last executing test programs: 4.760135108s ago: executing program 0 (id=11485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'veth1_to_bridge\x00', {0x5}, 0x687a}) socket(0x15, 0xa, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000440)={0x0, 0x62, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="44002abd70000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40480c1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.484763724s ago: executing program 0 (id=11488): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r2, 0x0, &(0x7f0000000400)=""/55}, 0x20) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="ffff210000000180c2000000810000020800450082d185c4c02f996c492412000000e0797b1049bdb1d85a7b6456f243c3200000014e2117c100189078e204000100000000"], 0x36) 1.975793625s ago: executing program 0 (id=11494): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff00000003", 0x41}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x7, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x28, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x42000004, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 1.835270407s ago: executing program 2 (id=11496): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) syz_emit_ethernet(0x122, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "cd6167", 0xec, 0xff, 0x0, @mcast1, @local, {[@routing={0x67, 0x6, 0x2, 0x18, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}]}], "9bbad57cdb35b135422518e0e061234d1472918a5d21b29affc6842cb88c1d3e393f75b6bde58bd84d9748fe9de3f4ba803a23fe594e15d303af0dd058c857963ebefd6a6d68afec23b87e024ac44f86c3848decdb76cd8354fe82359e9d58706927eed654531440c83b9326d6bbc7d722623681a91352ee7232e1177bf17b439cb9b98e2bea003d091d1100425355b9f12f117e43e2bae22572de5314442ed1bd755ee784918a8e981e8cab4af2c390d6229f5e"}}}}}, 0x0) 1.801215591s ago: executing program 4 (id=11498): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x4) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) read(r0, &(0x7f0000000080)=""/69, 0x45) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x800) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x4, 0xf8, 0x7ff, 0x9, 0x8, 0x4, 0x10, {0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x4, 0x2, 0x0, 0xffffffff, 0x2}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r4, 0xd}, &(0x7f0000000280)=0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{r2, &(0x7f00000002c0)='memory.high\x00', 0x200000, &(0x7f0000000300)={@_ha_fsid={[0x9, 0x77c]}, {0x7, 0x6, 0x6, 0x5}}, 0x2b95, &(0x7f0000000340), &(0x7f0000000380)=0xf3ac}, {[0x2, 0x5010, 0x3, 0x4]}, 0x4, 0xeb, &(0x7f00000003c0)=""/235}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x0, 0x4, [0x8, 0x1, 0x0, 0x5]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000005c0)={r6, 0xdc, "d35085f7bd3fc5d3718396d7e5f83a610595fba85a4437bbee397c8af53c60f4ba8c0026b31840af6bd0b41cc7b50fa1dc91a5e4804e41fbbd06befbbad1a690283f2e821622febde7d2d64612e6a36ba630833e1d55162369dc9a4b3a33e930deb22217fa1f42b49b7e6d39d8f3379b3bf652970462912562d2c9d8adee1ca434bd9c72baa3fef67d193ca442438b00fa75e9ef1320ffe0a5593c6ce98c8e9215b8672d2a709f8d7a587e63ee46424f201bf5347bcc25ba3df2524a1bbd0f4be6925bab5c02253f770ce59faad7a8442a7b37edaac05f010b27e8bf"}, &(0x7f00000006c0)=0xe4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000700)) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000740)=0x1ff, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000780), 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000007c0)={r3, 0x1000, "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"}, &(0x7f0000001800)=0x1008) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x480d0}, 0x4004880) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001b40)={0x3, &(0x7f0000001ac0)=[{0x2, 0x2f, &(0x7f0000001940)="40b86394046530577eb688a4c789a4cf724fa7eefbf16e492e6a488a298a1892be302e09b89b8d380df639347b6426", 0x1, 0x1}, {0x3, 0xa1, &(0x7f0000001980)="caa2af071ef84399eacc12423ccde98f19284a4f0fc0ae21cec0ab96323d3780ac12678785ac4a92c12da43fc64efcd1925e93b993af4186fd9479f0a8bc708d21122580ed8c8d7a17ca9331279bb1c0689c0277e8f5847d15d477ff0bf9b909727e99c6b51f942eb7be8885ac2f5e422005aedd73b75a62f333542fe38e1035c8eed90c90df2d404d1e194b32b39c7805f9146300eccbddbc375bac2439f08ddf", 0x1, 0x1}, {0x9a5b, 0x65, &(0x7f0000001a40)="8a78e03d035e612cabeb9134910315b97e3124018bc0d6a6225e28a4876e6b168d460b7275c0a6e042ee6f0c3b42dc8bb5e79b14d2f63fe906768dfe8dd00f5d1074b0e9c71c80d0794a6be0de7d62f6aaad956c26aab7bd21f4705c670edc8d5b57798e9b", 0x0, 0x1}]}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000001b80)={0x3, 0x3}) recvmsg$can_j1939(r2, &(0x7f0000003080)={&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/65, 0x41}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/56, 0x38}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/239, 0xef}, {&(0x7f0000002f00)=""/43, 0x2b}], 0x7, &(0x7f0000002fc0)=""/178, 0xb2}, 0x80000060) preadv(r2, &(0x7f0000005480)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/117, 0x75}, {&(0x7f0000004140)=""/47, 0x2f}, {&(0x7f0000004180)=""/161, 0xa1}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/12, 0xc}, {&(0x7f0000005280)=""/46, 0x2e}, {&(0x7f00000052c0)=""/195, 0xc3}, {&(0x7f00000053c0)=""/181, 0xb5}], 0x9, 0x10, 0x401) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x4010, r7, 0xf170a000) sendmsg$nl_route_sched(r5, &(0x7f00000057c0)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005780)={&(0x7f0000005580)=@gettaction={0x1d8, 0x32, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x53bf}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3b3e0f3b}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffc2}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r9 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r9, &(0x7f0000005800)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000005840)=0x9) connect$pptp(r2, &(0x7f0000005880)={0x18, 0x2, {0x2, @loopback}}, 0x1e) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000005940)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0xf0, 0xf0, 0xffffffff, 0x0, 0x0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f00000058c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv6=@mcast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @gre_key=0x40, @port=0x4e22}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0x0, 0x0, 0xff000000], 'ip_vti0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x2e, 0x4, 0x7, 0x10}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, @ipv4=@remote, @icmp_id=0x67, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x24, 0x1, 0x89, 0xc0, 0x5, 0x102, 0x200}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@remote, @ipv6=@remote, @icmp_id=0x66, @gre_key=0x2}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"b7a2"}}, @common=@unspec=@mark={{0x30}, {0x7f, 0xf, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x51c, 0x9, 0xc7, 0x7, 0xa, 0x8, 0x7, 0xfffff7c3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000062c0)={{r8}, {@val, @actul_num={@void, 0x6, 0x47}}}) 1.695765337s ago: executing program 1 (id=11499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18c700000500000000000000000000007910000000fc000095000000000000002ce511fa29650365b256db58a40267b7cdb4e0cc5165d071eeb14d0a720c09a92031d467c9d255700fdec86f2c1b1d0b4dab3bd4a79bde43"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)='%pB \x00'}, 0x20) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000240)="371598b4c3173f2b7ec75778fd0e114e1fe2cc1034cc09d43dcc6bcf258b24a9cbb9e4077eb05612f96d6088502998802c85c250c720d3d8975b0dc91e8985867e6bd4af2ad7656e6e7a731254b803532477639b8ecc82783624a12977270801de91426f64a9d8f33eced4b833484453512e08907ea0e84b1d29b45da8607abc606209f07603e5b920ec5d3b1945c5ea613c2915faef6ffbec4dc48a73412553d03ab9dd21696f803b49bf36c233279bff0034967408629e65a9b485f9d6933e0fd53f07a96c716a67296350cbf3c02f04830c62753bb33e92ea1e3170913b16c4ef1e1602e9d5ff7db9070b63951494eb7a4f44a02a6fd66d", &(0x7f0000000340)=""/229, &(0x7f0000000440)="b02164bbbb68d10c27e676e54fd5bb26cb60606c37466429853d7cad774f0f1ab5d977dfd186ac74ee37cc68c7c880fb99b451a4bd2dc87b3089e1bff8d21b8fe1768ab961badda1cc432bc1a094cc005e6ae5ca1f529ca913292c3a0f4ebd528e3dd0e08dec1ce2167d300565df77a1f17b7ee7378052d7d1cac8100e1e332d9b8a9a4df88326a0a86d4b48a7c1783eecf98caba4c777a280b553afacae02b6e14167d8eb4a3ca9a7b03b594ae6af6f792f9da4ff473e9698f51a2128ca8b7641248a9e6a65601daaf23d36e2b337a377b34e40a557220d0c126574b6d7f6a68c6c9977", &(0x7f0000000080)="e31747ce029b3e3122da99ef1f52a75ae55d52bb59823a7bda8f57086d8a3db3e4b50597ce41706076eefd88e45e50b6fe596968e26bbc7c19b499f2c659d28ae54f10e058b3b187f824a3a1e99bd4611ca279b7667bb437e10603a2ee94301f318d7c4ba8fe6000679a6194461699465b0c0940faa17cfec63773039a8e3791c828da81a4381e5f0b71700ae01559f5f01fe3e9ff2bf103216daa608566e7d764d03e2a5060", 0x7, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 1.66099535s ago: executing program 2 (id=11500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x2e, 0x14e, 0x0, 0x0, @str='\x01\x94{\xab\xe4\xb3\xe2x\x9d\xc1c1\x8c\xdb\x84d\xa4\xb2\xf6\xbe\x13\xf7J^\xd1K\x88*%\xa2\xad\x0eUQ#\'\x00-\xc8\x80\x0f\xc6'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/115, 0x73}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/181, 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x850, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x13}, @WGDEVICE_A_PEERS={0x834, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f44b9085acd498119ff7812ab8231f899f2ae56f5b1ce6ac64cd165e24fb00bd"}]}, {0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x91}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7657}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d1423142a7dde55f72c324f3db64ec9a136121f3185a88ea65fa488465bd13d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @empty, 0x80000001}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "89ff02bbc0b7979644156f5aa3d4e894bd28f5d2a3e693cd3ba035c0a91667f8"}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7844c6f89887ebfb5445cd96177dde84f1b917ebc24a926366edd73fd79c674"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x50014}, 0x4890) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008000100ac14"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 1.577649536s ago: executing program 4 (id=11502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 1.403586871s ago: executing program 1 (id=11503): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="616ffdffffffffdbdf2526002832aa4c29912e60b3df1cffd78f0d31d5f28bfa064b1535fe1485554229b2a5a207850a0fb93ed9f748587225f23ad5a26d5be91cf8e8aa76baff6cb2678de80e48756c997e50e2f8d1fae73909cf24875eab"], 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x268, 0x268, 0xffffffff, 0x0, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @gre_key=0x6, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000006c0)=0xfffffffa, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000e008500000072000000850000000700000095d98766d9b175c9f089e6100fe49b54308018cd3d5ee0c279d94f73afe08ed598ff0e31294fb647f1a546c7bdde206d75e5b7dec52abe12915318864145ae4ec66f3474c83e7a9cd61d9f93851ba3ddee9f0ac992e3d7f78a8e44b6e2ac6033a8568fb003d858732a6ae1270bde0446e132c474a81842"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311430000000000851000000a000000850000005600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.401640518s ago: executing program 2 (id=11504): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a58000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000005008000f"], 0x80}}, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x40801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) unshare(0x20000400) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x4e073, 0xffffffffffffffff, 0x0) 1.381022184s ago: executing program 0 (id=11505): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x3f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x78) 1.380671934s ago: executing program 3 (id=11506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) 1.266350247s ago: executing program 4 (id=11507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000140)=""/50, 0x32}], 0x2}, 0x2}], 0x1, 0x40000140, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="f77d2b5dd5f7ffff0000cf3d2cf218d644566a14103b1c7dd35fd29519d022f10f2dc7f4f8c250c73e3c0771cee2a93cff0f000000000000a4a27b706153756913b7dd48248b5bfb10460036248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbecbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211df5cdbbc6b0f9c940000140000c2a780a3157a63daecc8aff816a67d28890fbd0925b83c94bc", 0xb2}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cff", 0x50}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x3, 0x900) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0x7ff}) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="26c4140cf3ae41c69869f75f00a2dbe2acf113bf4606cdfc8d18366ed5703dc4e984994029216dceddaeb0dbe85e6359a171dad84126583632d10db17766b0c3b7eab8705ae1f516859a5f9949573d461d4a3efe4360647e894c3c157b2bf9d6a462862083", 0x65, 0x10008095, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00'}) 1.147622726s ago: executing program 3 (id=11508): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x18, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x8, {0x1, 0x0, 0xe, 0xc2}}]}]}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}}, 0x24) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff2, &(0x7f0000001cc0)=""/4082, 0x40f00, 0x61}, 0x94) 1.095488438s ago: executing program 4 (id=11509): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e", 0x14}], 0x1}, 0x400c894) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x0, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x3, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x4}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0xfff, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) 954.066192ms ago: executing program 3 (id=11510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0x20000000, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x6, 0xc10, 0x39}, 0x2c) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060500000000000600000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800078005000300ff0000000c0001800800014000001c0205000500020000000500010006000000"], 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000000c0)=0x20, 0x4) 857.861734ms ago: executing program 4 (id=11511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0xfffffffffffffffc, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 852.925186ms ago: executing program 1 (id=11512): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) 763.593439ms ago: executing program 2 (id=11513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x2f, @empty, 0xce20, 0x0, 'lc\x00', 0x2a, 0x401, 0x65}, 0x2c) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cbe7e31966e2c0a9d9afb805e4d2d8", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) (async) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000640)=[{&(0x7f0000000600)='\x00\x00', 0x2}], 0x1, 0x1) close(r4) (async) socket(0x2b, 0x80801, 0x1) (async) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611879000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x2a000000) (async) unshare(0x22020400) (async) close(0x3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) r6 = socket$inet(0xa, 0xa, 0x40007) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) sendmmsg$alg(r7, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}], 0x1, 0x60000804) 674.094728ms ago: executing program 1 (id=11514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x18, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x4, 0x8, 0x4, 0x50, 0xffffffffffffffff}, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x4, 0x1, 0x5, 0x8, 0xfffffffffffffff0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x8001, 0x33, &(0x7f0000000140)=""/51, 0x41000, 0x22, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x5, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000280)=[{0x3, 0x3, 0xc, 0x7}, {0x3, 0x4, 0x10}, {0x0, 0x5, 0xa, 0x9}], 0x10, 0x4}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 647.652593ms ago: executing program 4 (id=11515): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff00000003", 0x41}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x7, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x28, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x42000004, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 575.509474ms ago: executing program 2 (id=11516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x2e, 0x14e, 0x0, 0x0, @str='\x01\x94{\xab\xe4\xb3\xe2x\x9d\xc1c1\x8c\xdb\x84d\xa4\xb2\xf6\xbe\x13\xf7J^\xd1K\x88*%\xa2\xad\x0eUQ#\'\x00-\xc8\x80\x0f\xc6'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/115, 0x73}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/181, 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x850, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x13}, @WGDEVICE_A_PEERS={0x834, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f44b9085acd498119ff7812ab8231f899f2ae56f5b1ce6ac64cd165e24fb00bd"}]}, {0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x91}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7657}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d1423142a7dde55f72c324f3db64ec9a136121f3185a88ea65fa488465bd13d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @empty, 0x80000001}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "89ff02bbc0b7979644156f5aa3d4e894bd28f5d2a3e693cd3ba035c0a91667f8"}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7844c6f89887ebfb5445cd96177dde84f1b917ebc24a926366edd73fd79c674"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x50014}, 0x4890) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008000100ac14"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 575.130965ms ago: executing program 3 (id=11517): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xc41, 0xdf, 0x0, 0x0) pipe(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d05cd4b92ea54c7beef", 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000002200000000000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000004600000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 552.977814ms ago: executing program 1 (id=11518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f0000000200)={[0xff]}, 0x8) unshare(0x400) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000088f7ffe1122c6bffaaaaaaaaaaaa08004500002000660000052f9078ac1414bbe000000180008100000c90784109655a"], 0x32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff01c}, {0x6}]}, 0x10) 325.971637ms ago: executing program 2 (id=11519): syz_emit_ethernet(0x8a, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x48, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}, {0x0, 0x8, "0683fa3f39cd"}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 271.566418ms ago: executing program 0 (id=11520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000730000000000000800000075da000a0000000000000000000000000000000000cb7a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000001000000000044000500ac1e0001000000000000000000000000000000003c000000000000007f000001000000000000000000000000020000000400"/180], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f000001000000210b00000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sock_ops}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "001400000000009200"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x194, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x80c4}, 0x8000) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0xe199d66ec6014fc4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/48, 0x30}], 0x2}, 0xd55}], 0x1, 0x60, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x3, 0x7, "d9018e", 0x6, 0xe}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="768540abe796e171cde7ca3ba323a7cf3a93186d9f86daaccd9b1b7b971b63eeca407b854cfafa34944be1696277a9f01a0956cd54946da6f67426d95f24c06fc4692a28dc28997e8774dfc04bbf8e6da7f8", @ANYRES16=r1, @ANYBLOB="0100000000000800000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 184.272934ms ago: executing program 3 (id=11521): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x1411, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 104.387613ms ago: executing program 0 (id=11522): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000000)='bond\x00', 0x2601, &(0x7f0000000040)={@align=0x7, {0x7, 0x9, 0x9, 0x2}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0xffff0de8}) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) unshare(0x28000600) (async) close(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000000)='bond\x00', 0x2601, &(0x7f0000000040)={@align=0x7, {0x7, 0x9, 0x9, 0x2}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0xffff0de8}) (async) 95.03596ms ago: executing program 1 (id=11523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r0, &(0x7f0000000240)=""/235, 0xeb) unshare(0x88050e00) 0s ago: executing program 3 (id=11524): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0xf, 0x1}, {0x4, 0x3}, {0x7, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000080)='bpq0\x00', 0x80000, &(0x7f00000000c0)={@align=0x8000000000000000, {0x9, 0x7, 0xfbf9, 0x5}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x7fffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x20000054) kernel console output (not intermixed with test programs): : attribute type 7 has an invalid length. [ 1234.274641][ T9122] netlink: 'syz.3.9483': attribute type 5 has an invalid length. [ 1234.333646][ T9124] lo speed is unknown, defaulting to 1000 [ 1234.515699][ T9130] netlink: 'syz.2.9486': attribute type 1 has an invalid length. [ 1234.611860][ T9140] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1234.630874][ T9140] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1235.073575][ T9158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.082761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.151403][ T9170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.159777][ T9163] lo speed is unknown, defaulting to 1000 [ 1235.160578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.561317][ T9186] netlink: 'syz.0.9500': attribute type 1 has an invalid length. [ 1236.603194][ T9218] netlink: 'syz.2.9508': attribute type 1 has an invalid length. [ 1236.860159][ T9231] netlink: 'syz.4.9512': attribute type 13 has an invalid length. [ 1236.891088][ T9231] netlink: 'syz.4.9512': attribute type 12 has an invalid length. [ 1236.938042][ T9228] netlink: 'syz.1.9509': attribute type 1 has an invalid length. [ 1236.954141][ T9236] team0: entered promiscuous mode [ 1236.968674][ T9236] team0: entered allmulticast mode [ 1237.002383][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.282702][ T9239] team1: entered promiscuous mode [ 1237.287843][ T9239] team1: entered allmulticast mode [ 1237.330658][ T9239] 8021q: adding VLAN 0 to HW filter on device team1 [ 1238.610647][ T9307] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1238.827443][ T9321] xt_TCPMSS: Only works on TCP SYN packets [ 1238.942722][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.149241][ T9336] netlink: 'syz.0.9538': attribute type 2 has an invalid length. [ 1239.180731][ T9336] netlink: 'syz.0.9538': attribute type 2 has an invalid length. [ 1239.216423][ T9340] __nla_validate_parse: 27 callbacks suppressed [ 1239.216446][ T9340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9540'. [ 1239.231461][ T9336] syzkaller0: entered promiscuous mode [ 1239.237351][ T9336] syzkaller0: entered allmulticast mode [ 1239.521698][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1239.555679][ T9358] xt_TCPMSS: Only works on TCP SYN packets [ 1239.565649][ T9354] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1239.581257][ T9354] netlink: 'syz.0.9545': attribute type 4 has an invalid length. [ 1239.589153][ T9354] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1239.829991][ T9366] lo speed is unknown, defaulting to 1000 [ 1239.956464][ T9380] netlink: 'syz.3.9554': attribute type 3 has an invalid length. [ 1240.005547][ T9383] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1240.186270][ T9394] netlink: 'syz.0.9558': attribute type 1 has an invalid length. [ 1240.233317][ T9401] xt_TCPMSS: Only works on TCP SYN packets [ 1240.264043][ T9394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1240.274594][ T9390] syzkaller1: entered promiscuous mode [ 1240.280726][ T9390] syzkaller1: entered allmulticast mode [ 1240.302359][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1240.314021][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1240.328288][ T9402] bond1: (slave batadv1): making interface the new active one [ 1240.361592][ T9402] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1240.373627][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1240.471466][ T9394] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1240.485279][ T9394] bond1 (unregistering): Released all slaves [ 1240.813983][ T9413] nbd: must specify an index to disconnect [ 1240.846242][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9568'. [ 1240.971349][ T9430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1240.993439][ T9437] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1241.048044][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.167923][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9574'. [ 1241.196941][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'. [ 1241.210091][ T9449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.224541][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9574'. [ 1241.276189][ T9452] netlink: 'syz.2.9575': attribute type 1 has an invalid length. [ 1241.284221][ T9452] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9575'. [ 1241.294486][ T9452] netlink: 'syz.2.9575': attribute type 1 has an invalid length. [ 1241.305742][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.614718][ T9467] lo speed is unknown, defaulting to 1000 [ 1242.216856][ T9488] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1242.246739][ T9481] batadv_slave_1: entered promiscuous mode [ 1242.288700][ T9475] batadv_slave_1: left promiscuous mode [ 1242.295966][ T9470] lo speed is unknown, defaulting to 1000 [ 1242.502020][ T9496] veth1_macvtap: left promiscuous mode [ 1242.508008][ T9496] macsec0: entered promiscuous mode [ 1242.517975][ T9496] veth1_macvtap: entered promiscuous mode [ 1242.544089][ T9496] macsec0: left promiscuous mode [ 1242.555918][ T9497] bridge_slave_1: left allmulticast mode [ 1242.561770][ T9497] bridge_slave_1: left promiscuous mode [ 1242.568957][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.576752][ T9494] lo speed is unknown, defaulting to 1000 [ 1242.701656][ T9497] bridge_slave_0: left allmulticast mode [ 1242.707717][ T9497] bridge_slave_0: left promiscuous mode [ 1242.720360][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.802870][ T9496] 8021q: VLANs not supported on ip6tnl0 [ 1242.906063][ T9516] xt_TCPMSS: Only works on TCP SYN packets [ 1243.078515][ T9524] bridge0: entered promiscuous mode [ 1243.084138][ T9524] macvlan3: entered allmulticast mode [ 1243.092017][ T9524] bridge0: entered allmulticast mode [ 1243.099149][ T9524] bridge0: port 3(macvlan3) entered blocking state [ 1243.127922][ T9524] bridge0: port 3(macvlan3) entered disabled state [ 1243.153434][ T9524] bridge0: left allmulticast mode [ 1243.158626][ T9524] bridge0: left promiscuous mode [ 1243.417086][ T9539] netlink: zone id is out of range [ 1243.423704][ T9539] netlink: zone id is out of range [ 1243.429094][ T9539] netlink: zone id is out of range [ 1243.435402][ T9539] netlink: zone id is out of range [ 1243.440912][ T9539] netlink: zone id is out of range [ 1243.446250][ T9539] netlink: zone id is out of range [ 1243.452357][ T9539] netlink: zone id is out of range [ 1243.457746][ T9539] netlink: zone id is out of range [ 1244.150964][ T9556] net_ratelimit: 9 callbacks suppressed [ 1244.150985][ T9556] netlink: zone id is out of range [ 1244.181318][ T9556] netlink: zone id is out of range [ 1244.186709][ T9556] netlink: zone id is out of range [ 1244.203226][ T9556] netlink: zone id is out of range [ 1244.219795][ T9556] netlink: zone id is out of range [ 1244.225503][ T9556] netlink: zone id is out of range [ 1244.231520][ T9556] netlink: zone id is out of range [ 1244.247314][ T9556] netlink: zone id is out of range [ 1244.263522][ T9556] netlink: zone id is out of range [ 1244.301164][ T9556] netlink: zone id is out of range [ 1244.725117][ T9564] netlink: 'syz.3.9603': attribute type 1 has an invalid length. [ 1244.733245][ T9564] __nla_validate_parse: 6 callbacks suppressed [ 1244.733264][ T9564] netlink: 936 bytes leftover after parsing attributes in process `syz.3.9603'. [ 1246.207651][ T9566] tipc: Started in network mode [ 1246.230803][ T9566] tipc: Node identity 86d6b95d555f, cluster identity 4711 [ 1246.246131][ T9566] tipc: Enabled bearer , priority 0 [ 1246.282297][ T9570] xt_TCPMSS: Only works on TCP SYN packets [ 1246.337716][ T9565] tipc: Disabling bearer [ 1246.909146][ T9598] macsec1: entered promiscuous mode [ 1246.914575][ T9598] erspan0: entered promiscuous mode [ 1246.922486][ T9598] erspan0: left promiscuous mode [ 1246.954702][ T9588] lo speed is unknown, defaulting to 1000 [ 1247.297768][ T9611] ip6erspan0: entered allmulticast mode [ 1247.519796][ T9627] netlink: 'syz.1.9620': attribute type 1 has an invalid length. [ 1247.542271][ T9627] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1247.645523][ T9634] team0: entered promiscuous mode [ 1247.663519][ T9634] team_slave_0: entered promiscuous mode [ 1247.683134][ T9634] team_slave_1: entered promiscuous mode [ 1247.704907][ T9634] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1247.728505][ T9634] team0: Device macvlan3 is already an upper device of the team interface [ 1247.747115][ T9634] team0: left promiscuous mode [ 1247.764066][ T9634] team_slave_0: left promiscuous mode [ 1247.781066][ T9634] team_slave_1: left promiscuous mode [ 1247.807690][ T9631] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1247.873444][ T9641] bond1: option primary_reselect: invalid value (4) [ 1247.974960][ T9641] bond1 (unregistering): Released all slaves [ 1248.020845][ T9650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9625'. [ 1248.095270][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1248.104701][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1248.128124][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1248.138218][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1248.275068][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9629'. [ 1249.160973][ T9692] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1249.389684][ T9700] tap0: tun_chr_ioctl cmd 1074025681 [ 1249.403007][ T9700] gre1: entered promiscuous mode [ 1249.508116][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9643'. [ 1249.530164][ T9707] netlink: 'syz.4.9643': attribute type 3 has an invalid length. [ 1249.552110][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9643'. [ 1249.564421][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.593676][ T9703] bridge_slave_0 (unregistering): left allmulticast mode [ 1249.602049][ T9703] bridge_slave_0 (unregistering): left promiscuous mode [ 1249.609196][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.747383][ T9716] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1249.843775][ T9720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.917807][ T9718] lo speed is unknown, defaulting to 1000 [ 1249.942463][ T9725] ip6tnl1: entered promiscuous mode [ 1251.096940][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9649'. [ 1251.106664][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9649'. [ 1251.739616][ T9780] netlink: 'syz.1.9658': attribute type 58 has an invalid length. [ 1251.995726][ T9780] sctp: [Deprecated]: syz.1.9658 (pid 9780) Use of int in max_burst socket option. [ 1251.995726][ T9780] Use struct sctp_assoc_value instead [ 1252.404687][ T9792] netlink: 'syz.1.9659': attribute type 1 has an invalid length. [ 1252.481166][ T9792] bond3: (slave geneve2): making interface the new active one [ 1252.489334][ T9792] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1252.530252][T28916] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1252.550493][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1252.563030][T28916] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1252.581781][ T9792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.592021][T28916] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1252.610374][T28916] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1252.808781][ T797] lo speed is unknown, defaulting to 1000 [ 1252.818860][ T7058] lo speed is unknown, defaulting to 1000 [ 1253.426031][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9660'. [ 1253.629540][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9660'. [ 1253.848575][ T9806] macvtap0: entered promiscuous mode [ 1253.855399][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1253.941747][ T9806] veth0_macvtap: left promiscuous mode [ 1254.152541][ T9806] macvtap0 (unregistering): left promiscuous mode [ 1254.289693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1254.308332][ T9823] syzkaller0: entered promiscuous mode [ 1254.330314][ T9823] syzkaller0: entered allmulticast mode [ 1254.371008][ T9827] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9667'. [ 1254.875897][ T9836] netlink: 'syz.1.9669': attribute type 4 has an invalid length. [ 1254.899836][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1255.280777][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1255.305009][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1255.597096][ T9853] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9670'. [ 1258.273329][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.281380][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.342100][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9677'. [ 1258.427620][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.450262][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.613577][T28916] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.640191][T28916] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.736317][T28916] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.746688][T28916] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.756526][T28916] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.767724][T28916] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.825249][T28916] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.836481][T28916] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.855392][ T9878] syzkaller0: entered promiscuous mode [ 1258.865910][ T9878] syzkaller0: entered allmulticast mode [ 1258.903923][ T9886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9681'. [ 1258.937460][ T9886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9681'. [ 1259.107998][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9687'. [ 1259.509918][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9694'. [ 1259.628686][ T9937] netlink: 'syz.0.9697': attribute type 1 has an invalid length. [ 1259.676439][ T9937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1259.698270][ T9933] bond1: (slave geneve2): making interface the new active one [ 1259.707628][ T9933] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1259.742619][T28927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.752256][T28927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.793785][ T9385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.806991][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9699'. [ 1259.814735][ T9385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.015507][ T9954] __nla_validate_parse: 1 callbacks suppressed [ 1260.015540][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1260.045163][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1260.161892][ T9962] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1260.172169][ T9962] netlink: 'syz.4.9706': attribute type 4 has an invalid length. [ 1260.233163][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9708'. [ 1260.328969][ T9968] tipc: New replicast peer: 255.255.255.255 [ 1260.337849][ T9968] tipc: Enabled bearer , priority 26 [ 1260.416225][ T9973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.423869][ T9973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.435528][ T9973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.453524][ T9973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.617589][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1260.653856][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1260.846292][ T9990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1260.856193][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1260.870627][ T9990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1260.890049][ T9990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1261.194042][T10017] @0Ù: renamed from bond_slave_1 (while UP) [ 1261.209758][T10016] syzkaller1: tun_chr_ioctl cmd 21731 [ 1261.411335][T10036] xt_hashlimit: size too large, truncated to 1048576 [ 1261.449590][T32131] tipc: Node number set to 912533304 [ 1261.489441][ T5829] Bluetooth: hci3: command tx timeout [ 1261.529765][T10040] pimreg: tun_chr_ioctl cmd 1074025677 [ 1261.535546][T10040] pimreg: linktype set to 780 [ 1261.687326][T10048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.715160][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.806634][T10056] 8021q: VLANs not supported on vxcan1 [ 1261.980484][T10063] FAULT_INJECTION: forcing a failure. [ 1261.980484][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.999343][T10063] CPU: 1 UID: 0 PID: 10063 Comm: syz.0.9732 Not tainted syzkaller #0 PREEMPT(full) [ 1261.999387][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.999402][T10063] Call Trace: [ 1261.999412][T10063] [ 1261.999422][T10063] dump_stack_lvl+0xe8/0x150 [ 1261.999459][T10063] should_fail_ex+0x412/0x560 [ 1261.999497][T10063] should_failslab+0xa8/0x100 [ 1261.999526][T10063] ? security_file_alloc+0x34/0x310 [ 1261.999555][T10063] kmem_cache_alloc_noprof+0x87/0x650 [ 1261.999579][T10063] ? rcu_is_watching+0x15/0xb0 [ 1261.999611][T10063] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1261.999638][T10063] security_file_alloc+0x34/0x310 [ 1261.999668][T10063] init_file+0x90/0x2b0 [ 1261.999702][T10063] alloc_empty_file+0x6e/0x1d0 [ 1261.999735][T10063] alloc_file_pseudo+0x155/0x240 [ 1261.999771][T10063] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1261.999803][T10063] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1261.999832][T10063] ? rcu_is_watching+0x15/0xb0 [ 1261.999864][T10063] ? hugetlbfs_get_inode+0x448/0x690 [ 1261.999949][T10063] hugetlb_file_setup+0x3ee/0x630 [ 1261.999979][T10063] ksys_mmap_pgoff+0x22e/0x760 [ 1262.000021][T10063] do_syscall_64+0x14d/0xf80 [ 1262.000053][T10063] ? trace_irq_disable+0x3b/0x150 [ 1262.000072][T10063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.000095][T10063] ? clear_bhb_loop+0x40/0x90 [ 1262.000122][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.000143][T10063] RIP: 0033:0x7f942b99c799 [ 1262.000165][T10063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.000184][T10063] RSP: 002b:00007f942c905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1262.000207][T10063] RAX: ffffffffffffffda RBX: 00007f942bc16090 RCX: 00007f942b99c799 [ 1262.000223][T10063] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 1262.000238][T10063] RBP: 00007f942c905090 R08: ffffffffffffffff R09: 0000000000000000 [ 1262.000252][T10063] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 1262.000266][T10063] R13: 00007f942bc16128 R14: 00007f942bc16090 R15: 00007ffd434006c8 [ 1262.000299][T10063] [ 1262.312522][T10066] syzkaller0: entered promiscuous mode [ 1262.318066][T10066] syzkaller0: entered allmulticast mode [ 1262.370020][T10066] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1262.721679][T10084] bond2: Unable to set up delay as MII monitoring is disabled [ 1262.771602][T10084] bond2 (unregistering): Released all slaves [ 1262.796234][T10088] netlink: 'syz.2.9743': attribute type 3 has an invalid length. [ 1262.946368][T10092] delete_channel: no stack [ 1263.105065][T10098] netlink: 'syz.1.9746': attribute type 3 has an invalid length. [ 1263.113620][T10101] netlink: 'syz.1.9746': attribute type 3 has an invalid length. [ 1263.404151][T10115] xt_TCPMSS: Only works on TCP SYN packets [ 1263.441158][T10109] bond2 (unregistering): Released all slaves [ 1263.574106][T10127] netlink: 'syz.1.9756': attribute type 1 has an invalid length. [ 1263.680098][T10134] block nbd0: not configured, cannot reconfigure [ 1263.702651][T10127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1264.141777][T10154] netlink: 'syz.0.9762': attribute type 1 has an invalid length. [ 1264.150187][T10154] net_ratelimit: 7 callbacks suppressed [ 1264.150208][T10154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1265.059654][T10185] nbd0: detected capacity change from 0 to 63 [ 1265.066173][T10182] netlink: 'syz.0.9773': attribute type 1 has an invalid length. [ 1265.093266][T10182] __nla_validate_parse: 20 callbacks suppressed [ 1265.093291][T10182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1265.125937][ T5829] block nbd0: Receive control failed (result -104) [ 1265.406272][T10201] syzkaller0: entered promiscuous mode [ 1265.412551][T10201] syzkaller0: entered allmulticast mode [ 1265.745388][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9783'. [ 1265.994935][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032726800: rx timeout, send abort [ 1266.495133][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032724400: rx timeout, send abort [ 1266.506244][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032726800: abort rx timeout. Force session deactivation [ 1267.007251][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032724400: abort rx timeout. Force session deactivation [ 1267.786808][T10218] tipc: Enabled bearer , priority 0 [ 1267.822728][T10204] tipc: Disabling bearer [ 1267.984506][T10236] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9786'. [ 1268.060451][T10239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.073328][T10237] pimreg: entered allmulticast mode [ 1268.482434][T10268] lo speed is unknown, defaulting to 1000 [ 1268.825359][T10275] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1268.924441][T10286] lo speed is unknown, defaulting to 1000 [ 1269.340587][T10304] netlink: 'syz.4.9801': attribute type 1 has an invalid length. [ 1269.351992][T10305] netlink: 'syz.4.9801': attribute type 1 has an invalid length. [ 1269.385867][T10304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1269.436890][T10303] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1269.481722][T10303] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9801'. [ 1269.770131][T10320] netlink: 'syz.3.9805': attribute type 3 has an invalid length. [ 1269.863317][T10323] Cannot find add_set index 2 as target [ 1270.466738][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1270.504640][T10350] bridge_slave_0: left allmulticast mode [ 1270.541051][T10350] bridge_slave_0: left promiscuous mode [ 1270.573173][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.839269][T10379] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.852022][T10350] bridge_slave_1: left allmulticast mode [ 1271.857953][T10350] bridge_slave_1: left promiscuous mode [ 1271.870489][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.896150][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.903181][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.910201][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.917125][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.924118][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.931089][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.938002][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.945014][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.951967][T10380] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.955444][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.035587][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.044817][T10381] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.067418][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.088586][T10381] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.110063][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1272.227185][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1272.706689][T10350] bond0: (slave bond_slave_0): Releasing backup interface [ 1272.717605][T10350] bond0: (slave bond_slave_1): Releasing backup interface [ 1272.830206][T10350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.880068][T10350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.937645][T10376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.961038][T10376] bridge_slave_1: left allmulticast mode [ 1272.987090][T10376] bridge_slave_1: left promiscuous mode [ 1273.007562][T10376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.045199][T10376] bond0: (slave bond_slave_0): Releasing backup interface [ 1273.067518][T10376] bond0: (slave bond_slave_1): Releasing backup interface [ 1273.153294][T10388] veth0: entered promiscuous mode [ 1273.201400][T10388] veth0: left promiscuous mode [ 1273.336523][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9826'. [ 1273.352522][T10397] syzkaller1: entered promiscuous mode [ 1273.361325][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9827'. [ 1273.379783][T10397] syzkaller1: entered allmulticast mode [ 1273.441307][T10404] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1273.673632][T10414] lo speed is unknown, defaulting to 1000 [ 1274.054057][T10420] veth1_to_bridge: entered allmulticast mode [ 1275.039186][T10463] pim6reg: entered allmulticast mode [ 1275.084162][T10463] pim6reg: left allmulticast mode [ 1275.196988][T10459] gre0: entered promiscuous mode [ 1275.217644][T10473] nbd: socks must be embedded in a SOCK_ITEM attr [ 1275.225395][T10459] gre0: entered allmulticast mode [ 1275.237889][T10473] block nbd2: shutting down sockets [ 1275.567420][T10500] block nbd3: not configured, cannot reconfigure [ 1275.726190][T10502] __nla_validate_parse: 1 callbacks suppressed [ 1275.726213][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9861'. [ 1275.994258][T10526] netlink: 'syz.4.9866': attribute type 1 has an invalid length. [ 1276.006728][T10524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1276.086011][T10531] gre0: entered promiscuous mode [ 1276.107052][T10531] gre0: entered allmulticast mode [ 1276.188063][T10536] netlink: 'syz.0.9871': attribute type 2 has an invalid length. [ 1276.228957][T10536] Bluetooth: MGMT ver 1.23 [ 1276.239210][T10536] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1276.849866][T10456] Bluetooth: hci4: command 0x0406 tx timeout [ 1276.858688][T10567] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1276.884424][T10564] Cannot find map_set index 2 as target [ 1277.003751][T10570] net_ratelimit: 2617 callbacks suppressed [ 1277.003773][T10570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1277.223096][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1277.328095][T10578] netlink: 'syz.4.9885': attribute type 1 has an invalid length. [ 1277.532062][T10593] syzkaller0: entered promiscuous mode [ 1277.549301][T10593] syzkaller0: entered allmulticast mode [ 1277.609212][T10602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9896'. [ 1277.857186][T10615] xt_hashlimit: invalid rate [ 1277.991125][T10624] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1278.179612][T10631] x_tables: unsorted entry at hook 2 [ 1278.188315][T10631] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1278.265965][T10641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1278.531819][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9901'. [ 1278.892485][T10670] xfrm0: entered promiscuous mode [ 1278.909494][T10672] veth1_macvtap: left promiscuous mode [ 1279.340318][T10692] macsec1: entered promiscuous mode [ 1279.345603][T10692] geneve1: entered promiscuous mode [ 1279.380177][T10692] macsec1: entered allmulticast mode [ 1279.397530][T10692] geneve1: entered allmulticast mode [ 1279.550034][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9925'. [ 1279.927934][T10725] vlan0: entered promiscuous mode [ 1279.961886][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1280.006902][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1280.040208][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1280.146198][T10733] lo speed is unknown, defaulting to 1000 [ 1280.319830][T10728] xt_CT: No such helper "syz1" [ 1281.008288][T10762] siw: device registration error -23 [ 1281.273804][T10779] __nla_validate_parse: 1 callbacks suppressed [ 1281.273827][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9945'. [ 1281.292468][T10779] netlink: 'syz.1.9945': attribute type 1 has an invalid length. [ 1281.592235][T10794] netlink: 'syz.0.9949': attribute type 8 has an invalid length. [ 1283.312747][T10741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1283.605382][T10813] pim6reg: entered allmulticast mode [ 1283.632560][T10818] pim6reg: left allmulticast mode [ 1283.706326][T10824] netlink: 'syz.2.9956': attribute type 1 has an invalid length. [ 1283.717368][T10823] netlink: 'syz.2.9956': attribute type 1 has an invalid length. [ 1283.852267][T10824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1283.872983][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9954'. [ 1284.026481][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1284.044084][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1284.141744][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9963'. [ 1284.253220][T10848] hsr_slave_1 (unregistering): left promiscuous mode [ 1284.271724][T10857] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9967'. [ 1284.278607][T10855] macsec1: entered promiscuous mode [ 1284.286724][T10855] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1284.312697][T10857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9967'. [ 1285.075045][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1285.114753][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1285.135835][T10905] lo speed is unknown, defaulting to 1000 [ 1285.142719][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1285.217495][T10921] netlink: 'syz.4.9985': attribute type 1 has an invalid length. [ 1285.330911][T10923] team0 (unregistering): Port device team_slave_0 removed [ 1285.349834][T10927] xt_TCPMSS: Only works on TCP SYN packets [ 1285.364846][T10923] team0 (unregistering): Port device team_slave_1 removed [ 1285.858209][T10957] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1285.881746][T10957] bond3 (unregistering): Released all slaves [ 1286.151661][T10974] syzkaller0: entered promiscuous mode [ 1286.157180][T10974] syzkaller0: entered allmulticast mode [ 1286.314325][T10985] __nla_validate_parse: 5 callbacks suppressed [ 1286.314348][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1286.472942][T10988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.481900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.528917][T11000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10006'. [ 1286.651471][T11001] netlink: 'syz.3.10005': attribute type 1 has an invalid length. [ 1286.738187][T11012] netlink: 'syz.2.10008': attribute type 1 has an invalid length. [ 1286.762503][T11011] netlink: 'syz.2.10008': attribute type 1 has an invalid length. [ 1286.913614][T11023] tipc: Failed to remove unknown binding: 66,1,1/1:2289487665/2289487667 [ 1286.953208][T11023] tipc: Failed to remove unknown binding: 66,1,1/1:2289487665/2289487667 [ 1286.973096][T11023] tipc: Failed to remove unknown binding: 66,1,1/1:2289487665/2289487667 [ 1287.007619][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10012'. [ 1287.020323][T11023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.066912][T11028] bridge2: entered promiscuous mode [ 1287.074479][T11028] bridge2: port 1(macvtap0) entered blocking state [ 1287.083874][T11028] bridge2: port 1(macvtap0) entered disabled state [ 1287.091292][T11028] macvtap0: entered allmulticast mode [ 1287.109327][T11028] bridge2: entered allmulticast mode [ 1287.129047][T11028] macvtap0: left allmulticast mode [ 1287.147100][T11028] bridge2: left allmulticast mode [ 1287.168887][T11028] bridge2: left promiscuous mode [ 1287.891381][T11067] netlink: 'syz.4.10019': attribute type 11 has an invalid length. [ 1287.920914][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10022'. [ 1288.177789][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10026'. [ 1288.197446][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10026'. [ 1288.419132][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10028'. [ 1288.982445][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10035'. [ 1288.983389][ T5489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.211278][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10038'. [ 1289.351832][T11154] tap0: tun_chr_ioctl cmd 35111 [ 1289.660759][T11171] x_tables: unsorted entry at hook 1 [ 1289.890545][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10054'. [ 1290.026857][T11202] bond2 (unregistering): Released all slaves [ 1290.351055][T11213] bridge3: port 1(veth3) entered blocking state [ 1290.377905][T11213] bridge3: port 1(veth3) entered disabled state [ 1290.390771][T11213] veth3: entered allmulticast mode [ 1290.398629][T11213] veth3: entered promiscuous mode [ 1290.406798][T11217] netlink: 'syz.4.10061': attribute type 5 has an invalid length. [ 1290.426341][T11218] bridge3: port 2(veth0_to_bond) entered blocking state [ 1290.435528][T11218] bridge3: port 2(veth0_to_bond) entered disabled state [ 1290.445662][T11218] veth0_to_bond: entered allmulticast mode [ 1290.454745][T11225] netlink: 'syz.3.10063': attribute type 1 has an invalid length. [ 1290.480320][T11218] veth0_to_bond: entered promiscuous mode [ 1290.493636][T11229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.009047][T11249] lo speed is unknown, defaulting to 1000 [ 1291.037790][T11251] netlink: 'syz.3.10071': attribute type 30 has an invalid length. [ 1291.372197][T11259] xt_HMARK: spi-set and port-set can't be combined [ 1291.865908][T11289] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1291.910209][T11289] IPv6: NLM_F_CREATE should be specified when creating new route [ 1291.980686][T11296] __nla_validate_parse: 5 callbacks suppressed [ 1291.980710][T11296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10078'. [ 1292.059449][T11298] xt_TCPMSS: Only works on TCP SYN packets [ 1292.169132][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1292.179149][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1292.216604][T11304] Unsupported ieee802154 address type: 0 [ 1292.267589][T11302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1292.429773][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10085'. [ 1292.489671][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1292.498779][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1292.508198][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1292.517718][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1292.675994][T11328] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1292.804280][T11328] bond5: option primary_reselect: invalid value (4) [ 1292.881715][T11328] bond5 (unregistering): Released all slaves [ 1293.256896][T11353] x_tables: duplicate underflow at hook 2 [ 1293.362249][T11355] lo speed is unknown, defaulting to 1000 [ 1293.426247][T11360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10099'. [ 1293.449239][T11363] netlink: 210384 bytes leftover after parsing attributes in process `syz.0.10100'. [ 1293.938837][T11373] pim6reg: entered allmulticast mode [ 1293.955591][T11375] netlink: 'syz.3.10103': attribute type 27 has an invalid length. [ 1293.985513][T11372] pim6reg: left allmulticast mode [ 1294.049683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.840024][T11414] SET target dimension over the limit! [ 1295.032222][T11413] lo speed is unknown, defaulting to 1000 [ 1295.146716][T11427] pim6reg: entered allmulticast mode [ 1295.181766][T11425] pim6reg: left allmulticast mode [ 1295.200775][T11229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.260484][ T1697] block nbd0: Possible stuck request ffff88803ef08000: control (read@0,1024B). Runtime 30 seconds [ 1295.275046][ T1697] block nbd0: Possible stuck request ffff88803ef08200: control (read@1024,1024B). Runtime 30 seconds [ 1295.296471][ T1697] block nbd0: Possible stuck request ffff88803ef08400: control (read@2048,1024B). Runtime 30 seconds [ 1295.309232][ T1697] block nbd0: Possible stuck request ffff88803ef08600: control (read@3072,1024B). Runtime 30 seconds [ 1295.485391][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.768342][T11512] netlink: 'syz.4.10144': attribute type 3 has an invalid length. [ 1296.812277][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.116853][T11533] netlink: 'syz.2.10151': attribute type 1 has an invalid length. [ 1297.333426][T10456] Bluetooth: hci5: command 0x0406 tx timeout [ 1297.420310][T11544] __nla_validate_parse: 9 callbacks suppressed [ 1297.420334][T11544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1297.455134][T11547] netlink: 'syz.4.10156': attribute type 1 has an invalid length. [ 1297.471960][T11547] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1297.535590][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1297.717911][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10159'. [ 1297.735427][T11561] ip6gre1: entered promiscuous mode [ 1297.741117][T11561] ip6gre1: entered allmulticast mode [ 1297.948132][T11569] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1298.022213][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10160'. [ 1298.707722][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.089686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.208038][T11561] ip6gre1: left promiscuous mode [ 1299.213197][T11561] ip6gre1: left allmulticast mode [ 1299.282912][T28927] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.319015][T28927] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.347426][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10164'. [ 1299.395041][T28927] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.404585][T11588] netlink: 'syz.4.10164': attribute type 1 has an invalid length. [ 1299.428863][T28927] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.445139][T11571] lo speed is unknown, defaulting to 1000 [ 1299.510793][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10164'. [ 1299.633153][T11603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 1299.834902][T11616] xt_TCPMSS: Only works on TCP SYN packets [ 1299.994956][T11622] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1300.015386][T11622] syzkaller1: linktype set to 768 [ 1300.035121][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10174'. [ 1300.114522][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10174'. [ 1300.363851][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10176'. [ 1300.381539][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.393344][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.414571][T11647] IPVS: Scheduler module ip_vs_ not found [ 1300.527831][T11668] xt_hashlimit: size too large, truncated to 1048576 [ 1300.781011][T11670] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1300.866915][T11688] xt_TCPMSS: Only works on TCP SYN packets [ 1300.958341][T11674] syzkaller1: entered promiscuous mode [ 1301.029866][T11674] syzkaller1: entered allmulticast mode [ 1301.593895][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.798665][T11748] xt_TCPMSS: Only works on TCP SYN packets [ 1302.565777][T11779] netlink: 292 bytes leftover after parsing attributes in process `syz.1.10204'. [ 1302.669187][T11783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10205'. [ 1302.777258][T11783] ip6gre1: entered promiscuous mode [ 1302.809689][T11783] ip6gre1: entered allmulticast mode [ 1302.834480][T11793] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1302.853676][T11229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.994496][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10209'. [ 1303.026260][T11801] bond0: entered promiscuous mode [ 1303.034095][T11801] bond_slave_0: entered promiscuous mode [ 1303.044391][T11801] @0Ù: entered promiscuous mode [ 1303.054871][T11801] batadv_slave_0: entered promiscuous mode [ 1303.062470][T11801] debugfs: 'hsr1' already exists in 'hsr' [ 1303.068531][T11801] Cannot create hsr debugfs directory [ 1303.425055][T11816] pim6reg1: entered promiscuous mode [ 1303.430529][T11816] pim6reg1: entered allmulticast mode [ 1303.593381][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.738566][T11837] ipt_rpfilter: unknown options [ 1303.958216][T11853] lo speed is unknown, defaulting to 1000 [ 1304.027497][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10223'. [ 1304.130183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.204623][T11862] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1304.696761][T11879] netlink: 'syz.3.10230': attribute type 1 has an invalid length. [ 1304.706022][T11865] ipvlan0: entered promiscuous mode [ 1304.742519][T11853] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1304.826295][T11879] bond2: entered promiscuous mode [ 1304.840274][T11879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.921812][T11878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.930368][T11878] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1304.996797][T11878] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1305.050579][T11878] bond2: (slave ip6gre2): making interface the new active one [ 1305.058425][T11878] ip6gre2: entered promiscuous mode [ 1305.085528][T11878] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 1305.190952][T11892] syzkaller1: entered promiscuous mode [ 1305.196502][T11892] syzkaller1: entered allmulticast mode [ 1305.359137][T11915] netlink: 'syz.3.10236': attribute type 4 has an invalid length. [ 1305.373128][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.381591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.394547][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.403120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.411956][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.424260][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.432935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.441617][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.986362][T28910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.002965][T28910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.167254][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10240'. [ 1306.196069][T11916] syzkaller0: entered promiscuous mode [ 1306.201753][T11916] syzkaller0: entered allmulticast mode [ 1306.213782][T11912] lo speed is unknown, defaulting to 1000 [ 1306.229546][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10240'. [ 1306.260219][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10240'. [ 1308.449976][T11952] sctp: [Deprecated]: syz.3.10242 (pid 11952) Use of int in maxseg socket option. [ 1308.449976][T11952] Use struct sctp_assoc_value instead [ 1308.525191][T11957] syzkaller1: entered promiscuous mode [ 1308.539823][T11957] syzkaller1: entered allmulticast mode [ 1308.582571][T11963] netlink: 'syz.0.10245': attribute type 1 has an invalid length. [ 1308.658571][T11963] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1308.900770][T11980] netlink: 'syz.4.10250': attribute type 1 has an invalid length. [ 1309.054227][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10249'. [ 1309.169555][ C0] net_ratelimit: 263 callbacks suppressed [ 1309.169585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.360596][T12001] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1309.404861][T12003] tipc: Enabled bearer , priority 0 [ 1309.485247][T12000] tipc: Disabling bearer [ 1309.790577][T12023] IPVS: Error connecting to the multicast addr [ 1309.848796][T12023] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1309.931049][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1309.946247][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1309.974223][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1310.028921][T12031] netlink: 'syz.0.10266': attribute type 2 has an invalid length. [ 1310.142372][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10267'. [ 1310.355385][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10270'. [ 1310.592434][T12060] pim6reg: entered allmulticast mode [ 1310.628480][T12069] gre0: entered promiscuous mode [ 1310.647289][T12069] gre0: entered allmulticast mode [ 1310.934575][T12079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.258744][T12094] syzkaller0: entered promiscuous mode [ 1311.272069][T12094] syzkaller0: entered allmulticast mode [ 1311.336486][T12094] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1311.540549][T12102] vlan2: entered promiscuous mode [ 1311.565286][T12102] geneve1: entered promiscuous mode [ 1311.578087][T12102] vlan2: entered allmulticast mode [ 1311.596677][T12102] geneve1: entered allmulticast mode [ 1312.064693][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10285'. [ 1312.135071][T12120] bond3: option broadcast_neighbor: invalid value (30) [ 1312.148163][T12120] bond3 (unregistering): Released all slaves [ 1312.296008][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10288'. [ 1312.328182][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10289'. [ 1313.125613][T12163] tipc: Enabling of bearer rejected, failed to enable media [ 1313.637223][T12185] netlink: 'syz.4.10307': attribute type 2 has an invalid length. [ 1313.744070][T12191] netlink: 'syz.1.10310': attribute type 3 has an invalid length. [ 1313.984447][T12198] lo speed is unknown, defaulting to 1000 [ 1314.027718][T12205] netlink: 'syz.1.10313': attribute type 27 has an invalid length. [ 1314.180789][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.209563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.395598][T12205] bond2: left promiscuous mode [ 1314.418654][T30254] lo speed is unknown, defaulting to 1000 [ 1314.441112][T30254] syz2: Port: 1 Link DOWN [ 1314.479036][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.507466][T12210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1314.563057][T28911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.594949][T12212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1314.607214][T28911] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1314.627467][T28911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.637480][T28911] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1314.665764][T30264] lo speed is unknown, defaulting to 1000 [ 1314.687431][T30264] syz2: Port: 1 Link ACTIVE [ 1314.752542][T12215] ip6tnl1: entered allmulticast mode [ 1314.780258][T28911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.829726][T28911] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1314.857890][T28911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.911028][T28911] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1315.363725][T12252] __nla_validate_parse: 1 callbacks suppressed [ 1315.363748][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1315.615110][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1315.704569][T12255] netlink: 'syz.1.10324': attribute type 12 has an invalid length. [ 1315.720088][T12255] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10324'. [ 1315.769813][T12262] gre0: entered promiscuous mode [ 1315.774827][T12262] gre0: entered allmulticast mode [ 1315.915884][T12269] xt_TCPMSS: Only works on TCP SYN packets [ 1316.077099][T12274] Cannot find add_set index 3 as target [ 1316.379866][T12287] netlink: get zone limit has 4 unknown bytes [ 1316.466565][T12294] netlink: get zone limit has 4 unknown bytes [ 1316.722934][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10340'. [ 1316.758052][T12300] bond0: entered promiscuous mode [ 1316.769974][T12300] bond_slave_0: entered promiscuous mode [ 1316.782691][T12300] bond_slave_1: entered promiscuous mode [ 1316.813915][T12304] xt_TCPMSS: Only works on TCP SYN packets [ 1316.909704][T12300] bond0: left promiscuous mode [ 1316.920760][T12300] bond_slave_0: left promiscuous mode [ 1316.946174][T12300] bond_slave_1: left promiscuous mode [ 1316.977198][T12309] netlink: 'syz.1.10343': attribute type 1 has an invalid length. [ 1316.999790][T12310] netlink: 'syz.1.10343': attribute type 1 has an invalid length. [ 1317.239805][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10347'. [ 1317.307638][T12313] netlink: 'syz.2.10345': attribute type 9 has an invalid length. [ 1317.644365][T12341] xt_TCPMSS: Only works on TCP SYN packets [ 1317.842112][T12359] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10359'. [ 1318.147371][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10364'. [ 1318.325534][T12392] netlink: 'syz.4.10363': attribute type 2 has an invalid length. [ 1318.339155][T12392] netlink: 'syz.4.10363': attribute type 2 has an invalid length. [ 1318.395246][T12390] syzkaller0: entered promiscuous mode [ 1318.438317][T12390] syzkaller0: entered allmulticast mode [ 1318.650210][T11229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.111847][T12433] x_tables: duplicate underflow at hook 3 [ 1319.126102][T12434] lo speed is unknown, defaulting to 1000 [ 1319.144093][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10378'. [ 1319.153497][T12427] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1319.249802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.344145][T12439] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1319.518638][T12455] lo speed is unknown, defaulting to 1000 [ 1320.076486][T12488] Cannot find del_set index 1 as target [ 1320.123512][T12491] xt_TCPMSS: Only works on TCP SYN packets [ 1320.253000][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.261464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.271523][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.287204][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.295820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.313083][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.314712][T12496] lo speed is unknown, defaulting to 1000 [ 1320.431979][T12506] netlink: 'syz.2.10393': attribute type 1 has an invalid length. [ 1320.569221][T12512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1320.664893][T12516] netlink: 'syz.4.10397': attribute type 10 has an invalid length. [ 1320.786485][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10397'. [ 1320.819047][T12516] mac80211_hwsim hwsim123 wlan1: entered promiscuous mode [ 1320.837167][T12516] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1320.893680][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1320.902428][T28910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.919497][T28910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.975521][T12532] netlink: 'syz.0.10399': attribute type 1 has an invalid length. [ 1321.051637][T12532] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1321.058626][T12532] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1321.082295][T12536] netlink: 'syz.1.10398': attribute type 10 has an invalid length. [ 1321.150042][T12538] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10400'. [ 1321.160858][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10401'. [ 1321.170487][T12544] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10400'. [ 1321.206332][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1321.224222][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1321.233812][T12543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10401'. [ 1321.245816][T12539] netlink: 348 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1321.255971][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1322.039029][T12553] geneve2: entered promiscuous mode [ 1322.046242][T28916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.100753][T28916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.132893][T28916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.160291][T28916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.729498][T12590] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1322.846003][T12598] macsec0: entered promiscuous mode [ 1322.888564][T12598] macsec0: left promiscuous mode [ 1322.958544][T12594] lo speed is unknown, defaulting to 1000 [ 1322.982466][T12598] netlink: 'syz.0.10415': attribute type 13 has an invalid length. [ 1323.695791][T12630] lo speed is unknown, defaulting to 1000 [ 1323.729999][T30264] IPVS: starting estimator thread 0... [ 1323.819530][T12639] IPVS: using max 29 ests per chain, 69600 per kthread [ 1323.861819][T12641] lo speed is unknown, defaulting to 1000 [ 1324.289552][ C0] net_ratelimit: 3328 callbacks suppressed [ 1324.289573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.483073][T12666] lo speed is unknown, defaulting to 1000 [ 1325.071977][T12693] geneve3: entered promiscuous mode [ 1325.104657][T12693] netlink: 'syz.0.10438': attribute type 1 has an invalid length. [ 1325.302773][T12695] IPVS: Scheduler module ip_vs_ not found [ 1325.337614][ T1697] block nbd0: Possible stuck request ffff88803ef08000: control (read@0,1024B). Runtime 60 seconds [ 1325.351615][ T1697] block nbd0: Possible stuck request ffff88803ef08200: control (read@1024,1024B). Runtime 60 seconds [ 1325.370003][ T1697] block nbd0: Possible stuck request ffff88803ef08400: control (read@2048,1024B). Runtime 60 seconds [ 1325.382016][ T1697] block nbd0: Possible stuck request ffff88803ef08600: control (read@3072,1024B). Runtime 60 seconds [ 1325.680960][T12703] veth1: entered promiscuous mode [ 1325.686066][T12703] veth1: entered allmulticast mode [ 1326.143429][T12725] netlink: 'syz.3.10447': attribute type 1 has an invalid length. [ 1326.256267][T12725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1326.400426][T12729] veth3: entered promiscuous mode [ 1326.412101][T12729] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1326.462683][T12732] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1326.489630][T12732] __nla_validate_parse: 7 callbacks suppressed [ 1326.489665][T12732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10449'. [ 1326.858335][T12749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10452'. [ 1326.867763][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10452'. [ 1326.877230][T12749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10452'. [ 1326.892018][T12749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10452'. [ 1326.960379][T12751] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10454'. [ 1327.124013][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10456'. [ 1327.151361][T12756] nbd: socks must be embedded in a SOCK_ITEM attr [ 1327.200638][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10456'. [ 1327.240430][T12758] nbd: socks must be embedded in a SOCK_ITEM attr [ 1327.275472][T12756] netlink: 'syz.3.10456': attribute type 1 has an invalid length. [ 1327.669520][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10458'. [ 1327.765993][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10461'. [ 1327.792180][T12773] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1327.922815][T12763] vlan0: entered allmulticast mode [ 1327.925371][T12772] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1327.937777][T12763] bridge_slave_0: entered allmulticast mode [ 1327.952753][T12763] bridge0: port 1(vlan0) entered blocking state [ 1327.960273][T12763] bridge0: port 1(vlan0) entered disabled state [ 1327.985447][T12763] vlan0: entered promiscuous mode [ 1327.999466][T12763] bridge_slave_0: entered promiscuous mode [ 1328.032333][T28927] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.069544][T28927] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.105173][T28927] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.144686][T28927] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.880403][T12822] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1329.005922][T12831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.134429][T12836] batman_adv: batadv0: Adding interface: macsec0 [ 1329.147006][T12836] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.182559][T12836] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 1329.223559][T12837] lo speed is unknown, defaulting to 1000 [ 1329.329774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.763993][T12854] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1330.157945][T12878] bridge5: entered promiscuous mode [ 1330.742589][T12912] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1330.748976][T12912] syzkaller1: linktype set to 825 [ 1330.832010][T12915] netlink: 'syz.1.10503': attribute type 1 has an invalid length. [ 1330.841388][T12915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.857711][T30264] lo speed is unknown, defaulting to 1000 [ 1330.864089][T30264] syz2: Port: 1 Link DOWN [ 1330.901034][T12917] netlink: 'syz.4.10504': attribute type 1 has an invalid length. [ 1330.964988][T12917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1330.972914][T12921] bond3: entered promiscuous mode [ 1330.978246][T12921] bond3: entered allmulticast mode [ 1331.531459][T12953] netlink: 'syz.4.10514': attribute type 2 has an invalid length. [ 1331.564942][T12959] gre0: entered promiscuous mode [ 1331.571809][T12959] gre0: entered allmulticast mode [ 1331.586383][T12960] __nla_validate_parse: 18 callbacks suppressed [ 1331.586404][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1331.607560][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1334.369688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.398572][T12942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.721044][T12991] lo speed is unknown, defaulting to 1000 [ 1334.826657][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10525'. [ 1335.064854][T13017] xt_TCPMSS: Only works on TCP SYN packets [ 1335.119171][T13019] IPVS: Unknown mcast interface: pim6reg0 [ 1335.134538][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10531'. [ 1335.368134][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1335.378990][T13028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1335.417763][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1335.429175][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1335.639612][T13045] netlink: 'syz.3.10539': attribute type 29 has an invalid length. [ 1335.648978][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10539'. [ 1335.736643][T13051] syzkaller0: entered promiscuous mode [ 1335.755244][T13051] syzkaller0: entered allmulticast mode [ 1335.767007][T13055] netlink: 'syz.3.10539': attribute type 29 has an invalid length. [ 1335.799470][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10539'. [ 1335.825921][T13051] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 1336.614579][T13074] bond4 (unregistering): Released all slaves [ 1336.743360][T13080] __nla_validate_parse: 3 callbacks suppressed [ 1336.743384][T13080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10550'. [ 1336.764922][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10550'. [ 1336.800309][T13080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10550'. [ 1336.811877][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10551'. [ 1336.841507][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10551'. [ 1336.845656][T13080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10550'. [ 1336.865012][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10551'. [ 1336.907964][T13085] ip6tnl4: entered promiscuous mode [ 1336.929929][T13085] ip6tnl4: entered allmulticast mode [ 1337.173740][T13108] netlink: 196 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1337.209669][T13107] netlink: 'syz.3.10555': attribute type 6 has an invalid length. [ 1337.247855][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10557'. [ 1337.266464][T13112] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10558'. [ 1337.545157][T13128] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1337.581419][T13128] bond5 (unregistering): Released all slaves [ 1338.037715][ T30] audit: type=1804 audit(1774683003.214:31): pid=13161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10568" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1752 res=1 errno=0 [ 1338.074116][T13161] lo: Caught tx_queue_len zero misconfig [ 1338.081481][T13161] sch_tbf: burst 545 is lower than device lo mtu (1550) ! [ 1338.107164][ T30] audit: type=1800 audit(1774683003.214:32): pid=13161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10568" name="cgroup.controllers" dev="tmpfs" ino=1752 res=0 errno=0 [ 1338.289956][T10456] Bluetooth: hci1: command 0x0406 tx timeout [ 1338.369255][T13176] netlink: 'syz.0.10572': attribute type 1 has an invalid length. [ 1338.434112][T13178] tipc: New replicast peer: 255.255.255.255 [ 1338.444411][T13178] tipc: Enabled bearer , priority 26 [ 1338.617264][T13183] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1338.634378][T13183] bond5 (unregistering): Released all slaves [ 1339.409657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.619277][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.285521][T13248] xt_TCPMSS: Only works on TCP SYN packets [ 1340.672543][T13234] ipvlan1: entered promiscuous mode [ 1341.010727][T13289] syzkaller0: entered promiscuous mode [ 1341.030407][T13289] syzkaller0: entered allmulticast mode [ 1342.591366][T13355] __nla_validate_parse: 92 callbacks suppressed [ 1342.591389][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10620'. [ 1342.662705][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10620'. [ 1342.674026][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10620'. [ 1342.704262][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10620'. [ 1342.739168][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10620'. [ 1342.759681][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10621'. [ 1342.768699][T13359] 0ªX¹¦À: left allmulticast mode [ 1342.810949][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10621'. [ 1342.858749][T13359] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1343.083571][T13371] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10624'. [ 1343.142577][T13376] xt_hashlimit: size too large, truncated to 1048576 [ 1343.226505][T13380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10626'. [ 1343.294521][ T30] audit: type=1800 audit(1774683008.474:33): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10627" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1295 res=0 errno=0 [ 1343.441851][T13391] xt_TCPMSS: Only works on TCP SYN packets [ 1343.577368][T13395] syzkaller1: entered promiscuous mode [ 1343.596944][T13395] syzkaller1: entered allmulticast mode [ 1343.658011][T13397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10632'. [ 1344.310147][T13411] x_tables: unsorted underflow at hook 3 [ 1344.449691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.624515][T13434] netlink: 'syz.0.10639': attribute type 2 has an invalid length. [ 1344.987348][T13449] xt_TCPMSS: Only works on TCP SYN packets [ 1345.362536][T13468] netlink: 'syz.3.10647': attribute type 1 has an invalid length. [ 1345.525071][T13468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1345.606164][T13470] bond6: (slave gretap1): making interface the new active one [ 1345.631802][T13470] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1345.747703][T13479] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1345.758879][T13479] bond6 (unregistering): Released all slaves [ 1346.494211][T13522] netlink: 'syz.2.10658': attribute type 5 has an invalid length. [ 1346.501827][T13517] : entered promiscuous mode [ 1346.687066][ T5194] udevd[5194]: worker [10190] /devices/virtual/block/nbd0 is taking a long time [ 1347.022288][T13545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.115453][T13545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.197157][T13559] netlink: 'syz.0.10666': attribute type 21 has an invalid length. [ 1347.213394][T13545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.376201][T13563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.606258][T13571] __nla_validate_parse: 5 callbacks suppressed [ 1347.606279][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10670'. [ 1347.777697][T13574] ip6gre3: entered promiscuous mode [ 1347.831233][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10673'. [ 1347.864351][T13581] netlink: 'syz.0.10672': attribute type 10 has an invalid length. [ 1347.887513][T13581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1348.379606][T13595] gretap0: entered promiscuous mode [ 1348.384951][T13595] macsec1: entered allmulticast mode [ 1348.410616][T13595] gretap0: entered allmulticast mode [ 1348.430078][T13595] gretap0: left allmulticast mode [ 1348.439622][T13595] gretap0: left promiscuous mode [ 1348.932552][T13614] netlink: 'syz.1.10681': attribute type 2 has an invalid length. [ 1348.940964][T13614] netlink: 'syz.1.10681': attribute type 2 has an invalid length. [ 1348.944893][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10674'. [ 1349.154873][T13623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.489827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.808893][T13631] xfrm1: entered allmulticast mode [ 1349.851578][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1350.032803][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1350.118800][T13663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1350.433791][T13675] netlink: 'syz.4.10697': attribute type 1 has an invalid length. [ 1350.610002][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10697'. [ 1350.690189][T13684] pim6reg: entered allmulticast mode [ 1350.699082][T13684] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1350.707582][T13684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1350.972999][T13682] pim6reg: left allmulticast mode [ 1351.074100][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1351.088616][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1351.412352][T11229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.585394][T13726] netlink: 'syz.0.10716': attribute type 10 has an invalid length. [ 1352.246197][T13757] xt_TCPMSS: Only works on TCP SYN packets [ 1352.630465][T13771] __nla_validate_parse: 3 callbacks suppressed [ 1352.630573][T13771] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10728'. [ 1352.744258][T13774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10730'. [ 1352.808915][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10730'. [ 1352.980693][T13786] lo speed is unknown, defaulting to 1000 [ 1352.986960][T13782] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1353.134565][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10731'. [ 1353.781655][T13816] netlink: 'syz.1.10741': attribute type 1 has an invalid length. [ 1353.858636][T13820] netlink: 'syz.2.10742': attribute type 1 has an invalid length. [ 1353.889750][T13816] bond5: entered promiscuous mode [ 1353.895735][T13816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1353.928118][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10741'. [ 1353.939756][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10741'. [ 1353.971802][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10741'. [ 1354.007118][T13830] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10744'. [ 1354.064189][T13820] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1354.450530][T13854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10749'. [ 1354.529572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.778560][T13869] netlink: 712 bytes leftover after parsing attributes in process `syz.1.10759'. [ 1354.875542][T13869] netlink: 'syz.1.10759': attribute type 3 has an invalid length. [ 1355.313031][T13900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.438082][ T1697] block nbd0: Possible stuck request ffff88803ef08000: control (read@0,1024B). Runtime 90 seconds [ 1355.452659][ T1697] block nbd0: Possible stuck request ffff88803ef08200: control (read@1024,1024B). Runtime 90 seconds [ 1355.464745][ T1697] block nbd0: Possible stuck request ffff88803ef08400: control (read@2048,1024B). Runtime 90 seconds [ 1355.476087][ T1697] block nbd0: Possible stuck request ffff88803ef08600: control (read@3072,1024B). Runtime 90 seconds [ 1357.045081][T13953] gre0: left promiscuous mode [ 1357.050431][T13953] gre0: left allmulticast mode [ 1357.112485][T13953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.126240][T13953] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1357.154033][T13967] netlink: 'syz.3.10783': attribute type 13 has an invalid length. [ 1357.179850][T13967] netlink: 'syz.3.10783': attribute type 17 has an invalid length. [ 1357.214268][T13965] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1357.245419][T13965] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1357.336107][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.343979][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.449063][T13964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.467628][T13964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.615028][T13967] gre0: left promiscuous mode [ 1357.620303][T13967] gre0: left allmulticast mode [ 1357.674729][T13967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.687723][T13967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1357.705190][T28908] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.801298][ T9385] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1357.814149][ T9385] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1357.836460][ T9385] bond0: now running without any active interface! [ 1357.854311][T28908] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.864426][T28908] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.903045][T28908] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.921745][T13982] lo speed is unknown, defaulting to 1000 [ 1358.073446][T13996] __nla_validate_parse: 12 callbacks suppressed [ 1358.073470][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1358.088924][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1358.103632][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1358.136880][T14004] netlink: 'syz.2.10792': attribute type 2 has an invalid length. [ 1358.143779][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1358.173135][T14004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.220437][T13972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.328535][T14006] lo speed is unknown, defaulting to 1000 [ 1358.365218][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1358.596611][T14021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10796'. [ 1358.741187][T14024] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10797'. [ 1358.751280][T14025] netlink: 'syz.1.10797': attribute type 3 has an invalid length. [ 1358.786231][T14024] netlink: 'syz.1.10797': attribute type 3 has an invalid length. [ 1358.967882][T14037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10800'. [ 1359.094550][T14051] netlink: 'syz.4.10800': attribute type 1 has an invalid length. [ 1359.501907][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1359.514127][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1359.535023][T14076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1359.569698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.253574][T14108] gre0: left promiscuous mode [ 1360.264158][T14108] gre0: left allmulticast mode [ 1360.361173][T14108] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1360.400262][T14108] bond5: left promiscuous mode [ 1360.888496][T14134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1360.997387][T14136] netlink: 'syz.4.10832': attribute type 3 has an invalid length. [ 1361.720291][T14164] tipc: Enabled bearer , priority 0 [ 1361.746974][T14165] syzkaller0: entered promiscuous mode [ 1361.767089][T14165] syzkaller0: entered allmulticast mode [ 1361.814581][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.826163][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.897317][T14162] tipc: Resetting bearer [ 1361.936683][T14162] tipc: Disabling bearer [ 1361.965741][T14173] batadv_slave_1: entered promiscuous mode [ 1362.067188][T14172] batadv_slave_1: left promiscuous mode [ 1362.955459][T14222] xt_CT: No such helper "netbios-ns" [ 1363.411874][T14252] __nla_validate_parse: 12 callbacks suppressed [ 1363.411896][T14252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10863'. [ 1363.492803][T14256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.564856][T14257] netlink: 'syz.2.10864': attribute type 1 has an invalid length. [ 1363.718797][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10859'. [ 1363.827745][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10868'. [ 1364.409117][T14292] netlink: 'syz.3.10867': attribute type 2 has an invalid length. [ 1364.418935][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10867'. [ 1364.609663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.791548][T14305] netlink: 'syz.1.10879': attribute type 5 has an invalid length. [ 1364.842446][T14311] netlink: 'syz.0.10877': attribute type 1 has an invalid length. [ 1364.853833][T14311] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10877'. [ 1364.886587][T14315] netlink: 'syz.0.10877': attribute type 1 has an invalid length. [ 1364.894939][T14315] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10877'. [ 1365.051222][T14320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1365.133841][T14330] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1365.266701][T14340] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10886'. [ 1366.345653][T14391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1366.457286][T14397] 8021q: VLANs not supported on ip_vti0 [ 1366.929645][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1366.960016][T14415] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10905'. [ 1367.034688][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10905'. [ 1368.441616][T14455] tc_dump_action: action bad kind [ 1368.555596][T14465] netlink: 'syz.1.10919': attribute type 30 has an invalid length. [ 1368.651099][T14470] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 1368.689036][T14465] __nla_validate_parse: 1 callbacks suppressed [ 1368.689060][T14465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10919'. [ 1368.722522][T14475] lo speed is unknown, defaulting to 1000 [ 1368.752224][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1368.781251][T14470] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 1368.848253][T14476] bond7: entered promiscuous mode [ 1368.854171][T14476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1368.941637][T14486] netlink: 'syz.1.10925': attribute type 1 has an invalid length. [ 1369.094246][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10925'. [ 1369.140451][T14494] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10927'. [ 1369.433788][T14508] netlink: 632 bytes leftover after parsing attributes in process `syz.3.10930'. [ 1369.528840][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10932'. [ 1369.558611][T14514] vlan3: entered promiscuous mode [ 1369.581352][T14514] bridge0: entered promiscuous mode [ 1369.637967][T14517] tipc: Resetting bearer [ 1369.649563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.683052][T14521] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1369.931463][T14522] vlan1: entered allmulticast mode [ 1369.945999][T14522] macvtap0: entered allmulticast mode [ 1370.065727][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1370.134839][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1370.238664][T14534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1370.710116][T14553] netlink: 'syz.3.10939': attribute type 3 has an invalid length. [ 1370.747565][T14553] netlink: 'syz.3.10939': attribute type 1 has an invalid length. [ 1370.812294][T14553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10939'. [ 1370.856166][T14553] NCSI netlink: No device for ifindex 808464432 [ 1371.910579][T14615] openvswitch: netlink: Message has 496 unknown bytes. [ 1371.931648][T14615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.838341][T14652] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1373.087745][T28908] bridge_slave_1: left promiscuous mode [ 1373.100076][T28908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.132159][T28908] bridge_slave_0: left promiscuous mode [ 1373.140239][T28908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.928731][T28908] bond4 (unregistering): (slave vti0): Releasing backup interface [ 1373.946290][T28908] vti0 (unregistering): left promiscuous mode [ 1374.296312][T28908] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1374.644888][T28908] bond0 (unregistering): left promiscuous mode [ 1374.651513][T28908] bond_slave_0: left promiscuous mode [ 1374.657118][T28908] bond_slave_1: left promiscuous mode [ 1374.676761][T28908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.689682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.699164][T28908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.711251][T28908] bond0 (unregistering): Released all slaves [ 1374.723162][T28908] bond1 (unregistering): Released all slaves [ 1374.739871][T28908] bond2 (unregistering): Released all slaves [ 1374.756003][T28908] bond3 (unregistering): Released all slaves [ 1374.774292][T28908] bond4 (unregistering): Released all slaves [ 1374.792752][T28908] bond5 (unregistering): Released all slaves [ 1374.808025][T28908] bond6 (unregistering): Released all slaves [ 1374.835380][T14655] __nla_validate_parse: 4 callbacks suppressed [ 1374.835402][T14655] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1374.943813][T28908] : left promiscuous mode [ 1375.032980][T14694] netlink: 'syz.0.10964': attribute type 1 has an invalid length. [ 1375.134183][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10964'. [ 1375.163594][T14694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1375.212425][T28908] tipc: Disabling bearer [ 1375.236343][T28908] tipc: Left network mode [ 1375.254222][T14698] bond3: entered promiscuous mode [ 1375.291579][T14698] bond3: entered allmulticast mode [ 1375.409900][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1375.431538][T14711] netlink: 'syz.2.10968': attribute type 3 has an invalid length. [ 1375.439585][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1375.439615][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1375.500794][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1375.590665][T14718] tunl0: Caught tx_queue_len zero misconfig [ 1375.955196][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10976'. [ 1375.964545][T14740] nbd: illegal input index 38656 [ 1376.792788][T14768] lo speed is unknown, defaulting to 1000 [ 1377.237404][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1377.237404][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1377.903512][T14810] netlink: 'syz.4.10990': attribute type 1 has an invalid length. [ 1377.962023][T14810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1378.127119][T14820] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1378.167266][T14819] xt_TCPMSS: Only works on TCP SYN packets [ 1378.266383][T28908] IPVS: stop unused estimator thread 0... [ 1378.420296][T14838] FAULT_INJECTION: forcing a failure. [ 1378.420296][T14838] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.438921][T14838] CPU: 1 UID: 0 PID: 14838 Comm: syz.1.10996 Not tainted syzkaller #0 PREEMPT(full) [ 1378.438955][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1378.438970][T14838] Call Trace: [ 1378.438981][T14838] [ 1378.438991][T14838] dump_stack_lvl+0xe8/0x150 [ 1378.439031][T14838] should_fail_ex+0x412/0x560 [ 1378.439072][T14838] should_failslab+0xa8/0x100 [ 1378.439105][T14838] __kmalloc_noprof+0xe8/0x760 [ 1378.439131][T14838] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1378.439162][T14838] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1378.439198][T14838] ? tomoyo_path_number_perm+0x219/0x630 [ 1378.439228][T14838] tomoyo_path_number_perm+0x246/0x630 [ 1378.439262][T14838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1378.439299][T14838] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.439339][T14838] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1378.439385][T14838] ? __fget_files+0x2a/0x420 [ 1378.439421][T14838] ? __fget_files+0x2a/0x420 [ 1378.439451][T14838] ? __fget_files+0x3a0/0x420 [ 1378.439490][T14838] ? __fget_files+0x2a/0x420 [ 1378.439527][T14838] security_file_ioctl+0xc3/0x2a0 [ 1378.439558][T14838] __se_sys_ioctl+0x47/0x170 [ 1378.439589][T14838] do_syscall_64+0x14d/0xf80 [ 1378.439621][T14838] ? trace_irq_disable+0x3b/0x150 [ 1378.439641][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.439664][T14838] ? clear_bhb_loop+0x40/0x90 [ 1378.439692][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.439715][T14838] RIP: 0033:0x7f1b3bb9c799 [ 1378.439737][T14838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.439757][T14838] RSP: 002b:00007f1b3ca04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.439780][T14838] RAX: ffffffffffffffda RBX: 00007f1b3be15fa0 RCX: 00007f1b3bb9c799 [ 1378.439796][T14838] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1378.439811][T14838] RBP: 00007f1b3ca04090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.439824][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.439837][T14838] R13: 00007f1b3be16038 R14: 00007f1b3be15fa0 R15: 00007ffe7c254e98 [ 1378.439874][T14838] [ 1378.677439][T14840] netlink: 'syz.3.10998': attribute type 1 has an invalid length. [ 1378.688070][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10998'. [ 1378.698358][T14841] netlink: 'syz.3.10998': attribute type 3 has an invalid length. [ 1378.741524][T14838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1379.353292][T14872] netlink: 'syz.1.11008': attribute type 16 has an invalid length. [ 1379.642694][T14884] FAULT_INJECTION: forcing a failure. [ 1379.642694][T14884] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.656176][T14884] CPU: 1 UID: 0 PID: 14884 Comm: syz.0.11011 Not tainted syzkaller #0 PREEMPT(full) [ 1379.656207][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1379.656219][T14884] Call Trace: [ 1379.656228][T14884] [ 1379.656236][T14884] dump_stack_lvl+0xe8/0x150 [ 1379.656268][T14884] should_fail_ex+0x412/0x560 [ 1379.656310][T14884] should_failslab+0xa8/0x100 [ 1379.656336][T14884] __kmalloc_noprof+0xe8/0x760 [ 1379.656357][T14884] ? tomoyo_encode+0x28b/0x550 [ 1379.656380][T14884] tomoyo_encode+0x28b/0x550 [ 1379.656402][T14884] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1379.656429][T14884] ? tomoyo_path_number_perm+0x219/0x630 [ 1379.656457][T14884] tomoyo_path_number_perm+0x246/0x630 [ 1379.656484][T14884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1379.656512][T14884] ? __lock_acquire+0x6b5/0x2cf0 [ 1379.656546][T14884] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1379.656582][T14884] ? __fget_files+0x2a/0x420 [ 1379.656612][T14884] ? __fget_files+0x2a/0x420 [ 1379.656638][T14884] ? __fget_files+0x3a0/0x420 [ 1379.656663][T14884] ? __fget_files+0x2a/0x420 [ 1379.656696][T14884] security_file_ioctl+0xc3/0x2a0 [ 1379.656726][T14884] __se_sys_ioctl+0x47/0x170 [ 1379.656751][T14884] do_syscall_64+0x14d/0xf80 [ 1379.656777][T14884] ? trace_irq_disable+0x3b/0x150 [ 1379.656794][T14884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.656812][T14884] ? clear_bhb_loop+0x40/0x90 [ 1379.656835][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.656853][T14884] RIP: 0033:0x7f942b99c799 [ 1379.656871][T14884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.656886][T14884] RSP: 002b:00007f942c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.656906][T14884] RAX: ffffffffffffffda RBX: 00007f942bc15fa0 RCX: 00007f942b99c799 [ 1379.656920][T14884] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1379.656932][T14884] RBP: 00007f942c926090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.656962][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.656977][T14884] R13: 00007f942bc16038 R14: 00007f942bc15fa0 R15: 00007ffd434006c8 [ 1379.657006][T14884] [ 1379.657181][T14884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1379.730702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.985722][T14888] FAULT_INJECTION: forcing a failure. [ 1379.985722][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.002017][T14888] CPU: 0 UID: 0 PID: 14888 Comm: syz.0.11013 Not tainted syzkaller #0 PREEMPT(full) [ 1380.002047][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1380.002062][T14888] Call Trace: [ 1380.002071][T14888] [ 1380.002081][T14888] dump_stack_lvl+0xe8/0x150 [ 1380.002118][T14888] should_fail_ex+0x412/0x560 [ 1380.002157][T14888] should_failslab+0xa8/0x100 [ 1380.002189][T14888] __kmalloc_noprof+0xe8/0x760 [ 1380.002216][T14888] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1380.002247][T14888] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1380.002282][T14888] ? tomoyo_path_number_perm+0x219/0x630 [ 1380.002313][T14888] tomoyo_path_number_perm+0x246/0x630 [ 1380.002357][T14888] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1380.002392][T14888] ? sb_end_write+0xe9/0x1c0 [ 1380.002425][T14888] ? vfs_write+0x9bc/0xb90 [ 1380.002488][T14888] ? ksys_write+0x1fc/0x270 [ 1380.002522][T14888] security_file_ioctl+0xc3/0x2a0 [ 1380.002555][T14888] __se_sys_ioctl+0x47/0x170 [ 1380.002587][T14888] do_syscall_64+0x14d/0xf80 [ 1380.002621][T14888] ? trace_irq_disable+0x3b/0x150 [ 1380.002641][T14888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.002664][T14888] ? clear_bhb_loop+0x40/0x90 [ 1380.002693][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.002716][T14888] RIP: 0033:0x7f942b99c799 [ 1380.002737][T14888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.002758][T14888] RSP: 002b:00007f942c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.002781][T14888] RAX: ffffffffffffffda RBX: 00007f942bc15fa0 RCX: 00007f942b99c799 [ 1380.002798][T14888] RDX: 0000000000000000 RSI: 0000000000005201 RDI: 0000000000000004 [ 1380.002816][T14888] RBP: 00007f942c926090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.002830][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.002844][T14888] R13: 00007f942bc16038 R14: 00007f942bc15fa0 R15: 00007ffd434006c8 [ 1380.002881][T14888] [ 1380.002955][T14888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1380.235869][T14890] syzkaller1: entered promiscuous mode [ 1380.241638][T14890] syzkaller1: entered allmulticast mode [ 1380.588809][T14911] netlink: 'syz.3.11021': attribute type 1 has an invalid length. [ 1380.600239][T14911] __nla_validate_parse: 1 callbacks suppressed [ 1380.600260][T14911] netlink: 248 bytes leftover after parsing attributes in process `syz.3.11021'. [ 1380.690810][T14931] FAULT_INJECTION: forcing a failure. [ 1380.690810][T14931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.705679][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11019'. [ 1380.750873][T14931] CPU: 1 UID: 0 PID: 14931 Comm: syz.4.11022 Not tainted syzkaller #0 PREEMPT(full) [ 1380.750902][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1380.750916][T14931] Call Trace: [ 1380.750926][T14931] [ 1380.750935][T14931] dump_stack_lvl+0xe8/0x150 [ 1380.750973][T14931] should_fail_ex+0x412/0x560 [ 1380.751012][T14931] _copy_from_user+0x2d/0xb0 [ 1380.751040][T14931] get_user_ifreq+0x6b/0x180 [ 1380.751077][T14931] sock_ioctl+0x704/0x7f0 [ 1380.751114][T14931] ? __pfx_sock_ioctl+0x10/0x10 [ 1380.751148][T14931] ? __fget_files+0x3a0/0x420 [ 1380.751182][T14931] ? __fget_files+0x2a/0x420 [ 1380.751218][T14931] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1380.751249][T14931] ? __pfx_sock_ioctl+0x10/0x10 [ 1380.751291][T14931] __se_sys_ioctl+0xfc/0x170 [ 1380.751330][T14931] do_syscall_64+0x14d/0xf80 [ 1380.751364][T14931] ? trace_irq_disable+0x3b/0x150 [ 1380.751383][T14931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.751406][T14931] ? clear_bhb_loop+0x40/0x90 [ 1380.751434][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.751457][T14931] RIP: 0033:0x7f592c19c799 [ 1380.751478][T14931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.751498][T14931] RSP: 002b:00007f592cfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.751522][T14931] RAX: ffffffffffffffda RBX: 00007f592c415fa0 RCX: 00007f592c19c799 [ 1380.751539][T14931] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1380.751553][T14931] RBP: 00007f592cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.751567][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.751580][T14931] R13: 00007f592c416038 R14: 00007f592c415fa0 R15: 00007ffeb083ac08 [ 1380.751617][T14931] [ 1381.198068][T14949] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 1381.297893][T14951] lo speed is unknown, defaulting to 1000 [ 1381.545076][T14958] dvmrp3: entered allmulticast mode [ 1382.164787][T14977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1382.213441][T14984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11036'. [ 1382.448344][T14989] lo speed is unknown, defaulting to 1000 [ 1382.455194][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11037'. [ 1382.659008][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11042'. [ 1382.675621][T15001] syzkaller0: entered promiscuous mode [ 1382.681259][T15001] syzkaller0: entered allmulticast mode [ 1382.897396][T15010] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1382.906248][T15010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1383.280967][T15032] netlink: 'syz.2.11051': attribute type 2 has an invalid length. [ 1383.965696][T15058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11055'. [ 1384.221399][T15073] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11060'. [ 1384.303457][T15071] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11059'. [ 1384.314463][T15071] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1384.888854][T15092] netlink: 412 bytes leftover after parsing attributes in process `syz.0.11057'. [ 1385.096644][T15096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11067'. [ 1385.489645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.502529][ T1697] block nbd0: Possible stuck request ffff88803ef08000: control (read@0,1024B). Runtime 120 seconds [ 1385.515634][ T1697] block nbd0: Possible stuck request ffff88803ef08200: control (read@1024,1024B). Runtime 120 seconds [ 1385.527402][ T1697] block nbd0: Possible stuck request ffff88803ef08400: control (read@2048,1024B). Runtime 120 seconds [ 1385.539104][ T1697] block nbd0: Possible stuck request ffff88803ef08600: control (read@3072,1024B). Runtime 120 seconds [ 1385.824662][T15118] IPv6: sit3: Disabled Multicast RS [ 1387.101396][T15065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1387.303074][T15138] x_tables: duplicate underflow at hook 1 [ 1387.335730][T15141] lo speed is unknown, defaulting to 1000 [ 1387.447994][T15146] __nla_validate_parse: 1 callbacks suppressed [ 1387.448018][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1387.595903][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11084'. [ 1387.810396][T15163] netlink: 'syz.2.11086': attribute type 7 has an invalid length. [ 1387.835965][T15164] netlink: 'syz.2.11086': attribute type 7 has an invalid length. [ 1387.870741][T15163] netlink: 'syz.2.11086': attribute type 7 has an invalid length. [ 1387.870851][T28916] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.889911][T15164] netlink: 'syz.2.11086': attribute type 7 has an invalid length. [ 1387.907266][T28916] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.931574][T28916] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.944888][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1387.954043][T15141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1387.970864][T28916] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.999997][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1388.009037][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1388.068490][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1388.129938][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1388.149765][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11078'. [ 1388.172360][T15144] lo speed is unknown, defaulting to 1000 [ 1388.255751][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11094'. [ 1388.270686][T15182] xt_TCPMSS: Only works on TCP SYN packets [ 1388.746225][T15198] bond4: entered allmulticast mode [ 1388.762146][T15198] macvlan0: entered promiscuous mode [ 1388.767507][T15198] macvlan0: entered allmulticast mode [ 1388.778298][T15198] bond4: entered promiscuous mode [ 1388.785082][T15198] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1388.820806][T15198] bond4: left promiscuous mode [ 1388.943955][T15195] pim6reg: left allmulticast mode [ 1389.809798][T15240] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1390.364057][T15273] tap0: tun_chr_ioctl cmd 1074025681 [ 1390.379621][T15274] tap0: tun_chr_ioctl cmd 1074025681 [ 1390.529522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.052005][T15304] sock: sock_timestamping_bind_phc: sock not bind to device [ 1391.258774][T15325] netlink: 'syz.3.11137': attribute type 1 has an invalid length. [ 1392.115801][T15376] FAULT_INJECTION: forcing a failure. [ 1392.115801][T15376] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.128757][T15376] CPU: 1 UID: 0 PID: 15376 Comm: syz.0.11151 Not tainted syzkaller #0 PREEMPT(full) [ 1392.128787][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1392.128803][T15376] Call Trace: [ 1392.128813][T15376] [ 1392.128823][T15376] dump_stack_lvl+0xe8/0x150 [ 1392.128861][T15376] should_fail_ex+0x412/0x560 [ 1392.128901][T15376] should_failslab+0xa8/0x100 [ 1392.128934][T15376] __kvmalloc_node_noprof+0x178/0x8a0 [ 1392.128963][T15376] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 1392.129007][T15376] alloc_netdev_mqs+0x8a6/0x11b0 [ 1392.129047][T15376] vti6_locate+0x5d4/0x780 [ 1392.129200][T15376] ? __pfx_vti6_locate+0x10/0x10 [ 1392.129237][T15376] ? vti6_siocdevprivate+0x575/0x7a0 [ 1392.129277][T15376] vti6_siocdevprivate+0x5a3/0x7a0 [ 1392.129318][T15376] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 1392.129374][T15376] ? full_name_hash+0xb0/0xe0 [ 1392.129415][T15376] dev_ifsioc+0xba6/0x1280 [ 1392.129484][T15376] dev_ioctl+0x84c/0x1150 [ 1392.129515][T15376] sock_ioctl+0x75f/0x7f0 [ 1392.129558][T15376] ? __pfx_sock_ioctl+0x10/0x10 [ 1392.129594][T15376] ? __fget_files+0x3a0/0x420 [ 1392.129627][T15376] ? __fget_files+0x2a/0x420 [ 1392.129665][T15376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1392.129695][T15376] ? __pfx_sock_ioctl+0x10/0x10 [ 1392.129728][T15376] __se_sys_ioctl+0xfc/0x170 [ 1392.129758][T15376] do_syscall_64+0x14d/0xf80 [ 1392.129791][T15376] ? trace_irq_disable+0x3b/0x150 [ 1392.129811][T15376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.129835][T15376] ? clear_bhb_loop+0x40/0x90 [ 1392.129862][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.129886][T15376] RIP: 0033:0x7f942b99c799 [ 1392.129907][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.129926][T15376] RSP: 002b:00007f942c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.129950][T15376] RAX: ffffffffffffffda RBX: 00007f942bc15fa0 RCX: 00007f942b99c799 [ 1392.129967][T15376] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1392.129981][T15376] RBP: 00007f942c926090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.129995][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.130009][T15376] R13: 00007f942bc16038 R14: 00007f942bc15fa0 R15: 00007ffd434006c8 [ 1392.130045][T15376] [ 1392.364098][T15380] netlink: 'syz.1.11150': attribute type 2 has an invalid length. [ 1392.383531][T15380] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1392.772243][T15406] __nla_validate_parse: 15 callbacks suppressed [ 1392.772266][T15406] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11152'. [ 1393.024032][T15412] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11160'. [ 1393.080560][T15415] gre0: entered promiscuous mode [ 1393.090093][T15415] gre0: entered allmulticast mode [ 1393.302813][T15424] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1393.698319][T15445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11173'. [ 1393.718567][T15445] netem: unknown loss type 4 [ 1393.723863][T15445] netem: change failed [ 1393.795759][T15449] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11174'. [ 1394.127459][T15460] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11176'. [ 1394.655709][T15484] pim6reg: entered allmulticast mode [ 1394.695979][T15484] pim6reg: left allmulticast mode [ 1394.737498][T15487] lo speed is unknown, defaulting to 1000 [ 1394.797287][T15493] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11183'. [ 1395.019847][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11183'. [ 1395.078845][T15493] lo speed is unknown, defaulting to 1000 [ 1395.139201][T15500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.657284][T15513] syzkaller0: entered promiscuous mode [ 1395.673256][T15513] syzkaller0: entered allmulticast mode [ 1395.812773][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11193'. [ 1395.851775][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11193'. [ 1396.082283][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11196'. [ 1396.778289][T15572] netlink: 'syz.4.11209': attribute type 1 has an invalid length. [ 1396.824434][T15574] tap0: tun_chr_ioctl cmd 35111 [ 1396.845901][T15578] tap0: tun_chr_ioctl cmd 1074025673 [ 1396.885404][T15581] netlink: 'syz.3.11212': attribute type 1 has an invalid length. [ 1397.231497][T15601] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1398.193396][T15634] __nla_validate_parse: 3 callbacks suppressed [ 1398.193418][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11225'. [ 1398.253228][T15641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11225'. [ 1399.933451][T15637] lo speed is unknown, defaulting to 1000 [ 1399.958997][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11226'. [ 1399.975382][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11227'. [ 1400.044684][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11228'. [ 1400.422792][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11231'. [ 1400.464311][T15667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1400.618536][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1400.630706][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1400.641105][T15680] netlink: 'syz.1.11236': attribute type 6 has an invalid length. [ 1400.650432][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1400.661486][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1400.671534][T15680] netlink: 'syz.1.11236': attribute type 6 has an invalid length. [ 1403.108928][T15665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1403.150081][T15731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.593110][T15758] lo speed is unknown, defaulting to 1000 [ 1403.863950][T15778] __nla_validate_parse: 1 callbacks suppressed [ 1403.863973][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11266'. [ 1403.869279][T15772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11265'. [ 1403.877859][T15778] netlink: 'syz.2.11266': attribute type 1 has an invalid length. [ 1404.005420][T15786] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1404.099998][T15795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1404.175219][T15786] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1404.556737][T15811] lo speed is unknown, defaulting to 1000 [ 1404.580670][T15814] sit0: entered promiscuous mode [ 1404.585975][T15814] netlink: 'syz.2.11277': attribute type 1 has an invalid length. [ 1404.604654][T15814] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1404.625965][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11279'. [ 1404.741868][T15821] mac80211_hwsim hwsim116 wlan1: Master is either lo or non-ether device [ 1404.787551][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11280'. [ 1405.267250][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11290'. [ 1406.013977][T15869] netlink: 'syz.3.11295': attribute type 1 has an invalid length. [ 1406.075115][T15869] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1406.089859][T15869] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1406.120454][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11295'. [ 1406.173288][T15873] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 1406.194545][T15873] macvlan0: entered promiscuous mode [ 1406.200073][T15873] macvlan0: entered allmulticast mode [ 1406.207561][T15873] bond8: entered promiscuous mode [ 1406.213709][T15873] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1406.403700][T15873] bond8: left promiscuous mode [ 1406.617363][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11300'. [ 1406.626992][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11300'. [ 1406.892932][T15907] 8021q: VLANs not supported on ip_vti0 [ 1407.534561][T15934] gre0: entered promiscuous mode [ 1407.549816][T15934] gre0: entered allmulticast mode [ 1407.840691][T15949] vlan0: entered promiscuous mode [ 1407.845806][T15949] bridge0: entered promiscuous mode [ 1407.883416][T15948] netlink: 'syz.4.11320': attribute type 1 has an invalid length. [ 1407.954703][T15948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1408.089259][T15956] bond6: (slave gretap1): making interface the new active one [ 1408.108181][T15956] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1408.147547][T15961] macsec0: entered promiscuous mode [ 1408.196453][T15964] macsec0: left promiscuous mode [ 1408.204290][T15954] lo speed is unknown, defaulting to 1000 [ 1408.422186][T15970] lo speed is unknown, defaulting to 1000 [ 1408.823566][T15999] netlink: 'syz.3.11332': attribute type 3 has an invalid length. [ 1408.831763][T15999] netlink: 'syz.3.11332': attribute type 1 has an invalid length. [ 1408.839847][T15999] NCSI netlink: No device for ifindex 813332851 [ 1409.142889][T16013] __nla_validate_parse: 8 callbacks suppressed [ 1409.142914][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1409.188980][T16008] tls: option downdelay: invalid value (18446744073709547007) [ 1409.196907][T16008] tls: option downdelay: allowed values 0 - 2147483647 [ 1409.231313][T16008] tls (unregistering): Released all slaves [ 1409.274404][T16022] SET target dimension over the limit! [ 1409.334578][T16015] hsr0: entered promiscuous mode [ 1409.536407][T16014] hsr0: left promiscuous mode [ 1409.685450][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1409.723121][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1409.735841][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11345'. [ 1409.756859][T16044] ip6gre3: entered promiscuous mode [ 1409.784131][T16044] ip6gre3: entered allmulticast mode [ 1409.841469][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1409.932920][T16050] lo speed is unknown, defaulting to 1000 [ 1410.387376][T16065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1410.484602][T16066] netlink: 277 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1410.721921][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1411.054733][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11358'. [ 1411.064575][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11358'. [ 1411.351713][T30264] IPVS: starting estimator thread 0... [ 1411.472084][T16110] IPVS: using max 30 ests per chain, 72000 per kthread [ 1411.593441][T16120] ip6gretap0: entered promiscuous mode [ 1411.612265][T16120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.630297][T16120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1411.652978][T16125] netlink: 'syz.1.11369': attribute type 1 has an invalid length. [ 1411.772855][T16136] netlink: 'syz.4.11371': attribute type 11 has an invalid length. [ 1411.785594][T16136] netlink: 'syz.4.11371': attribute type 23 has an invalid length. [ 1411.903580][T16142] gretap2: entered promiscuous mode [ 1412.086948][T16152] netlink: 'syz.3.11374': attribute type 1 has an invalid length. [ 1412.466819][T16175] vlan0: entered promiscuous mode [ 1412.906151][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.913231][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.920182][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.927086][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.934044][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.941015][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.947955][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.954908][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.961844][T16190] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1413.097798][T16201] netlink: 'syz.2.11388': attribute type 10 has an invalid length. [ 1414.219285][T16243] __nla_validate_parse: 16 callbacks suppressed [ 1414.225786][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11394'. [ 1415.575449][ T1697] block nbd0: Possible stuck request ffff88803ef08000: control (read@0,1024B). Runtime 150 seconds [ 1415.586311][ T1697] block nbd0: Possible stuck request ffff88803ef08200: control (read@1024,1024B). Runtime 150 seconds [ 1415.597396][ T1697] block nbd0: Possible stuck request ffff88803ef08400: control (read@2048,1024B). Runtime 150 seconds [ 1415.608434][ T1697] block nbd0: Possible stuck request ffff88803ef08600: control (read@3072,1024B). Runtime 150 seconds [ 1416.004038][T16236] ip6tnl1: entered allmulticast mode [ 1416.235210][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11400'. [ 1416.264606][T16254] bond7: option updelay: invalid value (18446744072924056005) [ 1416.286390][T16254] bond7: option updelay: allowed values 0 - 2147483647 [ 1416.296594][T16254] bond7 (unregistering): Released all slaves [ 1416.323039][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11402'. [ 1416.428831][T16260] lo speed is unknown, defaulting to 1000 [ 1416.495319][T16266] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 1416.658063][T16279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11407'. [ 1416.955677][T16295] sctp: [Deprecated]: syz.4.11411 (pid 16295) Use of int in max_burst socket option. [ 1416.955677][T16295] Use struct sctp_assoc_value instead [ 1417.038761][T16301] geneve4: entered promiscuous mode [ 1417.052692][ T9385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.084857][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11415'. [ 1417.086771][ T9385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.114656][T16309] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11415'. [ 1417.147578][ T9385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.165173][ T9385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.284478][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11417'. [ 1417.334716][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11417'. [ 1417.448277][T16323] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11418'. [ 1417.811330][T16332] net_ratelimit: 2808 callbacks suppressed [ 1417.811352][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.825633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.834107][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.844514][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.852973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.861442][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.870303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.879484][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.887860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.896396][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.355161][T16334] ip6tnl0: Caught tx_queue_len zero misconfig [ 1418.382280][T16335] lo speed is unknown, defaulting to 1000 [ 1419.027538][T16371] netlink: 'syz.4.11434': attribute type 39 has an invalid length. [ 1419.486511][T16394] xt_TCPMSS: Only works on TCP SYN packets [ 1420.125429][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11443'. [ 1420.410797][T16420] tipc: Enabled bearer , priority 0 [ 1420.463105][T16420] mac80211_hwsim hwsim123 syzkaller0: entered promiscuous mode [ 1420.480694][T16424] x_tables: duplicate underflow at hook 1 [ 1420.491792][T16420] mac80211_hwsim hwsim123 syzkaller0: entered allmulticast mode [ 1420.527967][T16420] tipc: Resetting bearer [ 1420.632381][T16420] tipc: Resetting bearer [ 1420.789519][T16431] xt_TCPMSS: Only works on TCP SYN packets [ 1420.852808][T16435] block nbd0: reconnected socket [ 1420.857999][T16435] nbd: socks must be embedded in a SOCK_ITEM attr [ 1420.921461][ T5829] block nbd0: Receive control failed (result -32) [ 1421.017008][T16413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1421.026191][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1421.469443][T32132] tipc: Node number set to 3549018461 [ 1421.668806][T16465] syzkaller1: entered promiscuous mode [ 1421.674607][T16465] syzkaller1: entered allmulticast mode [ 1422.363039][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11467'. [ 1422.433268][T16498] vlan3: entered promiscuous mode [ 1422.438370][T16498] gretap0: entered promiscuous mode [ 1422.777872][T16518] sctp: [Deprecated]: syz.0.11475 (pid 16518) Use of int in maxseg socket option. [ 1422.777872][T16518] Use struct sctp_assoc_value instead [ 1423.017921][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1423.256879][ T1301] net_ratelimit: 98 callbacks suppressed [ 1423.256901][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.274855][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.283632][ T1301] aoe: packet could not be sent on bridge1. consider increasing tx_queue_len [ 1423.591807][T16550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11479'. [ 1423.626923][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11479'. [ 1423.998809][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1424.058275][T16561] syzkaller0: entered promiscuous mode [ 1424.067226][T16561] syzkaller0: entered allmulticast mode [ 1424.078656][T16564] 8021q: VLANs not supported on 60ªX¹¦À [ 1424.095304][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11484'. [ 1424.141676][T16570] syzkaller0: entered promiscuous mode [ 1424.147410][T16570] syzkaller0: entered allmulticast mode [ 1425.724891][T16589] netlink: 'syz.1.11491': attribute type 3 has an invalid length. [ 1426.711607][T16591] bridge0: port 1(macvlan0) entered blocking state [ 1426.718385][T16591] bridge0: port 1(macvlan0) entered disabled state [ 1426.742631][T16591] macvlan0: entered allmulticast mode [ 1426.748086][T16591] bridge0: entered allmulticast mode [ 1426.763327][T16591] macvlan0: left allmulticast mode [ 1426.768640][T16591] bridge0: left allmulticast mode [ 1427.359571][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11504'. [ 1427.449209][T16622] lo speed is unknown, defaulting to 1000 [ 1427.520367][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1427.539840][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1427.561627][T16631] netlink: 'syz.1.11503': attribute type 18 has an invalid length. [ 1427.676102][T16641] xt_bpf: check failed: parse error [ 1427.899668][T16649] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1427.940350][T16654] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 1428.022778][T16644] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1428.222201][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11517'. [ 1428.414468][T16674] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11520'. [ 1428.488590][T16674] macsec2: entered allmulticast mode [ 1428.494916][T16674] macsec0: entered allmulticast mode [ 1428.500480][T16674] veth1_macvtap: entered allmulticast mode [ 1428.600157][T28908] vlan2: left allmulticast mode [ 1428.605089][T28908] bond0: left allmulticast mode [ 1428.619712][T28908] vlan2: left promiscuous mode [ 1428.629694][T28908] bond0: left promiscuous mode [ 1428.639575][T28908] bridge0: port 1(vlan2) entered disabled state [ 1428.733779][T16689] [ 1428.736184][T16689] ====================================================== [ 1428.743411][T16689] WARNING: possible circular locking dependency detected [ 1428.750556][T16689] syzkaller #0 Not tainted [ 1428.755034][T16689] ------------------------------------------------------ [ 1428.762093][T16689] syz.3.11524/16689 is trying to acquire lock: [ 1428.768565][T16689] ffffffff8fd45638 (nr_neigh_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1428.777892][T16689] [ 1428.777892][T16689] but task is already holding lock: [ 1428.785295][T16689] ffff8880363a0870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1428.794585][T16689] [ 1428.794585][T16689] which lock already depends on the new lock. [ 1428.794585][T16689] [ 1428.805047][T16689] [ 1428.805047][T16689] the existing dependency chain (in reverse order) is: [ 1428.814113][T16689] [ 1428.814113][T16689] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1428.822245][T16689] _raw_spin_lock_bh+0x36/0x50 [ 1428.827562][T16689] nr_rt_ioctl+0x215/0xf90 [ 1428.832516][T16689] sock_do_ioctl+0x101/0x320 [ 1428.837740][T16689] sock_ioctl+0x5c6/0x7f0 [ 1428.842611][T16689] __se_sys_ioctl+0xfc/0x170 [ 1428.847747][T16689] do_syscall_64+0x14d/0xf80 [ 1428.852888][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.859332][T16689] [ 1428.859332][T16689] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1428.867198][T16689] _raw_spin_lock_bh+0x36/0x50 [ 1428.872536][T16689] nr_rt_device_down+0xbe/0x860 [ 1428.877973][T16689] nr_device_event+0x137/0x150 [ 1428.883287][T16689] notifier_call_chain+0x1be/0x400 [ 1428.889000][T16689] __dev_notify_flags+0x16d/0x310 [ 1428.894581][T16689] netif_change_flags+0xe8/0x1a0 [ 1428.900072][T16689] dev_change_flags+0x130/0x260 [ 1428.905497][T16689] dev_ioctl+0x7b4/0x1150 [ 1428.910385][T16689] sock_do_ioctl+0x23e/0x320 [ 1428.915551][T16689] sock_ioctl+0x5c6/0x7f0 [ 1428.920447][T16689] __se_sys_ioctl+0xfc/0x170 [ 1428.925594][T16689] do_syscall_64+0x14d/0xf80 [ 1428.930738][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.937184][T16689] [ 1428.937184][T16689] -> #0 (nr_neigh_list_lock){+.-.}-{3:3}: [ 1428.945121][T16689] __lock_acquire+0x15a5/0x2cf0 [ 1428.950532][T16689] lock_acquire+0xf0/0x2e0 [ 1428.955491][T16689] _raw_spin_lock_bh+0x36/0x50 [ 1428.960802][T16689] nr_rt_ioctl+0x40c/0xf90 [ 1428.965844][T16689] sock_do_ioctl+0x101/0x320 [ 1428.970977][T16689] sock_ioctl+0x5c6/0x7f0 [ 1428.975851][T16689] __se_sys_ioctl+0xfc/0x170 [ 1428.981071][T16689] do_syscall_64+0x14d/0xf80 [ 1428.986209][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.992660][T16689] [ 1428.992660][T16689] other info that might help us debug this: [ 1428.992660][T16689] [ 1429.002902][T16689] Chain exists of: [ 1429.002902][T16689] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1429.002902][T16689] [ 1429.016761][T16689] Possible unsafe locking scenario: [ 1429.016761][T16689] [ 1429.024264][T16689] CPU0 CPU1 [ 1429.029646][T16689] ---- ---- [ 1429.035025][T16689] lock(&nr_node->node_lock); [ 1429.039813][T16689] lock(nr_node_list_lock); [ 1429.046946][T16689] lock(&nr_node->node_lock); [ 1429.054249][T16689] lock(nr_neigh_list_lock); [ 1429.058946][T16689] [ 1429.058946][T16689] *** DEADLOCK *** [ 1429.058946][T16689] [ 1429.067099][T16689] 2 locks held by syz.3.11524/16689: [ 1429.072401][T16689] #0: ffffffff8fd45698 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1429.081932][T16689] #1: ffff8880363a0870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1429.091638][T16689] [ 1429.091638][T16689] stack backtrace: [ 1429.097561][T16689] CPU: 1 UID: 0 PID: 16689 Comm: syz.3.11524 Not tainted syzkaller #0 PREEMPT(full) [ 1429.097584][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.097597][T16689] Call Trace: [ 1429.097607][T16689] [ 1429.097617][T16689] dump_stack_lvl+0xe8/0x150 [ 1429.097649][T16689] print_circular_bug+0x2e1/0x300 [ 1429.097681][T16689] check_noncircular+0x12e/0x150 [ 1429.097713][T16689] __lock_acquire+0x15a5/0x2cf0 [ 1429.097739][T16689] ? kasan_save_track+0x4f/0x80 [ 1429.097771][T16689] lock_acquire+0xf0/0x2e0 [ 1429.097800][T16689] ? nr_rt_ioctl+0x40c/0xf90 [ 1429.097826][T16689] ? nr_rt_ioctl+0x40c/0xf90 [ 1429.097846][T16689] _raw_spin_lock_bh+0x36/0x50 [ 1429.097870][T16689] ? nr_rt_ioctl+0x40c/0xf90 [ 1429.097890][T16689] nr_rt_ioctl+0x40c/0xf90 [ 1429.097917][T16689] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1429.097948][T16689] ? apparmor_capable+0x126/0x170 [ 1429.097975][T16689] ? capable+0x88/0xe0 [ 1429.098001][T16689] ? nr_ioctl+0x1b1/0x3b0 [ 1429.098020][T16689] sock_do_ioctl+0x101/0x320 [ 1429.098050][T16689] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1429.098075][T16689] ? do_futex+0x395/0x420 [ 1429.098106][T16689] sock_ioctl+0x5c6/0x7f0 [ 1429.098133][T16689] ? __pfx_sock_ioctl+0x10/0x10 [ 1429.098160][T16689] ? __fget_files+0x2a/0x420 [ 1429.098186][T16689] ? __fget_files+0x3a0/0x420 [ 1429.098212][T16689] ? __fget_files+0x2a/0x420 [ 1429.098240][T16689] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1429.098263][T16689] ? __pfx_sock_ioctl+0x10/0x10 [ 1429.098289][T16689] __se_sys_ioctl+0xfc/0x170 [ 1429.098311][T16689] do_syscall_64+0x14d/0xf80 [ 1429.098339][T16689] ? trace_irq_disable+0x3b/0x150 [ 1429.098355][T16689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.098373][T16689] ? clear_bhb_loop+0x40/0x90 [ 1429.098393][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.098412][T16689] RIP: 0033:0x7fecca99c799 [ 1429.098430][T16689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.098450][T16689] RSP: 002b:00007feccb784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.098470][T16689] RAX: ffffffffffffffda RBX: 00007feccac15fa0 RCX: 00007fecca99c799 [ 1429.098484][T16689] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1429.098495][T16689] RBP: 00007feccaa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1429.098507][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.098518][T16689] R13: 00007feccac16038 R14: 00007feccac15fa0 R15: 00007fff9a38b448 [ 1429.098541][T16689] [ 1429.457650][T28908] batman_adv: batadv0: Removing interface: gretap2 [ 1429.494834][T28908] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1429.822581][T28908] bond10 (unregistering): (slave bridge7): Releasing active interface [ 1429.864310][T28908] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.874162][T28908] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.883329][T28908] .` (unregistering): Released all slaves [ 1429.892377][T28908] bond1 (unregistering): Released all slaves [ 1429.904479][T28908] bond2 (unregistering): Released all slaves [ 1429.915340][T28908] bond3 (unregistering): Released all slaves [ 1429.926331][T28908] bond4 (unregistering): Released all slaves [ 1429.938410][T28908] bond5 (unregistering): Released all slaves [ 1429.955307][T28908] bond6 (unregistering): Released all slaves [ 1429.977258][T28908] bond0 (unregistering): Released all slaves [ 1429.987183][T28908] bond7 (unregistering): Released all slaves [ 1429.999486][T28908] bond8 (unregistering): Released all slaves [ 1430.011418][T28908] bond9 (unregistering): Released all slaves [ 1430.021655][T28908] bond10 (unregistering): Released all slaves [ 1430.033721][T28908] bond11 (unregistering): Released all slaves [ 1430.043765][T28908] bond12 (unregistering): Released all slaves [ 1430.176745][T16687] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1430.177195][T28908] tipc: Left network mode [ 1430.815734][T28908] hsr_slave_0: left promiscuous mode [ 1430.822083][T28908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.831469][T28908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.839631][T28908] pim6reg (unregistering): left allmulticast mode [ 1431.195494][T28908] IPVS: stop unused estimator thread 0...