last executing test programs: 3m18.429727101s ago: executing program 2 (id=10017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x25, 0x1, @val=@netfilter={0xa, 0x1, 0x8}}, 0x20) 3m17.935189272s ago: executing program 2 (id=10023): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) recvfrom$inet6(r2, &(0x7f0000000480)=""/158, 0x9e, 0x20, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x28, r8, 0x200, 0xfffffffc, 0x25dfdbfd, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x20000080) 3m17.423471332s ago: executing program 2 (id=10026): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x9004, 0x4) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x9004, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) (async) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r6, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r11, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r12, r10, 0x4, r10}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 3m16.571337502s ago: executing program 2 (id=10033): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r2 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000880)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) poll(&(0x7f0000000040)=[{r4, 0xa0}], 0x1, 0x10000) (async) sendto$inet(r4, &(0x7f0000000580)='\x00', 0x1, 0x10008095, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) r8 = getuid() sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)=@flushpolicy={0x350, 0x1d, 0x800, 0x70bd27, 0x25dfdbff, "", [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x3, 0x4e20, 0xfffc, 0xb63bf29f20e936ce, 0x0, 0x0, 0x0, r7, r8}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x2, 0x9, 0x9, 0x29, 0x8, 0x1c, 0x6, 0x8}, {0x5, 0x0, 0x0, 0xe}, {0x4, 0x5, 0x1}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x7, 0x160}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @tmpl={0x184, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x3500, 0x0, 0x2, 0x6, 0xff, 0x9, 0xffffff80}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d4, 0x6c}, 0x2, @in6=@mcast2, 0x34ff, 0x7, 0x2, 0x2, 0x5, 0xcb3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@local, 0x3501, 0x0, 0x0, 0x1, 0x5, 0x8, 0x401}, {{@in6=@private0, 0x4d6, 0x6c}, 0xa, @in6=@local, 0x34ff, 0x6, 0x2, 0x2b, 0x9d4, 0x1ff, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4d6, 0xff}, 0xa, @in=@broadcast, 0x3507, 0x0, 0x2, 0x8, 0x0, 0xcd, 0xfffffffd}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d3, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x1, 0x2, 0x2, 0x8, 0x7, 0xfffffffe}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x2}}, @algo_aead={0x97, 0x12, {{'aegis128l-generic\x00'}, 0x258, 0xc0, "a9f5aa9010d74a357d10810c455a93a3fef711547c35d298208f0fbec474e925ca6abcca90eeaaf94152ec27514e31ace1a4a2776565b8169c15c3ab7b53978046292d3b1f35a924426809"}}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000004}, 0xa800) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000240)="94", 0x1) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="01fa060020010000001837000003000000000000000000000018000000090000000000000009000000181200003df79474609704f5a321f5ceb9088646bc005b875130959f87ed7a2decdada802c2619fcc6e7a48cafd6f50f8c1316ff0f6c00a03fb861a5d46f3034fd9891e30455c46c91b7152710984505c4847c3cb7f6274b425fa42fc8fd3a62527f98069de295cfbcec7191cd39f37d8f6f5c1bfa5ca46e8b1ece4ac53987e8fc7d", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183b0000020000000000000000000000184000000100000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000060000001858000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000183800000100"/40], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, r13, 0x110, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x88}}, 0x4000) 3m16.250985018s ago: executing program 2 (id=10037): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="040000000000000020001280070001006272696467650000100002800c0021007f"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @remote}, 0x7a}, 0x1c, 0x0, 0x0, &(0x7f00000036c0)=ANY=[], 0x30}}], 0x2, 0x80) 3m16.060809006s ago: executing program 2 (id=10039): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 3m1.00378445s ago: executing program 32 (id=10039): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 12.854260469s ago: executing program 0 (id=11032): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 12.656882834s ago: executing program 0 (id=11035): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14841}, 0x10) 11.23837074s ago: executing program 0 (id=11038): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xc4, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0xc4}}, 0x4048000) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="400000006800010200000000fddbdf25020000000000000006000700080000001800088014000500fc00000000000000000000000000000108000500", @ANYRES32=r1, @ANYBLOB="0da6f45000db7bfac12ab4b0b44623864f1009e3e268b7fc7288cfd2e7abb60c5201c3662adf5878f01fa6ba62ce9c7d8aa108fcb2d37d0e51f5febe0d76738eede7228c482dbd2a7520ee883906baad40e5d30dad513d99cc3099cb9415140587660b731bddc194f5363971462f1cfd8f2e39ea28c28ebb744fe3ac180d1b5ca86056e80bd79e"], 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) socket$kcm(0x2, 0xa, 0x73) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r4, &(0x7f00000002c0)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d080000000000000023450200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538d652f2cf5c38c618c0e97b898d5b793250d1f6277743a43e72a6b3e5288b0c5e9a3d649cd18a84d8782aeeedcb7b885820a46e253a5045fc1e6d65e6cac4ba92afaab711a0281a947a86fa118e4931a8124faceb0f9f2223a5c5", 0xc5, 0x0, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) (async) write$cgroup_subtree(r5, 0x0, 0x4d) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xadb}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900220073797a32000000001c000481180001800d00010073796e70726f7800001100010000000000000000000100000a6eb4b3ab8c1a6c92aa421d27080a6f6a8962e9cab9db1d85ec5823d4af4b32654b10bfa5dcbbb9ccdd0fa66a00"/156], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaa67f71d525cae8814c3b07f41aaaaaaaa00000000000086dd60a2160000302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a02020100000000200100000000001f00000000000000004e2200000018907804000000000000000400000800000000"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.839575131s ago: executing program 0 (id=11041): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}]}}]}, 0x3c}}, 0x44080) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x140e, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x240080d4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 10.271548071s ago: executing program 0 (id=11044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00', 0x8000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004800100000400400029000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket(0x1, 0x5, 0x0) getsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r5, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="4b4efe92edf8070d50cd7fa7e0d7d4d66955626a06054129c28bcb21e07f38c0c2ae2e4c03995ec4f27e6430fc5c10f0ac85611c2c5bcaaea3565b92c799fe330177c242b346662b37165c0c029323e1e7536f00000000cb7196d9079b003e712c99572f049a794aaf4c740a2fb3a07cf9773d5b04eb7420c859c031fc181d94089c7b59a6a2ef2873da2f823b3fce3ce9a6dd001de7ddf18d4825dc080216a579", @ANYRES32=r7, @ANYBLOB='/'], 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xff}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1f}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044001}, 0x20004040) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r10, 0x215eb000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 7.779660695s ago: executing program 0 (id=11062): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_FLAGS={0x8, 0x8, 0x314}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x44) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_FLAGS={0x8, 0x8, 0x314}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x44) (async) 3.191785508s ago: executing program 4 (id=11084): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 3.080078172s ago: executing program 5 (id=11085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x7, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4001}, 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r2, r0}) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x22008095}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x814008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x8081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500213b42068a89"], &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r6) 3.047482963s ago: executing program 1 (id=11086): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x4, [0xfffe, 0xce6, 0xff, 0x9]}, 0xc) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x4, [0xfffe, 0xce6, 0xff, 0x9]}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/176, 0xb0, 0x0, &(0x7f0000000100)=""/104, 0x68}}, 0x10) 2.966248404s ago: executing program 4 (id=11087): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x26020480) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000006c0)='ns/time_for_children\x00') ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000000)={0x1, 0x1, 0x2, 0xac67, 0x5, 0xbe19}) unshare(0x40080) close(0x4) setsockopt(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) 2.634721929s ago: executing program 4 (id=11089): r0 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) sendmsg$alg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x118, 0x117, 0x2, 0xfd, "af094d078111be86a26d24b4e1d4679566a4e8655031377dcfea5b3941ec7e993b374060a634b00170bf41250c93ede5002c8b92e3261bf15ecee3939ec527e2968bdd42b6c64f5c2fdde39d0c352f6a4da33b3f0e4e4d41bd6fe1a35dc7bce74632209899785cc8186b9eaf981851a38f7b0f823b275fa30769e434f67163528577df0e23cb1580a4a76fedc8191814323717c066fbbe92dc99864ba2c7390bc09938df690dcbe7d7bbfca8a86749b2057ed02bf48af775790ef502c08f2b367632bb43f0f70d68feabb3618660de88ef5a147f9f1a580e56f7b2948f49e6fd757444d4bbc9f8634352eb1563a33b7f08936d988c81b7460c10ab8c70"}], 0x1160, 0x20000090}, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c011}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3800bbf2", @ANYRES16=r7, @ANYBLOB="0100000000000000000014000000240007800c000300000000000000000008000400000000000000000008000100f30b0000"], 0x38}}, 0x0) 2.491685492s ago: executing program 1 (id=11090): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000090000006b1141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 2.318784635s ago: executing program 4 (id=11092): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8400, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff5}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 2.173909869s ago: executing program 3 (id=11093): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80900, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x8]}, {0x0, 0x401, 0x5, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xe}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x2b, @empty, 0x4e23, 0x3, 'ovf\x00', 0x4, 0x2286a0c, 0x7c}, {@rand_addr=0x64010100, 0x4e20, 0x2, 0xffffe322, 0x7, 0x1}}, 0x44) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x6}) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000300)) (async) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000340)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000380)) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010102, 0x1, 0x1e}}) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) getpeername$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000700)={{0x5e, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e23, 0x3, 'sh\x00', 0x9, 0x5, 0x31}, {@rand_addr=0x101, 0x4e23, 0x2, 0x3, 0xfffff001, 0x2}}, 0x44) (async) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = epoll_create(0x7fff) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000000a00)={r0, 0x0, 0x800, 0x0, 0x80, 0xd}) (async) pselect6(0x40, &(0x7f0000000a40)={0x7, 0x5, 0xfffffffffffffffc, 0x6, 0x81, 0x0, 0x80000000, 0x1}, &(0x7f0000000a80)={0x8, 0x9, 0xaf0, 0x3, 0x4523569f, 0x88e, 0x8, 0x7}, &(0x7f0000000ac0)={0xffff, 0x3, 0x2, 0x7, 0xb, 0xfffffffffffffff7, 0x0, 0x9}, &(0x7f0000000b00), &(0x7f0000000b80)={&(0x7f0000000b40)={[0x9]}, 0x8}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "311eb45143e4d25dff87e9f9069c719b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2ace621f275489bf7d2cee74ed176f51"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000081) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000d80)=[@mss={0x2, 0x8001}, @window={0x3, 0x3, 0x7b5e}, @mss={0x2, 0x7}, @mss={0x2, 0x9}, @sack_perm], 0x5) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000dc0)=0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000e00)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x7, 0x5, 0x7ff, 0x8, 0x40, 0x7, 0x3}, &(0x7f0000000ec0)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000f00)={0xfffb, 0x200, 0x208, 0x101, 0xcd, 0x5, 0x0, 0x1b, r10}, &(0x7f0000000f40)=0x20) 2.113727093s ago: executing program 1 (id=11094): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa20000000000000702000033feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3b4457b4479b3f9d2e000000000000", @ANYRES16=r5, @ANYBLOB="110725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r14, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, {[0x0, 0x0, 0xfffffffe]}}, 0x5c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 1.979686824s ago: executing program 5 (id=11095): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000005c0)={&(0x7f0000000580)=[{&(0x7f0000000200)="910823516ef8122e60de7a409c744e86fd07f902c37bec6bbaef2f54d5df0a8b43db3ed24083e54db47818004230a7c61fb6df6b5c7d9c526f41d31ae21f8cd2a8f06894e00f9224f020cbcdf31153cefbf2eee480f26081d86d769e8c3b186215b6db9abafea54f96df8b6604203e9bcdd6f7fde7fb96c3de73317fafec464b419a0bed443a7bc8b1b4230c98d49deb06718cf7b4ca3c062576753ace362c08a65f1180988f06316741cc0293fe49d257b31346ce8e2b345f00e0af051eca255754c16df5791c412302f6f6eed9f89082299c3a4448066ba4", 0xd9}, {&(0x7f0000000300)="21bb982d3e8527167b49ad09d24b615ef367298a67c39eeb8e5464d4c40f8f2b88b5f6593c343211eed8aeced79d234f8ea22fa4fd5c8ab272497237015cdac8204cece2aa1baae9d3223a7442b1a41b918efbe416f725eb2d06990c138df8dad53347e6fb79045d75db004923e290cd7808e5b8841ff6a0cb23ba5615b29b67bdaf415f6810f4e94ea7aea1f9ed1346f139dce8712507f9467c9fe7d9bb3bb0e576cff5735b3261875fa2bdcec5", 0xae}, {&(0x7f00000003c0)="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", 0xfe}, {&(0x7f00000004c0)="3cefac53c68fdf23b212ffa2dfdec48b3bd13029fe4a4726b125a00a39172a605d9d0f03cc15cfdc928ebfe779e6705d02f2a536a9090e06ffd894763ceb88b7344ecd7e9e1503e2769956b2140d4757b216ce9d044240eaa8eebfda182dd2cf7d544836a9324413acf0a7f3189d424c18ee53aba4befe8b8b638fdd7fbfa4ef10619424a3cf839e2f2a9077df", 0x8d}], 0x4, 0x1000, 0x0, 0x3, 0x8, 0x4, 0x2, 0x7f}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1.96914518s ago: executing program 3 (id=11096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x30b}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x120900}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004021) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r5, 0x81, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x0) (async) close(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8000f27, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7ffffffe}}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "d218873c8f78"}]}}}]}, 0x6c}}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) (async) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x4000084) 1.775531591s ago: executing program 5 (id=11097): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 1.659700613s ago: executing program 1 (id=11098): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83478035", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x30}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.571617321s ago: executing program 3 (id=11099): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x20, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x14}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048085}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x1611e735, 0xffffff01, 0x4000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x11, &(0x7f0000000300)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @alu={0x7, 0x1, 0x8, 0x8, 0x2, 0x50, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.503823063s ago: executing program 5 (id=11100): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000001c0), 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x9, 0x4877, {{0x16, 0x4, 0x2, 0x2, 0x58, 0x67, 0x0, 0x80, 0x29, 0x0, @broadcast, @local, {[@noop, @timestamp={0x44, 0x28, 0x91, 0x0, 0xf, [0x1, 0x3, 0x4f, 0xfffffffc, 0x5, 0xf465, 0x1, 0x86, 0x7]}, @end, @timestamp={0x44, 0xc, 0x8f, 0x0, 0x8, [0x3, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "1d51dd8db5"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080d5}, 0x44040) 1.103613872s ago: executing program 4 (id=11101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x9d, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) 1.092484459s ago: executing program 1 (id=11102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454f0a8544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b55265c4de0fcd75309da958ce212ca31481fbad002b53618405e5b117307193e45161539579b8288a3d81a053c9054da79029dc298ee6f8ef2af8293f78771be35d2bb9a823e8e410bfec4159c9f644052b87dcc17812f9abd88e1edb22d5004eb8f732e93d51fb6fb8ba924f7cb90ca183ea5aba16f60c9846e5c440d5c47c917b4e0a11fb24a488199606f", @ANYRES32=0x0, @ANYRES32], 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@ethernet={0x0, @random}, &(0x7f0000000080)=0x80) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44011) 1.071674572s ago: executing program 3 (id=11103): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) r3 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sk_msg}, 0x94) 763.414744ms ago: executing program 4 (id=11104): syz_emit_ethernet(0x11c6, &(0x7f0000000bc0)={@multicast, @remote, @void, {@ipv4={0x800, @gre={{0x20, 0x4, 0x3, 0xc, 0x11b8, 0x65, 0x0, 0x43, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x3a, 0x0, 0xd, [0x1, 0xba, 0x7fff, 0x1f3a]}, @ssrr={0x89, 0x13, 0xb6, [@local, @private=0xa010101, @rand_addr=0x64010100, @local]}, @generic={0x44, 0x7, "0a25fffd3f"}, @lsrr={0x83, 0xf, 0xad, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0xe, "228a5c6439f0a4f26927fe11"}, {0x6, 0x2}]}, @generic={0x3a4cdf0fd81031f8, 0x12, "9e1683e61f69e57ed11068d13219af3b"}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6d, 0x3, [0x2, 0x9b8], "11326c7c2ee08708d75e04139a1da2d11abed9f67c24b96af6090697c6019fb012268fa13cf63620170124db88ea10595d2625f6e4ee789ea3ab4d1491a1fddd2e4f37e8fd4413ff603a8ad476f54db2358e3db50ac27fc725870b493e80fedbb40a7def9dc598f29c06b9f7f1"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x6, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x8], "86255d705b9ebf7ab8629bd6490f3cebfd2ff84bbb37ca558ac185a74288059f9d061de9bb90827f74f1b3522e367564ba9d89c5d1c971e85653ab2d7e6c3b53318b210f5f4f06491fe7cdf4ccdef5b025edb829c21c201a809ce82219eff7ffe1f7947d57d62242f9b1e315e268ab4a0ff3a89cb39802422a63584bafd7cb5dd990e3254bce139690eafeb702ebd6efeb57d70a0b9ea7af0c29cdf9e81d418fc1b971c931a8bedf84bc28"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x7, 0x1, 0x0, 0x2, 0x5, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x3, 0x6, 0x2}, 0x2, {0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x2}}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r1) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24880}, 0x800) 649.990705ms ago: executing program 3 (id=11105): r0 = socket(0xa, 0x5, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="4882e1f2c356c4cb1376d7950dc8b47e479678", @ANYRES64=0x0], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r3, &(0x7f0000000000)="3b000200", 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000e1000084010000d3e4b94f0084000000080000002001000000000200"/56], 0x38, 0x4855}, 0x24000052) 612.425887ms ago: executing program 1 (id=11106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000080000002000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000040000e0150104"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x38, 0x20, 0x300, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x3, 0xe, 0x0, 0x0, 0x4, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffff}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x10004000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20}}]}, 0x24}}, 0x0) 379.830972ms ago: executing program 5 (id=11107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4040850) 154.079465ms ago: executing program 3 (id=11108): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, 0xffffffffffffffff, 0x6000}, 0xc) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 0s ago: executing program 5 (id=11109): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x1, 0x1, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast1, @empty, {[@generic={0x7, 0x6, "f0f0cc8a"}]}}}}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000480001002dbd7000fbdbdf250a000100", @ANYRES32=0x0, @ANYBLOB="00000000080002000c0000001400010000000000000000000000ffff640101010800020000000000a8737bb93d27fceb27047cda721cf7e40af45ccead47c31a45293e5db93107825dd744160137c4408cba49"], 0x40}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x16}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x58}}}}}, 0x28}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0xb00000000000014, 0x0, 0x48) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x8000850) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r8, @ANYBLOB="df4800000000000000000c0000000c000380040003800400040018000180140002007369743000"/50], 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="000326bd7000ffdbdf250f0000002800018014000200767863616e3100000000000000000000080003000000000008000100", @ANYRES32=r0, @ANYBLOB="2000018008000100", @ANYRES32=r0, @ANYBLOB="140002007665746831000000000000000000000018000180140002006873723000000000000000000000000050000180080003000100000008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000100", @ANYRES32=r0, @ANYBLOB="08435d971a1f9b3d6f1c484863d237f045630e0f1832eb65c37296e99261098498d888438af1b581918de8225eb31882bba11b478da45f51f45260e5378a0c5aecaf40f133604c61508535464be4e6cf74f4ce7687079d2245976f0c428b968c9222dc5b0c1769ae68ffc6864564909a550ffef8a121481797992cfaa1a4afa627515bce20bc8e1d15c372c141b3d679db2a5c7f762173b2e0cf958fddc255931b8261dc3ed4ed0957246c8ce5c0e0eb5ffdc43576e1ffa21025ba71779d0d9182b0931d47ae5971a48d5c7ad0290b48afe5d64aadd8a06c3e24ecd2cdeba8fe9d49ab33681107156b393fa6f1ee97f01409de022afc405168926823adb83b7cecbfe0f1b655280c1f93805cef0128b6f2", @ANYRES32=r9, @ANYBLOB="0800030000000000140002006970766c616e30000000000000000000"], 0xc4}}, 0x4008080) kernel console output (not intermixed with test programs): . [ 1523.116384][T10695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9664'. [ 1523.317285][T10701] netlink: 'syz.1.9665': attribute type 1 has an invalid length. [ 1523.382768][T10701] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9665'. [ 1523.463327][T10701] netlink: 'syz.1.9665': attribute type 1 has an invalid length. [ 1523.833465][T10719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9670'. [ 1523.913401][T10720] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1523.998689][T10720] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1524.026764][T10720] gretap1: entered promiscuous mode [ 1524.055242][T10720] gretap1: entered allmulticast mode [ 1524.427625][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9675'. [ 1524.485214][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9675'. [ 1524.527847][T10735] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9675'. [ 1524.859403][ T7018] Bluetooth: hci0: command tx timeout [ 1525.677880][T10779] netlink: 'syz.2.9688': attribute type 1 has an invalid length. [ 1526.943401][ T7018] Bluetooth: hci0: command tx timeout [ 1529.026210][ T5632] Bluetooth: hci0: command tx timeout [ 1530.842323][T10779] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1530.847865][T10782] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1531.090274][T10793] netlink: 'syz.0.9691': attribute type 4 has an invalid length. [ 1531.099578][ T5632] Bluetooth: hci0: command tx timeout [ 1531.606505][T10812] __nla_validate_parse: 4 callbacks suppressed [ 1531.606554][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9695'. [ 1531.649198][T10685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.702569][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.721374][T10685] bridge_slave_0: entered allmulticast mode [ 1531.730795][T10822] netlink: 'syz.2.9698': attribute type 1 has an invalid length. [ 1531.752727][T10685] bridge_slave_0: entered promiscuous mode [ 1531.784105][T10685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.796300][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.815967][T10685] bridge_slave_1: entered allmulticast mode [ 1531.824290][T10685] bridge_slave_1: entered promiscuous mode [ 1532.013489][T10685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.075017][T10831] ip6gre0: Master is either lo or non-ether device [ 1532.104431][T10685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.159580][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9702'. [ 1532.240978][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1532.382066][T10838] netlink: 'syz.2.9702': attribute type 1 has an invalid length. [ 1532.479700][T10685] team0: Port device team_slave_0 added [ 1532.518173][T10685] team0: Port device team_slave_1 added [ 1532.722189][T10685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.743741][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.776133][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1532.841019][T10685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.911676][T10685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.945242][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.055102][T10685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.537018][T10867] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9711'. [ 1533.588672][T10685] hsr_slave_0: entered promiscuous mode [ 1533.615690][T10685] hsr_slave_1: entered promiscuous mode [ 1533.655682][T10685] debugfs: 'hsr0' already exists in 'hsr' [ 1533.698480][T10685] Cannot create hsr debugfs directory [ 1533.941844][T10876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1534.066496][T10881] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9713'. [ 1534.091734][T10868] syzkaller0: entered promiscuous mode [ 1534.109813][T10868] syzkaller0: entered allmulticast mode [ 1537.979245][ T7018] Bluetooth: hci4: command 0x0406 tx timeout [ 1540.632697][T10922] syzkaller0: entered promiscuous mode [ 1540.651905][T10922] syzkaller0: entered allmulticast mode [ 1541.642589][T10685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.954612][T10954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9728'. [ 1541.983619][T10954] netlink: 'syz.0.9728': attribute type 32 has an invalid length. [ 1542.024279][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9728'. [ 1542.099308][T10685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.250485][T10954] bond1: option coupled_control: invalid value (64) [ 1542.265140][T10954] bond1 (unregistering): Released all slaves [ 1542.329948][ T9374] IPVS: starting estimator thread 0... [ 1542.412551][T10969] netlink: 'syz.1.9732': attribute type 1 has an invalid length. [ 1542.432057][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1542.437992][T10966] IPVS: using max 28 ests per chain, 67200 per kthread [ 1542.496291][T10969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1542.517966][T10973] netlink: 'syz.1.9732': attribute type 1 has an invalid length. [ 1542.527697][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1542.566529][T10973] bond3: entered promiscuous mode [ 1542.572605][T10973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1542.584055][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1542.745422][T10685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.824300][T10982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9733'. [ 1542.890405][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1543.038846][T10973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1543.057760][T10973] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1543.082493][T10973] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1543.127999][T10973] bond3: (slave ip6gre1): making interface the new active one [ 1543.146723][T10973] ip6gre1: entered promiscuous mode [ 1543.170272][T10973] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 1543.194864][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9733'. [ 1543.222398][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1543.773173][T10994] Bluetooth: MGMT ver 1.23 [ 1544.165027][T11007] xt_policy: neither incoming nor outgoing policy selected [ 1544.270928][T11004] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1544.930668][T10685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1545.009157][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1545.080567][T10685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1545.184297][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1545.235291][T10685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1545.908773][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1545.967044][T10685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1546.014922][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1546.471013][T10685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.561950][T10685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.649171][T26288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.656449][T26288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.703685][T11084] netlink: 'syz.1.9763': attribute type 21 has an invalid length. [ 1546.757132][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1546.768819][T26288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.776066][T26288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.804104][T11083] netlink: 'syz.3.9760': attribute type 1 has an invalid length. [ 1546.826954][T11085] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3843 [ 1547.198736][T11096] ip6gretap0: left promiscuous mode [ 1547.228785][T11096] ip6gretap0: left allmulticast mode [ 1547.600453][T11116] __nla_validate_parse: 47 callbacks suppressed [ 1547.600474][T11116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9770'. [ 1547.647125][T11116] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9770'. [ 1547.694517][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9770'. [ 1547.795265][T11130] Cannot find add_set index 0 as target [ 1548.042182][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1548.590898][T11157] ip6_vti0: entered promiscuous mode [ 1548.699376][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1548.887128][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1548.942788][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1549.400151][T10685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.380717][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.388544][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.443474][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.450748][T11213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.458445][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.465659][T11213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.510690][T11213] bridge0: entered promiscuous mode [ 1550.626461][T11213] bridge0: entered allmulticast mode [ 1550.923551][T11229] erspan1: entered allmulticast mode [ 1551.407611][T10685] veth0_vlan: entered promiscuous mode [ 1551.467926][T10685] veth1_vlan: entered promiscuous mode [ 1551.624888][T11252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1551.732392][T11251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1551.864740][T10685] veth0_macvtap: entered promiscuous mode [ 1551.915081][T10685] veth1_macvtap: entered promiscuous mode [ 1552.053504][T10685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.171232][T11273] netlink: 'syz.3.9804': attribute type 1 has an invalid length. [ 1552.191757][T10685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.548838][T11273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1552.560731][T11285] rdma_op ffff88807b6951f0 conn xmit_rdma 0000000000000000 [ 1552.619566][T26288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.668811][T26288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.873267][T26270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.973925][T26277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.059473][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9810'. [ 1553.109597][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1553.170371][T11300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9811'. [ 1553.268950][T11298] netlink: 'syz.3.9809': attribute type 11 has an invalid length. [ 1553.294593][T26277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.318410][T11298] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1553.330218][T26277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.559630][T26288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.598051][T26288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.303435][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9817'. [ 1554.409711][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9818'. [ 1554.562906][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9818'. [ 1554.610442][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9821'. [ 1554.691918][T11334] tipc: Started in network mode [ 1554.731203][T11334] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1554.768684][T11334] tipc: Enabling of bearer rejected, failed to enable media [ 1554.817083][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9822'. [ 1554.935006][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9821'. [ 1555.626464][T11377] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1557.183713][T11401] bond1 (unregistering): Released all slaves [ 1557.655369][T11433] netlink: 'syz.2.9841': attribute type 33 has an invalid length. [ 1557.885405][T11433] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1557.894179][T11443] netlink: 'syz.0.9844': attribute type 1 has an invalid length. [ 1558.023155][T11433] bond6 (unregistering): Released all slaves [ 1559.332523][T11481] __nla_validate_parse: 3 callbacks suppressed [ 1559.332546][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9852'. [ 1560.747375][T11535] netlink: 'syz.0.9865': attribute type 1 has an invalid length. [ 1560.787636][T11535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9865'. [ 1561.112180][T11549] netlink: 'syz.0.9869': attribute type 1 has an invalid length. [ 1561.520963][T11552] veth5: entered allmulticast mode [ 1561.638619][T11553] bond1: (slave veth0_to_bond): making interface the new active one [ 1561.673741][T11553] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1561.776018][T11554] macvlan2: entered promiscuous mode [ 1561.800078][T11554] macvlan2: entered allmulticast mode [ 1561.834330][T11554] bond1: entered promiscuous mode [ 1561.869954][T11554] veth0_to_bond: entered promiscuous mode [ 1561.887691][T11554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1561.941639][T11554] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1561.971396][T11554] bond1: left promiscuous mode [ 1561.978986][T11554] veth0_to_bond: left promiscuous mode [ 1562.278826][T11575] vlan2: entered promiscuous mode [ 1562.299857][T11575] bridge0: entered promiscuous mode [ 1562.486765][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9876'. [ 1562.739432][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9877'. [ 1562.766412][T11590] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9877'. [ 1562.802035][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9877'. [ 1563.048011][T11596] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1563.624854][T11612] pim6reg: entered allmulticast mode [ 1563.954360][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9890'. [ 1563.954795][T11627] netlink: 'syz.2.9891': attribute type 10 has an invalid length. [ 1564.033988][T11627] netlink: 'syz.2.9891': attribute type 10 has an invalid length. [ 1564.394462][T11637] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9895'. [ 1564.422919][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9896'. [ 1564.526137][T11636] gre1: entered promiscuous mode [ 1564.539428][T11636] gre1: entered allmulticast mode [ 1564.812337][T11640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1564.949082][T11657] bond4: (slave vti0): refused to change device type [ 1565.367435][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9903'. [ 1565.612119][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1565.701878][T11677] netlink: 'syz.1.9907': attribute type 10 has an invalid length. [ 1565.722593][T11677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.732573][T11677] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1565.765597][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9908'. [ 1566.070374][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1566.137081][T11698] netlink: 'syz.1.9912': attribute type 21 has an invalid length. [ 1566.440831][T11698] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1566.561557][T11698] bond5 (unregistering): Released all slaves [ 1566.822886][ T5632] block nbd13: Receive control failed (result -32) [ 1567.770916][T11754] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 1567.788585][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9926'. [ 1567.969104][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9929'. [ 1567.979863][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9928'. [ 1568.648592][T11784] bond6: entered promiscuous mode [ 1568.653841][T11784] bond6: entered allmulticast mode [ 1568.955136][T11789] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9938'. [ 1568.968600][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.976125][T11789] bridge0: port 2(bridge_slave_1) entered listening state [ 1568.983639][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.990942][T11789] bridge0: port 1(bridge_slave_0) entered listening state [ 1570.424398][T11735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.977433][T11816] __nla_validate_parse: 1 callbacks suppressed [ 1570.977453][T11816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9944'. [ 1571.931923][T11852] IPv6: NLM_F_CREATE should be specified when creating new route [ 1572.016343][T11859] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1572.099906][T11847] team0 (unregistering): Port device team_slave_0 removed [ 1572.142814][T11847] team0 (unregistering): Port device team_slave_1 removed [ 1572.202397][T11865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1573.349168][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9971'. [ 1573.730974][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9976'. [ 1573.780624][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9976'. [ 1573.968476][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9976'. [ 1574.117777][T11931] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9975'. [ 1574.197380][T11934] netlink: 'syz.3.9979': attribute type 23 has an invalid length. [ 1574.449884][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9981'. [ 1574.922636][T11948] hsr_slave_1 (unregistering): left promiscuous mode [ 1574.951302][T11954] netlink: 'syz.3.9979': attribute type 3 has an invalid length. [ 1575.033345][T11951] syzkaller0: entered promiscuous mode [ 1575.039674][T11951] syzkaller0: entered allmulticast mode [ 1578.948528][ T7018] Bluetooth: hci5: command 0x0406 tx timeout [ 1581.814520][T11984] IPv6: addrconf: prefix option has invalid lifetime [ 1581.863659][T11983] syzkaller1: entered allmulticast mode [ 1582.228178][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9990'. [ 1582.444393][T12002] netlink: 'syz.0.9993': attribute type 1 has an invalid length. [ 1582.643445][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1582.915280][T12018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9998'. [ 1583.011479][T12026] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1583.514938][T12042] netlink: 420 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1583.547975][T12042] netlink: 420 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1583.629820][T12042] netlink: 420 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1584.055116][T12060] syzkaller0: entered promiscuous mode [ 1584.062626][T12060] syzkaller0: entered allmulticast mode [ 1586.682329][T12047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1586.697045][T12057] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10008'. [ 1587.643402][T12106] netlink: 'syz.4.10024': attribute type 11 has an invalid length. [ 1587.653154][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10023'. [ 1587.689054][T12106] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.10024'. [ 1587.720079][T12109] netlink: 'syz.2.10023': attribute type 1 has an invalid length. [ 1587.749459][T12111] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1587.799607][T12109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1587.838008][T12110] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10024'. [ 1587.877318][T12109] bond7: (slave geneve2): making interface the new active one [ 1587.890110][T12106] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10024'. [ 1587.905501][T12109] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1588.065549][T12110] gretap0: entered promiscuous mode [ 1588.204377][T12106] 0ªî{X¹¦: renamed from gretap0 [ 1588.258193][T12106] 0ªî{X¹¦: left promiscuous mode [ 1588.295636][T12106] 0ªî{X¹¦: entered allmulticast mode [ 1588.318317][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10026'. [ 1588.358137][T12106] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1588.526739][T12123] hsr_slave_1 (unregistering): left promiscuous mode [ 1588.569723][T12128] tunl0: entered promiscuous mode [ 1588.580710][T12128] netlink: 'syz.3.10029': attribute type 4 has an invalid length. [ 1588.590305][T12128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10029'. [ 1588.601127][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10028'. [ 1588.676414][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10028'. [ 1589.242913][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10037'. [ 1589.262402][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10037'. [ 1590.031492][ T8823] IPVS: starting estimator thread 0... [ 1590.156311][T12186] IPVS: using max 27 ests per chain, 64800 per kthread [ 1590.319138][T12195] Can't find ip_set type [ 1590.346723][T12197] Can't find ip_set type [ 1590.380220][T12199] Can't find ip_set type [ 1590.653037][T12209] bridge_slave_1: left allmulticast mode [ 1590.663570][T12168] infiniband syz2: set active [ 1590.690757][T12209] bridge_slave_1: left promiscuous mode [ 1590.707844][T12168] infiniband syz2: added bond0 [ 1590.726849][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.800011][T12210] netlink: 'syz.1.10050': attribute type 1 has an invalid length. [ 1590.847169][T12209] bridge_slave_0: left allmulticast mode [ 1590.871226][T12168] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1590.887568][T12168] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1590.905635][T12168] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1590.946232][T12209] bridge_slave_0: left promiscuous mode [ 1590.956685][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.008051][T12168] RDS/IB: syz2: added [ 1591.029321][T12168] smc: adding ib device syz2 with port count 1 [ 1591.052388][T12168] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 1591.262684][T12213] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1591.280804][T12213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1591.800290][T12236] netlink: 'syz.4.10057': attribute type 17 has an invalid length. [ 1591.912120][T12241] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1592.415294][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.422790][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.753227][T12266] __nla_validate_parse: 9 callbacks suppressed [ 1592.753250][T12266] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1592.833666][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1593.328836][T12283] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1594.171029][T12303] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10081'. [ 1594.441722][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10084'. [ 1594.486406][T12309] netlink: 170676 bytes leftover after parsing attributes in process `syz.4.10084'. [ 1594.518930][T12309] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 1594.564318][T12309] openvswitch: netlink: Message has 512 unknown bytes. [ 1594.568132][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1594.687283][T12318] openvswitch: netlink: Key type 170 is out of range max 32 [ 1594.944655][T12327] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1595.019914][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.027459][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.068863][T12329] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1595.271083][T12332] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10090'. [ 1595.284290][T12329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.291912][T12329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.299590][T12329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.306859][T12329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.379457][T12332] nbd: illegal input index 65508 [ 1595.436525][T12329] bridge0: left promiscuous mode [ 1595.470673][T12329] bridge0: left allmulticast mode [ 1595.502934][T12329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1595.609257][T12329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.616695][T12329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.080451][T12349] netlink: 'syz.1.10095': attribute type 1 has an invalid length. [ 1596.289400][T12358] netlink: 'syz.4.10098': attribute type 3 has an invalid length. [ 1596.901233][T12373] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 3, id = 0 [ 1596.961465][T12375] netlink: 'syz.4.10101': attribute type 1 has an invalid length. [ 1597.727431][T12394] netlink: 'syz.3.10109': attribute type 30 has an invalid length. [ 1597.767358][T12394] __nla_validate_parse: 8 callbacks suppressed [ 1597.767381][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10109'. [ 1597.787824][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10109'. [ 1597.849460][T12396] pim6reg1: entered promiscuous mode [ 1597.855920][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804133b800: rx timeout, send abort [ 1597.860833][T12394] netlink: 'syz.3.10109': attribute type 30 has an invalid length. [ 1597.881722][T12396] pim6reg1: entered allmulticast mode [ 1597.917083][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10109'. [ 1598.355444][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068239400: rx timeout, send abort [ 1598.364254][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804133b800: abort rx timeout. Force session deactivation [ 1598.466979][T12402] openvswitch: netlink: nsh attribute has 254 unknown bytes. [ 1598.771429][T12410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1598.863960][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068239400: abort rx timeout. Force session deactivation [ 1598.956029][T12413] netlink: 'syz.0.10115': attribute type 1 has an invalid length. [ 1599.122410][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10116'. [ 1599.224968][T12413] bond4: entered promiscuous mode [ 1599.252322][T12413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1599.260497][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1599.260787][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1599.441283][T12418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1599.459421][T12418] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1599.502129][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1599.524762][T12418] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1599.582547][T12418] bond4: (slave ip6gre1): making interface the new active one [ 1599.609712][T12418] ip6gre1: entered promiscuous mode [ 1599.679559][T12418] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1600.241805][T12445] tipc: Started in network mode [ 1600.259007][T12445] tipc: Node identity da89e2886fe5, cluster identity 4711 [ 1600.295291][T12445] tipc: Enabled bearer , priority 0 [ 1600.561651][T12440] syzkaller0: entered promiscuous mode [ 1600.591401][T12440] syzkaller0: entered allmulticast mode [ 1600.611178][T12440] tipc: Resetting bearer [ 1600.640102][T12436] tipc: Resetting bearer [ 1604.709082][ T7018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1604.727151][ T7018] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1604.740131][ T7018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1604.748835][ T7018] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1604.756704][ T7018] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1606.861499][ T7018] Bluetooth: hci3: command tx timeout [ 1607.311776][T12436] tipc: Disabling bearer [ 1607.430053][T26596] tipc: Node number set to 3043811976 [ 1607.450388][T12472] netlink: 'syz.4.10131': attribute type 5 has an invalid length. [ 1607.901615][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10134'. [ 1608.569427][T12511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1608.765888][T12518] xt_socket: unknown flags 0x50 [ 1608.938813][ T7018] Bluetooth: hci3: command tx timeout [ 1609.149266][T12526] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1609.584530][T12535] : renamed from bond_slave_1 (while UP) [ 1609.678415][ T7018] Bluetooth: hci1: command 0x0406 tx timeout [ 1610.035425][T12550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1610.568075][T12575] netlink: 'syz.1.10159': attribute type 1 has an invalid length. [ 1610.621952][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10158'. [ 1611.017037][ T5632] Bluetooth: hci3: command tx timeout [ 1611.041610][T12575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1611.065785][T12588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1611.103920][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10162'. [ 1611.156454][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10162'. [ 1611.443198][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10164'. [ 1611.479491][T12597] netlink: 'syz.1.10164': attribute type 5 has an invalid length. [ 1611.502603][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10164'. [ 1611.530667][T12598] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1611.685150][T12597] geneve2: entered promiscuous mode [ 1611.713946][T12597] geneve2: entered allmulticast mode [ 1612.322355][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.370585][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.435463][T12477] bridge_slave_0: entered allmulticast mode [ 1612.534957][T12477] bridge_slave_0: entered promiscuous mode [ 1612.628363][T26277] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1612.725533][T12477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.779966][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.876590][T12477] bridge_slave_1: entered allmulticast mode [ 1612.909587][T12477] bridge_slave_1: entered promiscuous mode [ 1613.098900][ T5632] Bluetooth: hci3: command tx timeout [ 1613.126504][T13165] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1613.142484][T12639] netlink: 'syz.1.10171': attribute type 1 has an invalid length. [ 1613.586131][T12639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1613.840067][T12641] bond6: (slave geneve3): making interface the new active one [ 1613.924288][T12641] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1614.109435][T12477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.365063][T12477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.088489][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1615.204452][T12477] team0: Port device team_slave_0 added [ 1615.264839][ T5273] v: left promiscuous mode [ 1615.300538][T26268] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1615.327863][T26268] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1615.365668][T12477] team0: Port device team_slave_1 added [ 1615.370664][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10181'. [ 1615.401208][T26596] v: entered promiscuous mode [ 1615.716265][T12477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.735830][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.865758][T12477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.921927][T12477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.939282][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.005759][T12477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.126968][T12679] lo speed is unknown, defaulting to 1000 [ 1616.214462][T12679] lo speed is unknown, defaulting to 1000 [ 1616.383018][T12679] lo speed is unknown, defaulting to 1000 [ 1616.417304][T12679] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1616.465952][T12679] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1616.508331][T12477] hsr_slave_0: entered promiscuous mode [ 1616.543882][T12477] hsr_slave_1: entered promiscuous mode [ 1616.575247][T12477] debugfs: 'hsr0' already exists in 'hsr' [ 1616.594002][T12679] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1616.628136][T12477] Cannot create hsr debugfs directory [ 1616.834228][T12679] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1617.041235][T12679] lo speed is unknown, defaulting to 1000 [ 1617.142332][T12679] lo speed is unknown, defaulting to 1000 [ 1617.439622][T12679] lo speed is unknown, defaulting to 1000 [ 1617.473626][T12679] lo speed is unknown, defaulting to 1000 [ 1617.783289][T12679] lo speed is unknown, defaulting to 1000 [ 1617.825008][T12679] lo speed is unknown, defaulting to 1000 [ 1617.849115][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10190'. [ 1617.926390][T12727] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1617.973264][T12679] lo speed is unknown, defaulting to 1000 [ 1618.053514][T12679] lo speed is unknown, defaulting to 1000 [ 1618.116641][T12679] lo speed is unknown, defaulting to 1000 [ 1618.640143][T26270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.709824][T26270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.842102][T12747] nbd: nbd0 already in use [ 1618.886679][T12747] block nbd0: NBD_DISCONNECT [ 1618.922591][T12747] block nbd0: Send disconnect failed -32 [ 1618.939514][T12750] rdma_op ffff888045bae1f0 conn xmit_rdma 0000000000000000 [ 1618.977517][T12747] block nbd0: shutting down sockets [ 1618.994821][T12679] lo speed is unknown, defaulting to 1000 [ 1619.006100][T12751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1619.152678][T12679] lo speed is unknown, defaulting to 1000 [ 1619.643405][T26270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1619.678482][T26270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.781594][T12679] lo speed is unknown, defaulting to 1000 [ 1619.843613][T12679] lo speed is unknown, defaulting to 1000 [ 1619.931193][T12679] lo speed is unknown, defaulting to 1000 [ 1620.213061][T26270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.254696][T26270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.269890][T12767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10201'. [ 1620.320678][T12769] xt_ecn: cannot match TCP bits for non-tcp packets [ 1620.733903][T26270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.791658][T26270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.193028][T12793] netlink: 'syz.3.10208': attribute type 16 has an invalid length. [ 1621.235234][T12793] netlink: 'syz.3.10208': attribute type 17 has an invalid length. [ 1621.303202][T12477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1621.333445][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1621.344473][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.364478][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10209'. [ 1621.369844][T12477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1621.394037][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1621.417751][T12799] FAULT_INJECTION: forcing a failure. [ 1621.417751][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.458843][T12799] CPU: 1 UID: 0 PID: 12799 Comm: syz.1.10210 Not tainted syzkaller #0 PREEMPT(full) [ 1621.458873][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1621.458886][T12799] Call Trace: [ 1621.458895][T12799] [ 1621.458904][T12799] dump_stack_lvl+0xe8/0x150 [ 1621.458942][T12799] should_fail_ex+0x40c/0x560 [ 1621.458971][T12799] should_failslab+0xa8/0x100 [ 1621.459004][T12799] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1621.459031][T12799] ? __kernfs_new_node+0xe6/0x980 [ 1621.459059][T12799] ? __kernfs_new_node+0xe6/0x980 [ 1621.459090][T12799] ? kernfs_add_one+0x480/0x5e0 [ 1621.459124][T12799] __kernfs_new_node+0xe6/0x980 [ 1621.459153][T12799] ? up_write+0x19f/0x4a0 [ 1621.459182][T12799] ? __pfx___kernfs_new_node+0x10/0x10 [ 1621.459213][T12799] ? kernfs_root+0x1c/0x230 [ 1621.459250][T12799] ? kernfs_root+0x1c/0x230 [ 1621.459278][T12799] ? kernfs_root+0x1c/0x230 [ 1621.459304][T12799] ? kernfs_root+0x1c/0x230 [ 1621.459339][T12799] kernfs_new_node+0xea/0x140 [ 1621.459375][T12799] __kernfs_create_file+0x4b/0x2e0 [ 1621.459401][T12799] sysfs_add_file_mode_ns+0x237/0x300 [ 1621.459435][T12799] sysfs_create_file_ns+0x12b/0x1b0 [ 1621.459462][T12799] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1621.459486][T12799] ? acpi_device_notify+0x171/0x3f0 [ 1621.459631][T12799] ? __dev_fwnode+0x50/0x80 [ 1621.459685][T12799] ? device_create_file+0xf4/0x1b0 [ 1621.459743][T12799] device_add+0x432/0xb80 [ 1621.459787][T12799] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1621.459840][T12799] wakeup_source_register+0x17f/0x380 [ 1621.459899][T12799] ep_insert+0x107b/0x1ae0 [ 1621.459946][T12799] ? __pfx_ep_insert+0x10/0x10 [ 1621.459989][T12799] ? bpf_lsm_capable+0x9/0x20 [ 1621.460015][T12799] ? security_capable+0x7e/0x2c0 [ 1621.460051][T12799] do_epoll_ctl_file+0x8c2/0xee0 [ 1621.460092][T12799] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1621.460127][T12799] ? __fget_files+0x3a2/0x420 [ 1621.460153][T12799] ? __fget_files+0x2a/0x420 [ 1621.460190][T12799] __se_sys_epoll_ctl+0x162/0x230 [ 1621.460226][T12799] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1621.460267][T12799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.460291][T12799] do_syscall_64+0x174/0x580 [ 1621.460317][T12799] ? trace_irq_disable+0x3b/0x140 [ 1621.460343][T12799] ? clear_bhb_loop+0x70/0xc0 [ 1621.460370][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.460391][T12799] RIP: 0033:0x7f47d3d9e0d9 [ 1621.460412][T12799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.460430][T12799] RSP: 002b:00007f47d4c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1621.460453][T12799] RAX: ffffffffffffffda RBX: 00007f47d4025fa0 RCX: 00007f47d3d9e0d9 [ 1621.460469][T12799] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1621.460481][T12799] RBP: 00007f47d4c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.460494][T12799] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1621.460507][T12799] R13: 00007f47d4026038 R14: 00007f47d4025fa0 R15: 00007fff6cd299d8 [ 1621.460542][T12799] [ 1621.785586][T12793] tunl0: left promiscuous mode [ 1621.798204][T12793] ip6_vti0: left promiscuous mode [ 1621.824428][T12794] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1621.844243][T12794] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1622.227194][T12793] gretap1: left promiscuous mode [ 1622.254063][T12793] gretap1: left allmulticast mode [ 1622.371904][T12796] 8021q: VLANs not supported on ip6tnl0 [ 1622.394637][T12477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1622.494617][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1622.566880][T12477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1622.623413][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.845261][T26270] bridge_slave_1: left allmulticast mode [ 1622.852198][T26270] bridge_slave_1: left promiscuous mode [ 1622.870718][T26270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.894311][T26270] bridge_slave_0: left allmulticast mode [ 1622.902009][T26270] bridge_slave_0: left promiscuous mode [ 1622.908533][T26270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.933746][T26270] pim6reg: left allmulticast mode [ 1623.480345][T26270] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1623.591683][T26270] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 1623.600674][T26270] bridge2 (unregistering): left promiscuous mode [ 1623.684084][T26268] smc: removing ib device syz2 [ 1623.713942][T26270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.723725][T26270] bond_slave_0: left allmulticast mode [ 1623.734092][T26270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.745097][T26270] bond_slave_1: left allmulticast mode [ 1623.758198][T26270] bond0 (unregistering): Released all slaves [ 1623.783584][T26270] bond1 (unregistering): Released all slaves [ 1623.811471][T26270] bond2 (unregistering): Released all slaves [ 1623.838476][T26270] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1623.860678][T26270] bond3 (unregistering): Released all slaves [ 1623.884850][T26270] bond4 (unregistering): Released all slaves [ 1623.927477][T26270] bond5 (unregistering): Released all slaves [ 1623.953727][T26270] bond6 (unregistering): Released all slaves [ 1624.004333][T26270] bond7 (unregistering): Released all slaves [ 1624.178232][T26268] smbdirect: ib_dev[syz2] removed [ 1624.310279][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.364997][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.417700][T14570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.424916][T14570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.487584][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.494809][T14570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.807026][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1626.309208][T12477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.623776][T12477] veth0_vlan: entered promiscuous mode [ 1627.701048][T12477] veth1_vlan: entered promiscuous mode [ 1627.853204][T12477] veth0_macvtap: entered promiscuous mode [ 1627.894332][T12477] veth1_macvtap: entered promiscuous mode [ 1628.037423][T12477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.139133][T12477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1628.198160][T13165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.232961][T13165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.416793][T26264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.465587][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1628.507675][T26264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.765935][T13165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.791309][T13165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.927501][T14570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.963531][T14570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.564279][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1632.282990][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1632.389311][T26270] tipc: Left network mode [ 1632.403491][T26270] IPVS: stopping backup sync thread 12111 ... [ 1632.817247][T26270] hsr_slave_0: left promiscuous mode [ 1632.832126][T26270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1632.840303][T26270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.856477][T26270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1632.882083][T26270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.906065][T26270] veth1_macvtap: left promiscuous mode [ 1632.916662][T26270] veth0_macvtap: left promiscuous mode [ 1632.928135][T26270] veth1_vlan: left promiscuous mode [ 1633.049899][T26270] veth0_vlan: left promiscuous mode [ 1634.610569][T26270] IPVS: stop unused estimator thread 0... [ 1645.498541][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 1666.033341][T13012] lo speed is unknown, defaulting to 1000 [ 1666.403507][T13021] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10218'. [ 1666.474846][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1666.830387][T13041] xt_check_target_common: 2 callbacks suppressed [ 1666.830409][T13041] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1666.860245][T13039] FAULT_INJECTION: forcing a failure. [ 1666.860245][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.934970][T13039] CPU: 0 UID: 0 PID: 13039 Comm: syz.5.10223 Not tainted syzkaller #0 PREEMPT(full) [ 1666.935002][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1666.935016][T13039] Call Trace: [ 1666.935025][T13039] [ 1666.935034][T13039] dump_stack_lvl+0xe8/0x150 [ 1666.935071][T13039] should_fail_ex+0x40c/0x560 [ 1666.935101][T13039] should_failslab+0xa8/0x100 [ 1666.935133][T13039] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1666.935158][T13039] ? rwsem_wake+0xe8/0x130 [ 1666.935180][T13039] ? __kernfs_new_node+0xe6/0x980 [ 1666.935209][T13039] ? __kernfs_new_node+0xe6/0x980 [ 1666.935247][T13039] __kernfs_new_node+0xe6/0x980 [ 1666.935286][T13039] ? kernfs_root+0x1c/0x230 [ 1666.935314][T13039] ? __pfx___kernfs_new_node+0x10/0x10 [ 1666.935352][T13039] ? kernfs_root+0x1c/0x230 [ 1666.935389][T13039] ? kernfs_root+0x1c/0x230 [ 1666.935417][T13039] ? kernfs_root+0x1c/0x230 [ 1666.935452][T13039] kernfs_new_node+0xea/0x140 [ 1666.935489][T13039] kernfs_create_link+0xa7/0x200 [ 1666.935516][T13039] sysfs_do_create_link_sd+0x83/0x110 [ 1666.935549][T13039] device_add_class_symlinks+0xb6/0x240 [ 1666.935588][T13039] device_add+0x467/0xb80 [ 1666.935626][T13039] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1666.935658][T13039] wakeup_source_register+0x17f/0x380 [ 1666.935694][T13039] ep_insert+0x107b/0x1ae0 [ 1666.935739][T13039] ? __pfx_ep_insert+0x10/0x10 [ 1666.935781][T13039] ? bpf_lsm_capable+0x9/0x20 [ 1666.935807][T13039] ? security_capable+0x7e/0x2c0 [ 1666.935843][T13039] do_epoll_ctl_file+0x8c2/0xee0 [ 1666.935885][T13039] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1666.935921][T13039] ? __fget_files+0x3a2/0x420 [ 1666.935948][T13039] ? __fget_files+0x2a/0x420 [ 1666.935985][T13039] __se_sys_epoll_ctl+0x162/0x230 [ 1666.936019][T13039] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1666.936059][T13039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.936083][T13039] do_syscall_64+0x174/0x580 [ 1666.936116][T13039] ? trace_irq_disable+0x3b/0x140 [ 1666.936144][T13039] ? clear_bhb_loop+0x70/0xc0 [ 1666.936172][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.936195][T13039] RIP: 0033:0x7f2eb659e0d9 [ 1666.936216][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.936235][T13039] RSP: 002b:00007f2eb750f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1666.936259][T13039] RAX: ffffffffffffffda RBX: 00007f2eb6825fa0 RCX: 00007f2eb659e0d9 [ 1666.936275][T13039] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1666.936288][T13039] RBP: 00007f2eb750f090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.936302][T13039] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1666.936316][T13039] R13: 00007f2eb6826038 R14: 00007f2eb6825fa0 R15: 00007fffe143e008 [ 1666.936361][T13039] [ 1667.268301][T13046] bond1: Removing last ns target with arp_interval on [ 1667.298276][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10226'. [ 1667.406097][T13049] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1667.415578][T13049] bond0: (slave bond7): Enslaving as an active interface with an up link [ 1667.481776][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10229'. [ 1668.403944][T13090] vlan2: entered allmulticast mode [ 1668.411162][T13090] bond0: entered allmulticast mode [ 1668.418024][T13090] bond_slave_0: entered allmulticast mode [ 1668.426032][T13090] bond_slave_1: entered allmulticast mode [ 1668.469547][T13097] FAULT_INJECTION: forcing a failure. [ 1668.469547][T13097] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.516275][T13097] CPU: 1 UID: 0 PID: 13097 Comm: syz.3.10241 Not tainted syzkaller #0 PREEMPT(full) [ 1668.516318][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1668.516331][T13097] Call Trace: [ 1668.516339][T13097] [ 1668.516348][T13097] dump_stack_lvl+0xe8/0x150 [ 1668.516383][T13097] should_fail_ex+0x40c/0x560 [ 1668.516412][T13097] should_failslab+0xa8/0x100 [ 1668.516494][T13097] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1668.516538][T13097] ? __lock_acquire+0x683/0x2cf0 [ 1668.516568][T13097] ? __kernfs_new_node+0xa9/0x980 [ 1668.516597][T13097] ? __kernfs_new_node+0xa9/0x980 [ 1668.516634][T13097] kstrdup+0x42/0x100 [ 1668.516666][T13097] __kernfs_new_node+0xa9/0x980 [ 1668.516715][T13097] ? kernfs_root+0x1c/0x230 [ 1668.516747][T13097] ? __pfx___kernfs_new_node+0x10/0x10 [ 1668.516777][T13097] ? kernfs_root+0x1c/0x230 [ 1668.516813][T13097] ? kernfs_root+0x1c/0x230 [ 1668.516840][T13097] ? kernfs_root+0x1c/0x230 [ 1668.516875][T13097] kernfs_new_node+0xea/0x140 [ 1668.516912][T13097] kernfs_create_link+0xa7/0x200 [ 1668.516939][T13097] sysfs_do_create_link_sd+0x83/0x110 [ 1668.516971][T13097] device_add_class_symlinks+0x1cf/0x240 [ 1668.517009][T13097] device_add+0x467/0xb80 [ 1668.517043][T13097] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1668.517071][T13097] wakeup_source_register+0x17f/0x380 [ 1668.517109][T13097] ep_insert+0x107b/0x1ae0 [ 1668.517157][T13097] ? __pfx_ep_insert+0x10/0x10 [ 1668.517201][T13097] ? bpf_lsm_capable+0x9/0x20 [ 1668.517227][T13097] ? security_capable+0x7e/0x2c0 [ 1668.517265][T13097] do_epoll_ctl_file+0x8c2/0xee0 [ 1668.517306][T13097] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1668.517342][T13097] ? __fget_files+0x3a2/0x420 [ 1668.517369][T13097] ? __fget_files+0x2a/0x420 [ 1668.517401][T13097] __se_sys_epoll_ctl+0x162/0x230 [ 1668.517435][T13097] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1668.517476][T13097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.517499][T13097] do_syscall_64+0x174/0x580 [ 1668.517525][T13097] ? trace_irq_disable+0x3b/0x140 [ 1668.517550][T13097] ? clear_bhb_loop+0x70/0xc0 [ 1668.517577][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.517598][T13097] RIP: 0033:0x7f17a4d9e0d9 [ 1668.517618][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.517636][T13097] RSP: 002b:00007f17a5ba0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1668.517658][T13097] RAX: ffffffffffffffda RBX: 00007f17a5025fa0 RCX: 00007f17a4d9e0d9 [ 1668.517685][T13097] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1668.517697][T13097] RBP: 00007f17a5ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.517709][T13097] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1668.517721][T13097] R13: 00007f17a5026038 R14: 00007f17a5025fa0 R15: 00007ffdea43f408 [ 1668.517756][T13097] [ 1669.174071][T13108] syzkaller0: entered promiscuous mode [ 1669.195108][T13108] syzkaller0: entered allmulticast mode [ 1669.238391][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10245'. [ 1669.438895][T13122] xt_bpf: check failed: parse error [ 1669.535628][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.875184][T13137] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10253'. [ 1670.103794][T13143] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10255'. [ 1670.144496][T13143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10255'. [ 1670.778576][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10261'. [ 1670.822286][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10261'. [ 1671.174821][T13186] netlink: 'syz.0.10267': attribute type 2 has an invalid length. [ 1671.206664][T13186] : entered promiscuous mode [ 1671.214017][T13186] xt_hashlimit: size too large, truncated to 1048576 [ 1671.250882][T13188] netlink: 'syz.5.10268': attribute type 3 has an invalid length. [ 1671.340245][T13192] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1672.029739][T13192] 0ªX¹¦Dö»: entered allmulticast mode [ 1672.338864][T13209] __nla_validate_parse: 3 callbacks suppressed [ 1672.338885][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10272'. [ 1672.502714][T13210] netlink: 'syz.4.10273': attribute type 1 has an invalid length. [ 1672.529668][T13210] netlink: 'syz.4.10273': attribute type 2 has an invalid length. [ 1672.738868][T13221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1672.746211][T13221] IPv6: NLM_F_CREATE should be set when creating new route [ 1673.003961][T26596] IPVS: starting estimator thread 0... [ 1673.128402][T13237] IPVS: using max 25 ests per chain, 60000 per kthread [ 1673.382123][T13244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10283'. [ 1673.808732][T13251] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10285'. [ 1674.341247][T13267] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1674.397864][T13267] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1674.477799][T13267] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1674.563520][T13281] netlink: 'syz.0.10292': attribute type 8 has an invalid length. [ 1674.597592][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10292'. [ 1675.006866][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10296'. [ 1675.591220][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1675.629799][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1675.907067][T13310] bond5: entered promiscuous mode [ 1675.977318][T13310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1677.110037][T13346] tipc: Started in network mode [ 1677.129339][T13346] tipc: Node identity 8ab538ec32d7, cluster identity 4711 [ 1677.170913][T13346] tipc: Enabled bearer , priority 0 [ 1677.499764][T13350] syzkaller0: entered promiscuous mode [ 1677.512489][T13350] syzkaller0: entered allmulticast mode [ 1677.546938][T13350] tipc: Resetting bearer [ 1677.861851][T13372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10318'. [ 1678.121662][T26278] tipc: Resetting bearer [ 1678.150378][T13345] tipc: Resetting bearer [ 1678.463910][ T5632] Bluetooth: hci3: command 0x0405 tx timeout [ 1679.008568][T13393] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10323'. [ 1684.370627][T13345] tipc: Disabling bearer [ 1684.529779][T26596] tipc: Node number set to 3093444844 [ 1684.573755][T13390] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1684.580214][T13390] syzkaller1: linktype set to 823 [ 1684.637225][T13402] bond0: Error: Cannot enslave bond to itself. [ 1685.474316][T13424] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1685.516137][T13424] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1685.795341][T13438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10337'. [ 1686.384706][T13459] FAULT_INJECTION: forcing a failure. [ 1686.384706][T13459] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.451246][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.1.10341 Not tainted syzkaller #0 PREEMPT(full) [ 1686.451278][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.451291][T13459] Call Trace: [ 1686.451301][T13459] [ 1686.451311][T13459] dump_stack_lvl+0xe8/0x150 [ 1686.451347][T13459] should_fail_ex+0x40c/0x560 [ 1686.451377][T13459] should_failslab+0xa8/0x100 [ 1686.451412][T13459] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1686.451446][T13459] ? __kernfs_new_node+0xe6/0x980 [ 1686.451476][T13459] ? __kernfs_new_node+0xe6/0x980 [ 1686.451515][T13459] __kernfs_new_node+0xe6/0x980 [ 1686.451558][T13459] ? __pfx___kernfs_new_node+0x10/0x10 [ 1686.451591][T13459] ? kernfs_root+0x1c/0x230 [ 1686.451628][T13459] ? kernfs_root+0x1c/0x230 [ 1686.451659][T13459] ? kernfs_root+0x1c/0x230 [ 1686.451686][T13459] ? kernfs_root+0x1c/0x230 [ 1686.451720][T13459] kernfs_new_node+0xea/0x140 [ 1686.451758][T13459] __kernfs_create_file+0x4b/0x2e0 [ 1686.451788][T13459] sysfs_add_file_mode_ns+0x237/0x300 [ 1686.451824][T13459] internal_create_group+0x679/0x1180 [ 1686.451873][T13459] ? __pfx_internal_create_group+0x10/0x10 [ 1686.451909][T13459] ? up_write+0x19f/0x4a0 [ 1686.451935][T13459] sysfs_create_groups+0x59/0x120 [ 1686.451980][T13459] device_add_attrs+0x1b1/0x600 [ 1686.452018][T13459] ? __pfx_device_add_attrs+0x10/0x10 [ 1686.452049][T13459] ? kobject_put+0x50f/0x550 [ 1686.452204][T13459] ? device_add_class_symlinks+0x21f/0x240 [ 1686.452247][T13459] device_add+0x488/0xb80 [ 1686.452283][T13459] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1686.452313][T13459] wakeup_source_register+0x17f/0x380 [ 1686.452351][T13459] ep_insert+0x107b/0x1ae0 [ 1686.452402][T13459] ? __pfx_ep_insert+0x10/0x10 [ 1686.452447][T13459] ? bpf_lsm_capable+0x9/0x20 [ 1686.452475][T13459] ? security_capable+0x7e/0x2c0 [ 1686.452514][T13459] do_epoll_ctl_file+0x8c2/0xee0 [ 1686.452556][T13459] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1686.452593][T13459] ? __fget_files+0x3a2/0x420 [ 1686.452621][T13459] ? __fget_files+0x2a/0x420 [ 1686.452659][T13459] __se_sys_epoll_ctl+0x162/0x230 [ 1686.452696][T13459] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1686.452739][T13459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.452765][T13459] do_syscall_64+0x174/0x580 [ 1686.452792][T13459] ? trace_irq_disable+0x3b/0x140 [ 1686.452819][T13459] ? clear_bhb_loop+0x70/0xc0 [ 1686.452847][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.452870][T13459] RIP: 0033:0x7f47d3d9e0d9 [ 1686.452891][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.452911][T13459] RSP: 002b:00007f47d4c6a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1686.452934][T13459] RAX: ffffffffffffffda RBX: 00007f47d4026090 RCX: 00007f47d3d9e0d9 [ 1686.452952][T13459] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1686.452973][T13459] RBP: 00007f47d4c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.452987][T13459] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1686.453001][T13459] R13: 00007f47d4026128 R14: 00007f47d4026090 R15: 00007fff6cd299d8 [ 1686.453037][T13459] [ 1687.219842][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10342'. [ 1687.723227][T13468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1688.087235][T13484] IPv6: addrconf: prefix option has invalid lifetime [ 1688.094025][T13484] IPv6: addrconf: prefix option has invalid lifetime [ 1688.162813][T13491] netlink: 'syz.1.10349': attribute type 1 has an invalid length. [ 1688.381159][T13494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1688.438878][T13499] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1688.584942][T13506] FAULT_INJECTION: forcing a failure. [ 1688.584942][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.732542][T13506] CPU: 1 UID: 0 PID: 13506 Comm: syz.1.10353 Not tainted syzkaller #0 PREEMPT(full) [ 1688.732577][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1688.732589][T13506] Call Trace: [ 1688.732597][T13506] [ 1688.732606][T13506] dump_stack_lvl+0xe8/0x150 [ 1688.732637][T13506] should_fail_ex+0x40c/0x560 [ 1688.732661][T13506] should_failslab+0xa8/0x100 [ 1688.732688][T13506] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1688.732710][T13506] ? __kernfs_new_node+0xe6/0x980 [ 1688.732734][T13506] ? __kernfs_new_node+0xe6/0x980 [ 1688.732765][T13506] __kernfs_new_node+0xe6/0x980 [ 1688.732798][T13506] ? __pfx___kernfs_new_node+0x10/0x10 [ 1688.732824][T13506] ? kernfs_root+0x1c/0x230 [ 1688.732853][T13506] ? kernfs_root+0x1c/0x230 [ 1688.732876][T13506] ? kernfs_root+0x1c/0x230 [ 1688.732897][T13506] ? kernfs_root+0x1c/0x230 [ 1688.732924][T13506] kernfs_new_node+0xea/0x140 [ 1688.732954][T13506] __kernfs_create_file+0x4b/0x2e0 [ 1688.732976][T13506] sysfs_add_file_mode_ns+0x237/0x300 [ 1688.733006][T13506] internal_create_group+0x679/0x1180 [ 1688.733045][T13506] ? __pfx_internal_create_group+0x10/0x10 [ 1688.733076][T13506] ? up_write+0x19f/0x4a0 [ 1688.733097][T13506] sysfs_create_groups+0x59/0x120 [ 1688.733124][T13506] device_add_attrs+0x1b1/0x600 [ 1688.733155][T13506] ? __pfx_device_add_attrs+0x10/0x10 [ 1688.733179][T13506] ? kobject_put+0x50f/0x550 [ 1688.733210][T13506] ? device_add_class_symlinks+0x21f/0x240 [ 1688.733239][T13506] device_add+0x488/0xb80 [ 1688.733267][T13506] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1688.733291][T13506] wakeup_source_register+0x17f/0x380 [ 1688.733321][T13506] ep_insert+0x107b/0x1ae0 [ 1688.733362][T13506] ? __pfx_ep_insert+0x10/0x10 [ 1688.733398][T13506] ? bpf_lsm_capable+0x9/0x20 [ 1688.733418][T13506] ? security_capable+0x7e/0x2c0 [ 1688.733449][T13506] do_epoll_ctl_file+0x8c2/0xee0 [ 1688.733484][T13506] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1688.733512][T13506] ? __fget_files+0x3a2/0x420 [ 1688.733534][T13506] ? __fget_files+0x2a/0x420 [ 1688.733575][T13506] __se_sys_epoll_ctl+0x162/0x230 [ 1688.733606][T13506] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1688.733640][T13506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.733660][T13506] do_syscall_64+0x174/0x580 [ 1688.733681][T13506] ? trace_irq_disable+0x3b/0x140 [ 1688.733702][T13506] ? clear_bhb_loop+0x70/0xc0 [ 1688.733724][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.733742][T13506] RIP: 0033:0x7f47d3d9e0d9 [ 1688.733760][T13506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.733776][T13506] RSP: 002b:00007f47d4c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1688.733795][T13506] RAX: ffffffffffffffda RBX: 00007f47d4025fa0 RCX: 00007f47d3d9e0d9 [ 1688.733808][T13506] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1688.733819][T13506] RBP: 00007f47d4c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.733830][T13506] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1688.733841][T13506] R13: 00007f47d4026038 R14: 00007f47d4025fa0 R15: 00007fff6cd299d8 [ 1688.733871][T13506] [ 1689.378470][T13521] gretap0: entered promiscuous mode [ 1689.459359][T13521] vlan2: entered promiscuous mode [ 1689.808553][T13527] netlink: 'syz.0.10359': attribute type 1 has an invalid length. [ 1689.844041][T13482] ipvlan2: entered allmulticast mode [ 1689.864277][T13482] batadv_slave_1: entered allmulticast mode [ 1689.898267][T13482] batman_adv: batadv0: Adding interface: ipvlan2 [ 1689.927065][T13482] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.018069][T13482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.056038][T13482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.093732][T13482] batman_adv: batadv0: Interface activated: ipvlan2 [ 1690.102529][T13527] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1690.658932][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1690.891513][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10369'. [ 1691.799155][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1692.774049][T13612] netlink: 'syz.0.10384': attribute type 1 has an invalid length. [ 1692.916540][T13622] netlink: 'syz.1.10386': attribute type 2 has an invalid length. [ 1693.030866][T13612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1693.514858][T13637] Bluetooth: MGMT ver 1.23 [ 1693.553256][T13637] xt_time: unknown flags 0xf4 [ 1693.710655][T13630] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10388'. [ 1693.859810][T13644] FAULT_INJECTION: forcing a failure. [ 1693.859810][T13644] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.926057][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.1.10392 Not tainted syzkaller #0 PREEMPT(full) [ 1693.926087][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1693.926101][T13644] Call Trace: [ 1693.926110][T13644] [ 1693.926120][T13644] dump_stack_lvl+0xe8/0x150 [ 1693.926157][T13644] should_fail_ex+0x40c/0x560 [ 1693.926187][T13644] should_failslab+0xa8/0x100 [ 1693.926221][T13644] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1693.926249][T13644] ? __kernfs_new_node+0xe6/0x980 [ 1693.926279][T13644] ? __kernfs_new_node+0xe6/0x980 [ 1693.926318][T13644] __kernfs_new_node+0xe6/0x980 [ 1693.926361][T13644] ? __pfx___kernfs_new_node+0x10/0x10 [ 1693.926394][T13644] ? kernfs_root+0x1c/0x230 [ 1693.926435][T13644] ? kernfs_root+0x1c/0x230 [ 1693.926464][T13644] ? kernfs_root+0x1c/0x230 [ 1693.926491][T13644] ? kernfs_root+0x1c/0x230 [ 1693.926526][T13644] kernfs_new_node+0xea/0x140 [ 1693.926563][T13644] __kernfs_create_file+0x4b/0x2e0 [ 1693.926592][T13644] sysfs_add_file_mode_ns+0x237/0x300 [ 1693.926628][T13644] internal_create_group+0x679/0x1180 [ 1693.926677][T13644] ? __pfx_internal_create_group+0x10/0x10 [ 1693.926713][T13644] ? up_write+0x19f/0x4a0 [ 1693.926739][T13644] sysfs_create_groups+0x59/0x120 [ 1693.926773][T13644] device_add_attrs+0x1b1/0x600 [ 1693.926811][T13644] ? __pfx_device_add_attrs+0x10/0x10 [ 1693.926842][T13644] ? kobject_put+0x50f/0x550 [ 1693.926880][T13644] ? device_add_class_symlinks+0x21f/0x240 [ 1693.926918][T13644] device_add+0x488/0xb80 [ 1693.926954][T13644] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1693.926984][T13644] wakeup_source_register+0x17f/0x380 [ 1693.927023][T13644] ep_insert+0x107b/0x1ae0 [ 1693.927079][T13644] ? __pfx_ep_insert+0x10/0x10 [ 1693.927125][T13644] ? bpf_lsm_capable+0x9/0x20 [ 1693.927151][T13644] ? security_capable+0x7e/0x2c0 [ 1693.927190][T13644] do_epoll_ctl_file+0x8c2/0xee0 [ 1693.927233][T13644] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1693.927271][T13644] ? __fget_files+0x3a2/0x420 [ 1693.927299][T13644] ? __fget_files+0x2a/0x420 [ 1693.927337][T13644] __se_sys_epoll_ctl+0x162/0x230 [ 1693.927373][T13644] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1693.927416][T13644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.927441][T13644] do_syscall_64+0x174/0x580 [ 1693.927467][T13644] ? trace_irq_disable+0x3b/0x140 [ 1693.927494][T13644] ? clear_bhb_loop+0x70/0xc0 [ 1693.927522][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.927545][T13644] RIP: 0033:0x7f47d3d9e0d9 [ 1693.927565][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.927583][T13644] RSP: 002b:00007f47d4c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1693.927607][T13644] RAX: ffffffffffffffda RBX: 00007f47d4025fa0 RCX: 00007f47d3d9e0d9 [ 1693.927623][T13644] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1693.927637][T13644] RBP: 00007f47d4c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.927650][T13644] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1693.927664][T13644] R13: 00007f47d4026038 R14: 00007f47d4025fa0 R15: 00007fff6cd299d8 [ 1693.927698][T13644] [ 1694.324061][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1694.420122][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1695.074061][T13664] dvmrp8: entered allmulticast mode [ 1695.254765][T13672] pim6reg: entered allmulticast mode [ 1695.611223][T13676] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10403'. [ 1695.684378][T13676] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1695.717647][T13676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10403'. [ 1695.816326][T13678] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1695.869560][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10404'. [ 1695.894477][T13676] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1696.050486][T13676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10403'. [ 1696.340989][T13678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1696.365364][T13690] xt_hashlimit: size too large, truncated to 1048576 [ 1696.739589][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10400'. [ 1697.227899][T13709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10410'. [ 1697.885062][T13720] bridge2: entered promiscuous mode [ 1697.955421][T13720] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 1698.294040][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10421'. [ 1698.613832][T13744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10424'. [ 1698.682718][T13744] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10424'. [ 1698.713694][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1698.748419][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1698.823034][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1698.893391][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1698.923801][T13749] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 1698.978504][T13749] bond1 (unregistering): Released all slaves [ 1699.105318][T26264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.162424][T26264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.719596][T13791] bond8 (unregistering): Released all slaves [ 1700.881209][T13793] bridge: RTM_NEWNEIGH with invalid ether address [ 1701.695143][T13830] netlink: 'syz.3.10450': attribute type 2 has an invalid length. [ 1701.773711][T13827] IPVS: ip_vs_add_dest(): server weight less than zero [ 1701.892851][T13838] netlink: Invalid conntrack timeout [ 1701.911849][T13838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1701.959310][T13840] __nla_validate_parse: 3 callbacks suppressed [ 1701.959332][T13840] netlink: 19 bytes leftover after parsing attributes in process `syz.5.10452'. [ 1702.204617][T13840] netlink: 19 bytes leftover after parsing attributes in process `syz.5.10452'. [ 1703.030636][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10460'. [ 1703.789843][T13906] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1703.822421][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1704.051229][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10472'. [ 1704.241661][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10475'. [ 1704.283817][T13932] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1704.682420][T13939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10478'. [ 1704.713724][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10478'. [ 1705.785161][T13980] netlink: 'syz.1.10491': attribute type 2 has an invalid length. [ 1705.838998][T13978] geneve2: entered promiscuous mode [ 1705.848242][T13980] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10491'. [ 1706.159709][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1706.357362][T13999] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 1706.563728][T14006] netlink: 'syz.3.10500': attribute type 21 has an invalid length. [ 1706.612641][T14006] netlink: 'syz.3.10500': attribute type 21 has an invalid length. [ 1706.626925][T26264] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.647673][T14009] netlink: 'syz.3.10500': attribute type 1 has an invalid length. [ 1706.654812][T26264] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.698338][T26277] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.933597][T26277] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.106224][T14023] __nla_validate_parse: 3 callbacks suppressed [ 1707.106244][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1707.361172][T14033] FAULT_INJECTION: forcing a failure. [ 1707.361172][T14033] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.384955][T14033] CPU: 0 UID: 0 PID: 14033 Comm: syz.1.10508 Not tainted syzkaller #0 PREEMPT(full) [ 1707.384993][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1707.385009][T14033] Call Trace: [ 1707.385019][T14033] [ 1707.385039][T14033] dump_stack_lvl+0xe8/0x150 [ 1707.385081][T14033] should_fail_ex+0x40c/0x560 [ 1707.385110][T14033] ? __pfx_dev_uevent_name+0x10/0x10 [ 1707.385235][T14033] should_failslab+0xa8/0x100 [ 1707.385272][T14033] __kmalloc_cache_noprof+0xa8/0x660 [ 1707.385306][T14033] ? kobject_uevent_env+0x289/0x9e0 [ 1707.385327][T14033] ? kobject_uevent_env+0x289/0x9e0 [ 1707.385351][T14033] ? __pfx_bus_add_device+0x10/0x10 [ 1707.385383][T14033] ? __pfx_dev_uevent_name+0x10/0x10 [ 1707.385413][T14033] kobject_uevent_env+0x289/0x9e0 [ 1707.385448][T14033] device_add+0x544/0xb80 [ 1707.385490][T14033] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1707.385522][T14033] wakeup_source_register+0x17f/0x380 [ 1707.385565][T14033] ep_insert+0x107b/0x1ae0 [ 1707.385622][T14033] ? __pfx_ep_insert+0x10/0x10 [ 1707.385669][T14033] ? bpf_lsm_capable+0x9/0x20 [ 1707.385698][T14033] ? security_capable+0x7e/0x2c0 [ 1707.385738][T14033] do_epoll_ctl_file+0x8c2/0xee0 [ 1707.385785][T14033] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1707.385825][T14033] ? __fget_files+0x3a2/0x420 [ 1707.385854][T14033] ? __fget_files+0x2a/0x420 [ 1707.385895][T14033] __se_sys_epoll_ctl+0x162/0x230 [ 1707.385935][T14033] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1707.385981][T14033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.386008][T14033] do_syscall_64+0x174/0x580 [ 1707.386045][T14033] ? trace_irq_disable+0x3b/0x140 [ 1707.386074][T14033] ? clear_bhb_loop+0x70/0xc0 [ 1707.386104][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.386129][T14033] RIP: 0033:0x7f47d3d9e0d9 [ 1707.386152][T14033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.386172][T14033] RSP: 002b:00007f47d4c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1707.386198][T14033] RAX: ffffffffffffffda RBX: 00007f47d4025fa0 RCX: 00007f47d3d9e0d9 [ 1707.386215][T14033] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1707.386229][T14033] RBP: 00007f47d4c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.386244][T14033] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1707.386259][T14033] R13: 00007f47d4026038 R14: 00007f47d4025fa0 R15: 00007fff6cd299d8 [ 1707.386299][T14033] [ 1707.839512][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10514'. [ 1707.852516][T14043] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10514'. [ 1707.961642][T14048] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10513'. [ 1708.334460][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10518'. [ 1708.363285][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10520'. [ 1708.667982][T14070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10521'. [ 1709.031020][T14086] FAULT_INJECTION: forcing a failure. [ 1709.031020][T14086] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.074408][T14086] CPU: 0 UID: 0 PID: 14086 Comm: syz.4.10526 Not tainted syzkaller #0 PREEMPT(full) [ 1709.074441][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1709.074455][T14086] Call Trace: [ 1709.074465][T14086] [ 1709.074475][T14086] dump_stack_lvl+0xe8/0x150 [ 1709.074509][T14086] should_fail_ex+0x40c/0x560 [ 1709.074538][T14086] should_failslab+0xa8/0x100 [ 1709.074572][T14086] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1709.074598][T14086] ? local_lock_release+0x9c/0x160 [ 1709.074631][T14086] ? __alloc_skb+0x1d7/0x7a0 [ 1709.074659][T14086] ? __alloc_skb+0x1d7/0x7a0 [ 1709.074695][T14086] __alloc_skb+0x1d7/0x7a0 [ 1709.074730][T14086] alloc_uevent_skb+0x7d/0x230 [ 1709.074758][T14086] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1709.074786][T14086] kobject_uevent_env+0x566/0x9e0 [ 1709.074816][T14086] device_add+0x544/0xb80 [ 1709.074853][T14086] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1709.074881][T14086] wakeup_source_register+0x17f/0x380 [ 1709.074919][T14086] ep_insert+0x107b/0x1ae0 [ 1709.074968][T14086] ? __pfx_ep_insert+0x10/0x10 [ 1709.075015][T14086] ? bpf_lsm_capable+0x9/0x20 [ 1709.075041][T14086] ? security_capable+0x7e/0x2c0 [ 1709.075081][T14086] do_epoll_ctl_file+0x8c2/0xee0 [ 1709.075124][T14086] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1709.075161][T14086] ? __fget_files+0x3a2/0x420 [ 1709.075187][T14086] ? __fget_files+0x2a/0x420 [ 1709.075224][T14086] __se_sys_epoll_ctl+0x162/0x230 [ 1709.075261][T14086] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1709.075304][T14086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.075337][T14086] do_syscall_64+0x174/0x580 [ 1709.075363][T14086] ? trace_irq_disable+0x3b/0x140 [ 1709.075390][T14086] ? clear_bhb_loop+0x70/0xc0 [ 1709.075420][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.075443][T14086] RIP: 0033:0x7fbbca39e0d9 [ 1709.075464][T14086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.075483][T14086] RSP: 002b:00007fbbcb1a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1709.075506][T14086] RAX: ffffffffffffffda RBX: 00007fbbca625fa0 RCX: 00007fbbca39e0d9 [ 1709.075522][T14086] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1709.075535][T14086] RBP: 00007fbbcb1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.075547][T14086] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1709.075561][T14086] R13: 00007fbbca626038 R14: 00007fbbca625fa0 R15: 00007ffe8661baf8 [ 1709.075596][T14086] [ 1710.002624][T14115] netlink: 'syz.1.10536': attribute type 1 has an invalid length. [ 1710.344662][T14115] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1710.375051][T14117] IPVS: Unknown mcast interface: vcan0 [ 1710.548359][T14122] bond11: (slave geneve4): making interface the new active one [ 1710.573681][T14122] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 1710.597922][T14130] mac80211_hwsim hwsim92 wlan0: entered promiscuous mode [ 1710.663240][T14138] FAULT_INJECTION: forcing a failure. [ 1710.663240][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.706763][T14138] CPU: 0 UID: 0 PID: 14138 Comm: syz.4.10541 Not tainted syzkaller #0 PREEMPT(full) [ 1710.706797][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1710.706811][T14138] Call Trace: [ 1710.706820][T14138] [ 1710.706831][T14138] dump_stack_lvl+0xe8/0x150 [ 1710.706869][T14138] should_fail_ex+0x40c/0x560 [ 1710.706899][T14138] should_failslab+0xa8/0x100 [ 1710.706932][T14138] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1710.706959][T14138] ? local_lock_release+0x9c/0x160 [ 1710.706993][T14138] ? __alloc_skb+0x1d7/0x7a0 [ 1710.707022][T14138] ? __alloc_skb+0x1d7/0x7a0 [ 1710.707060][T14138] __alloc_skb+0x1d7/0x7a0 [ 1710.707097][T14138] alloc_uevent_skb+0x7d/0x230 [ 1710.707126][T14138] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1710.707156][T14138] kobject_uevent_env+0x566/0x9e0 [ 1710.707189][T14138] device_add+0x544/0xb80 [ 1710.707227][T14138] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1710.707258][T14138] wakeup_source_register+0x17f/0x380 [ 1710.707297][T14138] ep_insert+0x107b/0x1ae0 [ 1710.707348][T14138] ? __pfx_ep_insert+0x10/0x10 [ 1710.707410][T14138] ? bpf_lsm_capable+0x9/0x20 [ 1710.707438][T14138] ? security_capable+0x7e/0x2c0 [ 1710.707478][T14138] do_epoll_ctl_file+0x8c2/0xee0 [ 1710.707521][T14138] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1710.707558][T14138] ? __fget_files+0x3a2/0x420 [ 1710.707586][T14138] ? __fget_files+0x2a/0x420 [ 1710.707624][T14138] __se_sys_epoll_ctl+0x162/0x230 [ 1710.707662][T14138] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1710.707715][T14138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.707741][T14138] do_syscall_64+0x174/0x580 [ 1710.707767][T14138] ? trace_irq_disable+0x3b/0x140 [ 1710.707794][T14138] ? clear_bhb_loop+0x70/0xc0 [ 1710.707822][T14138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.707846][T14138] RIP: 0033:0x7fbbca39e0d9 [ 1710.707867][T14138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.707890][T14138] RSP: 002b:00007fbbcb1a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1710.707914][T14138] RAX: ffffffffffffffda RBX: 00007fbbca625fa0 RCX: 00007fbbca39e0d9 [ 1710.707930][T14138] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1710.707943][T14138] RBP: 00007fbbcb1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.707957][T14138] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1710.707970][T14138] R13: 00007fbbca626038 R14: 00007fbbca625fa0 R15: 00007ffe8661baf8 [ 1710.708007][T14138] [ 1711.086790][T14141] netlink: 'syz.3.10542': attribute type 1 has an invalid length. [ 1711.289111][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10544'. [ 1711.408481][T14161] netlink: 'syz.4.10548': attribute type 7 has an invalid length. [ 1711.717383][T14570] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.732372][T14570] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.780284][T29755] IPVS: starting estimator thread 0... [ 1711.791097][T14172] x_tables: duplicate underflow at hook 1 [ 1711.799246][T14570] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.857111][T26288] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.907576][T14174] IPVS: using max 29 ests per chain, 69600 per kthread [ 1712.271133][T14192] FAULT_INJECTION: forcing a failure. [ 1712.271133][T14192] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.345696][T14192] CPU: 1 UID: 0 PID: 14192 Comm: syz.0.10558 Not tainted syzkaller #0 PREEMPT(full) [ 1712.345726][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.345740][T14192] Call Trace: [ 1712.345749][T14192] [ 1712.345758][T14192] dump_stack_lvl+0xe8/0x150 [ 1712.345800][T14192] should_fail_ex+0x40c/0x560 [ 1712.345830][T14192] should_failslab+0xa8/0x100 [ 1712.345863][T14192] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1712.345890][T14192] ? skb_clone+0x212/0x3a0 [ 1712.345911][T14192] ? skb_clone+0x212/0x3a0 [ 1712.345940][T14192] skb_clone+0x212/0x3a0 [ 1712.345972][T14192] ? netlink_broadcast_filtered+0x56a/0xea0 [ 1712.346007][T14192] netlink_broadcast_filtered+0x578/0xea0 [ 1712.346057][T14192] netlink_broadcast+0x37/0x50 [ 1712.346097][T14192] kobject_uevent_net_broadcast+0x378/0x560 [ 1712.346127][T14192] kobject_uevent_env+0x566/0x9e0 [ 1712.346158][T14192] device_add+0x544/0xb80 [ 1712.346194][T14192] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1712.346222][T14192] wakeup_source_register+0x17f/0x380 [ 1712.346259][T14192] ep_insert+0x107b/0x1ae0 [ 1712.346308][T14192] ? __pfx_ep_insert+0x10/0x10 [ 1712.346352][T14192] ? bpf_lsm_capable+0x9/0x20 [ 1712.346378][T14192] ? security_capable+0x7e/0x2c0 [ 1712.346432][T14192] do_epoll_ctl_file+0x8c2/0xee0 [ 1712.346474][T14192] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1712.346509][T14192] ? __fget_files+0x3a2/0x420 [ 1712.346537][T14192] ? __fget_files+0x2a/0x420 [ 1712.346573][T14192] __se_sys_epoll_ctl+0x162/0x230 [ 1712.346610][T14192] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1712.346653][T14192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.346677][T14192] do_syscall_64+0x174/0x580 [ 1712.346703][T14192] ? trace_irq_disable+0x3b/0x140 [ 1712.346730][T14192] ? clear_bhb_loop+0x70/0xc0 [ 1712.346758][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.346779][T14192] RIP: 0033:0x7f70a219e0d9 [ 1712.346800][T14192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.346818][T14192] RSP: 002b:00007f70a306f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1712.346863][T14192] RAX: ffffffffffffffda RBX: 00007f70a2425fa0 RCX: 00007f70a219e0d9 [ 1712.346897][T14192] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 1712.346910][T14192] RBP: 00007f70a306f090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.346923][T14192] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1712.346937][T14192] R13: 00007f70a2426038 R14: 00007f70a2425fa0 R15: 00007ffe592be0d8 [ 1712.346973][T14192] [ 1712.347754][T14195] netlink: 'syz.5.10560': attribute type 11 has an invalid length. [ 1712.650147][T14197] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10559'. [ 1712.874741][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10561'. [ 1712.952337][T14208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10563'. [ 1712.985050][T14213] netlink: 'syz.1.10564': attribute type 11 has an invalid length. [ 1713.223128][T14220] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1713.352121][T14225] netlink: 312 bytes leftover after parsing attributes in process `syz.3.10566'. [ 1713.382309][T14227] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10568'. [ 1713.436154][T14227] openvswitch: netlink: Message has 4 unknown bytes. [ 1713.711447][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10570'. [ 1714.424234][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10577'. [ 1714.480948][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10577'. [ 1714.493995][T14262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10579'. [ 1714.531302][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10580'. [ 1715.192970][T14296] FAULT_INJECTION: forcing a failure. [ 1715.192970][T14296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.243036][T14296] CPU: 0 UID: 0 PID: 14296 Comm: syz.0.10586 Not tainted syzkaller #0 PREEMPT(full) [ 1715.243066][T14296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1715.243080][T14296] Call Trace: [ 1715.243090][T14296] [ 1715.243099][T14296] dump_stack_lvl+0xe8/0x150 [ 1715.243142][T14296] should_fail_ex+0x40c/0x560 [ 1715.243171][T14296] _copy_to_user+0x31/0xb0 [ 1715.243206][T14296] simple_read_from_buffer+0xe1/0x170 [ 1715.243250][T14296] proc_fail_nth_read+0x1bb/0x230 [ 1715.243284][T14296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1715.243318][T14296] ? rw_verify_area+0x24a/0x4c0 [ 1715.243351][T14296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1715.243380][T14296] vfs_read+0x213/0xa80 [ 1715.243417][T14296] ? __pfx___mutex_lock+0x10/0x10 [ 1715.243445][T14296] ? __pfx_vfs_read+0x10/0x10 [ 1715.243476][T14296] ? __fget_files+0x2a/0x420 [ 1715.243507][T14296] ? __fget_files+0x3a2/0x420 [ 1715.243532][T14296] ? __fget_files+0x2a/0x420 [ 1715.243568][T14296] ksys_read+0x150/0x270 [ 1715.243601][T14296] ? __pfx_ksys_read+0x10/0x10 [ 1715.243640][T14296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.243663][T14296] do_syscall_64+0x174/0x580 [ 1715.243687][T14296] ? trace_irq_disable+0x3b/0x140 [ 1715.243713][T14296] ? clear_bhb_loop+0x70/0xc0 [ 1715.243741][T14296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.243761][T14296] RIP: 0033:0x7f70a215e90e [ 1715.243782][T14296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1715.243799][T14296] RSP: 002b:00007f70a306efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1715.243821][T14296] RAX: ffffffffffffffda RBX: 00007f70a306f6c0 RCX: 00007f70a215e90e [ 1715.243837][T14296] RDX: 000000000000000f RSI: 00007f70a306f0a0 RDI: 0000000000000007 [ 1715.243850][T14296] RBP: 00007f70a306f090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.243863][T14296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.243875][T14296] R13: 00007f70a2426038 R14: 00007f70a2425fa0 R15: 00007ffe592be0d8 [ 1715.243909][T14296] [ 1716.600513][T14328] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1716.607210][T14328] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1717.411891][T14341] smc: net device team0 applied user defined pnetid SYZ2 [ 1717.832311][T14372] openvswitch: netlink: Flow key attr not present in new flow. [ 1717.930890][T14367] tipc: Started in network mode [ 1717.960745][T14367] tipc: Node identity 0010040022000000002e0000402d002e, cluster identity 4711 [ 1717.996387][T14370] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1718.295254][T14386] __nla_validate_parse: 3 callbacks suppressed [ 1718.295276][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10613'. [ 1718.442364][T14384] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10612'. [ 1718.516578][T14389] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10612'. [ 1718.566106][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10612'. [ 1718.916184][T14406] veth1_to_bond: entered promiscuous mode [ 1718.933205][T14405] veth1_to_bond: entered allmulticast mode [ 1719.001365][T14405] veth1_to_bond: left allmulticast mode [ 1719.049341][T14405] veth1_to_bond: left promiscuous mode [ 1719.862675][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1721.063553][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10638'. [ 1721.342354][T14471] bond2: Invalid ad_actor_system MAC address. [ 1721.393157][T14471] bond2: option ad_actor_system: invalid value (1) [ 1721.469987][T14471] bond2 (unregistering): Released all slaves [ 1721.959319][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10644'. [ 1722.011215][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10644'. [ 1722.915558][T14526] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10652'. [ 1722.991950][T14526] xt_hashlimit: size too large, truncated to 1048576 [ 1723.460424][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10656'. [ 1723.509537][T14546] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1723.569030][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10656'. [ 1724.507410][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10661'. [ 1725.096958][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10664'. [ 1725.771678][T14600] netlink: 'syz.3.10669': attribute type 3 has an invalid length. [ 1725.962589][T14608] netlink: 'syz.5.10671': attribute type 4 has an invalid length. [ 1725.987034][T14608] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10671'. [ 1726.143113][T14617] netlink: 'syz.0.10673': attribute type 32 has an invalid length. [ 1726.186064][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10673'. [ 1726.218068][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.528172][T14617] bond8: Setting coupled_control to off (0) [ 1726.620225][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.170447][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10681'. [ 1727.257034][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.764585][T14653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1727.882679][T14658] bond2: (slave batadv1): Opening slave failed [ 1727.900251][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.049428][T14672] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10686'. [ 1728.361713][T14675] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.10687'. [ 1728.387220][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.470045][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10689'. [ 1728.525049][T14679] openvswitch: netlink: Message has 4 unknown bytes. [ 1728.573838][T14679] bridge0: port 3(syz_tun) entered blocking state [ 1728.612192][T14679] bridge0: port 3(syz_tun) entered disabled state [ 1728.765170][T14679] syz_tun: entered allmulticast mode [ 1728.803640][T14683] xt_hashlimit: size too large, truncated to 1048576 [ 1729.177215][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.238275][T14696] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10695'. [ 1729.358530][T14699] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1729.669248][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.708207][T14711] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10700'. [ 1730.217174][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.812396][T14741] macvlan0: entered promiscuous mode [ 1730.912564][T14747] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10712'. [ 1730.965113][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1731.060420][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1731.118452][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1731.256763][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.322843][T14758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10716'. [ 1731.392620][T14759] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1731.410428][T14758] netlink: 'syz.3.10716': attribute type 1 has an invalid length. [ 1731.436233][T14758] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10716'. [ 1731.466628][T14758] netlink: 'syz.3.10716': attribute type 1 has an invalid length. [ 1732.203323][T26278] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1732.240916][ T8823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1732.251808][T26278] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1732.310162][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.387164][T26278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.643347][T14790] netlink: 'syz.3.10725': attribute type 11 has an invalid length. [ 1732.666208][ T9374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1732.832459][T14791] macvlan0: entered promiscuous mode [ 1733.021698][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.088690][T14802] netlink: 'syz.3.10729': attribute type 30 has an invalid length. [ 1733.115002][T14805] netlink: 'syz.4.10731': attribute type 1 has an invalid length. [ 1733.178034][ T9374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1733.336101][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.398316][T14812] netlink: 'syz.5.10732': attribute type 11 has an invalid length. [ 1733.859668][T14820] netlink: 'syz.4.10734': attribute type 11 has an invalid length. [ 1733.909362][T14820] __nla_validate_parse: 11 callbacks suppressed [ 1733.909419][T14820] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.10734'. [ 1733.931035][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10735'. [ 1733.967843][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10734'. [ 1734.055178][T14825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1734.326922][T14838] ip_tables: iptables: counters copy to user failed while replacing table [ 1734.341819][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10739'. [ 1734.377234][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.665024][T14841] netlink: 216 bytes leftover after parsing attributes in process `syz.3.10740'. [ 1734.882337][T14846] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10743'. [ 1735.198655][T14853] nbd: nbd5 already in use [ 1735.416642][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.536523][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10750'. [ 1735.561012][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10751'. [ 1735.604089][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10751'. [ 1735.664669][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10750'. [ 1736.218352][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.321279][T14893] netlink: 'syz.1.10759': attribute type 8 has an invalid length. [ 1736.376256][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1736.725975][T14902] block nbd0: server does not support multiple connections per device. [ 1736.746741][T14902] block nbd0: shutting down sockets [ 1736.891580][T14905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1736.936263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.947322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.955925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.306581][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.511473][T26270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.139802][T14975] veth0: entered promiscuous mode [ 1739.161870][T14980] __nla_validate_parse: 4 callbacks suppressed [ 1739.161890][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1739.196907][T14975] batadv_slave_1: entered promiscuous mode [ 1739.216516][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1739.239737][T14971] batadv_slave_1: left promiscuous mode [ 1739.285703][T14971] veth0: left promiscuous mode [ 1739.417495][T29755] net_ratelimit: 4 callbacks suppressed [ 1739.417516][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.760049][T14998] bond12: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1739.788365][T14998] bond12 (unregistering): Released all slaves [ 1740.286171][T15010] bond3: entered allmulticast mode [ 1740.331646][T15010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1740.418765][T15020] SET target dimension over the limit! [ 1740.463601][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.910146][T15034] netlink: 'syz.4.10799': attribute type 2 has an invalid length. [ 1741.469363][T15058] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1741.497520][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.543478][T15058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1741.618968][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10806'. [ 1742.050191][T15070] netlink: 'syz.3.10810': attribute type 2 has an invalid length. [ 1742.065997][T15070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10810'. [ 1742.117495][T15076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1742.192181][T15070] : entered promiscuous mode [ 1742.538724][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.611917][T15093] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10817'. [ 1742.627361][T15097] rdma_op ffff88802951e9f0 conn xmit_rdma 0000000000000000 [ 1743.256823][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.283671][T26291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.802915][T15142] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1743.902035][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.269429][T15148] bridge_slave_1: entered promiscuous mode [ 1744.417918][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10829'. [ 1744.558782][T26268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.646396][T15163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10832'. [ 1744.936879][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.176013][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1745.220749][T15180] netlink: 'syz.3.10838': attribute type 2 has an invalid length. [ 1745.282187][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10840'. [ 1745.319290][T15183] netlink: 'syz.1.10839': attribute type 2 has an invalid length. [ 1745.761626][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10844'. [ 1745.976639][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.385026][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1747.066899][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.119750][T15243] netlink: 312 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1747.337089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.142305][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.211017][T15244] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1748.603284][T15265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1749.017892][T14570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.238828][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.706722][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.794271][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1749.820154][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1749.837290][T15298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1749.862199][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1750.064493][T15295] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 1750.146777][T15295] bond10 (unregistering): Released all slaves [ 1750.271087][T15308] bridge_slave_0: default FDB implementation only supports local addresses [ 1750.300241][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.309136][T29755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.711097][T15318] bond14: entered promiscuous mode [ 1750.750978][T15318] bond14: entered allmulticast mode [ 1750.781433][T15318] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1751.183196][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1751.221514][T15336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1751.250547][T15339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10882'. [ 1751.337766][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.353418][T26287] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1751.421769][T14570] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1751.459607][T14570] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1751.516846][T14570] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1751.748230][T15353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1751.804804][T17222] lo speed is unknown, defaulting to 1000 [ 1752.139041][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10887'. [ 1752.191994][T15366] netlink: 'syz.3.10887': attribute type 10 has an invalid length. [ 1752.253548][T15362] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1752.377636][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.414817][T15366] team0: Device veth0_macvtap failed to register rx_handler [ 1752.868738][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10894'. [ 1753.243921][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10899'. [ 1753.419200][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.980712][T15425] netlink: 'syz.0.10906': attribute type 32 has an invalid length. [ 1754.409964][T15429] veth0: entered promiscuous mode [ 1754.447803][T15429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.458979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.493925][T15434] lo: entered allmulticast mode [ 1754.529773][T15434] tunl0: entered allmulticast mode [ 1754.659958][T15434] gre0: entered allmulticast mode [ 1754.774813][T15434] gretap0: entered allmulticast mode [ 1754.785841][T14570] net_ratelimit: 1 callbacks suppressed [ 1754.785863][T14570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.097299][T15434] erspan0: entered allmulticast mode [ 1755.118687][T15447] __nla_validate_parse: 1 callbacks suppressed [ 1755.118707][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10915'. [ 1755.154668][T15447] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10915'. [ 1755.181952][T15434] ip_vti0: entered allmulticast mode [ 1755.240675][T15434] ip6_vti0: entered allmulticast mode [ 1755.328890][T15434] sit0: entered allmulticast mode [ 1755.418974][T26268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.430860][T15434] ip6tnl0: entered allmulticast mode [ 1755.549677][T15434] ip6gre0: entered allmulticast mode [ 1755.572889][ T8823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.618938][T15434] syz_tun: entered allmulticast mode [ 1755.655063][T15429] veth0: left promiscuous mode [ 1756.025604][T15464] netlink: 'syz.1.10917': attribute type 10 has an invalid length. [ 1756.074655][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10916'. [ 1756.186970][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1756.271466][T15464] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1756.618307][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.027498][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10922'. [ 1757.336356][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.576827][T15514] syzkaller0: entered promiscuous mode [ 1757.602078][T15514] syzkaller0: entered allmulticast mode [ 1757.614578][T15479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1757.751861][T15514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1758.110275][T15528] ip_tables: iptables: counters copy to user failed while replacing table [ 1758.186949][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10930'. [ 1758.226285][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10930'. [ 1758.319075][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032b35800: rx timeout, send abort [ 1758.426716][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10930'. [ 1758.483073][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.498162][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.568413][T15562] Unsupported ieee802154 address type: 0 [ 1759.578217][T15561] macsec1: entered allmulticast mode [ 1760.069181][T15575] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10943'. [ 1760.096937][T15576] netlink: 'syz.0.10942': attribute type 15 has an invalid length. [ 1760.203530][T15577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10943'. [ 1760.231349][T15576] netlink: 'syz.0.10942': attribute type 1 has an invalid length. [ 1760.538401][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.568283][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.654565][T15589] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10945'. [ 1761.185267][T26278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.577197][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.694247][T15617] netlink: 'syz.5.10953': attribute type 1 has an invalid length. [ 1761.708781][T15616] syzkaller0: entered promiscuous mode [ 1761.723016][T15616] syzkaller0: entered allmulticast mode [ 1761.816164][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1762.050512][T15626] bond1: (slave bridge1): making interface the new active one [ 1762.084495][T15626] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1762.401644][T15643] x_tables: duplicate underflow at hook 1 [ 1762.465320][T15644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10959'. [ 1762.486214][ T9374] IPVS: starting estimator thread 0... [ 1762.503614][T15644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10959'. [ 1762.596490][T15645] IPVS: using max 26 ests per chain, 62400 per kthread [ 1762.629012][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.694916][T15654] netlink: 'syz.5.10961': attribute type 1 has an invalid length. [ 1762.938230][T15650] bond4: option lp_interval: invalid value (0) [ 1762.995256][T15650] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1763.048359][T15650] bond4 (unregistering): Released all slaves [ 1763.173103][T15654] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1763.660288][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.759873][T15682] netlink: 'syz.4.10967': attribute type 1 has an invalid length. [ 1763.792504][T15682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1763.850076][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1763.922097][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1763.981374][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1764.041345][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1764.087708][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1764.378639][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.388515][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.461218][T15708] bond4: entered promiscuous mode [ 1764.467070][T15708] bond4: entered allmulticast mode [ 1764.472878][T15708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1764.506336][T15700] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1765.497621][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.894147][T15755] netlink: 'syz.1.10982': attribute type 2 has an invalid length. [ 1765.922976][T15755] __nla_validate_parse: 29 callbacks suppressed [ 1765.923000][T15755] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10982'. [ 1766.103831][T15763] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1766.118609][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1766.271311][T15769] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1766.312591][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.477453][T15759] bond12: entered promiscuous mode [ 1766.516325][T15759] bond12: entered allmulticast mode [ 1766.537018][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.550942][T15759] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1766.941811][T26270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.095451][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10991'. [ 1767.720408][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.041479][T15828] xt_addrtype: ipv6 does not support BROADCAST matching [ 1768.108368][T15817] tipc: Started in network mode [ 1768.126607][T15817] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1768.161625][T15817] tipc: Enabled bearer , priority 10 [ 1768.776914][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.008364][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11003'. [ 1769.276092][T17222] tipc: Node number set to 9480874 [ 1769.353036][ T30] audit: type=1804 audit(1786088450.658:20): pid=15854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11006" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=782 res=1 errno=0 [ 1769.385164][T15847] netlink: 'syz.0.11003': attribute type 2 has an invalid length. [ 1769.467274][ T30] audit: type=1800 audit(1786088450.688:21): pid=15854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11006" name="cgroup.controllers" dev="tmpfs" ino=782 res=0 errno=0 [ 1769.892049][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.164516][T15869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1770.409818][T15879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1770.491196][T15879] netlink: 'syz.5.11015': attribute type 1 has an invalid length. [ 1770.568061][T15884] syzkaller0: entered promiscuous mode [ 1770.596542][T15884] syzkaller0: entered allmulticast mode [ 1770.707092][T15890] ipt_ECN: cannot use operation on non-tcp rule [ 1770.747100][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11018'. [ 1770.937925][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.257786][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11021'. [ 1771.421797][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.709879][T15910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.061387][T26278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.091942][T26270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.458520][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.617717][T15937] netlink: ct family unspecified [ 1772.793809][T15942] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11033'. [ 1772.793969][T15947] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11033'. [ 1773.508047][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.934327][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.941818][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.019126][T15950] IPv6: sit1: Disabled Multicast RS [ 1774.671232][T15980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1774.706195][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.750549][T15984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11041'. [ 1774.821528][T15986] netlink: 'syz.0.11041': attribute type 2 has an invalid length. [ 1774.858492][T15986] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11041'. [ 1774.863558][T15985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1775.725328][T16001] netlink: 'syz.1.11047': attribute type 1 has an invalid length. [ 1775.736382][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.271332][T16016] xt_check_target_common: 1 callbacks suppressed [ 1776.271354][T16016] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1776.776296][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.874425][T16032] netlink: 'syz.5.11055': attribute type 1 has an invalid length. [ 1776.950573][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11056'. [ 1777.003923][T16032] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1777.176644][T26278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.620170][T16044] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1777.729813][T16050] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11062'. [ 1777.818205][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.831041][T26291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.470710][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.481376][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.777223][ T7018] Bluetooth: hci3: command 0x0405 tx timeout [ 1778.877381][T16080] netlink: 'syz.3.11069': attribute type 17 has an invalid length. [ 1778.897189][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11069'. [ 1778.933245][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11069'. [ 1779.438469][T16050] infiniband syz2: set down [ 1779.465197][T16050] infiniband syz2: added ipvlan1 [ 1779.498817][T16050] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1779.507948][T16050] infiniband syz2: Couldn't open port 1 [ 1779.566187][T16050] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1779.589204][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.656428][T16050] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1779.723690][T16050] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1779.951647][T16095] Cannot find set identified by id 0 to match [ 1780.082875][T16050] RDS/IB: syz2: added [ 1780.103567][T16050] smc: adding ib device syz2 with port count 1 [ 1780.130544][T16050] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 1780.176539][T16101] netlink: 'syz.3.11074': attribute type 11 has an invalid length. [ 1780.219227][T16102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11075'. [ 1780.618631][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.168738][T16108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11076'. [ 1781.212095][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11077'. [ 1781.504892][T16123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.513399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.970211][T16130] net_ratelimit: 1 callbacks suppressed [ 1781.970231][T16130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.984533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.594378][T16144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.698337][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.937026][T26268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.577451][T26291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.798903][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.928134][T16174] netlink: 'syz.1.11098': attribute type 4 has an invalid length. [ 1783.960764][T16174] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11098'. [ 1784.021331][T16177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11099'. [ 1784.043870][T16174] .`: renamed from bond0 (while UP) [ 1784.489889][T16185] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11102'. [ 1784.856498][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.210952][T16203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11107'. [ 1785.461484][T16206] [ 1785.466810][T16206] ============================= [ 1785.471874][T16206] WARNING: suspicious RCU usage [ 1785.476988][T16206] syzkaller #0 Not tainted [ 1785.481472][T16206] ----------------------------- [ 1785.486617][T16206] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1785.495190][T16206] [ 1785.495190][T16206] other info that might help us debug this: [ 1785.495190][T16206] [ 1785.506504][T16206] [ 1785.506504][T16206] rcu_scheduler_active = 2, debug_locks = 1 [ 1785.514825][T16206] 1 lock held by syz.3.11108/16206: [ 1785.521379][T16206] #0: ffffffff8eb59e58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: __bpf_prog_test_run_raw_tp+0x1ba/0xa20 [ 1785.533381][T16206] [ 1785.533381][T16206] stack backtrace: [ 1785.540660][T16206] CPU: 0 UID: 0 PID: 16206 Comm: syz.3.11108 Not tainted syzkaller #0 PREEMPT(full) [ 1785.540691][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.540707][T16206] Call Trace: [ 1785.540716][T16206] [ 1785.540726][T16206] dump_stack_lvl+0xe8/0x150 [ 1785.540764][T16206] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1785.540803][T16206] get_callchain_entry+0x2b6/0x3c0 [ 1785.540841][T16206] get_perf_callchain+0xd5/0x880 [ 1785.540878][T16206] ? trace_hrtimer_start+0x82/0x200 [ 1785.540909][T16206] ? __pfx_get_perf_callchain+0x10/0x10 [ 1785.540950][T16206] ? __lock_acquire+0x683/0x2cf0 [ 1785.540984][T16206] __bpf_get_stack+0x3e9/0xa70 [ 1785.541026][T16206] ? __pfx___bpf_get_stack+0x10/0x10 [ 1785.541054][T16206] ? __schedule+0x17ef/0x56c0 [ 1785.541085][T16206] ? __bpf_prog_test_run_raw_tp+0x1ba/0xa20 [ 1785.541112][T16206] bpf_get_stack+0x33/0x50 [ 1785.541140][T16206] ? bpf_prog_5fad78f7e5ba870f+0x43/0x4b [ 1785.541164][T16206] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1785.541195][T16206] bpf_prog_5fad78f7e5ba870f+0x43/0x4b [ 1785.541217][T16206] __bpf_prog_test_run_raw_tp+0x329/0xa20 [ 1785.541248][T16206] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 1785.541288][T16206] bpf_prog_test_run_raw_tp+0x562/0x7e0 [ 1785.541323][T16206] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1785.541349][T16206] ? __fget_files+0x2a/0x420 [ 1785.541384][T16206] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1785.541409][T16206] bpf_prog_test_run+0x2c5/0x340 [ 1785.541444][T16206] __sys_bpf+0xa22/0xd90 [ 1785.541482][T16206] ? __pfx___sys_bpf+0x10/0x10 [ 1785.541526][T16206] ? do_futex+0x458/0x4e0 [ 1785.541601][T16206] ? rcu_is_watching+0x15/0xb0 [ 1785.541671][T16206] __x64_sys_bpf+0xba/0xd0 [ 1785.541698][T16206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.541723][T16206] do_syscall_64+0x174/0x580 [ 1785.541750][T16206] ? trace_irq_disable+0x3b/0x140 [ 1785.541779][T16206] ? clear_bhb_loop+0x70/0xc0 [ 1785.541820][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.541845][T16206] RIP: 0033:0x7f17a4d9e0d9 [ 1785.541867][T16206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.541887][T16206] RSP: 002b:00007f17a5ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.541911][T16206] RAX: ffffffffffffffda RBX: 00007f17a5025fa0 RCX: 00007f17a4d9e0d9 [ 1785.541928][T16206] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 1785.541943][T16206] RBP: 00007f17a4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1785.541957][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.541971][T16206] R13: 00007f17a5026038 R14: 00007f17a5025fa0 R15: 00007ffdea43f408 [ 1785.542008][T16206] [ 1785.544269][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.426216][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.468606][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.711587][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.339748][T26291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.502556][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.541463][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.581259][T26597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.628441][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.177106][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.822186][T26270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.216268][T17221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.468387][T26278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.256834][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog