last executing test programs: 4.002268123s ago: executing program 0 (id=10320): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000000)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00000002e00090027bd70000300000004000000cad3c88c479d951b986cb55bc3c11a2246262ee1fce64998747c97ecf2984b94c9f5b6f7f8f092bbdd5b603c6700536e4dfe4cf933c908f6c4a22bd0a856780bdb8e77a1743fd12c53dac8e5a14a93823bed151c57a363d07a61d5070b6f4f77cb4105529f3395d1c2f3ced422edb32f65f14b37d648f67b5539390ca36ed8fffd22261a3d7b01ef9b73e8188e79b23758a80f67153b2a191495c368b1cb76b49509a7edfb9aba31f1b0c5efef"], 0xc0}, 0x1, 0x0, 0x0, 0x2404e84c}, 0x0) 3.746985592s ago: executing program 0 (id=10323): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={0xffffffffffffffff, 0x90bd, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{0x1}, &(0x7f0000001ec0), &(0x7f0000001f00)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002040)={{}, &(0x7f0000001fc0), &(0x7f0000002000)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)='%pI4 \x00'}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{}, &(0x7f0000002180), &(0x7f00000021c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002180), &(0x7f00000021c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000080000000000000f7ffffac950786cc1450be098c9023dfff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2fe, 0x1000, &(0x7f0000000d40)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x405, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x105, 0x402, 0xc5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002240)=[r6, r0, r1, r2, r3, r5, r5, r5, 0xffffffffffffffff, r6], &(0x7f0000002280)=[{0x2000004, 0x5, 0x2, 0x8}, {0x1, 0x2, 0x0, 0x9}, {0xfffffffc, 0x2, 0xa, 0x4}, {0x1, 0x7, 0xb, 0x5}, {0x5, 0x5, 0x4, 0x1}, {0x4, 0x5, 0x8, 0xf}], 0x10, 0xffffff7a}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r9, 0x3) accept4(r9, 0x0, 0x0, 0x0) shutdown(r9, 0x1) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) 3.746767677s ago: executing program 2 (id=10324): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, &(0x7f00000000c0)=""/52, 0x34, 0x1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r5, 0x4, r5}, 0x10) 3.435035144s ago: executing program 0 (id=10326): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) read(r0, &(0x7f0000000540)=""/132, 0x84) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, 0x0, 0x0) 3.383705523s ago: executing program 2 (id=10328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x35ec}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x35ec}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) 3.162538977s ago: executing program 2 (id=10331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003", @ANYRES32=0x0, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000200)=[{0x15, 0x0, 0x2, 0x80000024}, {0x6, 0x2, 0x9, 0xfffffff6}, {0x4, 0xd, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001540)=[{&(0x7f0000000340)="92eafd", 0x3}], 0x1, 0x1) (async, rerun: 64) r7 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) splice(r5, 0x0, r7, 0x0, 0x1, 0xe) (async, rerun: 64) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 2.633861378s ago: executing program 4 (id=10337): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.603473926s ago: executing program 1 (id=10338): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async) listen(r4, 0xfffffffe) (async) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) (async, rerun: 32) bind$unix(r5, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000003c0)={'netdevsim0\x00'}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x1, 0x5, 0xcd5c, 0x2, 0x7}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={r9, 0x4}, &(0x7f0000000300)=0x8) (async) r10 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r6, 0xd66771a5e8224ded, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0xdbd, 0x16}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.447861336s ago: executing program 0 (id=10340): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c0}, 0x40) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000a00)={'netdevsim0\x00', &(0x7f00000009c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x7}, {0x1, 0x6}]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 2.356305142s ago: executing program 1 (id=10341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.118699284s ago: executing program 4 (id=10342): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\']&\x00', 0x109000, &(0x7f0000000040)={@align=0x5, {0x400, 0x2, 0x80000001, 0x7}}, 0x200, &(0x7f0000000080), &(0x7f00000000c0)=0x9a71}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x10000, 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x10000, 0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/88, 0x58}], 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000400), r0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @netrom}, [@rose, @default, @null, @null, @rose, @netrom, @null, @rose]}, &(0x7f00000004c0)=0x48, 0x800) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000500)={r1, 0x20000000}) r2 = accept4(r0, &(0x7f0000000540)=@sco={0x1f, @fixed}, &(0x7f00000005c0)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x300040c1}, 0x40000) (async) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x300040c1}, 0x40000) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000007c0)={0x0, 0xb396, 0x10, 0x5c, 0x9}, &(0x7f0000000800)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000007c0)={0x0, 0xb396, 0x10, 0x5c, 0x9}, &(0x7f0000000800)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000840)={r5, 0x100, 0x10}, &(0x7f0000000880)=0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='\']&\x00', 0x105000, &(0x7f0000000900)={@align=0x7, {0xf, 0x7, 0x1, 0x101}}, 0x3, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x1c0000}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='\']&\x00', 0x105000, &(0x7f0000000900)={@align=0x7, {0xf, 0x7, 0x1, 0x101}}, 0x3, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x1c0000}) write$cgroup_subtree(r6, &(0x7f0000000a00)={[{0x0, 'freezer'}, {0x2b, 'net_cls'}, {0x2b, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'io'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}]}, 0x36) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r7, r0}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r7, r0}, 0xc) getpeername$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000b40)=0x1c) (async) getpeername$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000b40)=0x1c) unshare(0x500a0480) (async) unshare(0x500a0480) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x80000000, 0x7, 0x7fff, 0x0, r6, 0xaca1, '\x00', r3, r6, 0x5, 0x5, 0x2, 0x9}, 0x50) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000c00)={0x3, 0x1000, "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"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c80), r0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x20000800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r8) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="59480673a38a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="65f7e7bab734"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4001) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001f00)={r5, 0x559f16c8}, &(0x7f0000001f40)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001f00)={r5, 0x559f16c8}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001f80)={r11, 0x200}, &(0x7f0000001fc0)=0x8) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000002000)={0x1, 0x4, [@empty, @random="32cbe5872ea6", @random="77c7f650a7b7", @remote]}) 1.943452641s ago: executing program 0 (id=10343): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0136030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x20000044) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) 1.943096304s ago: executing program 4 (id=10344): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket(0x1e, 0x5, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv4_delroute={0xbc, 0x19, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x9, 0xfc, 0x4, 0xc8, 0x6, 0x2000}, [@RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_FLOW={0x8, 0xb, 0x7fffffff}, @RTA_TABLE={0x8, 0xf, 0xffffffa1}, @RTA_METRICS={0x65, 0x8, 0x0, 0x1, "3c8ea9f570c56f2097caee898af945ae9fb3ebb0d27a74ac38c34e928f3007e561f144f9a231c7bb21b124e234c5d12f3be4d541114f3639c98664bc3ce97c3d3585d7a566fb643d2fa9fc5eca14c79d458ee0e5777510a73ce94d3c876770f451"}, @RTA_MARK={0x8, 0x10, 0xfffffffb}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3c}}, 0x20000000) (async) listen(r2, 0x18048) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 64) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) (async, rerun: 32) close(0x4) (rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f00000002c0)="40bd3038c0c4350da3b1d592828ad8ee3362456b1e09b6502ae014145d14463af071e05c8490bb89df4114620ff818778a4f2dac3373997e262ab7b6d8b733c136a6fa33c95c80960b6488f0f83f62e9064e25b5841082be01e28cf932283bf1c13f9ca44b73e78e", &(0x7f0000000680)=""/237, 0x0, &(0x7f0000000540)="7be797e1debc815140d1588ab9365c42e3d5c37e1f665f403f1c5c7959ced4f343dbefeceeb29657352e2073e0b3f3cfdcb967ca639585286b63ed3f5c59358359b0a06284d86441f72d7131ae1d7e2dc3108913570fd8e3581a2cdedf19119b1979b76588a622edc2ead418c94a0438275ca2e12119d51147173714a094f54bf23eef77dfd4fd92a08f43685069bb", 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xffff, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x920, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.907585188s ago: executing program 3 (id=10345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000001300)={0xa, 0x4e24, 0x200, @mcast1, 0xa4}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x30}}], 0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x84, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe4cc}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x84}}, 0x20008010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) r8 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={r9, 0x9}, 0x8) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="58e386e7bd612992254c5c7906cbbd2b2f8a5eb6cee7f7398c52e183f10354e2d0dd140df9dcbd94d06ac1943b7a87de0433622edf6cefcdf09ff93e2355a7756dc8e5a2d3d9a9c09494a4a019732acaddf121d5dc88157b4023ea219301f95173774416f709d8221ac8c74f3a1078f65aefd0d19ebb777d56", 0x79}, {&(0x7f0000000280)="a37491a12760b59c1171d3c6718ad30060d739267142451c2d0f761386f9a9a8ede5d75a262b7d874e91a5958e503e4001e7609c7cd0dea3c75d09c8856689e6db4bcf6335da767db213d96359e770d12ee4a13a772f7155b90d0b85953a5b35265239b86c456fe6df90808f4bd26d983b06aa51801b57730f0919a95f7b149fdb4c996c6074959737dd6bae48206a55d0c42a2aa86eddd46fa9d0ae6a79f367c0ed8945a24797924c95", 0xaa}, {&(0x7f0000000340)="41b657139f1b5eed96b261dd18279700d98581a6e497db2c0ad4725440f3542806783b2d8ee1bd22821cc474b65bf0b2eeec776dc6df66fd3e3b9a9131b87a3f39c945679ab40500290d034f6c1c20c6", 0x50}, {&(0x7f0000000400)="c99a85218ca7fb1e4c600018bf47a874c2f6b066e605bbfb56fbfedfb62a26746f1c597e56306a36d64760354a6b90106edea4e8f689256c30cdece94c0aefb9ce9f4ce7", 0x44}, {&(0x7f0000000480)="13f55a1b0cac32a4eb755f36672f02d80d4f6bd8a66e5c90bb25b49f3b6ac949461d70268861dad535adabd800cc8df530bede6d917f1a182c18c37bf40f544df86070a85a93d72a8d6b354ed0150a0a7fffe16982283f0c6743c7635c71d12475ef", 0x62}], 0x5, &(0x7f0000000580)=[@iv={0x70, 0x117, 0x2, 0x5c, "9b20605f442f33d075b3b930dbcbc98033583a8c0eed3b06fbdaa4fd107d9d2d2f72154ecc9cd12b04b8eb14768048f33d565215c7649f5593047617da6c35d5899d1b8317f664551202708a807eb356cac03e05300cda8085b40128"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0xf2cea53f84293cbc}], 0xd0, 0x4000}], 0x2, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r10) 1.885687438s ago: executing program 2 (id=10346): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.752874619s ago: executing program 4 (id=10347): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) 1.750944935s ago: executing program 3 (id=10348): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200016605bd7000fedbdf251c"], 0x1c}}, 0x20040000) (async) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000004c0)={0xfffffffc, {{0xa, 0x4e22, 0xfffffff8, @empty, 0xc4af}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x108) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0xc7, 0x1}, 0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r4}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000040)=0xc) 1.591732387s ago: executing program 4 (id=10349): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) recvfrom$netrom(r5, 0x0, 0x0, 0x4000a141, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000380)={0x5}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r6) 1.555324206s ago: executing program 2 (id=10350): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) 1.427440579s ago: executing program 3 (id=10351): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='\x17\xf6k\xbb\xf1\xbd\x00\x00\x00\x00', 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000008500)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}, {{0xffffffffffffffff, 0x0, &(0x7f00000084c0)=[{&(0x7f0000007400)='c', 0x1}], 0x1}}], 0x2, 0x8000) shutdown(r3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000005c0)={0x0, 'wlan1\x00', {0x2}, 0x1}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@empty, 0x24, r6}) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r4, &(0x7f0000000000)='SEG6\x00', 0x10402, &(0x7f0000000180)={@_ha_fsid={[0x8, 0x1]}, {0xf, 0x40, 0x4, 0x69cb}}, 0x8, &(0x7f00000001c0), &(0x7f0000000240)=0x8}) recvfrom$inet6(r7, &(0x7f0000000300)=""/254, 0xfe, 0x42, &(0x7f0000000400)={0xa, 0x4e20, 0x7, @mcast1, 0x3aa}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x1, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000042}, 0x4044090) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x14, r9, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4) 1.358831865s ago: executing program 1 (id=10352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @private=0xa010100}, 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bind(r3, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000080)={0x57}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f00000002c0)) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x55, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x24}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40084}, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="61202a3a2a2163e96d00736709895af1eae0b2d6688f5f3727ad466afb9b7d8ec350660e857e310f78c0d9f976face32433f19d5f8755e3f7304099d47d0bc5dd33f6ffb00e6344076c055b199c717409bf16ed4b7fd34e3628d65ae"], 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.358412638s ago: executing program 0 (id=10353): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x4) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80000) (fail_nth: 1) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket(0x400000000010, 0x3, 0x0) 1.35517287s ago: executing program 2 (id=10354): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x4) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80000) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket(0x400000000010, 0x3, 0x0) 1.34963141s ago: executing program 4 (id=10355): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) read(r1, &(0x7f0000000040)=""/64, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100649e7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 979.077125ms ago: executing program 1 (id=10356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'bond0\x00', 0x2000}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000009008"], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x108, 0x108, 0x108, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x3c}, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xb}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e24, 0x4e24, 0x5e21, 0x4e22, 0x2, 0x0, 0x6, 0x100, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xe4, 0x0, 0x1, 0x80000000, 0x5, 0x6, 0x839, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440), &(0x7f0000000480)=0x4) 977.830607ms ago: executing program 3 (id=10357): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001300)=r6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00221e"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000060a0104000000000000000002000000140000000700000000000000000000000500000a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) close(0x3) 615.65134ms ago: executing program 1 (id=10358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061107900000000001f0100d500000000950000002200c4ac3d9f830000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 580.011346ms ago: executing program 3 (id=10359): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f96233000080003003400"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='dctcp', 0x5) 123.886556ms ago: executing program 1 (id=10360): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x24000895) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x54}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ff66db9570624fdac1e94b296e740009000000000000000000000079100200000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x24000895) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x54}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ff66db9570624fdac1e94b296e740009000000000000000000000079100200000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) 0s ago: executing program 3 (id=10361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x14d1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x40, 0xe, 0x5, 0x40, 0x800}, @ldst={0x0, 0x0, 0x2, 0x4, 0x3, 0xffffffffffffffc0}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xab, &(0x7f00000001c0)=""/171, 0x40f00, 0x60, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x2, 0x2}, {0x5, 0x4, 0x7, 0xa}], 0x10, 0x1}, 0x94) kernel console output (not intermixed with test programs): 46][ T9734] hsr0 speed is unknown, defaulting to 1000 [ 1047.550836][ T9742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1047.558403][ T9742] IPv6: NLM_F_CREATE should be set when creating new route [ 1047.565636][ T9742] IPv6: NLM_F_CREATE should be set when creating new route [ 1047.611332][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'. [ 1047.621430][ T9377] veth0_vlan: entered promiscuous mode [ 1047.732136][ T9750] netlink: 'syz.0.9092': attribute type 3 has an invalid length. [ 1047.747470][ T9377] veth1_vlan: entered promiscuous mode [ 1047.765758][ T9750] nbd: nbd0 already in use [ 1047.781215][ T9750] block nbd0: NBD_DISCONNECT [ 1047.785876][ T9750] block nbd0: Send disconnect failed -32 [ 1047.806387][ T9750] block nbd0: shutting down sockets [ 1047.987819][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.995535][ T9765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.004101][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.012348][ T9765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.121236][ T5146] Bluetooth: hci0: command tx timeout [ 1048.160975][ T9761] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1048.258225][ T9377] veth0_macvtap: entered promiscuous mode [ 1048.276454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.282009][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9097'. [ 1048.318280][ T9377] veth1_macvtap: entered promiscuous mode [ 1048.430116][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.501653][ T9780] netlink: 'syz.3.9099': attribute type 19 has an invalid length. [ 1048.525333][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.542993][ T9780] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1048.578862][ T9776] hsr0 speed is unknown, defaulting to 1000 [ 1048.747834][ T9794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1048.755123][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 1048.762430][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 1048.835414][T27413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.865704][T27413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.879495][T27413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.901388][T27413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.006084][ T9798] hsr0 speed is unknown, defaulting to 1000 [ 1049.316339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.450803][T27398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.462751][T27398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.514893][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1049.760714][T27398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.782769][T27398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.975116][ T9839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.356285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.671604][ T9874] netlink: 'syz.1.9123': attribute type 15 has an invalid length. [ 1050.833400][ T8849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.845721][ T8849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.856278][ T8849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.865686][ T8849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.874735][ T8849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.994928][ T9878] hsr0 speed is unknown, defaulting to 1000 [ 1051.072212][ T9884] veth1_to_batadv: entered promiscuous mode [ 1051.131015][ T9894] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 1051.396309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.729627][ T9924] xt_check_target: 23 callbacks suppressed [ 1051.729651][ T9924] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1051.805649][ T9926] __nla_validate_parse: 7 callbacks suppressed [ 1051.805672][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1051.928689][ T9878] chnl_net:caif_netlink_parms(): no params data found [ 1051.984731][ T9938] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1052.137896][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1052.137914][ T29] audit: type=1800 audit(1775802401.330:38): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9134" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 1052.163830][ T9953] netlink: 296 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1052.224450][ T6946] lec:lec_start_xmit: lec0:No lecd attached [ 1052.264830][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.276809][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.298579][ T9878] bridge_slave_0: entered allmulticast mode [ 1052.311722][ T9878] bridge_slave_0: entered promiscuous mode [ 1052.326039][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.357049][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.364401][ T9878] bridge_slave_1: entered allmulticast mode [ 1052.381565][ T9878] bridge_slave_1: entered promiscuous mode [ 1052.436716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.512094][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.552128][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.558520][ T9972] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1052.592048][ T9972] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1052.701253][ T9878] team0: Port device team_slave_0 added [ 1052.729490][ T9878] team0: Port device team_slave_1 added [ 1052.793204][ T9981] syzkaller1: entered promiscuous mode [ 1052.808129][ T9981] syzkaller1: entered allmulticast mode [ 1052.916368][ T8849] Bluetooth: hci5: command tx timeout [ 1052.957867][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.984675][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.026255][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.039340][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.047436][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.078003][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.155265][ T9878] hsr_slave_0: entered promiscuous mode [ 1053.173097][ T9878] hsr_slave_1: entered promiscuous mode [ 1053.205152][ T9878] debugfs: 'hsr0' already exists in 'hsr' [ 1053.227577][ T9878] Cannot create hsr debugfs directory [ 1053.386620][T10016] netlink: 'syz.0.9152': attribute type 10 has an invalid length. [ 1053.426038][T10000] hsr0 speed is unknown, defaulting to 1000 [ 1053.469371][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9154'. [ 1053.478507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.849024][T10029] ip6gre2: entered promiscuous mode [ 1053.898498][T10034] xt_recent: Unsupported userspace flags (000000b1) [ 1054.335547][ T9878] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.361419][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.393103][ T9878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1054.444246][ T9878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1054.527509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.728142][ T9878] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.780046][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9161'. [ 1054.787769][ T9878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1054.903875][T10079] IPv6: addrconf: prefix option has invalid lifetime [ 1055.002805][ T8849] Bluetooth: hci5: command tx timeout [ 1055.018274][ T9878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1055.123579][T10059] syzkaller0: entered promiscuous mode [ 1055.129461][T10059] syzkaller0: entered allmulticast mode [ 1055.491068][T10093] netlink: 'syz.4.9165': attribute type 10 has an invalid length. [ 1055.547526][T10094] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9165'. [ 1055.556896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.596428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.080357][ T8849] Bluetooth: hci5: command tx timeout [ 1057.179620][T10093] team0: Port device dummy0 added [ 1057.248037][T10097] bond1 (unregistering): Released all slaves [ 1057.331864][ T9878] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.366914][ T9878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.396323][ T9878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1057.529168][ T9878] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.563046][ T9878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.606232][ T9878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1057.636315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.737147][T10125] bond0: entered promiscuous mode [ 1057.760652][T10125] bond0: left promiscuous mode [ 1057.796275][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 1057.804353][ C0] lec:lec_tx_timeout: lec0 [ 1057.809338][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1057.925191][ T29] audit: type=1800 audit(1775802407.110:39): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1057.971830][T10140] netlink: zone id is out of range [ 1058.001911][T10140] netlink: zone id is out of range [ 1058.018976][ T29] audit: type=1800 audit(1775802407.110:40): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.039473][T10140] netlink: zone id is out of range [ 1058.107182][ T29] audit: type=1800 audit(1775802407.110:41): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.132376][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9175'. [ 1058.163540][T10148] netlink: 'syz.0.9175': attribute type 30 has an invalid length. [ 1058.167328][ T29] audit: type=1800 audit(1775802407.110:42): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.224341][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9175'. [ 1058.226516][T21696] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.262186][T21696] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.271714][ T29] audit: type=1800 audit(1775802407.110:43): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.286574][T10148] netlink: 'syz.0.9175': attribute type 30 has an invalid length. [ 1058.318034][T21696] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.334202][ T9878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1058.342262][ T29] audit: type=1800 audit(1775802407.110:44): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.398835][T21696] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.407165][ T29] audit: type=1800 audit(1775802407.110:45): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.440441][ T9878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1058.462554][ T9878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1058.474141][ T29] audit: type=1800 audit(1775802407.110:46): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.513533][ T9878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.532611][ T29] audit: type=1800 audit(1775802407.120:47): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.597494][ T29] audit: type=1800 audit(1775802407.120:48): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9173" name=03 dev="tmpfs" ino=192 res=0 errno=0 [ 1058.686308][ C0] net_ratelimit: 1 callbacks suppressed [ 1058.686330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.942300][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.118421][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.156714][ T8849] Bluetooth: hci5: command tx timeout [ 1059.174619][T27412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.181841][T27412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.231638][T21696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.238863][T21696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.262965][T10197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9187'. [ 1059.502537][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.570773][T10208] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1059.716309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.802717][T10218] bond1 (unregistering): Released all slaves [ 1060.131883][T10241] xt_TCPMSS: Only works on TCP SYN packets [ 1060.145397][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.313487][ T9878] veth0_vlan: entered promiscuous mode [ 1060.375890][T10254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1060.454561][ T9878] veth1_vlan: entered promiscuous mode [ 1060.461383][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9198'. [ 1060.515859][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9198'. [ 1060.569267][ T9878] veth0_macvtap: entered promiscuous mode [ 1060.622386][ T9878] veth1_macvtap: entered promiscuous mode [ 1060.733592][T10262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.740902][T10262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.748534][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.755706][T10262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.764356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.776968][T10262] bridge0: left promiscuous mode [ 1060.783532][T10262] bridge0: left allmulticast mode [ 1060.812434][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1060.859798][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.874716][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.940508][T10267] tipc: Started in network mode [ 1060.945737][T10267] tipc: Node identity 46f76cd03c3a, cluster identity 4711 [ 1060.954723][T10267] tipc: Enabled bearer , priority 0 [ 1060.981509][T27429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.999547][T10271] syzkaller0: entered promiscuous mode [ 1061.005048][T10271] syzkaller0: entered allmulticast mode [ 1061.028606][T10279] netlink: 'syz.0.9204': attribute type 1 has an invalid length. [ 1061.062767][T10279] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1061.087542][T27429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.098461][T27429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.142310][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1061.262621][T10288] vlan2: entered allmulticast mode [ 1061.277829][T10288] bond0: entered allmulticast mode [ 1061.301373][T10288] bond_slave_0: entered allmulticast mode [ 1061.319327][T10288] bond_slave_1: entered allmulticast mode [ 1061.354607][T10279] bond12: (slave gretap4): making interface the new active one [ 1061.402008][T10279] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 1061.434648][T27429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.449108][T10273] tipc: Resetting bearer [ 1061.465673][T10284] bond12 (unregistering): (slave gretap4): Releasing active interface [ 1061.490627][T10284] bond12 (unregistering): Released all slaves [ 1061.533843][T10294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1061.556779][T10266] tipc: Resetting bearer [ 1061.614944][T10266] tipc: Disabling bearer [ 1061.796340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.824927][T10317] FAULT_INJECTION: forcing a failure. [ 1061.824927][T10317] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.886950][T10317] CPU: 0 UID: 0 PID: 10317 Comm: syz.0.9210 Not tainted syzkaller #0 PREEMPT(full) [ 1061.886978][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1061.886989][T10317] Call Trace: [ 1061.886998][T10317] [ 1061.887005][T10317] dump_stack_lvl+0xe8/0x150 [ 1061.887035][T10317] should_fail_ex+0x412/0x560 [ 1061.887066][T10317] should_failslab+0xa8/0x100 [ 1061.887089][T10317] ? skb_clone+0x212/0x3a0 [ 1061.887112][T10317] kmem_cache_alloc_noprof+0x87/0x650 [ 1061.887127][T10317] ? apparmor_capable+0x126/0x170 [ 1061.887153][T10317] skb_clone+0x212/0x3a0 [ 1061.887175][T10317] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1061.887196][T10317] nfnetlink_rcv+0x4e2/0x27b0 [ 1061.887224][T10317] ? is_bpf_text_address+0x26/0x2b0 [ 1061.887247][T10317] ? kernel_text_address+0xa5/0xe0 [ 1061.887267][T10317] ? __kernel_text_address+0xd/0x30 [ 1061.887285][T10317] ? unwind_get_return_address+0x4d/0x90 [ 1061.887310][T10317] ? arch_stack_walk+0xfb/0x150 [ 1061.887346][T10317] ? __lock_acquire+0x6b5/0x2cf0 [ 1061.887368][T10317] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1061.887408][T10317] ? __lock_acquire+0x6b5/0x2cf0 [ 1061.887436][T10317] ? __lock_acquire+0x6b5/0x2cf0 [ 1061.887460][T10317] ? __netlink_lookup+0xc6/0x8b0 [ 1061.887484][T10317] ? __netlink_lookup+0x7e4/0x8b0 [ 1061.887512][T10317] ? netlink_deliver_tap+0x2e/0x1b0 [ 1061.887543][T10317] netlink_unicast+0x80f/0x9b0 [ 1061.887566][T10317] ? __pfx_netlink_unicast+0x10/0x10 [ 1061.887587][T10317] ? netlink_sendmsg+0x650/0xb40 [ 1061.887605][T10317] ? skb_put+0x11b/0x210 [ 1061.887630][T10317] netlink_sendmsg+0x813/0xb40 [ 1061.887656][T10317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.887677][T10317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1061.887706][T10317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1061.887732][T10317] ____sys_sendmsg+0x972/0x9f0 [ 1061.887760][T10317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.887791][T10317] ? import_iovec+0x73/0xa0 [ 1061.887817][T10317] ___sys_sendmsg+0x2a5/0x360 [ 1061.887845][T10317] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.887902][T10317] ? __fget_files+0x2a/0x420 [ 1061.887918][T10317] ? __fget_files+0x3a0/0x420 [ 1061.887939][T10317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1061.887963][T10317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1061.887991][T10317] ? __pfx_ksys_write+0x10/0x10 [ 1061.888022][T10317] do_syscall_64+0x14d/0xf80 [ 1061.888047][T10317] ? trace_irq_disable+0x3b/0x150 [ 1061.888061][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.888078][T10317] ? clear_bhb_loop+0x40/0x90 [ 1061.888097][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.888114][T10317] RIP: 0033:0x7fa8a939c819 [ 1061.888132][T10317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.888147][T10317] RSP: 002b:00007fa8aa245028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.888167][T10317] RAX: ffffffffffffffda RBX: 00007fa8a9615fa0 RCX: 00007fa8a939c819 [ 1061.888180][T10317] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1061.888191][T10317] RBP: 00007fa8aa245090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.888203][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.888214][T10317] R13: 00007fa8a9616038 R14: 00007fa8a9615fa0 R15: 00007ffcca76f268 [ 1061.888244][T10317] [ 1061.900115][T27429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.043642][T27429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.265451][T10325] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1062.300758][T27413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.310216][T27413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.479184][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9219'. [ 1062.520185][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9219'. [ 1062.836305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.844749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1062.852927][ C0] lec:lec_tx_timeout: lec0 [ 1063.149104][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1063.160921][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1063.174729][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1063.186664][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1063.195165][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1063.481659][T10387] __nla_validate_parse: 3 callbacks suppressed [ 1063.481680][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9224'. [ 1063.543720][T10373] hsr0 speed is unknown, defaulting to 1000 [ 1063.759408][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9227'. [ 1063.850510][T10403] bond1: entered promiscuous mode [ 1063.860679][T10403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1063.876321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.938284][T10403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1063.977244][T10403] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1063.990901][T10413] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9228'. [ 1064.018385][T10403] bond1: (slave sit1): Error -95 calling set_mac_address [ 1064.078228][T10413] bridge7: entered promiscuous mode [ 1064.274866][T10423] lo: entered allmulticast mode [ 1064.563262][T10373] chnl_net:caif_netlink_parms(): no params data found [ 1064.598554][T10422] lo: left allmulticast mode [ 1064.917607][T10373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.928119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.971242][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.991807][T10373] bridge_slave_0: entered allmulticast mode [ 1065.022756][T10373] bridge_slave_0: entered promiscuous mode [ 1065.050483][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.076434][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.094840][T10373] bridge_slave_1: entered allmulticast mode [ 1065.107383][T10373] bridge_slave_1: entered promiscuous mode [ 1065.202156][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.230082][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.238559][ T8849] Bluetooth: hci4: command tx timeout [ 1065.551862][T10373] team0: Port device team_slave_0 added [ 1065.579312][T10373] team0: Port device team_slave_1 added [ 1065.652408][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.660079][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.696233][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.711346][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.719394][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.751770][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.825589][T10373] hsr_slave_0: entered promiscuous mode [ 1065.858281][T10373] hsr_slave_1: entered promiscuous mode [ 1065.864545][T10373] debugfs: 'hsr0' already exists in 'hsr' [ 1065.876205][T10373] Cannot create hsr debugfs directory [ 1065.956320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.996385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.194539][T10419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.219887][T10373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.305643][T10373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1067.330343][ T8849] Bluetooth: hci4: command tx timeout [ 1067.404322][T10464] ipt_ECN: cannot use operation on non-tcp rule [ 1067.435195][T10373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1067.484711][T10472] vxcan3: entered promiscuous mode [ 1067.490613][T10475] sctp: [Deprecated]: syz.0.9242 (pid 10475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1067.490613][T10475] Use struct sctp_sack_info instead [ 1067.578232][T10373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.644715][T10490] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1067.660662][T10490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1067.859478][T10373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.901092][T10373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.911009][T10505] tipc: Enabled bearer , priority 0 [ 1067.919312][T10505] syzkaller0: entered promiscuous mode [ 1067.924908][T10505] syzkaller0: entered allmulticast mode [ 1067.968587][T27413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.975818][T27413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.996542][T10505] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9246'. [ 1068.036389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.094526][T10513] tipc: Resetting bearer [ 1068.102553][T27398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.109756][T27398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.123514][T10504] tipc: Resetting bearer [ 1068.153604][T10504] tipc: Disabling bearer [ 1068.594392][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.902635][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9254'. [ 1068.927559][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9254'. [ 1069.077156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.396423][ T8849] Bluetooth: hci4: command tx timeout [ 1069.434285][T10373] veth0_vlan: entered promiscuous mode [ 1069.446769][T10583] netlink: 'syz.3.9260': attribute type 10 has an invalid length. [ 1069.495819][T10583] team0: Port device dummy0 added [ 1069.521564][T10373] veth1_vlan: entered promiscuous mode [ 1069.527612][T10588] netlink: 'syz.0.9261': attribute type 11 has an invalid length. [ 1069.582562][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1069.582582][ T29] audit: type=1107 audit(1775802418.770:67): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1069.640919][T10594] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1069.655516][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9261'. [ 1069.760466][T10599] syzkaller0: entered promiscuous mode [ 1069.766046][T10599] syzkaller0: entered allmulticast mode [ 1069.781717][T10590] vlan0: entered allmulticast mode [ 1069.791142][T10590] veth0_vlan: entered allmulticast mode [ 1069.810704][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9264'. [ 1069.819947][T10590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9263'. [ 1069.835165][T10373] veth0_macvtap: entered promiscuous mode [ 1069.898008][T10590] bond0: entered promiscuous mode [ 1069.903256][T10590] bond_slave_0: entered promiscuous mode [ 1069.910076][T10590] bond_slave_1: entered promiscuous mode [ 1069.929744][T10590] bond0: left promiscuous mode [ 1069.934645][T10590] bond_slave_0: left promiscuous mode [ 1069.958209][T10590] bond_slave_1: left promiscuous mode [ 1070.008265][T10373] veth1_macvtap: entered promiscuous mode [ 1070.126422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.175431][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.210848][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.249326][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9266'. [ 1070.441482][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.476077][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.538935][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.556288][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.608034][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9272'. [ 1070.807289][T10632] netlink: 8680 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1070.818026][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1070.879014][T10645] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9275'. [ 1070.930971][T27398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.960442][T27398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.106250][ T7575] IPVS: starting estimator thread 0... [ 1071.156421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.170620][T27398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.179493][T10650] hsr0 speed is unknown, defaulting to 1000 [ 1071.199011][T27398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.207107][T10652] IPVS: using max 41 ests per chain, 98400 per kthread [ 1071.480994][ T8849] Bluetooth: hci4: command tx timeout [ 1071.714292][T10675] netlink: 'syz.4.9221': attribute type 1 has an invalid length. [ 1071.791406][ T8849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.803276][ T8849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.811601][ T8849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.821432][ T8849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.858504][ T8849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.930834][T10695] No such timeout policy "syz1" [ 1072.099241][T10681] hsr0 speed is unknown, defaulting to 1000 [ 1072.206404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.279685][T10692] hsr0 speed is unknown, defaulting to 1000 [ 1072.985201][T10692] chnl_net:caif_netlink_parms(): no params data found [ 1073.236359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.260892][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.303612][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.346525][T10692] bridge_slave_0: entered allmulticast mode [ 1073.353690][T10692] bridge_slave_0: entered promiscuous mode [ 1073.418053][T10753] syz_tun: entered promiscuous mode [ 1073.441687][T10753] syz_tun: left promiscuous mode [ 1073.551788][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.601964][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.657880][T10692] bridge_slave_1: entered allmulticast mode [ 1073.701011][T10692] bridge_slave_1: entered promiscuous mode [ 1073.853899][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.887843][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.959423][ T8849] Bluetooth: hci2: command tx timeout [ 1074.268819][T10785] __nla_validate_parse: 9 callbacks suppressed [ 1074.268840][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9301'. [ 1074.286367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.344090][T10692] team0: Port device team_slave_0 added [ 1074.362037][T10692] team0: Port device team_slave_1 added [ 1074.450171][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1074.462075][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.497764][T10792] netlink: 'syz.3.9303': attribute type 30 has an invalid length. [ 1074.501503][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.534158][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1074.607688][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.648527][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.675877][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.762822][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.066064][T10692] hsr_slave_0: entered promiscuous mode [ 1075.097106][T10692] hsr_slave_1: entered promiscuous mode [ 1075.116088][T10692] debugfs: 'hsr0' already exists in 'hsr' [ 1075.126001][T10692] Cannot create hsr debugfs directory [ 1075.218019][T10821] netlink: 'syz.3.9308': attribute type 29 has an invalid length. [ 1075.237700][T10821] netlink: 'syz.3.9308': attribute type 29 has an invalid length. [ 1075.291948][T10821] netlink: 'syz.3.9308': attribute type 29 has an invalid length. [ 1075.316392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.645243][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9310'. [ 1075.746545][T10692] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.787809][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1075.838155][T10692] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.897747][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1075.912233][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1075.931094][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1075.974145][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1075.992202][T10692] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.036371][ T8849] Bluetooth: hci2: command tx timeout [ 1076.074941][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1076.150012][T10692] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.356438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.377263][T10864] tc_dump_action: action bad kind [ 1076.597710][T10875] netlink: 'syz.3.9319': attribute type 1 has an invalid length. [ 1076.842383][T10692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1077.044676][T10692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1077.086765][T10692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1077.139694][T10692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1077.397268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.482803][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.547102][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.584351][T27412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.591549][T27412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.783870][T27412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.791083][T27412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.116912][ T8849] Bluetooth: hci2: command tx timeout [ 1078.251956][T10929] netlink: 'syz.4.9329': attribute type 10 has an invalid length. [ 1078.283261][T10929] dummy0: entered promiscuous mode [ 1078.301922][T10929] bridge0: port 3(dummy0) entered blocking state [ 1078.325782][T10929] bridge0: port 3(dummy0) entered disabled state [ 1078.337546][T10929] dummy0: entered allmulticast mode [ 1078.345834][T10929] bridge0: port 3(dummy0) entered blocking state [ 1078.352375][T10929] bridge0: port 3(dummy0) entered forwarding state [ 1078.446434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.498824][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.656032][T10692] veth0_vlan: entered promiscuous mode [ 1078.715587][T10692] veth1_vlan: entered promiscuous mode [ 1078.786882][T10969] netlink: 'syz.3.9340': attribute type 1 has an invalid length. [ 1078.814987][T10692] veth0_macvtap: entered promiscuous mode [ 1079.010191][T10692] veth1_macvtap: entered promiscuous mode [ 1079.153306][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.230799][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.421986][T27403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.439121][T27403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.450683][T27403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.476461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.477071][T27403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.569467][T11000] hsr0 speed is unknown, defaulting to 1000 [ 1079.778421][T11020] __nla_validate_parse: 9 callbacks suppressed [ 1079.778441][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1079.851384][T27429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.884701][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1079.901800][T27429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.191181][T11022] bridge1: port 1(veth3) entered blocking state [ 1080.191687][T11046] IPv6: Can't replace route, no match found [ 1080.198347][ T5146] Bluetooth: hci2: command tx timeout [ 1080.216403][T11022] bridge1: port 1(veth3) entered disabled state [ 1080.223459][T11022] veth3: entered allmulticast mode [ 1080.231298][T11022] veth3: entered promiscuous mode [ 1080.289970][T11041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.391695][T11050] netlink: 'syz.3.9352': attribute type 1 has an invalid length. [ 1080.503773][T27398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.506883][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9352'. [ 1080.520510][T27398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.526530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.560528][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9352'. [ 1080.645709][T11050] bond2: entered promiscuous mode [ 1080.653115][T11050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1081.050594][T11077] syzkaller0: entered promiscuous mode [ 1081.070771][T11077] syzkaller0: entered allmulticast mode [ 1081.556432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.872443][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9363'. [ 1081.962417][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9363'. [ 1081.993472][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1082.108020][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1082.276587][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 1082.373939][T11140] netlink: 'syz.4.9371': attribute type 1 has an invalid length. [ 1082.386753][T11137] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9368'. [ 1082.432854][T11133] netlink: 'syz.3.9369': attribute type 12 has an invalid length. [ 1082.446321][T11133] netlink: 'syz.3.9369': attribute type 29 has an invalid length. [ 1082.466872][T11133] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1082.552790][T11140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.596418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.613679][T11148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1082.632820][T11148] bond1: (slave batadv1): making interface the new active one [ 1082.644133][T11148] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1082.734366][T11166] netlink: 'syz.1.9374': attribute type 1 has an invalid length. [ 1082.806039][T11166] netlink: 'syz.1.9374': attribute type 1 has an invalid length. [ 1083.089981][T11152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1083.095944][T11152] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1083.644518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.686530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.673587][T11152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1085.681034][T11152] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1085.716443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.788008][T11152] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1085.804230][T11152] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1085.893015][T11152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1085.910730][T11152] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1085.965878][T11152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1085.974083][T11152] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1086.001372][T11194] __nla_validate_parse: 5 callbacks suppressed [ 1086.001394][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1086.017411][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1086.026578][T11194] netlink: 'syz.3.9380': attribute type 5 has an invalid length. [ 1086.053040][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1086.062195][T27403] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.087241][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1086.087706][T27403] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.105237][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1086.115019][T11194] netlink: 'syz.3.9380': attribute type 5 has an invalid length. [ 1086.125912][T27403] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.136033][T27403] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.505616][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9389'. [ 1086.511757][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9388'. [ 1086.536760][T11216] netlink: 'syz.4.9389': attribute type 7 has an invalid length. [ 1086.565949][T11216] netlink: 'syz.4.9389': attribute type 8 has an invalid length. [ 1086.589074][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9389'. [ 1086.593182][T11217] ipvlan2: entered allmulticast mode [ 1086.637496][T11217] syz_tun: entered allmulticast mode [ 1086.640103][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9389'. [ 1086.766506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.843006][T11249] netlink: 'syz.3.9392': attribute type 4 has an invalid length. [ 1086.869118][T11231] macsec2: entered promiscuous mode [ 1087.182416][T11249] netlink: 'syz.3.9392': attribute type 4 has an invalid length. [ 1087.357901][T11274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1087.365220][T11274] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.372521][T11274] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.586853][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1087.796960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.053264][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.170901][T11321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1088.178256][T11321] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.185491][T11321] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.228386][T11323] FAULT_INJECTION: forcing a failure. [ 1088.228386][T11323] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.262175][T11323] CPU: 1 UID: 0 PID: 11323 Comm: syz.3.9411 Not tainted syzkaller #0 PREEMPT(full) [ 1088.262204][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1088.262216][T11323] Call Trace: [ 1088.262225][T11323] [ 1088.262234][T11323] dump_stack_lvl+0xe8/0x150 [ 1088.262266][T11323] should_fail_ex+0x412/0x560 [ 1088.262301][T11323] should_failslab+0xa8/0x100 [ 1088.262325][T11323] ? skb_clone+0x212/0x3a0 [ 1088.262352][T11323] kmem_cache_alloc_noprof+0x87/0x650 [ 1088.262382][T11323] skb_clone+0x212/0x3a0 [ 1088.262410][T11323] __netlink_deliver_tap+0x404/0x850 [ 1088.262444][T11323] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.262465][T11323] netlink_deliver_tap+0x19c/0x1b0 [ 1088.262487][T11323] netlink_sendskb+0x68/0x140 [ 1088.262507][T11323] netlink_unicast+0x3a3/0x9b0 [ 1088.262535][T11323] ? __pfx_netlink_unicast+0x10/0x10 [ 1088.262562][T11323] netlink_rcv_skb+0x2b6/0x4b0 [ 1088.262583][T11323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.262607][T11323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1088.262638][T11323] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.262667][T11323] netlink_unicast+0x80f/0x9b0 [ 1088.262694][T11323] ? __pfx_netlink_unicast+0x10/0x10 [ 1088.262714][T11323] ? netlink_sendmsg+0x650/0xb40 [ 1088.262732][T11323] ? skb_put+0x11b/0x210 [ 1088.262758][T11323] netlink_sendmsg+0x813/0xb40 [ 1088.262788][T11323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.262812][T11323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1088.262841][T11323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.262866][T11323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.262886][T11323] sock_write_iter+0x49b/0x4f0 [ 1088.262908][T11323] ? __pfx_sock_write_iter+0x10/0x10 [ 1088.262937][T11323] ? bpf_lsm_file_permission+0x9/0x20 [ 1088.262960][T11323] ? security_file_permission+0x75/0x260 [ 1088.262999][T11323] vfs_write+0x61d/0xb90 [ 1088.263030][T11323] ? __pfx_vfs_write+0x10/0x10 [ 1088.263059][T11323] ? __fget_files+0x2a/0x420 [ 1088.263085][T11323] ksys_write+0x150/0x270 [ 1088.263106][T11323] ? __pfx_ksys_write+0x10/0x10 [ 1088.263138][T11323] do_syscall_64+0x14d/0xf80 [ 1088.263162][T11323] ? trace_irq_disable+0x3b/0x150 [ 1088.263178][T11323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.263197][T11323] ? clear_bhb_loop+0x40/0x90 [ 1088.263219][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.263237][T11323] RIP: 0033:0x7f611819c819 [ 1088.263254][T11323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.263269][T11323] RSP: 002b:00007f6118fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1088.263289][T11323] RAX: ffffffffffffffda RBX: 00007f6118416090 RCX: 00007f611819c819 [ 1088.263302][T11323] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1088.263314][T11323] RBP: 00007f6118fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.263325][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.263336][T11323] R13: 00007f6118416128 R14: 00007f6118416090 R15: 00007fff91b2a6a8 [ 1088.263366][T11323] [ 1088.756740][T11340] netlink: 'syz.4.9414': attribute type 1 has an invalid length. [ 1088.846454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.140078][T11352] hsr0 speed is unknown, defaulting to 1000 [ 1089.189585][T11366] netlink: 'syz.0.9418': attribute type 10 has an invalid length. [ 1089.223798][T11366] team0: Cannot enslave team device to itself [ 1089.242645][T11366] netlink: 'syz.0.9418': attribute type 1 has an invalid length. [ 1089.390176][T11369] hsr0 speed is unknown, defaulting to 1000 [ 1089.883584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.089726][T27410] syzkaller0: tun_net_xmit 76 [ 1090.095738][T27410] syzkaller0: tun_net_xmit 48 [ 1090.096991][T11405] netlink: 'syz.0.9426': attribute type 10 has an invalid length. [ 1090.118324][ T8874] syzkaller0: tun_net_xmit 76 [ 1090.200520][T11405] team0: Port device dummy0 added [ 1090.217209][ T8869] syzkaller0: tun_net_xmit 76 [ 1090.251164][T11406] team0: Port device dummy0 removed [ 1090.323296][T11406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1090.369259][T11405] 8021q: VLANs not supported on wg2 [ 1090.936348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.968041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.703806][T11415] validate_nla: 1 callbacks suppressed [ 1092.703826][T11415] netlink: 'syz.1.9427': attribute type 1 has an invalid length. [ 1092.862622][T11435] tipc: Started in network mode [ 1092.874112][T11435] tipc: Node identity 0e68cb8d11d4, cluster identity 4711 [ 1092.885508][T11435] tipc: Enabled bearer , priority 0 [ 1092.896284][T11441] __nla_validate_parse: 9 callbacks suppressed [ 1092.896303][T11441] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1092.953379][T11434] tipc: Disabling bearer [ 1092.986775][T11449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1092.996405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.006607][T11449] Cannot find add_set index 0 as target [ 1093.226399][T11456] netlink: 'syz.3.9439': attribute type 1 has an invalid length. [ 1093.250086][T11456] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1093.306643][T11456] netlink: 'syz.3.9439': attribute type 21 has an invalid length. [ 1093.330967][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9440'. [ 1093.408263][T11467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1093.417955][T11467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1093.723739][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9444'. [ 1093.760119][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9444'. [ 1093.901151][T11495] netlink: 'syz.0.9447': attribute type 1 has an invalid length. [ 1093.960440][T11501] netlink: 'syz.2.9449': attribute type 1 has an invalid length. [ 1094.005377][T11498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9448'. [ 1094.037821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.106823][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9452'. [ 1094.157244][T11501] bond2: entered promiscuous mode [ 1094.172864][T11501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1094.200532][T11520] netlink: 'syz.4.9451': attribute type 39 has an invalid length. [ 1094.303459][T11511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1094.353926][T11511] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1094.386585][T11511] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1094.435402][T11511] bond2: (slave wireguard0): making interface the new active one [ 1094.478247][T11511] wireguard0: entered promiscuous mode [ 1094.500898][T11511] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1094.657003][T11537] xt_TCPMSS: Only works on TCP SYN packets [ 1094.723881][T11537] vlan3: entered promiscuous mode [ 1094.729647][T11537] bridge0: entered promiscuous mode [ 1095.061082][T11554] mac80211_hwsim hwsim109 syzkaller0: entered promiscuous mode [ 1095.076338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.086304][T11554] mac80211_hwsim hwsim109 syzkaller0: entered allmulticast mode [ 1095.173699][T11554] netlink: 'syz.1.9460': attribute type 4 has an invalid length. [ 1095.303797][T11575] tipc: Enabled bearer , priority 0 [ 1095.319887][ T8869] IPVS: starting estimator thread 0... [ 1095.330834][T11575] tipc: Resetting bearer [ 1095.417606][T11576] IPVS: using max 36 ests per chain, 86400 per kthread [ 1095.495852][T11585] netlink: 'syz.1.9471': attribute type 1 has an invalid length. [ 1095.535976][T11585] bond1: entered promiscuous mode [ 1095.542995][T11585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.603200][T11591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.621535][T11591] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1095.633970][T11591] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1095.653840][T11591] bond1: (slave wireguard0): making interface the new active one [ 1095.664216][T11591] wireguard0: entered promiscuous mode [ 1095.679425][T11591] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1096.116366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.169884][T11630] "syz.3.9484" (11630) uses obsolete ecb(arc4) skcipher [ 1096.190254][T11626] bond1: option tlb_dynamic_lb: invalid value (5) [ 1096.199992][T11626] bond1 (unregistering): Released all slaves [ 1096.333587][T11636] bond3: ARP target 9.0.0.0 is already present [ 1096.342541][T11636] bond3: option arp_ip_target: invalid value (9) [ 1096.361286][T11636] bond3 (unregistering): Released all slaves [ 1096.396287][ T4206] tipc: Node number set to 2060283088 [ 1096.402751][T11635] hsr0 speed is unknown, defaulting to 1000 [ 1096.824265][T11666] netlink: 'syz.2.9492': attribute type 1 has an invalid length. [ 1096.864953][T11660] tipc: Enabling of bearer rejected, already enabled [ 1096.899794][T11663] netlink: 'syz.3.9491': attribute type 4 has an invalid length. [ 1096.975205][T11666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1097.166325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.211308][T11676] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1097.262613][T11672] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1097.363980][T11690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.416454][T11690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.798744][T11738] validate_nla: 1 callbacks suppressed [ 1097.798767][T11738] netlink: 'syz.3.9506': attribute type 10 has an invalid length. [ 1097.966899][T11746] bond1: option arp_interval: invalid value (18446744073709551615) [ 1097.977291][T11746] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1098.058495][T11746] bond1 (unregistering): Released all slaves [ 1098.196306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.287542][T11765] netlink: 'syz.3.9513': attribute type 15 has an invalid length. [ 1098.549654][T11790] __nla_validate_parse: 10 callbacks suppressed [ 1098.549676][T11790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9520'. [ 1098.580464][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9518'. [ 1098.744768][T11801] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1099.241067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.286327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.844115][T11794] team0: Port device team_slave_0 removed [ 1100.885758][T11808] tipc: Enabling of bearer rejected, failed to enable media [ 1100.923084][T11823] syzkaller1: entered promiscuous mode [ 1100.931254][T11818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9524'. [ 1100.952963][T11823] syzkaller1: entered allmulticast mode [ 1101.013536][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1101.214408][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9531'. [ 1101.316316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.441592][T11868] netlink: 'syz.4.9532': attribute type 4 has an invalid length. [ 1101.562289][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9535'. [ 1101.612438][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9535'. [ 1101.656239][T11871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.726815][T11850] netlink: 'syz.4.9532': attribute type 4 has an invalid length. [ 1102.298567][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1102.321113][T11929] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1102.327961][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1102.357431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.368171][T11927] netlink: 'syz.2.9549': attribute type 13 has an invalid length. [ 1102.376065][T11927] netlink: 'syz.2.9549': attribute type 11 has an invalid length. [ 1102.388878][T11925] hsr0 speed is unknown, defaulting to 1000 [ 1102.680089][T11950] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 1102.691143][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.719258][T11945] syzkaller0: entered promiscuous mode [ 1102.762972][T11943] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 1103.096850][T11962] hsr0 speed is unknown, defaulting to 1000 [ 1103.105087][T11973] netlink: 'syz.0.9562': attribute type 1 has an invalid length. [ 1103.123837][T11963] netlink: 'syz.3.9559': attribute type 1 has an invalid length. [ 1103.396492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.603650][T11983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.686883][T11987] vlan2: entered promiscuous mode [ 1103.692050][T11987] bridge0: entered promiscuous mode [ 1103.810367][T12011] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1103.828343][T12004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1103.899431][T11983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.974500][T12013] __nla_validate_parse: 6 callbacks suppressed [ 1103.974523][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9570'. [ 1104.021947][T11983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.086084][T12013] netlink: 'syz.1.9570': attribute type 1 has an invalid length. [ 1104.152780][T11983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.291386][T12034] hsr0: entered promiscuous mode [ 1104.308649][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1104.412252][T12034] hsr_slave_0: left promiscuous mode [ 1104.436378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.449035][T12034] hsr_slave_1: left promiscuous mode [ 1104.477081][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1104.508781][T12034] hsr0 (unregistering): left promiscuous mode [ 1104.553592][T27413] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.627652][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.683978][T27413] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.746406][T27413] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.781721][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1104.884916][T12055] netlink: 'syz.4.9580': attribute type 1 has an invalid length. [ 1104.931590][T12062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9582'. [ 1104.993787][T12061] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1105.116958][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1105.288126][T12078] syzkaller1: entered promiscuous mode [ 1105.298667][T12078] syzkaller1: entered allmulticast mode [ 1105.400114][T12089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1105.464970][T12085] hsr0 speed is unknown, defaulting to 1000 [ 1105.476424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.764702][T12081] hsr0 speed is unknown, defaulting to 1000 [ 1106.092012][T12112] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9593'. [ 1106.516327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.556351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.596535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.646343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.677237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.716420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.756535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.806361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.836390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.803338][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.813220][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1115.876557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.916309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.956342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.996335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.036382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.846291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1120.854350][ C0] lec:lec_tx_timeout: lec0 [ 1120.859406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1121.086310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.126361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.166338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.196370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.236398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.866239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1125.874290][ C0] lec:lec_tx_timeout: lec0 [ 1126.276285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.318349][T12974] netlink: 'syz.0.9594': attribute type 21 has an invalid length. [ 1126.330044][T12974] netlink: 'syz.0.9594': attribute type 20 has an invalid length. [ 1126.386649][T12980] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9598'. [ 1126.409603][T12978] nftables ruleset with unbound set [ 1126.566388][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9600'. [ 1126.651260][T12992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9601'. [ 1126.706526][T13004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9601'. [ 1126.759446][T13001] tc_dump_action: action bad kind [ 1126.824331][T13010] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9603'. [ 1126.865824][T13010] hsr0 speed is unknown, defaulting to 1000 [ 1126.916978][T13017] openvswitch: netlink: Key type 148 is out of range max 32 [ 1126.970801][T13021] netlink: 'syz.4.9608': attribute type 8 has an invalid length. [ 1126.992254][T13026] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9609'. [ 1127.063606][T13021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1127.092224][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1127.285575][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9613'. [ 1127.317305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.320727][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9613'. [ 1127.600758][T13040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.356442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.830802][T13120] netlink: 'syz.2.9632': attribute type 1 has an invalid length. [ 1128.881236][T13120] bond0: (slave bond_slave_1): Releasing backup interface [ 1129.034017][T13126] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1129.122297][T13126] bond2: (slave lo): Enslaving as an active interface with an up link [ 1129.171292][T13126] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1129.260629][T13138] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1129.396296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.354390][T13188] netlink: 'syz.1.9647': attribute type 4 has an invalid length. [ 1130.395699][T13188] netlink: 'syz.1.9647': attribute type 4 has an invalid length. [ 1130.436329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.499151][T13195] xt_connbytes: Forcing CT accounting to be enabled [ 1130.802079][T13210] syzkaller1: entered promiscuous mode [ 1130.815049][T13210] syzkaller1: entered allmulticast mode [ 1131.134348][T13236] tipc: Enabled bearer , priority 0 [ 1131.164608][T13236] syzkaller0: entered promiscuous mode [ 1131.182275][T13236] syzkaller0: entered allmulticast mode [ 1131.209558][T13228] hsr0 speed is unknown, defaulting to 1000 [ 1131.260633][T13236] tipc: Resetting bearer [ 1131.348266][T13234] tipc: Resetting bearer [ 1131.376103][T13234] tipc: Disabling bearer [ 1131.476306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.713124][T13231] hsr0 speed is unknown, defaulting to 1000 [ 1131.727990][T13247] IPVS: Error connecting to the multicast addr [ 1131.862190][T13262] __nla_validate_parse: 13 callbacks suppressed [ 1131.862212][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1132.460033][T13293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1132.514567][T13298] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1132.523854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.623959][T13299] sctp: [Deprecated]: syz.2.9668 (pid 13299) Use of int in max_burst socket option. [ 1132.623959][T13299] Use struct sctp_assoc_value instead [ 1132.787445][T13317] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9674'. [ 1132.849255][T13319] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9673'. [ 1132.858679][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9673'. [ 1133.009476][T13326] hsr0 speed is unknown, defaulting to 1000 [ 1133.134151][T13338] netlink: 'syz.3.9677': attribute type 1 has an invalid length. [ 1133.330698][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9679'. [ 1133.556345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.615554][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.624272][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.677169][T13362] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9682'. [ 1133.738753][T13367] SET target dimension over the limit! [ 1133.765337][T13362] .70·: renamed from hsr0 (while UP) [ 1133.818424][T13362] .70·: entered allmulticast mode [ 1133.836081][T13362] hsr_slave_0: entered allmulticast mode [ 1133.869135][T13373] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9684'. [ 1133.875600][T13362] hsr_slave_1: entered allmulticast mode [ 1133.885907][T13362] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1133.926699][T13369] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1133.932830][T13369] syzkaller1: linktype set to 8 [ 1133.973738][T13369] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9684'. [ 1134.217263][T13384] netlink: 'syz.3.9686': attribute type 1 has an invalid length. [ 1134.474219][T13400] veth0: entered promiscuous mode [ 1134.501138][T13400] macsec2: entered allmulticast mode [ 1134.550680][T13400] veth0: entered allmulticast mode [ 1134.576397][T13400] veth0: left allmulticast mode [ 1134.581617][T13400] veth0: left promiscuous mode [ 1134.606305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.958034][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.965470][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.234506][T13441] mac80211_hwsim hwsim118 ªªªªª;: renamed from wlan0 [ 1135.636586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.884860][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.892627][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.234355][T13511] netlink: 'syz.3.9715': attribute type 13 has an invalid length. [ 1136.676307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.724520][T13533] netlink: 'syz.3.9720': attribute type 21 has an invalid length. [ 1136.743282][T13533] netlink: 'syz.3.9720': attribute type 5 has an invalid length. [ 1136.816342][T13533] netlink: 'syz.3.9720': attribute type 6 has an invalid length. [ 1136.887345][T13543] __nla_validate_parse: 17 callbacks suppressed [ 1136.887367][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9722'. [ 1136.974322][T13543] bridge0: port 3(dummy0) entered disabled state [ 1136.980984][T13543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.989034][T13543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.716298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.784783][T13587] netlink: 'syz.3.9730': attribute type 7 has an invalid length. [ 1137.978269][T13587] netlink: 'syz.3.9730': attribute type 7 has an invalid length. [ 1138.077245][T13590] macsec1: entered allmulticast mode [ 1138.084329][T13590] bridge0: entered allmulticast mode [ 1138.145076][T13590] bridge0: left allmulticast mode [ 1138.333592][T13607] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1138.383638][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9735'. [ 1138.564458][T13603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.571856][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9737'. [ 1138.615098][T13603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.756302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.843820][T13603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.870842][T13603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.028425][T13603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.046863][T13603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.260306][T13603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.276784][T13603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.454954][T27412] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.466061][T27412] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.562532][T27412] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.596245][T27412] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.796343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.904119][T27412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.930117][T27412] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.941046][T13678] sctp: [Deprecated]: syz.1.9749 (pid 13678) Use of int in max_burst socket option. [ 1139.941046][T13678] Use struct sctp_assoc_value instead [ 1139.961877][T27412] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.971226][T27412] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.092581][T13690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9750'. [ 1140.345937][T13698] hsr0 speed is unknown, defaulting to 1000 [ 1140.836352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.006585][T13740] hsr0 speed is unknown, defaulting to 1000 [ 1141.216724][T13741] hsr0 speed is unknown, defaulting to 1000 [ 1141.624108][T13764] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1141.771243][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9766'. [ 1141.876331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.055098][T13786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9771'. [ 1142.064455][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9771'. [ 1142.471013][T13805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.478403][T13805] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.485679][T13805] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.540892][T13805] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9774'. [ 1142.696812][T13776] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1142.735891][T13776] bond4 (unregistering): Released all slaves [ 1142.916310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.184527][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9781'. [ 1143.298000][T13851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1143.469447][T13861] hsr0 speed is unknown, defaulting to 1000 [ 1143.614558][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9786'. [ 1143.966449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.042690][T13885] batadv0: entered promiscuous mode [ 1144.054294][T13885] batadv0: entered allmulticast mode [ 1144.346676][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9792'. [ 1144.378363][T13895] tipc: Enabled bearer , priority 6 [ 1144.461266][T13898] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode [ 1144.518798][T13898] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode [ 1144.552305][T13912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9794'. [ 1144.697119][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1144.742293][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1144.777949][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1144.870715][T13918] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1144.920047][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1144.976293][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1144.985213][T13930] netlink: 'syz.0.9800': attribute type 12 has an invalid length. [ 1144.996344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.005980][T13931] netlink: 'syz.3.9801': attribute type 3 has an invalid length. [ 1145.013869][T13931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.058693][T13934] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1145.074685][T13931] netlink: 'syz.3.9801': attribute type 7 has an invalid length. [ 1145.098633][T13931] netlink: 'syz.3.9801': attribute type 8 has an invalid length. [ 1145.176841][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.183426][T27412] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.203696][T27412] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.242058][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.242076][T27412] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.273604][T27412] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.294942][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.434361][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.508010][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.537966][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.575129][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.600517][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1145.638951][T13918] syzkaller0 speed is unknown, defaulting to 1000 [ 1146.036283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.046374][T13987] netlink: 'syz.1.9815': attribute type 3 has an invalid length. [ 1146.848744][T27403] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1147.121351][T27403] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1147.179724][T27403] bond10 (unregistering): (slave bridge7): Releasing active interface [ 1147.188031][T27403] bond10 (unregistering): (slave bridge7): the permanent HWaddr of slave - 92:c0:7c:59:b8:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1147.249950][T27403] bond10 (unregistering): (slave bridge8): Releasing active interface [ 1147.383218][T27403] .` (unregistering): Released all slaves [ 1147.393015][T27403] bond2 (unregistering): Released all slaves [ 1147.407323][T27403] bond1 (unregistering): (slave lo): Releasing backup interface [ 1147.415550][T27403] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1147.429989][T27403] bond1 (unregistering): Released all slaves [ 1147.446676][T27403] bond3 (unregistering): Released all slaves [ 1147.460064][T27403] bond4 (unregistering): Released all slaves [ 1147.474114][T27403] bond5 (unregistering): Released all slaves [ 1147.492074][T27403] bond6 (unregistering): Released all slaves [ 1147.508887][T27403] bond7 (unregistering): Released all slaves [ 1147.521851][T27403] bond8 (unregistering): Released all slaves [ 1147.534156][T27403] bond9 (unregistering): Released all slaves [ 1147.557466][T27403] bond10 (unregistering): Released all slaves [ 1147.572094][T27403] bond11 (unregistering): Released all slaves [ 1147.590618][T27403] bond12 (unregistering): Released all slaves [ 1147.602934][T27403] bond0 (unregistering): Released all slaves [ 1147.740634][T27403] : left promiscuous mode [ 1147.807954][T27403] tipc: Disabling bearer [ 1147.815343][T27403] tipc: Disabling bearer [ 1147.824092][T27403] tipc: Disabling bearer [ 1147.845425][T27403] tipc: Left network mode [ 1148.461578][T27403] hsr_slave_0: left promiscuous mode [ 1148.467863][T27403] hsr_slave_1: left promiscuous mode [ 1148.474550][T27403] veth0_vlan: left promiscuous mode [ 1149.328150][T27403] IPVS: stop unused estimator thread 0... [ 1161.715924][T14583] netlink: 'syz.1.9817': attribute type 1 has an invalid length. [ 1162.112497][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1162.180823][T14614] netlink: 'syz.4.9820': attribute type 21 has an invalid length. [ 1162.370470][T14614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1162.440948][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1162.893491][T14639] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9829'. [ 1163.109454][T14650] netlink: 'syz.3.9830': attribute type 3 has an invalid length. [ 1163.129892][T14650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1163.211383][T14655] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1163.392167][T14667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9834'. [ 1163.442075][T14665] tipc: Enabling of bearer rejected, failed to enable media [ 1163.930627][T14692] netlink: 'syz.4.9838': attribute type 13 has an invalid length. [ 1163.987242][T14692] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.9838'. [ 1164.157388][T14697] netlink: 'syz.2.9839': attribute type 3 has an invalid length. [ 1164.460966][T14717] sit0: entered promiscuous mode [ 1164.480104][T14717] netlink: 'syz.0.9842': attribute type 1 has an invalid length. [ 1164.547340][T14717] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9842'. [ 1164.595577][T14723] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1164.632758][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1164.839711][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9845'. [ 1164.998979][T14735] syzkaller0: entered promiscuous mode [ 1165.026374][T14735] syzkaller0: entered allmulticast mode [ 1165.078654][T14735] dummy0: entered promiscuous mode [ 1165.095917][T14740] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1165.116587][T14735] dummy0: left promiscuous mode [ 1166.087421][T14771] netlink: 'syz.3.9856': attribute type 13 has an invalid length. [ 1166.532444][T14791] ip6gre1: entered promiscuous mode [ 1166.626620][T14797] rdma_rxe: rxe_newlink: failed to add bond0 [ 1166.633532][T14797] Bluetooth: MGMT ver 1.23 [ 1166.684936][T14795] ip6gretap0: entered promiscuous mode [ 1167.620978][T10373] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1167.696303][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1167.696332][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1167.696344][T10373] Call Trace: [ 1167.696353][T10373] [ 1167.696363][T10373] dump_stack_lvl+0xe8/0x150 [ 1167.696396][T10373] dump_header+0xd3/0x4c0 [ 1167.696421][T10373] oom_kill_process+0x3ab/0x970 [ 1167.696448][T10373] out_of_memory+0x106c/0x1410 [ 1167.696467][T10373] ? percpu_ref_put+0x19/0x180 [ 1167.696501][T10373] ? __pfx___mutex_lock+0x10/0x10 [ 1167.696535][T10373] ? __pfx_out_of_memory+0x10/0x10 [ 1167.696552][T10373] ? do_raw_spin_unlock+0xf5/0x210 [ 1167.696583][T10373] try_charge_memcg+0xc53/0x1560 [ 1167.696624][T10373] ? __pfx_try_charge_memcg+0x10/0x10 [ 1167.696657][T10373] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1167.696685][T10373] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1167.696711][T10373] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 1167.696736][T10373] __swap_cache_prepare_and_add+0xe8/0x760 [ 1167.696769][T10373] ? page_rmappable_folio+0x9a/0x170 [ 1167.696801][T10373] swap_cache_alloc_folio+0xf1/0x240 [ 1167.696832][T10373] swap_cluster_readahead+0x369/0x690 [ 1167.696858][T10373] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1167.696888][T10373] ? get_vma_policy+0x27b/0x3c0 [ 1167.696915][T10373] swapin_readahead+0x196/0xc50 [ 1167.696946][T10373] ? __pfx_swapin_readahead+0x10/0x10 [ 1167.696966][T10373] ? swap_table_get+0x1e/0x260 [ 1167.696990][T10373] ? swap_table_get+0x1e/0x260 [ 1167.697014][T10373] ? swap_table_get+0x1e/0x260 [ 1167.697040][T10373] ? swap_table_get+0x216/0x260 [ 1167.697065][T10373] ? swap_cache_get_folio+0x513/0x520 [ 1167.697093][T10373] do_swap_page+0x56f/0x5a20 [ 1167.697133][T10373] ? do_swap_page+0x127/0x5a20 [ 1167.697155][T10373] ? __pfx_do_swap_page+0x10/0x10 [ 1167.697177][T10373] ? __pte_offset_map+0x1ae/0x240 [ 1167.697199][T10373] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1167.697221][T10373] handle_mm_fault+0x12d2/0x3310 [ 1167.697263][T10373] ? handle_mm_fault+0xee/0x3310 [ 1167.697297][T10373] ? __pfx_handle_mm_fault+0x10/0x10 [ 1167.697341][T10373] ? lock_vma_under_rcu+0x45a/0x500 [ 1167.697389][T10373] do_user_addr_fault+0xa73/0x1340 [ 1167.697421][T10373] ? rcu_is_watching+0x15/0xb0 [ 1167.697447][T10373] ? trace_page_fault_user+0x84/0x210 [ 1167.697477][T10373] exc_page_fault+0x6a/0xc0 [ 1167.697504][T10373] asm_exc_page_fault+0x26/0x30 [ 1167.697521][T10373] RIP: 0033:0x7f8a0a15d04e [ 1167.697540][T10373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.697555][T10373] RSP: 002b:00007ffcb313c888 EFLAGS: 00010246 [ 1167.697570][T10373] RAX: 0000000000000000 RBX: 000055559084b500 RCX: 00007f8a0a15d04e [ 1167.697581][T10373] RDX: 00007ffcb313c8e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.697591][T10373] RBP: 00007ffcb313c94c R08: 0000000000000000 R09: 0000000000000000 [ 1167.697602][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1167.697613][T10373] R13: 00000000000927c0 R14: 000000000011ce26 R15: 00007ffcb313c9a0 [ 1167.697644][T10373] [ 1167.697653][T10373] memory: usage 304600kB, limit 307200kB, failcnt 634 [ 1168.173025][T14837] netlink: 'syz.1.9872': attribute type 39 has an invalid length. [ 1168.181576][T10373] memory+swap: usage 282636kB, limit 9007199254740988kB, failcnt 0 [ 1168.196636][T10373] kmem: usage 278544kB, limit 9007199254740988kB, failcnt 0 [ 1168.233227][T10373] Memory cgroup stats for /syz4: [ 1168.233581][T10373] cache 0 [ 1168.271927][T10373] rss 0 [ 1168.300750][T10373] rss_huge 0 [ 1168.304002][T10373] shmem 0 [ 1168.315458][T10373] mapped_file 0 [ 1168.323503][T10373] dirty 0 [ 1168.343376][T14836] batman_adv: batadv0: Adding interface: macvtap1 [ 1168.359515][T10373] writeback 0 [ 1168.366327][T14836] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1168.373802][T10373] workingset_refault_anon 0 [ 1168.396760][T10373] workingset_refault_file 0 [ 1168.412422][T10373] swap 24576 [ 1168.424384][T10373] swapcached 24576 [ 1168.437232][T10373] pgpgin 420103 [ 1168.452999][T10373] pgpgout 420103 [ 1168.481779][T10373] pgfault 631078 [ 1168.520433][T10373] pgmajfault 4 [ 1168.544512][T10373] inactive_anon 0 [ 1168.554682][T10373] active_anon 0 [ 1168.579972][T10373] inactive_file 0 [ 1168.592522][T10373] active_file 0 [ 1168.605108][T10373] unevictable 0 [ 1168.650402][T10373] hierarchical_memory_limit 314572800 [ 1168.655833][T10373] hierarchical_memsw_limit 9223372036854771712 [ 1168.696322][T10373] total_cache 2314240 [ 1168.739931][T10373] total_rss 0 [ 1168.743271][T10373] total_rss_huge 0 [ 1168.770257][T10373] total_shmem 2314240 [ 1168.794665][T10373] total_mapped_file 2314240 [ 1168.814979][T10373] total_dirty 0 [ 1168.823621][T10373] total_writeback 0 [ 1168.838607][T10373] total_workingset_refault_anon 0 [ 1168.861078][T10373] total_workingset_refault_file 0 [ 1168.887524][T10373] total_swap 139264 [ 1168.912064][T10373] total_swapcached 139264 [ 1168.936322][T10373] total_pgpgin 433543 [ 1168.945493][T10373] total_pgpgout 432978 [ 1168.960667][T10373] total_pgfault 652139 [ 1168.968649][T10373] total_pgmajfault 4 [ 1168.973037][T10373] total_inactive_anon 0 [ 1168.978414][T10373] total_active_anon 0 [ 1168.988793][T10373] total_inactive_file 0 [ 1168.993107][T10373] total_active_file 0 [ 1169.017309][T10373] total_unevictable 2314240 [ 1169.022010][T10373] anon_cost 0 [ 1169.025310][T10373] file_cost 0 [ 1169.062477][T10373] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4/syz0,task=syz.4.9866,pid=14802,uid=0 [ 1169.136256][T10373] Memory cgroup out of memory: Killed process 14802 (syz.4.9866) total-vm:98652kB, anon-rss:1236kB, file-rss:21508kB, shmem-rss:2260kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1169.242305][T14868] hsr0 speed is unknown, defaulting to 1000 [ 1169.279091][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:3329480066/3329480068 [ 1169.287881][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:3329480066/3329480067 [ 1169.303025][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:3329480066/3329480068 [ 1169.347960][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:3329480066/3329480067 [ 1169.388914][T14875] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1169.488112][T14875] bond4 (unregistering): Released all slaves [ 1169.642958][T14868] syzkaller0 speed is unknown, defaulting to 1000 [ 1170.050857][T14869] __nla_validate_parse: 4 callbacks suppressed [ 1170.050879][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9880'. [ 1170.260922][T14910] siw: device registration error -23 [ 1170.664036][T14937] netlink: 'syz.4.9900': attribute type 1 has an invalid length. [ 1170.681904][T14939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1170.716969][T14939] xt_hashlimit: max too large, truncated to 1048576 [ 1170.767135][T14937] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1171.419091][T14976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.458855][T14976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.500718][T14976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.549339][T14976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.591537][T14976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.064342][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.357195][T15014] x_tables: duplicate underflow at hook 4 [ 1172.397011][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1172.447372][T15018] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1172.472013][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1172.483372][T15024] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9919'. [ 1172.510378][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1172.574808][T15032] netlink: 'syz.0.9920': attribute type 1 has an invalid length. [ 1172.600932][ T8869] IPVS: starting estimator thread 0... [ 1172.625242][T15032] bond1: entered promiscuous mode [ 1172.642684][T15032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1172.706400][T15036] IPVS: using max 31 ests per chain, 74400 per kthread [ 1172.715453][T15029] netlink: 'syz.3.9921': attribute type 39 has an invalid length. [ 1172.785123][T15043] netlink: 'syz.2.9924': attribute type 1 has an invalid length. [ 1172.807551][T15043] netlink: 'syz.2.9924': attribute type 2 has an invalid length. [ 1173.044876][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9928'. [ 1173.557091][T15090] xt_TCPMSS: Only works on TCP SYN packets [ 1173.769502][T15111] netlink: 'syz.2.9935': attribute type 10 has an invalid length. [ 1173.800284][T15111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.839339][T15111] bond0: (slave team0): Enslaving as an active interface with an up link [ 1174.400368][T15143] syzkaller0: entered promiscuous mode [ 1174.406082][T15143] syzkaller0: entered allmulticast mode [ 1174.680573][T27403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.837282][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.907982][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.917413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.073535][T15180] hsr0 speed is unknown, defaulting to 1000 [ 1175.151327][T15189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9947'. [ 1175.174440][T15180] syzkaller0 speed is unknown, defaulting to 1000 [ 1175.205260][T15185] hsr0 speed is unknown, defaulting to 1000 [ 1175.327124][T15198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9951'. [ 1175.327833][T15185] syzkaller0 speed is unknown, defaulting to 1000 [ 1175.877567][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.961040][T27413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.068802][T15174] syzkaller0: entered promiscuous mode [ 1176.074333][T15174] syzkaller0: entered allmulticast mode [ 1176.333173][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9961'. [ 1176.569058][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9964'. [ 1176.805290][T15276] macvtap1: entered promiscuous mode [ 1176.917121][ T8869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.933705][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9969'. [ 1177.074155][T15294] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1177.129410][T15294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1177.241325][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.274859][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1177.341067][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.362465][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.376085][T15310] bond5: option ad_actor_sys_prio: invalid value (0) [ 1177.383287][T15310] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1177.384311][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.432132][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.454363][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.464251][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.493197][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.516768][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.538694][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.661558][T15310] bond5 (unregistering): Released all slaves [ 1177.975901][T15328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9982'. [ 1178.068491][T15337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9984'. [ 1178.202078][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.209843][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.291221][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9987'. [ 1178.414976][T15338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.433049][T15338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.442880][T15362] netlink: 'syz.0.9989': attribute type 1 has an invalid length. [ 1178.568788][T15366] siw: device registration error -23 [ 1178.623389][T27413] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.648107][T27413] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.671282][T27413] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.700756][T27413] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.700761][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.049552][T15398] sctp: [Deprecated]: syz.2.9999 (pid 15398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1179.049552][T15398] Use struct sctp_sack_info instead [ 1179.301670][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.308951][T15415] bridge0: port 2(bridge_slave_1) entered listening state [ 1179.316440][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.323649][T15415] bridge0: port 1(bridge_slave_0) entered listening state [ 1179.816038][T15411] hsr0 speed is unknown, defaulting to 1000 [ 1179.842086][T15411] syzkaller0 speed is unknown, defaulting to 1000 [ 1180.113200][T15446] bond5: entered promiscuous mode [ 1180.120314][T15446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1180.131874][T15446] bridge0: port 3(bond5) entered blocking state [ 1180.138534][T15446] bridge0: port 3(bond5) entered disabled state [ 1180.145155][T15446] bond5: entered allmulticast mode [ 1180.382311][T15466] __nla_validate_parse: 9 callbacks suppressed [ 1180.382334][T15466] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10015'. [ 1180.412827][T15466] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10015'. [ 1180.565648][T15473] hsr0 speed is unknown, defaulting to 1000 [ 1180.589561][T15473] syzkaller0 speed is unknown, defaulting to 1000 [ 1180.609694][T15477] netlink: 124 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1180.633833][T15479] netlink: 124 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1180.771248][T15476] ieee80211 phy128: Failed to add default virtual iface [ 1180.931183][T15495] tipc: MTU too low for tipc bearer [ 1181.191600][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10023'. [ 1181.411920][T15508] hsr0 speed is unknown, defaulting to 1000 [ 1181.422464][T15527] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10024'. [ 1181.471805][T15508] syzkaller0 speed is unknown, defaulting to 1000 [ 1182.174827][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10034'. [ 1182.830114][T15598] syzkaller0: entered promiscuous mode [ 1182.836261][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1182.844297][ C0] lec:lec_tx_timeout: lec0 [ 1182.849627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1182.852702][T15598] syzkaller0: entered allmulticast mode [ 1183.157126][ T8874] net_ratelimit: 263 callbacks suppressed [ 1183.157150][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.479094][ T7575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.501128][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10049'. [ 1183.569283][T15635] IPVS: Scheduler module ip_vs_ not found [ 1183.749220][T15662] netlink: 'syz.2.10052': attribute type 27 has an invalid length. [ 1183.770720][T15651] syzkaller0: entered promiscuous mode [ 1183.787179][T15651] syzkaller0: entered allmulticast mode [ 1184.137833][T15682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10060'. [ 1184.196885][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.287327][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10064'. [ 1184.484304][T15709] FAULT_INJECTION: forcing a failure. [ 1184.484304][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.547666][T15709] CPU: 1 UID: 0 PID: 15709 Comm: syz.2.10068 Not tainted syzkaller #0 PREEMPT(full) [ 1184.547695][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.547707][T15709] Call Trace: [ 1184.547716][T15709] [ 1184.547724][T15709] dump_stack_lvl+0xe8/0x150 [ 1184.547757][T15709] should_fail_ex+0x412/0x560 [ 1184.547792][T15709] _copy_from_user+0x2d/0xb0 [ 1184.547815][T15709] ____sys_sendmsg+0x308/0x9f0 [ 1184.547839][T15709] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.547870][T15709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1184.547904][T15709] ? import_iovec+0x73/0xa0 [ 1184.547927][T15709] ___sys_sendmsg+0x2a5/0x360 [ 1184.547957][T15709] ? __pfx____sys_sendmsg+0x10/0x10 [ 1184.547987][T15709] ? kstrtouint+0x6e/0xe0 [ 1184.548037][T15709] ? __fget_files+0x2a/0x420 [ 1184.548054][T15709] ? __fget_files+0x3a0/0x420 [ 1184.548085][T15709] __sys_sendmmsg+0x27c/0x4e0 [ 1184.548116][T15709] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1184.548139][T15709] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1184.548190][T15709] ? ksys_write+0x242/0x270 [ 1184.548212][T15709] ? __pfx_ksys_write+0x10/0x10 [ 1184.548239][T15709] __x64_sys_sendmmsg+0xa0/0xc0 [ 1184.548266][T15709] do_syscall_64+0x14d/0xf80 [ 1184.548290][T15709] ? trace_irq_disable+0x3b/0x150 [ 1184.548307][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.548325][T15709] ? clear_bhb_loop+0x40/0x90 [ 1184.548348][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.548364][T15709] RIP: 0033:0x7ffadd59c819 [ 1184.548382][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.548400][T15709] RSP: 002b:00007ffade4b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1184.548419][T15709] RAX: ffffffffffffffda RBX: 00007ffadd815fa0 RCX: 00007ffadd59c819 [ 1184.548431][T15709] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000005 [ 1184.548441][T15709] RBP: 00007ffade4b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.548452][T15709] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1184.548462][T15709] R13: 00007ffadd816038 R14: 00007ffadd815fa0 R15: 00007ffceeb7b118 [ 1184.548490][T15709] [ 1185.031506][T15722] hsr0 speed is unknown, defaulting to 1000 [ 1185.045627][T15722] syzkaller0 speed is unknown, defaulting to 1000 [ 1185.249580][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.327191][T15730] hsr0 speed is unknown, defaulting to 1000 [ 1185.416340][T15730] syzkaller0 speed is unknown, defaulting to 1000 [ 1185.472667][T15745] __nla_validate_parse: 1 callbacks suppressed [ 1185.472687][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10076'. [ 1185.519614][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1185.709780][T15762] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10080'. [ 1185.822929][T15764] ip6tnl2: entered promiscuous mode [ 1185.881086][T15773] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10081'. [ 1185.957631][T15777] netlink: 'syz.3.10083': attribute type 1 has an invalid length. [ 1186.081441][T15777] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1186.171206][T15781] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1186.200917][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.235275][T15781] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 1186.282163][ T8869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.283206][T15781] bond6: (slave vcan0): Error -95 calling set_mac_address [ 1186.317742][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10087'. [ 1186.565280][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10090'. [ 1186.616095][T15820] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10091'. [ 1186.631656][T15794] bond2: option min_links: invalid value (18446744073709551612) [ 1186.664371][T15794] bond2: option min_links: allowed values 0 - 2147483647 [ 1186.712960][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10092'. [ 1186.754104][T15794] bond2 (unregistering): Released all slaves [ 1186.944920][T15843] netlink: 216 bytes leftover after parsing attributes in process `syz.2.10095'. [ 1186.960312][T15817] bond2: entered promiscuous mode [ 1186.968567][T15843] netlink: 'syz.2.10095': attribute type 2 has an invalid length. [ 1186.977094][T15817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1186.984064][T15843] netlink: 'syz.2.10095': attribute type 1 has an invalid length. [ 1187.024506][T15824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1187.039277][T15824] bond3: entered promiscuous mode [ 1187.045286][T15824] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1187.093451][T15848] IPVS: Unknown mcast interface: vcan0 [ 1187.103922][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1187.444254][T15879] netlink: 'syz.3.10105': attribute type 21 has an invalid length. [ 1187.653081][T15872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.775522][T15879] netlink: 'syz.3.10105': attribute type 21 has an invalid length. [ 1187.808870][T15872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.839075][T15869] hsr0 speed is unknown, defaulting to 1000 [ 1187.856203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1187.864259][ C0] lec:lec_tx_timeout: lec0 [ 1187.904915][T15869] syzkaller0 speed is unknown, defaulting to 1000 [ 1188.030070][T15872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.344144][T15917] xt_hashlimit: overflow, try lower: 18446744073709551614/18446744073709551615 [ 1188.345968][T15872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.739013][T27412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.775612][T27398] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.862727][T27413] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.902216][T27413] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.514867][T16054] __nla_validate_parse: 13 callbacks suppressed [ 1190.514894][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1190.583680][T16064] IPv6: sit2: Disabled Multicast RS [ 1190.743960][T16071] veth5: entered allmulticast mode [ 1190.771482][T16071] bond7: (slave veth5): Enslaving as an active interface with an up link [ 1190.837284][T16054] bond7 (unregistering): (slave veth5): Releasing backup interface [ 1190.861603][T16054] bond7 (unregistering): Released all slaves [ 1190.887799][T16069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1190.900802][T16080] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1191.178785][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10155'. [ 1191.201164][T16103] syzkaller1: entered promiscuous mode [ 1191.220095][T16103] syzkaller1: entered allmulticast mode [ 1191.251531][T16106] syzkaller1: entered promiscuous mode [ 1191.267461][T16106] syzkaller1: entered allmulticast mode [ 1191.288403][T16106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10158'. [ 1191.452183][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10161'. [ 1191.655533][T16128] netlink: 'syz.4.10164': attribute type 30 has an invalid length. [ 1191.850339][T16128] bond3: option arp_missed_max: invalid value (0) [ 1191.858091][T16128] bond3: option arp_missed_max: allowed values 1 - 255 [ 1191.887009][T16128] bond3 (unregistering): Released all slaves [ 1191.930608][T16142] netlink: 'syz.0.10167': attribute type 1 has an invalid length. [ 1192.042264][T16139] hsr0 speed is unknown, defaulting to 1000 [ 1192.155777][T16139] syzkaller0 speed is unknown, defaulting to 1000 [ 1192.184725][T16155] x_tables: duplicate underflow at hook 1 [ 1192.508235][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10171'. [ 1192.546718][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10171'. [ 1192.711484][T16184] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10176'. [ 1192.943090][T16197] xt_HMARK: spi-set and port-set can't be combined [ 1192.997531][T16196] netlink: 'syz.1.10179': attribute type 1 has an invalid length. [ 1193.107142][T16196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1193.372642][T16210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1193.421188][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1193.719691][T16230] bridge0: entered allmulticast mode [ 1193.935326][T16244] bond3: option ad_actor_sys_prio: invalid value (0) [ 1193.942691][T16244] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1193.984977][T16244] bond3 (unregistering): Released all slaves [ 1194.049707][T16245] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10189'. [ 1194.250291][T16262] batadv_slave_1: entered promiscuous mode [ 1194.267841][T16261] batadv_slave_1: left promiscuous mode [ 1194.447866][T16227] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1194.878529][T16302] hsr0 speed is unknown, defaulting to 1000 [ 1194.924828][T16302] syzkaller0 speed is unknown, defaulting to 1000 [ 1194.984876][T16307] syzkaller0: entered promiscuous mode [ 1195.003433][T16307] syzkaller0: entered allmulticast mode [ 1195.036052][T16307] xt_hashlimit: size too large, truncated to 1048576 [ 1195.101388][T16315] netlink: 'syz.0.10202': attribute type 11 has an invalid length. [ 1195.160120][T16315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.214454][T16315] openvswitch: netlink: Message has 16 unknown bytes. [ 1195.790442][T16348] __nla_validate_parse: 8 callbacks suppressed [ 1195.790466][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10211'. [ 1195.905108][T16355] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10212'. [ 1196.085841][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10212'. [ 1196.327296][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10218'. [ 1196.450434][T16386] 8021q: VLANs not supported on vxcan1 [ 1196.548434][T16330] lec:lec_atm_close: lec0: Shut down! [ 1196.857753][T16400] syzkaller0: entered promiscuous mode [ 1196.904337][T16400] syzkaller0: entered allmulticast mode [ 1196.980800][T16400] tipc: Started in network mode [ 1196.985770][T16400] tipc: Node identity becaa55eb52b, cluster identity 4711 [ 1197.000314][T16400] tipc: Enabled bearer , priority 0 [ 1197.114737][T16419] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 1197.376101][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1197.797787][T16396] tipc: Resetting bearer [ 1197.876421][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1197.995464][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10226'. [ 1198.047715][T16396] tipc: Disabling bearer [ 1198.110760][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10227'. [ 1198.289610][T16444] bond7: entered promiscuous mode [ 1198.320015][T16444] bond7: entered allmulticast mode [ 1198.549298][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1198.609958][T16466] netlink: 'syz.4.10234': attribute type 10 has an invalid length. [ 1198.618229][T16466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10234'. [ 1198.698386][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.717029][T16466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.739450][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.775959][T16466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.005710][T16488] Bluetooth: MGMT ver 1.23 [ 1199.229661][T16506] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1199.255324][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.287329][T16456] lec:lec_atm_close: lec0: Shut down! [ 1199.511614][T16513] team0: Port device syz_tun added [ 1199.573211][T16513] team0: Port device syz_tun removed [ 1199.603288][T16513] bridge_slave_0: left allmulticast mode [ 1199.626379][T16513] bridge_slave_0: left promiscuous mode [ 1199.638996][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.684068][T16513] bridge_slave_1: left allmulticast mode [ 1199.729167][T16513] bridge_slave_1: left promiscuous mode [ 1199.741805][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.841668][T16513] bond0: (slave bond_slave_0): Releasing backup interface [ 1199.868357][T16513] bond0: (slave bond_slave_1): Releasing backup interface [ 1199.906107][T16513] team0: Port device team_slave_0 removed [ 1199.928953][T16513] team0: Port device team_slave_1 removed [ 1199.935308][T16513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.964039][T16513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.993198][T16513] bond1: (slave wireguard0): Releasing backup interface [ 1200.001160][T16513] wireguard0: left promiscuous mode [ 1200.008639][T16513] batman_adv: batadv0: Removing interface: macvtap1 [ 1200.019280][T16513] bond2: (slave bond3): Releasing backup interface [ 1200.029503][T16513] bond3: left promiscuous mode [ 1200.394918][T16578] tipc: Enabling of bearer rejected, already enabled [ 1200.561682][T16590] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1200.734627][T16600] netlink: 'syz.4.10263': attribute type 25 has an invalid length. [ 1200.814123][T16592] sctp: [Deprecated]: syz.0.10261 (pid 16592) Use of int in maxseg socket option. [ 1200.814123][T16592] Use struct sctp_assoc_value instead [ 1200.888953][T16608] __nla_validate_parse: 6 callbacks suppressed [ 1200.888979][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1200.897265][T16606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10264'. [ 1201.000472][T16614] xt_cgroup: invalid path, errno=-2 [ 1201.029672][T16616] nbd: must specify at least one socket [ 1201.062542][T16616] vxcan2: entered allmulticast mode [ 1201.223971][T16630] vlan3: entered promiscuous mode [ 1201.226537][T16629] xt_TCPMSS: Only works on TCP SYN packets [ 1201.233774][T16630] gretap0: entered promiscuous mode [ 1201.582088][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10275'. [ 1201.696104][T16656] hsr0 speed is unknown, defaulting to 1000 [ 1201.710661][T16656] syzkaller0 speed is unknown, defaulting to 1000 [ 1202.012911][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1202.033146][T16667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1202.092502][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1202.212746][T16672] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1202.273618][T16683] netlink: 'syz.0.10281': attribute type 1 has an invalid length. [ 1202.522499][T16699] netlink: 'syz.1.10286': attribute type 3 has an invalid length. [ 1202.833970][T16719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10290'. [ 1202.864727][T16719] openvswitch: netlink: Flow key attr not present in new flow. [ 1203.697988][T16733] hsr0 speed is unknown, defaulting to 1000 [ 1203.874567][T16733] syzkaller0 speed is unknown, defaulting to 1000 [ 1204.035580][T16764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10301'. [ 1204.414138][T16776] xt_hashlimit: size too large, truncated to 1048576 [ 1204.588862][T16785] hsr0 speed is unknown, defaulting to 1000 [ 1204.635640][T16785] syzkaller0 speed is unknown, defaulting to 1000 [ 1204.835177][T16804] bond5 (unregistering): Released all slaves [ 1204.841652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 1204.841689][ C0] lec:lec_tx_timeout: lec0 [ 1204.902507][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10310'. [ 1205.008643][T16809] batman_adv: batadv0: Adding interface: bridge2 [ 1205.015160][T16809] batman_adv: batadv0: The MTU of interface bridge2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.041716][T16809] batman_adv: batadv0: Not using interface bridge2 (retrying later): interface not active [ 1205.072358][T16815] macvlan2: entered promiscuous mode [ 1205.115117][T16815] macvlan2: entered allmulticast mode [ 1205.229381][T16823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.269136][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1205.328937][T16830] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1205.387681][T16830] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1205.521836][T16831] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1205.535219][T16831] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1205.613496][T16845] xt_CT: No such helper "snmp_trap" [ 1205.632675][T16845] netlink: 'syz.3.10315': attribute type 1 has an invalid length. [ 1205.844326][T16839] bond9: (slave bridge3): Enslaving as a backup interface with an up link [ 1205.928801][T16853] bond9: (slave bridge4): Enslaving as a backup interface with a down link [ 1206.108176][T16876] netlink: 'syz.2.10324': attribute type 1 has an invalid length. [ 1206.133322][T16877] syzkaller0: entered promiscuous mode [ 1206.140653][T16877] syzkaller0: entered allmulticast mode [ 1206.159059][T16876] __nla_validate_parse: 5 callbacks suppressed [ 1206.159079][T16876] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.10324'. [ 1206.169213][T16880] netlink: 'syz.0.10323': attribute type 10 has an invalid length. [ 1206.197774][T16877] vxcan3: entered promiscuous mode [ 1206.234222][T16880] bond0: (slave dummy0): Releasing backup interface [ 1206.282711][T16880] team0: Port device dummy0 added [ 1206.285525][T16876] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1206.305624][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1206.336530][T16877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1206.674697][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10329'. [ 1207.104612][T16932] bridge0: port 1(erspan0) entered blocking state [ 1207.115844][T16932] bridge0: port 1(erspan0) entered disabled state [ 1207.133757][T16932] erspan0: entered allmulticast mode [ 1207.156729][T16932] erspan0: entered promiscuous mode [ 1207.228589][T16937] netlink: 'syz.4.10337': attribute type 1 has an invalid length. [ 1207.400013][T16937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1207.541134][T16938] bond4: (slave geneve2): making interface the new active one [ 1207.589317][T16938] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1207.622100][T21696] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1207.646545][T21696] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1207.689198][T21696] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1207.729447][T21696] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1208.131917][T16989] IPv6: NLM_F_CREATE should be specified when creating new route [ 1208.141849][T16989] netlink: 'syz.4.10347': attribute type 1 has an invalid length. [ 1208.206800][T16971] veth0: entered promiscuous mode [ 1208.235129][T16971] macsec1: entered allmulticast mode [ 1208.251812][T16971] veth0: entered allmulticast mode [ 1208.270171][T16971] veth0: left allmulticast mode [ 1208.292381][T16971] veth0: left promiscuous mode [ 1208.913628][T17024] bridge0: port 3(dummy0) entered blocking state [ 1208.920193][T17024] bridge0: port 3(dummy0) entered listening state [ 1208.926947][T17024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.934120][T17024] bridge0: port 2(bridge_slave_1) entered listening state [ 1208.941590][T17024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.948812][T17024] bridge0: port 1(bridge_slave_0) entered listening state [ 1209.031700][T17034] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10357'. [ 1209.081211][T17024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1209.344319][T17043] netlink: 'syz.3.10359': attribute type 61 has an invalid length. [ 1209.385906][T17043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10359'. [ 1209.416974][T17023] FAULT_INJECTION: forcing a failure. [ 1209.416974][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.499341][T17023] CPU: 0 UID: 0 PID: 17023 Comm: syz.0.10353 Not tainted syzkaller #0 PREEMPT(full) [ 1209.499371][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1209.499389][T17023] Call Trace: [ 1209.499397][T17023] [ 1209.499406][T17023] dump_stack_lvl+0xe8/0x150 [ 1209.499439][T17023] should_fail_ex+0x412/0x560 [ 1209.499469][T17023] ? sock_alloc_inode+0x28/0xc0 [ 1209.499491][T17023] should_failslab+0xa8/0x100 [ 1209.499517][T17023] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1209.499545][T17023] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1209.499563][T17023] sock_alloc_inode+0x28/0xc0 [ 1209.499581][T17023] alloc_inode+0x6a/0x1b0 [ 1209.499609][T17023] do_accept+0x13e/0x760 [ 1209.499638][T17023] ? __pfx_do_accept+0x10/0x10 [ 1209.499680][T17023] __sys_accept4+0x139/0x230 [ 1209.499701][T17023] ? __pfx___sys_accept4+0x10/0x10 [ 1209.499718][T17023] ? __pfx_ksys_write+0x10/0x10 [ 1209.499741][T17023] __x64_sys_accept4+0x9a/0xb0 [ 1209.499764][T17023] do_syscall_64+0x14d/0xf80 [ 1209.499787][T17023] ? trace_irq_disable+0x3b/0x150 [ 1209.499803][T17023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.499820][T17023] ? clear_bhb_loop+0x40/0x90 [ 1209.499842][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.499857][T17023] RIP: 0033:0x7fd889f9c819 [ 1209.499875][T17023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.499891][T17023] RSP: 002b:00007fd88ae7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1209.499910][T17023] RAX: ffffffffffffffda RBX: 00007fd88a216090 RCX: 00007fd889f9c819 [ 1209.499924][T17023] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000006 [ 1209.499934][T17023] RBP: 00007fd88ae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.499945][T17023] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.499956][T17023] R13: 00007fd88a216128 R14: 00007fd88a216090 R15: 00007ffe26d5a7c8 [ 1209.499986][T17023] [ 1209.877631][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1209.887220][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1209.904561][T17020] ------------[ cut here ]------------ [ 1209.911062][T17020] ODEBUG: init active (active state 0) object: ffff88807c7fcf38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 1209.924593][T17020] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.2.10354/17020 [ 1209.935273][T17020] Modules linked in: [ 1209.940137][T17020] CPU: 1 UID: 0 PID: 17020 Comm: syz.2.10354 Not tainted syzkaller #0 PREEMPT(full) [ 1209.950602][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1209.960908][T17020] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1209.966926][T17020] Code: 3c 38 00 74 08 4c 89 ef e8 0e a4 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 d8 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 be 72 58 0b 83 fd 03 75 3f 4c 8b [ 1209.986940][T17020] RSP: 0018:ffffc900056778f8 EFLAGS: 00010246 [ 1209.993057][T17020] RAX: 1ffffffff179e7ec RBX: ffff88807c7fcf38 RCX: 0000000000000000 [ 1210.001510][T17020] RDX: ffffffff8c27dc40 RSI: ffffffff8c27d840 RDI: ffffffff901c63d0 [ 1210.009656][T17020] RBP: 0000000000000003 R08: ffff88807c7fcf38 R09: ffffffff8bcf5280 [ 1210.017973][T17020] R10: dffffc0000000000 R11: ffffffff81b1f7f0 R12: ffffffff8c27dc40 [ 1210.025986][T17020] R13: ffffffff8bcf3f60 R14: ffffffff901c63d0 R15: dffffc0000000000 [ 1210.034170][T17020] FS: 00007ffade4b26c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1210.043274][T17020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1210.050239][T17020] CR2: 00007ff4ccc18000 CR3: 00000000951aa000 CR4: 00000000003526f0 [ 1210.058871][T17020] Call Trace: [ 1210.062177][T17020] [ 1210.065127][T17020] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1210.072531][T17020] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1210.079082][T17020] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1210.085019][T17020] timer_init_key+0x41/0x2f0 [ 1210.090237][T17020] lane_ioctl+0x1579/0x2220 [ 1210.094834][T17020] ? __pfx_clip_ioctl+0x10/0x10 [ 1210.100857][T17020] ? br2684_ioctl+0x110/0x6b0 [ 1210.105574][T17020] ? __pfx_lane_ioctl+0x10/0x10 [ 1210.111872][T17020] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1210.117053][T17020] do_vcc_ioctl+0x36d/0x9d0 [ 1210.121605][T17020] svc_ioctl+0x1f6/0x7d0 [ 1210.125893][T17020] ? kasan_quarantine_put+0xbb/0x1f0 [ 1210.131418][T17020] ? __pfx_svc_ioctl+0x10/0x10 [ 1210.136516][T17020] ? tomoyo_path_number_perm+0x219/0x630 [ 1210.142192][T17020] ? tomoyo_path_number_perm+0x219/0x630 [ 1210.147967][T17020] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1210.153032][T17020] sock_do_ioctl+0x101/0x320 [ 1210.157979][T17020] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1210.163120][T17020] ? do_futex+0x333/0x420 [ 1210.167820][T17020] sock_ioctl+0x5c6/0x7f0 [ 1210.172190][T17020] ? __pfx_sock_ioctl+0x10/0x10 [ 1210.177204][T17020] ? __fget_files+0x2a/0x420 [ 1210.181818][T17020] ? __fget_files+0x3a0/0x420 [ 1210.186652][T17020] ? __fget_files+0x2a/0x420 [ 1210.191271][T17020] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1210.196546][T17020] ? __pfx_sock_ioctl+0x10/0x10 [ 1210.201423][T17020] __se_sys_ioctl+0xfc/0x170 [ 1210.206045][T17020] do_syscall_64+0x14d/0xf80 [ 1210.210779][T17020] ? trace_irq_disable+0x3b/0x150 [ 1210.215833][T17020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.222483][T17020] ? clear_bhb_loop+0x40/0x90 [ 1210.227517][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.233540][T17020] RIP: 0033:0x7ffadd59c819 [ 1210.238103][T17020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.258047][T17020] RSP: 002b:00007ffade4b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.266608][T17020] RAX: ffffffffffffffda RBX: 00007ffadd815fa0 RCX: 00007ffadd59c819 [ 1210.274618][T17020] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 1210.282760][T17020] RBP: 00007ffadd632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1210.291131][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.299248][T17020] R13: 00007ffadd816038 R14: 00007ffadd815fa0 R15: 00007ffceeb7b118 [ 1210.307320][T17020] [ 1210.310382][T17020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1210.317684][T17020] CPU: 1 UID: 0 PID: 17020 Comm: syz.2.10354 Not tainted syzkaller #0 PREEMPT(full) [ 1210.327151][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1210.337217][T17020] Call Trace: [ 1210.340496][T17020] [ 1210.343422][T17020] vpanic+0x56c/0xa60 [ 1210.347408][T17020] ? __pfx__printk+0x10/0x10 [ 1210.351990][T17020] ? __pfx_vpanic+0x10/0x10 [ 1210.356489][T17020] ? is_bpf_text_address+0x292/0x2b0 [ 1210.361769][T17020] ? is_bpf_text_address+0x26/0x2b0 [ 1210.366988][T17020] panic+0xc5/0xd0 [ 1210.370751][T17020] ? __pfx_panic+0x10/0x10 [ 1210.375192][T17020] __warn+0x315/0x4f0 [ 1210.379179][T17020] ? __debug_object_init+0x2b1/0x4e0 [ 1210.384468][T17020] ? __debug_object_init+0x2b1/0x4e0 [ 1210.389752][T17020] __report_bug+0x29a/0x540 [ 1210.394267][T17020] ? __debug_object_init+0x2b1/0x4e0 [ 1210.399556][T17020] ? __pfx___report_bug+0x10/0x10 [ 1210.404592][T17020] ? __lock_acquire+0x6b5/0x2cf0 [ 1210.409563][T17020] report_bug_entry+0x19a/0x290 [ 1210.414417][T17020] ? __debug_object_init+0x30f/0x4e0 [ 1210.419731][T17020] ? __debug_object_init+0x314/0x4e0 [ 1210.425029][T17020] handle_bug+0xce/0x200 [ 1210.429263][T17020] exc_invalid_op+0x1a/0x50 [ 1210.433757][T17020] asm_exc_invalid_op+0x1a/0x20 [ 1210.438597][T17020] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1210.444489][T17020] Code: 3c 38 00 74 08 4c 89 ef e8 0e a4 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 d8 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 be 72 58 0b 83 fd 03 75 3f 4c 8b [ 1210.464084][T17020] RSP: 0018:ffffc900056778f8 EFLAGS: 00010246 [ 1210.470155][T17020] RAX: 1ffffffff179e7ec RBX: ffff88807c7fcf38 RCX: 0000000000000000 [ 1210.478120][T17020] RDX: ffffffff8c27dc40 RSI: ffffffff8c27d840 RDI: ffffffff901c63d0 [ 1210.486123][T17020] RBP: 0000000000000003 R08: ffff88807c7fcf38 R09: ffffffff8bcf5280 [ 1210.494156][T17020] R10: dffffc0000000000 R11: ffffffff81b1f7f0 R12: ffffffff8c27dc40 [ 1210.502125][T17020] R13: ffffffff8bcf3f60 R14: ffffffff901c63d0 R15: dffffc0000000000 [ 1210.510378][T17020] ? __pfx_timer_debug_hint+0x10/0x10 [ 1210.515766][T17020] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1210.521484][T17020] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1210.527206][T17020] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1210.533014][T17020] timer_init_key+0x41/0x2f0 [ 1210.537603][T17020] lane_ioctl+0x1579/0x2220 [ 1210.542142][T17020] ? __pfx_clip_ioctl+0x10/0x10 [ 1210.546984][T17020] ? br2684_ioctl+0x110/0x6b0 [ 1210.551659][T17020] ? __pfx_lane_ioctl+0x10/0x10 [ 1210.556514][T17020] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1210.561189][T17020] do_vcc_ioctl+0x36d/0x9d0 [ 1210.565688][T17020] svc_ioctl+0x1f6/0x7d0 [ 1210.569924][T17020] ? kasan_quarantine_put+0xbb/0x1f0 [ 1210.575206][T17020] ? __pfx_svc_ioctl+0x10/0x10 [ 1210.579971][T17020] ? tomoyo_path_number_perm+0x219/0x630 [ 1210.585623][T17020] ? tomoyo_path_number_perm+0x219/0x630 [ 1210.591300][T17020] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1210.596350][T17020] sock_do_ioctl+0x101/0x320 [ 1210.600987][T17020] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1210.606088][T17020] ? do_futex+0x333/0x420 [ 1210.610432][T17020] sock_ioctl+0x5c6/0x7f0 [ 1210.614754][T17020] ? __pfx_sock_ioctl+0x10/0x10 [ 1210.619595][T17020] ? __fget_files+0x2a/0x420 [ 1210.624176][T17020] ? __fget_files+0x3a0/0x420 [ 1210.628848][T17020] ? __fget_files+0x2a/0x420 [ 1210.633432][T17020] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1210.638379][T17020] ? __pfx_sock_ioctl+0x10/0x10 [ 1210.643229][T17020] __se_sys_ioctl+0xfc/0x170 [ 1210.647853][T17020] do_syscall_64+0x14d/0xf80 [ 1210.652440][T17020] ? trace_irq_disable+0x3b/0x150 [ 1210.657471][T17020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.663546][T17020] ? clear_bhb_loop+0x40/0x90 [ 1210.668243][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.674151][T17020] RIP: 0033:0x7ffadd59c819 [ 1210.678574][T17020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.698176][T17020] RSP: 002b:00007ffade4b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.706591][T17020] RAX: ffffffffffffffda RBX: 00007ffadd815fa0 RCX: 00007ffadd59c819 [ 1210.714580][T17020] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 1210.722542][T17020] RBP: 00007ffadd632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1210.730509][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.738472][T17020] R13: 00007ffadd816038 R14: 00007ffadd815fa0 R15: 00007ffceeb7b118 [ 1210.746448][T17020] [ 1210.749814][T17020] Kernel Offset: disabled [ 1210.754125][T17020] Rebooting in 86400 seconds..