][T26085] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5276'. [ 628.373583][T26088] netlink: 'syz.2.5277': attribute type 1 has an invalid length. [ 628.435904][T26083] netlink: 'syz.4.5275': attribute type 2 has an invalid length. [ 628.519753][T26083] tipc: Resetting bearer [ 628.795310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 628.803350][ C0] lec:lec_tx_timeout: lec0 [ 628.808068][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.774634][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5288'. [ 629.811179][T26136] tipc: Enabling of bearer rejected, already enabled [ 630.119463][T26144] x_tables: duplicate underflow at hook 2 [ 630.469196][T26169] netlink: 'syz.2.5293': attribute type 142 has an invalid length. [ 630.593133][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 630.643279][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 630.960909][T26193] sctp: [Deprecated]: syz.3.5300 (pid 26193) Use of int in maxseg socket option. [ 630.960909][T26193] Use struct sctp_assoc_value instead [ 631.009224][T26193] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 631.067812][T26196] netlink: zone id is out of range [ 631.072980][T26196] netlink: zone id is out of range [ 631.148048][T26196] netlink: zone id is out of range [ 631.149280][T26194] netlink: zone id is out of range [ 631.189127][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.197596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.207844][T26194] netlink: zone id is out of range [ 631.218367][T26194] netlink: zone id is out of range [ 631.225568][T26196] netlink: zone id is out of range [ 631.230741][T26196] netlink: zone id is out of range [ 631.275474][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.318299][T26208] FAULT_INJECTION: forcing a failure. [ 631.318299][T26208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.335416][T26208] CPU: 0 UID: 0 PID: 26208 Comm: syz.0.5304 Not tainted syzkaller #0 PREEMPT(full) [ 631.335440][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.335451][T26208] Call Trace: [ 631.335457][T26208] [ 631.335465][T26208] dump_stack_lvl+0xe8/0x150 [ 631.335494][T26208] should_fail_ex+0x412/0x560 [ 631.335522][T26208] _copy_from_iter+0x1d3/0x1670 [ 631.335551][T26208] ? rcu_is_watching+0x15/0xb0 [ 631.335581][T26208] ? __pfx__copy_from_iter+0x10/0x10 [ 631.335613][T26208] ? netlink_sendmsg+0x650/0xb40 [ 631.335629][T26208] ? skb_put+0x11b/0x210 [ 631.335653][T26208] netlink_sendmsg+0x6c0/0xb40 [ 631.335678][T26208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.335699][T26208] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.335726][T26208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.335761][T26208] ____sys_sendmsg+0x972/0x9f0 [ 631.335792][T26208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.335821][T26208] ? import_iovec+0x73/0xa0 [ 631.335845][T26208] ___sys_sendmsg+0x2a5/0x360 [ 631.335873][T26208] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.335932][T26208] ? __fget_files+0x2a/0x420 [ 631.335958][T26208] ? __fget_files+0x3a0/0x420 [ 631.335994][T26208] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.336025][T26208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.336058][T26208] ? __pfx_ksys_write+0x10/0x10 [ 631.336091][T26208] do_syscall_64+0x14d/0xf80 [ 631.336117][T26208] ? trace_irq_disable+0x3b/0x150 [ 631.336132][T26208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.336150][T26208] ? clear_bhb_loop+0x40/0x90 [ 631.336171][T26208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.336189][T26208] RIP: 0033:0x7f6a5bb9c819 [ 631.336206][T26208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.336221][T26208] RSP: 002b:00007f6a59df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.336240][T26208] RAX: ffffffffffffffda RBX: 00007f6a5be16090 RCX: 00007f6a5bb9c819 [ 631.336252][T26208] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 631.336262][T26208] RBP: 00007f6a59df6090 R08: 0000000000000000 R09: 0000000000000000 [ 631.336274][T26208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.336284][T26208] R13: 00007f6a5be16128 R14: 00007f6a5be16090 R15: 00007ffc01b18ce8 [ 631.336311][T26208] [ 632.378463][T26256] __nla_validate_parse: 6 callbacks suppressed [ 632.378481][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5315'. [ 632.409695][T26257] batadv1: entered promiscuous mode [ 632.415065][T26257] batadv1: entered allmulticast mode [ 632.438389][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 632.513254][T26254] hsr_slave_0: left promiscuous mode [ 632.522167][T26254] hsr_slave_1: left promiscuous mode [ 632.531902][T26254] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 632.577966][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 632.579677][T26264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 632.619973][T26264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 632.630069][T26254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5318'. [ 632.665720][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5321'. [ 632.721188][T26270] blkio.reset_stats is deprecated [ 632.756242][T26268] netlink: 'syz.4.5320': attribute type 8 has an invalid length. [ 632.791051][T26267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5319'. [ 633.013913][T26273] netlink: 'syz.2.5322': attribute type 4 has an invalid length. [ 633.235639][T26302] netlink: 'syz.3.5330': attribute type 3 has an invalid length. [ 633.815353][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 633.823475][ C0] lec:lec_tx_timeout: lec0 [ 633.828782][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.125508][T26327] vlan0: entered promiscuous mode [ 634.140179][T26327] vlan0: entered allmulticast mode [ 634.171894][T26332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 634.208949][T26332] netlink: 'syz.0.5338': attribute type 1 has an invalid length. [ 634.287281][T26332] bond8: entered promiscuous mode [ 634.351385][T26332] 8021q: adding VLAN 0 to HW filter on device bond8 [ 634.499312][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 634.506577][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 634.513826][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 634.521016][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 634.528653][T18875] block nbd4: Dead connection, failed to find a fallback [ 634.539259][T18875] block nbd4: shutting down sockets [ 634.544481][T18875] blk_print_req_error: 138 callbacks suppressed [ 634.544496][T18875] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.561542][T18875] buffer_io_error: 138 callbacks suppressed [ 634.561557][T18875] Buffer I/O error on dev nbd4, logical block 2, async page read [ 634.576147][T18875] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.586383][T18875] Buffer I/O error on dev nbd4, logical block 1, async page read [ 634.594129][T18875] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.604162][T18875] Buffer I/O error on dev nbd4, logical block 0, async page read [ 634.612419][T18875] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.622672][T18875] Buffer I/O error on dev nbd4, logical block 3, async page read [ 634.631618][T24782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.651792][T24782] Buffer I/O error on dev nbd4, logical block 0, async page read [ 634.672066][T24782] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.695337][T24782] Buffer I/O error on dev nbd4, logical block 1, async page read [ 634.703141][T24782] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.725331][T24782] Buffer I/O error on dev nbd4, logical block 2, async page read [ 634.733128][T24782] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.765343][T24782] Buffer I/O error on dev nbd4, logical block 3, async page read [ 634.773157][T24782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.795427][T24782] Buffer I/O error on dev nbd4, logical block 0, async page read [ 634.803228][T24782] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.875401][T24782] Buffer I/O error on dev nbd4, logical block 1, async page read [ 634.883809][T24782] ldm_validate_partition_table(): Disk read failed. [ 634.930486][T24782] Dev nbd4: unable to read RDB block 0 [ 634.956229][T24782] nbd4: unable to read partition table [ 635.026465][T24782] ldm_validate_partition_table(): Disk read failed. [ 635.033512][T24782] Dev nbd4: unable to read RDB block 0 [ 635.039815][T24782] nbd4: unable to read partition table [ 635.639056][T26392] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 635.657224][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 635.686973][T26396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5355'. [ 635.950995][T26407] syzkaller0: entered promiscuous mode [ 636.059029][T26409] batadv_slave_0: Caught tx_queue_len zero misconfig [ 636.137469][T26413] IPVS: set_ctl: invalid protocol: 51 172.20.20.49:20004 [ 636.149918][T26414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5360'. [ 638.038229][T26414] pim6reg: entered allmulticast mode [ 638.068743][T26423] macsec3: entered promiscuous mode [ 638.212758][T26434] netlink: 'syz.2.5366': attribute type 39 has an invalid length. [ 638.226377][T26435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5366'. [ 638.246351][T26435] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5366'. [ 638.258506][T26435] netlink: 'syz.2.5366': attribute type 5 has an invalid length. [ 638.266883][T26435] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5366'. [ 638.835295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 638.843347][ C0] lec:lec_tx_timeout: lec0 [ 638.848276][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.002345][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 639.314294][T26505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5384'. [ 640.238501][T26546] netlink: 'syz.3.5393': attribute type 1 has an invalid length. [ 640.248278][T26513] lec:lec_atm_close: lec0: Shut down! [ 640.255450][T23102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.263273][T23102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.333512][T26546] bond4: entered promiscuous mode [ 640.375141][T26550] netlink: 'syz.3.5393': attribute type 2 has an invalid length. [ 640.390490][T26546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.500712][T26557] netlink: 'syz.4.5396': attribute type 1 has an invalid length. [ 640.523052][T26546] macvtap0: entered allmulticast mode [ 640.539748][T26557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5396'. [ 640.593938][T26546] bond4: (slave bridge4): making interface the new active one [ 640.625332][T26546] bridge4: entered promiscuous mode [ 640.646742][T26546] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 640.791823][T26571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5402'. [ 640.870563][T26570] lo speed is unknown, defaulting to 1000 [ 640.938683][T26577] netlink: 'syz.0.5405': attribute type 11 has an invalid length. [ 641.010920][T26584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5408'. [ 641.027849][T26579] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 641.170868][T26594] netlink: 'syz.0.5410': attribute type 1 has an invalid length. [ 641.196200][T26596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5411'. [ 641.207813][T26594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5410'. [ 641.264801][T26579] lo speed is unknown, defaulting to 1000 [ 641.454244][T26610] bond9 (unregistering): Released all slaves [ 641.528166][T18875] block nbd3: Possible stuck request ffff8880269a0000: control (read@0,1024B). Runtime 240 seconds [ 641.551120][T18875] block nbd3: Possible stuck request ffff8880269a0200: control (read@1024,1024B). Runtime 240 seconds [ 641.562784][T18875] block nbd3: Possible stuck request ffff8880269a0400: control (read@2048,1024B). Runtime 240 seconds [ 641.574634][T18875] block nbd3: Possible stuck request ffff8880269a0600: control (read@3072,1024B). Runtime 240 seconds [ 642.459141][T26646] syzkaller0: entered promiscuous mode [ 642.475450][T26646] syzkaller0: entered allmulticast mode [ 642.547899][T26657] netlink: 'syz.2.5429': attribute type 1 has an invalid length. [ 642.557733][T26657] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 642.670734][T26664] netlink: 'syz.4.5430': attribute type 1 has an invalid length. [ 642.732266][T26664] 8021q: adding VLAN 0 to HW filter on device bond14 [ 642.754603][T26671] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 642.770534][T26671] bond14: (slave batadv2): making interface the new active one [ 642.779967][T26671] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 642.847872][T26664] bond14 (unregistering): (slave batadv2): Releasing active interface [ 642.860923][T26664] bond14 (unregistering): Released all slaves [ 642.886875][T26673] [ 642.889222][T26673] ====================================================== [ 642.896222][T26673] WARNING: possible circular locking dependency detected [ 642.903228][T26673] syzkaller #0 Not tainted [ 642.907631][T26673] ------------------------------------------------------ [ 642.914622][T26673] syz.2.5434/26673 is trying to acquire lock: [ 642.920662][T26673] ffffffff8fd45318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 642.929773][T26673] [ 642.929773][T26673] but task is already holding lock: [ 642.937117][T26673] ffff88807aecd370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 642.946345][T26673] [ 642.946345][T26673] which lock already depends on the new lock. [ 642.946345][T26673] [ 642.956733][T26673] [ 642.956733][T26673] the existing dependency chain (in reverse order) is: [ 642.965727][T26673] [ 642.965727][T26673] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 642.973709][T26673] _raw_spin_lock_bh+0x36/0x50 [ 642.978989][T26673] nr_rt_device_down+0x153/0x860 [ 642.984434][T26673] nr_device_event+0x137/0x150 [ 642.989702][T26673] notifier_call_chain+0x1be/0x400 [ 642.995330][T26673] netif_close_many+0x2ae/0x420 [ 643.000698][T26673] netif_close+0x160/0x220 [ 643.005763][T26673] dev_close+0x10a/0x220 [ 643.010511][T26673] bpq_device_event+0x377/0x6a0 [ 643.015872][T26673] notifier_call_chain+0x1be/0x400 [ 643.021495][T26673] netif_close_many+0x2ae/0x420 [ 643.026845][T26673] netif_close+0x160/0x220 [ 643.031766][T26673] dev_close+0x10a/0x220 [ 643.036521][T26673] bond_setup_by_slave+0x5f/0x3e0 [ 643.042050][T26673] bond_enslave+0x847/0x3c10 [ 643.047144][T26673] bond_do_ioctl+0x6ec/0x8d0 [ 643.052247][T26673] dev_ifsioc+0x961/0x1280 [ 643.057167][T26673] dev_ioctl+0x7b4/0x1150 [ 643.061997][T26673] sock_do_ioctl+0x23e/0x320 [ 643.067096][T26673] sock_ioctl+0x5c6/0x7f0 [ 643.071930][T26673] __se_sys_ioctl+0xfc/0x170 [ 643.077025][T26673] do_syscall_64+0x14d/0xf80 [ 643.082125][T26673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.088520][T26673] [ 643.088520][T26673] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 643.096322][T26673] _raw_spin_lock_bh+0x36/0x50 [ 643.101599][T26673] nr_rt_device_down+0xbe/0x860 [ 643.106952][T26673] nr_device_event+0x137/0x150 [ 643.112220][T26673] notifier_call_chain+0x1be/0x400 [ 643.117841][T26673] netif_close_many+0x2ae/0x420 [ 643.123202][T26673] netif_close+0x160/0x220 [ 643.128130][T26673] dev_close+0x10a/0x220 [ 643.132883][T26673] bpq_device_event+0x377/0x6a0 [ 643.138241][T26673] notifier_call_chain+0x1be/0x400 [ 643.143867][T26673] netif_close_many+0x2ae/0x420 [ 643.149225][T26673] netif_close+0x160/0x220 [ 643.154152][T26673] dev_close+0x10a/0x220 [ 643.158902][T26673] bond_setup_by_slave+0x5f/0x3e0 [ 643.164437][T26673] bond_enslave+0x847/0x3c10 [ 643.169532][T26673] bond_do_ioctl+0x6ec/0x8d0 [ 643.174633][T26673] dev_ifsioc+0x961/0x1280 [ 643.179557][T26673] dev_ioctl+0x7b4/0x1150 [ 643.184398][T26673] sock_do_ioctl+0x23e/0x320 [ 643.189516][T26673] sock_ioctl+0x5c6/0x7f0 [ 643.194368][T26673] __se_sys_ioctl+0xfc/0x170 [ 643.199476][T26673] do_syscall_64+0x14d/0xf80 [ 643.204584][T26673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.210988][T26673] [ 643.210988][T26673] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 643.218886][T26673] __lock_acquire+0x15a5/0x2cf0 [ 643.224252][T26673] lock_acquire+0xf0/0x2e0 [ 643.229176][T26673] _raw_spin_lock_bh+0x36/0x50 [ 643.234448][T26673] nr_rt_ioctl+0x40c/0xf90 [ 643.239365][T26673] sock_do_ioctl+0x101/0x320 [ 643.244467][T26673] sock_ioctl+0x5c6/0x7f0 [ 643.249308][T26673] __se_sys_ioctl+0xfc/0x170 [ 643.254405][T26673] do_syscall_64+0x14d/0xf80 [ 643.259506][T26673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.265899][T26673] [ 643.265899][T26673] other info that might help us debug this: [ 643.265899][T26673] [ 643.276103][T26673] Chain exists of: [ 643.276103][T26673] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 643.276103][T26673] [ 643.289904][T26673] Possible unsafe locking scenario: [ 643.289904][T26673] [ 643.297333][T26673] CPU0 CPU1 [ 643.302677][T26673] ---- ---- [ 643.308022][T26673] lock(&nr_node->node_lock); [ 643.312769][T26673] lock(nr_node_list_lock); [ 643.319861][T26673] lock(&nr_node->node_lock); [ 643.327123][T26673] lock(nr_neigh_list_lock); [ 643.331783][T26673] [ 643.331783][T26673] *** DEADLOCK *** [ 643.331783][T26673] [ 643.339905][T26673] 2 locks held by syz.2.5434/26673: [ 643.345080][T26673] #0: ffffffff8fd45378 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 643.354570][T26673] #1: ffff88807aecd370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 643.364216][T26673] [ 643.364216][T26673] stack backtrace: [ 643.370087][T26673] CPU: 0 UID: 0 PID: 26673 Comm: syz.2.5434 Not tainted syzkaller #0 PREEMPT(full) [ 643.370105][T26673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.370116][T26673] Call Trace: [ 643.370124][T26673] [ 643.370133][T26673] dump_stack_lvl+0xe8/0x150 [ 643.370157][T26673] print_circular_bug+0x2e1/0x300 [ 643.370183][T26673] check_noncircular+0x12e/0x150 [ 643.370209][T26673] __lock_acquire+0x15a5/0x2cf0 [ 643.370231][T26673] ? kasan_save_track+0x4f/0x80 [ 643.370254][T26673] lock_acquire+0xf0/0x2e0 [ 643.370273][T26673] ? nr_rt_ioctl+0x40c/0xf90 [ 643.370290][T26673] ? nr_rt_ioctl+0x821/0xf90 [ 643.370307][T26673] ? nr_rt_ioctl+0x40c/0xf90 [ 643.370324][T26673] _raw_spin_lock_bh+0x36/0x50 [ 643.370344][T26673] ? nr_rt_ioctl+0x40c/0xf90 [ 643.370359][T26673] nr_rt_ioctl+0x40c/0xf90 [ 643.370379][T26673] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 643.370399][T26673] ? apparmor_capable+0x126/0x170 [ 643.370420][T26673] ? capable+0x88/0xe0 [ 643.370440][T26673] ? nr_ioctl+0x1b1/0x3b0 [ 643.370465][T26673] sock_do_ioctl+0x101/0x320 [ 643.370490][T26673] ? __pfx_sock_do_ioctl+0x10/0x10 [ 643.370511][T26673] ? do_futex+0x333/0x420 [ 643.370542][T26673] sock_ioctl+0x5c6/0x7f0 [ 643.370566][T26673] ? __pfx_sock_ioctl+0x10/0x10 [ 643.370588][T26673] ? __fget_files+0x2a/0x420 [ 643.370615][T26673] ? __fget_files+0x3a0/0x420 [ 643.370637][T26673] ? __fget_files+0x2a/0x420 [ 643.370661][T26673] ? bpf_lsm_file_ioctl+0x9/0x20 [ 643.370681][T26673] ? __pfx_sock_ioctl+0x10/0x10 [ 643.370703][T26673] __se_sys_ioctl+0xfc/0x170 [ 643.370721][T26673] do_syscall_64+0x14d/0xf80 [ 643.370744][T26673] ? trace_irq_disable+0x3b/0x150 [ 643.370758][T26673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.370773][T26673] ? clear_bhb_loop+0x40/0x90 [ 643.370791][T26673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.370807][T26673] RIP: 0033:0x7fcd9c59c819 [ 643.370822][T26673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.370836][T26673] RSP: 002b:00007fcd9d44c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.370852][T26673] RAX: ffffffffffffffda RBX: 00007fcd9c815fa0 RCX: 00007fcd9c59c819 [ 643.370865][T26673] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 643.370875][T26673] RBP: 00007fcd9c632c91 R08: 0000000000000000 R09: 0000000000000000 [ 643.370885][T26673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.370895][T26673] R13: 00007fcd9c816038 R14: 00007fcd9c815fa0 R15: 00007fffb07b9908 [ 643.370912][T26673] [ 645.755408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 645.763421][ C0] lec:lec_tx_timeout: lec0 [ 645.767996][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.795318][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 650.803351][ C0] lec:lec_tx_timeout: lec0 [ 650.807930][ C0] lec:lec_start_xmit: lec0:No lecd attached