last executing test programs: 18.58341028s ago: executing program 3 (id=6260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202889fffe8000000000000000000000000000aaff020000000000000000000000110001"], 0xfdef) 17.832478842s ago: executing program 3 (id=6262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000000100)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000000000000000c82e60ab3a03838c846c3a3835a00000000000000000636382f13a3a63295ee94919ea900f20c1904430a44200947adbf734b856a441db3c64d68e1eb7c128c453bb946c6a6ba22aa5e6b8bb0101000000000000556b9244cc5b60d7040858fd6ff03d34dd3fb473393c4366bea405c2114c334b735baa7c835c74c0d29e72ac1a64", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="b42d5567db16") bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x2, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r6, &(0x7f0000000540)=""/32, 0x20, 0x6667b9fe4a4fda2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x20) getsockname(r7, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 17.769970469s ago: executing program 3 (id=6263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140020001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 17.702868814s ago: executing program 3 (id=6264): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xe82, 0x3, 0x2}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000180)=0x40) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x10000}, &(0x7f0000000200)=0x8) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000240)=@generic={0x14, "0429ec6304407c890f454b51220bd46ac9fcfe02b5099edec50ec020ac7f67aeb3d30810d5eca87ab492bba3ce0a44c391a1bdb3d6fbbb0736f47b71ad54629f47c30e760329ca1a207666b3298b7d8cc5efac4f877685cd1bdd420688eda495d2abe37bec73bb86da3b0a1d1ca039001ffb6ea0097754d08d94cfe00004"}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="2cf3fbbd573464f0e737d462f7c317f2eb4b900dc093bda635e9f27bbe7ee346ac1aaa1c6f12a4d0d8818127e0beae5740226de47bbffd5e9f70a4b0322cfc6a66d3e3e4f4aa550c165dc1980f7685da1682ce01cde80a5a5f0ed31ac6", 0x5d}], 0x1, &(0x7f0000000380)=[{0x68, 0x114, 0x4, "84ce52be99083b637aad57417262a32cfbd187208592b05d2c43fcbeb9e382eb7af570d03f386d926010499415b41ef718f23ea991cc1f9f742791d112d0c871d1e9d4d5958be14561cf831914f10a3f736e5fbf"}, {0xb8, 0x29, 0x400, "91ba100dda32d9b81e2fc72a8979c1b4d79f683ab37cf3bbe488f9a1a6ff5dcfdf8f8b3487922f76de7d6e1f0ff740c802cb8a9874e9cbcdfe67966241fd9d68b66d8a80e26e3c41ac1479429624193a8a517db049b90dd4812c77dd7d9899455e256dda67df6bb29784eac086371d3c79025e34b0fd62111f92d22432ac816bea8b4a3b617b7f582c516fa9e54f327207f65173c132fd28c01c4961b67a1512c86b7614108ad145"}, {0xb8, 0x1, 0x7, "96bbd2c04d90cc64b3107e5aad5f045d0be20eb62235d04e74079ab337591814fee0a1e0ee0c52fb7a37095ee14ff3c213a1304e0f57048cf208c22cd88634104340edbb0812aed14d1bfd06efc9435466ad9ec18ae80cb2956f7082a28c6a89be3af93e371935a73f0c75db9ccc8942696538b532fd59c34d0862c7abdc378d425e3d98671b1f593200dab2c54a0cc55c2c5527bfc689069e8bdeb2aaf2ca56b4"}, {0x60, 0x110, 0xffffffff, "a4b717176c5c9840835a4f485420832086eaf3f818bee2cbdf6e1e5f26caa354bd7579225aa35006d966ef1f67f413ac8517f83f70998e6e7a158485d39acd8606d5feb96966ac7d8d3680b006"}, {0xd0, 0x112, 0x1, "a57b6229c21d296acbb1caca60451213e3bb744724b16f1dcb510f3689074d748a0619c5f9c913b111f9f1288b84bbb862bd0d20e38591686db46ab930c73e641b7d881c3a52f30a805d5487cfdd48281e83bf0613bf7da132ea9aca74eb404f1fb72b08704f53f26e1c81db5afe7267d0982a7e3c55c193d2b5bfc7ebfb315855a624ea9460d82a387dc60b63d8ea1eddc9eaa37347f2e5f139b96c85be07e933f56e99ded34f295b3cacdb638f8067129095d3f1be696aff254420"}], 0x308}}, {{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x1, 0xffff, 0x3}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000740)="ae02227381ffbaad5d2d9ea231c22dfb615038c66f3d004ce9485447a644b429ff10437425024d476c575ef089b5dc5972eb83cccdb657896fdf18462318ef429c4cb6b8e123da57819affa77b3520e1ce4152", 0x53}, {&(0x7f00000007c0)="2c0176cc9c23ad6affeb42a29d95b9ebe77317911a2a013748a6ad82a26284f0059f0f0a038b4b873080bbfbdf61732393a4b545b3a2e3c677d2681c4a41af5a3317f3568cb1b06d8e094b5093f3308c9a37be714de1ae358d1f1a247f92d240a704094e56f1b6c5c66b165dcdb7814738d4e0669905378867ae858a801b4eaee8595b53b5ff5a8a8d59d46518120879038fdd1821e254781ce52c67be0335a70bdf8830130f8346b9a7ef067b513bdbe1c37e70664658bf286fbf0b9b63f7db4e03027eb0bf281bb62613203304a5dd5b6072b3eb", 0xd5}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="a1322a790194b1edd2b2c5f051873bf4473fe91d1a58c9363892743afe3155296fe078563b94da970c25e8126079d243f8daacaede8dd2d743fa2aae7b66402406c60b8796bc328006fe25215c4a1704996f911c1ed3e95f5d15071e5b33a9ec4565cd0fc8dddd0e8c171754d3635ef680dc6dbf", 0x74}, {&(0x7f0000002940)="8016f1700ed1315ece535d00b75aee0080dc11108f920123e8719b4307ae360b0dfa7d328ba2ce9df11b34781f8556e0118d2f7ea10c8ba07ed70105a8b725a831a422bb87ca60b0a98541613b78e2010ce194d2cfe8a0177675fbfc06815a15ea8317388418ab7a27436643f9c45a30", 0x70}], 0x6, &(0x7f0000002a40)=[{0x50, 0x1, 0x8, "528eb5be17e808799130cd75f727f9daba15ca04d7d96534d4162c4d8d15040fe8c784321d709e2dc5eb1cf05c0dfb364b189b1ef934e0cc3440a921da"}, {0x80, 0x85, 0xf, "344736fc61460daff874b9eed261384c44166256e4ef95ad63621ea6d4b704172e7a1da8be2e381feb5113f75d3eb0cbd72947de8c3c62e62e4c2bb5a1fb55ff86b606852cdcc8b07a14e78c733d0fbe6cdebf574e11f8c828c45a04c4c9573ad3c6db29c1fafd0907f2"}], 0xd0}}], 0x2, 0x20000000) syz_emit_ethernet(0x1e, &(0x7f0000002bc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "c256f3e0173db1b5"}}}}, &(0x7f0000002c00)={0x0, 0x1, [0x46e, 0x2aa, 0xdb8, 0x85a]}) syz_emit_ethernet(0xdc, &(0x7f0000002c40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x2c, 0x4, 0x2, 0x5, 0xc6, 0x66, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@generic={0x44, 0x3, 'N'}, @timestamp={0x44, 0x2c, 0x76, 0x0, 0x2, [0x1, 0x4, 0xb, 0x2, 0x2, 0x7, 0x35f, 0x6, 0x401, 0x34c]}, @timestamp={0x44, 0x18, 0x34, 0x0, 0x1, [0xa7, 0xfffffffc, 0x0, 0x3, 0x9]}, @timestamp={0x44, 0x10, 0x81, 0x0, 0x0, [0x6, 0x6, 0x7]}, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x8, [{@loopback, 0xae3a}, {@rand_addr=0x64010100, 0x76c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2a82}, {@loopback, 0xfffffffa}]}, @lsrr={0x83, 0x1f, 0xe9, [@local, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x2, "aaed48", 0x7, "239e44"}, "2a10b25a1481"}}}}}, &(0x7f0000002d40)={0x1, 0x1, [0xd74, 0x32b, 0x5d3, 0x44e]}) unshare(0x8000100) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002dc0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002e00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002ec0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000002f80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x885}, 0x40) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000002fc0)={r1, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84) pipe(&(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000030c0)={'tunl0\x00'}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_extract_tcp_res$synack(&(0x7f0000003100), 0x1, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ADD_DEV(r11, 0x5000940a, &(0x7f0000003140)={{r0}, "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"}) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000004140)=@assoc_value={r1, 0x3}, &(0x7f0000004180)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(r0, &(0x7f00000041c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000004200)) sendmsg$NFT_BATCH(r12, &(0x7f0000004580)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004540)={&(0x7f0000004280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0xe01, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x702, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}, @NFT_MSG_NEWFLOWTABLE={0xec, 0x16, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x60, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffeff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8f3b}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000}, 0x2000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000045c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000004640)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20000844}, 0x1) 17.603583818s ago: executing program 3 (id=6265): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d04000000000000000000001004000000040000000000000d030000000000000061"], 0x0, 0x52}, 0x28) 17.572141519s ago: executing program 3 (id=6266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$alg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b77b83b03b3326ba7054e90019cb767c64fa0441f8fa0885e50320b495302543c6eee3484cd019a24e1ce0f85e194ca069cee5673396b15a821aa602bd67668dcc291bb8124fb7349e8b5bdb39fac1925f04b33be1e567161ddd9c594cd4e107994e7524368aa7d00b01", 0x6a}, {&(0x7f00000000c0)="8af029258d080dfd1d09fa51afd87a5c8502c3e51c9d871d5ed1b08157d7cef8017e485891aa5e4c9b38b16c5e94e8b196b0e811f3e55b0e46fa12320ebb16c37373680580c98952ed89f9a6a6fac0044f074b91dfe79581e92bba34", 0x5c}], 0x2, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x2001) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000840)=""/255, 0xff}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) 11.787742415s ago: executing program 2 (id=6321): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)=ANY=[@ANYBLOB], 0x2008}, 0x44041) socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x3, 0x6e}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000027c0)=""/4088, 0xff8}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000480)=""/142, 0x8e}], 0x7}, 0x22) 11.688441744s ago: executing program 2 (id=6323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000020000000000000d5290f060000000000000000000200000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003300000002000000000000000000000000000000000000000000000001030000040000004900000000000000ff010000000000000000000000000001000000003200000002"], 0x1fc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11.593407341s ago: executing program 2 (id=6324): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet(0x2, 0x6, 0xffff0001) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socket(0x22, 0x80c, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801406000000657468315f746f5f687372000000001800038014000380100001800b00020064766d7270310000"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801406000000657468315f746f5f687372000000001800038014000380100001800b00020064766d7270310000"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 11.524143184s ago: executing program 2 (id=6326): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000022000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 11.432572765s ago: executing program 2 (id=6328): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0x64, 0x31, 0x1, 0x2, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x480c0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000640)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x25, 0x5, 0x80000001) bind$qrtr(r4, &(0x7f0000000380)={0x2a, 0xffffffff, 0x4001}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_emit_ethernet(0x87a2f, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc", 0x1}], 0x1}}], 0x1, 0x2090) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@newnexthop={0x64, 0x68, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x2, 0x0, 0x12}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GROUP={0x14, 0x2, [{0x0, 0xc}, {0x1, 0x7f}]}, @NHA_GROUP={0x1c, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x1, 0x1}]}, @NHA_OIF={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0xfc92647f345a4875) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @private=0xa010101}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='veth0_to_bridge\x00', 0x8, 0xa9, 0x7ff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3062b, 0x980c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x385, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaae1aa86dd606410a6002e00"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r9, &(0x7f0000000040), &(0x7f0000000200)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 11.25261665s ago: executing program 2 (id=6329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) unshare(0x400) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000092a4d541000000000000000000000000790da232ec7ebe486597177beb61511fddfbd29e332b206184a1341e9eb4c961c252c73210ed227dcf9a5487e0c4dc3592212c06c1c8c0d38b42a0d1a933f8047df24b3e423fd27bb5ad7aaaafd8d1949bdadbf216dfdd401d1980bc674788b3100000000497c3a7554e45f89e7cecd770dcadf90ca89f530945e713afd28222b3738e4f6317bc7ef524593c230827326d0740951dc5ede29385603e18f8eb7a79b648598f74"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x14, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0xc, 0x701, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fff, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x41, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfe000003, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x3, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xfffffffd, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) (rerun: 32) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r1, &(0x7f0000000440)='\x00', 0x4200c0, &(0x7f0000000480)={@_ha_fsid={[0x30, 0x6]}, {0x100, 0xf802, 0x85e, 0x4}}, 0x6, &(0x7f00000004c0), &(0x7f0000000540)=0x8}, 0x4, &(0x7f0000000980)=[{0x1, 0x0, &(0x7f0000000580)='([{\x00', &(0x7f00000005c0)="eb1a70f5b558e11eed7512318b86bd94bf02113a27840a3881bc1494f6281903ce88f742fb55395f0782387cbb30ca15b83135d0cb7cfed2a8791d4dbaecdc7a7f6f6be1fb7bac62891dd63e64bf2f9ac9e6a7eb832d1c69f4453f58956124b5548c85b1d0d1651eef43a07498a55cb78cc6cfe9e14b19da723cae3586a04059dae051ebae283a50e5241b4a31dca080e09de2e99702a9dddc43785090ff2bbe533a65faff8cabc133163d75b1aa", 0xae, 0x20}, {0x1, 0x1, &(0x7f0000000680)='wlan0\x00', &(0x7f00000006c0)="c5628fec23a902c1ba78c2ba9b39e2c1935071bac50c8938878d735a561318ef2e200a9477b366ed64f10d499bcb0a430e836a476c2af05e681ab2711d35575ea878446fa69dd8b440ba8115d6accfb1370528e5bc7f53f82f4533165eb32d79f4650a412af38514090a95a9a52d014d51e08fe2a05caf5ff1c6793271408367da989425c79dfdb92a23d6ed10dafe6a8bcf962bc485d6538db617bebf2cf7f38133c2a55bf69e184450023cabd6a3490b116677bb08306f56db7af4ced606", 0xbf, 0x38}, {0x1, 0x1, &(0x7f0000000780)='\x00', &(0x7f0000000c40)="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", 0xfa, 0x10}, {0x3, 0x8, &(0x7f00000008c0)='.,\\^*s*@*(-@)^,!\x00', &(0x7f0000000900)="f627cb6e2ae7f3975625b7a2320c9f2591566efc4536eecd4f748ee5edd6a83c3c978e244c901830a86fcdfa87455a2a92d640ddf07e641d800a4bfd89f2878a0f5eaeea2c411251aa4a203b84fa327d0fa98e0125fb5e24ccb176", 0x5b, 0x28}]}) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000a80)=@gcm_128={{0x304}, "40d4d2c3088be515", "de0c85751438379d1ea92df618b3ee28", "e181cbd7", "fbb6455673f6b51d"}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x0, 0x9b, 0x1}, 0x28) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000206010100000000000000000a00000905000100070000000500050003000000050001000700000c0500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x44041}, 0x4091) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (rerun: 64) 2.435626565s ago: executing program 32 (id=6266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$alg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b77b83b03b3326ba7054e90019cb767c64fa0441f8fa0885e50320b495302543c6eee3484cd019a24e1ce0f85e194ca069cee5673396b15a821aa602bd67668dcc291bb8124fb7349e8b5bdb39fac1925f04b33be1e567161ddd9c594cd4e107994e7524368aa7d00b01", 0x6a}, {&(0x7f00000000c0)="8af029258d080dfd1d09fa51afd87a5c8502c3e51c9d871d5ed1b08157d7cef8017e485891aa5e4c9b38b16c5e94e8b196b0e811f3e55b0e46fa12320ebb16c37373680580c98952ed89f9a6a6fac0044f074b91dfe79581e92bba34", 0x5c}], 0x2, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x2001) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000840)=""/255, 0xff}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) 2.12937154s ago: executing program 4 (id=6390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000001fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 1.732320946s ago: executing program 0 (id=6393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}, 0x1, 0x13}, 0x0) 1.666202007s ago: executing program 4 (id=6394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.614930854s ago: executing program 0 (id=6395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010024000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1.464195124s ago: executing program 4 (id=6396): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff33}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd7000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r1, 0x80, 0x1c05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x12) 1.442952397s ago: executing program 1 (id=6397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000000000000ab7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009a000000850000001500000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.380075381s ago: executing program 0 (id=6398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202889fffe8000000000000000000000000000aaff02000000000000000000007ffffffe"], 0xfdef) 1.256008205s ago: executing program 1 (id=6399): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x22, &(0x7f0000000180)=""/91, &(0x7f00000002c0)=0x5b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b9ff030760030084b89e08d186ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6fdf8edbd766612b0ee82cab6218c7", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000480)=""/163, &(0x7f00000005c0)=0xa3) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001580)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e22, 0xff, 0x4e24, 0x1000, 0x2, 0x20, 0xa0, 0x67, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d6, 0x32}, @in=@private=0xa010101, {0x37, 0x4, 0x7fffffff, 0x9, 0xfffffffffffffffa, 0x2, 0x40, 0x10000}, {0x5, 0x3, 0x200, 0xd}, {0x3ff, 0x2c, 0x6b5}, 0x70bd25, 0x3507, 0x2, 0x1, 0x4}, 0x5, 0x8000}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000050) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.216520107s ago: executing program 4 (id=6400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @generic={0x2, 0xa, 0x2, 0x6, 0x7fff}, @alu={0x0, 0x1, 0x4, 0x9, 0x5, 0x100, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xd, 0x2, 0x5, 0x50}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x56, &(0x7f0000000100)=""/86, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x5, 0x3, 0xa}, {0x5, 0x2, 0xd, 0x5}], 0x10, 0x4}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x400c110, r0, 0x82a81000) (async) r2 = accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10) (async) r3 = socket$kcm(0x29, 0x4, 0x0) r4 = accept4(r2, 0x0, &(0x7f0000000400), 0x80000) (async) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000440)={0x1a, 0x0, {0x7fff80, @struct={0x5, 0x5}, 0x0, 0x2, 0x6, 0x1, 0x6, 0x5, 0x4b4, @usage=0x5, 0xfff, 0x1000, [0xcd49, 0x1, 0x5, 0x40, 0x1, 0x8000]}, {0x8000000000000000, @usage=0x7000000000, 0x0, 0x21, 0xf49, 0x982d, 0x4, 0x40, 0x463, @usage, 0xffffffdb, 0x10000, [0xb, 0xfffffffffffffffc, 0xe4, 0x5c, 0x9, 0xd1]}, {0x3, @struct={0x3, 0xd}, 0x0, 0x1, 0x98, 0x4, 0x3, 0x2, 0x11, @struct={0x70d0, 0x9}, 0x10, 0x7fff, [0x9, 0xfff, 0x8000000000000, 0x200, 0x6, 0x4]}, {0x3, 0x74e5, 0x20}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000840)={0x1, 0x4, {0x6, @usage=0x6f25, 0x0, 0x1, 0x33f858bd, 0x0, 0x1, 0x0, 0x23, @usage=0x4, 0xffffffac, 0x1000, [0x4, 0x6, 0x7, 0xfffffffffffff000, 0x0, 0x7]}, {0x200, @usage=0x8, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x2a, @struct={0x10000, 0x2}, 0x81, 0x80, [0x9, 0xe, 0x7, 0x5, 0x996, 0x201b]}, {0x8000000000000001, @usage=0x2, 0x0, 0x3ff, 0x7, 0x0, 0xd, 0x6, 0x410, @struct={0xfffffff7, 0xa}, 0x8000, 0x1, [0xe, 0x400, 0x0, 0xfffffffffffffff8, 0x8, 0x7]}, {0x10, 0x3ff, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000c40)={0x5, 0x2, {0x3ff, @usage=0x8, r5, 0x4, 0x4, 0x7, 0x4, 0x3, 0xa0, @struct={0xbc5a, 0x40}, 0x8d04, 0x0, [0x3, 0x200, 0x400, 0x4, 0xc3c2, 0x3]}, {0xffffffff, @usage=0x4, r6, 0x8, 0x1000, 0x1000, 0x0, 0x4, 0x40, @struct={0xd150, 0x3}, 0x3, 0x800, [0x6, 0x81, 0x6, 0x76b0, 0x3a, 0x6]}, {0xb8, @usage=0x8000, 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x7ff, 0x492, @struct={0x7}, 0x0, 0x8, [0x5df, 0x8f2, 0x80000001, 0x7fffffff, 0x1, 0x1]}, {0x7f, 0x26, 0x6}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000001080)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x4, r7}) (async) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000010c0)={@remote, r7}, 0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r2, 0x6d4de000) (async) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000001100)={0x80000001, 0x4, 0x7, 0x1, 0x6}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001140)={'syztnl1\x00', r7, 0x700, 0x740, 0xd884, 0x5, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x64, 0x0, 0xfb, 0x2f, 0x0, @loopback, @remote, {[@lsrr={0x83, 0xf, 0xd4, [@remote, @multicast2, @rand_addr=0x64010102]}, @noop, @end]}}}}}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x98, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4085) (async) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) connect$rds(r4, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendmmsg$inet_sctp(r4, &(0x7f0000003580)=[{&(0x7f00000013c0)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001400)="bcb8856604fa7778f5fda18a3ebfd421577b716ee5d41969882ca5cb75f767324b05907dfb874537eb7dfe73a3e69f03a4101eb9c5b81208a9ff9962af45b047ff746db9f1f4293a78ce62d2c5eb99893d04da0b731f1d0a1831fc5e449f352bc693d4665b0ab44105fbeeac6b2e7dc7b521faabf06375ac658a963ff5aaad42ada426cac61cc88ef286169e822562e3cf676b6878ccbea7df5bcaff9290864767e7579c1f9da28ec18df1", 0xab}, {&(0x7f00000014c0)="fe31b97de5b2a04ed7d4e6cac61b20c7cc3bc494ebf8dd683a0fe41abd339a7a1d656030e5b04d21181f75f78c34c2b9c35a3cfd40b188c4384f14c95f5ecec5fa6e2d73d7759bc6e3715c3768337a14b42c5fe861d4a3b16632958a7c81cc259bce9b26bb412d983cce51462ca99e8516a8f488a82e165a0d5922244905a32ebd585c0f771f928cdc8de504133fcd4d94176f50c0a08724bc6f79a7402977de9a1a8fd10cbb79a7c566b9c6e438bf748893e1c5cbb711", 0xb7}], 0x2, 0x0, 0x0, 0x4000040}, {&(0x7f00000015c0)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001600)="03f6db959eec7412dd4d55b686088158cf242ce18dc889a743230e1a5417673743cb582466755b3bdf0ad26bcbac50096a12ffd7d71b9d8e0586cac07d6eaa10a5413c7ca00667f29297c95527ed91ba8ccc089c7846ed73cdf37d28c32008eba1a08e59393017df12a306f408228a4a3592bb6fd14c286c9891a7229f6e2296c175ee2ac4b43b3976e6591570b291d397c9068093f56e7b728672b2e8c7b33027ae84191a88d23cbc6fb0eecd8284646c38e771ac0ca58bd52e7b0d4abe4d80e0da27476e34b9d7410a260ee2e6129e58de71ba2a892883c0141fd94a1bd08a57d3153711b6f01fbb635b5122f793", 0xef}, {&(0x7f0000001700)="5334b18b2bc068a9598918584e8cb0", 0xf}, {&(0x7f0000001740)="db4496697c959a4f1227ae4a941315945a56ff7dbbdde6b766cbb8c9584492e6d381f1c4201185e1df40b1f17547a6649786926553110631af6be27bd0fde66633e1d0df940175772babeb71c6c63be86d047c13571c2d094bd19bd36830f3d362940f7c65530a1babe882ebbb080cf6d206eebfbf6d6e058799a8d1b11ce9578e6feeb72e2583918d576c534f3f5ba0cb138b102041ad7435377ecc972bb5fe5efb2f7e5f8d43a64c63e51890589434673ba1f1b2b4fbe4b18746dfa0697899fa7144f59f9f8ed9dc0fb9bbae54b29ce235172a3378735988f79a3ffe403f465edcf05a184b", 0xe6}, {&(0x7f0000001840)="6fb79f257d8f5665aaf2be71019004f0a80d3c8a68b8814a0c9984e38df35e2d4615a7e8c0a7ff786820234f80a8da1d60bcc5b9e4d4b61c7f126ef6631e0f2f4566d35829514d5f7a47577de7f5bda054c845d23b135d76ed66101912b4671709d00cca39dea3b76672e87b7070b685729bee68a15cd9d4e1165a61add3b411cd2a6af79411809bec3b52a0746e5e331320c5b6132c726c2d41cec991d93ab1d7a213e3b1", 0xa5}, {&(0x7f0000001900)="2cfef43ef8e500ff386811948cbbfba732051ea7ea97d462c6f20b98a0c82d444b6ffd71ddb606c6544e86b81fb2ce657e1bb395b8a904063bd17b725bd94ae523dddd8646c12e47fea67b319c7f77501e6e8e118c8de40c19ca320905c1d33bcd5863e08bfd796958a0df4eaa97aade38e7", 0x72}], 0x5, &(0x7f0000001a00)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x101}}, @prinfo={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xf8}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0xe8, 0x48101}, {&(0x7f0000001b00)=@in6={0xa, 0x4e24, 0xffffffff, @remote, 0x5}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="af8a7ae5028db05b6325554e9ee504950c5c78c3f8ff9395dfd0c288a593537211ca1728a2420c92f5b36f11abeaaa2ed8d07429ff24465d3bd5f3e3a6fd9a5a3b8c732ac153c7d4507bf861ef4840098fc41684d4543ddb2103be309daf0c83985bb267b9d4da0b0209d74f86b451f6ba8d3d4a8adc2f8fcfbf01c31b8be5625ebe", 0x82}, {&(0x7f0000001c40)="6b4bb7f0233149dd4e703137e2dffee6802a99632a06a1e6ce55ade3ed0cd3d6d3e5360d4238774dd636754934acea4a4b5c72daa2ce17835b6ffd54e471fddb309e1b1e14b7e2d8e29ff53c36c3c70df50e0b044cdd28c0c27174100ea7bad18126915cadd0c913d50e7f41e3a9972208711e7027f0dde39af97713d63452364341553556579480e69defac00d7d95f49e52d4259e3f6a2672ad7d120b9eeb15f0faca79338da92759f1dabf06dcf8e152b8802666af58446d812d034aa490b167ea70a0e8905b0d06892ef4d0c0f", 0xcf}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="139c5728a30f6420d44e96ad01d21f06ff80aac9b648fee929dc48abb4a834213ffa", 0x22}, {&(0x7f0000002d80)="b3e288c795c16e1992aa1f1264a5b6253cb9aa5353ca3b8f8fcd86d997f3aea9e6ca56ed93a45e3c161fd238a8e4dabbbecb88d13baa08840a85d1450ae44f789047ab6908beda0e7df1c8bc6a2ad9c8057aadfea026d02b659d0e149450a484ad82c031091f9aec8e9fafe7847b2ff4c49da62a7c920c278f66be6bef6dd676e61e0fdcfa364f3c5d31a112ceeef98fddce096d7c7b02611e6e9101838d62a2bf1f37a877", 0xa5}, {&(0x7f0000002e40)="248127a7e7a292127e212dd9d9edb3c1b0d2f8c7f0b51554bd2dee2a3572193386d43913e9836ee5637a9590521d00878447b71e197bb35c2b0b6c3bf33d86cd7ec5e658b254ae57bdc5356eea8d4a783ecc26e22afa3e9b26f78994be274787f30973c9056732cf191f5fa6d05ae7251a69f4d451f141047d64b8db1530545279310f664a82ec88cdb7bb2c035ade897b5434afd57d21876b5eff243c2681a023844ed5c29c3781ef05d631bdaf5783927bfa3123b799c6c5df0b263409993cedc2827ff06508e78eb2437cd77ee31467aa10c58139ba2b069724fff030b81b1996ed922a63be262bfcb462e19a242754714104781a90", 0xf7}, {&(0x7f0000002f40)="8a2d5cf7189be177889e69cf7c892a97f24b208d35aac197ac13544fc2dfbe94bba3d630d85c4fe3cc021f41d9c9f4dfee567f83fcab4afeeee965866d248a323654e412291848a45c3e5c", 0x4b}, {&(0x7f0000002fc0)="096daf69445a9803aa00ebb74c24ceef9fc27e19d83bc7fd61ace790a51329d3fe54828ef355410ed8470179788f71cbd5e43613b854f1c1b61337630f13f7a2615a52c1f06e017f2e9c44acbe7225fcedee8c0ac2b05bb0a98254b5599f3469865587db6ce8db29d445c4484da742ea6477cd6bf32bc8e92db28d5ed7dadcd57f6f325ff06f982809749b1a729e0feeb1e49fd72035bbf9333ae3b8aa5cf579f68f6960a9f9b5c3a1eadbf77779db4f6ed765bd21", 0xb5}, {&(0x7f0000003080)="181d2dab2e51e395c00c492b532d237e38ef8b1cef0d53290cebc9fc6aba79c34a717f318e8344867d65bf3736e25768c20e4ebc6ff6b7c0e804bce88dcfbf5addec11bdd75e164bf293a0b2d0e6744786daa6e0cbbe8c3dd540152729de52bd85d1a7d259de374c11cd9c57068cfd77d05a73d746bb68e700ed7fb7010c89c8e2125beafde775d5466a758831b8dc75086e3150dfc37023adcd9546ff763b7f4414", 0xa2}], 0xa, 0x0, 0x0, 0x1}, {&(0x7f0000003200)=@in={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000003240)="ce33480ec9b07f775b0ac41d9dc6da51e2532186df5019de5a3a374a479045c1125919dbe69d5f27dca66d10a231febf374d68eab936cbe461d7f5b3a6872b99d948efc09d94affbcb554409236c783e3a1d124f5162c717a875cb327d34ed691140bb6f7c81f7f4e1dc4f68a07b4e", 0x6f}, {&(0x7f00000032c0)="5b36006b48ae4a1ea264af67eefe71feafa0791f2e1de3bc9d669d83b2f614cb1ef089d768a474967dc0fcaae98255be0e790faf4847b7d5c78c35b45e89145432e5fb221cbef6e1cc707287dfe84d5b9c5c931920845cc7ee43fe3afeb8d4c6d0fcc0716b0bff077dbf599a5ad0", 0x6e}, {&(0x7f0000003340)="ac8e3a5d7879905c36d9a1977ae67f30cc411cce5b69a63f3c34b25f0b8b4665600b92da6b39b0e39edd9b45c1481534c18759214b4c4040d8d6f2b79c08f58a8596f247bb40b48df93bb691c5f0ae9ec59959c25b15ca3277d3538caf68baa21e43586b", 0x64}], 0x3, &(0x7f0000003400)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x30, 0x28000080}, {&(0x7f0000003440)=@in6={0xa, 0x4e23, 0x269, @remote, 0x9}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000003480)="88d63647021c5213e15c60c1a5d988020ea81db29f5cdaa718f3fb7e8bba225a87592b540e31", 0x26}, {&(0x7f00000034c0)="dabafe6481dfa8142ace67bb454a2a681d027254a29ec4f7f02d22d385d4", 0x1e}], 0x2, &(0x7f0000003540)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}], 0x18, 0x80}], 0x5, 0x100) (async) r8 = accept$unix(r4, 0x0, &(0x7f00000036c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000003700)={0x3, 'virt_wifi0\x00', {0x5}, 0x8}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000003740)=0xd800, 0x4) (async) r9 = socket(0x9, 0x6, 0x82) setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) (async) sendmsg$inet6(r9, &(0x7f0000003e40)={&(0x7f0000003780)={0xa, 0x4e22, 0x4, @mcast1, 0x7}, 0x1c, &(0x7f0000003d00)=[{&(0x7f00000037c0)="8dbc32a42460c076d7a017b58e738ac1400a99d8cf62efbb69aee0708c61c27341426d8c14d61e5787956e956b060b4aac40c1999b8d2f893a41f6fa8f1c783cc7eec6d3d0c445c70098667121814b2ce6f2637330b35ddd0294e0a876b4c6ac6012e44ea30a3f3f45bf0f912ebcd4cebc2db1c2ddc04f6c955451465bfc2378fba6b39c09c7215a83c40e24b3b060653cc3fc4d7c54a4da79c264616577d0f4c0947e711545db38be4108aa329d232641de4afc39a7b41e22a9fd3378424d56c64a57885a6a2dd49ea2f9d3755731902b7acefe0f760e63645ff3470922b516c2d2dcfbc5442275", 0xe8}, {&(0x7f00000038c0)="903ad0e4b294618c4c5c745b5b6fec086c92992bb4a846cc7779187e401a964746bd77b4300ad90972e4fc37b32e73a90c40130a7c09fb4a4d65c89da54d2e9e8e0f51fb1b369c5838be8caa71e437fe2937894a63b6e2aa78f86daebeec8faf1407c729be12614e09f681c094fc6204531c92a8766b84897a1a5bd74aab180766844d96e23e46b8aac9ca9315768cc12be3429d312f7dd28b4ae0cff88948f3ad200214167379326ebf644e7b86d8d3401e7dcf3b203a287d2d2468cfa9e17daaab90e0edf632e8200fda3dcc66e0158e7e9511a28de519", 0xd8}, {&(0x7f00000039c0)="4e0afe6a5459ddd10fd727a6b6b80c313bfbcef638b9ab032b5018e17962a63f064e7206b6f2074e9b02dd5d2096a149a3da69e62d91b83df60405b0ce", 0x3d}, {&(0x7f0000003a00)="b71c0b47c8ee26d03ff1af6ab2f3a613b86865273aa2b7dd3722ff006bc027ac06c6825b181f341b7864df7463589639c250985d38a332a417003edcb9905f679c8bef0a653648585826f67d7825199d4282bd1c186542deb0b77b44057269b6f89835141892c7a654e881045c58dd091740f88b8893c847c0d724acd2cd81e8211aaae4212c31ee8d4a72f1176d197a6a093a7f4283c9993edc04394d0332042b4e13ec49f4c169aab52e83ae58318a026a638989f35e723c40ffdb808c2b4f19828b7571434a5264cdcf3fa7f766eda9e45e4fb0af5500490a7ddb43c07f2e8cbfc0dd1aec690c686714152ef5b64a1a8010", 0xf3}, {&(0x7f0000003b00)="6ad7425b975cce36dc7c81621c71905f2fdb6338e250ac076b4412", 0x1b}, {&(0x7f0000003b40)="7a40307326063b07f3", 0x9}, {&(0x7f0000003b80)="e8570b5efbb0f9e86e629dcdff7b3736106a2575a22142e9313b37bc6f299cb9af537d71ee73741657ab62cb291605bbc30c78f776f8cf740c016cc3f4f13d97de5d180463d6ddf60eba9084b6ea6ea169260bde2158a6d2235de3cb51c2217baf646e971a97e4c362f7747de491592b5a0652a80d58b67c51432c1d690fdbc7385699e9944a4af357513d53424384f39928b11840668769e0153ab7fec9b408d4ad836aef0d41f5547b87b8854a56be648f0e4da05586e884934ba2cbf1d836e5322d52fdd1b16a16bc84b0490224cea9129793", 0xd4}, {&(0x7f0000003c80)="384788a23c925b1a1f19c3618d8113ab4ac5398e807cde101949e74331ff0ef5407df11dfcf64a44ba4e114419625712404a4dadf2bfff3e99d0b74d4418a6b3243986441630a5bb3e858271db67a96fddec0f98585211723f941839aa02a6b16a1b5d5b308fb80abdd8", 0x6a}], 0x8, &(0x7f0000003d80)=[@dstopts={{0x70, 0x29, 0x37, {0x2f, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x71}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0xb, [0x1]}}, @enc_lim={0x4, 0x1, 0xd1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @remote}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x3c, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x7fff, [0x9, 0x77, 0x4, 0x80000000]}}]}}}], 0xb8}, 0x10000100) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003f80)={@fallback=r2, 0x2a, 0x1, 0x2, &(0x7f0000003e80)=[0x0], 0x1, 0x0, &(0x7f0000003ec0)=[0x0, 0x0], &(0x7f0000003f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003f40)=[0x0], 0x0}, 0x40) (async) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000004000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003fc0)={@cgroup=r12, r0, 0x2, 0x2000, 0x0, @value=r1, @void, @void, @void, r11}, 0x20) (async) sendmsg$AUDIT_TRIM(r10, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x10, 0x3f6, 0x300, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8050}, 0x20040000) 970.866979ms ago: executing program 4 (id=6401): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) close(r8) r10 = accept4$tipc(r2, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0xc0, r7, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000fddbdf25060000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="a8a18f70766f87817e3729b09bc04d3f97026b8fdedd4a03568f0125c70ce10047bcfca51d86a829ecc55316c0262bf27889dd3092ec58f3723a7cddc0c8d10c2f44fe"], 0x20}, 0x1, 0x0, 0x0, 0x48045}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 394.302034ms ago: executing program 0 (id=6404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871a000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f00000000c0)) 394.034979ms ago: executing program 1 (id=6405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4100}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 283.328472ms ago: executing program 4 (id=6406): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x89f6, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 144.040157ms ago: executing program 0 (id=6407): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x1403, 0x100, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000fffffffffffffff000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a0000000000000000000000000030c6f58b000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1476bb000000000000000000000000053500"], 0x1ac}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="c526da4246c86a9037cc4854e99241ddd8631ac3f33e2ba87643cc943ce4596bd61fc4864ff6fb36a11d01b7316c6d3e052d1137b48f14a24f118c60850257b665eb0308ce7c5b31613db69f3cc94f1d8036f8a4353ae23d2ab7fb", 0x5b}, {&(0x7f0000000200)="0cc1014204a2fc64b58b262bc23f3ecf686b307621eb516f09286f49093b567eb1192ee95605f21eb9c91b9c187c23f093a49df46f5e7d546636a55226b034cb192f1328fefad50548317266ee053199b4eb7b5d2e3d20bd90bf3c3a8b61cf890921e4a76f63fd1de596a6271279371b4edc82b8a52ed69792a789419dfb42eaec8dd4c8cc85ec439617ab0f18123807c17a2e49a336b7917d", 0x99}, {&(0x7f00000002c0)="63bfb1ff82f2276e20fe2bbdc31786cc69d0ec14b425f406aa0e6177c3f10f80f1a3aa8a93571dd4aae582ec50a8ffcdcb36c5e608d22953ffe80ed62a2ba0787e63b006e32e3d55e3065c18fd2b34634aa7", 0x52}, {&(0x7f0000000340)="f502", 0x2}], 0x4, 0x0, 0x0, 0x800}}], 0x1, 0x24044000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$kcm(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r6, 0x604ae000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000000000)=""/31, 0x1f) 143.462799ms ago: executing program 1 (id=6408): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x49, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000007"], 0x50}}], 0x3ffffffffffff40, 0x800) 0s ago: executing program 1 (id=6409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x32, 0xffffffffffffffff, 0x852a9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000800009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) kernel console output (not intermixed with test programs): 707.289027][T22293] syzkaller1: entered promiscuous mode [ 707.294672][T22293] syzkaller1: entered allmulticast mode [ 707.453849][T22302] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5247'. [ 707.486120][T22302] netlink: 'syz.0.5247': attribute type 9 has an invalid length. [ 707.506582][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 707.521002][T22302] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5247'. [ 707.531296][T22302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5247'. [ 707.752753][T22313] netlink: 'syz.1.5255': attribute type 1 has an invalid length. [ 707.820572][T22313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.856602][T22313] bond9: (slave syz_tun): Removing an active aggregator [ 707.876312][T22313] bond9: (slave syz_tun): Releasing backup interface [ 707.939309][T22313] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 708.093518][T22326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5257'. [ 708.096936][T22327] FAULT_INJECTION: forcing a failure. [ 708.096936][T22327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.121541][T22327] CPU: 0 UID: 0 PID: 22327 Comm: syz.2.5259 Not tainted syzkaller #0 PREEMPT(full) [ 708.121571][T22327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.121585][T22327] Call Trace: [ 708.121594][T22327] [ 708.121604][T22327] dump_stack_lvl+0xe8/0x150 [ 708.121635][T22327] should_fail_ex+0x412/0x560 [ 708.121670][T22327] _copy_from_user+0x2d/0xb0 [ 708.121702][T22327] kstrtouint_from_user+0xd6/0x180 [ 708.121732][T22327] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 708.121779][T22327] proc_fail_nth_write+0x8e/0x210 [ 708.121812][T22327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 708.121847][T22327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 708.121876][T22327] vfs_write+0x29a/0xb90 [ 708.121915][T22327] ? __pfx_vfs_write+0x10/0x10 [ 708.121944][T22327] ? __fget_files+0x2a/0x420 [ 708.121974][T22327] ? __fget_files+0x3a0/0x420 [ 708.121996][T22327] ? __fget_files+0x2a/0x420 [ 708.122031][T22327] ksys_write+0x150/0x270 [ 708.122062][T22327] ? __pfx_ksys_write+0x10/0x10 [ 708.122100][T22327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.122121][T22327] do_syscall_64+0x15f/0xf80 [ 708.122150][T22327] ? trace_irq_disable+0x3b/0x140 [ 708.122180][T22327] ? clear_bhb_loop+0x40/0x90 [ 708.122204][T22327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.122223][T22327] RIP: 0033:0x7ff429b5d68e [ 708.122243][T22327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.122259][T22327] RSP: 002b:00007ff42a9b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.122281][T22327] RAX: ffffffffffffffda RBX: 00007ff42a9b26c0 RCX: 00007ff429b5d68e [ 708.122295][T22327] RDX: 0000000000000001 RSI: 00007ff42a9b20a0 RDI: 0000000000000008 [ 708.122307][T22327] RBP: 00007ff42a9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 708.122320][T22327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.122332][T22327] R13: 00007ff429e16038 R14: 00007ff429e15fa0 R15: 00007ffc5edc2048 [ 708.122367][T22327] [ 708.786650][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 708.794727][ T29] net_ratelimit: 18 callbacks suppressed [ 708.794746][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.905400][T22358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5268'. [ 708.984533][T22357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5269'. [ 709.087636][T22362] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 709.097954][T22362] netlink: 'syz.1.5270': attribute type 1 has an invalid length. [ 709.204418][T22362] 8021q: adding VLAN 0 to HW filter on device bond11 [ 709.268488][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.428701][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.522486][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5277'. [ 709.644769][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5278'. [ 709.768769][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.777629][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.786069][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.805863][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.814364][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.823081][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.909422][T22398] xt_connbytes: Forcing CT accounting to be enabled [ 710.066896][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 710.150167][T22390] bridge0: left allmulticast mode [ 710.275882][T22390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.299846][T22390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.413514][T22390] bond2: left promiscuous mode [ 710.431730][T22390] vcan1: left promiscuous mode [ 710.444057][T22390] vlan2: left allmulticast mode [ 710.455375][T22390] bond0: left allmulticast mode [ 710.464217][T22390] bond_slave_0: left allmulticast mode [ 710.472551][T22390] bond_slave_1: left allmulticast mode [ 710.486053][T22390] hsr1: left allmulticast mode [ 710.503133][T22390] batadv0: left allmulticast mode [ 710.513254][T22390] veth1_to_batadv: left allmulticast mode [ 710.533555][T22390] vlan3: left promiscuous mode [ 710.574252][T22390] bond4: left promiscuous mode [ 710.580703][T22390] bond4: left allmulticast mode [ 710.590155][T22390] bond7: left promiscuous mode [ 710.600364][T22390] bond8: left promiscuous mode [ 710.608753][T22390] ip6gre1: left promiscuous mode [ 710.620065][T22390] ip6gre1: left allmulticast mode [ 710.629187][T22390] ip6gre2: left promiscuous mode [ 710.635989][T22390] ip6gre2: left allmulticast mode [ 710.649929][T22390] ip6gre3: left promiscuous mode [ 710.655025][T22390] ip6gre3: left allmulticast mode [ 710.683044][T22389] vlan3: entered promiscuous mode [ 710.845409][T22403] ip6gre8: entered promiscuous mode [ 710.857193][T22403] ip6gre8: entered allmulticast mode [ 710.895040][T10865] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.931976][T10865] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.091952][T10865] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.128174][T10865] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.158334][T10865] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.172270][T10865] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.259013][T10865] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.297459][T10865] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.346623][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 712.626702][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 712.656339][T22480] netlink: 'syz.3.5310': attribute type 1 has an invalid length. [ 712.799474][T22480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 712.849509][T22482] bond3: (slave syz_tun): Removing an active aggregator [ 712.876360][T22482] bond3: (slave syz_tun): Releasing backup interface [ 712.924452][T22482] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 713.002963][T22489] __nla_validate_parse: 12 callbacks suppressed [ 713.002988][T22489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5313'. [ 713.064074][T22489] vlan3: entered promiscuous mode [ 713.092257][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5313'. [ 713.135597][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'. [ 713.178999][T22498] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5316'. [ 713.496052][T22518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5324'. [ 713.880115][T22529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5326'. [ 714.181584][T22539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5328'. [ 714.352838][T22543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5329'. [ 714.537676][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5330'. [ 714.565009][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5330'. [ 714.648488][ T13] net_ratelimit: 604 callbacks suppressed [ 714.648508][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.662771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.716040][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.725061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.775347][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.783789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.808464][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.816880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.869044][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.884840][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.888371][T22584] vlan0: entered promiscuous mode [ 716.204191][T22592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 716.466652][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 716.500052][T22600] macsec1: entered promiscuous mode [ 716.505430][T22600] dummy0: entered promiscuous mode [ 716.513169][T22600] macsec1: entered allmulticast mode [ 716.519483][T22600] dummy0: entered allmulticast mode [ 716.528378][T22600] dummy0: left allmulticast mode [ 716.536459][T22600] dummy0: left promiscuous mode [ 716.554299][T22604] set match dimension is over the limit! [ 716.759465][T22607] netlink: 'syz.3.5354': attribute type 1 has an invalid length. [ 716.784218][T22607] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 718.232006][T22650] __nla_validate_parse: 10 callbacks suppressed [ 718.232065][T22650] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5364'. [ 718.351901][T22652] syzkaller0: entered promiscuous mode [ 718.367421][T22652] syzkaller0: entered allmulticast mode [ 718.654897][T22659] FAULT_INJECTION: forcing a failure. [ 718.654897][T22659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.692003][T22659] CPU: 0 UID: 0 PID: 22659 Comm: syz.4.5368 Not tainted syzkaller #0 PREEMPT(full) [ 718.692034][T22659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.692048][T22659] Call Trace: [ 718.692058][T22659] [ 718.692068][T22659] dump_stack_lvl+0xe8/0x150 [ 718.692098][T22659] should_fail_ex+0x412/0x560 [ 718.692131][T22659] _copy_to_user+0x31/0xb0 [ 718.692165][T22659] simple_read_from_buffer+0xe1/0x170 [ 718.692198][T22659] proc_fail_nth_read+0x1bb/0x230 [ 718.692229][T22659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.692259][T22659] ? rw_verify_area+0x2a6/0x4d0 [ 718.692287][T22659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.692316][T22659] vfs_read+0x20c/0xa70 [ 718.692350][T22659] ? __pfx___mutex_lock+0x10/0x10 [ 718.692372][T22659] ? __pfx_vfs_read+0x10/0x10 [ 718.692403][T22659] ? __fget_files+0x2a/0x420 [ 718.692432][T22659] ? __fget_files+0x3a0/0x420 [ 718.692456][T22659] ? __fget_files+0x2a/0x420 [ 718.692491][T22659] ksys_read+0x150/0x270 [ 718.692523][T22659] ? __pfx_ksys_read+0x10/0x10 [ 718.692562][T22659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.692585][T22659] do_syscall_64+0x15f/0xf80 [ 718.692615][T22659] ? trace_irq_disable+0x3b/0x140 [ 718.692647][T22659] ? clear_bhb_loop+0x40/0x90 [ 718.692673][T22659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.692695][T22659] RIP: 0033:0x7fe29715d68e [ 718.692715][T22659] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.692738][T22659] RSP: 002b:00007fe2953f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.692760][T22659] RAX: ffffffffffffffda RBX: 00007fe2953f66c0 RCX: 00007fe29715d68e [ 718.692775][T22659] RDX: 000000000000000f RSI: 00007fe2953f60a0 RDI: 0000000000000004 [ 718.692788][T22659] RBP: 00007fe2953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 718.692801][T22659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.692813][T22659] R13: 00007fe297416038 R14: 00007fe297415fa0 R15: 00007ffe45646ae8 [ 718.692847][T22659] [ 719.188751][T22670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5373'. [ 719.254703][T22670] ip6gre7: entered promiscuous mode [ 719.270149][T22670] ip6gre7: entered allmulticast mode [ 719.396952][T22677] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5376'. [ 719.699853][T22689] FAULT_INJECTION: forcing a failure. [ 719.699853][T22689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.754836][T22689] CPU: 1 UID: 0 PID: 22689 Comm: syz.2.5382 Not tainted syzkaller #0 PREEMPT(full) [ 719.754865][T22689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.754878][T22689] Call Trace: [ 719.754887][T22689] [ 719.754896][T22689] dump_stack_lvl+0xe8/0x150 [ 719.754926][T22689] should_fail_ex+0x412/0x560 [ 719.754957][T22689] _copy_from_user+0x2d/0xb0 [ 719.754989][T22689] ___sys_sendmsg+0x1c6/0x360 [ 719.755010][T22689] ? __lock_acquire+0x6b5/0x2cf0 [ 719.755038][T22689] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.755095][T22689] ? __fget_files+0x2a/0x420 [ 719.755118][T22689] ? __fget_files+0x3a0/0x420 [ 719.755153][T22689] __x64_sys_sendmsg+0x1bd/0x2a0 [ 719.755178][T22689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.755210][T22689] ? __pfx_ksys_write+0x10/0x10 [ 719.755248][T22689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.755271][T22689] do_syscall_64+0x15f/0xf80 [ 719.755300][T22689] ? trace_irq_disable+0x3b/0x140 [ 719.755337][T22689] ? clear_bhb_loop+0x40/0x90 [ 719.755372][T22689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.755393][T22689] RIP: 0033:0x7ff429b9ce59 [ 719.755412][T22689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.755430][T22689] RSP: 002b:00007ff42a9b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.755452][T22689] RAX: ffffffffffffffda RBX: 00007ff429e15fa0 RCX: 00007ff429b9ce59 [ 719.755465][T22689] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 719.755478][T22689] RBP: 00007ff42a9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 719.755490][T22689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.755502][T22689] R13: 00007ff429e16038 R14: 00007ff429e15fa0 R15: 00007ffc5edc2048 [ 719.755534][T22689] [ 720.084723][T22697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5385'. [ 720.188306][T22701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5386'. [ 720.228690][T22701] vlan3: entered promiscuous mode [ 720.290754][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5386'. [ 720.465329][ T36] net_ratelimit: 24 callbacks suppressed [ 720.465348][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.479948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.503925][T22709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5389'. [ 720.514037][T22711] syzkaller0: entered promiscuous mode [ 720.519822][T22711] syzkaller0: entered allmulticast mode [ 720.540362][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.548928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.593753][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.602947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.621301][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.629825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.653457][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.661926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.893290][T22715] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 720.917497][T22719] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5393'. [ 720.950483][T22720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5394'. [ 721.035175][T22724] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5395'. [ 721.131434][T22726] syzkaller0: left promiscuous mode [ 721.162118][T22726] syzkaller0: left allmulticast mode [ 721.524335][T22744] xt_addrtype: ipv6 does not support BROADCAST matching [ 721.586646][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 723.513101][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 724.589580][T22760] ip6gre4: entered promiscuous mode [ 724.598558][T22760] ip6gre4: entered allmulticast mode [ 724.735140][T22766] __nla_validate_parse: 3 callbacks suppressed [ 724.735162][T22766] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5408'. [ 724.759733][T22767] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 724.786593][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 724.933413][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 724.944021][T22779] FAULT_INJECTION: forcing a failure. [ 724.944021][T22779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.965241][T22779] CPU: 0 UID: 0 PID: 22779 Comm: syz.3.5413 Not tainted syzkaller #0 PREEMPT(full) [ 724.965270][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.965283][T22779] Call Trace: [ 724.965292][T22779] [ 724.965301][T22779] dump_stack_lvl+0xe8/0x150 [ 724.965332][T22779] should_fail_ex+0x412/0x560 [ 724.965370][T22779] _copy_to_user+0x31/0xb0 [ 724.965403][T22779] simple_read_from_buffer+0xe1/0x170 [ 724.965435][T22779] proc_fail_nth_read+0x1bb/0x230 [ 724.965474][T22779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.965504][T22779] ? rw_verify_area+0x2a6/0x4d0 [ 724.965532][T22779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.965560][T22779] vfs_read+0x20c/0xa70 [ 724.965595][T22779] ? __pfx___mutex_lock+0x10/0x10 [ 724.965621][T22779] ? __pfx_vfs_read+0x10/0x10 [ 724.965652][T22779] ? __fget_files+0x2a/0x420 [ 724.965681][T22779] ? __fget_files+0x3a0/0x420 [ 724.965704][T22779] ? __fget_files+0x2a/0x420 [ 724.965745][T22779] ksys_read+0x150/0x270 [ 724.965778][T22779] ? __pfx_ksys_read+0x10/0x10 [ 724.965817][T22779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.965840][T22779] do_syscall_64+0x15f/0xf80 [ 724.965869][T22779] ? trace_irq_disable+0x3b/0x140 [ 724.965900][T22779] ? clear_bhb_loop+0x40/0x90 [ 724.965925][T22779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.965946][T22779] RIP: 0033:0x7f6fdd15d68e [ 724.965965][T22779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.965983][T22779] RSP: 002b:00007f6fddfdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.966006][T22779] RAX: ffffffffffffffda RBX: 00007f6fddfdf6c0 RCX: 00007f6fdd15d68e [ 724.966021][T22779] RDX: 000000000000000f RSI: 00007f6fddfdf0a0 RDI: 0000000000000004 [ 724.966034][T22779] RBP: 00007f6fddfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 724.966046][T22779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.966058][T22779] R13: 00007f6fdd416038 R14: 00007f6fdd415fa0 R15: 00007ffdecc07a78 [ 724.966093][T22779] [ 725.257235][T22784] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5414'. [ 725.292829][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 725.454960][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5417'. [ 725.579381][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5419'. [ 725.665934][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5422'. [ 725.783845][T22808] net_ratelimit: 11 callbacks suppressed [ 725.783866][T22808] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 726.066899][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 726.580565][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'. [ 726.759136][T22854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5443'. [ 726.894233][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5444'. [ 726.942774][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.951243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.976276][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.984713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.010658][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.019069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.029540][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.071527][T22870] openvswitch: netlink: Flow key attr not present in new flow. [ 727.112661][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.346700][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 727.549540][T22878] netlink: 'syz.2.5449': attribute type 61 has an invalid length. [ 728.114945][T22909] set match dimension is over the limit! [ 728.506299][T22925] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 728.623824][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.640976][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.664536][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.677992][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x2 [ 728.705199][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.737551][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.759410][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.775947][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.791612][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.806261][T22940] netlink: 'syz.2.5470': attribute type 4 has an invalid length. [ 728.824252][ T24] hid-generic 0005:16C0:0040.0001: unknown main item tag 0x0 [ 728.857007][T22940] netlink: 'syz.2.5470': attribute type 8 has an invalid length. [ 728.893126][T22940] netlink: 'syz.2.5470': attribute type 1 has an invalid length. [ 728.905354][ T24] hid-generic 0005:16C0:0040.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 728.917526][T22940] NCSI netlink: No device for ifindex 0 [ 730.048429][T13036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.076819][T13036] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 730.094857][T13036] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 730.326970][T22401] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 730.572129][T23003] __nla_validate_parse: 12 callbacks suppressed [ 730.572151][T23003] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5487'. [ 730.938646][T23017] Cannot find set identified by id 0 to match [ 731.029779][T22401] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 731.126279][T22401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.266140][T23029] netlink: 'syz.3.5497': attribute type 16 has an invalid length. [ 731.289531][T23029] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5497'. [ 731.559425][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5502'. [ 731.574061][T23040] netlink: 'syz.3.5501': attribute type 1 has an invalid length. [ 731.601328][T23041] macsec1: entered promiscuous mode [ 731.606996][T23041] dummy0: entered promiscuous mode [ 731.612565][T23041] macsec1: entered allmulticast mode [ 731.618265][T23041] dummy0: entered allmulticast mode [ 731.626718][T23041] dummy0: left allmulticast mode [ 731.631965][T23041] dummy0: left promiscuous mode [ 731.721226][T23040] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.791458][T23055] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5501'. [ 731.804789][T23054] netlink: 'syz.2.5506': attribute type 1 has an invalid length. [ 731.826905][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 731.905606][T23044] bond6: (slave veth7): Enslaving as an active interface with a down link [ 732.006109][T23063] FAULT_INJECTION: forcing a failure. [ 732.006109][T23063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.051099][T23040] bond6: (slave dummy0): making interface the new active one [ 732.064674][T23051] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5501'. [ 732.072594][T23060] sctp: [Deprecated]: syz.2.5506 (pid 23060) Use of int in maxseg socket option. [ 732.072594][T23060] Use struct sctp_assoc_value instead [ 732.081893][T23040] dummy0: entered promiscuous mode [ 732.090276][T23063] CPU: 0 UID: 0 PID: 23063 Comm: syz.4.5507 Not tainted syzkaller #0 PREEMPT(full) [ 732.090353][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.090393][T23063] Call Trace: [ 732.090419][T23063] [ 732.090448][T23063] dump_stack_lvl+0xe8/0x150 [ 732.090525][T23063] should_fail_ex+0x412/0x560 [ 732.090611][T23063] _copy_from_user+0x2d/0xb0 [ 732.090691][T23063] ___sys_sendmsg+0x1c6/0x360 [ 732.090748][T23063] ? __lock_acquire+0x6b5/0x2cf0 [ 732.090829][T23063] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.090991][T23063] ? __fget_files+0x2a/0x420 [ 732.091057][T23063] ? __fget_files+0x3a0/0x420 [ 732.091159][T23063] __x64_sys_sendmsg+0x1bd/0x2a0 [ 732.091244][T23063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.091329][T23063] ? __pfx_ksys_write+0x10/0x10 [ 732.091437][T23063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.091500][T23063] do_syscall_64+0x15f/0xf80 [ 732.091579][T23063] ? trace_irq_disable+0x3b/0x140 [ 732.091669][T23063] ? clear_bhb_loop+0x40/0x90 [ 732.091735][T23063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.091783][T23063] RIP: 0033:0x7fe29719ce59 [ 732.091837][T23063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.091882][T23063] RSP: 002b:00007fe2953d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.091954][T23063] RAX: ffffffffffffffda RBX: 00007fe297416090 RCX: 00007fe29719ce59 [ 732.091996][T23063] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000000d [ 732.092029][T23063] RBP: 00007fe2953d5090 R08: 0000000000000000 R09: 0000000000000000 [ 732.092069][T23063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.092101][T23063] R13: 00007fe297416128 R14: 00007fe297416090 R15: 00007ffe45646ae8 [ 732.092200][T23063] [ 732.308783][T23071] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5509'. [ 732.322579][T23040] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 732.341964][T23055] bond6: (slave dummy0): Releasing active interface [ 732.360711][T23055] dummy0 (unregistering): left promiscuous mode [ 732.459005][T23054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.498650][T23051] .70X: renamed from veth1_virt_wifi (while UP) [ 732.510036][T23051] .70X: entered allmulticast mode [ 732.517677][T23051] net_ratelimit: 1880 callbacks suppressed [ 732.517697][T23051] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check. [ 733.106924][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.115127][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.123860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.290889][T23105] netlink: 'syz.3.5517': attribute type 1 has an invalid length. [ 733.301484][T23105] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5517'. [ 733.311466][T23107] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 733.368131][T23109] FAULT_INJECTION: forcing a failure. [ 733.368131][T23109] name failslab, interval 1, probability 0, space 0, times 0 [ 733.411065][T23109] CPU: 0 UID: 0 PID: 23109 Comm: syz.0.5520 Not tainted syzkaller #0 PREEMPT(full) [ 733.411094][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.411107][T23109] Call Trace: [ 733.411116][T23109] [ 733.411126][T23109] dump_stack_lvl+0xe8/0x150 [ 733.411157][T23109] should_fail_ex+0x412/0x560 [ 733.411190][T23109] should_failslab+0xa8/0x100 [ 733.411224][T23109] __kmalloc_cache_noprof+0x88/0x660 [ 733.411252][T23109] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 733.411281][T23109] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 733.411309][T23109] ? genl_start+0x1c9/0x6c0 [ 733.411341][T23109] genl_start+0x1c9/0x6c0 [ 733.411367][T23109] ? netlink_lookup+0x30/0x200 [ 733.411395][T23109] __netlink_dump_start+0x469/0x7e0 [ 733.411426][T23109] genl_family_rcv_msg_dumpit+0x213/0x310 [ 733.411458][T23109] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 733.411485][T23109] ? genl_get_cmd+0x6cb/0x960 [ 733.411517][T23109] ? __pfx_genl_start+0x10/0x10 [ 733.411541][T23109] ? __pfx_genl_dumpit+0x10/0x10 [ 733.411566][T23109] ? __pfx_genl_done+0x10/0x10 [ 733.411595][T23109] ? __lock_acquire+0x6b5/0x2cf0 [ 733.411630][T23109] genl_rcv_msg+0x5e8/0x7a0 [ 733.411664][T23109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.411690][T23109] ? __pfx_ieee802154_dump_iface+0x10/0x10 [ 733.411740][T23109] netlink_rcv_skb+0x232/0x4b0 [ 733.411763][T23109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.411792][T23109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.411832][T23109] ? down_read+0x270/0x2e0 [ 733.411856][T23109] ? genl_rcv+0xd/0x40 [ 733.411885][T23109] genl_rcv+0x28/0x40 [ 733.411909][T23109] netlink_unicast+0x75c/0x8e0 [ 733.411953][T23109] netlink_sendmsg+0x813/0xb40 [ 733.411992][T23109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.412019][T23109] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.412049][T23109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 733.412086][T23109] ____sys_sendmsg+0x972/0x9f0 [ 733.412108][T23109] ? __might_fault+0xaf/0x130 [ 733.412141][T23109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.412174][T23109] ? import_iovec+0x73/0xa0 [ 733.412209][T23109] ___sys_sendmsg+0x2a5/0x360 [ 733.412229][T23109] ? __lock_acquire+0x6b5/0x2cf0 [ 733.412256][T23109] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.412319][T23109] ? __fget_files+0x2a/0x420 [ 733.412343][T23109] ? __fget_files+0x3a0/0x420 [ 733.412380][T23109] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.412405][T23109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.412438][T23109] ? __pfx_ksys_write+0x10/0x10 [ 733.412478][T23109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.412506][T23109] do_syscall_64+0x15f/0xf80 [ 733.412535][T23109] ? trace_irq_disable+0x3b/0x140 [ 733.412565][T23109] ? clear_bhb_loop+0x40/0x90 [ 733.412592][T23109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.412613][T23109] RIP: 0033:0x7fb3d839ce59 [ 733.412633][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.412656][T23109] RSP: 002b:00007fb3d9234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.412678][T23109] RAX: ffffffffffffffda RBX: 00007fb3d8615fa0 RCX: 00007fb3d839ce59 [ 733.412693][T23109] RDX: 0000000000000c00 RSI: 0000200000000640 RDI: 0000000000000005 [ 733.412706][T23109] RBP: 00007fb3d9234090 R08: 0000000000000000 R09: 0000000000000000 [ 733.412719][T23109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.412731][T23109] R13: 00007fb3d8616038 R14: 00007fb3d8615fa0 R15: 00007ffe997a4e58 [ 733.412766][T23109] [ 733.765545][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.776062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.902073][T23120] netlink: 'syz.0.5524': attribute type 4 has an invalid length. [ 733.920858][T23119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5523'. [ 733.963256][T23125] netlink: 'syz.0.5524': attribute type 4 has an invalid length. [ 734.042305][T23132] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.5523'. [ 734.069123][T23132] openvswitch: netlink: Flow key attr not present in new flow. [ 734.109370][T23118] erspan0: left allmulticast mode [ 734.126607][T23118] erspan0: left promiscuous mode [ 734.222731][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5528'. [ 734.857082][T23156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.867602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.878474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.451431][T23199] bond12: entered promiscuous mode [ 735.460191][T23199] 8021q: adding VLAN 0 to HW filter on device bond12 [ 735.746275][T23210] 5n: entered promiscuous mode [ 735.803713][T23213] syzkaller0: entered promiscuous mode [ 735.815056][T23213] syzkaller0: entered allmulticast mode [ 736.330784][T23231] __nla_validate_parse: 6 callbacks suppressed [ 736.330808][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5552'. [ 736.533893][T23238] netlink: 5000 bytes leftover after parsing attributes in process `syz.1.5552'. [ 736.610091][T23240] FAULT_INJECTION: forcing a failure. [ 736.610091][T23240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.668128][T23240] CPU: 0 UID: 0 PID: 23240 Comm: syz.3.5555 Not tainted syzkaller #0 PREEMPT(full) [ 736.668160][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.668174][T23240] Call Trace: [ 736.668188][T23240] [ 736.668198][T23240] dump_stack_lvl+0xe8/0x150 [ 736.668228][T23240] should_fail_ex+0x412/0x560 [ 736.668261][T23240] _copy_to_user+0x31/0xb0 [ 736.668313][T23240] simple_read_from_buffer+0xe1/0x170 [ 736.668345][T23240] proc_fail_nth_read+0x1bb/0x230 [ 736.668376][T23240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.668407][T23240] ? rw_verify_area+0x2a6/0x4d0 [ 736.668436][T23240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.668464][T23240] vfs_read+0x20c/0xa70 [ 736.668498][T23240] ? ip6_datagram_connect_v6_only+0x6d/0xa0 [ 736.668526][T23240] ? __pfx_vfs_read+0x10/0x10 [ 736.668552][T23240] ? lockdep_hardirqs_on+0x7a/0x110 [ 736.668582][T23240] ? ip6_datagram_connect_v6_only+0x6d/0xa0 [ 736.668606][T23240] ? __local_bh_enable_ip+0xd0/0x130 [ 736.668629][T23240] ? ip6_datagram_connect_v6_only+0x6d/0xa0 [ 736.668664][T23240] ? __sys_connect+0x335/0x450 [ 736.668697][T23240] ? __pfx___sys_connect+0x10/0x10 [ 736.668734][T23240] ksys_read+0x150/0x270 [ 736.668766][T23240] ? __pfx_ksys_read+0x10/0x10 [ 736.668804][T23240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.668828][T23240] do_syscall_64+0x15f/0xf80 [ 736.668858][T23240] ? trace_irq_disable+0x3b/0x140 [ 736.668888][T23240] ? clear_bhb_loop+0x40/0x90 [ 736.668914][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.668934][T23240] RIP: 0033:0x7f6fdd15d68e [ 736.668952][T23240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.668969][T23240] RSP: 002b:00007f6fddfdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.668990][T23240] RAX: ffffffffffffffda RBX: 00007f6fddfdf6c0 RCX: 00007f6fdd15d68e [ 736.669010][T23240] RDX: 000000000000000f RSI: 00007f6fddfdf0a0 RDI: 0000000000000008 [ 736.669023][T23240] RBP: 00007f6fddfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 736.669035][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.669048][T23240] R13: 00007f6fdd416038 R14: 00007f6fdd415fa0 R15: 00007ffdecc07a78 [ 736.669081][T23240] [ 737.023795][T16221] Bluetooth: hci0: link tx timeout [ 737.033440][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.053846][T16221] Bluetooth: hci0: link tx timeout [ 737.059656][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.172610][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 737.230925][T23250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 737.310411][T23250] vlan0: entered promiscuous mode [ 737.528198][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5559'. [ 737.546744][T23225] net_ratelimit: 213 callbacks suppressed [ 737.546765][T23225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.561099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.612341][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.620770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.644905][T16221] Bluetooth: hci0: link tx timeout [ 737.650457][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.655725][T23225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.666807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.691229][T10863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.699698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.709237][T10863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.717995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.730376][T16221] Bluetooth: hci0: link tx timeout [ 737.735562][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.844475][T16221] Bluetooth: hci0: link tx timeout [ 737.850611][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.055214][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.072258][T16221] Bluetooth: hci0: link tx timeout [ 738.077815][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.142781][T10858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.201852][T10858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.285519][T23274] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 738.334813][T23277] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5564'. [ 738.377513][T23277] netlink: 'syz.1.5564': attribute type 9 has an invalid length. [ 738.419080][T23277] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5564'. [ 738.448752][T23277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5564'. [ 738.871303][T16221] Bluetooth: hci0: link tx timeout [ 738.876633][T16221] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.110704][T16221] Bluetooth: hci0: command 0x0405 tx timeout [ 739.119945][T16221] Bluetooth: hci0: link tx timeout [ 739.654224][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 739.782889][T23330] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5575'. [ 739.908428][T23281] netlink: 'syz.3.5565': attribute type 4 has an invalid length. [ 740.439162][T23342] netlink: 'syz.1.5578': attribute type 9 has an invalid length. [ 741.376149][T23356] __nla_validate_parse: 3 callbacks suppressed [ 741.376171][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5582'. [ 741.871510][T23367] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 741.926034][T23372] netlink: 'syz.1.5588': attribute type 62 has an invalid length. [ 742.254586][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5592'. [ 742.349909][T23397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5593'. [ 742.368577][T23397] vlan0: entered promiscuous mode [ 742.410601][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5593'. [ 742.714574][T23407] netlink: 'syz.3.5595': attribute type 18 has an invalid length. [ 742.723143][T23407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5595'. [ 743.186554][ C1] net_ratelimit: 378 callbacks suppressed [ 743.186576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.201358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.266945][T10136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.275448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.226567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.235146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.626613][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 744.915223][T23372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.167847][T23422] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 745.227741][T23430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.252325][T23415] macvtap0: entered promiscuous mode [ 745.266927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.276307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.287199][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.410905][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5604'. [ 745.458664][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5604'. [ 745.994905][T23463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5613'. [ 746.019063][T23463] vlan3: entered promiscuous mode [ 746.158760][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5614'. [ 747.188104][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 747.197187][ C0] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 748.022352][T23415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.304555][T23478] netlink: 'syz.3.5616': attribute type 1 has an invalid length. [ 748.384913][T23478] bond7: entered promiscuous mode [ 748.390231][ C1] net_ratelimit: 42 callbacks suppressed [ 748.390251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.397064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.415887][T23478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 748.432606][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 748.442189][T23478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'. [ 748.469328][T10839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.477922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.499293][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5616'. [ 748.571622][T23494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.584068][T23494] bond4: (slave bond5): Enslaving as an active interface with an up link [ 748.745097][T23495] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 748.915545][T23490] bond7: (slave bridge3): making interface the new active one [ 748.934313][T23490] bridge3: entered promiscuous mode [ 748.957779][T23490] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 749.086732][T23516] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5626'. [ 749.185782][T23485] syzkaller0: entered promiscuous mode [ 749.191909][T23485] syzkaller0: entered allmulticast mode [ 749.423283][T23533] FAULT_INJECTION: forcing a failure. [ 749.423283][T23533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.436622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.445999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.488772][T23533] CPU: 1 UID: 0 PID: 23533 Comm: syz.0.5633 Not tainted syzkaller #0 PREEMPT(full) [ 749.488818][T23533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.488833][T23533] Call Trace: [ 749.488846][T23533] [ 749.488856][T23533] dump_stack_lvl+0xe8/0x150 [ 749.488895][T23533] should_fail_ex+0x412/0x560 [ 749.488929][T23533] _copy_from_user+0x2d/0xb0 [ 749.488966][T23533] do_ipv6_getsockopt+0x2d9/0x2610 [ 749.489006][T23533] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 749.489043][T23533] ? aa_label_sk_perm+0x532/0x6e0 [ 749.489079][T23533] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 749.489108][T23533] ? _parse_integer_limit+0x1ae/0x1f0 [ 749.489142][T23533] ? __lock_acquire+0x6b5/0x2cf0 [ 749.489190][T23533] ? __might_fault+0xaf/0x130 [ 749.489223][T23533] ipv6_getsockopt+0xbd/0x2b0 [ 749.489264][T23533] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 749.489297][T23533] ? sock_common_getsockopt+0x2d/0xb0 [ 749.489327][T23533] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 749.489356][T23533] do_sock_getsockopt+0x51d/0x7e0 [ 749.489407][T23533] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 749.489457][T23533] ? __fget_files+0x3a0/0x420 [ 749.489480][T23533] ? __fget_files+0x2a/0x420 [ 749.489513][T23533] __x64_sys_getsockopt+0x1a4/0x240 [ 749.489541][T23533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.489565][T23533] do_syscall_64+0x15f/0xf80 [ 749.489594][T23533] ? trace_irq_disable+0x3b/0x140 [ 749.489624][T23533] ? clear_bhb_loop+0x40/0x90 [ 749.489650][T23533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.489671][T23533] RIP: 0033:0x7fb3d839ce59 [ 749.489691][T23533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.489709][T23533] RSP: 002b:00007fb3d9234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 749.489738][T23533] RAX: ffffffffffffffda RBX: 00007fb3d8615fa0 RCX: 00007fb3d839ce59 [ 749.489754][T23533] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 749.489766][T23533] RBP: 00007fb3d9234090 R08: 0000200000000080 R09: 0000000000000000 [ 749.489779][T23533] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 749.489792][T23533] R13: 00007fb3d8616038 R14: 00007fb3d8615fa0 R15: 00007ffe997a4e58 [ 749.489826][T23533] [ 750.473477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.482352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.033002][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.041482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.630672][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5638'. [ 752.758801][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 753.100032][T23591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5647'. [ 753.382849][T23603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5651'. [ 753.423266][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5651'. [ 753.452168][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5651'. [ 753.586785][ C1] net_ratelimit: 7 callbacks suppressed [ 753.586807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.601470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.739834][T23611] 8021q: VLANs not supported on ip6tnl0 [ 753.997010][T23621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5657'. [ 754.039637][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5658'. [ 754.110950][T21785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.119895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.140695][T23626] netlink: 'syz.0.5659': attribute type 2 has an invalid length. [ 754.163812][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.172483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.198260][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.207116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.231768][T21785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.240497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.255394][T23632] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5660'. [ 754.499101][T23637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5663'. [ 754.597819][T23639] syzkaller0: entered promiscuous mode [ 754.608449][T23639] syzkaller0: entered allmulticast mode [ 754.814537][T23653] x_tables: duplicate underflow at hook 2 [ 754.870414][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 755.401661][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5672'. [ 755.465887][T23663] vlan0: entered promiscuous mode [ 755.541146][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5673'. [ 755.568782][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 755.592704][T23666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5673'. [ 755.794980][T23674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5674'. [ 756.237771][T23694] netlink: 'syz.2.5679': attribute type 2 has an invalid length. [ 757.426630][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 757.591714][T23734] dvmrp0: entered allmulticast mode [ 757.707683][T23740] netlink: 'syz.4.5692': attribute type 3 has an invalid length. [ 758.352545][T23760] syzkaller1: entered allmulticast mode [ 758.483877][T23765] __nla_validate_parse: 5 callbacks suppressed [ 758.483900][T23765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5701'. [ 758.607228][T23763] syzkaller0: entered promiscuous mode [ 758.627058][T23763] syzkaller0: entered allmulticast mode [ 758.786578][ C1] net_ratelimit: 68 callbacks suppressed [ 758.786601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.801286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.755659][T23795] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5708'. [ 759.826518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.835411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.987008][T21785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.995463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.467101][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.866544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.875834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.269858][T21785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.553084][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 762.893352][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5715'. [ 762.923147][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5715'. [ 763.150846][T23829] set match dimension is over the limit! [ 763.986511][ C1] net_ratelimit: 8 callbacks suppressed [ 763.986531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.001185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.137128][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5732'. [ 764.146330][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5732'. [ 764.267609][T23865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5730'. [ 764.292200][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5733'. [ 764.333175][T23867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5733'. [ 764.404773][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.413283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.447207][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.455601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.487760][T10839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.496095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.527616][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.535955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.560036][T23876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5734'. [ 764.622965][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5734'. [ 764.761999][T23885] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 764.860388][T23885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 764.990573][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'. [ 765.562862][T23917] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5750'. [ 765.573898][T23917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5750'. [ 765.687535][T23919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.703504][T23919] bond_slave_0: left allmulticast mode [ 765.722124][T23919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.747556][T23919] bond_slave_1: left allmulticast mode [ 765.763938][T23919] bond0 (unregistering): Released all slaves [ 766.960492][T23998] veth1_to_batadv: entered promiscuous mode [ 766.981493][T23998] veth1_to_batadv: left promiscuous mode [ 767.130220][T24002] netlink: 'syz.2.5786': attribute type 1 has an invalid length. [ 767.212937][T24002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.288204][T24002] netlink: 'syz.2.5786': attribute type 8 has an invalid length. [ 767.666635][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 767.847182][T24038] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 767.865428][T24038] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 767.876550][T24040] netlink: 'syz.2.5798': attribute type 21 has an invalid length. [ 767.894586][T24041] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 767.920233][T24040] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.931066][T24041] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 768.018577][T24046] 5n: entered promiscuous mode [ 768.883996][T24097] vlan1: entered promiscuous mode [ 769.056861][T10850] net_ratelimit: 40 callbacks suppressed [ 769.056883][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.072118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.112903][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.121387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.148197][T24104] __nla_validate_parse: 16 callbacks suppressed [ 769.148217][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5819'. [ 769.166020][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.174424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.186488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.196743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.209196][T21785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.218064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.732877][T24140] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 769.891339][T24151] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5832'. [ 769.907436][T24140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.950655][T24147] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 770.457843][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5838'. [ 770.731231][T24191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5842'. [ 771.003815][T24191] veth1_to_batadv: entered promiscuous mode [ 771.068577][T24191] veth1_to_batadv: left promiscuous mode [ 771.174477][T24202] ip6tnl1: entered allmulticast mode [ 771.196205][T10854] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.213298][T10854] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.221889][T16176] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.287061][T24209] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 771.806678][T16176] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.986627][T16176] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.143914][T24237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5859'. [ 772.259751][T24243] netlink: 'syz.2.5860': attribute type 1 has an invalid length. [ 772.325014][T24246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5862'. [ 772.335020][T24187] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.342267][T24187] bridge0: port 2(bridge_slave_1) entered listening state [ 772.350025][T24187] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.357256][T24187] bridge0: port 1(bridge_slave_0) entered listening state [ 772.422776][T24187] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.451205][T24187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.606097][T24251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5863'. [ 772.618894][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5863'. [ 772.782469][T24243] 8021q: adding VLAN 0 to HW filter on device bond7 [ 774.258857][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5873'. [ 774.270981][T24288] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 774.386509][ C1] net_ratelimit: 30 callbacks suppressed [ 774.386529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.400920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.162105][T24309] FAULT_INJECTION: forcing a failure. [ 775.162105][T24309] name failslab, interval 1, probability 0, space 0, times 0 [ 775.176763][T24309] CPU: 0 UID: 0 PID: 24309 Comm: syz.3.5881 Not tainted syzkaller #0 PREEMPT(full) [ 775.176793][T24309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 775.176807][T24309] Call Trace: [ 775.176816][T24309] [ 775.176826][T24309] dump_stack_lvl+0xe8/0x150 [ 775.176864][T24309] should_fail_ex+0x412/0x560 [ 775.176898][T24309] should_failslab+0xa8/0x100 [ 775.176931][T24309] ? dst_alloc+0x105/0x170 [ 775.176955][T24309] kmem_cache_alloc_noprof+0x87/0x650 [ 775.176985][T24309] ? lock_acquire+0x106/0x350 [ 775.177014][T24309] dst_alloc+0x105/0x170 [ 775.177043][T24309] ipv4_blackhole_route+0x32/0x680 [ 775.177081][T24309] xfrm_lookup_route+0xd7/0x1c0 [ 775.177117][T24309] ip4_datagram_release_cb+0x89f/0xbe0 [ 775.177146][T24309] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 775.177176][T24309] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 775.177200][T24309] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.177244][T24309] ? release_sock+0x2f/0x260 [ 775.177276][T24309] release_sock+0x206/0x260 [ 775.177307][T24309] udp_connect+0x4f/0x1f0 [ 775.177335][T24309] __sys_connect+0x312/0x450 [ 775.177368][T24309] ? __pfx___sys_connect+0x10/0x10 [ 775.177413][T24309] ? __pfx_ksys_write+0x10/0x10 [ 775.177448][T24309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.177472][T24309] __x64_sys_connect+0x7a/0x90 [ 775.177503][T24309] do_syscall_64+0x15f/0xf80 [ 775.177536][T24309] ? clear_bhb_loop+0x40/0x90 [ 775.177563][T24309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.177585][T24309] RIP: 0033:0x7f6fdd19ce59 [ 775.177606][T24309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.177624][T24309] RSP: 002b:00007f6fddfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 775.177646][T24309] RAX: ffffffffffffffda RBX: 00007f6fdd415fa0 RCX: 00007f6fdd19ce59 [ 775.177662][T24309] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 775.177677][T24309] RBP: 00007f6fddfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 775.177690][T24309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.177702][T24309] R13: 00007f6fdd416038 R14: 00007f6fdd415fa0 R15: 00007ffdecc07a78 [ 775.177737][T24309] [ 775.426545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.426660][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.436933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.612158][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.622604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.667578][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.781071][T24318] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 776.178484][T24327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5887'. [ 776.466586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.475803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.646281][T24337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5890'. [ 777.153383][T24354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.167188][T24354] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 777.472288][ T30] audit: type=1107 audit(1779202331.344:6): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 777.506510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.906846][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 777.924591][T24380] Bluetooth: MGMT ver 1.23 [ 779.542318][T24339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.586521][ C1] net_ratelimit: 6 callbacks suppressed [ 779.586543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.602842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.861702][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5907'. [ 779.912301][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'. [ 779.930840][T24404] netlink: 'syz.3.5910': attribute type 9 has an invalid length. [ 779.936926][T24395] netlink: 8544 bytes leftover after parsing attributes in process `syz.0.5904'. [ 780.299921][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5912'. [ 780.354515][T24416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5912'. [ 780.493904][T24414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.556962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.566579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.626551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.635135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.217914][T24434] tipc: Failed to remove unknown binding: 66,1,1/0:4180122997/4180122999 [ 781.239597][T24434] tipc: Failed to remove unknown binding: 66,1,1/0:4180122997/4180122999 [ 781.666519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.675883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.745848][T24451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 781.763320][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.779129][T24451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 781.808737][T24453] netlink: 'syz.2.5923': attribute type 3 has an invalid length. [ 781.875638][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5926'. [ 782.128390][T24469] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5929'. [ 782.183455][T24470] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5928'. [ 782.398083][T24483] gtp2: entered promiscuous mode [ 782.408995][T24483] gtp2: entered allmulticast mode [ 782.423450][T24483] team0: Device gtp2 is of different type [ 782.706813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.830084][T24509] syzkaller1: entered promiscuous mode [ 782.836945][T24509] syzkaller1: entered allmulticast mode [ 783.026707][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 783.088152][T24516] 8021q: adding VLAN 0 to HW filter on device bond14 [ 783.103111][T24516] bond13: (slave bond14): Enslaving as an active interface with an up link [ 783.126585][T24527] Cannot find set identified by id 0 to match [ 783.150430][T24524] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 783.246899][T24531] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 783.267607][T24531] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 783.289030][T24531] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 783.358985][T24533] netlink: 'syz.1.5949': attribute type 1 has an invalid length. [ 783.425187][T24533] 8021q: adding VLAN 0 to HW filter on device bond15 [ 783.511980][T24539] bond10: (slave syz_tun): Removing an active aggregator [ 783.534902][T24539] bond10: (slave syz_tun): Releasing backup interface [ 783.548853][T24539] bond15: (slave syz_tun): Enslaving as a backup interface with an up link [ 783.583545][T24535] netlink: 'syz.0.5950': attribute type 3 has an invalid length. [ 783.920394][T24557] set match dimension is over the limit! [ 784.240811][T24571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 784.248183][T24571] IPv6: NLM_F_CREATE should be set when creating new route [ 784.307529][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 784.339512][T24569] vlan3: entered promiscuous mode [ 784.787094][ C1] net_ratelimit: 23 callbacks suppressed [ 784.787120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.791972][T24584] IPv6: sit1: Disabled Multicast RS [ 784.801149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.808262][T13050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.860233][T24587] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 784.916238][T24589] __nla_validate_parse: 7 callbacks suppressed [ 784.916278][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5970'. [ 785.164759][T24593] veth0_to_batadv: entered allmulticast mode [ 785.174006][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.185669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.249564][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.259629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.278921][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.288726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.300342][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.324307][T24600] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5974'. [ 785.667834][T24609] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5979'. [ 785.706789][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'. [ 785.729466][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5979'. [ 785.948874][T24624] bond9: option lp_interval: invalid value (0) [ 785.955389][T24624] bond9: option lp_interval: allowed values 1 - 2147483647 [ 785.965143][T24624] bond9 (unregistering): Released all slaves [ 785.974771][T24631] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 786.774835][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5994'. [ 786.885912][T16221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.907650][T16221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.921631][T16221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.940714][T16221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.953187][T16221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.055251][T24658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5996'. [ 787.395436][T15197] bond7: (slave syz_tun): Removing an active aggregator [ 787.427891][T15197] bond7: (slave syz_tun): Releasing backup interface [ 787.482851][T24669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6000'. [ 787.610307][T24678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6002'. [ 788.013204][T24695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6007'. [ 788.599282][T24714] netlink: 'syz.0.6014': attribute type 1 has an invalid length. [ 788.784243][T24720] macvlan3: entered promiscuous mode [ 788.793167][T24724] netlink: 'syz.3.6018': attribute type 1 has an invalid length. [ 788.808586][T24720] macvlan3: entered allmulticast mode [ 788.822255][T24720] bond4: entered promiscuous mode [ 788.841213][T24720] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 788.866813][T24720] bond4: left promiscuous mode [ 789.026491][ T5639] Bluetooth: hci1: command tx timeout [ 789.059162][T24724] 8021q: adding VLAN 0 to HW filter on device bond9 [ 789.082738][T24725] bond5: (slave syz_tun): Removing an active aggregator [ 789.104477][T24725] bond5: (slave syz_tun): Releasing backup interface [ 789.140910][T24725] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 789.842615][T24756] net_ratelimit: 29 callbacks suppressed [ 789.842637][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.888257][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.918281][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.950080][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.986527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.995292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.015094][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.038124][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.069357][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.077837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.501446][T24778] FAULT_INJECTION: forcing a failure. [ 790.501446][T24778] name failslab, interval 1, probability 0, space 0, times 0 [ 790.541661][T24780] __nla_validate_parse: 12 callbacks suppressed [ 790.541715][T24780] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6038'. [ 790.574479][T24778] CPU: 0 UID: 0 PID: 24778 Comm: syz.2.6035 Not tainted syzkaller #0 PREEMPT(full) [ 790.574508][T24778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.574521][T24778] Call Trace: [ 790.574530][T24778] [ 790.574538][T24778] dump_stack_lvl+0xe8/0x150 [ 790.574568][T24778] should_fail_ex+0x412/0x560 [ 790.574599][T24778] ? __d_alloc+0x37/0x6f0 [ 790.574626][T24778] should_failslab+0xa8/0x100 [ 790.574660][T24778] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 790.574705][T24778] __d_alloc+0x37/0x6f0 [ 790.574744][T24778] ? rcu_is_watching+0x15/0xb0 [ 790.574772][T24778] d_alloc_pseudo+0x21/0xc0 [ 790.574801][T24778] alloc_file_pseudo+0xdd/0x240 [ 790.574823][T24778] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 790.574850][T24778] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 790.574872][T24778] ? evm_inode_alloc_security+0x40/0xb0 [ 790.574893][T24778] ? security_inode_alloc+0xd5/0x310 [ 790.574931][T24778] sock_alloc_file+0xb8/0x2e0 [ 790.574960][T24778] do_accept+0x3a0/0x760 [ 790.574992][T24778] ? __pfx_do_accept+0x10/0x10 [ 790.575042][T24778] __sys_accept4+0x139/0x230 [ 790.575073][T24778] ? __pfx___sys_accept4+0x10/0x10 [ 790.575101][T24778] ? __pfx_ksys_write+0x10/0x10 [ 790.575137][T24778] __x64_sys_accept4+0x9a/0xb0 [ 790.575165][T24778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.575186][T24778] do_syscall_64+0x15f/0xf80 [ 790.575217][T24778] ? clear_bhb_loop+0x40/0x90 [ 790.575242][T24778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.575262][T24778] RIP: 0033:0x7ff429b9ce59 [ 790.575282][T24778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.575298][T24778] RSP: 002b:00007ff42a991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 790.575319][T24778] RAX: ffffffffffffffda RBX: 00007ff429e16090 RCX: 00007ff429b9ce59 [ 790.575334][T24778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 790.575345][T24778] RBP: 00007ff42a991090 R08: 0000000000000000 R09: 0000000000000000 [ 790.575358][T24778] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 790.575370][T24778] R13: 00007ff429e16128 R14: 00007ff429e16090 R15: 00007ffc5edc2048 [ 790.575403][T24778] [ 790.726002][T24786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6036'. [ 790.822103][T24788] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6037'. [ 790.980319][T24796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6039'. [ 791.042444][T24798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6040'. [ 791.069198][T24798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6040'. [ 791.106559][ T5639] Bluetooth: hci1: command tx timeout [ 791.386496][T24654] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.406769][T24654] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.414320][T24654] bridge_slave_0: entered allmulticast mode [ 791.422207][T24654] bridge_slave_0: entered promiscuous mode [ 791.443502][T24654] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.476505][T24654] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.485275][T24654] bridge_slave_1: entered allmulticast mode [ 791.515898][T24654] bridge_slave_1: entered promiscuous mode [ 791.527588][T24822] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6046'. [ 791.619761][T24654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.642993][T24654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.789526][T24654] team0: Port device team_slave_0 added [ 791.884102][T24654] team0: Port device team_slave_1 added [ 791.900248][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6050'. [ 792.054042][T24654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.061060][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.116859][T24654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.168650][T24654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.175670][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.201587][T24654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.398043][T24849] netlink: 'syz.1.6056': attribute type 1 has an invalid length. [ 792.490735][T24654] hsr_slave_0: entered promiscuous mode [ 792.498156][T24654] hsr_slave_1: entered promiscuous mode [ 792.504746][T24654] debugfs: 'hsr0' already exists in 'hsr' [ 792.512218][T24654] Cannot create hsr debugfs directory [ 792.540067][T24853] bond16: entered promiscuous mode [ 792.545325][T24853] bond16: entered allmulticast mode [ 792.551064][T24853] 8021q: adding VLAN 0 to HW filter on device bond16 [ 792.572828][T24856] ip6tnl3: entered allmulticast mode [ 792.892518][T24861] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6059'. [ 793.007079][T10136] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.015657][T10136] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.037208][ T7420] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.089016][T24869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 793.116636][ T7420] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.187155][ T5639] Bluetooth: hci1: command tx timeout [ 793.286914][ T7420] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.709195][T24897] tipc: New replicast peer: 255.255.255.255 [ 793.717124][T24897] tipc: Enabled bearer , priority 10 [ 793.883040][T24906] netlink: 'syz.2.6074': attribute type 1 has an invalid length. [ 793.998972][T24906] 8021q: adding VLAN 0 to HW filter on device bond8 [ 794.437260][T24928] netlink: 'syz.0.6080': attribute type 39 has an invalid length. [ 794.460758][T24928] bond1: (slave syz_tun): Removing an active aggregator [ 794.468411][T24928] bond1: (slave syz_tun): Releasing backup interface [ 794.661682][T24944] vlan2: entered promiscuous mode [ 794.761745][T24949] netlink: 'syz.3.6086': attribute type 1 has an invalid length. [ 794.827551][T24949] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.835119][ T5753] tipc: Node number set to 2951045787 [ 794.849665][T24949] bond9: (slave syz_tun): Removing an active aggregator [ 794.860263][T24949] bond9: (slave syz_tun): Releasing backup interface [ 794.876080][T24949] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 795.203808][T24654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 795.221528][T24654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.238096][T24654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 795.248618][T24654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.267128][ T5639] Bluetooth: hci1: command tx timeout [ 795.361347][T24654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 795.379739][T24957] net_ratelimit: 39 callbacks suppressed [ 795.379760][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.380122][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.383232][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.415535][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.424248][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.433336][T24654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.445463][T24654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 795.454041][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.462771][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.470995][T24654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.478888][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.487410][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.496104][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.887843][T24977] __nla_validate_parse: 6 callbacks suppressed [ 795.887863][T24977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6094'. [ 795.896918][T24654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.923701][T24654] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.938069][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.945343][T10850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.988507][T24654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 796.004903][T24654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 796.023246][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.030458][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.477479][T24654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.867124][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 796.981970][T25021] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6103'. [ 797.048736][T24654] veth0_vlan: entered promiscuous mode [ 797.114608][T25022] syzkaller0: entered promiscuous mode [ 797.115081][T25027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 797.120146][T25022] syzkaller0: entered allmulticast mode [ 797.140567][T24654] veth1_vlan: entered promiscuous mode [ 797.155951][T25027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6104'. [ 797.175451][T25027] netlink: 'syz.2.6104': attribute type 14 has an invalid length. [ 797.194760][T25027] netlink: 'syz.2.6104': attribute type 12 has an invalid length. [ 797.269769][T24654] veth0_macvtap: entered promiscuous mode [ 797.284093][T24654] veth1_macvtap: entered promiscuous mode [ 797.341190][T24654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.374194][T24654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.427137][T10863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.442837][T10863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.470732][T10863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.485310][T10863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.813585][T25040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 797.851484][T10863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.868569][T10863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.934106][T10837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.941992][T10837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.249931][T25052] x_tables: duplicate underflow at hook 1 [ 798.590282][T25064] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 798.632081][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6117'. [ 798.989219][T16221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 798.998766][T16221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 799.007389][T16221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.015448][T16221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.023127][T16221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 799.247260][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6119'. [ 799.379085][T25071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6119'. [ 799.525634][T25079] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6121'. [ 799.664581][T25081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 799.831395][T14822] bond15: (slave syz_tun): Removing an active aggregator [ 799.843544][T14822] bond15: (slave syz_tun): Releasing backup interface [ 800.050812][T25092] vlan2: entered promiscuous mode [ 801.107003][T16221] Bluetooth: hci2: command tx timeout [ 801.137307][T25116] netlink: 'syz.2.6132': attribute type 1 has an invalid length. [ 801.145125][T25116] __nla_validate_parse: 5 callbacks suppressed [ 801.145141][T25116] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6132'. [ 801.426686][ C1] net_ratelimit: 305 callbacks suppressed [ 801.426712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.444253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.452721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.998808][T25067] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.006111][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.013445][T25067] bridge_slave_0: entered allmulticast mode [ 802.021115][T25067] bridge_slave_0: entered promiscuous mode [ 802.033184][T16221] Bluetooth: hci0: link tx timeout [ 802.039023][T16221] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 802.189648][T25067] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.196873][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.204153][T25067] bridge_slave_1: entered allmulticast mode [ 802.217231][T25067] bridge_slave_1: entered promiscuous mode [ 802.300037][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.615823][T25067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.796081][T25067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.837857][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 802.940801][T25067] team0: Port device team_slave_0 added [ 802.973119][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 802.981330][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 803.095013][T25067] team0: Port device team_slave_1 added [ 803.156717][T25067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.163718][T25067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.189000][ T5639] Bluetooth: hci2: command tx timeout [ 803.265233][T25067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.299165][T25067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.308172][T25067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.362715][T25067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.912839][T25067] hsr_slave_0: entered promiscuous mode [ 803.948406][T25067] hsr_slave_1: entered promiscuous mode [ 803.967414][T25067] debugfs: 'hsr0' already exists in 'hsr' [ 803.976854][T25067] Cannot create hsr debugfs directory [ 804.070344][ T5639] Bluetooth: hci0: command 0x0405 tx timeout [ 804.157975][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 804.546708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.555356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.563853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.609432][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6150'. [ 805.266523][T16221] Bluetooth: hci2: command tx timeout [ 805.444319][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6155'. [ 805.453653][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6155'. [ 805.943745][T25221] Cannot find set identified by id 0 to match [ 806.111989][T25227] sctp: [Deprecated]: syz.2.6163 (pid 25227) Use of int in max_burst socket option deprecated. [ 806.111989][T25227] Use struct sctp_assoc_value instead [ 806.257771][T25227] bridge_slave_0: left allmulticast mode [ 806.276148][T25227] bridge_slave_0: left promiscuous mode [ 806.302846][T25227] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.330491][T25227] bridge_slave_1: left promiscuous mode [ 806.350190][T25227] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.403139][T25227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.414537][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6165'. [ 806.427965][T25227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.490744][T25227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.541844][T25246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6166'. [ 806.606910][T25246] vlan2: entered promiscuous mode [ 806.612975][T25246] gretap0: entered promiscuous mode [ 806.673641][T25251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6167'. [ 806.683643][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 806.782067][T25252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6166'. [ 806.880660][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.889061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.900471][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.908842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.955150][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.963565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.995914][T10863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.004222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.014354][T10863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.054819][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'. [ 807.132036][T25262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6170'. [ 807.191441][T25262] veth1_to_batadv: entered promiscuous mode [ 807.213449][T25262] veth1_to_batadv: left promiscuous mode [ 807.373545][T16221] Bluetooth: hci2: command tx timeout [ 807.440898][T25067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 807.621174][T25067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.654580][T25067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 807.709651][T25067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.732415][T25067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 807.772750][T25067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.797040][T25067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 807.916688][T25067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 808.077669][T25302] netlink: 'syz.4.6183': attribute type 58 has an invalid length. [ 808.109775][T25302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6183'. [ 808.272142][T25310] netlink: 'syz.3.6184': attribute type 13 has an invalid length. [ 808.807707][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.846684][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 808.866311][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 809.005036][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.096946][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.107730][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.312331][T25345] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 809.486962][T13046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 809.632472][T25337] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.640367][T25337] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.000563][T25337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.013497][T25337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.179264][ T7418] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 810.335937][T10839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.346818][T10839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.355765][T10839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.441435][T10839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.552155][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 810.595760][T25067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.670877][T25067] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.684110][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.691315][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.705774][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.723488][T10837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.151762][T25401] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 811.458415][T25411] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6201'. [ 811.819009][T25425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 811.863253][T25425] vlan2: entered promiscuous mode [ 812.082941][T10850] net_ratelimit: 12 callbacks suppressed [ 812.082961][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.096925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.109795][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.118202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.157871][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.166264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.191365][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.200140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.234562][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.242916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.277540][T25437] netlink: 203620 bytes leftover after parsing attributes in process `syz.3.6205'. [ 812.403244][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 812.535770][T25437] bond10: (slave syz_tun): Removing an active aggregator [ 812.544490][T25437] bond10: (slave syz_tun): Releasing backup interface [ 812.614969][T25067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.804162][T25459] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 812.835459][T25067] veth0_vlan: entered promiscuous mode [ 812.890057][T25067] veth1_vlan: entered promiscuous mode [ 812.907493][T25462] netlink: 'syz.2.6210': attribute type 1 has an invalid length. [ 812.983456][T25462] 8021q: adding VLAN 0 to HW filter on device bond9 [ 813.171079][T25462] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 813.219860][T25067] veth0_macvtap: entered promiscuous mode [ 813.244647][T25067] veth1_macvtap: entered promiscuous mode [ 813.289586][T25067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.428057][T25067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.444497][T10850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.459029][T10850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.492356][T10850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.511660][T10850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.538049][T25481] netlink: 'syz.2.6214': attribute type 1 has an invalid length. [ 813.591242][T25481] 8021q: adding VLAN 0 to HW filter on device bond10 [ 813.627492][T25481] bond9: (slave syz_tun): Removing an active aggregator [ 813.674296][T25481] bond9: (slave syz_tun): Releasing backup interface [ 813.722615][T25481] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 813.956193][T10837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.982481][T10837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.084039][T21785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.115308][T21785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.230365][T25507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6221'. [ 814.827222][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 814.839095][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 814.853163][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 814.863292][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 814.907102][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 815.126075][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6229'. [ 815.135794][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6229'. [ 815.631563][T21785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.701412][T25555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6234'. [ 816.245039][T21785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.637550][T21785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.863622][T21785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.026715][ T5639] Bluetooth: hci5: command tx timeout [ 817.260147][T25520] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.267516][T25520] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.274813][T25520] bridge_slave_0: entered allmulticast mode [ 817.295680][T25520] bridge_slave_0: entered promiscuous mode [ 817.357012][T25520] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.364410][T25520] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.378354][T25520] bridge_slave_1: entered allmulticast mode [ 817.386509][T25520] bridge_slave_1: entered promiscuous mode [ 817.529317][T21785] bridge_slave_1: left allmulticast mode [ 817.535032][T21785] bridge_slave_1: left promiscuous mode [ 817.547431][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.709562][T21785] bridge_slave_0: left allmulticast mode [ 817.715556][T21785] bridge_slave_0: left promiscuous mode [ 817.721389][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.885250][T25605] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6244'. [ 818.139064][T21785] bond4 (unregistering): (slave gretap1): Releasing active interface [ 818.572009][T21785] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 818.580577][T21785] bridge3 (unregistering): left promiscuous mode [ 818.866602][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 818.908084][T21785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.917211][T21785] bond_slave_0: left allmulticast mode [ 818.923979][T21785] bond0 (unregistering): Released all slaves [ 818.935267][T21785] bond1 (unregistering): Released all slaves [ 818.952847][T21785] bond2 (unregistering): Released all slaves [ 818.969019][T21785] bond3 (unregistering): Released all slaves [ 818.986565][T21785] bond4 (unregistering): Released all slaves [ 819.008998][T21785] bond5 (unregistering): Released all slaves [ 819.031713][T21785] bond6 (unregistering): (slave veth7): Releasing active interface [ 819.041441][T21785] bond6 (unregistering): Released all slaves [ 819.080782][T21785] bond7 (unregistering): Released all slaves [ 819.097034][T21785] bond8 (unregistering): Released all slaves [ 819.106719][ T5639] Bluetooth: hci5: command tx timeout [ 819.121139][T21785] bond9 (unregistering): Released all slaves [ 819.139166][T21785] bond10 (unregistering): Released all slaves [ 819.163723][T25520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.182901][T25520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.201087][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 819.263110][T25520] team0: Port device team_slave_0 added [ 819.271928][T25520] team0: Port device team_slave_1 added [ 819.323025][T25520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.330037][T25520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.390648][T25520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.429260][T25520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.440032][T25520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.466083][T25520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.492015][T21785] 5n: left promiscuous mode [ 819.703156][T25520] hsr_slave_0: entered promiscuous mode [ 819.710272][T25520] hsr_slave_1: entered promiscuous mode [ 819.717320][T25520] debugfs: 'hsr0' already exists in 'hsr' [ 819.723118][T25520] Cannot create hsr debugfs directory [ 819.754507][T21785] tipc: Disabling bearer [ 819.774814][T21785] tipc: Left network mode [ 820.039981][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 820.263045][T25630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6246'. [ 820.325637][T25630] veth1_to_batadv: entered promiscuous mode [ 820.355534][T25630] veth1_to_batadv: left promiscuous mode [ 820.651164][T25646] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6249'. [ 820.964690][T21785] batadv0: left promiscuous mode [ 820.983206][T21785] veth1_to_batadv: left promiscuous mode [ 821.003188][T21785] hsr_slave_0: left promiscuous mode [ 821.014799][T21785] hsr_slave_1: left promiscuous mode [ 821.027463][T21785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.042705][T21785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.063726][T21785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.080254][T21785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.100028][T21785] veth1_macvtap: left promiscuous mode [ 821.105581][T21785] veth0_macvtap: left promiscuous mode [ 821.290984][ T5639] Bluetooth: hci5: command tx timeout [ 821.372523][T21785] team_slave_1 (unregistering): left promiscuous mode [ 821.380104][T21785] team0 (unregistering): Port device team_slave_1 removed [ 821.399269][T21785] team_slave_0 (unregistering): left promiscuous mode [ 821.411894][T21785] team0 (unregistering): Port device team_slave_0 removed [ 822.332359][T25520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.344468][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.354759][T25520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.366213][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.375871][T25520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.424586][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.432602][T25520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.458894][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.797408][T25520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.820894][T25520] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.898665][T25520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.911529][T25520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.926478][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.933656][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.957599][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.964801][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.377704][T21785] IPVS: stop unused estimator thread 0... [ 823.407289][ T5639] Bluetooth: hci5: command tx timeout [ 823.662491][T25520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.732975][T25520] veth0_vlan: entered promiscuous mode [ 823.778283][T25520] veth1_vlan: entered promiscuous mode [ 823.820567][T25520] veth0_macvtap: entered promiscuous mode [ 823.836289][T25520] veth1_macvtap: entered promiscuous mode [ 823.885063][T25520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.898121][T25520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.933633][T10854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.042412][T10858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.084714][T10858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.106294][T10858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.158210][T10837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.200896][T10837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.353574][T10854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.377004][T10854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.421331][T25731] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6253'. [ 824.553041][T25736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6254'. [ 824.697059][T25742] netlink: 'syz.3.6223': attribute type 29 has an invalid length. [ 824.721912][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6223'. [ 824.925694][T25752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6257'. [ 824.934791][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6257'. [ 826.309693][T25782] syzkaller0: entered promiscuous mode [ 826.315265][T25782] syzkaller0: entered allmulticast mode [ 826.916670][T25800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6273'. [ 826.926136][T25800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6273'. [ 827.529718][T25816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6277'. [ 827.703689][ T36] net_ratelimit: 61 callbacks suppressed [ 827.703707][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.717773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.737593][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.745940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.755406][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.763744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.787206][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.795500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.810982][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.819298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.532071][T25816] vlan2: entered promiscuous mode [ 829.597038][T25821] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6278'. [ 829.953061][T25838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 829.971285][T25842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6286'. [ 829.981941][T25842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 830.066773][T25846] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6287'. [ 830.077497][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6287'. [ 830.268960][T25848] block nbd0: server does not support multiple connections per device. [ 830.278679][T25848] block nbd0: shutting down sockets [ 830.530221][T25856] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 830.597985][T25858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6292'. [ 830.617896][T25858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6292'. [ 830.745798][T25862] netlink: 'syz.2.6295': attribute type 3 has an invalid length. [ 830.823294][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6295'. [ 830.839741][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6295'. [ 830.962435][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6300'. [ 831.041326][T25875] netlink: 'syz.0.6300': attribute type 15 has an invalid length. [ 831.198334][T25886] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 831.383678][T25892] netlink: 'syz.0.6308': attribute type 2 has an invalid length. [ 831.401823][T25892] netlink: 'syz.0.6308': attribute type 8 has an invalid length. [ 831.938343][T25927] vlan2: entered promiscuous mode [ 831.943551][T25927] gretap0: entered promiscuous mode [ 832.031925][T25932] hma(kX: entered promiscuous mode [ 832.179310][T25943] netlink: 'syz.1.6327': attribute type 1 has an invalid length. [ 832.195431][T25943] gretap1: entered allmulticast mode [ 832.709368][T16221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.721871][T16221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.730458][T16221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.739080][T16221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.749774][T16221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 833.269326][T16611] bond10: (slave syz_tun): Removing an active aggregator [ 833.276992][T16611] bond10: (slave syz_tun): Releasing backup interface [ 833.815240][T26015] net_ratelimit: 4 callbacks suppressed [ 833.815261][T26015] IPVS: sh: FWM 3 0x00000003 - no destination available [ 834.005056][T26021] netlink: 'syz.4.6345': attribute type 1 has an invalid length. [ 834.108794][T26026] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 834.138988][T26021] bond1: entered promiscuous mode [ 834.187712][T26028] netlink: 'syz.1.6349': attribute type 1 has an invalid length. [ 834.196223][T26021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.234586][T26018] vlan2: entered allmulticast mode [ 834.243081][T26018] bond1: entered allmulticast mode [ 834.323737][T26018] bond1: (slave bridge2): making interface the new active one [ 834.333215][T26018] bridge2: entered promiscuous mode [ 834.339082][T26018] bridge2: entered allmulticast mode [ 834.349651][T26018] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 834.396662][T26030] netlink: 'syz.1.6350': attribute type 1 has an invalid length. [ 834.892750][T16221] Bluetooth: hci3: command tx timeout [ 835.013418][T25964] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.020694][T25964] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.027984][T25964] bridge_slave_0: entered allmulticast mode [ 835.035828][T25964] bridge_slave_0: entered promiscuous mode [ 835.048974][T25964] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.056206][T25964] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.063476][T25964] bridge_slave_1: entered allmulticast mode [ 835.071336][T25964] bridge_slave_1: entered promiscuous mode [ 835.128980][T25964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.141552][T25964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.179823][T25964] team0: Port device team_slave_0 added [ 835.188560][T25964] team0: Port device team_slave_1 added [ 835.252416][T25964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.259423][T25964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.285341][T25964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.339934][T25964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.346933][T25964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.372849][T25964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.704071][T25964] hsr_slave_0: entered promiscuous mode [ 835.710841][T25964] hsr_slave_1: entered promiscuous mode [ 835.717612][T25964] debugfs: 'hsr0' already exists in 'hsr' [ 835.723393][T25964] Cannot create hsr debugfs directory [ 835.730615][T26057] __nla_validate_parse: 8 callbacks suppressed [ 835.730635][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6356'. [ 835.745601][T26062] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6358'. [ 835.847410][T26064] netlink: 'syz.4.6359': attribute type 1 has an invalid length. [ 836.042497][T26064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 836.089504][T26078] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 836.489655][T26095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6368'. [ 836.944368][T10837] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 836.955121][T16221] Bluetooth: hci3: command tx timeout [ 837.632855][T24654] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 837.649064][T24654] CPU: 1 UID: 0 PID: 24654 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 837.649093][T24654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 837.649105][T24654] Call Trace: [ 837.649114][T24654] [ 837.649127][T24654] dump_stack_lvl+0xe8/0x150 [ 837.649155][T24654] dump_header+0xd3/0x4c0 [ 837.649187][T24654] oom_kill_process+0x3ab/0x970 [ 837.649217][T24654] out_of_memory+0x106c/0x1410 [ 837.649240][T24654] ? try_charge_memcg+0xbb9/0x1570 [ 837.649276][T24654] ? __pfx___mutex_lock+0x10/0x10 [ 837.649302][T24654] ? __pfx_out_of_memory+0x10/0x10 [ 837.649324][T24654] ? do_raw_spin_unlock+0xf5/0x210 [ 837.649363][T24654] try_charge_memcg+0xc77/0x1570 [ 837.649409][T24654] ? __pfx_try_charge_memcg+0x10/0x10 [ 837.649434][T24654] ? percpu_ref_tryget+0x15/0x180 [ 837.649484][T24654] ? charge_memcg+0x23/0x2b0 [ 837.649514][T24654] charge_memcg+0x1a2/0x2b0 [ 837.649547][T24654] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 837.649592][T24654] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 837.649624][T24654] __swap_cache_prepare_and_add+0xdc/0x700 [ 837.649656][T24654] ? page_rmappable_folio+0x9a/0x170 [ 837.649696][T24654] swap_cache_alloc_folio+0xf1/0x240 [ 837.649726][T24654] swap_cluster_readahead+0x355/0x670 [ 837.649758][T24654] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 837.649798][T24654] ? get_vma_policy+0x27b/0x3c0 [ 837.649832][T24654] swapin_readahead+0x196/0xc50 [ 837.649861][T24654] ? swap_table_get+0x1e/0x260 [ 837.649889][T24654] ? __pfx_swapin_readahead+0x10/0x10 [ 837.649916][T24654] ? swap_table_get+0x1e/0x260 [ 837.649938][T24654] ? swap_table_get+0x1e/0x260 [ 837.649958][T24654] ? swap_table_get+0x1e/0x260 [ 837.649982][T24654] ? swap_table_get+0x216/0x260 [ 837.650006][T24654] ? swap_cache_get_folio+0x2e4/0x2f0 [ 837.650038][T24654] do_swap_page+0x555/0x5120 [ 837.650068][T24654] ? __pte_offset_map+0x29/0x240 [ 837.650094][T24654] ? __pte_offset_map+0x29/0x240 [ 837.650129][T24654] ? do_swap_page+0x128/0x5120 [ 837.650151][T24654] ? __pfx_do_swap_page+0x10/0x10 [ 837.650173][T24654] ? __pte_offset_map+0x1ae/0x240 [ 837.650201][T24654] ? pte_offset_map_rw_nolock+0xea/0x160 [ 837.650231][T24654] handle_mm_fault+0x12d4/0x3170 [ 837.650278][T24654] ? handle_mm_fault+0xee/0x3170 [ 837.650311][T24654] ? __pfx_handle_mm_fault+0x10/0x10 [ 837.650333][T24654] ? lock_vma_under_rcu+0x45a/0x500 [ 837.650391][T24654] do_user_addr_fault+0xa73/0x1340 [ 837.650422][T24654] ? rcu_is_watching+0x15/0xb0 [ 837.650447][T24654] ? trace_page_fault_user+0x84/0x1e0 [ 837.650473][T24654] exc_page_fault+0x6a/0xc0 [ 837.650503][T24654] asm_exc_page_fault+0x26/0x30 [ 837.650524][T24654] RIP: 0033:0x7f018aa6ae77 [ 837.650544][T24654] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 837.650561][T24654] RSP: 002b:00007ffc2a2313c0 EFLAGS: 00010206 [ 837.650579][T24654] RAX: 0000001b30524000 RBX: 00000000000000ae RCX: 00000000000cc588 [ 837.650593][T24654] RDX: 0000000007f2656d RSI: 00007ffc2a231450 RDI: 0000000000000001 [ 837.650607][T24654] RBP: 00007ffc2a2313fc R08: 000000001e509b09 R09: 3fffffffffffffff [ 837.650621][T24654] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 837.650634][T24654] R13: 00000000000927c0 R14: 00000000000cc55e R15: 00007ffc2a231450 [ 837.650668][T24654] [ 837.651800][T24654] memory: usage 307200kB, limit 307200kB, failcnt 1134 [ 838.007792][T24654] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 838.015772][T24654] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 838.023526][T24654] Memory cgroup stats for /syz4: [ 838.023872][T24654] cache 0 [ 838.032514][T24654] rss 12288 [ 838.035685][T24654] rss_huge 0 [ 838.039435][T24654] shmem 0 [ 838.042427][T24654] mapped_file 0 [ 838.045903][T24654] dirty 0 [ 838.049479][T24654] writeback 0 [ 838.052824][T24654] workingset_refault_anon 80 [ 838.062697][T24654] workingset_refault_file 589 [ 838.079059][T24654] swap 143360 [ 838.086057][T24654] swapcached 794624 [ 838.102990][T24654] pgpgin 114672 [ 838.107059][T24654] pgpgout 114656 [ 838.110669][T24654] pgfault 281167 [ 838.114252][T24654] pgmajfault 49 [ 838.118602][T24654] inactive_anon 36864 [ 838.122638][T24654] active_anon 28672 [ 838.126808][T24654] inactive_file 0 [ 838.130486][T24654] active_file 0 [ 838.133966][T24654] unevictable 0 [ 838.138013][T24654] hierarchical_memory_limit 314572800 [ 838.143432][T24654] hierarchical_memsw_limit 9223372036854771712 [ 838.150331][T24654] total_cache 0 [ 838.153843][T24654] total_rss 12288 [ 838.157937][T24654] total_rss_huge 0 [ 838.162158][T24654] total_shmem 0 [ 838.165686][T24654] total_mapped_file 0 [ 838.170064][T24654] total_dirty 0 [ 838.173570][T24654] total_writeback 0 [ 838.179316][T24654] total_workingset_refault_anon 80 [ 838.184486][T24654] total_workingset_refault_file 589 [ 838.190101][T24654] total_swap 143360 [ 838.195163][T24654] total_swapcached 794624 [ 838.207596][T24654] total_pgpgin 114672 [ 838.211642][T24654] total_pgpgout 114656 [ 838.215737][T24654] total_pgfault 281167 [ 838.220559][T24654] total_pgmajfault 49 [ 838.224602][T24654] total_inactive_anon 36864 [ 838.234973][T24654] total_active_anon 28672 [ 838.241243][T24654] total_inactive_file 0 [ 838.245451][T24654] total_active_file 0 [ 838.250036][T24654] total_unevictable 0 [ 838.254077][T24654] anon_cost 0 [ 838.257770][T24654] file_cost 0 [ 838.261122][T24654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6371,pid=26110,uid=0 [ 838.279774][T24654] Memory cgroup out of memory: Killed process 26110 (syz.4.6371) total-vm:102292kB, anon-rss:1252kB, file-rss:22728kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 838.598710][T10837] bond1 (unregistering): Released all slaves [ 838.665396][T10837] bond2 (unregistering): Released all slaves [ 838.741604][T10837] bond3 (unregistering): Released all slaves [ 838.751553][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.031603][T16221] Bluetooth: hci3: command tx timeout [ 839.113631][T10837] bond4 (unregistering): (slave bond5): Releasing backup interface [ 839.147622][T10837] bond4 (unregistering): Released all slaves [ 839.168350][T10837] bond5 (unregistering): Released all slaves [ 839.189574][T10837] bond6 (unregistering): Released all slaves [ 839.210547][T10837] bond0 (unregistering): Released all slaves [ 839.231353][T10837] bond7 (unregistering): Released all slaves [ 839.258762][T10837] bond8 (unregistering): Released all slaves [ 839.291799][T10837] bond9 (unregistering): Released all slaves [ 839.313676][T10837] bond10 (unregistering): Released all slaves [ 839.365622][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 839.427891][T26133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6373'. [ 839.439233][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 839.511292][T26133] vlan2: entered promiscuous mode [ 839.821302][T10837] hm3): left promiscuous mode [ 840.400684][T26160] hsr0: entered promiscuous mode [ 840.539543][T26159] hsr0: left promiscuous mode [ 840.560335][T26166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6379'. [ 840.851208][T26174] hsr0: entered promiscuous mode [ 841.106837][T16221] Bluetooth: hci3: command tx timeout [ 841.139367][T26173] hsr0: left promiscuous mode [ 841.412239][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.421712][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.449915][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.465331][T26195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6388'. [ 841.478665][T26195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6388'. [ 841.623494][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.631384][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.662067][ T5753] IPVS: starting estimator thread 0... [ 841.756466][T26196] IPVS: using max 31 ests per chain, 74400 per kthread [ 842.263154][T26232] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6396'. [ 842.688404][T25964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 842.731475][T25964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.739805][T25964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 842.798179][T25964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.824491][T25964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 842.853538][T25964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.927157][T25964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 842.942343][T25964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.196871][T25964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.287610][T25964] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.448397][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.455582][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.489755][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.497005][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.529368][T26286] mac80211_hwsim hwsim66 ;: renamed from wlan0 [ 843.746530][ C1] ------------[ cut here ]------------ [ 843.752289][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 843.759015][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd3f/0x1040, CPU#1: cmp/26291 [ 843.768264][ C1] Modules linked in: [ 843.772485][ C1] CPU: 1 UID: 0 PID: 26291 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 843.781291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 843.791394][ C1] RIP: 0010:__queue_work+0xd67/0x1040 [ 843.796823][ C1] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 4a c0 a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 843.816469][ C1] RSP: 0018:ffffc90000a08bd8 EFLAGS: 00010082 [ 843.822572][ C1] RAX: 1ffff1100e54b94e RBX: 0000000000000008 RCX: ffff888060353d80 [ 843.830559][ C1] RDX: ffff88807b4e2970 RSI: ffffffff8a9ca190 RDI: ffffffff90341c90 [ 843.838550][ C1] RBP: 0000000000000100 R08: ffffffff90311df7 R09: 1ffffffff20623be [ 843.846544][ C1] R10: dffffc0000000000 R11: ffffffff818d48b0 R12: dffffc0000000000 [ 843.854531][ C1] R13: ffff888072a5ca58 R14: ffffffff90341c90 R15: ffff88807b4e2970 [ 843.862524][ C1] FS: 00007fb68a0dac80(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 843.871474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.878070][ C1] CR2: 00007fb68a442000 CR3: 00000000a8ed0000 CR4: 00000000003526f0 [ 843.886061][ C1] Call Trace: [ 843.889364][ C1] [ 843.892232][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 843.897297][ C1] call_timer_fn+0x192/0x5e0 [ 843.901931][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 843.907773][ C1] ? call_timer_fn+0xd4/0x5e0 [ 843.912484][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 843.917643][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 843.922794][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 843.928636][ C1] __run_timer_base+0x67e/0x8b0 [ 843.933518][ C1] ? ktime_get+0x45/0x220 [ 843.937923][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 843.943334][ C1] run_timer_softirq+0xb7/0x170 [ 843.948211][ C1] handle_softirqs+0x22a/0x840 [ 843.952996][ C1] ? __irq_exit_rcu+0xca/0x220 [ 843.957791][ C1] __irq_exit_rcu+0xca/0x220 [ 843.962405][ C1] irq_exit_rcu+0x9/0x30 [ 843.966670][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 843.972341][ C1] [ 843.975319][ C1] [ 843.978276][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 843.984277][ C1] RIP: 0010:unwind_get_return_address+0x0/0x90 [ 843.990452][ C1] Code: f7 49 89 f7 e8 d1 11 ba 00 4c 89 f7 4c 89 fe e9 29 ff ff ff e8 a1 73 33 0a 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df [ 844.010077][ C1] RSP: 0018:ffffc9000509f180 EFLAGS: 00000202 [ 844.016172][ C1] RAX: 0000000090ca5701 RBX: ffffc9000509f240 RCX: 0000000000000046 [ 844.024182][ C1] RDX: 0000000000000001 RSI: ffffffff8e2250b9 RDI: ffffc9000509f188 [ 844.032212][ C1] RBP: ffffc9000509f210 R08: ffffc9000509f2b0 R09: 0000000000000000 [ 844.040218][ C1] R10: ffffc9000509f1d8 R11: fffff52000a13e3d R12: ffff888060353d80 [ 844.048230][ C1] R13: ffff888041f6ae00 R14: ffffffff81b0efc0 R15: ffffc9000509f188 [ 844.056242][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 844.062460][ C1] arch_stack_walk+0xfb/0x150 [ 844.067182][ C1] ? kasan_save_track+0x3e/0x80 [ 844.072059][ C1] ? mas_alloc_nodes+0x291/0x350 [ 844.077018][ C1] stack_trace_save+0xa9/0x100 [ 844.081865][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 844.087259][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 844.092573][ C1] ? kernel_text_address+0xa5/0xe0 [ 844.097725][ C1] ? __kernel_text_address+0xd/0x30 [ 844.102947][ C1] kasan_save_track+0x3e/0x80 [ 844.107682][ C1] __kasan_slab_alloc+0x6c/0x80 [ 844.112557][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 844.118044][ C1] ? mas_alloc_nodes+0x291/0x350 [ 844.123017][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 844.128691][ C1] mas_alloc_nodes+0x291/0x350 [ 844.133471][ C1] mas_preallocate+0x2d6/0x640 [ 844.138262][ C1] ? rcu_is_watching+0x15/0xb0 [ 844.143042][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 844.148444][ C1] ? __mas_set_range+0x12f/0x3c0 [ 844.153401][ C1] __split_vma+0x318/0xa40 [ 844.157848][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 844.162802][ C1] ? __pfx___split_vma+0x10/0x10 [ 844.167774][ C1] ? can_vma_merge_left+0x191/0x3e0 [ 844.173013][ C1] vma_modify+0x97e/0x1e10 [ 844.177508][ C1] vma_modify_flags+0x24b/0x330 [ 844.182392][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 844.187810][ C1] ? aa_file_perm+0x192/0x15e0 [ 844.192621][ C1] ? mprotect_fixup+0xfb/0xb60 [ 844.197430][ C1] mprotect_fixup+0x62a/0xb60 [ 844.202156][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 844.207415][ C1] ? apparmor_file_mprotect+0x2f7/0x400 [ 844.212994][ C1] do_mprotect_pkey+0x8d5/0xd20 [ 844.217872][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 844.223283][ C1] ? exc_page_fault+0x6a/0xc0 [ 844.228004][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.234087][ C1] __x64_sys_mprotect+0x80/0x90 [ 844.238975][ C1] do_syscall_64+0x15f/0xf80 [ 844.243617][ C1] ? trace_irq_disable+0x3b/0x140 [ 844.248673][ C1] ? clear_bhb_loop+0x40/0x90 [ 844.253375][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.259280][ C1] RIP: 0033:0x7fb68a4712c7 [ 844.263715][ C1] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 844.283344][ C1] RSP: 002b:00007ffcc28c7888 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 844.291784][ C1] RAX: ffffffffffffffda RBX: 00007fb68a4450c0 RCX: 00007fb68a4712c7 [ 844.299774][ C1] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007fb68a441000 [ 844.307760][ C1] RBP: 00007ffcc28c7b50 R08: 0000000000000000 R09: 00007fb68a3c2bf7 [ 844.315758][ C1] R10: 00007fb68a4450c0 R11: 0000000000000206 R12: 0000000000000008 [ 844.323753][ C1] R13: 000001b4ee8372a3 R14: 0000000000000000 R15: 00007fb68a485310 [ 844.331778][ C1] [ 844.334855][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 844.342158][ C1] CPU: 1 UID: 0 PID: 26291 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 844.350933][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 844.361006][ C1] Call Trace: [ 844.364307][ C1] [ 844.367171][ C1] vpanic+0x56c/0xa60 [ 844.371208][ C1] ? __pfx__printk+0x10/0x10 [ 844.375822][ C1] ? __pfx_vpanic+0x10/0x10 [ 844.380339][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 844.385639][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 844.390857][ C1] panic+0xc5/0xd0 [ 844.394605][ C1] ? __pfx_panic+0x10/0x10 [ 844.399057][ C1] __warn+0x315/0x4c0 [ 844.403051][ C1] ? __queue_work+0xd3f/0x1040 [ 844.407828][ C1] ? __queue_work+0xd3f/0x1040 [ 844.412650][ C1] __report_bug+0x29a/0x540 [ 844.417175][ C1] ? __queue_work+0xd3f/0x1040 [ 844.421959][ C1] ? __pfx___report_bug+0x10/0x10 [ 844.427009][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 844.432314][ C1] ? look_up_lock_class+0x57/0x110 [ 844.437452][ C1] ? register_lock_class+0x31/0x2e0 [ 844.442666][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 844.447996][ C1] report_bug_entry+0x19a/0x290 [ 844.452888][ C1] ? __queue_work+0xd67/0x1040 [ 844.457684][ C1] ? __queue_work+0xd6c/0x1040 [ 844.462471][ C1] handle_bug+0xce/0x200 [ 844.466741][ C1] exc_invalid_op+0x1a/0x50 [ 844.471323][ C1] asm_exc_invalid_op+0x1a/0x20 [ 844.476201][ C1] RIP: 0010:__queue_work+0xd67/0x1040 [ 844.481596][ C1] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 4a c0 a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 844.501227][ C1] RSP: 0018:ffffc90000a08bd8 EFLAGS: 00010082 [ 844.507311][ C1] RAX: 1ffff1100e54b94e RBX: 0000000000000008 RCX: ffff888060353d80 [ 844.515302][ C1] RDX: ffff88807b4e2970 RSI: ffffffff8a9ca190 RDI: ffffffff90341c90 [ 844.523288][ C1] RBP: 0000000000000100 R08: ffffffff90311df7 R09: 1ffffffff20623be [ 844.531265][ C1] R10: dffffc0000000000 R11: ffffffff818d48b0 R12: dffffc0000000000 [ 844.539261][ C1] R13: ffff888072a5ca58 R14: ffffffff90341c90 R15: ffff88807b4e2970 [ 844.547251][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 844.553077][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 844.558408][ C1] ? __queue_work+0xd25/0x1040 [ 844.563186][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 844.568236][ C1] call_timer_fn+0x192/0x5e0 [ 844.572842][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 844.578667][ C1] ? call_timer_fn+0xd4/0x5e0 [ 844.583377][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 844.588549][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 844.593699][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 844.599552][ C1] __run_timer_base+0x67e/0x8b0 [ 844.604430][ C1] ? ktime_get+0x45/0x220 [ 844.608809][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 844.614220][ C1] run_timer_softirq+0xb7/0x170 [ 844.619089][ C1] handle_softirqs+0x22a/0x840 [ 844.623875][ C1] ? __irq_exit_rcu+0xca/0x220 [ 844.628668][ C1] __irq_exit_rcu+0xca/0x220 [ 844.633273][ C1] irq_exit_rcu+0x9/0x30 [ 844.637529][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 844.643188][ C1] [ 844.646133][ C1] [ 844.649104][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.655100][ C1] RIP: 0010:unwind_get_return_address+0x0/0x90 [ 844.661270][ C1] Code: f7 49 89 f7 e8 d1 11 ba 00 4c 89 f7 4c 89 fe e9 29 ff ff ff e8 a1 73 33 0a 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df [ 844.680894][ C1] RSP: 0018:ffffc9000509f180 EFLAGS: 00000202 [ 844.686985][ C1] RAX: 0000000090ca5701 RBX: ffffc9000509f240 RCX: 0000000000000046 [ 844.694972][ C1] RDX: 0000000000000001 RSI: ffffffff8e2250b9 RDI: ffffc9000509f188 [ 844.702968][ C1] RBP: ffffc9000509f210 R08: ffffc9000509f2b0 R09: 0000000000000000 [ 844.710958][ C1] R10: ffffc9000509f1d8 R11: fffff52000a13e3d R12: ffff888060353d80 [ 844.718969][ C1] R13: ffff888041f6ae00 R14: ffffffff81b0efc0 R15: ffffc9000509f188 [ 844.726972][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 844.733176][ C1] arch_stack_walk+0xfb/0x150 [ 844.737891][ C1] ? kasan_save_track+0x3e/0x80 [ 844.742797][ C1] ? mas_alloc_nodes+0x291/0x350 [ 844.747789][ C1] stack_trace_save+0xa9/0x100 [ 844.752596][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 844.757994][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 844.763213][ C1] ? kernel_text_address+0xa5/0xe0 [ 844.768351][ C1] ? __kernel_text_address+0xd/0x30 [ 844.773576][ C1] kasan_save_track+0x3e/0x80 [ 844.778344][ C1] __kasan_slab_alloc+0x6c/0x80 [ 844.783219][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 844.788707][ C1] ? mas_alloc_nodes+0x291/0x350 [ 844.793689][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 844.799348][ C1] mas_alloc_nodes+0x291/0x350 [ 844.804155][ C1] mas_preallocate+0x2d6/0x640 [ 844.808944][ C1] ? rcu_is_watching+0x15/0xb0 [ 844.813729][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 844.819045][ C1] ? __mas_set_range+0x12f/0x3c0 [ 844.824004][ C1] __split_vma+0x318/0xa40 [ 844.828441][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 844.833394][ C1] ? __pfx___split_vma+0x10/0x10 [ 844.838361][ C1] ? can_vma_merge_left+0x191/0x3e0 [ 844.843589][ C1] vma_modify+0x97e/0x1e10 [ 844.848065][ C1] vma_modify_flags+0x24b/0x330 [ 844.852946][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 844.858364][ C1] ? aa_file_perm+0x192/0x15e0 [ 844.863171][ C1] ? mprotect_fixup+0xfb/0xb60 [ 844.867980][ C1] mprotect_fixup+0x62a/0xb60 [ 844.872698][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 844.877980][ C1] ? apparmor_file_mprotect+0x2f7/0x400 [ 844.883567][ C1] do_mprotect_pkey+0x8d5/0xd20 [ 844.888492][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 844.893904][ C1] ? exc_page_fault+0x6a/0xc0 [ 844.898619][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.904790][ C1] __x64_sys_mprotect+0x80/0x90 [ 844.909670][ C1] do_syscall_64+0x15f/0xf80 [ 844.914280][ C1] ? trace_irq_disable+0x3b/0x140 [ 844.919330][ C1] ? clear_bhb_loop+0x40/0x90 [ 844.924029][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.929940][ C1] RIP: 0033:0x7fb68a4712c7 [ 844.934371][ C1] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 844.953996][ C1] RSP: 002b:00007ffcc28c7888 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 844.962444][ C1] RAX: ffffffffffffffda RBX: 00007fb68a4450c0 RCX: 00007fb68a4712c7 [ 844.970467][ C1] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007fb68a441000 [ 844.978476][ C1] RBP: 00007ffcc28c7b50 R08: 0000000000000000 R09: 00007fb68a3c2bf7 [ 844.986485][ C1] R10: 00007fb68a4450c0 R11: 0000000000000206 R12: 0000000000000008 [ 844.994499][ C1] R13: 000001b4ee8372a3 R14: 0000000000000000 R15: 00007fb68a485310 [ 845.002530][ C1] [ 845.008987][ C1] Kernel Offset: disabled [ 845.013333][ C1] Rebooting in 86400 seconds..