last executing test programs: 11.857337028s ago: executing program 1 (id=3230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r2, 0x519, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x26}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x95a5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff63}, @NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "0171ab7cfc241a46d11b8f27b7a96aab45e471bbb450fb89c1a1e5ca2ba4feb5b248865c8b0a58606ba5e96b6eda9f2a6b701495b1d9e85f8cd357645f370452bb01a8e04b109b0d0b672cd4f1d014ae8fa5f4ebd5319f9c668ce197fe7ab1d13f785f6e92b069593ddf76c411241a7808"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x756d}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2002c0d1}, 0x20000) r4 = socket(0x9, 0x6, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x80, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4a, 0x2, "1861b394adb2f3b94d7012801e1ec42434152d3eee99531cca988529f3cf34b1bcf3b02b15efe1ce7188a1d122962bc06ba8566b0256cba7125dc15eec7b7f490ee44efbe561"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "b6d31b2fdbf8ab023a1f17159a4ee8277ba1a29117"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x2]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x29}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000780)={'ip6gretap0\x00', {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x91d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x142}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40008c1) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r5, &(0x7f00000009c0)={0x2, 0x0, @multicast1}, &(0x7f0000000a00)=0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a40)={r0, 0x7, 0x6, 0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f0000000a80)={[{0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'rlimit'}, {0xd8523b0ffa7f5d18, 'rdma'}]}, 0x1a) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000ac0)) r9 = socket$inet6(0xa, 0x4, 0xfff) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000b40)={0x5, &(0x7f0000000b00)=[{0x4c7e, 0x6, 0x8, 0x80000001}, {0x3, 0x5, 0x2, 0xffffffff}, {0x0, 0x2, 0x2, 0xff}, {0x4, 0xdc, 0x9, 0x2f}, {0x8, 0x7f, 0xf7, 0x1}]}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000b80)=0x1, 0x4) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000bc0)={'pim6reg0\x00', 0x4000}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb8, r11, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffb09}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) setsockopt$inet_buf(r8, 0x0, 0x25, &(0x7f0000000dc0)="82e783329dfeb072099c635c034673d2b6991f572cf3a6ffb9b0714055e776230010885d4145fa8f7865db01b311d12bdf8e71", 0x33) sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004854) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000000f40)) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000c) 11.23601129s ago: executing program 1 (id=3235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018007b18e00212ba0d8105040a0a9100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6fd4007100a007a290457f0189b316277ce06bbace8017cbec4c2fe5a7cef4090000001fb791643a5ee4b01602b2a10800ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20008000) syz_emit_ethernet(0x5eb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000600)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140c, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048081) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 10.70154664s ago: executing program 1 (id=3240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x48080) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x3, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xfd, 0xfffffffa, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x10, 0x0, 0xe06}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r11) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fbffdd1f00000000", @ANYRES32=r12, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r12, @ANYRES32=r11], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x334, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "87d8fccf9912944e34bebafb7ec1c7eb3717ee2b8e73d03c0d38971825b22b63256e6994510180ac69749ddb5ff3f1de31d18667c81a4ce46c34640b503e330aa6c5c8b7d8a1"}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "15ba1ee8ebb6bcf4de3c02b89f29de5d76bff2f73c88afbc77a577c7d3941319432c7d09504d90d68027d9a9094583a05480557edbefa2b3d9ee11646d6eda9d6133fe396495a7337ecaac708563fcf08c3d482097db803ff56d4067914f5500e13b72d4efb0e9ccebca44bda43501078e8b298b02f240c11648babeb74381d7edf8f86009a89895e9202c18b8c49ce0a4e53622eb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@#^@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x62, 0x5, "7d807cd7af3c5e327dee22a5888e021ed91f258b9c8608dfde85ab5445468f106f7a53455a40d7cb4c9ccce1b47b1a7e0eb1e29364bf44d33427b4b2a9c7f7cf92a9951201cee5c92f05b4c562847c5624549ef1931552628f502d430a9b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "1ba2e7ec1d6d48803dda93353339115e35f815a0090a513cf65e31b73bb3194fc10152c3ef0a01eed53b363cf6453191cf954f2ee9ce56a248efefad5acea9b2e1a55341c8296ebb87bdf49c89f7beaabccaa3a2a6a10ec9a46c395919a31f08bf6c352c9d294ff5237574d6ce963273d3515c2247ee1a4be01148dbbf3bcc3a9734e7b9fec039c7e939be190cdf5110c10a6748f73af22e7d182db63892c8692df7a9faed72ec1c6805b96292179b40bad250a6acf0678ad2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20004044}, 0x8000) 10.350482591s ago: executing program 1 (id=3243): r0 = socket$inet6(0xa, 0x80000, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x6, 0x0, 0x7ffffffc, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffc}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff, 0x1, 0x3, 0x2}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf25140000000c00018008000100", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x400c4}, 0x844) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10100) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={r2, &(0x7f0000000140)='^[\x00', 0x20000, &(0x7f00000002c0)={@align=0x101, {0x0, 0x1, 0x1, 0xfffffffffffff570}}, 0xee00afc, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r10, r9, 0x25, 0x10, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x7], 0xffffffffffff8001}}, 0x30) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000100ac1414bb080001000a01010208000200ffffffff080009000600000008000900030000000800090008010000"], 0x48}, 0x1, 0x0, 0x0, 0x4048814}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) 9.707422248s ago: executing program 1 (id=3247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x12504000) (async) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x12504000) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000100)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c0000003a38ac30", 0x34) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x20008000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x20008000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) 9.534250188s ago: executing program 1 (id=3249): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) (async) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) writev(r2, &(0x7f00000026c0)=[{&(0x7f0000000100)="6560b2b1bf97ab86477dd515ec8fdf498444e1724dcbf1cd4bd3fed4da2daa79062560835a958a8a35c5b096505115d41048a888c894952ea14517c3d8c48eb7929a11d17c73fbd63f62d4738f042bacbd52396cfc1fca0626e2ca8084e1219424bb4fa002b7cf11c6246fc0f02bac4a400ec248b91802c49008bc963cf1eff0da1e5fbbfe6e7435", 0x88}, {&(0x7f00000001c0)="7771f40eaf7bd512ce9462be4e710d5f0827ff808545900687d1de15d5f842696f5e756353708ea2cab8fe70bd86d1ccbfaca8d192596fe074cf6b04b32d40bdff0bcd", 0x43}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="591c4ec8f9f962b2473cf5a99b09cdd68133e08a5469f9665850ab9a0c5afdf1a2f5ba969e0bd650ba39a4947a276fb170fbff86ae", 0x35}, {&(0x7f00000016c0)="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", 0x1000}], 0x5) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x5, 0x3}) (async) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x5, 0x3}) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000380)=""/77, 0x49}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000480)=""/237, 0xef}, {&(0x7f0000002740)=""/217, 0xd9}, {&(0x7f0000002840)=""/149, 0x95}], 0x5}, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x400, 0x4) 8.9938953s ago: executing program 4 (id=3252): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000180)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, r12, 0x309, 0x2, 0x25dfdbfc, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0326c4e7e7ff00100000012bbd7200fedbdf250000030092389eb0555562742a7a6281d1ad9ba24d53eb2f294f411acd676c6413d192e879bdf40bdc2a28f130fbe3891458920042ae6265f4fe990f1ea9c525dccb48baebc967273ed034a1ab63a06e49c982d531e60b4fa5289d0b2f56c573844e", @ANYRES32=0x0, @ANYBLOB="20100000130005000a000200bbbbbbbbbbbb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4018910}, 0x40080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) 8.92192627s ago: executing program 3 (id=3253): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x10043e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x7, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f00000001c0)=0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}], 0x1, 0x44008890) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x1) 8.791712773s ago: executing program 2 (id=3254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x58010}, 0x840) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000680)={r0, &(0x7f0000000080)='ip_vti0\x00', 0x80, &(0x7f00000005c0)={@_ha_fsid={[0xd, 0x3]}, {0xf, 0x1, 0x8001, 0x2}}, 0xfff, &(0x7f0000000600), &(0x7f0000000640)=0xc}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x8, 0x7}, &(0x7f0000000700)=0x8) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000041) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0xa8, 0x4, 0xcc8, 0x18, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x1000000}, 0x10, 0x20, 0x6, 0x1}}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="28a33c1358f16eb70000001000010829bc7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x392b073b2581ba53) 8.560770395s ago: executing program 4 (id=3255): socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a00000004"], 0x18}}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a780, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x48000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xe, 0xe}, {0x4, 0xfff2}}}, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="07ddfad8b45bc251e43d3d86d7", 0xd}, {0x0}], 0x2}, 0x20004014) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 8.029865457s ago: executing program 2 (id=3257): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="281359e0", @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf25070000000c00060003000000030000000800050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000700)=[{0x1, 0x0, {0x1, 0x0, 0x8cf4f75936296f45}, {0x3, 0xacc141b9de5e8aed, 0x4}, 0xfe, 0x1}, {0x1, 0x3, {0x0, 0xf0, 0x1}, {0x1, 0xfa6f94be1a3cb087, 0x1}, 0x2, 0xff}, {0x2, 0x3, {0x2}, {0x1, 0x1}}], 0x60) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r13, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) 4.731776932s ago: executing program 0 (id=3261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff6307309d08003d80040022800800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x61, 0x0, 0x0, &(0x7f0000000600)=""/4089, 0xff9}, 0x0) close(r7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e20, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x48) 4.653980839s ago: executing program 2 (id=3262): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r3}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 4.652009776s ago: executing program 4 (id=3263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) 4.447771092s ago: executing program 3 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, 0x1}, 0xc) 4.447081851s ago: executing program 0 (id=3265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xca, 0x6, "f390a74969fb02d7cc04de1ecf69a35d0e9f1ea4c9f8dd4ce03d8e2376fbc77bf905372ebf0df567c6a5cb8dd0e1910d8be9b421790748ee4760b728c0fc27f0472f835b7d5c76df46f3f20f33521853e8d4dc8936040e9821fcba36a16061eb4e5ce65735f280dce4b158f0b9304c1c80187aad1a2f8bedf654e59b518cf1297d622515a5574bbe632fa9545f73cf3a19c64a8c32905c9ecf44f002c5deaf226954da66b12db80195ad73de4fe9483dfca5d62722fa22dc26c62ef820c10eeb47bd60e2af8f"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1e8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4000005, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'team0\x00', {0x2, 0x4e22, @loopback}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x36, 0x1}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0xce22, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000000069000033870700b401ee4a434cd43ff9f8db067add697c9478b5bd3434f17c961f1d4c1b9921"], &(0x7f0000000600)='GPL\x00', 0x10000007, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="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"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) socket$inet_udp(0x2, 0x2, 0x0) 4.219326118s ago: executing program 3 (id=3266): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000000c0)=0xfffffffc, 0x4) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0xffffffbd, 0x40, 0x80000001]}, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)={0x1c, 0x33, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.192601575s ago: executing program 0 (id=3267): close(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000003c0)=0x1) close(0x4) 4.043183009s ago: executing program 4 (id=3268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000002a00)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0xfffffffd, @private0, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000440)="3671adbacf9f83e69e2c37c8a222b72b0719b45a4e03e53ba6d3580f6c4921ec7dda20a76aaa3c0ca51ed602ef5d6ee1069ce5b96c8ff514d1868f8a4497a67f44aac48a", 0x44}, {&(0x7f0000000580)="cfd563adddb57c974a732d6932a8d0c4c62d1daa8f174ec1", 0x18}], 0x2, &(0x7f0000001880)=[@hopopts={{0x1060, 0x29, 0x36, {0x2e, 0x208, '\x00', [@enc_lim={0x4, 0x1, 0xeb}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0xf, 0x10, [0x0, 0x6782, 0x10000, 0x1]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0xf6, 0x1000, "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"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x1d, 0x7, '\x00', [@jumbo, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x9, [0x2, 0x3ff, 0x4b5e0b8c, 0x2, 0x200]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x0, 0x9, 0x0, [@private1, @loopback, @remote, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf035}}], 0x1148}}], 0x1, 0x4040040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0503feffffff000400006b00000008000300", @ANYRES32=r13], 0x1c}}, 0x400c8dc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) write(r2, &(0x7f0000002a40)="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", 0x1000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r12, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8, 0x56}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x40) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r5], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 3.997090381s ago: executing program 3 (id=3269): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRESDEC=r4], 0x3c}}, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30200000100001022cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) socket$netlink(0x10, 0x3, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) 3.850093863s ago: executing program 0 (id=3270): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff8000000000000000000000000000bb060002000700000008000100", @ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) 3.714189861s ago: executing program 4 (id=3271): close(0x3) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32], 0x20}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e4000000190008002dbd7000fddbdf2520010000000000000000000000000000000000000000000000000000000000004e2300004e24001a0a00a0003a00000068d8a2295c34ee755142ab3e3224fb7d557f5ccf4b7b4e1056a6d7f8315c7c13acc725bd41841508de3c15f64faf784042e2f1170d945bcae1a00a78f77f0ced5cec7356d158e833b112a5f8ec702653d9dcee96a68cc08ffb94af5dd60b9a6c02b1b9be0900a0a62484d7c5958ddeefbb80423ff87c616a80d7f40d79dbedae2c49ea", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="350000000000000000000000000000800500000000000000f8ffffffffffffff00000000000000800000000000000000020000000000000003000000000000004c0f00000000000000000000000000800700000000000000010000800000000097020000b26b6e00020103000000000024000900e9710000000000000080000000000000000000000000000003000000000000000800180004000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="d56817e7", 0x4}], 0x1}, 0x4) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3.63462138s ago: executing program 2 (id=3272): socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a00000004"], 0x18}}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a780, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x48000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xe, 0xe}, {0x4, 0xfff2}}}, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="07ddfad8b45bc251e43d3d86d7", 0xd}, {0x0}], 0x2}, 0x20004014) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 3.465272343s ago: executing program 0 (id=3273): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'team_slave_1\x00', @random="020000c6fa00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000000c0)=0x29) close(r2) r5 = socket$inet(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x91, 0x1, 0x1, 0x7a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r1}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x7, 0x9, 0x6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) write(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0xfffffffe, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000002c0)="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", 0xfffffffb, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r7}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) 3.227294518s ago: executing program 3 (id=3274): socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$int_in(r0, 0x5421, &(0x7f00000009c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x498, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x468, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_STAB={0x104, 0x2, "4f6d3e6be81d6f33dbcbf5edd09585d91cd357a23de69fb2029e61f1e8f91b26997d3c074316498ecd2d776471ffc78c57901529699beea5b1e760dadbac68bef39d07fcaf0b00fff8d130f3cae4e8d9f49f6513ee6ad1730fcf04dd28fb1cda3073efa006577e45f217585970cfa0f7d151b407e2950c0198bba5f4d7c14a8e8ee10fde2bd53d6bb0fa4079ec267c1cfe0b788284aa3dff6fda18a1dbb490ca560800b17788adada768feb4619d43e55a076a48d3d8f1d3f5235901731014d31ae6fefb9b26313f97c39a3081648b4fa2c995816b0c87952bf58cde21dc8041222ed76478b359b32a4c6aa6e1ec2e65604a3700f767255c9fda7f1c19ae7eac"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x498}}, 0x40000) 464.386681ms ago: executing program 4 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a00)={r2}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000040)) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f00000001c0)=""/4096, 0x26, 0x1000, 0x1}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x67, 0x3}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000000301010100000000000000000a000015080008400000000608001a4074d90006080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004814}, 0x20000040) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0xb00}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 391.796385ms ago: executing program 3 (id=3276): r0 = socket(0x2a, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000640)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newchain={0x24, 0x64, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x1, 0xf}, {0xf, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44884) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x64, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'list:set\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}}, 0x400400c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000005c0)='\n\x00', 0x2) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4eea, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @ldst={0x1, 0x1, 0x2, 0x9, 0x3, 0x8, 0x4}, @ldst={0x2, 0xa8b2637117bb9b41, 0x3, 0xb, 0x5, 0x50, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x2, 0x4, 0x6, 0x10, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xf99a, 0x51, &(0x7f0000000140)=""/81, 0x40f00, 0x4, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0xa, 0x59}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r8, r9, r10], &(0x7f0000000400)=[{0x3, 0x2, 0x1, 0x6}, {0x2, 0x3, 0x4, 0x4}, {0x5, 0x2, 0x7}], 0x10, 0xfffffffa}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000bb7400000000000a28000000000a010400000000ffffffff050000000900010073797a3000000000080002400000000144000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000001800048014000300776e4ef8ea476fb3e9de3a0d020c6c61"], 0x94}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 368.932895ms ago: executing program 0 (id=3277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200220000000000000000000000000000000000000000000000000300000000000f0000000000000000000000920000000000000000000000000000000000000000000000000000000000200019000000000000"], 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x11}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 368.385859ms ago: executing program 2 (id=3278): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x92}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=3279): r0 = socket$inet(0x2, 0x2, 0xfffffc00) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001300)="8907ac4401be12eb69a6e6e48323e1040400de0a3cb6ebce96b5318762f4eff9d19e2d1d62712d6ed525ab0e41381c598889935e41108abff09430af5349484f99ffba4f31f055fee91450d962c567c0b6b7588d2e7e5973982548a0f6b54bec0734c267222070bba90bfb619154bb09022c124ae819588a87d017087d5a70dfd9309c5ae7895adc032b2e5d15f536bd6e12a5585eb5383207b919f81ce0339c71327ffb6e2f5c7f7a6605f22edc5d2b6b80c3d6bf232f050ca720e568884a1d15b9457e1f4f9d568d808487d34b06f26942ae8c030ec2b0fbf0e72cd4f0c4fb6aa415feeb23e445e10ce6ed3e58e9c5eddeed460c0790", 0xf7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a8004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0x2) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000001000)=r3, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dbg={0x25, 0x4, 0x8}, 0x80, 0x0}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB="f1bc347334531d5738c818e8caeed8ae9014461c18089c44942b328adf71de3d10054310a527f1e728bea8d70965e9ecce25dcc7ca77d9d0ff56e2dfa7919d1c60541574eb3d7d1ffbb3c10a2f8913b55f56ebc3a550825abf6b0c76fc5be55369eb9db28bdb55dae602c194a23c1c0123d362861c5d46b50cdc0941065a790fd883eff67965ee25fe9c267192f642c8ee90d1586bf6867d0896b8de8ec41a10c3c64d6b94749b672516", @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) kernel console output (not intermixed with test programs): parsing attributes in process `syz.1.2303'. [ 477.707343][T15337] bond12: entered promiscuous mode [ 477.709280][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'. [ 477.722425][T15337] 8021q: adding VLAN 0 to HW filter on device bond12 [ 477.891101][T15351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2307'. [ 477.903199][T15349] ip_vti0: entered promiscuous mode [ 477.911005][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 477.917031][T15351] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2307'. [ 478.001680][T15353] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 478.216205][T15369] tunl0: Caught tx_queue_len zero misconfig [ 478.394119][ T3386] net_ratelimit: 13 callbacks suppressed [ 478.394136][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.633370][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.922948][T15360] lo speed is unknown, defaulting to 1000 [ 479.046328][T15360] lo speed is unknown, defaulting to 1000 [ 479.123515][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.200971][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.353748][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 479.514196][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.548914][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.673363][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.674397][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 479.682307][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 480.154236][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.683779][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.713472][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.378902][T15377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.608784][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'. [ 481.619761][T15437] syzkaller0: entered promiscuous mode [ 481.625804][T15437] syzkaller0: entered allmulticast mode [ 481.753459][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.073917][T15463] IPv6: NLM_F_REPLACE set, but no existing node found! [ 482.078882][T15465] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2333'. [ 482.107181][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2333'. [ 482.464526][T15485] bridge_slave_1: invalid flags given to default FDB implementation [ 482.618762][T15493] syzkaller0: entered promiscuous mode [ 482.627089][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 482.643380][T15493] syzkaller0: entered allmulticast mode [ 482.689596][T15496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2343'. [ 483.090885][T15505] bond13: entered promiscuous mode [ 483.119016][T15505] bond13: entered allmulticast mode [ 483.148893][T15505] 8021q: adding VLAN 0 to HW filter on device bond13 [ 483.535134][T15526] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 483.582004][T15526] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2354'. [ 483.613477][T15526] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2354'. [ 483.637418][T15531] syzkaller0: entered promiscuous mode [ 483.640696][T15528] netlink: 'syz.4.2355': attribute type 10 has an invalid length. [ 483.659936][T15531] syzkaller0: entered allmulticast mode [ 483.662177][T15526] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.2354'. [ 483.673670][T15531] tipc: Resetting bearer [ 483.682213][T15528] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2355'. [ 483.753141][T15526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 483.833474][ C0] net_ratelimit: 10 callbacks suppressed [ 483.833492][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.051646][T15552] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 484.073800][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.230941][T15552] bond14: entered promiscuous mode [ 484.293169][T15552] 8021q: adding VLAN 0 to HW filter on device bond14 [ 484.431803][T15561] bond14: (slave bridge12): making interface the new active one [ 484.453985][T15561] bridge12: entered promiscuous mode [ 484.466049][T15561] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 484.625850][T15579] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2363'. [ 484.883368][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.010345][T15594] syzkaller0: entered promiscuous mode [ 485.024904][T15594] syzkaller0: entered allmulticast mode [ 485.233945][ T6068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.274977][ T6068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.283123][ T6068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.332271][T15570] lo speed is unknown, defaulting to 1000 [ 485.470001][T15610] FAULT_INJECTION: forcing a failure. [ 485.470001][T15610] name failslab, interval 1, probability 0, space 0, times 1 [ 485.507833][T15611] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2371'. [ 485.527329][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.2.2372 Not tainted syzkaller #0 PREEMPT(full) [ 485.527354][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.527371][T15610] Call Trace: [ 485.527378][T15610] [ 485.527388][T15610] dump_stack_lvl+0xe8/0x150 [ 485.527539][T15610] should_fail_ex+0x40c/0x560 [ 485.527636][T15610] should_failslab+0xa8/0x100 [ 485.527692][T15610] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 485.527721][T15610] ? __alloc_skb+0x189/0x7a0 [ 485.527831][T15610] ? __alloc_skb+0x1d7/0x7a0 [ 485.527852][T15610] ? __local_bh_enable_ip+0xd0/0x130 [ 485.527897][T15610] __alloc_skb+0x1d7/0x7a0 [ 485.527926][T15610] hidp_send_message+0xb2/0x230 [ 485.528000][T15610] hidp_connection_del+0x162/0x1d0 [ 485.528021][T15610] hidp_sock_ioctl+0x3ab/0x650 [ 485.528046][T15610] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 485.528112][T15610] ? do_vfs_ioctl+0x116f/0x1540 [ 485.528165][T15610] sock_do_ioctl+0x101/0x320 [ 485.528222][T15610] ? __pfx_sock_do_ioctl+0x10/0x10 [ 485.528241][T15610] ? hook_file_ioctl+0x1f0/0x5c0 [ 485.528353][T15610] sock_ioctl+0x57a/0x7e0 [ 485.528376][T15610] ? __pfx_sock_ioctl+0x10/0x10 [ 485.528397][T15610] ? __fget_files+0x2a/0x420 [ 485.528417][T15610] ? __fget_files+0x3a2/0x420 [ 485.528434][T15610] ? __fget_files+0x2a/0x420 [ 485.528457][T15610] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.528501][T15610] ? __pfx_sock_ioctl+0x10/0x10 [ 485.528522][T15610] __se_sys_ioctl+0xfc/0x170 [ 485.528545][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.528577][T15610] do_syscall_64+0x174/0x580 [ 485.528647][T15610] ? trace_irq_disable+0x3b/0x140 [ 485.528680][T15610] ? clear_bhb_loop+0x40/0x90 [ 485.528700][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.528716][T15610] RIP: 0033:0x7fa2c6d9ce59 [ 485.528737][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.528749][T15610] RSP: 002b:00007fa2c7c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.528771][T15610] RAX: ffffffffffffffda RBX: 00007fa2c7015fa0 RCX: 00007fa2c6d9ce59 [ 485.528784][T15610] RDX: 0000200000000180 RSI: 00000000400448c9 RDI: 0000000000000005 [ 485.528794][T15610] RBP: 00007fa2c7c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 485.528804][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.528813][T15610] R13: 00007fa2c7016038 R14: 00007fa2c7015fa0 R15: 00007ffd3e176bd8 [ 485.528842][T15610] [ 485.530851][T15610] Bluetooth: Can't allocate memory for new frame [ 485.754839][T15621] bond0: option miimon: invalid value (18446744072967730723) [ 485.813445][T15621] bond0: option miimon: allowed values 0 - 2147483647 [ 485.913759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.956518][T15623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.982728][T15623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.013652][T15570] lo speed is unknown, defaulting to 1000 [ 486.029443][T15623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.097593][T15637] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 486.555778][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 486.596783][T15648] syzkaller0: entered promiscuous mode [ 486.613299][T15648] syzkaller0: entered allmulticast mode [ 487.066897][T15676] ip6tnl5: entered allmulticast mode [ 487.186443][T15676] __nla_validate_parse: 10 callbacks suppressed [ 487.186460][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 487.203416][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.223139][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2391'. [ 487.267725][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2391'. [ 487.330517][T15679] vlan4: entered promiscuous mode [ 487.344179][T15679] veth0: entered promiscuous mode [ 487.409976][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 487.436654][T15698] bond0: option miimon: invalid value (18446744072967730723) [ 487.454690][T15698] bond0: option miimon: allowed values 0 - 2147483647 [ 487.477723][T15698] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2397'. [ 487.542083][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 487.605656][T15704] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2399'. [ 487.834011][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.147559][T15732] veth1_to_bond: entered promiscuous mode [ 488.148637][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 488.169947][T15736] veth1_to_bond: entered allmulticast mode [ 488.197435][T15729] veth1_to_bond: left allmulticast mode [ 488.203218][T15729] veth1_to_bond: left promiscuous mode [ 488.246424][T15741] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2409'. [ 488.301328][T15741] gretap0: entered promiscuous mode [ 488.464583][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2415'. [ 488.864998][T15765] net_ratelimit: 192 callbacks suppressed [ 488.865038][T15765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.932538][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.941192][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.950713][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.961837][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.986327][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.017508][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.033387][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.040753][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.064242][T15766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.133752][ T5822] ip6_tunnel: 0 xmit: Local address not yet configured! [ 489.142256][ T5822] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 489.168227][ T5734] lo speed is unknown, defaulting to 1000 [ 489.443625][ T5822] ip6_tunnel: 0 xmit: Local address not yet configured! [ 489.583769][ T5822] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 489.690078][ T6068] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.712811][ T6068] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.742852][ T6068] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.798135][T15812] ip6gre3: entered promiscuous mode [ 489.824886][T15812] ip6gre3: entered allmulticast mode [ 489.846977][ T6068] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.874848][T15809] netlink: 'syz.0.2427': attribute type 6 has an invalid length. [ 489.959804][T15816] syzkaller1: entered promiscuous mode [ 489.987070][T15816] syzkaller1: entered allmulticast mode [ 490.665412][T15834] syz0: rxe_newlink: already configured on lo [ 490.781875][T15841] veth0_macvtap: entered allmulticast mode [ 491.355660][T15888] veth0_macvtap: left allmulticast mode [ 491.361757][T15888] ip6gre3: left promiscuous mode [ 491.367200][T15888] ip6gre3: left allmulticast mode [ 491.373038][T15888] bond9: left promiscuous mode [ 491.382508][T15888] bond9: left allmulticast mode [ 491.637403][T15900] netlink: 'syz.0.2449': attribute type 30 has an invalid length. [ 491.742629][T15900] bond16: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 491.770501][T15900] bond16 (unregistering): Released all slaves [ 492.083948][T15929] netlink: 'syz.1.2459': attribute type 83 has an invalid length. [ 492.313510][ C1] ip6_tunnel: 0 xmit: Local address not yet configured! [ 492.323912][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 492.801280][T15941] xt_l2tp: v2 sid > 0xffff: 8388608 [ 492.810618][T15941] __nla_validate_parse: 13 callbacks suppressed [ 492.810637][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 492.882458][T15941] ip6gretap1: entered promiscuous mode [ 493.045854][T15954] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 493.079179][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 493.120734][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 493.143121][T15964] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2467'. [ 493.225320][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2470'. [ 493.225628][T15954] bond16: entered promiscuous mode [ 493.238671][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2470'. [ 493.285924][T15975] netlink: 'syz.1.2466': attribute type 4 has an invalid length. [ 493.320174][T15954] 8021q: adding VLAN 0 to HW filter on device bond16 [ 493.353380][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 493.358795][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 493.489726][T15965] bridge14: port 1(dummy0) entered blocking state [ 493.520397][T15965] bridge14: port 1(dummy0) entered disabled state [ 493.554312][T15965] dummy0: entered allmulticast mode [ 493.598737][T15965] dummy0: left allmulticast mode [ 493.609326][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 493.989785][T15994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2476'. [ 494.137584][T16004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2478'. [ 494.173879][ T30] audit: type=1804 audit(1781727545.954:11): pid=16007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2474" name="/newroot/516/cgroup.controllers" dev="tmpfs" ino=2659 res=1 errno=0 [ 494.210564][ T30] audit: type=1800 audit(1781727545.954:12): pid=16007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2474" name="cgroup.controllers" dev="tmpfs" ino=2659 res=0 errno=0 [ 494.235480][ C0] net_ratelimit: 162 callbacks suppressed [ 494.235499][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.251356][ T6068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.260196][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.261517][ T30] audit: type=1804 audit(1781727545.984:13): pid=16007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2474" name="/newroot/516/cgroup.controllers" dev="tmpfs" ino=2659 res=1 errno=0 [ 494.270317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.332680][T15998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2475'. [ 494.341256][T16012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.363741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.365407][T16012] tipc: Enabled bearer , priority 10 [ 494.395475][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.473672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.489305][T16015] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 494.507432][T16015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.517770][T16012] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 494.531247][T16012] tipc: Enabled bearer , priority 10 [ 494.711526][T16026] netlink: 'syz.1.2485': attribute type 10 has an invalid length. [ 494.743474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.870087][T16040] netlink: 'syz.2.2488': attribute type 4 has an invalid length. [ 495.046677][T16044] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 495.061102][T16045] bond0: option miimon: invalid value (18446744072967730723) [ 495.078988][T16045] bond0: option miimon: allowed values 0 - 2147483647 [ 495.184446][T16034] syzkaller0: entered promiscuous mode [ 495.274012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.648135][T16075] xt_socket: unknown flags 0x4 [ 495.733656][T16082] netlink: 'syz.4.2493': attribute type 10 has an invalid length. [ 497.688731][T16066] 8021q: VLANs not supported on ip_vti0 [ 497.698417][T16082] dummy0: entered promiscuous mode [ 497.861752][T16094] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 498.208382][T16059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.557603][T16131] __nla_validate_parse: 9 callbacks suppressed [ 498.557629][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'. [ 498.851389][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.911465][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.940059][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.955569][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2509'. [ 499.006825][T16140] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2507'. [ 499.030082][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.043145][T16139] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2509'. [ 499.053946][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'. [ 499.063041][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 499.241481][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 499.289005][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 499.351846][T16155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2512'. [ 499.361315][ T134] net_ratelimit: 22 callbacks suppressed [ 499.361331][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.387884][T16150] bond0: option arp_validate: invalid value (55553) [ 499.435018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.443503][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.555961][T16162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.605712][T16170] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2517'. [ 499.884950][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.994381][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.003521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.077989][ T5639] block nbd64: NBD_DISCONNECT [ 500.092954][T16186] nbd: nbd64 already in use [ 500.473441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.475833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.489025][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.029620][T16223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.085482][T16165] lo speed is unknown, defaulting to 1000 [ 501.275618][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.938586][T16165] lo speed is unknown, defaulting to 1000 [ 502.090369][T16223] lo speed is unknown, defaulting to 1000 [ 502.274289][ T50] block nbd0: Receive control failed (result -1) [ 502.553750][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.580642][T16223] lo speed is unknown, defaulting to 1000 [ 503.319424][T16304] x_tables: duplicate entry at hook 1 [ 503.598041][T16304] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 503.950187][T16315] netlink: 'syz.1.2547': attribute type 23 has an invalid length. [ 504.084261][T16319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.375155][ T6074] net_ratelimit: 26 callbacks suppressed [ 504.375172][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.421073][T16326] xt_policy: output policy not valid in PREROUTING and INPUT [ 504.474572][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.488977][T16326] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 504.518475][T16331] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 504.560500][T16331] bond15: entered promiscuous mode [ 504.566277][T16331] 8021q: adding VLAN 0 to HW filter on device bond15 [ 504.625623][T16331] ipvlan2: entered allmulticast mode [ 504.633353][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.633550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.660274][T16331] bond15: entered allmulticast mode [ 504.702000][T16334] ipvlan3: entered allmulticast mode [ 504.762088][T16331] bond15: (slave bridge15): making interface the new active one [ 504.784884][T16331] bridge15: entered promiscuous mode [ 504.799117][T16331] bridge15: entered allmulticast mode [ 504.822344][T16331] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 504.866800][T16331] __nla_validate_parse: 5 callbacks suppressed [ 504.866820][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 505.113822][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 505.116091][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.130314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.232058][T16341] tipc: Enabling of bearer rejected, already enabled [ 505.280287][T16343] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 505.325779][T16343] bond8: entered promiscuous mode [ 505.332407][T16343] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.433192][T16343] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.459778][T16343] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 505.470926][T16343] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 505.484602][T16343] bond8: (slave ip6gre1): making interface the new active one [ 505.492221][T16343] ip6gre1: entered promiscuous mode [ 505.499567][T16343] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 505.524411][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.593329][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.643439][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 505.673389][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.673516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.701625][T16350] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 505.763229][T16353] veth1_to_batadv: entered promiscuous mode [ 505.909495][T16362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2562'. [ 506.387783][T16375] 5nè‹Ò: entered promiscuous mode [ 506.586675][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 506.652042][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 506.710991][T16387] team3: entered promiscuous mode [ 506.717087][T16387] team3: entered allmulticast mode [ 506.722692][T16387] 8021q: adding VLAN 0 to HW filter on device team3 [ 506.731184][T16383] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 506.775510][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2568'. [ 506.801975][T16383] team4: entered promiscuous mode [ 506.822434][T16383] team4: entered allmulticast mode [ 506.841569][T16383] 8021q: adding VLAN 0 to HW filter on device team4 [ 506.855216][T16389] netlink: 4260 bytes leftover after parsing attributes in process `syz.1.2568'. [ 507.035141][ T11] block nbd4: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 150 seconds [ 507.046072][ T11] block nbd4: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 150 seconds [ 507.057245][ T11] block nbd4: Possible stuck request ffff88802736e380: control (read@2048,1024B). Runtime 150 seconds [ 507.068503][ T11] block nbd4: Possible stuck request ffff88802736e540: control (read@3072,1024B). Runtime 150 seconds [ 507.159387][T16396] bond9 (unregistering): Released all slaves [ 507.202070][T16404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.262614][T16373] lo speed is unknown, defaulting to 1000 [ 507.734793][T16420] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 507.783025][T16420] netlink: 'syz.1.2574': attribute type 2 has an invalid length. [ 507.808485][T16420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2574'. [ 507.834759][T16425] netlink: 'syz.3.2577': attribute type 4 has an invalid length. [ 507.891030][T16373] lo speed is unknown, defaulting to 1000 [ 508.257716][T16438] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 508.370354][T16439] vlan4: entered promiscuous mode [ 508.407737][T16439] bridge0: entered promiscuous mode [ 509.253855][T16466] FAULT_INJECTION: forcing a failure. [ 509.253855][T16466] name failslab, interval 1, probability 0, space 0, times 0 [ 509.276595][T16466] CPU: 0 UID: 0 PID: 16466 Comm: syz.2.2587 Not tainted syzkaller #0 PREEMPT(full) [ 509.276633][T16466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.276644][T16466] Call Trace: [ 509.276651][T16466] [ 509.276658][T16466] dump_stack_lvl+0xe8/0x150 [ 509.276684][T16466] should_fail_ex+0x40c/0x560 [ 509.276716][T16466] should_failslab+0xa8/0x100 [ 509.276743][T16466] __kmalloc_cache_noprof+0x88/0x660 [ 509.276766][T16466] ? lockdep_hardirqs_on+0x7a/0x110 [ 509.276869][T16466] ? __request_module+0x2d0/0x630 [ 509.276913][T16466] __request_module+0x2d0/0x630 [ 509.276935][T16466] ? rtnl_link_ops_get+0x23/0x250 [ 509.276995][T16466] ? __pfx___request_module+0x10/0x10 [ 509.277027][T16466] ? rtnl_link_ops_get+0x23/0x250 [ 509.277043][T16466] ? rtnl_link_ops_get+0x23/0x250 [ 509.277061][T16466] ? rtnl_link_ops_get+0x215/0x250 [ 509.277082][T16466] rtnl_newlink+0x61b/0x1bd0 [ 509.277133][T16466] ? is_bpf_text_address+0x26/0x2b0 [ 509.277171][T16466] ? __pfx_rtnl_newlink+0x10/0x10 [ 509.277201][T16466] ? __lock_acquire+0x683/0x2cd0 [ 509.277237][T16466] ? __lock_acquire+0x683/0x2cd0 [ 509.277273][T16466] ? unwind_next_frame+0x8f/0x2550 [ 509.277307][T16466] ? is_bpf_text_address+0x26/0x2b0 [ 509.277339][T16466] ? __lock_acquire+0x683/0x2cd0 [ 509.277364][T16466] ? kernel_text_address+0xa5/0xe0 [ 509.277388][T16466] ? __kernel_text_address+0xd/0x30 [ 509.277410][T16466] ? unwind_get_return_address+0x4d/0x90 [ 509.277429][T16466] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 509.277453][T16466] ? arch_stack_walk+0xfb/0x150 [ 509.277491][T16466] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 509.277532][T16466] ? __pfx_rtnl_newlink+0x10/0x10 [ 509.277556][T16466] rtnetlink_rcv_msg+0x802/0xc00 [ 509.277579][T16466] ? kasan_save_track+0x3e/0x80 [ 509.277609][T16466] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 509.277634][T16466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.277660][T16466] ? __lock_acquire+0x683/0x2cd0 [ 509.277691][T16466] netlink_rcv_skb+0x226/0x4a0 [ 509.277744][T16466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.277768][T16466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.277797][T16466] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.277841][T16466] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.277863][T16466] netlink_unicast+0x7bb/0x940 [ 509.277901][T16466] netlink_sendmsg+0x813/0xb40 [ 509.277929][T16466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.277952][T16466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 509.278013][T16466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.278034][T16466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.278055][T16466] ____sys_sendmsg+0x9b9/0xa20 [ 509.278074][T16466] ? __might_fault+0xaf/0x130 [ 509.278108][T16466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.278138][T16466] ? import_iovec+0x73/0xa0 [ 509.278194][T16466] ___sys_sendmsg+0x2a5/0x360 [ 509.278211][T16466] ? __lock_acquire+0x683/0x2cd0 [ 509.278234][T16466] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.278289][T16466] ? __fget_files+0x2a/0x420 [ 509.278309][T16466] ? __fget_files+0x3a2/0x420 [ 509.278339][T16466] __x64_sys_sendmsg+0x1bd/0x2a0 [ 509.278361][T16466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.278390][T16466] ? __pfx_ksys_write+0x10/0x10 [ 509.278424][T16466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.278442][T16466] do_syscall_64+0x174/0x580 [ 509.278459][T16466] ? trace_irq_disable+0x3b/0x140 [ 509.278483][T16466] ? clear_bhb_loop+0x40/0x90 [ 509.278504][T16466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.278521][T16466] RIP: 0033:0x7fa2c6d9ce59 [ 509.278539][T16466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.278554][T16466] RSP: 002b:00007fa2c7c2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.278573][T16466] RAX: ffffffffffffffda RBX: 00007fa2c7015fa0 RCX: 00007fa2c6d9ce59 [ 509.278586][T16466] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 509.278597][T16466] RBP: 00007fa2c7c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 509.278614][T16466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.278624][T16466] R13: 00007fa2c7016038 R14: 00007fa2c7015fa0 R15: 00007ffd3e176bd8 [ 509.278654][T16466] [ 509.693625][ T5822] net_ratelimit: 19 callbacks suppressed [ 509.693643][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.708031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.753336][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 509.833380][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.833624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.356715][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 510.397917][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 510.455120][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.554225][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.566467][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.578283][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.588009][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.591552][T16495] syzkaller1: entered promiscuous mode [ 510.649710][T16495] syzkaller1: entered allmulticast mode [ 510.751769][T16506] tipc: Enabling of bearer rejected, already enabled [ 510.988392][T16515] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 511.025232][T16510] syzkaller0: entered promiscuous mode [ 511.039699][T16510] syzkaller0: entered allmulticast mode [ 514.226808][T16557] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2602'. [ 514.252005][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 514.686115][T16521] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2600'. [ 514.716269][ T134] net_ratelimit: 28 callbacks suppressed [ 514.716286][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.944532][ T6068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.953512][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 515.024494][T16571] syzkaller0: entered allmulticast mode [ 515.033430][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 515.033481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.138209][T16577] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 515.177500][T16577] bond16: entered promiscuous mode [ 515.183221][T16577] 8021q: adding VLAN 0 to HW filter on device bond16 [ 515.219056][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 515.228908][T16577] bond16: entered allmulticast mode [ 515.407175][T16588] bond16: (slave bridge16): making interface the new active one [ 515.420508][T16588] bridge16: entered promiscuous mode [ 515.428769][T16588] bridge16: entered allmulticast mode [ 515.450211][T16588] bond16: (slave bridge16): Enslaving as an active interface with an up link [ 515.487074][T16598] x_tables: duplicate underflow at hook 1 [ 515.731226][T16614] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 515.750667][T16615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2617'. [ 515.760130][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.763552][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.777718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.971590][T16627] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2622'. [ 515.993510][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 515.993616][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.008782][ T3366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.458655][T16650] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2626'. [ 517.456489][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 517.715740][T16706] pim6reg1: entered promiscuous mode [ 517.721320][T16706] pim6reg1: entered allmulticast mode [ 517.827453][T16716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2649'. [ 518.068075][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 518.094878][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.119397][ T6066] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 518.129568][ T6066] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 518.141197][ T6066] bond0: now running without any active interface! [ 518.179658][T16734] tipc: Resetting bearer [ 518.272545][T16734] syzkaller0: left promiscuous mode [ 518.287382][T16734] syzkaller0: left allmulticast mode [ 518.312545][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 518.332130][T16733] tipc: Resetting bearer [ 518.451044][T16738] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.510513][T16743] bond17: (slave batadv0): Opening slave failed [ 518.552129][T16752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2659'. [ 518.564998][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2661'. [ 518.662034][T16754] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.731256][T16749] veth11: entered allmulticast mode [ 518.794821][T16760] bond9: (slave veth7): Enslaving as an active interface with an up link [ 518.852915][T16710] tipc: Resetting bearer [ 518.864328][T16769] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000 [ 518.878530][T16766] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2661'. [ 519.047928][T16779] FAULT_INJECTION: forcing a failure. [ 519.047928][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 519.076557][T16780] syzkaller0: entered promiscuous mode [ 519.082161][T16779] CPU: 1 UID: 0 PID: 16779 Comm: syz.0.2670 Not tainted syzkaller #0 PREEMPT(full) [ 519.082183][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.082192][T16779] Call Trace: [ 519.082199][T16779] [ 519.082205][T16779] dump_stack_lvl+0xe8/0x150 [ 519.082229][T16779] should_fail_ex+0x40c/0x560 [ 519.082258][T16779] _copy_from_user+0x2d/0xb0 [ 519.082369][T16779] ___sys_sendmsg+0x1c6/0x360 [ 519.082389][T16779] ? __lock_acquire+0x683/0x2cd0 [ 519.082411][T16779] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.082427][T16779] ? __lock_acquire+0x683/0x2cd0 [ 519.082448][T16779] ? kstrtouint+0x6e/0xe0 [ 519.082540][T16779] __sys_sendmmsg+0x27c/0x4e0 [ 519.082563][T16779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 519.082579][T16779] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 519.082657][T16779] ? ksys_write+0x242/0x270 [ 519.082684][T16779] ? __pfx_ksys_write+0x10/0x10 [ 519.082714][T16779] __x64_sys_sendmmsg+0xa0/0xc0 [ 519.082733][T16779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.082751][T16779] do_syscall_64+0x174/0x580 [ 519.082768][T16779] ? trace_irq_disable+0x3b/0x140 [ 519.082793][T16779] ? clear_bhb_loop+0x40/0x90 [ 519.082814][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.082832][T16779] RIP: 0033:0x7f21cff9ce59 [ 519.082857][T16779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.082872][T16779] RSP: 002b:00007f21d0d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 519.082891][T16779] RAX: ffffffffffffffda RBX: 00007f21d0215fa0 RCX: 00007f21cff9ce59 [ 519.082905][T16779] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000008 [ 519.082917][T16779] RBP: 00007f21d0d79090 R08: 0000000000000000 R09: 0000000000000000 [ 519.082928][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.082938][T16779] R13: 00007f21d0216038 R14: 00007f21d0215fa0 R15: 00007ffc2f22b488 [ 519.082968][T16779] [ 519.093388][T16780] syzkaller0: entered allmulticast mode [ 519.623179][T16802] xt_CT: No such helper "snmp_trap" [ 519.860593][T16815] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.871008][T16815] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.880727][T16815] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.896440][T16821] net_ratelimit: 36 callbacks suppressed [ 519.896454][T16821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.914911][T16821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.923987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.964445][T16818] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 519.988299][T16818] bridge4: entered allmulticast mode [ 520.153360][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 520.186011][T16835] FAULT_INJECTION: forcing a failure. [ 520.186011][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.222012][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.3.2682 Not tainted syzkaller #0 PREEMPT(full) [ 520.222038][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.222048][T16835] Call Trace: [ 520.222055][T16835] [ 520.222063][T16835] dump_stack_lvl+0xe8/0x150 [ 520.222090][T16835] should_fail_ex+0x40c/0x560 [ 520.222122][T16835] _copy_from_iter+0x3b0/0x1660 [ 520.222153][T16835] ? __pfx__copy_from_iter+0x10/0x10 [ 520.222175][T16835] ? bcm_sendmsg+0x527/0x6a0 [ 520.222329][T16835] bcm_sendmsg+0x171/0x6a0 [ 520.222359][T16835] ? __pfx_bcm_sendmsg+0x10/0x10 [ 520.222389][T16835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 520.222415][T16835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.222437][T16835] ? __pfx_bcm_sendmsg+0x10/0x10 [ 520.222462][T16835] ____sys_sendmsg+0x9b9/0xa20 [ 520.222481][T16835] ? __might_fault+0xaf/0x130 [ 520.222510][T16835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.222537][T16835] ? import_iovec+0x73/0xa0 [ 520.222560][T16835] ___sys_sendmsg+0x2a5/0x360 [ 520.222577][T16835] ? __lock_acquire+0x683/0x2cd0 [ 520.222600][T16835] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.222616][T16835] ? __lock_acquire+0x683/0x2cd0 [ 520.222639][T16835] ? kstrtouint+0x6e/0xe0 [ 520.222700][T16835] __sys_sendmmsg+0x27c/0x4e0 [ 520.222724][T16835] ? __pfx___sys_sendmmsg+0x10/0x10 [ 520.222741][T16835] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 520.222786][T16835] ? ksys_write+0x242/0x270 [ 520.222813][T16835] ? __pfx_ksys_write+0x10/0x10 [ 520.222844][T16835] __x64_sys_sendmmsg+0xa0/0xc0 [ 520.222862][T16835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.222882][T16835] do_syscall_64+0x174/0x580 [ 520.222898][T16835] ? trace_irq_disable+0x3b/0x140 [ 520.222921][T16835] ? clear_bhb_loop+0x40/0x90 [ 520.222943][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.222960][T16835] RIP: 0033:0x7f006859ce59 [ 520.222978][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.222993][T16835] RSP: 002b:00007f00667f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 520.223011][T16835] RAX: ffffffffffffffda RBX: 00007f0068815fa0 RCX: 00007f006859ce59 [ 520.223024][T16835] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000008 [ 520.223036][T16835] RBP: 00007f00667f6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.223047][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.223058][T16835] R13: 00007f0068816038 R14: 00007f0068815fa0 R15: 00007fff538e0c48 [ 520.223088][T16835] [ 520.233563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.243156][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 520.494577][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.816126][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.991279][T16879] __nla_validate_parse: 3 callbacks suppressed [ 520.991301][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2692'. [ 521.053188][T16879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2692'. [ 521.139566][T16893] netlink: 'syz.4.2695': attribute type 10 has an invalid length. [ 521.150136][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.175013][T16893] team0: left promiscuous mode [ 521.182213][T16893] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 521.190813][T16893] team0: left allmulticast mode [ 521.197701][T16893] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 521.203422][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.273408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.319414][T16900] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2697'. [ 521.329235][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2697'. [ 521.341552][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2697'. [ 521.934972][T16923] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2704'. [ 524.048251][T16889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.350591][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2709'. [ 524.873568][T16969] x_tables: duplicate underflow at hook 3 [ 525.006117][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'. [ 525.064727][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 525.103791][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2706'. [ 525.307324][ T6066] net_ratelimit: 30 callbacks suppressed [ 525.307344][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.433566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.443413][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.513630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.524083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.921218][T17014] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 526.244598][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.473436][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 526.473484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.482037][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.540889][T17004] lo speed is unknown, defaulting to 1000 [ 526.557668][T17035] block nbd2: shutting down sockets [ 526.805033][T17052] __nla_validate_parse: 5 callbacks suppressed [ 526.805060][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 527.002265][T17055] bond10: option updelay: invalid value (18446744073709518847) [ 527.012124][T17055] bond10: option updelay: allowed values 0 - 2147483647 [ 527.022565][T17055] bond10 (unregistering): Released all slaves [ 527.049010][T17004] lo speed is unknown, defaulting to 1000 [ 527.175453][T17051] syzkaller0: entered promiscuous mode [ 527.193978][T17051] syzkaller0: entered allmulticast mode [ 527.225386][T17064] bond18: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 527.239092][T17064] bond18 (unregistering): Released all slaves [ 527.664484][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 529.823028][T17090] IPVS: Error connecting to the multicast addr [ 530.024881][T17104] syzkaller0: entered promiscuous mode [ 530.031254][T17104] syzkaller0: entered allmulticast mode [ 530.073513][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 530.073664][ C1] ip6_tunnel: 0 xmit: Local address not yet configured! [ 530.340466][T17108] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2746'. [ 530.400122][T17062] lo speed is unknown, defaulting to 1000 [ 530.502813][T17118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2748'. [ 530.526608][T17117] net_ratelimit: 23 callbacks suppressed [ 530.526628][T17117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.633533][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.633720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.875141][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.917599][T17062] lo speed is unknown, defaulting to 1000 [ 530.954280][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.963009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.974241][T17112] lo speed is unknown, defaulting to 1000 [ 530.994032][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.225083][T17128] IPv6: addrconf: prefix option has invalid lifetime [ 531.346163][T17112] lo speed is unknown, defaulting to 1000 [ 531.358499][T17116] smc: removing ib device uyz0 [ 531.580210][T17116] smbdirect: ib_dev[uyz0] removed [ 531.635084][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2751'. [ 531.673410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.673754][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.957430][T17124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.995155][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 532.418446][T17149] syzkaller0: entered promiscuous mode [ 532.424491][T17149] syzkaller0: entered allmulticast mode [ 532.488649][T17150] sock: sock_timestamping_bind_phc: sock not bind to device [ 532.512528][T17150] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 533.453141][T17166] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2760'. [ 533.469940][T17164] netlink: 'syz.2.2759': attribute type 13 has an invalid length. [ 533.632460][T17173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2762'. [ 533.765318][T17171] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 533.819055][T17171] syzkaller0: entered promiscuous mode [ 533.839054][T17171] syzkaller0: entered allmulticast mode [ 534.491588][T17178] syzkaller0: entered promiscuous mode [ 534.509423][T17178] syzkaller0: entered allmulticast mode [ 535.841142][ C1] net_ratelimit: 17 callbacks suppressed [ 535.841155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.843731][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.847776][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.871580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.593941][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.873338][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 536.873411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.954870][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.044806][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.053669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.115522][ T11] block nbd4: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 180 seconds [ 537.126891][ T11] block nbd4: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 180 seconds [ 537.138354][ T11] block nbd4: Possible stuck request ffff88802736e380: control (read@2048,1024B). Runtime 180 seconds [ 537.151093][ T11] block nbd4: Possible stuck request ffff88802736e540: control (read@3072,1024B). Runtime 180 seconds [ 537.472597][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 539.190579][T17219] lo: Caught tx_queue_len zero misconfig [ 539.196368][T17219] netlink: 'syz.2.2767': attribute type 15 has an invalid length. [ 539.210374][T17224] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 539.249219][T17230] ipvlan3: entered allmulticast mode [ 539.255100][T17230] gretap0: entered allmulticast mode [ 539.487496][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 539.531951][T17241] syzkaller0: entered promiscuous mode [ 539.533879][T17237] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 539.549078][T17241] syzkaller0: entered allmulticast mode [ 539.718619][T17259] netlink: 'syz.4.2778': attribute type 1 has an invalid length. [ 539.781986][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 540.298740][ T50] Bluetooth: hci4: link tx timeout [ 540.306908][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 540.315085][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.955636][ T6066] net_ratelimit: 14 callbacks suppressed [ 540.955653][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.969906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.033333][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.033460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.114816][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.147870][T17296] netlink: 'syz.0.2790': attribute type 16 has an invalid length. [ 541.173671][T17296] netlink: 'syz.0.2790': attribute type 3 has an invalid length. [ 541.183315][T17296] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2790'. [ 541.332440][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 541.371398][T17312] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 541.385094][T17308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.446577][T17308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.506997][T17315] only policy match revision 0 supported [ 541.507016][T17315] unable to load match [ 541.518625][T17318] veth0_macvtap: Caught tx_queue_len zero misconfig [ 541.532574][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 541.634188][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'. [ 541.738302][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 541.765119][T17330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.789479][T17333] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 541.845055][T17330] geneve1: left promiscuous mode [ 541.857655][T17330] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 541.877066][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.974533][T17333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 542.073441][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.073450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.105300][T17343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2803'. [ 542.142329][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.152830][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.228082][T17338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.233493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.250272][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.250651][T17338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.280274][ T5756] lo speed is unknown, defaulting to 1000 [ 542.302035][ T5756] syz0: Port: 1 Link ACTIVE [ 542.347818][T17348] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2803'. [ 542.347995][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 542.366469][T17328] lo speed is unknown, defaulting to 1000 [ 542.382463][ T5822] lo speed is unknown, defaulting to 1000 [ 542.398766][T16783] Bluetooth: hci4: command 0x0405 tx timeout [ 542.537552][T17352] ip6tnl3: entered allmulticast mode [ 542.717822][T17369] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 542.745027][T17357] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.765995][T17357] bridge0: port 3(dummy0) entered blocking state [ 542.772487][T17357] bridge0: port 3(dummy0) entered forwarding state [ 542.841603][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.848853][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.884648][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.891857][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.929953][T17328] lo speed is unknown, defaulting to 1000 [ 543.055341][T17367] lo speed is unknown, defaulting to 1000 [ 543.176849][T17380] syzkaller0: entered promiscuous mode [ 543.184258][T17380] syzkaller0: entered allmulticast mode [ 543.246144][T17386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.394367][T17367] lo speed is unknown, defaulting to 1000 [ 544.404250][T17434] xt_hashlimit: size too large, truncated to 1048576 [ 544.535022][T17436] syzkaller1: entered promiscuous mode [ 544.565491][T17436] syzkaller1: entered allmulticast mode [ 544.852855][T17446] pim6reg1: entered promiscuous mode [ 544.871834][T17446] pim6reg1: entered allmulticast mode [ 544.968818][T17448] __nla_validate_parse: 7 callbacks suppressed [ 544.968837][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2830'. [ 545.049745][T17452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 545.078074][T17450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2832'. [ 545.451392][T17467] syzkaller0: entered promiscuous mode [ 545.489097][T17467] syzkaller0: entered allmulticast mode [ 545.543118][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 545.556208][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2840'. [ 545.572111][T17491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2842'. [ 545.590581][T17485] syzkaller1: entered promiscuous mode [ 545.598274][T17485] syzkaller1: entered allmulticast mode [ 545.611437][T17473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.635336][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2840'. [ 545.868357][T17496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2843'. [ 545.901096][T17500] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2843'. [ 546.092444][ T7112] net_ratelimit: 31 callbacks suppressed [ 546.092462][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.155874][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.164719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.233396][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.233499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.511025][T17528] xt_hashlimit: size too large, truncated to 1048576 [ 546.581374][T17535] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2854'. [ 546.698189][T17539] netlink: 'syz.3.2855': attribute type 10 has an invalid length. [ 546.708891][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.726783][T17539] –: entered promiscuous mode [ 546.781850][T17540] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.787568][T17539] –: entered allmulticast mode [ 546.800745][T17540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.815871][T17539] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check. [ 547.075173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.178187][T17557] lo speed is unknown, defaulting to 1000 [ 547.273328][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.537509][T17557] lo speed is unknown, defaulting to 1000 [ 547.760329][T17592] netlink: 'syz.3.2869': attribute type 2 has an invalid length. [ 548.878518][T16783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 548.895477][T16783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 548.905508][T16783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 548.920772][T16783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 548.928557][T16783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 549.386340][T17661] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 549.580575][T17675] geneve6: entered promiscuous mode [ 549.606209][ T260] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36832 - 0 [ 549.628904][ T260] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36832 - 0 [ 549.653543][ T260] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36832 - 0 [ 549.681568][ T260] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36832 - 0 [ 549.826124][T17678] lo speed is unknown, defaulting to 1000 [ 549.929660][T17689] netlink: 'syz.3.2896': attribute type 32 has an invalid length. [ 550.027336][T17689] bond10: option coupled_control: invalid value (12) [ 550.039193][T17689] bond10 (unregistering): Released all slaves [ 550.238229][T17678] lo speed is unknown, defaulting to 1000 [ 550.239060][T17634] lo speed is unknown, defaulting to 1000 [ 550.291548][T17703] __nla_validate_parse: 14 callbacks suppressed [ 550.291568][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 550.759835][T17634] lo speed is unknown, defaulting to 1000 [ 550.851945][T17708] lo speed is unknown, defaulting to 1000 [ 551.043652][ T50] Bluetooth: hci5: command tx timeout [ 551.223903][ T94] net_ratelimit: 23 callbacks suppressed [ 551.223921][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.273416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.433400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.433410][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.486378][T17735] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2907'. [ 551.496259][T17735] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2907'. [ 551.541708][T17735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.550182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.571936][T17708] lo speed is unknown, defaulting to 1000 [ 551.602821][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 551.709497][T17752] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.2908'. [ 551.718688][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.723579][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.734386][T17634] bridge_slave_0: entered allmulticast mode [ 551.742174][T17634] bridge_slave_0: entered promiscuous mode [ 551.758895][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.766214][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.774230][T17634] bridge_slave_1: entered allmulticast mode [ 551.781983][T17634] bridge_slave_1: entered promiscuous mode [ 551.880915][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.908963][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.059385][T17634] team0: Port device team_slave_0 added [ 552.068224][T17634] team0: Port device team_slave_1 added [ 552.097041][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.113279][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.141270][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.155054][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.189673][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.197895][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.224764][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.235919][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.244562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.313486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.337869][T17634] hsr_slave_0: entered promiscuous mode [ 552.346705][T17634] hsr_slave_1: entered promiscuous mode [ 552.470585][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 552.482394][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 552.614062][ T6073] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 552.630238][ T6073] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 552.671674][ T6073] bond0: active interface up! [ 552.693875][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 553.059121][T17790] syzkaller1: entered promiscuous mode [ 553.078728][T17790] syzkaller1: entered allmulticast mode [ 553.117550][ T50] Bluetooth: hci5: command tx timeout [ 553.326711][T17798] FAULT_INJECTION: forcing a failure. [ 553.326711][T17798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.383800][T17798] CPU: 1 UID: 0 PID: 17798 Comm: syz.0.2923 Not tainted syzkaller #0 PREEMPT(full) [ 553.383823][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.383832][T17798] Call Trace: [ 553.383838][T17798] [ 553.383846][T17798] dump_stack_lvl+0xe8/0x150 [ 553.383872][T17798] should_fail_ex+0x40c/0x560 [ 553.383904][T17798] _copy_from_user+0x2d/0xb0 [ 553.383925][T17798] ___sys_sendmsg+0x1c6/0x360 [ 553.383943][T17798] ? __lock_acquire+0x683/0x2cd0 [ 553.383966][T17798] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.383982][T17798] ? __lock_acquire+0x683/0x2cd0 [ 553.384004][T17798] ? kstrtouint+0x6e/0xe0 [ 553.384064][T17798] __sys_sendmmsg+0x27c/0x4e0 [ 553.384088][T17798] ? __pfx___sys_sendmmsg+0x10/0x10 [ 553.384105][T17798] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 553.384150][T17798] ? ksys_write+0x242/0x270 [ 553.384176][T17798] ? __pfx_ksys_write+0x10/0x10 [ 553.384206][T17798] __x64_sys_sendmmsg+0xa0/0xc0 [ 553.384223][T17798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.384242][T17798] do_syscall_64+0x174/0x580 [ 553.384257][T17798] ? trace_irq_disable+0x3b/0x140 [ 553.384281][T17798] ? clear_bhb_loop+0x40/0x90 [ 553.384302][T17798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.384320][T17798] RIP: 0033:0x7f21cff9ce59 [ 553.384336][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.384350][T17798] RSP: 002b:00007f21d0d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 553.384368][T17798] RAX: ffffffffffffffda RBX: 00007f21d0215fa0 RCX: 00007f21cff9ce59 [ 553.384380][T17798] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 553.384391][T17798] RBP: 00007f21d0d79090 R08: 0000000000000000 R09: 0000000000000000 [ 553.384400][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.384410][T17798] R13: 00007f21d0216038 R14: 00007f21d0215fa0 R15: 00007ffc2f22b488 [ 553.384437][T17798] [ 553.650914][T17806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2925'. [ 553.820138][T17806] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 553.833989][T17806] nbd: error processing sock list [ 554.273147][T17832] syzkaller0: entered promiscuous mode [ 554.288143][T17832] syzkaller0: entered allmulticast mode [ 554.358800][T17837] FAULT_INJECTION: forcing a failure. [ 554.358800][T17837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.404159][T17837] CPU: 1 UID: 0 PID: 17837 Comm: syz.1.2935 Not tainted syzkaller #0 PREEMPT(full) [ 554.404183][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.404192][T17837] Call Trace: [ 554.404199][T17837] [ 554.404206][T17837] dump_stack_lvl+0xe8/0x150 [ 554.404230][T17837] should_fail_ex+0x40c/0x560 [ 554.404260][T17837] _copy_from_iter+0x3b0/0x1660 [ 554.404288][T17837] ? __pfx__copy_from_iter+0x10/0x10 [ 554.404308][T17837] ? bcm_sendmsg+0x527/0x6a0 [ 554.404339][T17837] bcm_sendmsg+0x171/0x6a0 [ 554.404363][T17837] ? __pfx_bcm_sendmsg+0x10/0x10 [ 554.404391][T17837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 554.404416][T17837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.404435][T17837] ? __pfx_bcm_sendmsg+0x10/0x10 [ 554.404458][T17837] ____sys_sendmsg+0x9b9/0xa20 [ 554.404476][T17837] ? __might_fault+0xaf/0x130 [ 554.404503][T17837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.404529][T17837] ? import_iovec+0x73/0xa0 [ 554.404550][T17837] ___sys_sendmsg+0x2a5/0x360 [ 554.404565][T17837] ? __lock_acquire+0x683/0x2cd0 [ 554.404586][T17837] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.404609][T17837] ? __lock_acquire+0x683/0x2cd0 [ 554.404630][T17837] ? kstrtouint+0x6e/0xe0 [ 554.404690][T17837] __sys_sendmmsg+0x27c/0x4e0 [ 554.404713][T17837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 554.404727][T17837] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 554.404769][T17837] ? ksys_write+0x242/0x270 [ 554.404800][T17837] ? __pfx_ksys_write+0x10/0x10 [ 554.404828][T17837] __x64_sys_sendmmsg+0xa0/0xc0 [ 554.404844][T17837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.404860][T17837] do_syscall_64+0x174/0x580 [ 554.404875][T17837] ? trace_irq_disable+0x3b/0x140 [ 554.404897][T17837] ? clear_bhb_loop+0x40/0x90 [ 554.404917][T17837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.404932][T17837] RIP: 0033:0x7f9af079ce59 [ 554.404948][T17837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.404962][T17837] RSP: 002b:00007f9af159a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 554.404979][T17837] RAX: ffffffffffffffda RBX: 00007f9af0a15fa0 RCX: 00007f9af079ce59 [ 554.404990][T17837] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 554.405001][T17837] RBP: 00007f9af159a090 R08: 0000000000000000 R09: 0000000000000000 [ 554.405010][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.405020][T17837] R13: 00007f9af0a16038 R14: 00007f9af0a15fa0 R15: 00007ffff0d35038 [ 554.405048][T17837] [ 554.700727][T17841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2936'. [ 554.760533][T17634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.774655][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.782879][T17634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.797666][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.808111][T17634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.823880][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.831989][T17634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 554.857635][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.194459][ T50] Bluetooth: hci5: command tx timeout [ 555.215837][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.250488][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.268105][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.275327][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.307302][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.314694][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.582277][T17896] FAULT_INJECTION: forcing a failure. [ 555.582277][T17896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.627085][T17896] CPU: 0 UID: 0 PID: 17896 Comm: syz.0.2947 Not tainted syzkaller #0 PREEMPT(full) [ 555.627111][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.627121][T17896] Call Trace: [ 555.627128][T17896] [ 555.627136][T17896] dump_stack_lvl+0xe8/0x150 [ 555.627163][T17896] should_fail_ex+0x40c/0x560 [ 555.627196][T17896] _copy_to_user+0x31/0xb0 [ 555.627219][T17896] simple_read_from_buffer+0xe1/0x170 [ 555.627246][T17896] proc_fail_nth_read+0x1bb/0x230 [ 555.627324][T17896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.627350][T17896] ? rw_verify_area+0x24a/0x4c0 [ 555.627374][T17896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.627396][T17896] vfs_read+0x213/0xa80 [ 555.627425][T17896] ? __pfx___mutex_lock+0x10/0x10 [ 555.627444][T17896] ? __pfx_vfs_read+0x10/0x10 [ 555.627469][T17896] ? __fget_files+0x2a/0x420 [ 555.627494][T17896] ? __fget_files+0x3a2/0x420 [ 555.627514][T17896] ? __fget_files+0x2a/0x420 [ 555.627543][T17896] ksys_read+0x150/0x270 [ 555.627569][T17896] ? __pfx_ksys_read+0x10/0x10 [ 555.627601][T17896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.627621][T17896] do_syscall_64+0x174/0x580 [ 555.627637][T17896] ? trace_irq_disable+0x3b/0x140 [ 555.627662][T17896] ? clear_bhb_loop+0x40/0x90 [ 555.627683][T17896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.627701][T17896] RIP: 0033:0x7f21cff5d68e [ 555.627718][T17896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 555.627733][T17896] RSP: 002b:00007f21d0d78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.627751][T17896] RAX: ffffffffffffffda RBX: 00007f21d0d796c0 RCX: 00007f21cff5d68e [ 555.627764][T17896] RDX: 000000000000000f RSI: 00007f21d0d790a0 RDI: 0000000000000007 [ 555.627775][T17896] RBP: 00007f21d0d79090 R08: 0000000000000000 R09: 0000000000000000 [ 555.627786][T17896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.627797][T17896] R13: 00007f21d0216038 R14: 00007f21d0215fa0 R15: 00007ffc2f22b488 [ 555.627827][T17896] [ 556.017502][T17905] netlink: 'syz.3.2949': attribute type 25 has an invalid length. [ 556.050105][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 556.096849][T17905] netlink: 'syz.3.2949': attribute type 25 has an invalid length. [ 556.115773][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 556.139058][T17918] netlink: 'syz.1.2952': attribute type 2 has an invalid length. [ 556.334453][ T62] net_ratelimit: 15 callbacks suppressed [ 556.334471][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.350619][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.435460][T17634] veth0_vlan: entered promiscuous mode [ 556.468789][T17634] veth1_vlan: entered promiscuous mode [ 556.479586][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 556.489715][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 556.519626][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 556.544860][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 556.553016][T17634] veth0_macvtap: entered promiscuous mode [ 556.567553][T17941] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 556.572596][T17634] veth1_macvtap: entered promiscuous mode [ 556.590339][T17941] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2956'. [ 556.646338][T17940] xt_CT: No such helper "snmp_trap" [ 556.655429][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.688439][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.758920][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.789795][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.805425][T17947] netlink: 'syz.3.2960': attribute type 5 has an invalid length. [ 556.826154][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.847089][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.873788][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.995274][T17957] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 557.264715][T17967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2966'. [ 557.284199][ T50] Bluetooth: hci5: command tx timeout [ 557.287658][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.336496][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.444908][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.472919][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.494823][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.513703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.603916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.759723][T17997] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2971'. [ 557.913377][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.195333][T18013] netlink: 'syz.2.2975': attribute type 34 has an invalid length. [ 558.233656][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.237832][T16783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.259817][T16783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.266380][T18013] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 558.275426][T16783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.286439][T16783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.294352][T16783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.318130][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.327296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.332206][T18013] bond1: entered promiscuous mode [ 558.375815][T18013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.450675][T18021] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 558.548946][T18024] dummy0: left promiscuous mode [ 558.553406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.630730][T18024] bond10: (slave dummy0): making interface the new active one [ 558.666187][T18024] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 558.706984][T18021] bond10: entered promiscuous mode [ 558.715333][T18021] dummy0: entered promiscuous mode [ 558.764931][T18026] bond10: (slave dummy0): Releasing active interface [ 558.773443][T18026] dummy0: left promiscuous mode [ 558.952784][ T6066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.968865][ T6066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.984068][ T6066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36832 - 0 [ 559.005601][T18020] bond10: left promiscuous mode [ 559.211192][T18049] netlink: 'syz.4.2980': attribute type 11 has an invalid length. [ 559.231928][T18049] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2980'. [ 559.382952][ T6066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.445069][ T6066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.479551][ T6066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36832 - 0 [ 559.606526][T18028] lo speed is unknown, defaulting to 1000 [ 559.686088][ T6066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.739562][ T6066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.774680][ T6066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36832 - 0 [ 559.850579][T18071] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 559.960104][T18071] bond11: entered promiscuous mode [ 559.968849][T18071] 8021q: adding VLAN 0 to HW filter on device bond11 [ 560.067473][ T6066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.100460][ T6066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.113163][ T6066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36832 - 0 [ 560.405212][ T50] Bluetooth: hci4: command tx timeout [ 560.464410][T18099] netlink: 'syz.4.2988': attribute type 4 has an invalid length. [ 560.540171][T18011] lo speed is unknown, defaulting to 1000 [ 560.548454][T18028] lo speed is unknown, defaulting to 1000 [ 560.568948][T18099] .`: renamed from bond0 [ 561.365502][ T5763] net_ratelimit: 9 callbacks suppressed [ 561.365554][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.381786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.434156][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.480079][ T6066] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 561.489667][ T6066] ip6gre1 (unregistering): left promiscuous mode [ 561.771993][ T6066] team0: Port device geneve1 removed [ 561.889083][ T6066] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 561.956891][ T6066] .` (unregistering): Released all slaves [ 561.969670][ T6066] bond1 (unregistering): Released all slaves [ 561.996259][ T6066] bond2 (unregistering): Released all slaves [ 562.015530][T16710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.017321][ T6066] bond3 (unregistering): Released all slaves [ 562.045976][ T6066] bond4 (unregistering): Released all slaves [ 562.068780][ T6066] bond5 (unregistering): Released all slaves [ 562.075366][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.099296][ T6066] bond6 (unregistering): Released all slaves [ 562.118854][ T6066] bond0 (unregistering): Released all slaves [ 562.138076][ T6066] bond7 (unregistering): Released all slaves [ 562.167924][ T6066] bond8 (unregistering): Released all slaves [ 562.189855][ T6066] bond9 (unregistering): (slave veth7): Releasing backup interface [ 562.201513][ T6066] bond9 (unregistering): Released all slaves [ 562.473473][ T50] Bluetooth: hci4: command tx timeout [ 562.479941][T18011] lo speed is unknown, defaulting to 1000 [ 562.491267][ T6066] tipc: Disabling bearer [ 562.505829][ T6066] tipc: Disabling bearer [ 562.524661][ T6066] tipc: Left network mode [ 563.131272][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.197616][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.354402][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.443435][T18128] lo speed is unknown, defaulting to 1000 [ 563.479819][T18148] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 563.541993][T18148] __nla_validate_parse: 6 callbacks suppressed [ 563.542010][T18148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3001'. [ 564.163552][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.256086][T18163] syzkaller0: entered promiscuous mode [ 564.311844][T18163] syzkaller0: entered allmulticast mode [ 564.367076][T16710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.399216][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 564.457602][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 564.505221][T18182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3006'. [ 564.555564][ T50] Bluetooth: hci4: command tx timeout [ 564.647718][T18128] lo speed is unknown, defaulting to 1000 [ 565.365584][T18210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3013'. [ 565.400132][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.431005][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.473646][T18011] bridge_slave_0: entered allmulticast mode [ 565.503721][T18011] bridge_slave_0: entered promiscuous mode [ 565.704409][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.738132][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.764041][T18011] bridge_slave_1: entered allmulticast mode [ 565.799138][T18225] netlink: 'syz.2.3016': attribute type 10 has an invalid length. [ 565.833183][T18011] bridge_slave_1: entered promiscuous mode [ 565.842722][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3016'. [ 566.159518][T18225] dummy0: entered promiscuous mode [ 566.181725][T18225] dummy0: entered allmulticast mode [ 566.214383][T18225] bridge0: port 3(dummy0) entered blocking state [ 566.240369][T18225] bridge0: port 3(dummy0) entered disabled state [ 566.318796][T18225] bridge0: port 3(dummy0) entered blocking state [ 566.326215][T18225] bridge0: port 3(dummy0) entered forwarding state [ 566.516032][T18245] tipc: Enabling of bearer rejected, failed to enable media [ 566.551650][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.593748][T18256] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 566.634539][ T50] Bluetooth: hci4: command tx timeout [ 566.648350][T18257] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 566.689749][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.800142][ T7064] lo speed is unknown, defaulting to 1000 [ 566.983766][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 567.121317][ T5734] lo speed is unknown, defaulting to 1000 [ 567.142269][T18011] team0: Port device team_slave_0 added [ 567.178711][T18011] team0: Port device team_slave_1 added [ 567.202316][ T11] block nbd4: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 210 seconds [ 567.214506][ T11] block nbd4: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 210 seconds [ 567.226648][ T11] block nbd4: Possible stuck request ffff88802736e380: control (read@2048,1024B). Runtime 210 seconds [ 567.240062][ T11] block nbd4: Possible stuck request ffff88802736e540: control (read@3072,1024B). Runtime 210 seconds [ 567.273576][ C0] net_ratelimit: 8 callbacks suppressed [ 567.273605][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.590533][ T6066] veth1_to_batadv: left promiscuous mode [ 567.601400][ T6066] veth1_macvtap: left promiscuous mode [ 567.617061][ T6066] veth1_vlan: left promiscuous mode [ 567.623546][ T6066] veth0_vlan: left promiscuous mode [ 568.323435][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.363414][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.404827][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.527252][ T4998] udevd[4998]: worker [5646] /devices/virtual/block/nbd4 timeout; kill it [ 570.537082][ T4998] udevd[4998]: seq 18048 '/devices/virtual/block/nbd4' killed [ 571.270429][ T7064] lo speed is unknown, defaulting to 1000 [ 571.281817][ T6074] smbdirect: ib_dev[syz2] removed [ 571.411817][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 571.423063][T18284] sch_fq: defrate 0 ignored. [ 571.432152][T18261] lo speed is unknown, defaulting to 1000 [ 571.443377][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.461410][T18261] infiniband syz2: ib_query_port failed (-19) [ 571.571642][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.608334][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3026'. [ 571.620775][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.684743][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.758324][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.774730][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.844387][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.911450][T18299] ipip1: entered promiscuous mode [ 571.918978][T18302] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3026'. [ 572.091794][T18011] hsr_slave_0: entered promiscuous mode [ 572.125581][T18011] hsr_slave_1: entered promiscuous mode [ 572.162653][T18011] debugfs: 'hsr0' already exists in 'hsr' [ 572.186753][T18011] Cannot create hsr debugfs directory [ 572.312656][T18312] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 572.374413][T18320] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3030'. [ 572.472688][T18320] 0ªX¹¦À: renamed from batadv0 (while UP) [ 572.483401][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.503017][ T6066] IPVS: stop unused estimator thread 0... [ 572.525297][T18320] 0ªX¹¦À: entered allmulticast mode [ 572.552378][T18320] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 572.708427][T18330] tipc: Enabling of bearer rejected, already enabled [ 572.796178][T18336] syzkaller0: entered promiscuous mode [ 572.808330][T18336] syzkaller0: entered allmulticast mode [ 572.827514][T18336] tipc: Resetting bearer [ 572.953437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.182250][T18350] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3037'. [ 573.441231][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 573.513573][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.556174][T18363] bond17: entered promiscuous mode [ 573.562666][T18363] 8021q: adding VLAN 0 to HW filter on device bond17 [ 573.609958][T18363] netlink: 'syz.1.3039': attribute type 30 has an invalid length. [ 573.776852][T18369] 8021q: adding VLAN 0 to HW filter on device bond17 [ 573.805096][T18369] bond17: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 573.836132][T18369] bond17: (slave ip6gre2): Error -95 calling set_mac_address [ 573.934176][T18374] can: request_module (can-proto-0) failed. [ 574.554166][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.655342][T18011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 574.731262][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.765956][T18011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 574.816883][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.839461][T18011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 574.867127][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.897438][T18011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.928862][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.312037][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.376817][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.418385][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.426380][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.510793][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.520711][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.603386][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.633417][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.672019][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 577.261213][T18492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3058'. [ 577.399440][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.663169][T18011] veth0_vlan: entered promiscuous mode [ 577.673811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 577.839007][T18507] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 577.929181][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3063'. [ 577.940214][T18507] bond0 (unregistering): Released all slaves [ 577.982771][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3063'. [ 578.073689][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.100947][T18011] veth1_vlan: entered promiscuous mode [ 578.260249][T18011] veth0_macvtap: entered promiscuous mode [ 578.326017][T18011] veth1_macvtap: entered promiscuous mode [ 578.569153][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.695760][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.714320][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.718687][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 578.822814][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.900255][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.931679][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.978505][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.989072][T18544] netlink: 'syz.4.3068': attribute type 10 has an invalid length. [ 579.030860][T18539] lo speed is unknown, defaulting to 1000 [ 579.360085][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.398295][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.555410][T10919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.588290][T10919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.763618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.041246][T18570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3072'. [ 580.255440][T18568] lo speed is unknown, defaulting to 1000 [ 580.323799][T18568] lo speed is unknown, defaulting to 1000 [ 580.373707][T18568] lo speed is unknown, defaulting to 1000 [ 580.401410][T18568] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 580.457798][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 580.461515][T18568] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 580.541608][T18568] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 580.543062][T16783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.568979][T16783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.578442][T16783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.589158][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 580.600370][T16783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.616136][T16783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.652207][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 580.693442][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 580.698027][T18568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 580.793417][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.329306][T18579] bridge0: port 3(dummy0) entered disabled state [ 581.335917][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.343729][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.390236][T18604] netlink: 'syz.3.3075': attribute type 39 has an invalid length. [ 581.546403][T18608] netlink: 'syz.3.3075': attribute type 2 has an invalid length. [ 581.638038][T18609] netlink: 'syz.3.3075': attribute type 9 has an invalid length. [ 581.690706][T18579] __nla_validate_parse: 55 callbacks suppressed [ 581.690726][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.721412][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.744242][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.754169][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.771395][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.782010][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.794084][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.804248][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.820463][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.833393][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.841749][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3074'. [ 581.924259][T18579] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 581.942601][T18579] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 582.600891][T18568] lo speed is unknown, defaulting to 1000 [ 582.647269][T18622] nbd: must specify at least one socket [ 582.685490][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.711608][ T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.721974][T16783] Bluetooth: hci2: command tx timeout [ 582.729645][T18568] lo speed is unknown, defaulting to 1000 [ 582.731789][T18568] lo speed is unknown, defaulting to 1000 [ 582.749289][ T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.772876][ T62] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.786988][T18568] lo speed is unknown, defaulting to 1000 [ 582.796625][T18568] lo speed is unknown, defaulting to 1000 [ 582.805343][T18568] lo speed is unknown, defaulting to 1000 [ 582.812805][T18568] lo speed is unknown, defaulting to 1000 [ 582.883439][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.242321][T18637] veth1: entered promiscuous mode [ 583.274851][T18637] vlan2: entered promiscuous mode [ 583.484428][T18582] lo speed is unknown, defaulting to 1000 [ 583.657442][T18650] xt_hashlimit: size too large, truncated to 1048576 [ 583.667428][T18650] xt_hashlimit: max too large, truncated to 1048576 [ 583.735788][T18651] gretap1: entered allmulticast mode [ 583.904273][T18656] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 583.923398][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.970642][T18658] 8021q: VLANs not supported on ip6_vti0 [ 584.258559][T18582] lo speed is unknown, defaulting to 1000 [ 584.629291][T18690] netlink: 'syz.2.3091': attribute type 10 has an invalid length. [ 584.747898][T18690] dummy0: left allmulticast mode [ 584.754105][T18690] bridge0: port 3(dummy0) entered disabled state [ 584.803624][T16783] Bluetooth: hci2: command tx timeout [ 584.953430][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.144340][T18702] lo speed is unknown, defaulting to 1000 [ 585.526662][T18718] netlink: 'syz.2.3101': attribute type 11 has an invalid length. [ 585.737916][T18724] syzkaller0: entered promiscuous mode [ 585.744644][T18724] syzkaller0: entered allmulticast mode [ 585.766910][T18582] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.783514][T18582] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.796839][T18582] bridge_slave_0: entered allmulticast mode [ 585.808694][T18582] bridge_slave_0: entered promiscuous mode [ 586.003409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.874487][T16783] Bluetooth: hci2: command tx timeout [ 587.038673][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.083385][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.629629][T18702] lo speed is unknown, defaulting to 1000 [ 588.629805][T18582] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.643895][T18582] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.651296][T18582] bridge_slave_1: entered allmulticast mode [ 588.659118][T18582] bridge_slave_1: entered promiscuous mode [ 588.806535][T18582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.860774][T18582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.883419][T18748] __nla_validate_parse: 90 callbacks suppressed [ 588.883452][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3108'. [ 588.957373][T16783] Bluetooth: hci2: command tx timeout [ 589.113398][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.269559][T18582] team0: Port device team_slave_0 added [ 589.285844][T18582] team0: Port device team_slave_1 added [ 589.480264][T18582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.488159][T18582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.524209][T18582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.538932][T18582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.546892][T18582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.575708][T18582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.608960][T18754] lo speed is unknown, defaulting to 1000 [ 589.691132][T18762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.757725][T18762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.801215][ T5822] lo speed is unknown, defaulting to 1000 [ 589.832278][T18582] hsr_slave_0: entered promiscuous mode [ 589.859993][T18582] hsr_slave_1: entered promiscuous mode [ 589.910566][T18582] debugfs: 'hsr0' already exists in 'hsr' [ 589.933117][T18582] Cannot create hsr debugfs directory [ 589.973118][T18772] sctp: [Deprecated]: syz.2.3116 (pid 18772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.973118][T18772] Use struct sctp_sack_info instead [ 590.028133][T18774] team0: entered allmulticast mode [ 590.153418][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.283939][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 590.326855][T18754] lo speed is unknown, defaulting to 1000 [ 590.356108][T18783] vlan2: entered promiscuous mode [ 590.361818][T18783] geneve1: entered promiscuous mode [ 590.369410][T18783] vlan2: entered allmulticast mode [ 590.374711][T18783] geneve1: entered allmulticast mode [ 590.425616][T18761] team0: left allmulticast mode [ 590.452049][T18784] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3118'. [ 590.475842][T18784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'. [ 590.566333][T18788] netlink: 'syz.1.3120': attribute type 23 has an invalid length. [ 590.622202][ T30] audit: type=1800 audit(1781727642.384:14): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3119" name="blkio.bfq.time_recursive" dev="tmpfs" ino=239 res=0 errno=0 [ 591.203589][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.246619][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 591.628110][T18582] team0: Port device netdevsim1 removed [ 591.722954][T18816] ip6erspan0: entered allmulticast mode [ 592.243550][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.562937][T18855] lo: entered allmulticast mode [ 592.649755][T18582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 592.689985][T18582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.721228][T18582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 592.765818][T18582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.788039][T18582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 592.838992][T18582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.897813][T18582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 592.949467][T18582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.057145][T18882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 593.214708][T18876] syzkaller1: entered promiscuous mode [ 593.220503][T18876] syzkaller1: entered allmulticast mode [ 593.246128][T18882] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 593.283398][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 593.428301][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 593.443544][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.488415][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 593.510470][T18897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3143'. [ 593.745841][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 593.755833][T18582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.816715][T18582] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.859794][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.867030][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.994689][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.004382][T16710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.086343][T18915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3148'. [ 594.124701][T18915] GUP no longer grows the stack in syz.1.3148 (18915): 200000003000-20000000a000 (200000001000) [ 594.148969][T18915] CPU: 0 UID: 0 PID: 18915 Comm: syz.1.3148 Not tainted syzkaller #0 PREEMPT(full) [ 594.148998][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.149009][T18915] Call Trace: [ 594.149017][T18915] [ 594.149025][T18915] dump_stack_lvl+0xe8/0x150 [ 594.149055][T18915] __get_user_pages+0x238c/0x2720 [ 594.149106][T18915] ? down_read_killable+0x1bb/0x340 [ 594.149139][T18915] __gup_longterm_locked+0xd52/0x15c0 [ 594.149166][T18915] ? lock_acquire+0x106/0x350 [ 594.149205][T18915] gup_fast_fallback+0x1d82/0x20d0 [ 594.149261][T18915] ? __pfx_gup_fast_fallback+0x10/0x10 [ 594.149289][T18915] ? is_valid_gup_args+0x11f/0x200 [ 594.149314][T18915] ? get_user_pages_fast+0x4d/0xb0 [ 594.149339][T18915] __iov_iter_get_pages_alloc+0x378/0xa40 [ 594.149370][T18915] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 594.149443][T18915] iov_iter_get_pages2+0x5e/0xa0 [ 594.149469][T18915] __se_sys_vmsplice+0x7b5/0x1660 [ 594.149516][T18915] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 594.149543][T18915] ? __pfx_futex_wait+0x10/0x10 [ 594.149652][T18915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.149675][T18915] do_syscall_64+0x174/0x580 [ 594.149697][T18915] ? clear_bhb_loop+0x40/0x90 [ 594.149722][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.149741][T18915] RIP: 0033:0x7f9af079ce59 [ 594.149760][T18915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.149777][T18915] RSP: 002b:00007f9af159a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 594.149798][T18915] RAX: ffffffffffffffda RBX: 00007f9af0a15fa0 RCX: 00007f9af079ce59 [ 594.149813][T18915] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 594.149826][T18915] RBP: 00007f9af0832d6f R08: 0000000000000000 R09: 0000000000000000 [ 594.149839][T18915] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 594.149851][T18915] R13: 00007f9af0a16038 R14: 00007f9af0a15fa0 R15: 00007ffff0d35038 [ 594.149882][T18915] [ 594.168649][T18916] netlink: 'syz.3.3147': attribute type 7 has an invalid length. [ 594.323399][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.737955][T18939] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3153'. [ 594.999587][T18952] xt_cgroup: invalid path, errno=-2 [ 595.009471][T18951] xt_hashlimit: size too large, truncated to 1048576 [ 595.348830][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'. [ 595.358926][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.444062][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 595.720807][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3163'. [ 595.847739][T18582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.411802][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.684519][T18582] veth0_vlan: entered promiscuous mode [ 596.718040][T18582] veth1_vlan: entered promiscuous mode [ 596.731732][T19012] xt_TCPMSS: Only works on TCP SYN packets [ 596.813998][T18582] veth0_macvtap: entered promiscuous mode [ 596.849714][T18582] veth1_macvtap: entered promiscuous mode [ 596.927865][T19014] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 596.937417][T18582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.953034][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 596.967046][T18582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.032709][ T6073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.050895][ T6073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.085589][ T6073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.104112][ T6073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.310444][ T11] block nbd4: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 240 seconds [ 597.324110][ T11] block nbd4: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 240 seconds [ 597.336247][ T11] block nbd4: Possible stuck request ffff88802736e380: control (read@2048,1024B). Runtime 240 seconds [ 597.347212][ T11] block nbd4: Possible stuck request ffff88802736e540: control (read@3072,1024B). Runtime 240 seconds [ 597.388234][T19034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3174'. [ 597.433406][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.539930][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.591250][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.650039][ T260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.671378][ T260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.214182][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 598.294534][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 598.393075][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 598.461832][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.475390][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.483354][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.496203][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.507272][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.514854][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.905074][T19069] syzkaller0: entered promiscuous mode [ 598.936529][T19069] syzkaller0: entered allmulticast mode [ 599.513338][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 599.819794][T19076] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 600.187076][T19088] gtp0: entered promiscuous mode [ 600.214004][T19088] gtp0: entered allmulticast mode [ 600.279746][T19088] team0: Device gtp0 is of different type [ 600.422524][T19091] netlink: 'syz.2.3188': attribute type 11 has an invalid length. [ 600.506115][T19056] lo speed is unknown, defaulting to 1000 [ 600.553370][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.554118][T16783] Bluetooth: hci3: command tx timeout [ 600.811086][T19056] lo speed is unknown, defaulting to 1000 [ 600.858936][T19100] syzkaller0: entered promiscuous mode [ 600.864997][T19100] syzkaller0: entered allmulticast mode [ 600.890328][T19100] tipc: Started in network mode [ 600.898072][T19100] tipc: Node identity 1a8a624149b7, cluster identity 4711 [ 600.936695][T19100] tipc: Enabled bearer , priority 0 [ 600.987415][T19099] tipc: Resetting bearer [ 601.054639][T19099] tipc: Disabling bearer [ 601.141446][T19105] bond1: entered allmulticast mode [ 601.189697][T19109] ipip0: entered promiscuous mode [ 601.212343][T19109] ipip0: entered allmulticast mode [ 601.228567][T19109] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 601.240818][T19109] bond1: (slave ipip0): Error -95 calling set_mac_address [ 601.569097][T19124] __nla_validate_parse: 4 callbacks suppressed [ 601.569115][T19124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3198'. [ 601.593329][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.632064][T19127] netlink: 'syz.1.3199': attribute type 9 has an invalid length. [ 601.639821][T19127] netlink: 186364 bytes leftover after parsing attributes in process `syz.1.3199'. [ 601.641077][T19122] syzkaller0: entered promiscuous mode [ 601.680696][T19122] syzkaller0: entered allmulticast mode [ 602.217801][T19151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3205'. [ 602.248885][T19157] openvswitch: netlink: Actions may not be safe on all matching packets [ 602.301383][T19152] netlink: 'syz.2.3202': attribute type 1 has an invalid length. [ 602.309948][T19151] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 602.340322][T19056] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.360965][T19056] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.383817][T19056] bridge_slave_0: entered allmulticast mode [ 602.398654][T19056] bridge_slave_0: entered promiscuous mode [ 602.432672][T19056] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.441712][T19056] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.450506][T19056] bridge_slave_1: entered allmulticast mode [ 602.461054][T19056] bridge_slave_1: entered promiscuous mode [ 602.571292][T19056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.633855][T16783] Bluetooth: hci3: command tx timeout [ 602.643345][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.687553][T19178] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3210'. [ 602.712650][T19173] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 602.751872][T19173] bond2 (unregistering): Released all slaves [ 602.869876][T19056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.997775][T19056] team0: Port device team_slave_0 added [ 603.010495][T19056] team0: Port device team_slave_1 added [ 603.201264][T19056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.209929][T19056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.240183][T19056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.257941][T19056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.271117][T19056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.271189][T19197] xt_hashlimit: size too large, truncated to 1048576 [ 603.302881][T19056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.347376][T19191] syzkaller0: entered promiscuous mode [ 603.356927][T19191] syzkaller0: entered allmulticast mode [ 603.364975][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 603.515948][T19056] hsr_slave_0: entered promiscuous mode [ 603.536690][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 603.538791][T19056] hsr_slave_1: entered promiscuous mode [ 603.557820][T19056] debugfs: 'hsr0' already exists in 'hsr' [ 603.567750][T19056] Cannot create hsr debugfs directory [ 603.677503][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.811112][T19056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.919213][T19056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.001986][T19056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.098798][T19056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.713595][T16783] Bluetooth: hci3: command tx timeout [ 604.713880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.218105][T19157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.256710][T19056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 605.311056][T19056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.354066][T19056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 605.397351][T19056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.424781][T19056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 605.464854][T19056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.489839][T19056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 605.548742][T19056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.571316][T19221] xt_hl: Unknown TTL match mode: 237 [ 605.639476][T19227] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3221'. [ 605.696917][T19234] syzkaller0: entered promiscuous mode [ 605.721807][T19234] syzkaller0: entered allmulticast mode [ 605.753347][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.780849][T19234] tipc: Enabled bearer , priority 0 [ 606.217676][T19233] tipc: Resetting bearer [ 606.282866][T19233] tipc: Disabling bearer [ 606.364686][T19056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.399398][T19259] x_tables: duplicate underflow at hook 1 [ 606.401920][T19260] sctp: [Deprecated]: syz.4.3229 (pid 19260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.401920][T19260] Use struct sctp_sack_info instead [ 606.415534][T19056] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.432778][T19261] sctp: [Deprecated]: syz.4.3229 (pid 19261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.432778][T19261] Use struct sctp_sack_info instead [ 606.507716][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.515672][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.534713][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.544685][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.737327][T19269] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 606.779151][T19269] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 606.793517][T16783] Bluetooth: hci3: command tx timeout [ 606.795725][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.023044][T19278] : entered promiscuous mode [ 607.338119][T19292] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 607.569456][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 607.833429][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.836369][T19309] syzkaller0: entered promiscuous mode [ 607.850612][T19308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3240'. [ 607.870471][T19309] syzkaller0: entered allmulticast mode [ 607.878556][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 608.172612][T19323] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3244'. [ 608.200472][T19056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.409970][T19056] veth0_vlan: entered promiscuous mode [ 608.420691][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 608.466121][T19056] veth1_vlan: entered promiscuous mode [ 608.609394][T19056] veth0_macvtap: entered promiscuous mode [ 608.649825][T19056] veth1_macvtap: entered promiscuous mode [ 608.694617][T19347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3248'. [ 608.839619][T19056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.873357][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.898455][T19056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.941997][ T260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.961101][ T260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.013832][ T260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.041562][ T260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.314382][T16710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.342934][T16710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.385180][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 609.424276][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.458318][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.767058][T19372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3179'. [ 609.795600][T19372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3179'. [ 609.832688][T19372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3179'. [ 609.913473][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.384469][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.426101][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.426362][T19376] syzkaller0: entered promiscuous mode [ 610.448514][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.463311][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.469916][T19376] syzkaller0: entered allmulticast mode [ 610.487547][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.953452][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.993316][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.553923][T16783] Bluetooth: hci1: command tx timeout [ 613.043340][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.728533][T19418] netlink: 'syz.0.3261': attribute type 61 has an invalid length. [ 613.780151][T19418] __nla_validate_parse: 68 callbacks suppressed [ 613.780183][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 613.910917][T19429] Bluetooth: MGMT ver 1.23 [ 613.918850][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 614.073326][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.328508][T19388] lo speed is unknown, defaulting to 1000 [ 614.460089][T19450] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 614.468626][T19448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3268'. [ 614.529628][T19451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'. [ 614.633801][T16783] Bluetooth: hci1: command tx timeout [ 614.646832][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3270'. [ 614.902900][T19388] lo speed is unknown, defaulting to 1000 [ 614.924036][T18598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.123346][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.172837][T19464] syzkaller0: entered promiscuous mode [ 615.183759][T18596] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.191617][T19464] syzkaller0: entered allmulticast mode [ 616.163309][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.720671][T16783] Bluetooth: hci1: command tx timeout [ 617.203449][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.852900][T10919] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.233378][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.324753][T19488] [ 618.327119][T19488] ====================================================== [ 618.334135][T19488] WARNING: possible circular locking dependency detected [ 618.341164][T19488] syzkaller #0 Not tainted [ 618.345576][T19488] ------------------------------------------------------ [ 618.352582][T19488] syz.3.3276/19488 is trying to acquire lock: [ 618.358630][T19488] ffff8880271c3418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 618.368113][T19488] [ 618.368113][T19488] but task is already holding lock: [ 618.375463][T19488] ffff8880271c2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 618.385641][T19488] [ 618.385641][T19488] which lock already depends on the new lock. [ 618.385641][T19488] [ 618.396026][T19488] [ 618.396026][T19488] the existing dependency chain (in reverse order) is: [ 618.405019][T19488] [ 618.405019][T19488] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 618.413611][T19488] blk_alloc_queue+0x544/0x690 [ 618.418975][T19488] __blk_mq_alloc_disk+0x194/0x390 [ 618.424658][T19488] nbd_dev_add+0x494/0xb60 [ 618.429652][T19488] nbd_init+0x15f/0x1e0 [ 618.434381][T19488] do_one_initcall+0x250/0x870 [ 618.439654][T19488] do_initcall_level+0x10a/0x1a0 [ 618.445163][T19488] do_initcalls+0x59/0xa0 [ 618.450003][T19488] kernel_init_freeable+0x29d/0x3e0 [ 618.455707][T19488] kernel_init+0x1d/0x1d0 [ 618.460550][T19488] ret_from_fork+0x514/0xb70 [ 618.465643][T19488] ret_from_fork_asm+0x1a/0x30 [ 618.470914][T19488] [ 618.470914][T19488] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 618.478110][T19488] fs_reclaim_acquire+0x71/0x100 [ 618.483563][T19488] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 618.489879][T19488] __alloc_skb+0x1d7/0x7a0 [ 618.494813][T19488] __ip6_append_data+0x2ea3/0x4080 [ 618.500520][T19488] ip6_append_data+0x108/0x270 [ 618.505791][T19488] rawv6_sendmsg+0x1298/0x18c0 [ 618.511125][T19488] ____sys_sendmsg+0x853/0xa20 [ 618.516395][T19488] ___sys_sendmsg+0x2a5/0x360 [ 618.521575][T19488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.527019][T19488] do_syscall_64+0x174/0x580 [ 618.532124][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.538521][T19488] [ 618.538521][T19488] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 618.546243][T19488] lock_sock_nested+0x41/0x100 [ 618.551517][T19488] inet_shutdown+0x6a/0x390 [ 618.556618][T19488] nbd_mark_nsock_dead+0x2cb/0x550 [ 618.562243][T19488] recv_work+0x1cef/0x1e10 [ 618.567169][T19488] process_scheduled_works+0xa8e/0x14e0 [ 618.573233][T19488] worker_thread+0xa47/0xfb0 [ 618.578339][T19488] kthread+0x389/0x470 [ 618.582928][T19488] ret_from_fork+0x514/0xb70 [ 618.588028][T19488] ret_from_fork_asm+0x1a/0x30 [ 618.593306][T19488] [ 618.593306][T19488] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 618.600940][T19488] __mutex_lock+0x19d/0x1590 [ 618.606042][T19488] nbd_queue_rq+0x373/0x1150 [ 618.611145][T19488] blk_mq_dispatch_rq_list+0x499/0x1990 [ 618.617202][T19488] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 618.624114][T19488] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 618.630609][T19488] blk_mq_run_hw_queue+0x348/0x4f0 [ 618.636230][T19488] blk_mq_dispatch_list+0xd11/0xe10 [ 618.641946][T19488] blk_mq_flush_plug_list+0x45f/0x540 [ 618.647840][T19488] __blk_flush_plug+0x3ed/0x4d0 [ 618.653205][T19488] __submit_bio+0x465/0x560 [ 618.658225][T19488] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 618.664368][T19488] block_read_full_folio+0x599/0x830 [ 618.670160][T19488] filemap_read_folio+0x12c/0x3a0 [ 618.675724][T19488] do_read_cache_folio+0x354/0x590 [ 618.681348][T19488] read_part_sector+0xb6/0x2b0 [ 618.686683][T19488] adfspart_check_ICS+0xb1/0x960 [ 618.692130][T19488] bdev_disk_changed+0x82b/0x1780 [ 618.697657][T19488] blkdev_get_whole+0x372/0x510 [ 618.703050][T19488] bdev_open+0x324/0xd70 [ 618.707800][T19488] blkdev_open+0x461/0x600 [ 618.712721][T19488] do_dentry_open+0x816/0x1380 [ 618.717992][T19488] vfs_open+0x3b/0x340 [ 618.722563][T19488] path_openat+0x2e3b/0x3890 [ 618.727664][T19488] do_file_open+0x23e/0x4a0 [ 618.732680][T19488] do_sys_openat2+0x113/0x200 [ 618.737862][T19488] __x64_sys_openat+0x138/0x170 [ 618.743231][T19488] do_syscall_64+0x174/0x580 [ 618.748329][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.754728][T19488] [ 618.754728][T19488] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 618.761929][T19488] __mutex_lock+0x19d/0x1590 [ 618.767021][T19488] nbd_queue_rq+0xc1/0x1150 [ 618.772038][T19488] blk_mq_dispatch_rq_list+0x499/0x1990 [ 618.778087][T19488] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 618.784925][T19488] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 618.791414][T19488] blk_mq_run_hw_queue+0x348/0x4f0 [ 618.797031][T19488] blk_mq_dispatch_list+0xd11/0xe10 [ 618.802737][T19488] blk_mq_flush_plug_list+0x45f/0x540 [ 618.808612][T19488] __blk_flush_plug+0x3ed/0x4d0 [ 618.813966][T19488] __submit_bio+0x465/0x560 [ 618.818975][T19488] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 618.825109][T19488] block_read_full_folio+0x599/0x830 [ 618.830902][T19488] filemap_read_folio+0x12c/0x3a0 [ 618.836439][T19488] do_read_cache_folio+0x354/0x590 [ 618.842062][T19488] read_part_sector+0xb6/0x2b0 [ 618.847331][T19488] adfspart_check_ICS+0xb1/0x960 [ 618.852774][T19488] bdev_disk_changed+0x82b/0x1780 [ 618.858309][T19488] blkdev_get_whole+0x372/0x510 [ 618.863668][T19488] bdev_open+0x324/0xd70 [ 618.868417][T19488] blkdev_open+0x461/0x600 [ 618.873342][T19488] do_dentry_open+0x816/0x1380 [ 618.878622][T19488] vfs_open+0x3b/0x340 [ 618.883195][T19488] path_openat+0x2e3b/0x3890 [ 618.888311][T19488] do_file_open+0x23e/0x4a0 [ 618.893411][T19488] do_sys_openat2+0x113/0x200 [ 618.898593][T19488] __x64_sys_openat+0x138/0x170 [ 618.903952][T19488] do_syscall_64+0x174/0x580 [ 618.909045][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.915440][T19488] [ 618.915440][T19488] -> #1 (set->srcu){.+.+}-{0:0}: [ 618.922551][T19488] __synchronize_srcu+0xc9/0x2f0 [ 618.927993][T19488] elevator_switch+0x1e8/0x7b0 [ 618.933267][T19488] elevator_change+0x2fa/0x480 [ 618.938549][T19488] elevator_set_default+0x375/0x440 [ 618.944256][T19488] blk_register_queue+0x3f3/0x4e0 [ 618.949787][T19488] __add_disk+0x6cb/0xe30 [ 618.954624][T19488] add_disk_fwnode+0xfb/0x4b0 [ 618.959808][T19488] nbd_dev_add+0x733/0xb60 [ 618.964735][T19488] nbd_init+0x15f/0x1e0 [ 618.969398][T19488] do_one_initcall+0x250/0x870 [ 618.974665][T19488] do_initcall_level+0x10a/0x1a0 [ 618.980111][T19488] do_initcalls+0x59/0xa0 [ 618.984944][T19488] kernel_init_freeable+0x29d/0x3e0 [ 618.990649][T19488] kernel_init+0x1d/0x1d0 [ 618.995505][T19488] ret_from_fork+0x514/0xb70 [ 619.000599][T19488] ret_from_fork_asm+0x1a/0x30 [ 619.005873][T19488] [ 619.005873][T19488] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 619.013680][T19488] __lock_acquire+0x1520/0x2cd0 [ 619.019035][T19488] lock_acquire+0x106/0x350 [ 619.024039][T19488] __mutex_lock+0x19d/0x1590 [ 619.029132][T19488] elevator_change+0x1af/0x480 [ 619.034408][T19488] elevator_set_none+0xb5/0x140 [ 619.039782][T19488] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 619.046101][T19488] nbd_start_device+0x189/0xb30 [ 619.051465][T19488] nbd_genl_connect+0x1597/0x1c10 [ 619.056995][T19488] genl_family_rcv_msg_doit+0x233/0x340 [ 619.063051][T19488] genl_rcv_msg+0x614/0x7a0 [ 619.068058][T19488] netlink_rcv_skb+0x226/0x4a0 [ 619.073324][T19488] genl_rcv+0x28/0x40 [ 619.077812][T19488] netlink_unicast+0x7bb/0x940 [ 619.083082][T19488] netlink_sendmsg+0x813/0xb40 [ 619.088350][T19488] ____sys_sendmsg+0x9b9/0xa20 [ 619.093620][T19488] ___sys_sendmsg+0x2a5/0x360 [ 619.098798][T19488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.104236][T19488] do_syscall_64+0x174/0x580 [ 619.109329][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.115727][T19488] [ 619.115727][T19488] other info that might help us debug this: [ 619.115727][T19488] [ 619.125937][T19488] Chain exists of: [ 619.125937][T19488] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 619.125937][T19488] [ 619.139658][T19488] Possible unsafe locking scenario: [ 619.139658][T19488] [ 619.147092][T19488] CPU0 CPU1 [ 619.152437][T19488] ---- ---- [ 619.157782][T19488] lock(&q->q_usage_counter(io)#51); [ 619.163148][T19488] lock(fs_reclaim); [ 619.169629][T19488] lock(&q->q_usage_counter(io)#51); [ 619.177508][T19488] lock(&q->elevator_lock); [ 619.182080][T19488] [ 619.182080][T19488] *** DEADLOCK *** [ 619.182080][T19488] [ 619.190199][T19488] 6 locks held by syz.3.3276/19488: [ 619.195373][T19488] #0: ffffffff8fe2d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 619.203550][T19488] #1: ffffffff8fe2d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 619.212497][T19488] #2: ffff88802718d9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 619.223881][T19488] #3: ffff88802718d8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 619.234833][T19488] #4: ffff8880271c2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 619.245444][T19488] #5: ffff8880271c2f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 619.256314][T19488] [ 619.256314][T19488] stack backtrace: [ 619.262185][T19488] CPU: 0 UID: 0 PID: 19488 Comm: syz.3.3276 Not tainted syzkaller #0 PREEMPT(full) [ 619.262202][T19488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.262212][T19488] Call Trace: [ 619.262218][T19488] [ 619.262225][T19488] dump_stack_lvl+0xe8/0x150 [ 619.262243][T19488] print_circular_bug+0x2e1/0x300 [ 619.262264][T19488] check_noncircular+0x12e/0x150 [ 619.262285][T19488] __lock_acquire+0x1520/0x2cd0 [ 619.262308][T19488] ? elevator_change+0x1af/0x480 [ 619.262324][T19488] lock_acquire+0x106/0x350 [ 619.262337][T19488] ? elevator_change+0x1af/0x480 [ 619.262359][T19488] __mutex_lock+0x19d/0x1590 [ 619.262375][T19488] ? elevator_change+0x1af/0x480 [ 619.262391][T19488] ? rcu_is_watching+0x15/0xb0 [ 619.262410][T19488] ? elevator_change+0x1af/0x480 [ 619.262425][T19488] ? __pfx___mutex_lock+0x10/0x10 [ 619.262439][T19488] ? enable_work+0x17f/0x230 [ 619.262456][T19488] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.262472][T19488] ? __cancel_work_sync+0xf7/0x110 [ 619.262489][T19488] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 619.262509][T19488] elevator_change+0x1af/0x480 [ 619.262527][T19488] elevator_set_none+0xb5/0x140 [ 619.262542][T19488] ? __pfx_elevator_set_none+0x10/0x10 [ 619.262560][T19488] ? xa_load+0x1db/0x210 [ 619.262577][T19488] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 619.262602][T19488] ? kernfs_add_one+0x480/0x5d0 [ 619.262623][T19488] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 619.262646][T19488] ? sysfs_add_file_mode_ns+0x258/0x300 [ 619.262664][T19488] nbd_start_device+0x189/0xb30 [ 619.262687][T19488] ? device_create_file+0xf4/0x1b0 [ 619.262806][T19488] nbd_genl_connect+0x1597/0x1c10 [ 619.262830][T19488] ? __pfx_nbd_genl_connect+0x10/0x10 [ 619.262856][T19488] ? rcu_is_watching+0x15/0xb0 [ 619.262872][T19488] ? trace_kmalloc+0x2a/0xf0 [ 619.262894][T19488] ? __nla_parse+0x40/0x60 [ 619.262938][T19488] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 619.262960][T19488] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 619.262983][T19488] genl_family_rcv_msg_doit+0x233/0x340 [ 619.263006][T19488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.263030][T19488] ? __lock_acquire+0x683/0x2cd0 [ 619.263048][T19488] genl_rcv_msg+0x614/0x7a0 [ 619.263069][T19488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.263087][T19488] ? __pfx_nbd_genl_connect+0x10/0x10 [ 619.263111][T19488] netlink_rcv_skb+0x226/0x4a0 [ 619.263125][T19488] ? trace_irq_disable+0x3b/0x140 [ 619.263147][T19488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.263166][T19488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.263188][T19488] ? down_read+0x270/0x2e0 [ 619.263204][T19488] ? genl_rcv+0xd/0x40 [ 619.263227][T19488] genl_rcv+0x28/0x40 [ 619.263244][T19488] netlink_unicast+0x7bb/0x940 [ 619.263269][T19488] netlink_sendmsg+0x813/0xb40 [ 619.263289][T19488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.263306][T19488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.263328][T19488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.263348][T19488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.263365][T19488] ____sys_sendmsg+0x9b9/0xa20 [ 619.263381][T19488] ? __might_fault+0xaf/0x130 [ 619.263402][T19488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.263420][T19488] ? import_iovec+0x73/0xa0 [ 619.263437][T19488] ___sys_sendmsg+0x2a5/0x360 [ 619.263452][T19488] ? __lock_acquire+0x683/0x2cd0 [ 619.263467][T19488] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.263484][T19488] ? __schedule+0x1856/0x57a0 [ 619.263516][T19488] ? __fget_files+0x2a/0x420 [ 619.263533][T19488] ? __fget_files+0x3a2/0x420 [ 619.263554][T19488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.263570][T19488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.263590][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.263608][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.263623][T19488] do_syscall_64+0x174/0x580 [ 619.263637][T19488] ? trace_irq_disable+0x3b/0x140 [ 619.263657][T19488] ? clear_bhb_loop+0x40/0x90 [ 619.263673][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.263688][T19488] RIP: 0033:0x7f9d2319ce59 [ 619.263702][T19488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.263716][T19488] RSP: 002b:00007f9d240f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.263732][T19488] RAX: ffffffffffffffda RBX: 00007f9d23415fa0 RCX: 00007f9d2319ce59 [ 619.263744][T19488] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000009 [ 619.263755][T19488] RBP: 00007f9d23232d6f R08: 0000000000000000 R09: 0000000000000000 [ 619.263764][T19488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.263773][T19488] R13: 00007f9d23416038 R14: 00007f9d23415fa0 R15: 00007ffd37903ab8 [ 619.263792][T19488] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 619.770509][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.795149][T16783] Bluetooth: hci1: command tx timeout [ 619.923705][ T260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 619.931696][ T260] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 620.004653][T16783] block nbd2: Receive control failed (result -32) [ 620.011147][T16783] block nbd2: Receive control failed (result -32) [ 620.283427][T18596] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 620.380696][ T260] bond0 (unregistering): Released all slaves [ 620.760679][ T260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.793417][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.809232][ T260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.859381][ T260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.919488][ T260] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.038933][ T260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.105837][ T260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.159458][ T260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.234100][ T260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.402683][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 621.660792][ T260] bridge_slave_1: left allmulticast mode [ 621.670429][ T260] bridge_slave_1: left promiscuous mode [ 621.676855][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.692927][ T260] bridge_slave_0: left allmulticast mode [ 621.700675][ T260] bridge_slave_0: left promiscuous mode [ 621.707120][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.721552][ T260] bridge_slave_1: left allmulticast mode [ 621.728286][ T260] bridge_slave_1: left promiscuous mode [ 621.734572][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.745079][ T260] bridge_slave_0: left allmulticast mode [ 621.751133][ T260] bridge_slave_0: left promiscuous mode [ 621.759931][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.771571][ T260] bridge_slave_1: left allmulticast mode [ 621.777564][ T260] bridge_slave_1: left promiscuous mode [ 621.783569][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.791807][ T260] bridge_slave_0: left allmulticast mode [ 621.798330][ T260] bridge_slave_0: left promiscuous mode [ 621.804063][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.843333][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.890408][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.912383][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.922834][ T260] bond0 (unregistering): Released all slaves [ 622.008134][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.019148][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.030486][ T260] bond0 (unregistering): Released all slaves [ 622.144570][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.154638][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.163995][ T260] bond0 (unregistering): Released all slaves [ 622.172780][ T260] bond1 (unregistering): Released all slaves [ 622.188377][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 622.286837][ T260] tipc: Left network mode [ 622.570812][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 622.883494][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.985963][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 623.185197][ T260] hsr_slave_0: left promiscuous mode [ 623.191722][ T260] hsr_slave_1: left promiscuous mode [ 623.198206][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.206044][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.216238][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.224095][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.236618][ T260] hsr_slave_0: left promiscuous mode [ 623.242974][ T260] hsr_slave_1: left promiscuous mode [ 623.249450][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.261346][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.271214][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.280078][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.293803][ T260] hsr_slave_0: left promiscuous mode [ 623.300162][ T260] hsr_slave_1: left promiscuous mode [ 623.307142][ T260] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 623.315809][ T260] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 623.336682][ T260] veth1_macvtap: left promiscuous mode [ 623.342527][ T260] veth0_macvtap: left promiscuous mode [ 623.348385][ T260] veth1_vlan: left promiscuous mode [ 623.354020][ T260] veth0_vlan: left promiscuous mode [ 623.360217][ T260] veth1_macvtap: left promiscuous mode [ 623.366775][ T260] veth0_macvtap: left promiscuous mode [ 623.372918][ T260] veth1_vlan: left promiscuous mode [ 623.380235][ T260] veth0_vlan: left promiscuous mode [ 623.553612][ T260] team0 (unregistering): Port device team_slave_1 removed [ 623.565986][ T260] team0 (unregistering): Port device team_slave_0 removed [ 623.730361][ T260] team0 (unregistering): Port device team_slave_1 removed [ 623.742919][ T260] team0 (unregistering): Port device team_slave_0 removed [ 623.903899][ T260] team0 (unregistering): Port device team_slave_1 removed [ 623.913353][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.921608][ T260] team0 (unregistering): Port device team_slave_0 removed [ 624.001541][ T5293] 8021q: adding VLAN 0 to HW filter on device eth5 [ 624.443657][ T5293] 8021q: adding VLAN 0 to HW filter on device eth6 [ 624.802286][ T5293] 8021q: adding VLAN 0 to HW filter on device eth7 [ 624.953350][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 625.112837][ T5293] 8021q: adding VLAN 0 to HW filter on device eth8 [ 625.448291][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9 [ 625.750794][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10 [ 625.993328][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.057524][ T5293] 8021q: adding VLAN 0 to HW filter on device eth11 [ 626.352165][ T5293] 8021q: adding VLAN 0 to HW filter on device eth12 [ 627.043346][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.353512][ T11] block nbd4: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 270 seconds [ 627.364632][ T11] block nbd4: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 270 seconds [ 627.376124][ T11] block nbd4: Possible stuck request ffff88802736e380: control (read@2048,1024B). Runtime 270 seconds [ 627.387601][ T11] block nbd4: Possible stuck request ffff88802736e540: control (read@3072,1024B). Runtime 270 seconds [ 628.073419][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available