last executing test programs: 6.181357358s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) pipe(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x10001, 0x12) sendfile(0xffffffffffffffff, r4, 0x0, 0xf03a0005) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00042abd7000ffdbdf2501000000080002eb02000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000841) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24048014}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x7ffffffe, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)={@cgroup, r3, 0x10, 0x4}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="0102001800019d965a01faabb5ac74755102680000008ba00010e40005acc027000005190000000000000000ec814cd32ad5b7585800"/68], 0x3c}}, 0x4010) 6.014115394s ago: executing program 0 (id=1764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180500006300000000000000feffffffb708c3ff000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.717248987s ago: executing program 0 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400102, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x5]}, {0x0, 0x200, 0xd, 0x100000001}}, 0x1ff, &(0x7f0000000200), &(0x7f0000000240)=0x3}) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x2004c080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB="080006"], 0x24}}, 0x4) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r3, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x60}}, 0xc084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x24004051) (async, rerun: 64) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) sendmsg$802154_dgram(r10, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) (async, rerun: 32) ioctl$sock_SIOCDELDLCI(r10, 0x8981, &(0x7f0000000440)={'ip6_vti0\x00', 0x7fff}) (async, rerun: 32) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000001c40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x1, 0x6, "42b2f4", 0x5, 0x32, 0x0, @private2, @private1, [], "a6c8658b15e0f1bb"}}}}}}}, 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x28, 0x31, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x18, 0xf2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x90, 0x0, 0x1, [@nested={0x8, 0xb0, 0x0, 0x1, [@nested={0x4, 0xc6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64=r11, @ANYRESDEC=r11], &(0x7f00000001c0)='syzkaller\x00', 0x88d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket(0x28, 0x2, 0x28) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="9be120d30249ef91f1647d5ede9d48c2321b4068fbef4a49638400437207d5d84582a1e9920bad7952f6e285e5126f7749476a8e06d03a349b", @ANYRES16=r13, @ANYBLOB="040028bd7000ffdbdf25020000005000018014000200697036677265300000000000000000001400020069705f7674693000000000000000000014000200766c616e31000000000000000000000008000300010000000800030000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4c880}, 0x80) 5.271443771s ago: executing program 3 (id=1770): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x10ff, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 4.992818079s ago: executing program 3 (id=1773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x29, '\x00', 0x0, @fallback=0x32}, 0x94) bpf$PROG_LOAD(0x25, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00006dbffc), 0x4) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x7, 0x7fff}) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r5, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x400002}], 0x2, 0x20000020, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="0100feffffff00000000030000007000018038000400200001000a004e2400006ef400000000000000000000000000000000060000001400020002000000e0000002000000000000000034000280080002000300000008000400ff07000008000400030000000800020003000000e5ff020008000000080003000dcd0000600469c01ba9817d18421c511e89bd66aeb8929f2445b6c1b7d144e05d09287681ec7d5da72980e6445539b0fd2ae009f1325856c07ccdd81679719fb9ba07f39fece09639a2e1f62780860bc12618a4df90338238c044"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 4.649062658s ago: executing program 4 (id=1777): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@deltaction={0x60, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendto$packet(r1, &(0x7f0000000080)="ee5e4435104192bbdb0357bc8e818ff4fc513f71ef774bec229ff3e4dc4a3b6cdf2ee8d041fb5c603eac8934f403e960e9fa8ececeaffe227b75295cfb026bc4c7b48088bba1e62810c92959fb9f3f230b0832ce65ea13ffe4235fdcbc17bebc9bbb342d709fa517d898f5799fe48213a6b71ebb9ca3228478eef97d2e3bad8ea5bb08683c8bc3544dd57238cc4e9a5a76e54e738356c3483a65138d3d14b6f15ac9cd115f2ff69a91d1de090841b22507b38901cc", 0xb5, 0x4080, &(0x7f0000000140)={0x11, 0x1a, r4, 0x1, 0xfd, 0x6, @link_local}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) 4.648176155s ago: executing program 2 (id=1778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180500006300000000000000feffffffb708d0ff000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.413179463s ago: executing program 2 (id=1780): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x4004855) 4.297484212s ago: executing program 4 (id=1781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffffff}}}}]}]}, 0x84}}, 0x0) 4.240011322s ago: executing program 2 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000104010000020000000000000000", @ANYRES32=0x0, @ANYBLOB="01310100004000002c0012800e00010069703665727370616e0000001800028006000200040000000400120008000500e0"], 0x4c}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb6c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb3c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f83}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xb0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0xfffffffe}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb6c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async, rerun: 64) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) (rerun: 64) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.193194342s ago: executing program 0 (id=1784): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffc01, @remote, 0xce45}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)="d5bfb964af105cf17cb75c43a83febab4e435a9011b55288df2f1fbeec257174367534b759a05a4707bf603418d142de4e8f8168ccb98414dd776ad798bc2cbdede3fc9963f09b2393cb813f869a3f1fcdc615ebb6b3e4e34a3ef62360c61eff0a", 0x61}, {&(0x7f0000000400)="22eaaeef2ad0d10f0092006256fc8f7d761b2a0b1e3032", 0x17}, {&(0x7f00000004c0)="1579c7bf3b794482d6e95939cdd2ce4e09bd496fa4a374e6a00378a48e1541d0340f5521b631edfab29f9c13d8c8a2cbba5ef6f50cefc01d15673b8c250999277bf31b92a04d29e962e3b8a147cdb5", 0x4f}, {&(0x7f0000000540)="01f8b2da53afcc2363fd6217b35e925d900b034baca77b2c4fba41432af8dcba149e70a537d158863288f3d64014294960a31aa3022f138bf8944279118a6d2e0f91", 0x42}], 0x4}, 0x24084080) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000067c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast2, 0xd5d}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x774}}], 0x30}}], 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000200000000400000003"], 0x50) r14 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r14, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r13, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r14}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r13, &(0x7f00000001c0), &(0x7f0000000180)=@tcp=r14}, 0x20) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6003006}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r15, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x55}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 4.170466399s ago: executing program 4 (id=1785): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/236, 0xec}], 0x2}, 0x2) socket$inet6(0xa, 0xb, 0x200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0xc, 0xff, 0xd4, 0x4b, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x17}) 3.933972361s ago: executing program 3 (id=1787): close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc845}, 0x4004041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x17, 0x7}, 0x0) r5 = socket(0x26, 0x1, 0x100) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}}, &(0x7f0000000200)='GPL\x00', 0xf, 0x79, &(0x7f0000000300)=""/121, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.82150079s ago: executing program 1 (id=1788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x0, 0x4429}) read$nci(r2, &(0x7f00000012c0)=""/4096, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 3.697519606s ago: executing program 1 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x17, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002780)=[@fadd={0x0, 0x114, 0x6, {{0x200, 0x8}, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x7fffffffffffffff, 0xfffffffffffffbff, 0x7, 0xa0, 0xb85, 0x8, 0x8001}}, @rdma_map={0xfffffffffffffe7c, 0x114, 0x3, {{0x0}, 0x0}}], 0x88, 0x4010}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = socket(0x1f, 0x800, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4044055) (async) sendmsg$key(r7, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x18004) (async) sendto$inet(r3, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 3.216371283s ago: executing program 4 (id=1790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xc0000000, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0f000000000000000600", "1d1cbe23", "090019d1ebcdc493"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES64=0x0], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82}, 0x94) 3.041398383s ago: executing program 4 (id=1791): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a40040402000030003030000004dcf5c0461c1d67f6f94047134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb790", 0x84}, {0x0}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x2, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r6, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc094) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 1.045491605s ago: executing program 3 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.031726819s ago: executing program 0 (id=1793): unshare(0x2c020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xaa0f4000) openat$cgroup_ro(r1, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x4000a00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400800}], 0x4, 0x30040, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "ce0b3892b3bc2dc9", "5eac15a4c4f5e354a5ceebc930814c009dbb2165b33700", "5fa3ded8", "b863092283071697"}, 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "c24532290dac8bfc", "77906e559de9d785b4e9c044c094fc6f", "000038b5", "06f84da1294b17d4"}, 0x28) 888.726502ms ago: executing program 3 (id=1794): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0x9a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@private=0x7fff}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x38}]}, 0x38}}, 0x0) 887.962022ms ago: executing program 1 (id=1795): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x14}}, 0x0) 855.672329ms ago: executing program 2 (id=1796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000900)={{r0, &(0x7f0000000140)='/dev/virtual_nci\x00', 0x0, &(0x7f00000002c0)={@_ha_fsid={[0x2, 0xffffffff]}, {0xffff, 0x9, 0x80, 0x10}}, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x3}, 0x2, &(0x7f00000008c0)=[{0x3, 0x248, &(0x7f0000000480)='GPL\x00', &(0x7f00000005c0)="a4438a1f999aba805cc638fa24957d6ff1b203b40a2107363937d8e1562146072ebd748a9c2367d335ff831e25b156f23dfc28b87046a2760fd8ac76de498c944795c2a7e7e7b5ba26c1999861709fafd5fdaae7aab8f905a3eafefa4ddd2ab46a9841cdebf144a92825b181f1af249ffd5b96e3d09feed6d6a75cfcecc789551f5a3f355dc2bb778e4b2d5e42a94536e19286768738eddea99d3c88a8afb884326850e69370849112", 0xa9, 0x2}, {0x1, 0x35a1, &(0x7f0000000680)='GPL\x00', &(0x7f00000007c0)="9e329e5eb64e5b99d847fa90c35d85b975af779a64c8edcef940843683681cba0e88d564fd0eeb1116b9c1295405ffd51b1196afdb7ff6c0a90f32d0e0984dc017998b0ff264219c069309d714f48177a261c4d517b6ad709f3b5e1a99d7be49f0d75c993e920d74bb2c795bc8b3da808b8f1d036bd064dab1e244a82217c5d88494c1179f8d81202842fff039a6a1c24988712dc24a774ed2855ab73d8d4a1448b0fb646cf8beba93be75623ff3f9ec059bfdbe4fe20dee92004afabdfe9703b711c56e0ba168f2f70ab578aa5a89ac98370243baaeaa9fc021fdd98ea645ab9376016a680b72d1f759adaacf384d", 0xef, 0x2}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000100000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018460000000000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r2) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc4, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0xaf, 0x3, "98be54dcd20aba06fab4b06e8efff4f3cb9657b96039001ac20f875a7349e0249283681f6f558941b4397edf5243de02d0b62c57f3e71ef32ef9a92aa26364c681bb953bfe45f5819021e81420047775e158a7f7ac630267135169619e508bcc3e18c8a457aa8d77ed615ddcb9d275be956f9e71bac040f2507851c1cb8fec3bc1a20fd6f347fc4dbf360d73faf7c2fb02cb1ec5cf8698c5d1c2cd2e5e9a6aba0477f8a3a3aca9c58ccb29"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000300000a140000001100010000000000000000000000000a00000000"], 0x28}}, 0x4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001140)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0x1a00, 0x0, 0x100, 0x9, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x4, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000dc0)='GPL\x00', 0x3d78, 0xf0, &(0x7f0000000e00)=""/240, 0x41000, 0x61, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001080)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x7, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r2, 0xffffffffffffffff, r6, r7, r0, r0, r2, r2, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 798.024316ms ago: executing program 1 (id=1797): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x4, @private0}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) (async) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) (async) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4004c}}], 0x1, 0x805) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, r8, 0x25, 0x4, @val=@tracing={0x0, 0x5}}, 0x20) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0xc4a48b7f26be2e0b}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_PHYS_SWITCH_ID={0x7, 0x24, "309c0d"}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_EVENT={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040801}, 0x8000) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x4e20, @local}}}, 0x88) (async) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7) 632.281063ms ago: executing program 2 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100010000000000000000008500000075000000850000001100000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000370429bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c04de67000000500012800b000100697036746e6c000040000280140003002001000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="0400130014000200fe80"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004804) 363.853224ms ago: executing program 4 (id=1799): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x9}, 0x8) sendmmsg(r0, &(0x7f0000004340), 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3a80a230", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf25010000000000000001410000002c001700000018000000076574683a6c6f0000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x24000800) 230.58612ms ago: executing program 0 (id=1800): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0xffeb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x7f6e6c90, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x19) 153.648437ms ago: executing program 3 (id=1801): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x71, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000bc0)={0x24, @none={0x0, 0x2}}, 0x14) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x100000000000022e, 0x2, 0x5) 133.028811ms ago: executing program 1 (id=1802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newsa={0x184, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@rand_addr=0x64010101, @in6=@private1, 0x0, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}, @algo_auth={0x48, 0x1, {{'nhpoly1305-generic\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_hsr\x00'}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40040) 87.103612ms ago: executing program 2 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, 0x1000000, 0xffffffff) accept$alg(r2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={r2, 0x20, &(0x7f0000001840)={&(0x7f00000007c0)=""/4096, 0x1000, 0x0, &(0x7f00000017c0)=""/96, 0x60}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x2, "f2ea"}, &(0x7f0000000540)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x100000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) 0s ago: executing program 1 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={0x0, 0xfffffffffffffffe, 0x0, [0x8, 0xffffe00000000000, 0x78a6, 0x7f, 0x9], [0x3, 0xffffffffffffffce, 0x5, 0x4000000040000, 0x8000000000000000, 0xc, 0x8, 0x7fffffffffffffff, 0x1927, 0x86, 0x7, 0x3ff, 0x7, 0x5f96, 0x0, 0x8000, 0x9, 0x6, 0x1000, 0x2, 0x8, 0x1, 0x3, 0xfffffffffffffffb, 0x8, 0x80, 0x3, 0x8, 0x9, 0x3, 0x0, 0x2, 0x10001, 0x1, 0x3, 0xb6, 0x3, 0x5, 0x4, 0xfdf7, 0x83a, 0x5, 0x9, 0x1, 0x1, 0x8, 0x70f, 0xfffffffffffffaa6, 0x4, 0xa0, 0xff, 0x91, 0x2, 0xfffffffffffffff6, 0x4, 0x3, 0x3, 0x2, 0xfffffffffffffff1, 0x2, 0x3, 0xd4d9, 0x4, 0x7ff, 0x10000, 0x7, 0x12f, 0xe, 0x7, 0x1000, 0x0, 0x7, 0x2, 0x5, 0xa3c, 0x8, 0x3, 0x5420fc88, 0x2, 0x3, 0x1, 0x10, 0x2, 0x7, 0x1, 0x1, 0x3, 0x2, 0x2, 0xfffffffffffff000, 0x3, 0x7, 0xf98, 0xfffffffffffff668, 0x6, 0x5, 0x9, 0x8, 0x3, 0x7, 0x8, 0x6, 0x2fc, 0x10000, 0xe8, 0x3, 0x0, 0x4, 0x8, 0x84, 0x6, 0xc2, 0x4, 0x7fffffffffffffff, 0x8, 0x8, 0x6, 0x6, 0x2, 0xfffffffffffffff9, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001dc0)={{r2}, r7, 0x1a, @unused=[0x48, 0x6, 0x0, 0xffff], @devid=r8}) kernel console output (not intermixed with test programs): 3.694': attribute type 3 has an invalid length. [ 171.317778][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.694'. [ 171.397282][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 171.646927][ T8534] netlink: 'syz.4.697': attribute type 8 has an invalid length. [ 171.696319][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 171.696385][ T8539] netlink: 'syz.0.698': attribute type 30 has an invalid length. [ 171.757682][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 171.757720][ T8541] netlink: 'syz.0.698': attribute type 30 has an invalid length. [ 172.466378][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.512201][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.693339][ T8531] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 172.726646][ T8531] ip6tnl1: left allmulticast mode [ 172.730786][ T8531] geneve3: left allmulticast mode [ 172.743979][ T8531] bond1: left promiscuous mode [ 172.785397][ T8535] bridge2: entered promiscuous mode [ 172.785427][ T8535] bridge2: entered allmulticast mode [ 172.834226][ T8539] vxlan1: entered promiscuous mode [ 172.834255][ T8539] vxlan1: entered allmulticast mode [ 172.868601][ T8541] vxlan1: entered promiscuous mode [ 172.868627][ T8541] vxlan1: entered allmulticast mode [ 172.942470][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942518][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942552][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942584][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.167490][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 173.283665][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'. [ 173.377942][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 173.404853][ T8576] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 173.543773][ T8590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.707'. [ 174.328758][ T8614] syzkaller1: entered promiscuous mode [ 174.328783][ T8614] syzkaller1: entered allmulticast mode [ 174.588047][ T77] IPVS: starting estimator thread 0... [ 174.674906][ T8623] IPVS: using max 25 ests per chain, 60000 per kthread [ 174.914410][ T8634] netlink: 'syz.0.718': attribute type 2 has an invalid length. [ 174.957316][ T8637] FAULT_INJECTION: forcing a failure. [ 174.957316][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.957352][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.4.719 Not tainted syzkaller #0 PREEMPT(full) [ 174.957376][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.957388][ T8637] Call Trace: [ 174.957396][ T8637] [ 174.957406][ T8637] dump_stack_lvl+0xe8/0x150 [ 174.957441][ T8637] should_fail_ex+0x410/0x560 [ 174.957471][ T8637] _copy_from_user+0x2d/0xb0 [ 174.957499][ T8637] __sys_bpf+0x2e7/0xd90 [ 174.957533][ T8637] ? __pfx___sys_bpf+0x10/0x10 [ 174.957568][ T8637] ? __fget_files+0x2a/0x420 [ 174.957616][ T8637] ? ksys_write+0x242/0x270 [ 174.957651][ T8637] ? __pfx_ksys_write+0x10/0x10 [ 174.957695][ T8637] __x64_sys_bpf+0xba/0xd0 [ 174.957720][ T8637] do_syscall_64+0x166/0x520 [ 174.957743][ T8637] ? trace_irq_disable+0x3b/0x140 [ 174.957763][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.957784][ T8637] ? clear_bhb_loop+0x70/0xc0 [ 174.957809][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.957829][ T8637] RIP: 0033:0x7fbd1c99e159 [ 174.957849][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.957865][ T8637] RSP: 002b:00007fbd1abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.957888][ T8637] RAX: ffffffffffffffda RBX: 00007fbd1cc25fa0 RCX: 00007fbd1c99e159 [ 174.957904][ T8637] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 174.957917][ T8637] RBP: 00007fbd1abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.957930][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.957941][ T8637] R13: 00007fbd1cc26038 R14: 00007fbd1cc25fa0 R15: 00007ffd40a33bd8 [ 174.957976][ T8637] [ 175.810793][ T8668] __nla_validate_parse: 1 callbacks suppressed [ 175.810816][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 175.970416][ T8680] FAULT_INJECTION: forcing a failure. [ 175.970416][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 175.970453][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.2.731 Not tainted syzkaller #0 PREEMPT(full) [ 175.970476][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.970488][ T8680] Call Trace: [ 175.970501][ T8680] [ 175.970510][ T8680] dump_stack_lvl+0xe8/0x150 [ 175.970546][ T8680] should_fail_ex+0x410/0x560 [ 175.970575][ T8680] should_failslab+0xa8/0x100 [ 175.970603][ T8680] __kmalloc_noprof+0xfe/0x720 [ 175.970625][ T8680] ? bpf_test_init+0x9f/0x150 [ 175.970651][ T8680] ? bpf_test_init+0x9f/0x150 [ 175.970685][ T8680] bpf_test_init+0x9f/0x150 [ 175.970718][ T8680] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 175.970766][ T8680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 175.970812][ T8680] ? __fget_files+0x2a/0x420 [ 175.970846][ T8680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 175.970877][ T8680] bpf_prog_test_run+0x2c5/0x340 [ 175.970907][ T8680] __sys_bpf+0xa22/0xd90 [ 175.970940][ T8680] ? __pfx___sys_bpf+0x10/0x10 [ 175.970975][ T8680] ? __fget_files+0x2a/0x420 [ 175.971022][ T8680] ? ksys_write+0x242/0x270 [ 175.971061][ T8680] ? __pfx_ksys_write+0x10/0x10 [ 175.971097][ T8680] __x64_sys_bpf+0xba/0xd0 [ 175.971122][ T8680] do_syscall_64+0x166/0x520 [ 175.971144][ T8680] ? trace_irq_disable+0x3b/0x140 [ 175.971165][ T8680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.971187][ T8680] ? clear_bhb_loop+0x70/0xc0 [ 175.971213][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.971234][ T8680] RIP: 0033:0x7f44ec99e159 [ 175.971255][ T8680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.971271][ T8680] RSP: 002b:00007f44ed935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.971294][ T8680] RAX: ffffffffffffffda RBX: 00007f44ecc25fa0 RCX: 00007f44ec99e159 [ 175.971309][ T8680] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 175.971323][ T8680] RBP: 00007f44ed935090 R08: 0000000000000000 R09: 0000000000000000 [ 175.971336][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.971348][ T8680] R13: 00007f44ecc26038 R14: 00007f44ecc25fa0 R15: 00007ffdb48c6a08 [ 175.971383][ T8680] [ 176.545681][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 176.636005][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 176.844433][ T8707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.127922][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 177.448243][ T8746] netlink: 'syz.3.746': attribute type 21 has an invalid length. [ 177.592477][ T994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.824446][ T8753] veth0: entered promiscuous mode [ 177.831709][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 177.882977][ T8753] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 178.146942][ T8764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.752'. [ 178.161734][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 178.658069][ T8788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.760'. [ 178.973238][ T8796] bond2 (unregistering): Released all slaves [ 179.550281][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 179.637781][ T8838] netlink: 'syz.1.771': attribute type 8 has an invalid length. [ 179.810772][ T8846] xt_hashlimit: size too large, truncated to 1048576 [ 179.836297][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'. [ 179.964625][ T8855] netlink: 'syz.4.777': attribute type 9 has an invalid length. [ 180.733925][ T8876] syzkaller0: entered promiscuous mode [ 180.733950][ T8876] syzkaller0: entered allmulticast mode [ 181.325326][ T8911] netlink: 'syz.4.792': attribute type 21 has an invalid length. [ 182.187671][ T8932] sctp: [Deprecated]: syz.3.800 (pid 8932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.187671][ T8932] Use struct sctp_sack_info instead [ 182.363069][ T8927] __nla_validate_parse: 3 callbacks suppressed [ 182.363095][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 182.368118][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 182.397370][ T8927] vlan0: entered promiscuous mode [ 182.636294][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 182.636325][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 182.937000][ T8952] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 182.937039][ T8952] syz_tun: entered promiscuous mode [ 182.965217][ T8952] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 183.162912][ T8961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.806'. [ 183.455118][ T8981] netlink: 'syz.1.806': attribute type 4 has an invalid length. [ 183.455146][ T8981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.806'. [ 183.576298][ T8981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.762406][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.935716][ T8985] tc_dump_action: action bad kind [ 183.985924][ T8990] syzkaller1: entered promiscuous mode [ 183.985951][ T8990] syzkaller1: entered allmulticast mode [ 184.174693][ T8994] FAULT_INJECTION: forcing a failure. [ 184.174693][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.174752][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.1.813 Not tainted syzkaller #0 PREEMPT(full) [ 184.174777][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.174788][ T8994] Call Trace: [ 184.174797][ T8994] [ 184.174806][ T8994] dump_stack_lvl+0xe8/0x150 [ 184.174842][ T8994] should_fail_ex+0x410/0x560 [ 184.174872][ T8994] _copy_to_user+0x31/0xb0 [ 184.174902][ T8994] bpf_test_finish+0x1cf/0x690 [ 184.174943][ T8994] ? __pfx_bpf_test_finish+0x10/0x10 [ 184.174983][ T8994] ? rep_movs_alternative+0x4a/0xa0 [ 184.175016][ T8994] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 184.175065][ T8994] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.175101][ T8994] ? __fget_files+0x2a/0x420 [ 184.175135][ T8994] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.175165][ T8994] bpf_prog_test_run+0x2c5/0x340 [ 184.175196][ T8994] __sys_bpf+0xa22/0xd90 [ 184.175228][ T8994] ? __pfx___sys_bpf+0x10/0x10 [ 184.175265][ T8994] ? __fget_files+0x2a/0x420 [ 184.175316][ T8994] ? ksys_write+0x242/0x270 [ 184.175349][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 184.175385][ T8994] __x64_sys_bpf+0xba/0xd0 [ 184.175410][ T8994] do_syscall_64+0x166/0x520 [ 184.175431][ T8994] ? trace_irq_disable+0x3b/0x140 [ 184.175452][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.175474][ T8994] ? clear_bhb_loop+0x70/0xc0 [ 184.175501][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.175522][ T8994] RIP: 0033:0x7f4ca679e159 [ 184.175543][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.175560][ T8994] RSP: 002b:00007f4ca7604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.175584][ T8994] RAX: ffffffffffffffda RBX: 00007f4ca6a25fa0 RCX: 00007f4ca679e159 [ 184.175598][ T8994] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 184.175612][ T8994] RBP: 00007f4ca7604090 R08: 0000000000000000 R09: 0000000000000000 [ 184.175624][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.175636][ T8994] R13: 00007f4ca6a26038 R14: 00007f4ca6a25fa0 R15: 00007ffc30faae38 [ 184.175668][ T8994] [ 184.481796][ T8998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.958259][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 185.330887][ T9021] syzkaller1: entered promiscuous mode [ 185.330914][ T9021] syzkaller1: entered allmulticast mode [ 187.364768][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.841'. [ 187.369389][ T9097] netlink: 'syz.0.840': attribute type 21 has an invalid length. [ 187.410953][ T9100] tc_dump_action: action bad kind [ 187.584503][ T9107] syzkaller1: entered promiscuous mode [ 187.584611][ T9107] syzkaller1: entered allmulticast mode [ 187.886889][ T9110] syzkaller0: entered promiscuous mode [ 187.886916][ T9110] syzkaller0: entered allmulticast mode [ 188.148759][ T9118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.846'. [ 188.438487][ T9124] sctp: [Deprecated]: syz.1.849 (pid 9124) Use of int in maxseg socket option. [ 188.438487][ T9124] Use struct sctp_assoc_value instead [ 188.819097][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.893499][ T9134] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 188.939398][ T9133] tc_dump_action: action bad kind [ 188.956577][ T9140] netlink: 'syz.3.854': attribute type 3 has an invalid length. [ 188.957732][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.854'. [ 189.094573][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.152784][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.194604][ T9146] syzkaller1: entered promiscuous mode [ 189.194629][ T9146] syzkaller1: entered allmulticast mode [ 190.225175][ T9159] netlink: 4412 bytes leftover after parsing attributes in process `syz.1.861'. [ 190.237614][ T9161] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 190.283489][ T9161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.291721][ T9161] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 190.309810][ T9161] team0: Port device netdevsim1 added [ 190.728095][ T8564] bridge0: entered promiscuous mode [ 191.403631][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 191.558012][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 191.596661][ T9203] vlan2: entered promiscuous mode [ 192.160171][ T9227] netlink: 140 bytes leftover after parsing attributes in process `syz.2.879'. [ 192.160333][ T9227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.879'. [ 192.857237][ T9242] syzkaller1: entered promiscuous mode [ 192.857264][ T9242] syzkaller1: entered allmulticast mode [ 193.370415][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 193.396509][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 193.516006][ T9263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.890'. [ 193.708402][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 193.745801][ T9265] vlan0: entered promiscuous mode [ 194.647287][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.647356][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.927171][ T9295] syzkaller1: entered promiscuous mode [ 194.927199][ T9295] syzkaller1: entered allmulticast mode [ 195.600421][ T9329] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.617969][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.906'. [ 195.757882][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 195.793479][ T9326] vlan2: entered promiscuous mode [ 196.847056][ T9375] bridge_slave_0: left allmulticast mode [ 196.847087][ T9375] bridge_slave_0: left promiscuous mode [ 196.847416][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.932447][ T9375] bridge_slave_1: left allmulticast mode [ 196.932479][ T9375] bridge_slave_1: left promiscuous mode [ 196.933546][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.060711][ T9375] bond0: (slave bond_slave_0): Releasing backup interface [ 197.148673][ T9375] bond0: (slave bond_slave_1): Releasing backup interface [ 197.345506][ T9375] team0: Port device team_slave_0 removed [ 197.427576][ T9375] team0: Port device team_slave_1 removed [ 197.436882][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.436907][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.453142][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.453166][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.470256][ T9375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.540288][ T9380] team0: Mode changed to "activebackup" [ 197.857769][ T9418] netlink: 84 bytes leftover after parsing attributes in process `syz.2.933'. [ 197.932174][ T9411] syzkaller1: entered promiscuous mode [ 197.932203][ T9411] syzkaller1: entered allmulticast mode [ 197.991777][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 197.991897][ T9420] netlink: 'syz.2.935': attribute type 7 has an invalid length. [ 197.991913][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 198.647058][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 198.753057][ T9431] batadv0: entered promiscuous mode [ 198.753307][ T9431] macvtap0: entered promiscuous mode [ 198.753609][ T9431] macvtap0: entered allmulticast mode [ 198.753625][ T9431] batadv0: entered allmulticast mode [ 198.770267][ T9431] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 199.074676][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 199.080932][ T9454] batadv0: left allmulticast mode [ 199.081195][ T9454] batadv0: left promiscuous mode [ 199.108421][ T9454] macvtap0: left promiscuous mode [ 199.108450][ T9454] macvtap0: left allmulticast mode [ 199.388813][ T9461] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 199.408913][ T9461] bond2 (unregistering): Released all slaves [ 199.765768][ T1958] block nbd1: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 30 seconds [ 199.767873][ T1958] block nbd1: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 30 seconds [ 199.767919][ T1958] block nbd1: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 30 seconds [ 199.767946][ T1958] block nbd1: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 30 seconds [ 200.035961][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 200.035992][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 200.254259][ T9483] netlink: 80 bytes leftover after parsing attributes in process `syz.4.953'. [ 200.466218][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'. [ 200.539032][ T9485] tc_dump_action: action bad kind [ 200.930295][ T9496] netlink: 104 bytes leftover after parsing attributes in process `syz.3.959'. [ 201.012727][ T9499] FAULT_INJECTION: forcing a failure. [ 201.012727][ T9499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.012763][ T9499] CPU: 1 UID: 0 PID: 9499 Comm: syz.4.958 Not tainted syzkaller #0 PREEMPT(full) [ 201.012786][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.012798][ T9499] Call Trace: [ 201.012807][ T9499] [ 201.012816][ T9499] dump_stack_lvl+0xe8/0x150 [ 201.012851][ T9499] should_fail_ex+0x410/0x560 [ 201.012881][ T9499] _copy_from_user+0x2d/0xb0 [ 201.012907][ T9499] __sys_bind+0x1c6/0x410 [ 201.012974][ T9499] ? __pfx___sys_bind+0x10/0x10 [ 201.013010][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 201.013050][ T9499] __x64_sys_bind+0x7a/0x90 [ 201.013073][ T9499] do_syscall_64+0x166/0x520 [ 201.013095][ T9499] ? trace_irq_disable+0x3b/0x140 [ 201.013116][ T9499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.013137][ T9499] ? clear_bhb_loop+0x70/0xc0 [ 201.013163][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.013183][ T9499] RIP: 0033:0x7fbd1c99e159 [ 201.013203][ T9499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.013219][ T9499] RSP: 002b:00007fbd1abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 201.013243][ T9499] RAX: ffffffffffffffda RBX: 00007fbd1cc25fa0 RCX: 00007fbd1c99e159 [ 201.013259][ T9499] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 201.013272][ T9499] RBP: 00007fbd1abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.013285][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.013297][ T9499] R13: 00007fbd1cc26038 R14: 00007fbd1cc25fa0 R15: 00007ffd40a33bd8 [ 201.013332][ T9499] [ 201.230702][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 201.460299][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 201.462406][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 201.476584][ T9514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.617329][ T9520] tc_dump_action: action bad kind [ 202.769018][ T9574] tc_dump_action: action bad kind [ 203.373466][ T9604] FAULT_INJECTION: forcing a failure. [ 203.373466][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.373502][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.1.988 Not tainted syzkaller #0 PREEMPT(full) [ 203.373525][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.373537][ T9604] Call Trace: [ 203.373554][ T9604] [ 203.373563][ T9604] dump_stack_lvl+0xe8/0x150 [ 203.373603][ T9604] should_fail_ex+0x410/0x560 [ 203.373633][ T9604] _copy_to_user+0x31/0xb0 [ 203.373662][ T9604] simple_read_from_buffer+0xe1/0x170 [ 203.373697][ T9604] proc_fail_nth_read+0x1bb/0x230 [ 203.373726][ T9604] ? common_file_perm+0x20e/0x2b0 [ 203.373754][ T9604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.373789][ T9604] ? rw_verify_area+0x24a/0x4c0 [ 203.373821][ T9604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.373851][ T9604] vfs_read+0x213/0xa80 [ 203.373886][ T9604] ? __pfx___mutex_lock+0x10/0x10 [ 203.373911][ T9604] ? __pfx_vfs_read+0x10/0x10 [ 203.373943][ T9604] ? __fget_files+0x2a/0x420 [ 203.373977][ T9604] ? __fget_files+0x3a2/0x420 [ 203.374003][ T9604] ? __fget_files+0x2a/0x420 [ 203.374041][ T9604] ksys_read+0x150/0x270 [ 203.374072][ T9604] ? __pfx_ksys_read+0x10/0x10 [ 203.374116][ T9604] do_syscall_64+0x166/0x520 [ 203.374137][ T9604] ? trace_irq_disable+0x3b/0x140 [ 203.374156][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.374178][ T9604] ? clear_bhb_loop+0x70/0xc0 [ 203.374204][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.374224][ T9604] RIP: 0033:0x7f4ca675e98e [ 203.374244][ T9604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.374261][ T9604] RSP: 002b:00007f4ca7603fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.374285][ T9604] RAX: ffffffffffffffda RBX: 00007f4ca76046c0 RCX: 00007f4ca675e98e [ 203.374300][ T9604] RDX: 000000000000000f RSI: 00007f4ca76040a0 RDI: 0000000000000004 [ 203.374313][ T9604] RBP: 00007f4ca7604090 R08: 0000000000000000 R09: 0000000000000000 [ 203.374325][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.374336][ T9604] R13: 00007f4ca6a26038 R14: 00007f4ca6a25fa0 R15: 00007ffc30faae38 [ 203.374371][ T9604] [ 203.465214][ T9600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.226957][ T9626] tc_dump_action: action bad kind [ 204.335287][ T9636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.359745][ T9633] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 204.748686][ T9650] __nla_validate_parse: 3 callbacks suppressed [ 204.748707][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 204.748726][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 204.875857][ T9651] syzkaller1: entered promiscuous mode [ 204.875883][ T9651] syzkaller1: entered allmulticast mode [ 205.336391][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 205.559628][ T9668] wg2 speed is unknown, defaulting to 1000 [ 205.589759][ T9668] wg2 speed is unknown, defaulting to 1000 [ 205.661440][ T9668] wg2 speed is unknown, defaulting to 1000 [ 205.685104][ T9668] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 205.685146][ T9668] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 205.685187][ T9668] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 205.852777][ T9687] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 205.875488][ T9668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.989636][ T9668] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.038578][ T9687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.251904][ T9683] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.294739][ T9709] openvswitch: netlink: Duplicate or invalid key (type 0). [ 206.301867][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 206.428875][ T9689] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 206.460116][ T9668] wg2 speed is unknown, defaulting to 1000 [ 206.460311][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 206.498516][ T9668] wg2 speed is unknown, defaulting to 1000 [ 206.654816][ T9668] wg2 speed is unknown, defaulting to 1000 [ 206.679259][ T9668] wg2 speed is unknown, defaulting to 1000 [ 206.701228][ T9668] wg2 speed is unknown, defaulting to 1000 [ 207.188476][ T9690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.629706][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1028'. [ 207.743273][ T9690] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 207.748879][ T9690] team0: Port device netdevsim1 removed [ 207.756529][ T9690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.137629][ T9690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.484316][ T9782] syzkaller1: entered promiscuous mode [ 208.484342][ T9782] syzkaller1: entered allmulticast mode [ 208.636567][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 208.752842][ T9789] netlink: 'syz.4.1032': attribute type 4 has an invalid length. [ 208.832393][ T7184] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.939385][ T9803] bridge_slave_0: entered promiscuous mode [ 209.063616][ T7176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.182356][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.249517][ T7184] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.275557][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 209.275604][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 209.520637][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1039'. [ 210.565972][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 210.641367][ T9871] vlan0: entered promiscuous mode [ 210.804421][ T9894] raw_sendmsg: syz.4.1057 forgot to set AF_INET. Fix it! [ 210.876426][ T9888] dvmrp0: entered allmulticast mode [ 210.938984][ T9892] dvmrp0: left allmulticast mode [ 210.948154][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'. [ 210.948190][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'. [ 210.949116][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1060'. [ 211.474790][ T9928] Bluetooth: ISO socket layer initialized [ 214.260569][ T9920] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 214.271370][ T9924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.803176][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 214.804501][ T9955] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1076'. [ 214.850612][ T9960] vlan0: entered promiscuous mode [ 215.061340][ T9967] netlink: 'syz.1.1078': attribute type 21 has an invalid length. [ 215.243233][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 215.244114][ T9967] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1078'. [ 215.506111][ T9976] syzkaller1: entered promiscuous mode [ 215.506138][ T9976] syzkaller1: entered allmulticast mode [ 216.326123][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 216.519419][T10013] vlan2: entered promiscuous mode [ 216.655041][T10026] FAULT_INJECTION: forcing a failure. [ 216.655041][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 216.655077][T10026] CPU: 1 UID: 0 PID: 10026 Comm: syz.2.1094 Not tainted syzkaller #0 PREEMPT(full) [ 216.655100][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.655112][T10026] Call Trace: [ 216.655121][T10026] [ 216.655129][T10026] dump_stack_lvl+0xe8/0x150 [ 216.655167][T10026] should_fail_ex+0x410/0x560 [ 216.655197][T10026] should_failslab+0xa8/0x100 [ 216.655222][T10026] ? skb_clone+0x212/0x3a0 [ 216.655250][T10026] kmem_cache_alloc_noprof+0xa1/0x600 [ 216.655284][T10026] ? skb_clone+0x212/0x3a0 [ 216.655317][T10026] skb_clone+0x212/0x3a0 [ 216.655349][T10026] __netlink_deliver_tap+0x413/0x860 [ 216.655403][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.655434][T10026] netlink_deliver_tap+0x19c/0x1b0 [ 216.655465][T10026] netlink_sendskb+0x68/0x140 [ 216.655495][T10026] netlink_rcv_skb+0x2a4/0x4a0 [ 216.655525][T10026] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 216.655555][T10026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.655595][T10026] ? bpf_lsm_capable+0x9/0x20 [ 216.655614][T10026] ? security_capable+0x7e/0x2c0 [ 216.655644][T10026] nfnetlink_rcv+0x2b9/0x28c0 [ 216.655675][T10026] ? __dev_queue_xmit+0x29b/0x3820 [ 216.655706][T10026] ? __local_bh_enable_ip+0xd6/0x140 [ 216.655734][T10026] ? lockdep_hardirqs_on+0x7b/0x110 [ 216.655755][T10026] ? __dev_queue_xmit+0x29b/0x3820 [ 216.655779][T10026] ? __local_bh_enable_ip+0xd6/0x140 [ 216.655802][T10026] ? __dev_queue_xmit+0x29b/0x3820 [ 216.655828][T10026] ? __dev_queue_xmit+0x1edc/0x3820 [ 216.655853][T10026] ? do_syscall_64+0x166/0x520 [ 216.655874][T10026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.655907][T10026] ? __dev_queue_xmit+0x29b/0x3820 [ 216.655936][T10026] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 216.655970][T10026] ? __pfx___dev_queue_xmit+0x10/0x10 [ 216.656007][T10026] ? ref_tracker_free+0x689/0x830 [ 216.656039][T10026] ? __pfx_ref_tracker_free+0x10/0x10 [ 216.656074][T10026] ? __skb_clone+0x449/0x6c0 [ 216.656108][T10026] ? skb_clone+0x246/0x3a0 [ 216.656139][T10026] ? __netlink_deliver_tap+0x811/0x860 [ 216.656166][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.656203][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.656230][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.656265][T10026] netlink_unicast+0x7bd/0x940 [ 216.656306][T10026] netlink_sendmsg+0x813/0xb40 [ 216.656346][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.656386][T10026] ? apparmor_socket_sendmsg+0x18b/0x360 [ 216.656422][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.656451][T10026] sock_sendmsg_nosec+0x13a/0x180 [ 216.656485][T10026] ____sys_sendmsg+0x54e/0x850 [ 216.656518][T10026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.656556][T10026] ? import_iovec+0x73/0xa0 [ 216.656586][T10026] ___sys_sendmsg+0x2a5/0x360 [ 216.656610][T10026] ? __lock_acquire+0x747/0x2de0 [ 216.656638][T10026] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.656707][T10026] ? __fget_files+0x2a/0x420 [ 216.656747][T10026] ? __fget_files+0x3a2/0x420 [ 216.656787][T10026] __x64_sys_sendmsg+0x1b1/0x290 [ 216.656817][T10026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.656869][T10026] do_syscall_64+0x166/0x520 [ 216.656890][T10026] ? trace_irq_disable+0x3b/0x140 [ 216.656910][T10026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.656932][T10026] ? clear_bhb_loop+0x70/0xc0 [ 216.656958][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.656979][T10026] RIP: 0033:0x7f44ec99e159 [ 216.657000][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.657017][T10026] RSP: 002b:00007f44ed935028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.657041][T10026] RAX: ffffffffffffffda RBX: 00007f44ecc25fa0 RCX: 00007f44ec99e159 [ 216.657056][T10026] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000008 [ 216.657070][T10026] RBP: 00007f44ed935090 R08: 0000000000000000 R09: 0000000000000000 [ 216.657084][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.657096][T10026] R13: 00007f44ecc26038 R14: 00007f44ecc25fa0 R15: 00007ffdb48c6a08 [ 216.657131][T10026] [ 216.692003][T10018] ovs-s!!: entered promiscuous mode [ 216.899510][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 217.038892][T10032] tc_dump_action: action bad kind [ 217.365715][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.590669][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 217.590700][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 217.590715][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 217.765667][T10066] syzkaller1: entered promiscuous mode [ 217.767710][T10066] syzkaller1: entered allmulticast mode [ 217.988273][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 218.271158][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.384735][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 218.402502][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.464705][T10101] FAULT_INJECTION: forcing a failure. [ 218.464705][T10101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.464741][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.3.1106 Not tainted syzkaller #0 PREEMPT(full) [ 218.464764][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.464776][T10101] Call Trace: [ 218.464785][T10101] [ 218.464794][T10101] dump_stack_lvl+0xe8/0x150 [ 218.464829][T10101] should_fail_ex+0x410/0x560 [ 218.464859][T10101] _copy_to_user+0x31/0xb0 [ 218.464892][T10101] simple_read_from_buffer+0xe1/0x170 [ 218.464936][T10101] proc_fail_nth_read+0x1bb/0x230 [ 218.464967][T10101] ? common_file_perm+0x20e/0x2b0 [ 218.464995][T10101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.465030][T10101] ? rw_verify_area+0x24a/0x4c0 [ 218.465062][T10101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.465092][T10101] vfs_read+0x213/0xa80 [ 218.465129][T10101] ? __pfx___mutex_lock+0x10/0x10 [ 218.465153][T10101] ? __pfx_vfs_read+0x10/0x10 [ 218.465185][T10101] ? __fget_files+0x2a/0x420 [ 218.465217][T10101] ? __fget_files+0x3a2/0x420 [ 218.465244][T10101] ? __fget_files+0x2a/0x420 [ 218.465280][T10101] ksys_read+0x150/0x270 [ 218.465312][T10101] ? __pfx_ksys_read+0x10/0x10 [ 218.465357][T10101] do_syscall_64+0x166/0x520 [ 218.465379][T10101] ? trace_irq_disable+0x3b/0x140 [ 218.465399][T10101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.465419][T10101] ? clear_bhb_loop+0x70/0xc0 [ 218.465445][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.465466][T10101] RIP: 0033:0x7fc8aa75e98e [ 218.465486][T10101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.465503][T10101] RSP: 002b:00007fc8ab64ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.465527][T10101] RAX: ffffffffffffffda RBX: 00007fc8ab6506c0 RCX: 00007fc8aa75e98e [ 218.465542][T10101] RDX: 000000000000000f RSI: 00007fc8ab6500a0 RDI: 0000000000000009 [ 218.465554][T10101] RBP: 00007fc8ab650090 R08: 0000000000000000 R09: 0000000000000000 [ 218.465567][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.465579][T10101] R13: 00007fc8aaa26038 R14: 00007fc8aaa25fa0 R15: 00007ffcfe1f8f98 [ 218.465615][T10101] [ 218.626986][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1107'. [ 218.786061][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 218.818078][T10099] vlan2: entered promiscuous mode [ 218.864998][T10105] tc_dump_action: action bad kind [ 218.871008][T10113] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.962513][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.962761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.048228][T10117] sit0: entered promiscuous mode [ 219.085063][T10117] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1111'. [ 219.139299][T10123] ip_tables: iptables: counters copy to user failed while replacing table [ 219.401749][T10132] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 219.412592][T10132] bond4 (unregistering): Released all slaves [ 219.443400][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.709567][T10135] bond4: option min_links: invalid value (18446744073709551612) [ 219.709596][T10135] bond4: option min_links: allowed values 0 - 2147483647 [ 219.754076][T10135] bond4 (unregistering): Released all slaves [ 220.008829][T10158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.310072][T10165] netlink: 'syz.2.1120': attribute type 21 has an invalid length. [ 220.483344][ T8563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.941511][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.962737][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.963307][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.964251][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.964661][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.966979][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.967351][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.029600][T10177] C: renamed from veth1_to_team (while UP) [ 223.040207][T10177] netlink: 'syz.1.1121': attribute type 4 has an invalid length. [ 223.040229][T10177] __nla_validate_parse: 3 callbacks suppressed [ 223.040241][T10177] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1121'. [ 223.168865][T10179] vlan3: entered promiscuous mode [ 223.206698][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 223.340252][T10189] tc_dump_action: action bad kind [ 223.589533][T10194] netlink: 'syz.4.1125': attribute type 32 has an invalid length. [ 223.589557][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 223.731695][T10198] netlink: 524 bytes leftover after parsing attributes in process `syz.4.1125'. [ 223.754944][T10194] bond2: option coupled_control: invalid value (10) [ 223.758903][T10194] bond2 (unregistering): Released all slaves [ 224.127418][T10218] xt_CT: No such helper "snmp_trap" [ 224.180796][T10226] syzkaller1: entered allmulticast mode [ 224.282790][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 224.286353][T10231] 8021q: VLANs not supported on syzkaller1 [ 224.565264][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 224.642495][ T8564] net_ratelimit: 7 callbacks suppressed [ 224.642518][ T8564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.725904][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.726160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.735696][T10238] vlan3: entered promiscuous mode [ 225.025141][T10245] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 225.025168][T10245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1140'. [ 225.305166][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 225.334953][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1146'. [ 225.372855][T10263] bridge0: port 1(veth0) entered blocking state [ 225.372996][T10263] bridge0: port 1(veth0) entered disabled state [ 225.373173][T10263] veth0: entered allmulticast mode [ 225.380915][T10263] veth0: entered promiscuous mode [ 225.467220][T10274] FAULT_INJECTION: forcing a failure. [ 225.467220][T10274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.467257][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.1.1147 Not tainted syzkaller #0 PREEMPT(full) [ 225.467281][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.467293][T10274] Call Trace: [ 225.467302][T10274] [ 225.467312][T10274] dump_stack_lvl+0xe8/0x150 [ 225.467419][T10274] should_fail_ex+0x410/0x560 [ 225.467455][T10274] _copy_from_user+0x2d/0xb0 [ 225.467483][T10274] __sys_sendto+0x2a9/0x5a0 [ 225.467509][T10274] ? ksys_write+0x1e6/0x270 [ 225.467543][T10274] ? __pfx___sys_sendto+0x10/0x10 [ 225.467565][T10274] ? __mutex_unlock_slowpath+0x731/0x900 [ 225.467622][T10274] ? __pfx_ksys_write+0x10/0x10 [ 225.467657][T10274] __x64_sys_sendto+0xde/0x100 [ 225.467685][T10274] do_syscall_64+0x166/0x520 [ 225.467706][T10274] ? trace_irq_disable+0x3b/0x140 [ 225.467726][T10274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.467748][T10274] ? clear_bhb_loop+0x70/0xc0 [ 225.467775][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.467795][T10274] RIP: 0033:0x7f4ca679e159 [ 225.467816][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.467832][T10274] RSP: 002b:00007f4ca75e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 225.467856][T10274] RAX: ffffffffffffffda RBX: 00007f4ca6a26090 RCX: 00007f4ca679e159 [ 225.467870][T10274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 225.467883][T10274] RBP: 00007f4ca75e3090 R08: 0000200000000200 R09: 0000000000000014 [ 225.467895][T10274] R10: 0000000000044010 R11: 0000000000000246 R12: 0000000000000001 [ 225.467908][T10274] R13: 00007f4ca6a26128 R14: 00007f4ca6a26090 R15: 00007ffc30faae38 [ 225.467942][T10274] [ 225.682588][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.715997][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 226.002481][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.002706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.075315][T10290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.337154][T10301] vlan2: entered promiscuous mode [ 226.397863][T10313] netlink: 'syz.3.1158': attribute type 3 has an invalid length. [ 226.397890][T10313] netlink: 'syz.3.1158': attribute type 1 has an invalid length. [ 226.491352][T10313] ip6gretap1: entered allmulticast mode [ 226.499936][T10313] batman_adv: batadv0: Adding interface: ip6gretap1 [ 226.499954][T10313] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.499981][T10313] batman_adv: batadv0: Interface activated: ip6gretap1 [ 226.611762][T10314] veth0_macvtap: left promiscuous mode [ 226.695569][T10314] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 226.722423][ T8564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.725193][T10328] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 227.067370][T10341] netlink: 'syz.0.1166': attribute type 2 has an invalid length. [ 227.079663][T10343] team0: No ports can be present during mode change [ 227.247389][T10341] : entered promiscuous mode [ 227.319422][T10351] ip6tnl2: entered allmulticast mode [ 227.336694][ T7175] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.336949][ T7175] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.362628][ T8563] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.371707][T10354] xt_HMARK: proto mask must be zero with L3 mode [ 227.784936][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.243764][ T8560] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 228.322569][ T8560] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 228.496437][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.498671][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.805101][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.186500][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.213600][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.564140][T10354] bond1: left promiscuous mode [ 229.564162][T10354] erspan1: left promiscuous mode [ 229.564303][T10354] bond1: left allmulticast mode [ 229.594614][T10354] erspan1: left allmulticast mode [ 229.727162][T10355] tc_dump_action: action bad kind [ 229.842730][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.842768][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.843396][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.843424][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.843492][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.843518][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.846356][ T1958] block nbd1: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 60 seconds [ 229.846401][ T1958] block nbd1: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 60 seconds [ 229.846428][ T1958] block nbd1: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 60 seconds [ 229.846455][ T1958] block nbd1: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 60 seconds [ 229.846554][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.847958][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.847989][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.973050][T10410] netlink: 'syz.0.1183': attribute type 21 has an invalid length. [ 230.193053][T10416] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 230.193078][T10416] __nla_validate_parse: 5 callbacks suppressed [ 230.193090][T10416] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1185'. [ 230.256847][T10410] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1183'. [ 230.428813][T10430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.829610][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 230.882429][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.995150][T10457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.004539][T10432] vlan2: entered promiscuous mode [ 231.191351][T10460] tc_dump_action: action bad kind [ 231.282399][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 231.538701][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 231.538740][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 231.573906][ T7185] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.573956][ T7185] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.573989][ T7185] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.745700][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1200'. [ 231.924596][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.937817][T10484] ip6gre1: entered promiscuous mode [ 231.937841][T10484] ip6gre1: entered allmulticast mode [ 232.470712][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1209'. [ 232.606738][T10510] wg2 speed is unknown, defaulting to 1000 [ 232.799882][ T5275] veth0_macvtap: left promiscuous mode [ 232.810577][T10520] tc_dump_action: action bad kind [ 232.918679][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 232.965254][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.977426][T10523] vlan0: entered promiscuous mode [ 233.045034][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.045275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.636185][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 234.004430][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.063796][T10557] tc_dump_action: action bad kind [ 234.621395][T10571] vlan2: entered promiscuous mode [ 235.042899][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.684514][T10605] __nla_validate_parse: 2 callbacks suppressed [ 235.684535][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1233'. [ 235.684740][T10605] unsupported nlmsg_type 40 [ 235.820711][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 235.820739][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 235.867180][T10591] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 236.075067][T10614] tc_dump_action: action bad kind [ 236.087748][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.275367][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 236.538979][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 236.587166][T10629] vlan3: entered promiscuous mode [ 236.638688][T10633] 8021q: VLANs not supported on nlmon0 [ 236.841816][T10641] xt_policy: output policy not valid in PREROUTING and INPUT [ 236.998022][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 237.044452][T10644] syzkaller0: entered promiscuous mode [ 237.044479][T10644] syzkaller0: entered allmulticast mode [ 237.122483][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.134721][T10658] openvswitch: netlink: Message has 8 unknown bytes. [ 237.176197][T10653] syz_tun: left promiscuous mode [ 237.176709][T10653] ip6gretap0: left promiscuous mode [ 237.195358][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.217088][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.267401][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.270402][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.291544][T10653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.308030][T10653] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 237.410445][ T5728] wg2 speed is unknown, defaulting to 1000 [ 237.410493][ T5728] syz2: Port: 1 Link ACTIVE [ 238.170470][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.808138][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.809132][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.809462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.813596][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.813771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.932694][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 240.093233][ T8558] net_ratelimit: 1 callbacks suppressed [ 240.093264][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.093443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.095935][ T7175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.096127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.243680][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.273711][ T30] audit: type=1804 audit(1789643904.427:7): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1252" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1351 res=1 errno=0 [ 240.273780][ T30] audit: type=1800 audit(1789643904.427:8): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1252" name="cgroup.controllers" dev="tmpfs" ino=1351 res=0 errno=0 [ 240.429904][T10683] openvswitch: netlink: Duplicate or invalid key (type 0). [ 240.429969][T10683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.511957][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 240.694499][T10696] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1258'. [ 240.832375][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'. [ 240.866538][T10689] vlan2: entered promiscuous mode [ 240.933839][T10686] wg2 speed is unknown, defaulting to 1000 [ 241.213182][T10719] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 241.285666][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.349434][T10719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.392041][T10714] sit0: entered promiscuous mode [ 241.426345][T10714] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 241.426372][T10714] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1262'. [ 242.323738][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.336626][T10755] bridge0: port 1(vlan2) entered blocking state [ 242.336755][T10755] bridge0: port 1(vlan2) entered disabled state [ 242.336894][T10755] vlan2: entered allmulticast mode [ 242.336910][T10755] geneve0: entered allmulticast mode [ 242.357491][T10755] vlan2: entered promiscuous mode [ 242.357515][T10755] geneve0: entered promiscuous mode [ 242.431815][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 242.667304][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 242.691508][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1274'. [ 242.704399][T10769] vlan2: entered promiscuous mode [ 242.718756][T10773] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 242.718787][T10773] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1274'. [ 243.014494][T10782] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 243.090263][T10782] bond4: entered promiscuous mode [ 243.091159][T10782] bond4: entered allmulticast mode [ 243.091709][T10782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.256470][T10793] vxcan2: entered allmulticast mode [ 243.362409][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.528221][T10804] syzkaller0: entered promiscuous mode [ 243.528250][T10804] syzkaller0: entered allmulticast mode [ 243.575789][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 243.599112][T10812] vlan3: entered promiscuous mode [ 243.726404][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 244.057143][T10830] netlink: 'syz.4.1293': attribute type 1 has an invalid length. [ 244.747142][T10854] IPVS: length: 171 != 8 [ 245.449707][ T5728] net_ratelimit: 3 callbacks suppressed [ 245.449732][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.522675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.522977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.523211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.826600][T10861] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 245.849973][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.850190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.852597][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.485874][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.530054][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.531323][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 248.569218][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.574160][T10883] vlan2: entered promiscuous mode [ 248.827624][T10904] netlink: 'syz.3.1307': attribute type 15 has an invalid length. [ 248.827652][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 248.869175][T10904] netlink: 'syz.3.1307': attribute type 15 has an invalid length. [ 248.869200][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 248.890399][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1307'. [ 248.898158][ T7185] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 248.898528][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 248.898563][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 248.898594][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 248.990335][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1307'. [ 249.370303][T10922] tc_dump_action: action bad kind [ 249.390465][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 249.417494][T10932] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 249.608638][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.636287][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'. [ 249.670402][T10932] bond4: entered promiscuous mode [ 249.681046][T10932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.694516][T10939] syzkaller1: entered promiscuous mode [ 249.694551][T10939] syzkaller1: entered allmulticast mode [ 249.719293][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 249.720777][T10936] bond4: entered allmulticast mode [ 249.774335][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 249.831482][T10926] bond4: (slave bridge3): making interface the new active one [ 249.831513][T10926] bridge3: entered promiscuous mode [ 249.831731][T10926] bridge3: entered allmulticast mode [ 249.862511][T10926] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 250.354707][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'. [ 250.511035][T10987] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 250.512924][T10987] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 250.653627][ T8558] net_ratelimit: 2 callbacks suppressed [ 250.653651][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.127225][T11009] syzkaller1: entered promiscuous mode [ 251.127250][T11009] syzkaller1: entered allmulticast mode [ 251.234581][T11008] netlink: zone id is out of range [ 251.234600][T11008] netlink: zone id is out of range [ 251.234608][T11008] netlink: zone id is out of range [ 251.234616][T11008] netlink: zone id is out of range [ 251.234623][T11008] netlink: zone id is out of range [ 251.234630][T11008] netlink: zone id is out of range [ 251.234641][T11008] netlink: zone id is out of range [ 251.234648][T11008] netlink: zone id is out of range [ 251.234656][T11008] netlink: zone id is out of range [ 251.575045][T11031] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 251.620942][T11034] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 251.889273][T11046] Bluetooth: hci0: unsupported parameter 5135 [ 251.889300][T11046] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 251.953145][T11048] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 252.059907][T11048] bond5: entered promiscuous mode [ 252.060348][T11048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.111613][T11054] syzkaller1: entered promiscuous mode [ 252.111642][T11054] syzkaller1: entered allmulticast mode [ 253.045882][T11084] syzkaller1: entered promiscuous mode [ 253.045908][T11084] syzkaller1: entered allmulticast mode [ 253.460693][T11073] syzkaller0: entered promiscuous mode [ 253.460720][T11073] syzkaller0: entered allmulticast mode [ 253.540956][T11097] ipvlan1: entered promiscuous mode [ 253.801051][T11095] ipvlan1: left promiscuous mode [ 254.055954][T11127] __nla_validate_parse: 11 callbacks suppressed [ 254.055978][T11127] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1363'. [ 254.163131][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 254.190999][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 254.325732][T11139] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 254.520178][T11142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 254.538056][T11142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 254.553168][T11142] xt_NFQUEUE: number of total queues is 0 [ 255.295655][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1377'. [ 255.768200][T11192] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1383'. [ 255.817174][T11196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.833174][T11196] net_ratelimit: 157 callbacks suppressed [ 255.833198][T11196] netlink: Conntrack attr has 8 unknown bytes [ 255.833225][T11196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.869144][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.085252][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.085450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.183997][T11204] netlink: 'syz.0.1387': attribute type 12 has an invalid length. [ 256.410233][T11222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1393'. [ 256.522413][T11229] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 256.778029][T11231] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 256.823149][T11238] macvlan3: entered promiscuous mode [ 256.823174][T11238] macvlan3: entered allmulticast mode [ 256.827586][T11238] bond2: entered promiscuous mode [ 256.827611][T11238] bridge3: entered promiscuous mode [ 256.828530][T11238] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 256.852592][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.876098][T11238] bond2: left promiscuous mode [ 256.876125][T11238] bridge3: left promiscuous mode [ 256.904507][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.306533][T11263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1403'. [ 257.363499][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.363695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.930436][T11248] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 257.955385][ T8558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.089977][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.102438][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.265279][T11247] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 258.265831][T11247] ip6gretap1: left allmulticast mode [ 258.311954][T11247] bond4: left promiscuous mode [ 258.311983][T11247] bridge3: left promiscuous mode [ 258.322334][T11247] bond4: left allmulticast mode [ 258.322359][T11247] bridge3: left allmulticast mode [ 258.379923][T11257] vti0: entered promiscuous mode [ 258.379949][T11257] vti0: entered allmulticast mode [ 258.420207][ T7175] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 258.427373][ T7175] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 258.427425][ T7175] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 258.427470][ T7175] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 258.493667][ T8557] wg2 speed is unknown, defaulting to 1000 [ 258.493699][ T8557] syz2: Port: 1 Link DOWN [ 258.825344][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 258.896791][T11300] tc_dump_action: action bad kind [ 258.909055][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1415'. [ 259.039135][T11312] netlink: 'syz.3.1419': attribute type 21 has an invalid length. [ 259.040529][T11312] netlink: 'syz.3.1419': attribute type 4 has an invalid length. [ 259.040551][T11312] netlink: 'syz.3.1419': attribute type 5 has an invalid length. [ 259.069607][T11312] __nla_validate_parse: 3 callbacks suppressed [ 259.069629][T11312] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1419'. [ 259.135278][T11318] FAULT_INJECTION: forcing a failure. [ 259.135278][T11318] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.135315][T11318] CPU: 0 UID: 0 PID: 11318 Comm: syz.4.1418 Not tainted syzkaller #0 PREEMPT(full) [ 259.135340][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.135357][T11318] Call Trace: [ 259.135366][T11318] [ 259.135375][T11318] dump_stack_lvl+0xe8/0x150 [ 259.135412][T11318] should_fail_ex+0x410/0x560 [ 259.135441][T11318] prepare_alloc_pages+0x223/0x600 [ 259.135472][T11318] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 259.135501][T11318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.135529][T11318] ? __pfx_policy_nodemask+0x10/0x10 [ 259.135575][T11318] alloc_pages_mpol+0x21e/0x390 [ 259.135609][T11318] alloc_pages_noprof+0xb1/0x2b0 [ 259.135639][T11318] get_free_pages_noprof+0xf/0x80 [ 259.135662][T11318] __kasan_populate_vmalloc+0x38/0x1c0 [ 259.135683][T11318] ? do_raw_spin_unlock+0xf5/0x200 [ 259.135718][T11318] alloc_vmap_area+0xd1a/0x1420 [ 259.135765][T11318] ? __pfx_alloc_vmap_area+0x10/0x10 [ 259.135790][T11318] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 259.135814][T11318] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 259.135835][T11318] ? __get_vm_area_node+0x155/0x2f0 [ 259.135869][T11318] __get_vm_area_node+0x200/0x2f0 [ 259.135906][T11318] __vmalloc_node_range_noprof+0x343/0x1540 [ 259.135937][T11318] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 259.135963][T11318] ? __lock_acquire+0x747/0x2de0 [ 259.136014][T11318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.136056][T11318] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 259.136077][T11318] __vmalloc_noprof+0xd2/0x120 [ 259.136106][T11318] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 259.136134][T11318] bpf_prog_alloc_no_stats+0x47/0x560 [ 259.136157][T11318] ? bpf_prog_alloc+0x2a/0x1a0 [ 259.136185][T11318] bpf_prog_alloc+0x3c/0x1a0 [ 259.136212][T11318] bpf_prog_load+0x7f8/0x1c20 [ 259.136250][T11318] ? __pfx_bpf_prog_load+0x10/0x10 [ 259.136303][T11318] __sys_bpf+0xd0d/0xd90 [ 259.136337][T11318] ? __pfx___sys_bpf+0x10/0x10 [ 259.136373][T11318] ? __fget_files+0x2a/0x420 [ 259.136418][T11318] ? ksys_write+0x242/0x270 [ 259.136450][T11318] ? __pfx_ksys_write+0x10/0x10 [ 259.136486][T11318] __x64_sys_bpf+0xba/0xd0 [ 259.136510][T11318] do_syscall_64+0x166/0x520 [ 259.136533][T11318] ? trace_irq_disable+0x3b/0x140 [ 259.136553][T11318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.136584][T11318] ? clear_bhb_loop+0x70/0xc0 [ 259.136610][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.136631][T11318] RIP: 0033:0x7fbd1c99e159 [ 259.136651][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.136669][T11318] RSP: 002b:00007fbd1abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.136693][T11318] RAX: ffffffffffffffda RBX: 00007fbd1cc25fa0 RCX: 00007fbd1c99e159 [ 259.136708][T11318] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 259.136722][T11318] RBP: 00007fbd1abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.136735][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.136748][T11318] R13: 00007fbd1cc26038 R14: 00007fbd1cc25fa0 R15: 00007ffd40a33bd8 [ 259.136784][T11318] [ 259.176208][T11318] syz.4.1418: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.176363][T11318] CPU: 0 UID: 0 PID: 11318 Comm: syz.4.1418 Not tainted syzkaller #0 PREEMPT(full) [ 259.176385][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.176396][T11318] Call Trace: [ 259.176404][T11318] [ 259.176412][T11318] dump_stack_lvl+0xe8/0x150 [ 259.176445][T11318] warn_alloc+0x24d/0x270 [ 259.176467][T11318] ? lockdep_hardirqs_on+0x7b/0x110 [ 259.176491][T11318] ? __pfx_warn_alloc+0x10/0x10 [ 259.176508][T11318] ? kfree+0x1c5/0x650 [ 259.176540][T11318] ? __get_vm_area_node+0x219/0x2f0 [ 259.176584][T11318] __vmalloc_node_range_noprof+0x36b/0x1540 [ 259.176612][T11318] ? __lock_acquire+0x747/0x2de0 [ 259.176657][T11318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.176693][T11318] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 259.176714][T11318] __vmalloc_noprof+0xd2/0x120 [ 259.176741][T11318] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 259.176765][T11318] bpf_prog_alloc_no_stats+0x47/0x560 [ 259.176785][T11318] ? bpf_prog_alloc+0x2a/0x1a0 [ 259.176808][T11318] bpf_prog_alloc+0x3c/0x1a0 [ 259.176832][T11318] bpf_prog_load+0x7f8/0x1c20 [ 259.176866][T11318] ? __pfx_bpf_prog_load+0x10/0x10 [ 259.176913][T11318] __sys_bpf+0xd0d/0xd90 [ 259.176942][T11318] ? __pfx___sys_bpf+0x10/0x10 [ 259.176975][T11318] ? __fget_files+0x2a/0x420 [ 259.177017][T11318] ? ksys_write+0x242/0x270 [ 259.177052][T11318] ? __pfx_ksys_write+0x10/0x10 [ 259.177085][T11318] __x64_sys_bpf+0xba/0xd0 [ 259.177106][T11318] do_syscall_64+0x166/0x520 [ 259.177127][T11318] ? trace_irq_disable+0x3b/0x140 [ 259.177146][T11318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.177166][T11318] ? clear_bhb_loop+0x70/0xc0 [ 259.177189][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.177208][T11318] RIP: 0033:0x7fbd1c99e159 [ 259.177227][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.177243][T11318] RSP: 002b:00007fbd1abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.177263][T11318] RAX: ffffffffffffffda RBX: 00007fbd1cc25fa0 RCX: 00007fbd1c99e159 [ 259.177277][T11318] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 259.177289][T11318] RBP: 00007fbd1abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.177301][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.177312][T11318] R13: 00007fbd1cc26038 R14: 00007fbd1cc25fa0 R15: 00007ffd40a33bd8 [ 259.177343][T11318] [ 259.177383][T11318] Mem-Info: [ 259.177393][T11318] active_anon:5795 inactive_anon:0 isolated_anon:0 [ 259.177393][T11318] active_file:0 inactive_file:43524 isolated_file:0 [ 259.177393][T11318] unevictable:0 dirty:337 writeback:0 [ 259.177393][T11318] slab_reclaimable:10579 slab_unreclaimable:99553 [ 259.177393][T11318] mapped:29714 shmem:560 pagetables:1178 [ 259.177393][T11318] sec_pagetables:0 bounce:0 [ 259.177393][T11318] kernel_misc_reclaimable:0 [ 259.177393][T11318] free:1328073 free_pcp:8891 free_cma:0 [ 259.177442][T11318] Node 0 active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118856kB dirty:1348kB writeback:0kB shmem:2240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14100kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.181051][T11318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.181105][T11318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.181161][T11318] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 259.181198][T11318] Node 0 DMA32 free:1355180kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173888kB unevictable:0kB writepending:1348kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:35484kB local_pcp:14936kB free_cma:0kB [ 259.181253][T11318] lowmem_reserve[]: 0 0 0 0 0 [ 259.181286][T11318] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.181336][T11318] lowmem_reserve[]: 0 0 0 0 0 [ 259.181369][T11318] Node 1 Normal free:3941752kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.181421][T11318] lowmem_reserve[]: 0 0 0 0 0 [ 259.181454][T11318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.181574][T11318] Node 0 DMA32: 1777*4kB (UME) 1421*8kB (UM) 888*16kB (UME) 490*32kB (UME) 59*64kB (UM) 9*128kB (UM) 2*256kB (M) 2*512kB (ME) 4*1024kB (ME) 3*2048kB (UM) 315*4096kB (UM) = 1355308kB [ 259.181729][T11318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.181824][T11318] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941752kB [ 259.181975][T11318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.181992][T11318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.182007][T11318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.182022][T11318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.182037][T11318] 44080 total pagecache pages [ 259.182045][T11318] 0 pages in swap cache [ 259.182052][T11318] Free swap = 124996kB [ 259.182059][T11318] Total swap = 124996kB [ 259.182723][T11318] 2097051 pages RAM [ 259.182732][T11318] 0 pages HighMem/MovableOnly [ 259.182739][T11318] 428782 pages reserved [ 259.182746][T11318] 0 pages cma reserved [ 259.946272][ T1958] block nbd1: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 90 seconds [ 259.946321][ T1958] block nbd1: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 90 seconds [ 259.946349][ T1958] block nbd1: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 90 seconds [ 259.946376][ T1958] block nbd1: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 90 seconds [ 260.154360][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1428'. [ 260.261061][T11345] tc_dump_action: action bad kind [ 260.412390][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 260.437839][T11356] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 260.683153][T11356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.776838][T11361] bond5: (slave ip6erspan0): making interface the new active one [ 260.778127][T11361] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 260.778611][T11365] syzkaller1: entered promiscuous mode [ 260.778633][T11365] syzkaller1: entered allmulticast mode [ 261.080894][ T8557] net_ratelimit: 2 callbacks suppressed [ 261.080917][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.498405][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 261.521931][T11392] tc_dump_action: action bad kind [ 261.817516][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 261.817558][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 261.834954][T11411] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 261.834975][T11411] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1448'. [ 261.837669][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 261.837698][T11411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 261.840851][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 261.884130][ T7185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.884376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.117604][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.260866][T11434] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 262.607465][T11446] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 262.702484][T11446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.703710][T11450] syzkaller0: entered promiscuous mode [ 262.703732][T11450] syzkaller0: entered allmulticast mode [ 262.836797][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.838936][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.862011][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.919873][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.930626][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.944289][T11444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.967253][T11444] veth1_vlan: left promiscuous mode [ 262.968211][T11444] veth0_vlan: left promiscuous mode [ 262.969513][T11444] veth0_vlan: entered promiscuous mode [ 262.971303][T11444] veth1_vlan: entered promiscuous mode [ 262.999030][T11444] veth1_macvtap: left promiscuous mode [ 263.000258][T11444] veth0_macvtap: entered promiscuous mode [ 263.001642][T11444] veth1_macvtap: entered promiscuous mode [ 263.026098][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.027021][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.027968][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.029244][T11444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.042675][T11444] ip6gretap0: entered promiscuous mode [ 263.066443][T11444] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 263.089494][T11447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 263.099145][T11447] bond6: (slave batadv1): making interface the new active one [ 263.100313][T11447] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 263.127276][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.127516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.131419][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.228587][ T8557] wg2 speed is unknown, defaulting to 1000 [ 263.228615][ T8557] syz2: Port: 1 Link ACTIVE [ 263.228719][T11461] macsec0: entered promiscuous mode [ 263.229424][T11457] tc_dump_action: action bad kind [ 263.230571][T11464] veth1_macvtap: left promiscuous mode [ 263.245838][T11464] macsec0 (unregistering): left promiscuous mode [ 263.295698][T11444] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 263.315436][T11473] macsec0: entered promiscuous mode [ 263.326054][T11468] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 263.408188][T11444] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 263.455227][T11473] macsec0 (unregistering): left promiscuous mode [ 263.574883][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.576761][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.604370][ T8557] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.643681][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.643972][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.695836][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.696864][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.872576][T11491] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 263.973178][T11491] bond3: option mode: invalid value (9) [ 263.975072][T11491] bond3 (unregistering): Released all slaves [ 264.078433][T11501] veth1_to_team: entered allmulticast mode [ 264.115479][T11499] veth1_to_team: left allmulticast mode [ 264.325994][ T8557] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.355579][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.355664][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.361507][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.365932][T11511] smbdirect: ib_dev[xyz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.365967][T11511] smbdirect: ib_dev[xyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.366002][T11511] smbdirect: ib_dev[xyz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 264.389371][T11511] infiniband xyz0: RDMA CMA: cma_listen_on_dev, error -98 [ 264.437792][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.457284][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.467449][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.484346][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.487342][T11511] wlan0 speed is unknown, defaulting to 1000 [ 264.563492][ T8557] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.724371][T11522] tc_dump_action: action bad kind [ 265.316133][T11549] __nla_validate_parse: 5 callbacks suppressed [ 265.316157][T11549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1481'. [ 265.316173][T11549] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1481'. [ 265.316229][T11549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1481'. [ 265.469868][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 265.469901][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 265.583149][T11563] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 265.987060][T11571] wg2 speed is unknown, defaulting to 1000 [ 266.057318][T11571] wlan0 speed is unknown, defaulting to 1000 [ 266.194906][T11584] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.284675][ T8542] net_ratelimit: 3 callbacks suppressed [ 266.284698][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.962732][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.962954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.098812][T11617] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 267.356568][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 267.387723][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.602463][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.326146][ T5611] cgroup: fork rejected by pids controller in /syz2 [ 268.412909][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.550444][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 268.808720][T11667] wg2 speed is unknown, defaulting to 1000 [ 268.817427][T11667] wlan0 speed is unknown, defaulting to 1000 [ 268.883548][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.883783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.096597][T11685] xt_hashlimit: size too large, truncated to 1048576 [ 269.096778][T11685] xt_hashlimit: max too large, truncated to 1048576 [ 269.237403][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.331946][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.453626][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.455079][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.572046][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.953597][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 270.001832][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.008626][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.009360][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.011964][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.020826][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.471899][T11725] bond6: option fail_over_mac: invalid value (127) [ 270.504667][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.533109][T11725] bond6 (unregistering): Released all slaves [ 270.817634][ T13] veth0: left allmulticast mode [ 270.817682][ T13] veth0: left promiscuous mode [ 270.820042][ T13] bridge0: port 1(veth0) entered disabled state [ 270.889459][ T13] bridge_slave_1: left allmulticast mode [ 270.889491][ T13] bridge_slave_1: left promiscuous mode [ 270.890643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.041396][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1536'. [ 271.522394][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.581704][ T13] erspan0 (unregistering): left promiscuous mode [ 271.690513][ T13] bond0 (unregistering): left promiscuous mode [ 271.690540][ T13] bond_slave_0: left promiscuous mode [ 271.690799][ T13] bond_slave_1: left promiscuous mode [ 271.716773][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.735856][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.740143][ T13] bond0 (unregistering): Released all slaves [ 271.750542][ T13] bond1 (unregistering): Released all slaves [ 271.769840][ T13] bond2 (unregistering): Released all slaves [ 271.802275][ T13] bond3 (unregistering): Released all slaves [ 271.839390][ T13] bond4 (unregistering): Released all slaves [ 271.871405][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 272.069540][ T13] tipc: Left network mode [ 272.123146][T11782] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1541'. [ 272.123220][T11782] netlink: 'syz.0.1541': attribute type 9 has an invalid length. [ 272.123235][T11782] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1541'. [ 272.123250][T11782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 272.172886][ T5621] Bluetooth: hci0: command tx timeout [ 272.254643][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'. [ 272.509615][T11708] wg2 speed is unknown, defaulting to 1000 [ 272.515928][ T13] IPVS: stopping master sync thread 7610 ... [ 272.531783][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'. [ 272.545128][T11791] bond6: entered promiscuous mode [ 272.545159][T11791] bond6: entered allmulticast mode [ 272.548962][T11708] wlan0 speed is unknown, defaulting to 1000 [ 272.570532][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.647762][T11787] xt_CT: No such helper "snmp_trap" [ 272.727883][ T7175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.728103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.765345][T11806] xt_CT: No such helper "snmp_trap" [ 272.961149][T11815] netlink: 'syz.3.1544': attribute type 12 has an invalid length. [ 273.017558][T11815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1544'. [ 273.228740][T11818] xt_policy: output policy not valid in PREROUTING and INPUT [ 273.281543][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 273.603887][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.863748][T11844] netlink: 'syz.4.1551': attribute type 32 has an invalid length. [ 273.863776][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 273.886411][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1550'. [ 274.119135][T11824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.227035][T11844] bond3: option coupled_control: invalid value (10) [ 274.230073][T11844] bond3 (unregistering): Released all slaves [ 274.247187][ T5621] Bluetooth: hci0: command tx timeout [ 274.289988][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 274.437222][T11824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.593379][T11863] netlink: 'syz.1.1554': attribute type 11 has an invalid length. [ 274.643464][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.643770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.648229][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.809536][T11824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.923273][ T13] team0: left promiscuous mode [ 274.923300][ T13] team_slave_0: left promiscuous mode [ 274.923534][ T13] team_slave_1: left promiscuous mode [ 274.986716][ T13] hsr_slave_0: left promiscuous mode [ 274.993635][ T13] hsr_slave_1: left promiscuous mode [ 275.074458][ T13] veth0_macvtap: left promiscuous mode [ 275.074594][ T13] veth1_vlan: left promiscuous mode [ 275.074650][ T13] veth0_vlan: left promiscuous mode [ 275.698479][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.922311][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.994210][ T13] team0 (unregistering): Port device team_slave_1 removed [ 276.038059][ T13] team0 (unregistering): Port device team_slave_0 removed [ 276.300364][T11882] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 276.323299][ T5621] Bluetooth: hci0: command tx timeout [ 276.488337][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 276.524641][T11824] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.553032][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.553218][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.553381][T11708] bridge_slave_0: entered allmulticast mode [ 276.555262][T11708] bridge_slave_0: entered promiscuous mode [ 276.631962][T11925] __nla_validate_parse: 3 callbacks suppressed [ 276.631988][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 276.731290][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.733270][ T7187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.735489][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.742238][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.806946][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.807072][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.807257][T11708] bridge_slave_1: entered allmulticast mode [ 276.811097][T11708] bridge_slave_1: entered promiscuous mode [ 276.839654][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1562'. [ 276.876332][T11925] vlan2: entered promiscuous mode [ 277.228630][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.261127][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.339858][T11708] team0: Port device team_slave_0 added [ 277.364928][T11708] team0: Port device team_slave_1 added [ 277.434093][T11947] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 277.501433][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.501456][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.501485][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.574360][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 277.624492][T11938] vlan3: entered promiscuous mode [ 277.738024][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.738044][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.738070][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.769595][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.844427][ T7185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.844643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.901928][T11956] Bluetooth: MGMT ver 1.23 [ 277.971130][ T13] IPVS: stop unused estimator thread 0... [ 278.336546][T11708] hsr_slave_0: entered promiscuous mode [ 278.340868][T11708] hsr_slave_1: entered promiscuous mode [ 278.357005][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.412521][ T5621] Bluetooth: hci0: command tx timeout [ 278.448259][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.448787][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.602584][ T7187] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.740339][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 278.806956][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.981356][T11978] vlan0: entered promiscuous mode [ 279.036115][T11993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.106502][T11993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.851907][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.962990][T11996] erspan0: entered promiscuous mode [ 279.970998][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 280.038552][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.424471][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.479223][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 280.659137][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 280.776179][T12020] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 280.880187][T12025] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 280.905471][T12025] bond0 (unregistering): Released all slaves [ 280.992220][T12024] vlan0: entered promiscuous mode [ 281.785011][T12068] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 281.869085][T12068] team0 (unregistering): Port device team_slave_0 removed [ 281.923713][T12068] team0 (unregistering): Port device team_slave_1 removed [ 281.973020][ T8555] net_ratelimit: 3 callbacks suppressed [ 281.973044][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.090387][T12068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1586'. [ 282.217535][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 282.396138][T11708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.415631][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.418456][T11708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.445438][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.449957][T11708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.482690][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.485325][T11708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.512551][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.685315][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.762602][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.786588][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.786716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.828341][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.828462][ T7187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.067314][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.602399][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 283.605268][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.605440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.714850][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 283.758767][T12129] vlan3: entered promiscuous mode [ 283.889431][T12141] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1597'. [ 284.105395][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.240644][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 284.297089][T12157] ip6gre2: entered promiscuous mode [ 284.297116][T12157] ip6gre2: entered allmulticast mode [ 284.387333][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.487728][T11708] veth0_vlan: entered promiscuous mode [ 284.507683][T11708] veth1_vlan: entered promiscuous mode [ 284.549481][T11708] veth0_macvtap: entered promiscuous mode [ 284.618159][T11708] veth1_macvtap: entered promiscuous mode [ 284.709967][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.743439][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.890652][ T7187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.890973][ T7187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.907258][ T7187] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 284.907500][ T7187] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 284.917321][ T7187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.932479][ T6001] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.043493][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.131039][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.136031][ T7187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.136052][ T7187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.213288][ T6001] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.351054][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.351082][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.365190][T12186] tc_dump_action: action bad kind [ 285.406945][ T6001] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.635832][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.974987][T12215] xt_hl: Unknown Hop Limit match mode: 4 [ 285.978939][T12217] xt_hl: Unknown Hop Limit match mode: 4 [ 286.011459][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058618000: rx timeout, send abort [ 286.021525][T12218] 6)fl: renamed from batadv_slave_1 [ 286.173311][ T7175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.173532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.199919][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.380483][T12228] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 286.401845][T12228] bond1 (unregistering): Released all slaves [ 286.511656][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805861a000: rx timeout, send abort [ 286.513007][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058618000: abort rx timeout. Force session deactivation [ 286.997425][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1620'. [ 286.997464][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1620'. [ 286.999601][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 287.011742][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805861a000: abort rx timeout. Force session deactivation [ 287.200898][T12258] smc: net device vlan1 applied user defined pnetid SYZ2 [ 287.229464][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.579331][T12262] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1622'. [ 287.579360][T12262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1622'. [ 287.730566][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1625'. [ 288.111397][T12284] bond7: option xmit_hash_policy: invalid value (10) [ 288.126666][T12284] bond7 (unregistering): Released all slaves [ 288.287296][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.330743][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 288.330823][T12307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1629'. [ 288.463645][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 288.513320][T12297] netlink: 'syz.4.1629': attribute type 32 has an invalid length. [ 288.513346][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 288.568820][T12294] vlan2: entered promiscuous mode [ 288.568849][T12294] gretap0: entered promiscuous mode [ 288.637131][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 288.650323][T12297] bond3: Setting coupled_control to off (0) [ 288.884972][T12326] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 288.885509][T12327] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 289.282298][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.365933][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.366161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.395773][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.629842][T12346] netlink: 'syz.0.1636': attribute type 7 has an invalid length. [ 289.679413][T11718] udevd[11718]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 289.718740][T12355] xt_hashlimit: max too large, truncated to 1048576 [ 289.719482][T12355] ip_tables: iptables: counters copy to user failed while replacing table [ 290.004142][ T1958] block nbd1: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 120 seconds [ 290.004191][ T1958] block nbd1: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 120 seconds [ 290.004218][ T1958] block nbd1: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 120 seconds [ 290.004246][ T1958] block nbd1: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 120 seconds [ 290.067201][T12363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.120370][T12363] ip6tnl2: entered allmulticast mode [ 290.141432][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 290.185044][T12360] vlan3: entered promiscuous mode [ 290.409185][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.819219][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1653'. [ 290.819253][T12392] openvswitch: netlink: Invalid VLAN frame [ 291.291300][ T7187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.804106][T12419] bond0: Invalid ad_actor_system MAC address. [ 291.804132][T12419] bond0: option ad_actor_system: invalid value (7) [ 291.808179][T12419] bond0 (unregistering): Released all slaves [ 292.097695][T12428] syzkaller0: entered promiscuous mode [ 292.097722][T12428] syzkaller0: entered allmulticast mode [ 292.489102][ T8542] net_ratelimit: 2 callbacks suppressed [ 292.489126][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.565097][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.530526][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.847696][T12440] syzkaller0: entered promiscuous mode [ 293.847724][T12440] syzkaller0: entered allmulticast mode [ 294.566402][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.818946][T12447] syzkaller0: left promiscuous mode [ 294.818972][T12447] syzkaller0: left allmulticast mode [ 295.125710][ T7187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.125932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.611412][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.647617][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.056901][ T7175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.057114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.717743][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.122248][T12488] __nla_validate_parse: 3 callbacks suppressed [ 298.122274][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 298.158498][T12488] vlan3: entered promiscuous mode [ 298.333235][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 298.414638][T12510] netlink: 'syz.0.1683': attribute type 3 has an invalid length. [ 298.414887][T12511] netlink: 'syz.0.1683': attribute type 3 has an invalid length. [ 298.419861][T12510] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1683'. [ 298.419887][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 298.419902][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 298.760256][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.985221][T12522] netlink: 'syz.3.1686': attribute type 30 has an invalid length. [ 298.985245][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 299.137123][T12522] bond0: option arp_missed_max: invalid value (0) [ 299.137154][T12522] bond0: option arp_missed_max: allowed values 1 - 255 [ 299.394747][T12537] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 299.435774][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 299.435814][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 299.576510][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 299.576549][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 299.615932][T12541] erspan0: entered promiscuous mode [ 299.669011][T12543] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 299.768691][ T8563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.879879][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1696'. [ 300.275905][T12576] netlink: 'syz.3.1701': attribute type 39 has an invalid length. [ 300.832479][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.884030][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.884240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.970445][T12602] pim6reg: entered allmulticast mode [ 301.244748][T12620] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.862120][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.345539][T12658] syzkaller0: entered promiscuous mode [ 302.345566][T12658] syzkaller0: entered allmulticast mode [ 302.559979][T12658] xt_CT: No such helper "snmp" [ 302.835616][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.835852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.924317][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.576798][T12713] __nla_validate_parse: 3 callbacks suppressed [ 303.576824][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 303.685517][T12712] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 303.833736][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 303.864773][T12712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.966954][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 303.987557][T12734] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1736'. [ 304.002442][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.035148][T12717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.036899][T12717] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 304.038701][T12717] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 304.175855][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 304.345092][T12737] vlan2: entered promiscuous mode [ 304.660443][T12745] FAULT_INJECTION: forcing a failure. [ 304.660443][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.660481][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.1.1738 Not tainted syzkaller #0 PREEMPT(full) [ 304.660505][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.660517][T12745] Call Trace: [ 304.660527][T12745] [ 304.660535][T12745] dump_stack_lvl+0xe8/0x150 [ 304.660573][T12745] should_fail_ex+0x410/0x560 [ 304.660604][T12745] _copy_to_user+0x31/0xb0 [ 304.660634][T12745] simple_read_from_buffer+0xe1/0x170 [ 304.660679][T12745] proc_fail_nth_read+0x1bb/0x230 [ 304.660709][T12745] ? common_file_perm+0x20e/0x2b0 [ 304.660737][T12745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.660773][T12745] ? rw_verify_area+0x24a/0x4c0 [ 304.660805][T12745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.660836][T12745] vfs_read+0x213/0xa80 [ 304.660873][T12745] ? __pfx___mutex_lock+0x10/0x10 [ 304.660898][T12745] ? __pfx_vfs_read+0x10/0x10 [ 304.660930][T12745] ? __fget_files+0x2a/0x420 [ 304.660964][T12745] ? __fget_files+0x3a2/0x420 [ 304.660991][T12745] ? __fget_files+0x2a/0x420 [ 304.661033][T12745] ksys_read+0x150/0x270 [ 304.661067][T12745] ? __pfx_ksys_read+0x10/0x10 [ 304.661118][T12745] do_syscall_64+0x166/0x520 [ 304.661141][T12745] ? trace_irq_disable+0x3b/0x140 [ 304.661162][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.661184][T12745] ? clear_bhb_loop+0x70/0xc0 [ 304.661211][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.661232][T12745] RIP: 0033:0x7f4ca675e98e [ 304.661252][T12745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.661270][T12745] RSP: 002b:00007f4ca7603fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.661295][T12745] RAX: ffffffffffffffda RBX: 00007f4ca76046c0 RCX: 00007f4ca675e98e [ 304.661312][T12745] RDX: 000000000000000f RSI: 00007f4ca76040a0 RDI: 0000000000000003 [ 304.661325][T12745] RBP: 00007f4ca7604090 R08: 0000000000000000 R09: 0000000000000000 [ 304.661339][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.661352][T12745] R13: 00007f4ca6a26038 R14: 00007f4ca6a25fa0 R15: 00007ffc30faae38 [ 304.661389][T12745] [ 304.787542][T12748] FAULT_INJECTION: forcing a failure. [ 304.787542][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 304.787575][T12748] CPU: 0 UID: 0 PID: 12748 Comm: syz.2.1740 Not tainted syzkaller #0 PREEMPT(full) [ 304.787598][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.787610][T12748] Call Trace: [ 304.787617][T12748] [ 304.787625][T12748] dump_stack_lvl+0xe8/0x150 [ 304.787658][T12748] should_fail_ex+0x410/0x560 [ 304.787684][T12748] ? __alloc_skb+0x1db/0x7a0 [ 304.787704][T12748] should_failslab+0xa8/0x100 [ 304.787729][T12748] ? __alloc_skb+0x1db/0x7a0 [ 304.787747][T12748] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 304.787775][T12748] ? __alloc_skb+0x18d/0x7a0 [ 304.787796][T12748] ? __alloc_skb+0x1db/0x7a0 [ 304.787823][T12748] __alloc_skb+0x1db/0x7a0 [ 304.787849][T12748] netlink_sendmsg+0x5d4/0xb40 [ 304.787886][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.787921][T12748] ? apparmor_socket_sendmsg+0x18b/0x360 [ 304.787948][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.787974][T12748] sock_sendmsg_nosec+0x13a/0x180 [ 304.788006][T12748] ____sys_sendmsg+0x54e/0x850 [ 304.788036][T12748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.788070][T12748] ? import_iovec+0x73/0xa0 [ 304.788097][T12748] ___sys_sendmsg+0x2a5/0x360 [ 304.788119][T12748] ? __lock_acquire+0x747/0x2de0 [ 304.788151][T12748] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.788210][T12748] ? __fget_files+0x2a/0x420 [ 304.788234][T12748] ? __fget_files+0x3a2/0x420 [ 304.788270][T12748] __x64_sys_sendmsg+0x1b1/0x290 [ 304.788297][T12748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.788361][T12748] do_syscall_64+0x166/0x520 [ 304.788381][T12748] ? trace_irq_disable+0x3b/0x140 [ 304.788400][T12748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.788420][T12748] ? clear_bhb_loop+0x70/0xc0 [ 304.788443][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.788462][T12748] RIP: 0033:0x7f857d19e159 [ 304.788481][T12748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.788510][T12748] RSP: 002b:00007f857dfa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.788533][T12748] RAX: ffffffffffffffda RBX: 00007f857d425fa0 RCX: 00007f857d19e159 [ 304.788547][T12748] RDX: 0000000024040084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 304.788569][T12748] RBP: 00007f857dfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 304.788582][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.788593][T12748] R13: 00007f857d426038 R14: 00007f857d425fa0 R15: 00007ffdb0aade28 [ 304.788624][T12748] [ 305.286714][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 305.290359][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 305.339452][T12760] bond5: option miimon: invalid value (18446744073357230079) [ 305.339480][T12760] bond5: option miimon: allowed values 0 - 2147483647 [ 305.371185][T12760] bond5 (unregistering): Released all slaves [ 305.392821][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 305.392881][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 305.549854][T12756] bond4: option resend_igmp: invalid value (2878) [ 305.550032][T12756] bond4: option resend_igmp: allowed values 0 - 255 [ 305.569806][T12756] bond4 (unregistering): Released all slaves [ 305.716714][T12768] geneve0: entered promiscuous mode [ 305.744040][T12768] geneve0: left promiscuous mode [ 305.846737][T12766] tc_dump_action: action bad kind [ 305.957361][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 305.987689][T12783] vlan2: entered promiscuous mode [ 306.353004][T12798] netlink: 'syz.0.1755': attribute type 21 has an invalid length. [ 306.353085][T12798] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 306.353100][T12798] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 306.521692][T12803] tipc: Failed to remove unknown binding: 66,0,0/0:1103357797/1103357798 [ 306.524370][T12803] tipc: Failed to remove unknown binding: 66,0,0/0:1103357797/1103357798 [ 307.215745][T12830] tc_dump_action: action bad kind [ 307.831204][T12853] vlan2: entered promiscuous mode [ 307.912309][T12866] netlink: 'syz.0.1768': attribute type 2 has an invalid length. [ 307.948673][T12858] tc_dump_action: action bad kind [ 308.276194][T12881] netlink: 'syz.4.1771': attribute type 6 has an invalid length. [ 308.544913][T12889] tc_dump_action: action bad kind [ 308.795087][T12897] __nla_validate_parse: 7 callbacks suppressed [ 308.795111][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 308.882347][ T5621] Bluetooth: hci0: command tx timeout [ 309.191074][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 309.293759][T12923] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 309.328777][T12918] syzkaller0: entered promiscuous mode [ 309.328806][T12918] syzkaller0: entered allmulticast mode [ 309.795635][T12940] netlink: 'syz.1.1789': attribute type 10 has an invalid length. [ 310.339096][T12954] netlink: 'syz.4.1791': attribute type 11 has an invalid length. [ 310.340803][T12953] netlink: 'syz.4.1791': attribute type 11 has an invalid length. [ 312.236789][T12923] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 312.556629][T12955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.560590][T12955] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.589664][T12955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.638201][T12955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.650349][T12955] batman_adv: batadv0: Interface activated: 6)fl [ 312.664940][T12955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.664968][T12955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.671560][T12955] veth1_vlan: left promiscuous mode [ 312.703915][T12955] veth0_vlan: left promiscuous mode [ 312.706315][T12955] veth0_vlan: entered promiscuous mode [ 312.708771][T12955] veth1_vlan: entered promiscuous mode [ 312.733776][T12955] veth1_macvtap: left promiscuous mode [ 312.734999][T12955] veth0_macvtap: left promiscuous mode [ 312.736272][T12955] veth0_macvtap: entered promiscuous mode [ 312.758710][T12955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.762845][T12955] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 312.769137][T12955] 8021q: adding VLAN 0 to HW filter on device eth0 [ 312.770547][T12955] 8021q: adding VLAN 0 to HW filter on device eth1 [ 312.773660][T12955] 8021q: adding VLAN 0 to HW filter on device eth2 [ 312.775090][T12955] 8021q: adding VLAN 0 to HW filter on device eth3 [ 312.791196][T12955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.796908][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 312.824991][T12955] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 312.831865][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 312.864726][T12956] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 312.871988][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.872174][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.875720][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.875824][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.892641][ T12] bond2: (slave bridge3): link status up again after 0 ms [ 312.912470][ T7176] bond2: (slave bridge3): link status up again after 0 ms [ 312.912568][ T7176] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 312.942943][ T12] bond2: (slave bridge3): link status up again after 0 ms [ 312.968865][ T7175] bond2: (slave bridge3): link status up again after 0 ms [ 312.982927][ T12] bond2: (slave bridge3): link status up again after 0 ms [ 312.990264][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 313.014428][ T6010] wlan0 speed is unknown, defaulting to 1000 [ 313.014722][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.014753][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.014796][ T13] bond2: (slave bridge3): link status up again after 0 ms [ 313.015628][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.015662][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.181996][T12986] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1801'. [ 313.182739][ T7185] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.182770][ T7185] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.184412][ T7175] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.184439][ T7175] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.327207][ T13] [ 313.329602][ T13] ============================================ [ 313.336293][ T13] WARNING: possible recursive locking detected [ 313.342656][ T13] syzkaller #0 Not tainted [ 313.347424][ T13] -------------------------------------------- [ 313.353684][ T13] kworker/u8:1/13 is trying to acquire lock: [ 313.359747][ T13] ffff88805b54cd58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 313.369952][ T13] [ 313.369952][ T13] but task is already holding lock: [ 313.377404][ T13] ffff888030af9958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 313.387254][ T13] [ 313.387254][ T13] other info that might help us debug this: [ 313.395325][ T13] Possible unsafe locking scenario: [ 313.395325][ T13] [ 313.402955][ T13] CPU0 [ 313.406325][ T13] ---- [ 313.409604][ T13] lock(&qdisc_xmit_lock_key#3); [ 313.414684][ T13] lock(&qdisc_xmit_lock_key#3); [ 313.419718][ T13] [ 313.419718][ T13] *** DEADLOCK *** [ 313.419718][ T13] [ 313.427861][ T13] May be due to missing lock nesting notation [ 313.427861][ T13] [ 313.436267][ T13] locks held by kworker/u8:1/13: 11, last CPU#0: [ 313.442616][ T13] #0: ffff88802a2b8940 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 313.453684][ T13] #1: ffffc90000127c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 313.466665][ T13] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 313.477136][ T13] #3: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 313.487080][ T13] #4: ffff88802a8b4228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 313.499888][ T13] #5: ffff888030af9958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 313.510603][ T13] #6: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 313.519496][ T13] #7: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 313.529351][ T13] #8: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 313.538371][ T13] #9: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 313.548345][ T13] #10: ffff88807a64e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 313.561103][ T13] [ 313.561103][ T13] stack backtrace: [ 313.567087][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 313.576371][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.586467][ T13] Workqueue: bond1 bond_alb_monitor [ 313.591705][ T13] Call Trace: [ 313.594991][ T13] [ 313.597925][ T13] dump_stack_lvl+0xe8/0x150 [ 313.602532][ T13] print_deadlock_bug+0x27a/0x290 [ 313.607565][ T13] __lock_acquire+0x25db/0x2de0 [ 313.612449][ T13] ? __pfx_netif_skb_features+0x10/0x10 [ 313.618047][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 313.623000][ T13] ? __lock_acquire+0x747/0x2de0 [ 313.627945][ T13] lock_acquire+0x115/0x350 [ 313.632453][ T13] ? sch_direct_xmit+0x15f/0x4c0 [ 313.637411][ T13] _raw_spin_lock+0x2e/0x40 [ 313.641952][ T13] ? sch_direct_xmit+0x15f/0x4c0 [ 313.646903][ T13] sch_direct_xmit+0x15f/0x4c0 [ 313.651675][ T13] ? __pfx_sch_direct_xmit+0x10/0x10 [ 313.656970][ T13] ? arp_solicit+0xbd0/0xe40 [ 313.661582][ T13] __dev_queue_xmit+0x177f/0x3820 [ 313.666630][ T13] ? __dev_queue_xmit+0x29b/0x3820 [ 313.671753][ T13] ? __lock_acquire+0x747/0x2de0 [ 313.676715][ T13] ? arpt_do_table+0x25b/0x1f90 [ 313.681609][ T13] ? __pfx___dev_queue_xmit+0x10/0x10 [ 313.687014][ T13] ? __pfx_arpt_do_table+0x10/0x10 [ 313.692164][ T13] ? NF_HOOK+0xa2/0x3c0 [ 313.696344][ T13] NF_HOOK+0x33a/0x3c0 [ 313.700423][ T13] ? __pfx_arp_xmit_finish+0x10/0x10 [ 313.705893][ T13] ? NF_HOOK+0xa2/0x3c0 [ 313.710143][ T13] ? __pfx_NF_HOOK+0x10/0x10 [ 313.714830][ T13] ? lock_acquire+0x115/0x350 [ 313.719599][ T13] ? __pfx_arp_xmit_finish+0x10/0x10 [ 313.724892][ T13] ? inet_addr_type_dev_table+0x25/0x190 [ 313.730642][ T13] arp_xmit+0x16c/0x270 [ 313.734837][ T13] ? arp_xmit+0x23/0x270 [ 313.739103][ T13] arp_solicit+0xbdc/0xe40 [ 313.743549][ T13] ? __pfx_arp_solicit+0x10/0x10 [ 313.748695][ T13] ? __neigh_event_send+0xea4/0x1510 [ 313.754200][ T13] ? __pfx_arp_solicit+0x10/0x10 [ 313.759174][ T13] __neigh_event_send+0xf0c/0x1510 [ 313.764390][ T13] neigh_resolve_output+0x1a1/0x720 [ 313.769603][ T13] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 313.774638][ T13] ? ip_finish_output2+0x3de/0x10b0 [ 313.779857][ T13] ip_finish_output2+0xc4b/0x10b0 [ 313.784984][ T13] ? ip_skb_dst_mtu+0x811/0xa50 [ 313.790110][ T13] ? ip_finish_output2+0x3de/0x10b0 [ 313.795315][ T13] ? ip_finish_output+0x40b/0x530 [ 313.800350][ T13] ip_output+0x29f/0x450 [ 313.804606][ T13] ? ip_output+0x5a/0x450 [ 313.808952][ T13] iptunnel_xmit+0x626/0xd10 [ 313.813563][ T13] ip_tunnel_xmit+0x195b/0x2040 [ 313.818611][ T13] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 313.824009][ T13] ? lockdep_hardirqs_on+0x7b/0x110 [ 313.829389][ T13] ? __gre_xmit+0x106/0x1a0 [ 313.833902][ T13] erspan_xmit+0xb6a/0x1620 [ 313.838420][ T13] ? dev_queue_xmit_nit+0x2d/0xac0 [ 313.843647][ T13] ? __pfx_erspan_xmit+0x10/0x10 [ 313.848802][ T13] ? dev_queue_xmit_nit+0x95c/0xac0 [ 313.854196][ T13] ? dev_queue_xmit_nit+0x2d/0xac0 [ 313.859357][ T13] dev_hard_start_xmit+0x2cd/0x830 [ 313.864501][ T13] sch_direct_xmit+0x257/0x4c0 [ 313.869362][ T13] ? __pfx_sch_direct_xmit+0x10/0x10 [ 313.874660][ T13] ? __switch_to_asm+0x50/0x70 [ 313.879528][ T13] __dev_queue_xmit+0x177f/0x3820 [ 313.884570][ T13] ? __dev_queue_xmit+0x29b/0x3820 [ 313.889706][ T13] ? __pfx___dev_queue_xmit+0x10/0x10 [ 313.895098][ T13] ? __alloc_skb+0x27a/0x7a0 [ 313.899708][ T13] ? rcu_is_watching+0x16/0xb0 [ 313.904824][ T13] ? __alloc_skb+0x27a/0x7a0 [ 313.909423][ T13] ? trace_kmem_cache_alloc+0x29/0xe0 [ 313.914813][ T13] ? __alloc_skb+0x27a/0x7a0 [ 313.919843][ T13] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 313.926099][ T13] ? __alloc_skb+0x4d0/0x7a0 [ 313.930696][ T13] ? alb_send_lp_vid+0x14e/0x550 [ 313.935643][ T13] alb_send_lp_vid+0x348/0x550 [ 313.940412][ T13] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 313.945722][ T13] alb_send_learning_packets+0x12c/0x300 [ 313.951376][ T13] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 313.957639][ T13] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 313.964073][ T13] bond_alb_monitor+0x3da/0x1840 [ 313.969053][ T13] ? bond_alb_monitor+0xf0/0x1840 [ 313.974178][ T13] ? lock_acquire+0x115/0x350 [ 313.979211][ T13] ? __pfx_bond_alb_monitor+0x10/0x10 [ 313.984859][ T13] ? rcu_is_watching+0x16/0xb0 [ 313.989912][ T13] ? process_scheduled_works+0x97a/0x1630 [ 313.995692][ T13] process_scheduled_works+0xc3d/0x1630 [ 314.001268][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.007352][ T13] ? assign_work+0x3cf/0x5d0 [ 314.012136][ T13] worker_thread+0xa47/0xfb0 [ 314.016749][ T13] kthread+0x38b/0x480 [ 314.020923][ T13] ? __pfx_worker_thread+0x10/0x10 [ 314.026048][ T13] ? __pfx_kthread+0x10/0x10 [ 314.030643][ T13] ret_from_fork+0x514/0xb70 [ 314.035241][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 314.040369][ T13] ? __switch_to+0xc89/0x1420 [ 314.045058][ T13] ? __pfx_kthread+0x10/0x10 [ 314.049654][ T13] ret_from_fork_asm+0x1a/0x30 [ 314.054432][ T13] [ 314.202498][T12993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.602278][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.727877][ T4980] udevd[4980]: worker [5627] /devices/virtual/block/nbd1 is taking a long time [ 317.812290][ T7185] net_ratelimit: 37 callbacks suppressed [ 317.812315][ T7185] bond2: (slave bridge3): failed to get link speed/duplex [ 317.922254][ T7185] bond2: (slave bridge3): failed to get link speed/duplex [ 318.032301][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 318.142352][ T7175] bond2: (slave bridge3): failed to get link speed/duplex [ 318.252632][ T994] bond2: (slave bridge3): failed to get link speed/duplex [ 318.362335][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 318.472822][ T994] bond2: (slave bridge3): failed to get link speed/duplex [ 318.582548][ T994] bond2: (slave bridge3): failed to get link speed/duplex [ 318.692250][ T7185] bond2: (slave bridge3): failed to get link speed/duplex [ 318.812820][ T12] bond2: (slave bridge3): failed to get link speed/duplex [ 320.082796][ T1958] block nbd1: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 150 seconds [ 320.082839][ T1958] block nbd1: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 150 seconds [ 320.082864][ T1958] block nbd1: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 150 seconds [ 320.082886][ T1958] block nbd1: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 150 seconds [ 322.902861][ T7175] net_ratelimit: 36 callbacks suppressed [ 322.902881][ T7175] bond2: (slave bridge3): failed to get link speed/duplex [ 323.012433][ T7175] bond2: (slave bridge3): failed to get link speed/duplex [ 323.122481][ T994] bond2: (slave bridge3): failed to get link speed/duplex [ 323.232479][ T13] bond2: (slave bridge3): failed to get link speed/duplex