last executing test programs: 14.284118027s ago: executing program 1 (id=13710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r8, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) ioctl$int_in(r8, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000600)={r7}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000037c8bdef775ce0bb45ff00", @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf2507000000080001006c0000000c00990000000000790000000400cc00050053000100000014000400766574683000000000000000000000000800050009000000"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4008000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000037c8bdef775ce0bb45ff00", @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf2507000000080001006c0000000c00990000000000790000000400cc00050053000100000014000400766574683000000000000000000000000800050009000000"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x32}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2528001a00ace3e3cdef48f18dea000000000000000a0101000000000000000000000000000200061005001900ff"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) 13.252818872s ago: executing program 1 (id=13715): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2a, 0x4, 0x9d32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x3, 0xffff}, {0xffe0, 0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000000)=0x4210) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x1, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r10, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x1000000, 0x8, 0x2b6}, {0x6, 0x7, 0x4e}, {0x3, 0x8, 0xd83}, {0x1, 0x1000, 0x5}, {0x1, 0x3, 0x2}, {0xffffffff, 0xffff, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61, 0x0, 0x60]}}, &(0x7f0000000f40)=""/4089, 0x8a, 0xff9, 0x4}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) 10.89369985s ago: executing program 3 (id=13723): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xfff2, 0x8}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009\x00'], 0x28}, 0x922bac8576bdadce) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x7}, 0x4) 10.748194731s ago: executing program 3 (id=13724): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0), &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x68, &(0x7f0000000680)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e20, 0xf5f3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000780)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @rand_addr=0x64010104}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e24, @remote}, 'bridge0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x3000, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000e4ffffff0000000000000700000000000000000000000008000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/97], 0xb8}}, 0x4004) 10.597860589s ago: executing program 3 (id=13726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x8, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e04, 0x101, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x10000}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x9e) 10.388964962s ago: executing program 2 (id=13727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000040c0)={0x24, 0x38, 0x107, 0x70bd27, 0x259fdbfe, {0x2, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='!{:\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000400000047000000850000001800000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa3}, 0x8005c}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.291309934s ago: executing program 2 (id=13728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)=@newtfilter={0x1380, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x134c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x1340, 0x2, [@m_bpf={0xf4, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8, 0x1, 0x81, 0x100}, {0xfffc, 0x6, 0x6e}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xa2, 0x6, "593ed0e115fcef99b982c92cdea95c55f2e4a6780788f8c3f21c4b868805096d7aa6f5832c88295c0fe5b70ee5269729b3f3750336aab291bd76581774f7515d13bdaf68300b90ae8bb020bcb35afc717ccd3ae9bd1f61ec3d59ce81d40056565105c21d5a11bf8e3491d3529878be10426c790bfee58cb4f773136183935d1a906bbab15bb90fcc1afd6768a88c23edc00acc09d9e21e7593c5149647a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x190, 0xf, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xce, 0x101, 0x1, 0x73, 0xff}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xfffffffb, 0x2, 0x0, 0xb3b}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x5, 0x1, 0x9}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x30000009, 0xffffffff, 0x6}, 0x52}}]}, {0xf2, 0x6, "47efd24f0ca08f7508b4efc7c7c59e5aa3f738cd52c47f8fe6b7c30c90f935b56638f0bb8a829ebabf693794bbe2663632b5b96e04c77d8b213cbbb35084c88423bffa8303f4903eef51c0a1b1eb21c066ab7d7cbcdae830c21ae63adc1d622b103e05c719ff8d727e27b77ecd02c906e8c950ab38acb224012f63a7d43d6bea5c175db1b9ad8af0d9e644256e73fc22a1be1aa13bd485345c58f9601b8cab2db7bb2c8c598faa034dbd39cc096ec6f268131124039922cbe9758e6a00f214a5b412fb517900d454634e89d4ca9f6d320733906bcb9118950eac10a418075bb246df3eb70f8dff4a2b4836f52ced"}, {0xc, 0x7, {0x1, 0x1}}, {0x30, 0x8, {0x13a8c6f25ffbfdb7, 0x1}}}}, @m_bpf={0x10b8, 0x19, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x80, 0xc, 0x6, 0x7fff}, {0xfffe, 0x4, 0x9, 0x5}, {0x8000, 0xc, 0x9, 0xfffffff9}, {0x35b7, 0x8, 0xa8, 0x3ff}, {0x8, 0x1, 0x4}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xf, 0x80, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x4, 0x1, 0x0, 0x4}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x9, 0x9, 0x9, 0x9}, {0x9, 0x6, 0xe, 0x3}, {0x80, 0xc1, 0xf5, 0x5}, {0x4, 0xfb, 0x33, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xb, 0x2, 0x8, 0xe3c}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1380}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x2c, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xd, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 7.880564026s ago: executing program 3 (id=13731): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.875647592s ago: executing program 2 (id=13733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed20282900fe8000000000e1fd00000000000000aaff020000000000000000000000000001"], 0xfdef) 7.597626145s ago: executing program 3 (id=13734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000ff8000000000002000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000020000000000000d5290f060000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003300000002000000000000000000000000000000000000000000000001"], 0x1fc}}, 0x0) 7.446977038s ago: executing program 3 (id=13735): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x4c0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x490, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffd1, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x4c0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)={0x24, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r4}]}, 0x24}, {&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003a0000042dbd7000fddbdf251c004f800400e2800302300000000000000000000000000000000001cef1e2383867aab4e9bc"], 0x2c}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x81}}, 0x30) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x200000, 0x0, 0x3, 0x1, 0xf278}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xea}, 0x90) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r11, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) 7.307597662s ago: executing program 4 (id=13736): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xb}, {0xfff2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xcc, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 6.036495392s ago: executing program 1 (id=13737): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x3c}}, 0x4814) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, 0xffffffffffffffff, 0x80000000000) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000380), 0xc, &(0x7f0000001880)={&(0x7f0000000400)={0x1474, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {0x15, 0x1, 0x8, 0xb, {0x4e24, 0x4e23, [0x3, 0x48000, 0x5, 0xaeab], [0x4, 0x3, 0x1, 0x8400], 0x0, [0x8]}, 0x3, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "1110632163c3bd024c8a0c6178ca70bf2b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "a7001df28101797f70dd14534f19dd9607e68a288e904d6561fb8f82d9306fae2fd3233fac401a69fe2b9ebbfb0f86d99eb89932e8bd58999db4d0fd8cb1d36f5bf89a8a3f4257b38325834935afd82a48c79a4be956320697165395a1667139829e7e51e2387a6bd413df9cae53a05b50778b5f1159b9bac5f4e2802c5039832da9b4393bf6f9b95310b8a57d29166a3fc62ec27fb2f58a750129cbc6747958482c475713fc1557edadaa0edc569c2f9c617701b2d03a"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "35a0e15674e20283a635a05b6855a3c37931cb1964765dfd760e4b3a9e96c9abb9b68117e85679a8062a7648b337ebf6fdce5206e5b5d7395b9dcc0ab33c629550c32e7a29bdd084969698cc380eb21b0a820167130bbaa71d682fe4e0a66da8039461d70472111faa970b59"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "2301ae254e7074dae07dd00909d5a359ad7012828a7794bd3792bd4f38c1a7d84bc6691699fd09874c9766ec8ea8004f171977044c6c129d50d080fe9d2cc04199ae1880836c9ec6759e6280ce5b6c3cd05efa89f8deab946301bcca06bbf8e8767780ae32cad0f5eb010ba0457708a85e150229ec828a5bd51ba9662e815f2ddc2b4410ba6b2db2ed07b2bfb1e14a2ed62d74431b6ca07010368e319d8bfca48abf30e356aba08e48d8a4650cc10451394cd36603c398e6d7cac42078c84a59fd2ff04e344baa8d"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "22a214779d12782f0ba7179781fa1e88376ec7bfa5e5d3156769213f46b75abd23f971c189c5785b4c84eba4ac5ed72167e9803912da3824900b3d1a5816b489dde103438004c499ee66cdf04f762c13a855b5becda51ca219de4a22820e53a4c75e804ce45b979a7688f82aabb93ba8859656fea39f92ddb977fe4b6002d7cd9b6f716cd1582cc48608c4a03d1d7bdee245db89"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "3118d1b956b78e68446f120aed74228378108555d6f54f32f125af4d1343b590f3ec6f3e0794f298b07ba995f2f2e6998700e74e6d0482a57f4eb8d45574255b3605180f5d"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "691f4da459e158904ae336d76e90ff7a96e6b6b8225bd8f390e7ed41a2a1297647613060027ab3decccf9e31523e75ef9ec54969cfe3f9cb7c67542818c53ba2a8697a4b08c48995e97bd4eeee12d637e7c3ee6a97be8a3b750a90d7e80069908b833f4e0754f052440db15830e8e8f8573e1f"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "0b7cd6d7cfdf7b9e2ab338b1ab8331352a5d27c8c693579e02b502a66dd8d018623f3ce76d5b71b4bf3c75c4d1efc2d2097495be711f9120c8a19e668595a946f21f3890b5ed0b82a506736ed8ef670a7afd90da2ead85ab07f6fc6f1bdefc13fdd644674b6829fcba25e0056173ea0c6ac8d68b47c8fb2d0191b95b37e981b6aada4152047ad8b1b20108895cf2cf1fca56d73bf752e2a534f042905bedf9d6c2ebdf35849329661970128e3e053f221146"}]}, 0x1474}, 0x1, 0x0, 0x0, 0x24058005}, 0x4000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000844, 0x0, 0x0) 5.867782034s ago: executing program 4 (id=13739): r0 = socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto$inet6(r3, &(0x7f00000000c0)='\x00', 0x1, 0x80, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x9, 0x200, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, {[@lsrr={0x83, 0x13, 0xe8, [@dev={0xac, 0x14, 0x14, 0x33}, @loopback, @rand_addr=0x64010102, @empty]}]}}}}}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 5.233760822s ago: executing program 2 (id=13740): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc549b44fffe0c64dd6058dbcddbdf74f8a3b0dafe9dc7e68740ed0f154a5d9f1e7c432483ef29111c8489acb68723bb66bb59b9fdcb421046b2401ec34598f9b5301bc30e1ef8d08fe5dd40a2a9422e0b358447f1e20d27e881ce71edd15425c5861bb188608fae621796a4e9a0f76cff7bc55acdd5911cc1ef894b4ae78cc3141e99b91237e895a6490db41388db4edc2a894c0ed93140f27ef1b43d8c82ae39e94eaec7e413c92f0134c0701f802f6ff3228aa787624348c6f475233e9dc1a559e76833b27abc"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x6a, 0x2, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) r7 = socket(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000240)=0x2a76, 0x4) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000000)="c6e73700000000e06d2ff7794f9a5455fa146f183dcf58a8cc92f6f03132d12fccc2d62437a14dd9", 0x28}, {0x0}], 0x2}, 0x0) 5.206973319s ago: executing program 1 (id=13741): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f00000001c0)='wireguard\x00', 0x181c00, &(0x7f0000000200)={@align=0xa, {0x61, 0x7, 0x1, 0x1}}, 0x80000000, &(0x7f0000000300), &(0x7f00000003c0)}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)='%pi6 \x00'}, 0x20) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180140002"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x596, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 4.796479701s ago: executing program 4 (id=13742): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18700000000000000000200000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.528241303s ago: executing program 4 (id=13743): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x10, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x8000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) sendto$inet(r2, &(0x7f0000000000)='<', 0xfffffffffffffe8a, 0x805, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) 4.326309225s ago: executing program 1 (id=13745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000000)={0x1df, 0x80, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xea1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x8000, @local, 0x1}}, 0x5, 0xfffb, 0x800, 0x7fffffff, 0x14, 0x5, 0x1}, 0x9c) 4.21941383s ago: executing program 2 (id=13746): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0xfdce}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="80000080d543210fe7deaa7a400340008100", 0x12, 0x40, &(0x7f0000000440)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02e520fa2cf063c3ae1eb29eefcebe7ca1747d00cb8014b50e9c483235", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.806776981s ago: executing program 1 (id=13748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0xd741e000) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x60}}, 0x0) sendfile(r7, r8, &(0x7f0000000180)=0xa, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@delsa={0x338, 0x11, 0x200, 0x70bd2a, 0x25dfdbfb, {@in6=@empty, 0x4d5, 0xa, 0xff}, [@algo_auth={0x94, 0x1, {{'md4-generic\x00'}, 0x260, "663c46e83cc5943afc87fa789e49795491648fcd404e8e9227fef7688273db97dcf7135e3338644b95dfcd9d7c2810b08083a63e261cc9e1335ddbf9f9ec51d355962e383ed5c3cb2af1624e"}}, @proto={0x5, 0x19, 0x33}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x6, 0x2, 0x80, 0x0, 0x6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xff}, @in6=@mcast1, {0x5c3, 0x7fffffff, 0x2f2, 0x8, 0x7, 0x7, 0x3, 0x1}, {0xcc8, 0x5, 0x9, 0x80}, {0x6, 0x4, 0x5}, 0x70bd2b, 0x3501, 0xa, 0x1, 0x7, 0x3}}, @extra_flags={0x8, 0x18, 0x6}, @policy_type={0xa, 0x10, {0x1}}, @algo_crypt={0xde, 0x2, {{'chacha20-simd\x00'}, 0x4b0, "8198104e7b87ac81cdaca8fbddb666184fb970d1151b65b077f32f3b1370885af51093d31aadef01f4094eff139e73f2370d2518d8042b2ca50eba50b481beb161d1d8b6c5d9a89c4d3a74b1e617c878283017588d69463d73623c23eeb748ef33b9ef3acd4f7a1de523cc1f8c7e868cb1663b83d90f114fc75bda2bba1e8f24d124b72202178062e274fd3b5352918e8e47236484e8"}}, @algo_auth_trunc={0x6d, 0x14, {{'sha1-ssse3\x00'}, 0x108, 0x40, "ecb73ef1b51dae25e6da26d3a4d9df2ef9c0fa7cc8ffb476589fb964080000003f"}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@private1, 0x0, 0xa}}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x2, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 3.335048761s ago: executing program 0 (id=13749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000004c0)="878b0d151f8218e3c73697e40800480209004000000000000007ed47b735ce689cbd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.272748322s ago: executing program 4 (id=13750): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/206, 0xce}, {0x0}], 0x2, &(0x7f0000000780)=""/223, 0xdf}, 0x1}], 0x1, 0x40000002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "2cf74e4f0597be17"}, 0x10}, 0x1, 0x0, 0x0, 0x4044011}, 0xd209f6d814827b17) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 2.906798059s ago: executing program 0 (id=13751): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000300080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.686528727s ago: executing program 4 (id=13752): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @random="ae04fd9ec0d0"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x10, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000300)="7800000018002507b9199b02ffff48000203be040204fe050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d7ea80, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f00000003c0)='sit0\x00') ioctl$sock_netdev_private(r9, 0x8922, &(0x7f0000000080)="963a") r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x2c, 0x66, 0x1, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xd, 0x3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r10) 2.260765357s ago: executing program 0 (id=13753): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000304030000000000feffffff5500", @ANYRES32=r1, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) 1.855617439s ago: executing program 0 (id=13754): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 654.888485ms ago: executing program 0 (id=13755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000210081dc2dbd70000300000002380000000000041f000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 76.339512ms ago: executing program 0 (id=13756): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000300)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0xfbfffffd, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="08002bbd7000fedbdf250100000008000c000300000008000200050000001400060020010000000000000000000000000001080002000500000008000c0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r8, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x13, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5e4075b4, 0x0, 0x0, 0x0, 0x80000001}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77d0, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000002180)='syzkaller\x00', 0x8, 0x20, &(0x7f00000021c0)=""/32, 0x41100, 0x18, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0xa, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002280), &(0x7f00000022c0)=[{0x1, 0x5, 0x2, 0xa}, {0x3, 0x5, 0x9}, {0x3, 0x3, 0x6, 0x6}, {0x3, 0x5, 0x83, 0x5}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000024c0)={r11, 0x5, 0x4, "c4769dbc"}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{}, &(0x7f0000002080), &(0x7f00000023c0)=r10}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000003400048018000180080001006c6f67002c00028008000540ffffff081800018007000100727400000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001d40)={{r1, &(0x7f0000000040)='\'\x12\'&%,^+&+\\\x00', 0x181400, &(0x7f0000000100)={@align=0x2, {0x5, 0x2, 0x8001, 0x3}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x8}, 0xa, &(0x7f0000001c00)=[{0x1, 0x9, &(0x7f0000000200)='bond\x00', &(0x7f00000002c0)="d162e855f2c2a05f8c715d45f13af8db16497a37bdca683b83abf6fc11583d05c5b3be2011cda7aefb8c7c6ab1c6e80a83da4695a29c8ec72f538a7f8084f8ac86d3a353c90c5f66ddf22b59d1add2ff6144a3e34b333937b577fef91db5f65e53f1fa3e5cd545723cf4ba4c4ad73bffa5ccc1964fe8d39ec2ed3be46b7d14e0931fcd6e4785c8", 0x87, 0x20}, {0x3, 0x80000, &(0x7f0000000380)='syz1\x00', &(0x7f0000000480), 0x0, 0x38}, {0x3, 0x320, &(0x7f0000000500)='[[#\\,,%\xe8{%+:*($\xff-&/\x00', &(0x7f0000000540)="a919e05ae6c46b83e058eec3818bf50b730d59388aa1e37f35e2403b8ea91b3d7d3dea1e466802d4bc69ee5a952a1b97daf8e50cb8fa3787f52fde3bde9797d7f321df898cd161da5190d5ca82c39a63980284204f9e1fc017214b61dca5c2a5e31d86b5346d941a7ef83238d5a068452d433b038c14e3cba4043424634ff48fe66aa933a3ff71", 0x87, 0x3a}, {0x2, 0x0, &(0x7f0000000600)='syz2\x00', &(0x7f0000000640)="27cc5a5e8e33b35868e37cb9452749e0c5b0555de9b405b997246f68c63f11a18692aeaa42f776220971d8fe8a2b64ad6e8854967034cda9f698cdf4fde1fda0128651473d3ad5ef26a972a42e374104e5eb5f197b705fefc747bdace892fbcc7606bfe4f439243a6839f1278d7366105cc39f8a699678e6b9a2fcd4196912d2bf61c1bf8755a2", 0x87, 0x20}, {0x1, 0xe3, &(0x7f0000000700)=')\x00', &(0x7f0000000740)="fff429fbf1d4f5ebc8ed603c5ed2439dce0cdd20a1bec33f2f5a99d309233de1ad5305b7dff18655c4b18bce3bfc83c4c47da2196ca43d5a67b45819f40e02f6cf9336ab64da982e9b686f08be81f560604b53a662805bccc3971ea92a52a48de28f28a71f62cd0c8a16c8e85795e2ccfb30240984b1f924e9f7f124580ecd47e96216cc39e6ca219f94a2e1b8ac1a4bbdb98c72ef631241416057d1f34776f871172d3a82df2e993d1d72db2ba8df6b52352472b693787386c0ff2e6bad1dabaeafda4620689c769ac249c3dcb8b77b2260af4958349124a56d895c2738fd4e50e154f3421017c7a4b6282f", 0xec, 0xe}, {0x2, 0x68, &(0x7f0000001980)='syz1\x00', &(0x7f0000000880)="a9474700ca5623f6bdcf5eab96c9364c89922475eda272c4ee8f9460fb2e0493aecfd1363dd13f2db2d83743883c17534dc111142c96f826adcf1443fcb28c507af2fbda205b46f13615d66afce4f3ce48b86d474912bbae2ef1044de207b02911cbfd55ebaf60c52e68f9a9edf7266824fa7e393cd9714c1e87791c2d75b18c48c845e029a110ffb2b20bb53839fccaacf50444745b6a07c495e03cda279080f1111404527867921f8f8200e947d0dc6a3db87393f7fe715e043730d46d550ebe32b18a1bc95901b40e5a8b50abb42d164688e6539dabbdd835ea6476dec0bd3d841d2c8b543be5cf0c70b3ae9903b9a004a84dc1213c3c7193e0c1c5b0fc3dd5980b441ab4df29fc6c65d5687496073e9b6ed573316680b95c5ac7410fb0efef85663ede00753226af4f1bb69e40252561fa77051e9827f072df9f6d0617952f7e0004461996ec4fa9c0e938e77a7ab1b651ce1dbe2a52ce57b7952d3c134d681bc290842bbf0fb4e5d0f5d337cc61b4e006f9d8b073de6747d59ee7475edac13def8d3b32a80582c9eb54b45c1019fb5187c6d689025b5359148c1004fc93e9551f56e8013df92f6bb54309e7b1a749d968a9e61f7497b6281434f90e31c8ce8e95c641dae161882b3e1dfaf60ceab0a0ea5da46687128d26febd9e91ed1485e839cf5d4b0fc2eb13b8ca930f1bdd3019afc50cf6a6710a42c2042c2220c3b8cf6f566b6dcfeb17b8b3495d3c4abf879975c3fc96d63fd946c59a678d1904909ac3a7d3c28147d5ac9f6ade09b367181e2fbdd9b249315b9c23122f4995d12944ecdaaf5ba4ccee37c730ade393f3f48b06b917f810436d30d81045d8ec24c1f8b71b2441b4e7222c024d5f64889ce08c91af33f6efad9e4846cc24d7cb7a31861644ca18de26b69f8b5ddaff9bac9bd3511b24335856d4960de80641ad8b0cf72ba8221c7b397029c3117004d3444c569d6869a4b06beb34b9974bba10c373462f545946e5a2ffb0d2012b207756c24cc8d19fb226ffe802476b93ac8255b3f58113ffb46539c599db36f79a5c9909892cae2ac752d358cb5092f123900def451d023e7389c6008c42ac4cfcfe8a007042024e69df2ef04ee887b6b34a09f13823908c55978a4e33d116451bba304b188116457e805a7dbf1116499fc7f1eb364bbb121498193dcc4fd2ac330336d5d192adfbec98165fcff88de0a921698bffd0216df6220db0d2054185dcdf2abf30cd2b4c8ac26d447df3445d0f54782246cb6fafa929155ded64fc6a65fdf0dc2bfd1b626340cf98953ff864f294ca2a9cd79835ba20a800958045cf81bb5e425dc549664d6f499027bef14d83523b600ee7219329b36451bc2a8dcf171cc5a37a400805cc244ce9d54eb9498afa3994b1d9030448b7a8c9d356fcc8a4c67da73bbc579d020fb892da25ec3af32e45ef29e015af67c1823f0e0f5a79a3cbdae657ef0321b20a3fee15c03cbb7dc5cc19963784dc2fca67592e6ce37dc39dfaa9dc96c7f7136825b14cf170a73230401884e7df6154416b6e3589a425647df80a9bfc57b2b985a25bffd07bf4ccf7bb054528fd1bcbd8afce121856c92a69a80201c2ccb74335fb53756c6cce9fe170c582d8a0eeced1971ae3e8d24e10766c975104a421f9da84b180009446ff362635c805ad77072f2f0660c5ecdcf7e589563155ef9145fd8ed8d9a6c51ebca67c56f978e98a1a34927693751e55d62032c8f1be1b1883d652ad97884f659b914d4bbabe0b20e3f3daec753329b8e436960ce5cdfe375d9f8c3fd6bc5d3d7530d274d2e3df74193b80e255eb95f00e387a9c8c9149ba60d3acb7f8a65a148a663e2116ac484a07540af0c016ec5d33d38718e168d736032fb269a19a008f001851f02bef957c5d4d2ebe8d82e80a04cc3ac9453212a6b4279a37bec87bc8b6716c3d279d3acb3b7f862e9eac1d78f257f72c48487666fafac8feb69acf0913335ae125914f224fce842f258bb28889cf2c8946991d1f6e294f572bf93171150262a3e20c17b9b91217510153adc749350cf8c77601990f1d8effffeda696fd6171892653c3e6b353ae60dd1a2ba1fee665ad2424c5744d87790f6ad8d22da94e427993616dc4419934401293f2b4628c6d7849d6216e61b28b702b6d971b4daf6132e47e02b85805a021bf1c8cdff8d3722f3a1c492ce462cba8a14739194249998983ae25726dc52468e2857671304f0ab8611eb1156f533edf3f7a5f76576c6739f2e56d1feeabf886c09d62a5557dbf8cad838d978c16df08e479bddc384abb63aa5ae27a683767a84618421e939158c42d2bbfecd57b6e9befdb679a3dbf708e63cc25a6316154f76b9a1892a70edd3677ed89638a747fd0209533e5b8c9e7b17125fb7260d99784e1d01f95ef0d0cfe9f3abfd03e5b6d17227d487abe053b5220c491cd71bfeca11855b6d0ffa663724cf30b061baea723cd4ae8ca826eabe886c5139445e4a25df73c26e3a416e6947e3883679ec64ab540a6daf2eb88c1367ef74d289d90b8ec3618498f01d6059388d30f48b6e6de79c8843a4885752a6ba823a7636176d85f1ebf9c0f3974128b489fc7a949c072bcf031ea11037e9bc4776d3f9408493fb312683244adee794d07f01ccabf7aebce431edbd7d528f2926f8df8a7d30cf835f4796acc15b3e648f5f314434d14ef5f4fa02dcc85d1b26e707676c641e06b2fb2db389a6ec5d851f73a0228d5e4cbf5916b2918aaf8ff09260d69e6b1b9330d5309a038b1f3922ce483ccb09afb10554d5c98d6075b4b349bd905fa50c58a0bc43ff53bd1b631839a972b8cc73abda23be75fca035a8789049c155bd59fddccaf80d2729aaff8f282a4e581bd953bce5628ae3be506b9", 0x800, 0x10}, {0x2, 0x9, &(0x7f0000001880)='-)\'#{/\x00', &(0x7f00000018c0)="164cb942861d3c8d8b85beaf88724491e1429e2304785f67b28663b98d537d4c649ad6788650c05ab71952d9f7e742e54e2c7fc25ad44631e563ced8f3f9320685f7865221df338d513d28f6ba4da66c1ff7639720cdfe5c261bf20c9c4c96a18afc23b469c6d75ab80e366394ec2bfc5822a369f92ea71d03e8b68dcd6028f8949d3ab0794f973f6d6c0b1231d6f9f0d7d4a9f213c40c86468318ad80d7ac631d0c6551d6c15545073e2e0e9555318388ddb19fdee7ce2f", 0xb8, 0x20}, {0x1, 0x7f, &(0x7f0000000480)='\x80\xfa\xc9o\x80\x00S\xa1\xb3y\xb9!c|\xb86Y\v\xb2\x9c\xa3\tf\x91Q\xb2\xc6\x98\xa4\xc4Q~\xf6\x90\'\xe8\x88\xc8pA\x80F{@#x\xb3\xfb\xb0\xb3)D\x8e\'\xbfJ/\xc3\x92\xe5\xed\x03\x80\x12\xf3\xb0z\xd4\xc3\x02W\xbc\x9e\xd6\x0f\x88\xfd\vZ:\xb2\xfb\xe0N\x12\xa1\x9b\x87\xb4I', 0x0, 0x0, 0x40}, {0x1, 0x1, &(0x7f0000001a00)=',\x00', &(0x7f0000001a40)="33f62428cf9794152bb828490ac5d2737a132a3fd0cfecc102401707060ca18d32a25845e8e9e4a491fc66df938e9f2abc2c1b4b0fcd9b91d8e1fa736f6df13e92ae5b50c2ecfae5b388e1236416d2b345f70b48a225a3bdc9cf408e65b351065edefc233d549d010c9effb2a147735640c57e6d8ff4c4cd393fbfa64f189df6dcc8d53e2ddc3fb1ffb65021a821cc64267afa4d0fb7818ad77283170002615f6bab1b6f6bce365009f9bfe64e4e3f133a758b5aaa7e", 0xb6}, {0x2, 0x0, &(0x7f0000001b00)='rt\x00', &(0x7f0000001b40)="973162e786b68d59b1f02dc3f36ae538c1e4303befa4f16762de7d47713dec40ac72bfb24221d50879537490fb8291eac9c6ac493a19e21ef0ad2eb44160e7ab144cb1654cfb3a7cbd9f34b488213e514d01b617fb00ef9db7cfa31de30c8fb435b2fe49733a259493a0faf4f47f959c90409cbbddb6a865b0cb2cb641ebcbd382122d731a7f1e78e7cd59f0181115de156946494d5e5aaab4d72d6a5f4ae53f8967880cf54e02e83afa82ebc2acd5173687a386042451d481", 0xb9}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2500000006200000", @ANYRES32, @ANYRES32, @ANYBLOB="8138dc7b556a5b7753868c5a6e5b2323d3adfa908949eb597b6ab01d36f4fcc691af5cd6a6911ffd8f2d18e5ee65ed516bfa74f4e720a6641ed264f5c79bd70a1fcb646a1e3c02a307e66e288ddd802e81a181cd2ed7d2e331a5b0016f179fa8c0871a56c88f1eeb702f7a847c18e9730c2b528944077b1f547dd2095ed05ebfebfeebf0848c1892fc255bd25cc62a61e9a3bf98415c1f2742", @ANYRES64=0x0], 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000305000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="15010000812000001c00128009000100626f6e64000000000c00028008000300f7ffffff"], 0x3c}}, 0x28000000) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 2 (id=13757): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe800000fffffff500000000000000aaff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): DI: 0000000000000003 [ 1704.547144][T15788] RBP: 00007f15924b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.547156][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.547168][T15788] R13: 00007f1591816038 R14: 00007f1591815fa0 R15: 00007ffd387b6a08 [ 1704.547203][T15788] [ 1704.553341][T15768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12938'. [ 1705.227314][T15815] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12951'. [ 1705.900993][T15843] syzkaller0: entered promiscuous mode [ 1705.907045][T15843] syzkaller0: entered allmulticast mode [ 1705.961057][T15817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1706.120250][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1706.158144][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1706.220407][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1706.424089][T15860] netlink: 92 bytes leftover after parsing attributes in process `syz.2.12964'. [ 1707.243234][T15866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1708.012582][T15918] xt_hashlimit: size too large, truncated to 1048576 [ 1708.053384][T15923] netlink: 'syz.4.12983': attribute type 1 has an invalid length. [ 1708.069340][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034b01c00: rx timeout, send abort [ 1708.078496][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034b01c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1708.123010][T15923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1708.161156][T15928] bond4: (slave veth0_to_bond): making interface the new active one [ 1708.173680][T15928] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1708.329645][T15923] macvlan2: entered promiscuous mode [ 1708.356068][T15923] macvlan2: entered allmulticast mode [ 1708.373610][T15923] bond4: entered promiscuous mode [ 1708.397094][T15923] veth0_to_bond: entered promiscuous mode [ 1708.415403][T15923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1708.429577][T15923] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1708.467128][T15923] bond4: left promiscuous mode [ 1708.472009][T15923] veth0_to_bond: left promiscuous mode [ 1708.513357][T15935] bridge_slave_0: left allmulticast mode [ 1708.530352][T15935] bridge_slave_0: left promiscuous mode [ 1708.551382][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.602236][T15935] bridge_slave_1: left allmulticast mode [ 1708.608771][T15935] bridge_slave_1: left promiscuous mode [ 1708.615004][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.633941][T15935] bond0: (slave bond_slave_0): Releasing backup interface [ 1708.662764][T15935] bond0: (slave bond_slave_1): Releasing backup interface [ 1708.715684][T15935] team0: Port device team_slave_1 removed [ 1708.730607][T15935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.739652][T15935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.751272][T15935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.759358][T15935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.769637][T15935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1708.827720][T15927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1709.103587][T15953] netlink: 'syz.0.12993': attribute type 3 has an invalid length. [ 1709.195975][T15957] syzkaller0: entered promiscuous mode [ 1709.207077][ T3274] Bluetooth: hci0: command 0x0c20 tx timeout [ 1709.225275][T15957] syzkaller0: entered allmulticast mode [ 1709.243480][T15949] __nla_validate_parse: 1 callbacks suppressed [ 1709.243503][T15949] netlink: 284 bytes leftover after parsing attributes in process `syz.3.12991'. [ 1709.769897][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12999'. [ 1709.771063][T15966] bridge0: entered allmulticast mode [ 1709.976312][T15969] bond2: option miimon: invalid value (18446744073709551607) [ 1709.983802][T15969] bond2: option miimon: allowed values 0 - 2147483647 [ 1709.999233][T15969] bond2 (unregistering): Released all slaves [ 1710.050201][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13004'. [ 1710.089037][T15996] syz_tun: entered promiscuous mode [ 1710.090721][T15994] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1710.096285][T15996] macsec1: entered promiscuous mode [ 1710.107585][T15996] macsec1: entered allmulticast mode [ 1710.113008][T15996] syz_tun: entered allmulticast mode [ 1710.136864][ T3274] block nbd102: Receive control failed (result -32) [ 1710.596442][T16017] syzkaller0: entered promiscuous mode [ 1710.615242][T16017] syzkaller0: entered allmulticast mode [ 1710.637706][T16019] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13015'. [ 1711.182258][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13026'. [ 1711.189931][T16041] syzkaller0: refused to change device tx_queue_len [ 1711.227022][T16041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13022'. [ 1711.228671][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13026'. [ 1711.255230][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13026'. [ 1711.281136][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13026'. [ 1711.515887][T16063] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13033'. [ 1711.626407][T16071] syzkaller0: entered promiscuous mode [ 1711.632151][T16071] syzkaller0: entered allmulticast mode [ 1711.784083][T16076] netlink: 'syz.3.13039': attribute type 25 has an invalid length. [ 1711.953844][T16083] sctp: [Deprecated]: syz.0.13041 (pid 16083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1711.953844][T16083] Use struct sctp_sack_info instead [ 1712.082478][T16062] bond2: option miimon: invalid value (18446744073709551607) [ 1712.091590][T16062] bond2: option miimon: allowed values 0 - 2147483647 [ 1712.108888][T16062] bond2 (unregistering): Released all slaves [ 1712.196578][ T3274] block nbd103: Receive control failed (result -32) [ 1712.400747][T16101] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1712.460583][T16101] netlink: 'syz.2.13044': attribute type 3 has an invalid length. [ 1712.811138][T16120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1712.834902][T16120] bond2: Unable to set down delay as MII monitoring is disabled [ 1713.158791][T16130] bond1: option miimon: invalid value (18446744073709551607) [ 1713.222959][T16130] bond1: option miimon: allowed values 0 - 2147483647 [ 1713.236845][T16132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1713.264147][T16130] bond1 (unregistering): Released all slaves [ 1713.397067][ T3274] block nbd104: Receive control failed (result -32) [ 1713.932802][T16166] netlink: 'syz.0.13069': attribute type 1 has an invalid length. [ 1713.989508][T16171] FAULT_INJECTION: forcing a failure. [ 1713.989508][T16171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.008478][T16171] CPU: 1 UID: 0 PID: 16171 Comm: syz.3.13071 Not tainted syzkaller #0 PREEMPT(full) [ 1714.008510][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1714.008522][T16171] Call Trace: [ 1714.008532][T16171] [ 1714.008543][T16171] dump_stack_lvl+0xe8/0x150 [ 1714.008583][T16171] should_fail_ex+0x40c/0x560 [ 1714.008622][T16171] _copy_to_user+0x31/0xb0 [ 1714.008651][T16171] bpf_test_finish+0x22c/0x6b0 [ 1714.008682][T16171] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1714.008709][T16171] ? __pfx_bpf_test_finish+0x10/0x10 [ 1714.008739][T16171] ? _copy_from_user+0x94/0xb0 [ 1714.008764][T16171] ? bpf_test_init+0x113/0x150 [ 1714.008788][T16171] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 1714.008832][T16171] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1714.008859][T16171] ? __fget_files+0x2a/0x420 [ 1714.008891][T16171] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1714.008916][T16171] bpf_prog_test_run+0x2c5/0x340 [ 1714.008942][T16171] __sys_bpf+0x643/0x950 [ 1714.008975][T16171] ? __pfx___sys_bpf+0x10/0x10 [ 1714.009024][T16171] ? ksys_write+0x242/0x270 [ 1714.009057][T16171] ? __pfx_ksys_write+0x10/0x10 [ 1714.009090][T16171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.009114][T16171] __x64_sys_bpf+0x7c/0x90 [ 1714.009143][T16171] do_syscall_64+0x174/0x580 [ 1714.009165][T16171] ? trace_irq_disable+0x3b/0x140 [ 1714.009196][T16171] ? clear_bhb_loop+0x40/0x90 [ 1714.009222][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.009244][T16171] RIP: 0033:0x7fdec759ce59 [ 1714.009265][T16171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.009283][T16171] RSP: 002b:00007fdec84b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1714.009307][T16171] RAX: ffffffffffffffda RBX: 00007fdec7815fa0 RCX: 00007fdec759ce59 [ 1714.009323][T16171] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1714.009336][T16171] RBP: 00007fdec84b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.009349][T16171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1714.009362][T16171] R13: 00007fdec7816038 R14: 00007fdec7815fa0 R15: 00007fff6ab7a998 [ 1714.009398][T16171] [ 1714.263938][T16163] bond3: option miimon: invalid value (18446744073709551607) [ 1714.271509][T16163] bond3: option miimon: allowed values 0 - 2147483647 [ 1714.274259][T16172] __nla_validate_parse: 8 callbacks suppressed [ 1714.274276][T16172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13069'. [ 1714.316509][T16165] netlink: 'syz.0.13069': attribute type 1 has an invalid length. [ 1714.346334][T16163] bond3 (unregistering): Released all slaves [ 1714.353366][T16179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13065'. [ 1714.412030][T16166] bond6: entered promiscuous mode [ 1714.418681][T16166] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1714.453701][ T3274] block nbd105: Receive control failed (result -32) [ 1714.593366][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13072'. [ 1714.640485][T16174] bridge1: left promiscuous mode [ 1714.649911][T16174] ip6gre1: left promiscuous mode [ 1714.684322][T16174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1714.699878][T16174] macsec1: left promiscuous mode [ 1714.777164][T16180] bond6: (slave bridge4): making interface the new active one [ 1714.786595][T16180] bridge4: entered promiscuous mode [ 1714.793897][T16180] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1714.891278][T16195] bond1: option miimon: invalid value (18446744073709551607) [ 1714.902711][T16195] bond1: option miimon: allowed values 0 - 2147483647 [ 1714.912978][T16195] bond1 (unregistering): Released all slaves [ 1714.942687][T13462] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1714.952279][T13462] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1715.130616][T16209] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13076'. [ 1715.201087][T13462] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1715.442854][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13083'. [ 1715.464298][T16217] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13080'. [ 1715.495710][ T29] audit: type=1107 audit(1781382817.939:11): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1715.496372][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13082'. [ 1715.823061][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13086'. [ 1715.867620][T16238] IPVS: ip_vs_add_dest(): server weight less than zero [ 1716.110086][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13088'. [ 1716.250620][T16239] bond1: option miimon: invalid value (18446744073709551607) [ 1716.286299][T16258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13089'. [ 1716.287557][T16239] bond1: option miimon: allowed values 0 - 2147483647 [ 1716.313830][T16239] bond1 (unregistering): Released all slaves [ 1716.349136][T16250] syzkaller1: entered promiscuous mode [ 1716.363494][T16250] syzkaller1: entered allmulticast mode [ 1716.391942][ T3274] block nbd106: Receive control failed (result -32) [ 1716.573778][T16271] syzkaller0: entered promiscuous mode [ 1716.584677][T16271] syzkaller0: entered allmulticast mode [ 1717.951262][T16291] FAULT_INJECTION: forcing a failure. [ 1717.951262][T16291] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.965024][T16291] CPU: 1 UID: 0 PID: 16291 Comm: syz.3.13098 Not tainted syzkaller #0 PREEMPT(full) [ 1717.965054][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1717.965067][T16291] Call Trace: [ 1717.965075][T16291] [ 1717.965085][T16291] dump_stack_lvl+0xe8/0x150 [ 1717.965116][T16291] should_fail_ex+0x40c/0x560 [ 1717.965156][T16291] should_failslab+0xa8/0x100 [ 1717.965191][T16291] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1717.965220][T16291] ? __alloc_skb+0x189/0x7a0 [ 1717.965250][T16291] ? __alloc_skb+0x1d7/0x7a0 [ 1717.965277][T16291] ? __local_bh_enable_ip+0xd0/0x130 [ 1717.965313][T16291] __alloc_skb+0x1d7/0x7a0 [ 1717.965348][T16291] netlink_ack+0x136/0xb30 [ 1717.965369][T16291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1717.965398][T16291] ? ref_tracker_free+0x689/0x830 [ 1717.965425][T16291] ? __pfx_ref_tracker_free+0x10/0x10 [ 1717.965459][T16291] netlink_rcv_skb+0x2a4/0x4a0 [ 1717.965483][T16291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1717.965514][T16291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1717.965552][T16291] ? netlink_deliver_tap+0x2e/0x1b0 [ 1717.965573][T16291] ? netlink_deliver_tap+0x2e/0x1b0 [ 1717.965602][T16291] netlink_unicast+0x7bb/0x940 [ 1717.965645][T16291] netlink_sendmsg+0x813/0xb40 [ 1717.965679][T16291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.965706][T16291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1717.965738][T16291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1717.965764][T16291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.965790][T16291] ____sys_sendmsg+0x9b9/0xa20 [ 1717.965812][T16291] ? __might_fault+0xaf/0x130 [ 1717.965859][T16291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.965892][T16291] ? import_iovec+0x73/0xa0 [ 1717.965921][T16291] ___sys_sendmsg+0x2a5/0x360 [ 1717.965943][T16291] ? __lock_acquire+0x683/0x2cd0 [ 1717.965970][T16291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1717.965999][T16291] ? kstrtouint+0x6e/0xe0 [ 1717.966055][T16291] ? __fget_files+0x2a/0x420 [ 1717.966076][T16291] ? __fget_files+0x3a2/0x420 [ 1717.966108][T16291] __sys_sendmmsg+0x27c/0x4e0 [ 1717.966133][T16291] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1717.966150][T16291] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1717.966197][T16291] ? ksys_write+0x242/0x270 [ 1717.966225][T16291] ? __pfx_ksys_write+0x10/0x10 [ 1717.966257][T16291] __x64_sys_sendmmsg+0xa0/0xc0 [ 1717.966276][T16291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.966297][T16291] do_syscall_64+0x174/0x580 [ 1717.966318][T16291] ? trace_irq_disable+0x3b/0x140 [ 1717.966349][T16291] ? clear_bhb_loop+0x40/0x90 [ 1717.966375][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.966395][T16291] RIP: 0033:0x7fdec759ce59 [ 1717.966416][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.966435][T16291] RSP: 002b:00007fdec8490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1717.966460][T16291] RAX: ffffffffffffffda RBX: 00007fdec7816090 RCX: 00007fdec759ce59 [ 1717.966475][T16291] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1717.966490][T16291] RBP: 00007fdec8490090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.966504][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.966517][T16291] R13: 00007fdec7816128 R14: 00007fdec7816090 R15: 00007fff6ab7a998 [ 1717.966553][T16291] [ 1719.581163][T16301] bond3: entered promiscuous mode [ 1719.600867][T16301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1719.672450][T16304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1719.681097][T16304] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1719.711492][T16304] bond3: (slave ip6gre3): Error -95 calling set_mac_address [ 1719.918459][T16314] syzkaller0: entered promiscuous mode [ 1719.924159][T16314] syzkaller0: entered allmulticast mode [ 1720.211746][T16351] __nla_validate_parse: 3 callbacks suppressed [ 1720.211769][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13118'. [ 1720.262374][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13118'. [ 1720.289440][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13118'. [ 1720.311363][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13118'. [ 1720.324454][T16359] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 1720.343425][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13120'. [ 1720.364087][T16351] netlink: 'syz.1.13118': attribute type 18 has an invalid length. [ 1720.381647][T16359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.382736][T16352] netlink: 'syz.1.13118': attribute type 18 has an invalid length. [ 1724.034253][T16362] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1725.108945][T16406] batman_adv: batadv0: Interface deactivated: wlan0 [ 1725.114303][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13135'. [ 1725.145860][T16426] openvswitch: netlink: Flow actions attr not present in new flow. [ 1725.838319][T16453] lo speed is unknown, defaulting to 1000 [ 1725.872899][T16442] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.910926][T16459] netlink: 'syz.1.13144': attribute type 1 has an invalid length. [ 1725.919092][T16442] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.047718][T16459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1726.147117][T16464] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1726.223936][T16459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13144'. [ 1726.387606][T16459] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 1726.777125][T16496] Unsupported ieee802154 address type: 0 [ 1727.358864][T16518] FAULT_INJECTION: forcing a failure. [ 1727.358864][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.373839][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13158'. [ 1727.387446][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.1.13159 Not tainted syzkaller #0 PREEMPT(full) [ 1727.387477][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1727.387490][T16518] Call Trace: [ 1727.387499][T16518] [ 1727.387509][T16518] dump_stack_lvl+0xe8/0x150 [ 1727.387540][T16518] should_fail_ex+0x40c/0x560 [ 1727.387581][T16518] _copy_from_user+0x2d/0xb0 [ 1727.387608][T16518] ___sys_sendmsg+0x1c6/0x360 [ 1727.387632][T16518] ? __lock_acquire+0x683/0x2cd0 [ 1727.387660][T16518] ? __pfx____sys_sendmsg+0x10/0x10 [ 1727.387690][T16518] ? kstrtouint+0x6e/0xe0 [ 1727.387751][T16518] ? __fget_files+0x2a/0x420 [ 1727.387775][T16518] ? __fget_files+0x3a2/0x420 [ 1727.387814][T16518] __sys_sendmmsg+0x27c/0x4e0 [ 1727.387853][T16518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1727.387874][T16518] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1727.387930][T16518] ? ksys_write+0x242/0x270 [ 1727.387964][T16518] ? __pfx_ksys_write+0x10/0x10 [ 1727.388002][T16518] __x64_sys_sendmmsg+0xa0/0xc0 [ 1727.388025][T16518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.388049][T16518] do_syscall_64+0x174/0x580 [ 1727.388071][T16518] ? trace_irq_disable+0x3b/0x140 [ 1727.388102][T16518] ? clear_bhb_loop+0x40/0x90 [ 1727.388128][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.388150][T16518] RIP: 0033:0x7f980139ce59 [ 1727.388173][T16518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.388191][T16518] RSP: 002b:00007f9802311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1727.388215][T16518] RAX: ffffffffffffffda RBX: 00007f9801615fa0 RCX: 00007f980139ce59 [ 1727.388231][T16518] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000004 [ 1727.388245][T16518] RBP: 00007f9802311090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.388258][T16518] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1727.388271][T16518] R13: 00007f9801616038 R14: 00007f9801615fa0 R15: 00007fffddcc19e8 [ 1727.388317][T16518] [ 1727.603152][T16512] block nbd107: Unsupported socket: should be TCP or UNIX. [ 1727.933511][T16526] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1728.000952][T16530] syzkaller0: entered promiscuous mode [ 1728.015627][T16530] syzkaller0: entered allmulticast mode [ 1728.481892][T16540] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1728.502946][T16542] FAULT_INJECTION: forcing a failure. [ 1728.502946][T16542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.541307][T16542] CPU: 1 UID: 0 PID: 16542 Comm: syz.4.13168 Not tainted syzkaller #0 PREEMPT(full) [ 1728.541338][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1728.541351][T16542] Call Trace: [ 1728.541360][T16542] [ 1728.541370][T16542] dump_stack_lvl+0xe8/0x150 [ 1728.541402][T16542] should_fail_ex+0x40c/0x560 [ 1728.541441][T16542] _copy_from_user+0x2d/0xb0 [ 1728.541467][T16542] ___sys_sendmsg+0x1c6/0x360 [ 1728.541490][T16542] ? __lock_acquire+0x683/0x2cd0 [ 1728.541518][T16542] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.541589][T16542] ? __fget_files+0x2a/0x420 [ 1728.541615][T16542] ? __fget_files+0x3a2/0x420 [ 1728.541652][T16542] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1728.541679][T16542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1728.541713][T16542] ? __pfx_ksys_write+0x10/0x10 [ 1728.541749][T16542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.541773][T16542] do_syscall_64+0x174/0x580 [ 1728.541795][T16542] ? trace_irq_disable+0x3b/0x140 [ 1728.541829][T16542] ? clear_bhb_loop+0x40/0x90 [ 1728.541855][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.541877][T16542] RIP: 0033:0x7f28c7d9ce59 [ 1728.541898][T16542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.541916][T16542] RSP: 002b:00007f28c8c7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.541941][T16542] RAX: ffffffffffffffda RBX: 00007f28c8015fa0 RCX: 00007f28c7d9ce59 [ 1728.541957][T16542] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1728.541970][T16542] RBP: 00007f28c8c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.541984][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.541996][T16542] R13: 00007f28c8016038 R14: 00007f28c8015fa0 R15: 00007ffc9a01f858 [ 1728.542032][T16542] [ 1729.477003][T16565] netlink: 'syz.4.13177': attribute type 1 has an invalid length. [ 1729.593393][T16571] netlink: 'syz.3.13179': attribute type 27 has an invalid length. [ 1729.616320][T16567] netlink: 'syz.0.13178': attribute type 126 has an invalid length. [ 1729.621450][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054798800: rx timeout, send abort [ 1729.628042][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13178'. [ 1729.633500][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054798800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1729.691117][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13181'. [ 1729.704744][T16573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13181'. [ 1729.729473][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13181'. [ 1729.819368][T16573] team0: Port device team_slave_0 removed [ 1729.955860][T16584] netlink: 'syz.0.13184': attribute type 21 has an invalid length. [ 1729.976174][T16584] netlink: 'syz.0.13184': attribute type 21 has an invalid length. [ 1730.077627][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13184'. [ 1730.094734][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13184'. [ 1730.189791][T10635] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.199327][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13184'. [ 1730.209040][T10635] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.225696][T10635] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.256913][T10635] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.633490][T16612] netlink: 'syz.0.13193': attribute type 30 has an invalid length. [ 1730.688435][T16612] bond7: option arp_missed_max: invalid value (0) [ 1730.697917][T16612] bond7: option arp_missed_max: allowed values 1 - 255 [ 1730.708590][T16612] bond7 (unregistering): Released all slaves [ 1730.761975][T16616] geneve2: entered promiscuous mode [ 1730.771694][T16616] geneve2: entered allmulticast mode [ 1731.170051][T16627] IPv6: addrconf: prefix option has invalid lifetime [ 1731.242668][T16629] __nla_validate_parse: 5 callbacks suppressed [ 1731.242690][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13198'. [ 1731.336679][T16638] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 5 [ 1731.479667][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1731.658210][T16645] bridge2: port 1(veth3) entered blocking state [ 1731.669583][T16645] bridge2: port 1(veth3) entered disabled state [ 1731.678962][T16645] veth3: entered allmulticast mode [ 1731.688660][T16645] veth3: entered promiscuous mode [ 1731.730003][T16653] bond4: (slave veth0_to_bond): Releasing active interface [ 1731.752789][T16653] bridge2: port 2(veth0_to_bond) entered blocking state [ 1731.770187][T16653] bridge2: port 2(veth0_to_bond) entered disabled state [ 1731.779419][T16653] veth0_to_bond: entered allmulticast mode [ 1731.788994][T16653] veth0_to_bond: entered promiscuous mode [ 1731.797046][T16646] lo speed is unknown, defaulting to 1000 [ 1731.826969][T16659] bridge2: port 3(veth5) entered blocking state [ 1731.833973][T16659] bridge2: port 3(veth5) entered disabled state [ 1731.843327][T16659] veth5: entered allmulticast mode [ 1731.847798][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13208'. [ 1731.851556][T16659] veth5: entered promiscuous mode [ 1731.859333][T16664] nbd: nbd64 already in use [ 1732.033540][T16668] netlink: 'syz.4.13210': attribute type 29 has an invalid length. [ 1732.049256][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13210'. [ 1732.475712][T16679] openvswitch: netlink: IP tunnel TTL not specified. [ 1735.854395][T16673] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13209'. [ 1735.873735][T16678] bond0: Error: Cannot enslave bond to itself. [ 1736.066595][T16691] netlink: 332 bytes leftover after parsing attributes in process `syz.1.13216'. [ 1736.094908][T16691] netlink: 'syz.1.13216': attribute type 9 has an invalid length. [ 1736.102981][T16691] netlink: 'syz.1.13216': attribute type 1 has an invalid length. [ 1736.576040][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13220'. [ 1737.453327][T16715] FAULT_INJECTION: forcing a failure. [ 1737.453327][T16715] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.466332][T16715] CPU: 0 UID: 0 PID: 16715 Comm: syz.1.13223 Not tainted syzkaller #0 PREEMPT(full) [ 1737.466361][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1737.466374][T16715] Call Trace: [ 1737.466383][T16715] [ 1737.466392][T16715] dump_stack_lvl+0xe8/0x150 [ 1737.466423][T16715] should_fail_ex+0x40c/0x560 [ 1737.466463][T16715] should_failslab+0xa8/0x100 [ 1737.466497][T16715] __kvmalloc_node_noprof+0x16e/0x890 [ 1737.466529][T16715] ? alloc_netdev_mqs+0xcc4/0x1220 [ 1737.466558][T16715] ? alloc_netdev_mqs+0xc18/0x1220 [ 1737.466590][T16715] alloc_netdev_mqs+0xcc4/0x1220 [ 1737.466624][T16715] rtnl_create_link+0x321/0xd70 [ 1737.466659][T16715] rtnl_newlink_create+0x25f/0xb00 [ 1737.466689][T16715] ? __mutex_lock+0x5c5/0x1590 [ 1737.466716][T16715] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1737.466745][T16715] ? __pfx___mutex_lock+0x10/0x10 [ 1737.466780][T16715] ? ns_capable+0x89/0xe0 [ 1737.466807][T16715] rtnl_newlink+0x167f/0x1bd0 [ 1737.466857][T16715] ? __pfx_rtnl_newlink+0x10/0x10 [ 1737.466885][T16715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.466952][T16715] ? kasan_quarantine_put+0xbb/0x1f0 [ 1737.466980][T16715] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.467009][T16715] ? nlmon_xmit+0xb0/0x100 [ 1737.467028][T16715] ? kmem_cache_free+0x182/0x650 [ 1737.467072][T16715] ? __lock_acquire+0x683/0x2cd0 [ 1737.467100][T16715] ? __dev_queue_xmit+0x29b/0x37f0 [ 1737.467138][T16715] ? __local_bh_enable_ip+0xd0/0x130 [ 1737.467159][T16715] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.467180][T16715] ? __dev_queue_xmit+0x29b/0x37f0 [ 1737.467202][T16715] ? __local_bh_enable_ip+0xd0/0x130 [ 1737.467220][T16715] ? __dev_queue_xmit+0x29b/0x37f0 [ 1737.467253][T16715] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1737.467304][T16715] ? __pfx_rtnl_newlink+0x10/0x10 [ 1737.467333][T16715] rtnetlink_rcv_msg+0x802/0xc00 [ 1737.467374][T16715] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1737.467403][T16715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1737.467432][T16715] ? ref_tracker_free+0x689/0x830 [ 1737.467457][T16715] ? __pfx_ref_tracker_free+0x10/0x10 [ 1737.467493][T16715] netlink_rcv_skb+0x226/0x4a0 [ 1737.467519][T16715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1737.467553][T16715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1737.467573][T16715] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.467624][T16715] netlink_unicast+0x7bb/0x940 [ 1737.467670][T16715] netlink_sendmsg+0x813/0xb40 [ 1737.467705][T16715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1737.467733][T16715] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1737.467764][T16715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1737.467789][T16715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1737.467813][T16715] ____sys_sendmsg+0x9b9/0xa20 [ 1737.467835][T16715] ? __might_fault+0xaf/0x130 [ 1737.467870][T16715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1737.467905][T16715] ? import_iovec+0x73/0xa0 [ 1737.467934][T16715] ___sys_sendmsg+0x2a5/0x360 [ 1737.467955][T16715] ? __lock_acquire+0x683/0x2cd0 [ 1737.467982][T16715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1737.468047][T16715] ? __fget_files+0x2a/0x420 [ 1737.468072][T16715] ? __fget_files+0x3a2/0x420 [ 1737.468119][T16715] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1737.468144][T16715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1737.468178][T16715] ? __pfx_ksys_write+0x10/0x10 [ 1737.468217][T16715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.468240][T16715] do_syscall_64+0x174/0x580 [ 1737.468261][T16715] ? trace_irq_disable+0x3b/0x140 [ 1737.468291][T16715] ? clear_bhb_loop+0x40/0x90 [ 1737.468319][T16715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.468341][T16715] RIP: 0033:0x7f980139ce59 [ 1737.468363][T16715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.468382][T16715] RSP: 002b:00007f98022f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.468405][T16715] RAX: ffffffffffffffda RBX: 00007f9801616090 RCX: 00007f980139ce59 [ 1737.468421][T16715] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1737.468435][T16715] RBP: 00007f98022f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.468448][T16715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.468459][T16715] R13: 00007f9801616128 R14: 00007f9801616090 R15: 00007fffddcc19e8 [ 1737.468495][T16715] [ 1738.201060][T16723] netlink: 'syz.1.13225': attribute type 1 has an invalid length. [ 1738.418580][ T29] audit: type=1800 audit(1781382840.869:12): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13228" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1410 res=0 errno=0 [ 1738.539189][T16723] bond5: entered promiscuous mode [ 1738.564207][T16723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1738.613516][T16728] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13227'. [ 1738.644546][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.656712][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.831356][T16738] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1739.070285][T16747] syzkaller0: entered promiscuous mode [ 1739.094128][T16747] syzkaller0: entered allmulticast mode [ 1739.355821][T16755] netlink: 324 bytes leftover after parsing attributes in process `syz.1.13237'. [ 1739.557389][T16766] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1739.567716][T16766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1739.796879][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13247'. [ 1739.806537][T16783] netlink: 'syz.4.13247': attribute type 7 has an invalid length. [ 1739.814419][T16783] netlink: 'syz.4.13247': attribute type 8 has an invalid length. [ 1739.823369][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13247'. [ 1739.839861][T16783] erspan0: entered promiscuous mode [ 1739.847088][T16783] gretap0: entered promiscuous mode [ 1739.853527][T16783] erspan0: left promiscuous mode [ 1739.860512][T16783] gretap0: left promiscuous mode [ 1740.086690][T16790] syzkaller0: entered promiscuous mode [ 1740.092380][T16790] syzkaller0: entered allmulticast mode [ 1740.263873][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13253'. [ 1740.288952][T16771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1740.305352][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13246'. [ 1740.758997][T16817] FAULT_INJECTION: forcing a failure. [ 1740.758997][T16817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.824788][T16817] CPU: 0 UID: 0 PID: 16817 Comm: syz.3.13258 Not tainted syzkaller #0 PREEMPT(full) [ 1740.824820][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1740.824833][T16817] Call Trace: [ 1740.824841][T16817] [ 1740.824851][T16817] dump_stack_lvl+0xe8/0x150 [ 1740.824881][T16817] should_fail_ex+0x40c/0x560 [ 1740.824921][T16817] _copy_from_user+0x2d/0xb0 [ 1740.824947][T16817] __copy_msghdr+0x382/0x580 [ 1740.824976][T16817] ___sys_sendmsg+0x213/0x360 [ 1740.824996][T16817] ? __lock_acquire+0x683/0x2cd0 [ 1740.825023][T16817] ? __pfx____sys_sendmsg+0x10/0x10 [ 1740.825051][T16817] ? kstrtouint+0x6e/0xe0 [ 1740.825111][T16817] ? __fget_files+0x2a/0x420 [ 1740.825135][T16817] ? __fget_files+0x3a2/0x420 [ 1740.825171][T16817] __sys_sendmmsg+0x27c/0x4e0 [ 1740.825201][T16817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1740.825221][T16817] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1740.825275][T16817] ? ksys_write+0x242/0x270 [ 1740.825308][T16817] ? __pfx_ksys_write+0x10/0x10 [ 1740.825345][T16817] __x64_sys_sendmmsg+0xa0/0xc0 [ 1740.825369][T16817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.825391][T16817] do_syscall_64+0x174/0x580 [ 1740.825413][T16817] ? trace_irq_disable+0x3b/0x140 [ 1740.825442][T16817] ? clear_bhb_loop+0x40/0x90 [ 1740.825469][T16817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.825494][T16817] RIP: 0033:0x7fdec759ce59 [ 1740.825516][T16817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.825534][T16817] RSP: 002b:00007fdec84b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1740.825566][T16817] RAX: ffffffffffffffda RBX: 00007fdec7815fa0 RCX: 00007fdec759ce59 [ 1740.825582][T16817] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000004 [ 1740.825595][T16817] RBP: 00007fdec84b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.825609][T16817] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1740.825622][T16817] R13: 00007fdec7816038 R14: 00007fdec7815fa0 R15: 00007fff6ab7a998 [ 1740.825657][T16817] [ 1741.155882][T16826] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.13259'. [ 1741.249950][T16824] team0: Device xfrm0 is of different type [ 1741.257436][T16828] netlink: 'syz.0.13260': attribute type 1 has an invalid length. [ 1741.429196][T16834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.456754][T16834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.645647][T16842] __nla_validate_parse: 2 callbacks suppressed [ 1741.645668][T16842] netlink: 332 bytes leftover after parsing attributes in process `syz.4.13267'. [ 1741.728584][T16844] netlink: 'syz.3.13266': attribute type 1 has an invalid length. [ 1741.746639][T16844] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13266'. [ 1741.859724][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13268'. [ 1742.480451][T16863] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13273'. [ 1742.518029][T16864] FAULT_INJECTION: forcing a failure. [ 1742.518029][T16864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.520748][T16866] syzkaller0: entered promiscuous mode [ 1742.542775][T16866] syzkaller0: entered allmulticast mode [ 1742.573484][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.3.13274 Not tainted syzkaller #0 PREEMPT(full) [ 1742.573511][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1742.573525][T16864] Call Trace: [ 1742.573541][T16864] [ 1742.573551][T16864] dump_stack_lvl+0xe8/0x150 [ 1742.573580][T16864] should_fail_ex+0x40c/0x560 [ 1742.573604][T16864] _copy_from_user+0x2d/0xb0 [ 1742.573619][T16864] ___sys_recvmsg+0x173/0x590 [ 1742.573637][T16864] ? __pfx____sys_recvmsg+0x10/0x10 [ 1742.573653][T16864] ? __fget_files+0x2a/0x420 [ 1742.573685][T16864] do_recvmmsg+0x329/0x810 [ 1742.573704][T16864] ? __pfx_do_recvmmsg+0x10/0x10 [ 1742.573725][T16864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1742.573750][T16864] __x64_sys_recvmmsg+0x198/0x250 [ 1742.573765][T16864] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1742.573784][T16864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.573797][T16864] do_syscall_64+0x174/0x580 [ 1742.573810][T16864] ? trace_irq_disable+0x3b/0x140 [ 1742.573828][T16864] ? clear_bhb_loop+0x40/0x90 [ 1742.573843][T16864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.573855][T16864] RIP: 0033:0x7fdec759ce59 [ 1742.573869][T16864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.573880][T16864] RSP: 002b:00007fdec84b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1742.573895][T16864] RAX: ffffffffffffffda RBX: 00007fdec7815fa0 RCX: 00007fdec759ce59 [ 1742.573904][T16864] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000008 [ 1742.573913][T16864] RBP: 00007fdec84b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.573921][T16864] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 1742.573929][T16864] R13: 00007fdec7816038 R14: 00007fdec7815fa0 R15: 00007fff6ab7a998 [ 1742.573949][T16864] [ 1742.757884][T16867] netlink: 'syz.3.13274': attribute type 22 has an invalid length. [ 1742.867612][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13277'. [ 1742.952192][T16867] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1742.979245][T16867] bond1: (slave lo): Enslaving as an active interface with an up link [ 1743.005342][T16867] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1743.599755][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13287'. [ 1743.669388][T16904] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1743.682057][T16907] syzkaller0: entered promiscuous mode [ 1743.690020][T16907] syzkaller0: entered allmulticast mode [ 1743.707962][T16911] bond7: Unable to set down delay as MII monitoring is disabled [ 1743.793879][T16915] netlink: 'syz.2.13289': attribute type 1 has an invalid length. [ 1743.820258][T16916] FAULT_INJECTION: forcing a failure. [ 1743.820258][T16916] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.905229][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.0.13290 Not tainted syzkaller #0 PREEMPT(full) [ 1743.905259][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1743.905272][T16916] Call Trace: [ 1743.905281][T16916] [ 1743.905290][T16916] dump_stack_lvl+0xe8/0x150 [ 1743.905323][T16916] should_fail_ex+0x40c/0x560 [ 1743.905362][T16916] should_failslab+0xa8/0x100 [ 1743.905396][T16916] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1743.905426][T16916] ? __alloc_skb+0x189/0x7a0 [ 1743.905457][T16916] ? __alloc_skb+0x1d7/0x7a0 [ 1743.905485][T16916] ? __local_bh_enable_ip+0xd0/0x130 [ 1743.905513][T16916] __alloc_skb+0x1d7/0x7a0 [ 1743.905549][T16916] netlink_sendmsg+0x5d4/0xb40 [ 1743.905584][T16916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.905612][T16916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1743.905644][T16916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1743.905670][T16916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.905696][T16916] ____sys_sendmsg+0x9b9/0xa20 [ 1743.905720][T16916] ? __might_fault+0xaf/0x130 [ 1743.905754][T16916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.905788][T16916] ? import_iovec+0x73/0xa0 [ 1743.905818][T16916] ___sys_sendmsg+0x2a5/0x360 [ 1743.905840][T16916] ? __lock_acquire+0x683/0x2cd0 [ 1743.905868][T16916] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.905933][T16916] ? __fget_files+0x2a/0x420 [ 1743.905957][T16916] ? __fget_files+0x3a2/0x420 [ 1743.905995][T16916] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1743.906022][T16916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1743.906056][T16916] ? __pfx_ksys_write+0x10/0x10 [ 1743.906106][T16916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.906130][T16916] do_syscall_64+0x174/0x580 [ 1743.906153][T16916] ? trace_irq_disable+0x3b/0x140 [ 1743.906183][T16916] ? clear_bhb_loop+0x40/0x90 [ 1743.906210][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.906232][T16916] RIP: 0033:0x7f4f8939ce59 [ 1743.906257][T16916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.906275][T16916] RSP: 002b:00007f4f8a2da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.906299][T16916] RAX: ffffffffffffffda RBX: 00007f4f89616090 RCX: 00007f4f8939ce59 [ 1743.906314][T16916] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000007 [ 1743.906328][T16916] RBP: 00007f4f8a2da090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.906341][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.906354][T16916] R13: 00007f4f89616128 R14: 00007f4f89616090 R15: 00007ffe72523ec8 [ 1743.906390][T16916] [ 1744.187017][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13289'. [ 1744.301761][T16909] ip6_vti0: entered promiscuous mode [ 1744.307781][T16909] ip6_vti0: entered allmulticast mode [ 1744.411726][T16931] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13295'. [ 1744.468789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888099f8f400: rx timeout, send abort [ 1744.573244][T16940] FAULT_INJECTION: forcing a failure. [ 1744.573244][T16940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.608980][T16940] CPU: 0 UID: 0 PID: 16940 Comm: syz.2.13296 Not tainted syzkaller #0 PREEMPT(full) [ 1744.609001][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1744.609009][T16940] Call Trace: [ 1744.609015][T16940] [ 1744.609021][T16940] dump_stack_lvl+0xe8/0x150 [ 1744.609042][T16940] should_fail_ex+0x40c/0x560 [ 1744.609066][T16940] _copy_from_user+0x2d/0xb0 [ 1744.609081][T16940] ___sys_sendmsg+0x1c6/0x360 [ 1744.609094][T16940] ? __lock_acquire+0x683/0x2cd0 [ 1744.609111][T16940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1744.609123][T16940] ? __lock_acquire+0x683/0x2cd0 [ 1744.609138][T16940] ? kstrtouint+0x6e/0xe0 [ 1744.609179][T16940] __sys_sendmmsg+0x27c/0x4e0 [ 1744.609196][T16940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1744.609207][T16940] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1744.609237][T16940] ? ksys_write+0x242/0x270 [ 1744.609256][T16940] ? __pfx_ksys_write+0x10/0x10 [ 1744.609278][T16940] __x64_sys_sendmmsg+0xa0/0xc0 [ 1744.609291][T16940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.609304][T16940] do_syscall_64+0x174/0x580 [ 1744.609317][T16940] ? trace_irq_disable+0x3b/0x140 [ 1744.609336][T16940] ? clear_bhb_loop+0x40/0x90 [ 1744.609361][T16940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.609382][T16940] RIP: 0033:0x7f159159ce59 [ 1744.609396][T16940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.609407][T16940] RSP: 002b:00007f159248f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1744.609422][T16940] RAX: ffffffffffffffda RBX: 00007f1591816090 RCX: 00007f159159ce59 [ 1744.609431][T16940] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1744.609440][T16940] RBP: 00007f159248f090 R08: 0000000000000000 R09: 0000000000000000 [ 1744.609448][T16940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.609456][T16940] R13: 00007f1591816128 R14: 00007f1591816090 R15: 00007ffd387b6a08 [ 1744.609477][T16940] [ 1744.877317][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13294'. [ 1744.970611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888099f8f800: rx timeout, send abort [ 1744.978898][ C0] vcan0: j1939_tp_rxtimer: 0xffff888099f8f400: abort rx timeout. Force session deactivation [ 1745.478915][ C0] vcan0: j1939_tp_rxtimer: 0xffff888099f8f800: abort rx timeout. Force session deactivation [ 1745.500112][T16943] vlan3: entered promiscuous mode [ 1745.650226][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13301'. [ 1745.751619][T16962] syzkaller0: entered promiscuous mode [ 1745.778670][T16962] syzkaller0: entered allmulticast mode [ 1745.912815][T16972] syzkaller0: entered promiscuous mode [ 1745.919129][T16972] syzkaller0: entered allmulticast mode [ 1745.959976][T10624] 0: reclassify loop, rule prio 0, protocol 800 [ 1745.982834][T16972] netlink: 'syz.3.13307': attribute type 2 has an invalid length. [ 1746.003268][T16972] netlink: 'syz.3.13307': attribute type 8 has an invalid length. [ 1746.183002][T16981] lo speed is unknown, defaulting to 1000 [ 1746.346210][T16983] netlink: 'syz.1.13311': attribute type 3 has an invalid length. [ 1746.380305][T16990] vlan0: entered promiscuous mode [ 1746.394958][T16983] netlink: 'syz.1.13311': attribute type 1 has an invalid length. [ 1746.946913][T17011] __nla_validate_parse: 3 callbacks suppressed [ 1746.946934][T17011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13318'. [ 1747.068731][T17011] vlan0: left promiscuous mode [ 1747.113218][T17011] mac80211_hwsim hwsim176 wlan0: left promiscuous mode [ 1747.138107][T17011] batman_adv: batadv0: Interface activated: wlan0 [ 1747.156686][T17011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1747.189417][T17011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1747.203398][T17011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1747.228853][T17011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1747.240261][T17011] bridge3: left promiscuous mode [ 1747.247842][T17011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1747.262816][T17011] bond6: left promiscuous mode [ 1747.267917][T17011] bridge4: left promiscuous mode [ 1747.275751][T17011] geneve2: left promiscuous mode [ 1747.285105][T17011] vlan3: left promiscuous mode [ 1747.290060][T17011] bridge0: left promiscuous mode [ 1747.310928][T17013] syzkaller0: entered promiscuous mode [ 1747.317688][T17013] syzkaller0: entered allmulticast mode [ 1747.618258][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803323ec00: rx timeout, send abort [ 1747.627232][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803323ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1747.659651][T17019] netlink: 'syz.4.13321': attribute type 1 has an invalid length. [ 1747.852450][T17019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1747.977239][T17023] vlan4: entered promiscuous mode [ 1747.992808][T17023] bond5: entered promiscuous mode [ 1747.992813][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13323'. [ 1748.044137][T17023] vlan4: entered allmulticast mode [ 1748.054561][T17023] bond5: entered allmulticast mode [ 1748.089506][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.096769][T17026] bridge0: port 2(bridge_slave_1) entered listening state [ 1748.104320][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.111724][T17026] bridge0: port 1(bridge_slave_0) entered listening state [ 1748.210444][T17026] bridge0: port 3(batadv1) entered blocking state [ 1748.217040][T17026] bridge0: port 3(batadv1) entered listening state [ 1748.227557][T13991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.238785][T17026] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1748.251784][T17026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1748.268895][T17026] batadv0: entered promiscuous mode [ 1748.278342][T17026] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1748.311049][T17019] bond5: (slave bridge3): making interface the new active one [ 1748.319041][T17019] bridge3: entered promiscuous mode [ 1748.324455][T17019] bridge3: entered allmulticast mode [ 1748.334263][T17019] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1748.373828][T17029] bond2: option miimon: invalid value (18446744073709551607) [ 1748.391334][T17029] bond2: option miimon: allowed values 0 - 2147483647 [ 1748.410546][T17029] bond2 (unregistering): Released all slaves [ 1748.466316][T16443] bridge2: port 2(veth0_to_bond) entered blocking state [ 1748.473461][T16443] bridge2: port 2(veth0_to_bond) entered forwarding state [ 1748.510138][T16443] bridge2: port 1(veth3) entered blocking state [ 1748.516665][T16443] bridge2: port 1(veth3) entered forwarding state [ 1748.530487][T16443] bridge2: port 3(veth5) entered blocking state [ 1748.537080][T16443] bridge2: port 3(veth5) entered forwarding state [ 1748.547469][ T3274] block nbd107: Receive control failed (result -32) [ 1748.662629][T13252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.875086][T13252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.893767][T10627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.905779][T13252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.919941][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.937655][T13463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.949292][T30991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.969759][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.069333][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13330'. [ 1749.193259][T17051] syzkaller0: entered promiscuous mode [ 1749.207943][T17051] syzkaller0: entered allmulticast mode [ 1749.403574][T17047] bond2: option miimon: invalid value (18446744073709551607) [ 1749.415728][T17047] bond2: option miimon: allowed values 0 - 2147483647 [ 1749.428006][T17047] bond2 (unregistering): Released all slaves [ 1749.533441][T16444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.637183][ T3274] block nbd108: Receive control failed (result -32) [ 1749.835994][T17074] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13335'. [ 1749.851019][T30991] IPVS: starting estimator thread 0... [ 1749.984144][T17075] IPVS: using max 50 ests per chain, 120000 per kthread [ 1753.686134][ T7579] net_ratelimit: 6 callbacks suppressed [ 1753.686157][ T7579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.781280][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13340'. [ 1753.879122][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13340'. [ 1753.951649][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13340'. [ 1753.987371][T17109] vlan4: entered promiscuous mode [ 1753.993983][T17109] bridge0: entered promiscuous mode [ 1754.093208][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.106889][T17115] syzkaller0: entered promiscuous mode [ 1754.124169][ T7579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.137734][T17115] syzkaller0: entered allmulticast mode [ 1754.152223][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.490388][T17124] syzkaller0: entered promiscuous mode [ 1754.497031][T17124] syzkaller0: entered allmulticast mode [ 1754.573469][T17128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.674781][T10627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.690924][ T7579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.701753][T30991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.725483][T17130] syzkaller0: entered promiscuous mode [ 1754.726854][T13253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.742796][T17130] syzkaller0: entered allmulticast mode [ 1754.912624][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.546395][T17163] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1758.463899][T17163] bond7 (unregistering): Released all slaves [ 1758.694558][ C1] net_ratelimit: 14327 callbacks suppressed [ 1758.694582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.711900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.720342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.728794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.737220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.745619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.753978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.762406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.770866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.779259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.743796][T17231] team0: Device xfrm0 is of different type [ 1761.444513][ C1] sched: DL replenish lagged too much [ 1762.479815][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13374'. [ 1762.540695][T17248] netlink: 'syz.3.13374': attribute type 1 has an invalid length. [ 1762.653510][T17244] netlink: 'syz.3.13374': attribute type 1 has an invalid length. [ 1762.697177][T17244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13374'. [ 1762.782378][T17244] netlink: 'syz.3.13374': attribute type 10 has an invalid length. [ 1762.832704][T17248] netlink: 'syz.3.13374': attribute type 10 has an invalid length. [ 1762.950221][T17244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1763.008322][T17244] team0: Port device netdevsim1 added [ 1763.150274][T17248] team0: Port device netdevsim1 removed [ 1763.196698][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1763.223820][T17248] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1763.248044][T17255] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13376'. [ 1763.533897][T17268] netlink: 'syz.3.13378': attribute type 1 has an invalid length. [ 1763.697054][T17263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1763.704577][ C1] net_ratelimit: 23179 callbacks suppressed [ 1763.704597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.721750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.730205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.738699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.747252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.755694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.764123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.772594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.781005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.789413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.263494][T17278] syzkaller1: entered promiscuous mode [ 1764.274107][T17278] syzkaller1: entered allmulticast mode [ 1764.533533][T17282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13382'. [ 1764.843904][T17291] netlink: 'syz.0.13387': attribute type 21 has an invalid length. [ 1764.853900][T17291] netlink: 'syz.0.13387': attribute type 21 has an invalid length. [ 1764.924263][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13387'. [ 1764.937156][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13387'. [ 1764.949567][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13387'. [ 1764.960266][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13387'. [ 1767.713578][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13399'. [ 1767.724383][T17334] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13401'. [ 1767.935631][T17332] bond6: option miimon: invalid value (18446744073709551607) [ 1767.972109][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13402'. [ 1767.990812][T17332] bond6: option miimon: allowed values 0 - 2147483647 [ 1768.022120][T17332] bond6 (unregistering): Released all slaves [ 1768.293861][ T3274] block nbd109: Receive control failed (result -32) [ 1768.714708][ C1] net_ratelimit: 20704 callbacks suppressed [ 1768.714731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.729128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.737527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.745958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.754367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.762806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.771252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.779739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.788133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.796563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.897538][T17347] sctp: [Deprecated]: syz.3.13404 (pid 17347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1768.897538][T17347] Use struct sctp_sack_info instead [ 1768.916355][T17348] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13405'. [ 1769.481329][T17361] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13408'. [ 1769.559428][T17363] syzkaller0: entered promiscuous mode [ 1769.581440][T17363] syzkaller0: entered allmulticast mode [ 1769.781560][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13410'. [ 1769.837252][T17369] syzkaller0: entered allmulticast mode [ 1770.140883][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13413'. [ 1770.214066][T17377] macsec2: entered promiscuous mode [ 1770.226636][T17377] dummy0: entered promiscuous mode [ 1770.242666][T17377] macsec2: entered allmulticast mode [ 1770.257320][T17377] dummy0: entered allmulticast mode [ 1771.286118][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1772.132962][T17391] syzkaller1: entered promiscuous mode [ 1772.156228][T17391] syzkaller1: entered allmulticast mode [ 1772.390776][T17397] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13420'. [ 1773.181471][T17408] FAULT_INJECTION: forcing a failure. [ 1773.181471][T17408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.196788][T17408] CPU: 1 UID: 0 PID: 17408 Comm: syz.0.13423 Not tainted syzkaller #0 PREEMPT(full) [ 1773.196820][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1773.196833][T17408] Call Trace: [ 1773.196843][T17408] [ 1773.196853][T17408] dump_stack_lvl+0xe8/0x150 [ 1773.196887][T17408] should_fail_ex+0x40c/0x560 [ 1773.196930][T17408] _copy_from_iter+0x1d3/0x1660 [ 1773.196954][T17408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1773.196995][T17408] ? __pfx_policy_nodemask+0x10/0x10 [ 1773.197029][T17408] ? unwind_next_frame+0x8f/0x2550 [ 1773.197056][T17408] ? __pfx__copy_from_iter+0x10/0x10 [ 1773.197080][T17408] ? alloc_pages_mpol+0x24a/0x380 [ 1773.197124][T17408] copy_page_from_iter+0x219/0x2d0 [ 1773.197151][T17408] tun_get_user+0x1bd0/0x4350 [ 1773.197184][T17408] ? tun_get_user+0x718/0x4350 [ 1773.197221][T17408] ? aa_file_perm+0x4ed/0x15f0 [ 1773.197246][T17408] ? __pfx_tun_get_user+0x10/0x10 [ 1773.197271][T17408] ? __lock_acquire+0x683/0x2cd0 [ 1773.197314][T17408] ? ref_tracker_alloc+0x341/0x4b0 [ 1773.197336][T17408] ? get_pid_task+0x20/0x1f0 [ 1773.197366][T17408] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1773.197393][T17408] ? tun_get+0x1c/0x2f0 [ 1773.197415][T17408] ? tun_get+0x1c/0x2f0 [ 1773.197443][T17408] ? tun_get+0x1c/0x2f0 [ 1773.197463][T17408] ? tun_get+0x1c/0x2f0 [ 1773.197490][T17408] tun_chr_write_iter+0x113/0x200 [ 1773.197526][T17408] vfs_write+0x612/0xba0 [ 1773.197577][T17408] ? __pfx_vfs_write+0x10/0x10 [ 1773.197619][T17408] ? __fget_files+0x2a/0x420 [ 1773.197657][T17408] ksys_write+0x150/0x270 [ 1773.197690][T17408] ? __pfx_ksys_write+0x10/0x10 [ 1773.197731][T17408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.197757][T17408] do_syscall_64+0x174/0x580 [ 1773.197789][T17408] ? trace_irq_disable+0x3b/0x140 [ 1773.197821][T17408] ? clear_bhb_loop+0x40/0x90 [ 1773.197849][T17408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.197870][T17408] RIP: 0033:0x7f4f8935d68e [ 1773.197892][T17408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1773.197911][T17408] RSP: 002b:00007f4f8a2b8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1773.197936][T17408] RAX: ffffffffffffffda RBX: 00007f4f8a2b96c0 RCX: 00007f4f8935d68e [ 1773.197952][T17408] RDX: 000000000000004a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 1773.197966][T17408] RBP: 00007f4f8a2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.197981][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.197994][T17408] R13: 00007f4f89616218 R14: 00007f4f89616180 R15: 00007ffe72523ec8 [ 1773.198030][T17408] [ 1773.724648][ C0] net_ratelimit: 19518 callbacks suppressed [ 1773.724672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.739099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.747358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.755663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.763982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.772325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.780703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.789062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.795509][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13425'. [ 1773.797412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.814425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.077622][T17425] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13430'. [ 1775.368308][T17432] FAULT_INJECTION: forcing a failure. [ 1775.368308][T17432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.424102][T17432] CPU: 1 UID: 0 PID: 17432 Comm: syz.2.13432 Not tainted syzkaller #0 PREEMPT(full) [ 1775.424134][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1775.424148][T17432] Call Trace: [ 1775.424157][T17432] [ 1775.424167][T17432] dump_stack_lvl+0xe8/0x150 [ 1775.424199][T17432] should_fail_ex+0x40c/0x560 [ 1775.424239][T17432] _copy_from_iter+0x1d3/0x1660 [ 1775.424266][T17432] ? rcu_is_watching+0x15/0xb0 [ 1775.424299][T17432] ? __pfx__copy_from_iter+0x10/0x10 [ 1775.424319][T17432] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 1775.424360][T17432] ? netlink_sendmsg+0x650/0xb40 [ 1775.424386][T17432] ? skb_put+0x112/0x210 [ 1775.424411][T17432] netlink_sendmsg+0x6c0/0xb40 [ 1775.424445][T17432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1775.424476][T17432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1775.424510][T17432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1775.424538][T17432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1775.424573][T17432] ____sys_sendmsg+0x9b9/0xa20 [ 1775.424598][T17432] ? __might_fault+0xaf/0x130 [ 1775.424632][T17432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1775.424665][T17432] ? import_iovec+0x73/0xa0 [ 1775.424693][T17432] ___sys_sendmsg+0x2a5/0x360 [ 1775.424715][T17432] ? __lock_acquire+0x683/0x2cd0 [ 1775.424743][T17432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1775.424807][T17432] ? __fget_files+0x2a/0x420 [ 1775.424833][T17432] ? __fget_files+0x3a2/0x420 [ 1775.424871][T17432] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1775.424897][T17432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1775.424931][T17432] ? __pfx_ksys_write+0x10/0x10 [ 1775.424971][T17432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.424995][T17432] do_syscall_64+0x174/0x580 [ 1775.425018][T17432] ? trace_irq_disable+0x3b/0x140 [ 1775.425049][T17432] ? clear_bhb_loop+0x40/0x90 [ 1775.425075][T17432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.425096][T17432] RIP: 0033:0x7f159159ce59 [ 1775.425117][T17432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.425135][T17432] RSP: 002b:00007f15924b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1775.425158][T17432] RAX: ffffffffffffffda RBX: 00007f1591815fa0 RCX: 00007f159159ce59 [ 1775.425173][T17432] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1775.425187][T17432] RBP: 00007f15924b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.425201][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.425214][T17432] R13: 00007f1591816038 R14: 00007f1591815fa0 R15: 00007ffd387b6a08 [ 1775.425250][T17432] [ 1776.240232][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1777.491877][T17463] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13444'. [ 1778.338900][ C0] bridge0: port 3(batadv1) entered learning state [ 1778.348560][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1778.355880][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1778.496015][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13449'. [ 1778.734695][ C0] net_ratelimit: 25318 callbacks suppressed [ 1778.734718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.749136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.757572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.765945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.774307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.783114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.791504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.799860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.808205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.816503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.915138][T17492] FAULT_INJECTION: forcing a failure. [ 1778.915138][T17492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.984246][T17492] CPU: 1 UID: 0 PID: 17492 Comm: syz.2.13452 Not tainted syzkaller #0 PREEMPT(full) [ 1778.984278][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1778.984291][T17492] Call Trace: [ 1778.984300][T17492] [ 1778.984310][T17492] dump_stack_lvl+0xe8/0x150 [ 1778.984342][T17492] should_fail_ex+0x40c/0x560 [ 1778.984381][T17492] _copy_from_user+0x2d/0xb0 [ 1778.984407][T17492] ____sys_sendmsg+0x33d/0xa20 [ 1778.984442][T17492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1778.984477][T17492] ? import_iovec+0x73/0xa0 [ 1778.984514][T17492] ___sys_sendmsg+0x2a5/0x360 [ 1778.984536][T17492] ? __lock_acquire+0x683/0x2cd0 [ 1778.984563][T17492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.984593][T17492] ? kstrtouint+0x6e/0xe0 [ 1778.984653][T17492] ? __fget_files+0x2a/0x420 [ 1778.984677][T17492] ? __fget_files+0x3a2/0x420 [ 1778.984713][T17492] __sys_sendmmsg+0x27c/0x4e0 [ 1778.984743][T17492] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1778.984764][T17492] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1778.984818][T17492] ? ksys_write+0x242/0x270 [ 1778.984849][T17492] ? __pfx_ksys_write+0x10/0x10 [ 1778.984887][T17492] __x64_sys_sendmmsg+0xa0/0xc0 [ 1778.984910][T17492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.984933][T17492] do_syscall_64+0x174/0x580 [ 1778.984955][T17492] ? trace_irq_disable+0x3b/0x140 [ 1778.984985][T17492] ? clear_bhb_loop+0x40/0x90 [ 1778.985011][T17492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.985033][T17492] RIP: 0033:0x7f159159ce59 [ 1778.985053][T17492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.985069][T17492] RSP: 002b:00007f15924b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1778.985089][T17492] RAX: ffffffffffffffda RBX: 00007f1591815fa0 RCX: 00007f159159ce59 [ 1778.985105][T17492] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000004 [ 1778.985118][T17492] RBP: 00007f15924b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.985131][T17492] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1778.985144][T17492] R13: 00007f1591816038 R14: 00007f1591815fa0 R15: 00007ffd387b6a08 [ 1778.985179][T17492] [ 1779.263664][T17494] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13453'. [ 1779.850869][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13456'. [ 1781.739041][T17541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13461'. [ 1782.022600][T17541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13461'. [ 1782.067877][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13465'. [ 1782.081328][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13461'. [ 1782.610560][T17543] bond2: entered promiscuous mode [ 1782.623364][T17543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1782.780022][T17547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1782.803801][T17547] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1782.879804][T17547] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 1783.744514][ C0] net_ratelimit: 23377 callbacks suppressed [ 1783.744538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.758823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.767202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.775521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.783827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.792260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.800612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.808940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.817325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.825661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.718461][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13475'. [ 1787.830297][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13475'. [ 1788.220739][T17599] FAULT_INJECTION: forcing a failure. [ 1788.220739][T17599] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.233492][T17599] CPU: 1 UID: 0 PID: 17599 Comm: syz.0.13477 Not tainted syzkaller #0 PREEMPT(full) [ 1788.233521][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1788.233533][T17599] Call Trace: [ 1788.233543][T17599] [ 1788.233552][T17599] dump_stack_lvl+0xe8/0x150 [ 1788.233585][T17599] should_fail_ex+0x40c/0x560 [ 1788.233625][T17599] should_failslab+0xa8/0x100 [ 1788.233658][T17599] ? skb_clone+0x212/0x3a0 [ 1788.233682][T17599] kmem_cache_alloc_noprof+0x87/0x650 [ 1788.233720][T17599] skb_clone+0x212/0x3a0 [ 1788.233748][T17599] bpf_clone_redirect+0x170/0x4b0 [ 1788.233788][T17599] ? bpf_test_run+0x1d1/0x830 [ 1788.233813][T17599] bpf_prog_c23cca63f2a1c73b+0x22/0x2a [ 1788.233835][T17599] bpf_test_run+0x5c9/0x830 [ 1788.233882][T17599] ? __pfx_bpf_test_run+0x10/0x10 [ 1788.233918][T17599] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1788.233943][T17599] ? csum_partial+0x239/0x2c0 [ 1788.233983][T17599] ? skb_dst_set+0x72/0x140 [ 1788.234055][T17599] bpf_prog_test_run_skb+0xe35/0x2230 [ 1788.234103][T17599] ? __fget_files+0x3a2/0x420 [ 1788.234129][T17599] ? __fget_files+0x2a/0x420 [ 1788.234161][T17599] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1788.234192][T17599] bpf_prog_test_run+0x2c5/0x340 [ 1788.234220][T17599] __sys_bpf+0x643/0x950 [ 1788.234254][T17599] ? __pfx___sys_bpf+0x10/0x10 [ 1788.234301][T17599] ? ksys_write+0x242/0x270 [ 1788.234343][T17599] ? __pfx_ksys_write+0x10/0x10 [ 1788.234378][T17599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.234402][T17599] __x64_sys_bpf+0x7c/0x90 [ 1788.234430][T17599] do_syscall_64+0x174/0x580 [ 1788.234465][T17599] ? trace_irq_disable+0x3b/0x140 [ 1788.234495][T17599] ? clear_bhb_loop+0x40/0x90 [ 1788.234537][T17599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.234560][T17599] RIP: 0033:0x7f4f8939ce59 [ 1788.234580][T17599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.234598][T17599] RSP: 002b:00007f4f8a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1788.234623][T17599] RAX: ffffffffffffffda RBX: 00007f4f89615fa0 RCX: 00007f4f8939ce59 [ 1788.234639][T17599] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1788.234653][T17599] RBP: 00007f4f8a2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.234666][T17599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.234679][T17599] R13: 00007f4f89616038 R14: 00007f4f89615fa0 R15: 00007ffe72523ec8 [ 1788.234714][T17599] [ 1788.755784][ C0] net_ratelimit: 23810 callbacks suppressed [ 1788.755806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.770167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.778515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.786875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.795255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.803595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.811900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.820271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.828605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.836970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.463997][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1789.798038][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13480'. [ 1789.886390][ T3274] block nbd110: Receive control failed (result -32) [ 1789.919517][T17605] bond3: option miimon: invalid value (18446744073709551607) [ 1789.937750][T17605] bond3: option miimon: allowed values 0 - 2147483647 [ 1790.073506][T17605] bond3 (unregistering): Released all slaves [ 1790.201739][T17614] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1790.859821][T17630] tipc: New replicast peer: 255.255.255.255 [ 1790.990510][T17630] tipc: Enabled bearer , priority 10 [ 1791.863866][T17637] netlink: 300 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1792.011483][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13486'. [ 1792.090168][T17638] nbd: nbd64 already in use [ 1792.893827][T17651] hmó3)óÿ: entered promiscuous mode [ 1792.997971][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13490'. [ 1793.044118][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13490'. [ 1793.142486][T17651] vlan2: entered promiscuous mode [ 1793.156502][T17651] team0: entered promiscuous mode [ 1793.168823][T17651] team_slave_0: entered promiscuous mode [ 1793.188946][T17651] team_slave_1: entered promiscuous mode [ 1793.560064][T17652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1793.764569][ C0] net_ratelimit: 22880 callbacks suppressed [ 1793.764593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.778954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.787336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.795797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.804109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.816676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.825058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.833431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.841788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.850219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.968588][T17666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13493'. [ 1794.539373][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13495'. [ 1794.557268][T17684] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1794.586038][T17684] pim6reg0: persist disabled [ 1794.747367][T17682] bond8: option miimon: invalid value (18446744073709551607) [ 1794.781459][T17682] bond8: option miimon: allowed values 0 - 2147483647 [ 1794.846865][T17682] bond8 (unregistering): Released all slaves [ 1795.777399][T17698] mac80211_hwsim hwsim184 wlan0: entered promiscuous mode [ 1795.788070][T17698] mac80211_hwsim hwsim184 wlan0: entered allmulticast mode [ 1796.241748][ T3274] block nbd111: Receive control failed (result -32) [ 1797.536560][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13502'. [ 1797.951900][T17728] bond2: option miimon: invalid value (18446744073709551607) [ 1797.971350][T17736] FAULT_INJECTION: forcing a failure. [ 1797.971350][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.002597][T17728] bond2: option miimon: allowed values 0 - 2147483647 [ 1798.019281][T17736] CPU: 1 UID: 0 PID: 17736 Comm: syz.0.13506 Not tainted syzkaller #0 PREEMPT(full) [ 1798.019312][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1798.019325][T17736] Call Trace: [ 1798.019334][T17736] [ 1798.019345][T17736] dump_stack_lvl+0xe8/0x150 [ 1798.019376][T17736] should_fail_ex+0x40c/0x560 [ 1798.019416][T17736] should_failslab+0xa8/0x100 [ 1798.019449][T17736] ? skb_clone+0x212/0x3a0 [ 1798.019474][T17736] kmem_cache_alloc_noprof+0x87/0x650 [ 1798.019513][T17736] skb_clone+0x212/0x3a0 [ 1798.019541][T17736] __netlink_deliver_tap+0x413/0x860 [ 1798.019580][T17736] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.019606][T17736] netlink_deliver_tap+0x19c/0x1b0 [ 1798.019632][T17736] netlink_unicast+0x77f/0x940 [ 1798.019676][T17736] netlink_sendmsg+0x813/0xb40 [ 1798.019711][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.019746][T17736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1798.019779][T17736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1798.019804][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.019831][T17736] ____sys_sendmsg+0x9b9/0xa20 [ 1798.019857][T17736] ? __might_fault+0xaf/0x130 [ 1798.019892][T17736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1798.019926][T17736] ? import_iovec+0x73/0xa0 [ 1798.019955][T17736] ___sys_sendmsg+0x2a5/0x360 [ 1798.019975][T17736] ? __lock_acquire+0x683/0x2cd0 [ 1798.020003][T17736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.020069][T17736] ? __fget_files+0x2a/0x420 [ 1798.020094][T17736] ? __fget_files+0x3a2/0x420 [ 1798.020133][T17736] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1798.020169][T17736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1798.020204][T17736] ? __pfx_ksys_write+0x10/0x10 [ 1798.020246][T17736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.020270][T17736] do_syscall_64+0x174/0x580 [ 1798.020296][T17736] ? clear_bhb_loop+0x40/0x90 [ 1798.020322][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.020343][T17736] RIP: 0033:0x7f4f8939ce59 [ 1798.020364][T17736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.020382][T17736] RSP: 002b:00007f4f8a2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.020407][T17736] RAX: ffffffffffffffda RBX: 00007f4f89615fa0 RCX: 00007f4f8939ce59 [ 1798.020423][T17736] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1798.020437][T17736] RBP: 00007f4f8a2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.020451][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.020464][T17736] R13: 00007f4f89616038 R14: 00007f4f89615fa0 R15: 00007ffe72523ec8 [ 1798.020501][T17736] [ 1798.391876][ T3274] block nbd112: Receive control failed (result -32) [ 1798.575816][T17728] bond2 (unregistering): Released all slaves [ 1798.774533][ C0] net_ratelimit: 26338 callbacks suppressed [ 1798.774557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.788888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.797295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.805695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.813978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.822362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.830692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.839076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.847400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.855779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.674234][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13510'. [ 1799.710720][T17754] nft_compat: unsupported protocol 0 [ 1800.226677][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13513'. [ 1800.301001][T17760] bond3: option miimon: invalid value (18446744073709551607) [ 1800.314274][T17760] bond3: option miimon: allowed values 0 - 2147483647 [ 1800.510196][T17760] bond3 (unregistering): Released all slaves [ 1800.871814][ T3274] block nbd113: Receive control failed (result -32) [ 1801.080182][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13514'. [ 1801.132467][T17767] bond2: entered promiscuous mode [ 1801.139454][T17767] bond2: entered allmulticast mode [ 1801.560836][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13517'. [ 1801.726837][T17777] bond3: option miimon: invalid value (18446744073709551607) [ 1801.745951][T17777] bond3: option miimon: allowed values 0 - 2147483647 [ 1801.773882][T17777] bond3 (unregistering): Released all slaves [ 1802.372751][ T3274] block nbd114: Receive control failed (result -32) [ 1802.553135][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13521'. [ 1802.822213][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13518'. [ 1802.990377][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13522'. [ 1803.031395][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13522'. [ 1803.115743][T17797] netlink: 'syz.1.13522': attribute type 14 has an invalid length. [ 1803.191752][T17797] netlink: 'syz.1.13522': attribute type 12 has an invalid length. [ 1803.236081][T17792] bond8: option miimon: invalid value (18446744073709551607) [ 1803.409012][T17792] bond8: option miimon: allowed values 0 - 2147483647 [ 1803.784588][ C0] net_ratelimit: 28047 callbacks suppressed [ 1803.784610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.798962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.807325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.815729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.824087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.833839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.842198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.850616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.858973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.867384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.899489][ T3274] block nbd115: Receive control failed (result -32) [ 1804.049490][T17792] bond8 (unregistering): Released all slaves [ 1804.519585][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13525'. [ 1804.666760][T17825] bond3: option miimon: invalid value (18446744073709551607) [ 1804.679802][T17825] bond3: option miimon: allowed values 0 - 2147483647 [ 1804.890658][T17830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.908248][T17830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.921183][T17825] bond3 (unregistering): Released all slaves [ 1805.160658][ T3274] block nbd116: Receive control failed (result -32) [ 1806.686634][T17845] netlink: 'syz.4.13533': attribute type 13 has an invalid length. [ 1806.752353][T17845] netlink: 'syz.4.13533': attribute type 17 has an invalid length. [ 1806.874972][T17849] netlink: 'syz.4.13533': attribute type 30 has an invalid length. [ 1806.913711][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13534'. [ 1807.053546][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13533'. [ 1807.708030][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13538'. [ 1807.966320][T17844] bridge0: port 3(batadv1) entered disabled state [ 1807.973005][T17844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.980320][T17844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.005984][ T3274] block nbd117: Receive control failed (result -32) [ 1808.264329][T17900] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13541'. [ 1808.376712][T17844] bridge2: port 2(veth0_to_bond) entered disabled state [ 1808.456648][T17844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.485042][T17844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.062037][T17844] syz_tun: left allmulticast mode [ 1809.139666][T17844] bridge2: port 3(veth5) entered disabled state [ 1809.146261][T17844] bridge2: port 1(veth3) entered disabled state [ 1809.322043][T17845] syz_tun: left promiscuous mode [ 1809.343522][T17845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.352224][T17845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.363030][T17845] batadv0: left promiscuous mode [ 1809.370776][T17845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.382820][T28302] net_ratelimit: 15797 callbacks suppressed [ 1809.382841][T28302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.396991][T28302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.405883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.419270][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.427503][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.435677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.450269][T17902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.459060][T10627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.468995][T28302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.471582][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.478440][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.484382][T17845] bridge0: port 1(bridge_slave_0) entered listening state [ 1809.509498][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.516820][T17845] bridge0: port 2(bridge_slave_1) entered listening state [ 1809.538605][T17845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.551996][T17845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1809.578453][T17845] veth1_vlan: left promiscuous mode [ 1809.585308][T17845] veth0_vlan: left promiscuous mode [ 1809.591775][T17845] veth0_vlan: entered promiscuous mode [ 1809.602632][T17845] veth1_vlan: entered promiscuous mode [ 1809.619992][T17845] veth1_macvtap: left promiscuous mode [ 1809.627035][T17845] veth0_macvtap: left promiscuous mode [ 1809.639805][T17845] veth0_macvtap: entered promiscuous mode [ 1809.661581][T17845] veth1_macvtap: entered promiscuous mode [ 1809.675021][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1809.692790][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1809.709361][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1809.725629][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1809.747914][T17845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1809.757227][T17845] bridge0: port 3(batadv1) entered blocking state [ 1809.763730][T17845] bridge0: port 3(batadv1) entered listening state [ 1809.776832][T17845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1809.789040][T17845] syz_tun: entered promiscuous mode [ 1809.794275][T17845] syz_tun: entered allmulticast mode [ 1809.800177][T17845] macsec1: left promiscuous mode [ 1809.805456][T17845] macsec1: left allmulticast mode [ 1809.810545][T17845] syz_tun: left allmulticast mode [ 1809.818996][T17845] bond2: left promiscuous mode [ 1809.824209][T17845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1809.832633][T17845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1809.845481][T17845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1809.856397][T17845] bridge2: port 2(veth0_to_bond) entered blocking state [ 1809.863475][T17845] bridge2: port 2(veth0_to_bond) entered forwarding state [ 1809.875535][T17845] bridge2: port 1(veth3) entered blocking state [ 1809.881960][T17845] bridge2: port 1(veth3) entered forwarding state [ 1809.892573][T17845] bridge2: port 3(veth5) entered blocking state [ 1809.899125][T17845] bridge2: port 3(veth5) entered forwarding state [ 1809.910169][T17845] batadv0: entered promiscuous mode [ 1809.916639][T17845] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1809.925949][T17845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1809.940784][T17845] vlan4: left promiscuous mode [ 1809.945805][T17845] bond5: left promiscuous mode [ 1809.950690][T17845] bridge3: left promiscuous mode [ 1809.956380][T17845] vlan4: left allmulticast mode [ 1809.961317][T17845] bond5: left allmulticast mode [ 1809.966484][T17845] bridge3: left allmulticast mode [ 1809.989768][T17877] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1810.381847][T17915] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13544'. [ 1810.474845][T17921] sctp: [Deprecated]: syz.1.13546 (pid 17921) Use of int in max_burst socket option. [ 1810.474845][T17921] Use struct sctp_assoc_value instead [ 1810.649406][T17927] bridge0: left allmulticast mode [ 1810.697076][T17927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.704349][T17927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.735722][T17927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.742999][T17927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.763443][T17925] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13547'. [ 1810.788434][T17925] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13547'. [ 1810.910736][T17927] bond3: left allmulticast mode [ 1810.939033][T17927] ip6gretap1: left allmulticast mode [ 1810.963160][T17927] bridge3: left allmulticast mode [ 1810.984935][T17927] geneve2: left allmulticast mode [ 1810.992195][T17927] vlan4: left promiscuous mode [ 1810.998315][T17927] bridge0: left promiscuous mode [ 1811.278883][T17950] syzkaller1: entered promiscuous mode [ 1811.296023][T17950] syzkaller1: entered allmulticast mode [ 1811.311407][T17953] syzkaller1: entered promiscuous mode [ 1811.318572][T17953] syzkaller1: entered allmulticast mode [ 1811.322395][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13553'. [ 1811.417576][T17952] bond3: option miimon: invalid value (18446744073709551607) [ 1811.425558][T17952] bond3: option miimon: allowed values 0 - 2147483647 [ 1811.434145][T17952] bond3 (unregistering): Released all slaves [ 1811.533702][T17963] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1811.574211][T17964] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13554'. [ 1811.645324][ T3274] block nbd118: Receive control failed (result -32) [ 1811.827657][T17972] syzkaller0: entered promiscuous mode [ 1811.836288][T17972] syzkaller0: entered allmulticast mode [ 1812.246861][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1812.607725][T18007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1812.835377][T18022] __nla_validate_parse: 1 callbacks suppressed [ 1812.835401][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13572'. [ 1813.224181][T18022] bond3: option miimon: invalid value (18446744073709551607) [ 1813.233518][T18022] bond3: option miimon: allowed values 0 - 2147483647 [ 1813.287589][T18022] bond3 (unregistering): Released all slaves [ 1813.542822][ T3274] block nbd119: Receive control failed (result -32) [ 1814.339747][T12810] Bluetooth: hci4: command 0x0406 tx timeout [ 1814.384552][ C1] net_ratelimit: 7592 callbacks suppressed [ 1814.384574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.398889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.407394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.415871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.424340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.432856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.441368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.449863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.458357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.466861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.546637][T18046] syzkaller1: entered promiscuous mode [ 1814.559100][T18046] syzkaller1: entered allmulticast mode [ 1814.570385][T18044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13583'. [ 1815.353643][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1815.513686][T18054] bond6: option miimon: invalid value (18446744073709551607) [ 1815.534025][T18054] bond6: option miimon: allowed values 0 - 2147483647 [ 1815.597924][T18054] bond6 (unregistering): Released all slaves [ 1815.913204][ T4948] block nbd120: Receive control failed (result -32) [ 1816.071918][T18071] xfrm0: entered promiscuous mode [ 1816.105939][T18071] team0: Device xfrm0 is of different type [ 1816.432208][T18081] pim6reg: entered allmulticast mode [ 1816.450613][T18081] pim6reg: left allmulticast mode [ 1817.440333][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13595'. [ 1817.752658][T18096] syz_tun: entered promiscuous mode [ 1817.763666][T18096] macsec1: entered promiscuous mode [ 1817.775579][T18096] macsec1: entered allmulticast mode [ 1817.780961][T18096] syz_tun: entered allmulticast mode [ 1817.804104][T18096] syz_tun: left allmulticast mode [ 1817.813737][T18096] syz_tun: left promiscuous mode [ 1819.243453][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13601'. [ 1819.395369][ C1] net_ratelimit: 21717 callbacks suppressed [ 1819.395395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.409816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.418248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.426691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.435109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.443482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.451904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.460322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.468707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.477197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.571605][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13603'. [ 1819.582638][T18111] netlink: 'syz.3.13604': attribute type 1 has an invalid length. [ 1819.606700][T18111] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13604'. [ 1819.627151][T18113] FAULT_INJECTION: forcing a failure. [ 1819.627151][T18113] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.693226][T18113] CPU: 0 UID: 0 PID: 18113 Comm: syz.4.13605 Not tainted syzkaller #0 PREEMPT(full) [ 1819.693256][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.693269][T18113] Call Trace: [ 1819.693278][T18113] [ 1819.693288][T18113] dump_stack_lvl+0xe8/0x150 [ 1819.693320][T18113] should_fail_ex+0x40c/0x560 [ 1819.693359][T18113] should_failslab+0xa8/0x100 [ 1819.693394][T18113] __kmalloc_cache_noprof+0x88/0x660 [ 1819.693421][T18113] ? __pfx_stack_trace_save+0x10/0x10 [ 1819.693452][T18113] ? rtnl_newlink+0x136/0x1bd0 [ 1819.693490][T18113] rtnl_newlink+0x136/0x1bd0 [ 1819.693520][T18113] ? kasan_save_track+0x4f/0x80 [ 1819.693546][T18113] ? kasan_save_track+0x3e/0x80 [ 1819.693571][T18113] ? kasan_save_free_info+0x40/0x50 [ 1819.693594][T18113] ? __kasan_slab_free+0x5c/0x80 [ 1819.693620][T18113] ? kmem_cache_free+0x182/0x650 [ 1819.693648][T18113] ? dev_hard_start_xmit+0x2cd/0x830 [ 1819.693671][T18113] ? __netlink_deliver_tap+0x5b4/0x860 [ 1819.693693][T18113] ? netlink_deliver_tap+0x19c/0x1b0 [ 1819.693714][T18113] ? netlink_unicast+0x77f/0x940 [ 1819.693747][T18113] ? netlink_sendmsg+0x813/0xb40 [ 1819.693770][T18113] ? __pfx_rtnl_newlink+0x10/0x10 [ 1819.693799][T18113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.693862][T18113] ? kasan_quarantine_put+0xbb/0x1f0 [ 1819.693890][T18113] ? lockdep_hardirqs_on+0x7a/0x110 [ 1819.693918][T18113] ? nlmon_xmit+0xb0/0x100 [ 1819.693936][T18113] ? kmem_cache_free+0x182/0x650 [ 1819.693978][T18113] ? __lock_acquire+0x683/0x2cd0 [ 1819.694014][T18113] ? __dev_queue_xmit+0x29b/0x37f0 [ 1819.694061][T18113] ? __local_bh_enable_ip+0xd0/0x130 [ 1819.694083][T18113] ? lockdep_hardirqs_on+0x7a/0x110 [ 1819.694105][T18113] ? __dev_queue_xmit+0x29b/0x37f0 [ 1819.694126][T18113] ? __local_bh_enable_ip+0xd0/0x130 [ 1819.694145][T18113] ? __dev_queue_xmit+0x29b/0x37f0 [ 1819.694177][T18113] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1819.694208][T18113] ? __pfx_rtnl_newlink+0x10/0x10 [ 1819.694252][T18113] ? __pfx_rtnl_newlink+0x10/0x10 [ 1819.694281][T18113] rtnetlink_rcv_msg+0x802/0xc00 [ 1819.694316][T18113] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1819.694347][T18113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1819.694374][T18113] ? ref_tracker_free+0x689/0x830 [ 1819.694400][T18113] ? __pfx_ref_tracker_free+0x10/0x10 [ 1819.694434][T18113] netlink_rcv_skb+0x226/0x4a0 [ 1819.694456][T18113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1819.694490][T18113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1819.694526][T18113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1819.694548][T18113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1819.694577][T18113] netlink_unicast+0x7bb/0x940 [ 1819.694621][T18113] netlink_sendmsg+0x813/0xb40 [ 1819.694655][T18113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1819.694683][T18113] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1819.694715][T18113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1819.694741][T18113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1819.694767][T18113] ____sys_sendmsg+0x9b9/0xa20 [ 1819.694790][T18113] ? __might_fault+0xaf/0x130 [ 1819.694826][T18113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1819.694859][T18113] ? import_iovec+0x73/0xa0 [ 1819.694888][T18113] ___sys_sendmsg+0x2a5/0x360 [ 1819.694909][T18113] ? __lock_acquire+0x683/0x2cd0 [ 1819.694936][T18113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1819.694999][T18113] ? __fget_files+0x2a/0x420 [ 1819.695032][T18113] ? __fget_files+0x3a2/0x420 [ 1819.695069][T18113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1819.695095][T18113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1819.695129][T18113] ? __pfx_ksys_write+0x10/0x10 [ 1819.695169][T18113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.695191][T18113] do_syscall_64+0x174/0x580 [ 1819.695213][T18113] ? trace_irq_disable+0x3b/0x140 [ 1819.695244][T18113] ? clear_bhb_loop+0x40/0x90 [ 1819.695269][T18113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.695290][T18113] RIP: 0033:0x7f28c7d9ce59 [ 1819.695311][T18113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.695330][T18113] RSP: 002b:00007f28c8c7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.695354][T18113] RAX: ffffffffffffffda RBX: 00007f28c8015fa0 RCX: 00007f28c7d9ce59 [ 1819.695370][T18113] RDX: 0000000024000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 1819.695384][T18113] RBP: 00007f28c8c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.695397][T18113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.695410][T18113] R13: 00007f28c8016038 R14: 00007f28c8015fa0 R15: 00007ffc9a01f858 [ 1819.695446][T18113] [ 1820.823892][T18129] syzkaller1: entered promiscuous mode [ 1820.835450][T18129] syzkaller1: entered allmulticast mode [ 1821.044032][T18131] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13611'. [ 1822.288501][T18150] netlink: 332 bytes leftover after parsing attributes in process `syz.1.13618'. [ 1822.308597][T18150] netlink: 'syz.1.13618': attribute type 9 has an invalid length. [ 1822.336108][T18150] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13618'. [ 1822.363094][T18150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13618'. [ 1822.859819][T18158] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13622'. [ 1823.558222][T18166] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1823.809230][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13626'. [ 1823.947888][T18173] bond3: option miimon: invalid value (18446744073709551607) [ 1823.971966][T18173] bond3: option miimon: allowed values 0 - 2147483647 [ 1824.404642][ C1] net_ratelimit: 20528 callbacks suppressed [ 1824.404666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.419044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.427505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.435911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.444338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.452928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.461407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.469865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.478269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.486759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.490348][T18178] netlink: 'syz.3.13627': attribute type 1 has an invalid length. [ 1824.531639][ T4948] block nbd121: Receive control failed (result -32) [ 1824.667103][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13629'. [ 1825.380532][T18173] bond3 (unregistering): Released all slaves [ 1826.539612][T18191] syzkaller1: entered promiscuous mode [ 1826.550131][T18191] syzkaller1: entered allmulticast mode [ 1827.204400][T18212] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.13637'. [ 1827.590842][T18221] syzkaller1: entered promiscuous mode [ 1827.596966][T18221] syzkaller1: entered allmulticast mode [ 1827.840454][T18224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13641'. [ 1828.027004][T18230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13643'. [ 1829.416417][ C1] net_ratelimit: 21649 callbacks suppressed [ 1829.416443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.430804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.439115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.447472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.455876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.464225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.472598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.480903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.489295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.497556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.226859][T18265] syzkaller0: entered promiscuous mode [ 1831.247991][T18265] syzkaller0: entered allmulticast mode [ 1831.298480][T18267] netlink: 'syz.1.13655': attribute type 13 has an invalid length. [ 1832.169126][T18275] syzkaller0: entered promiscuous mode [ 1832.197721][T18275] syzkaller0: entered allmulticast mode [ 1832.483743][T18283] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1832.515947][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1832.589019][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13659'. [ 1832.766813][T18288] bond3: option miimon: invalid value (18446744073709551607) [ 1832.779520][T18288] bond3: option miimon: allowed values 0 - 2147483647 [ 1833.082954][T18288] bond3 (unregistering): Released all slaves [ 1833.226932][ T4948] block nbd122: Receive control failed (result -32) [ 1834.424551][ C1] net_ratelimit: 20960 callbacks suppressed [ 1834.424573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.439053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.447466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.455892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.464266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.472679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.481181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.489585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.497987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.506432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.102001][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13669'. [ 1836.191558][T18329] bond8: option miimon: invalid value (18446744073709551607) [ 1836.204850][T18329] bond8: option miimon: allowed values 0 - 2147483647 [ 1836.243838][T18329] bond8 (unregistering): Released all slaves [ 1836.473829][T18321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1836.612417][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13670'. [ 1836.712502][T18333] ip_vti0: Master is either lo or non-ether device [ 1836.750754][T18336] tunl0: Caught tx_queue_len zero misconfig [ 1837.729626][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13675'. [ 1838.790941][T18362] bond6: option miimon: invalid value (18446744073709551607) [ 1838.830057][T18362] bond6: option miimon: allowed values 0 - 2147483647 [ 1838.877749][ T4948] block nbd123: Receive control failed (result -32) [ 1839.434643][ C1] net_ratelimit: 18694 callbacks suppressed [ 1839.434668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.449175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.457612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.466046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.474422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.482855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.491307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.499751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.508180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.516619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.765133][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1839.772467][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1839.898568][T18362] bond6 (unregistering): Released all slaves [ 1840.407249][ C0] bridge0: port 3(batadv1) entered learning state [ 1840.474235][T18372] syzkaller0: entered promiscuous mode [ 1840.499951][T18372] syzkaller0: entered allmulticast mode [ 1840.815120][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.868640][T18381] bridge_slave_0 (unregistering): left allmulticast mode [ 1840.885709][T18381] bridge_slave_0 (unregistering): left promiscuous mode [ 1840.894098][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.843988][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13685'. [ 1842.626830][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13686'. [ 1842.661197][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13697'. [ 1842.690877][T18407] netlink: 'syz.4.13686': attribute type 9 has an invalid length. [ 1843.019466][T18415] syzkaller0: entered promiscuous mode [ 1843.026063][T18415] syzkaller0: entered allmulticast mode [ 1843.982332][T18426] netlink: 'syz.0.13691': attribute type 21 has an invalid length. [ 1844.024131][T18426] netlink: 'syz.0.13691': attribute type 21 has an invalid length. [ 1844.193248][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13691'. [ 1844.270185][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13691'. [ 1844.310070][T18432] syzkaller1: entered promiscuous mode [ 1844.381180][T18432] syzkaller1: entered allmulticast mode [ 1844.444676][ C0] net_ratelimit: 17437 callbacks suppressed [ 1844.444699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.459089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.467516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.475930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.478572][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13691'. [ 1844.484287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.501470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.509893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.518324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.526740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.535149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.582552][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13691'. [ 1844.720330][T18441] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13693'. [ 1845.008183][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13698'. [ 1845.202670][T18449] ip6tnl2: entered allmulticast mode [ 1845.440820][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13700'. [ 1845.811198][T18459] bond3: option miimon: invalid value (18446744073709551607) [ 1845.819917][T18459] bond3: option miimon: allowed values 0 - 2147483647 [ 1845.841906][T18459] bond3 (unregistering): Released all slaves [ 1846.043845][ T4948] block nbd124: Receive control failed (result -32) [ 1846.241691][T18476] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1846.254253][T18476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1846.380474][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13705'. [ 1846.599167][T18480] netlink: 'syz.1.13707': attribute type 1 has an invalid length. [ 1846.764947][T18480] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1846.860127][T18482] bond8: (slave veth11): Enslaving as an active interface with a down link [ 1846.896929][T18483] bond8: entered allmulticast mode [ 1846.915404][T18480] bond8: left allmulticast mode [ 1846.923343][T18480] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1849.209115][T18523] __nla_validate_parse: 4 callbacks suppressed [ 1849.209138][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13717'. [ 1849.249290][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038465400: rx timeout, send abort [ 1849.412028][T18512] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13716'. [ 1849.454530][ C0] net_ratelimit: 21020 callbacks suppressed [ 1849.454553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.468944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.477390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.485839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.494224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.502730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.516650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.525674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.534029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.542430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.581309][T18523] bond8: option miimon: invalid value (18446744073709551607) [ 1849.589614][T18523] bond8: option miimon: allowed values 0 - 2147483647 [ 1849.743980][ T4948] block nbd125: Receive control failed (result -32) [ 1849.751332][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038465800: rx timeout, send abort [ 1849.759790][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038465400: abort rx timeout. Force session deactivation [ 1850.015628][T18523] bond8 (unregistering): Released all slaves [ 1850.128324][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13721'. [ 1850.251408][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038465800: abort rx timeout. Force session deactivation [ 1852.688063][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13730'. [ 1852.788671][T18567] bond8: option miimon: invalid value (18446744073709551607) [ 1852.824142][T18567] bond8: option miimon: allowed values 0 - 2147483647 [ 1852.926516][T18567] bond8 (unregistering): Released all slaves [ 1853.374964][ T4948] block nbd126: Receive control failed (result -32) [ 1854.173705][T18578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13732'. [ 1854.220321][T18578] nbd: nbd64 already in use [ 1854.370594][T18582] netlink: 300 bytes leftover after parsing attributes in process `syz.3.13735'. [ 1854.466930][ C0] net_ratelimit: 23216 callbacks suppressed [ 1854.466953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.481331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.489711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.498103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.506502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.514893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.523231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.531628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.533667][T18586] netlink: 'syz.3.13735': attribute type 4 has an invalid length. [ 1854.540067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.540267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.570157][T18586] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13735'. [ 1855.951660][T18596] netlink: 'syz.1.13737': attribute type 21 has an invalid length. [ 1856.008596][T18596] netlink: 'syz.1.13737': attribute type 21 has an invalid length. [ 1856.087246][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1856.171084][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1856.232422][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1856.281864][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1856.781595][T18609] netlink: 'syz.1.13741': attribute type 30 has an invalid length. [ 1857.963399][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13747'. [ 1857.997694][T18630] syzkaller0: entered promiscuous mode [ 1858.157716][T18630] syzkaller0: entered allmulticast mode [ 1858.175242][T18632] netlink: 15 bytes leftover after parsing attributes in process `syz.0.13747'. [ 1858.583571][T18638] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13748'. [ 1859.184362][ T4948] block nbd127: Receive control failed (result -32) [ 1859.251164][T18637] nbd127: detected capacity change from 0 to 127 [ 1859.358430][T18655] block nbd127: Dead connection, failed to find a fallback [ 1859.442472][T18655] block nbd127: shutting down sockets [ 1859.476076][ C1] net_ratelimit: 18638 callbacks suppressed [ 1859.476099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.490493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.498906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.507327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.509083][T18655] I/O error, dev nbd127, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1859.524979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.525220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.525453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.525675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.525869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.567192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.628417][T18655] Buffer I/O error on dev nbd127, logical block 0, async page read [ 1859.675029][T18655] I/O error, dev nbd127, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1859.780758][T18655] Buffer I/O error on dev nbd127, logical block 1, async page read [ 1859.839921][T18655] I/O error, dev nbd127, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1859.914231][T18655] Buffer I/O error on dev nbd127, logical block 2, async page read [ 1859.984097][T18655] I/O error, dev nbd127, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.050261][T18655] Buffer I/O error on dev nbd127, logical block 3, async page read [ 1860.103603][T18655] I/O error, dev nbd127, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.157482][T18655] Buffer I/O error on dev nbd127, logical block 0, async page read [ 1860.188369][T18655] I/O error, dev nbd127, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.236681][T18655] Buffer I/O error on dev nbd127, logical block 1, async page read [ 1860.296585][T18655] I/O error, dev nbd127, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.343003][T18655] Buffer I/O error on dev nbd127, logical block 2, async page read [ 1860.373506][T18655] I/O error, dev nbd127, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.413383][T18655] Buffer I/O error on dev nbd127, logical block 3, async page read [ 1860.442489][T18655] I/O error, dev nbd127, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.481580][T18655] Buffer I/O error on dev nbd127, logical block 0, async page read [ 1860.513713][T18655] I/O error, dev nbd127, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.547502][T18655] Buffer I/O error on dev nbd127, logical block 1, async page read [ 1860.661604][T18655] ldm_validate_partition_table(): Disk read failed. [ 1860.718306][T18655] Dev nbd127: unable to read RDB block 0 [ 1860.877710][T18655] nbd127: unable to read partition table [ 1861.061253][T18655] ldm_validate_partition_table(): Disk read failed. [ 1861.096797][T18655] Dev nbd127: unable to read RDB block 0 [ 1861.143971][T18655] nbd127: unable to read partition table [ 1861.949836][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13756'. [ 1862.069762][T18678] [ 1862.072150][T18678] ====================================================== [ 1862.079258][T18678] WARNING: possible circular locking dependency detected [ 1862.086341][T18678] syzkaller #0 Not tainted [ 1862.090783][T18678] ------------------------------------------------------ [ 1862.097859][T18678] syz.0.13756/18678 is trying to acquire lock: [ 1862.104029][T18678] ffff888045555518 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1862.113048][T18678] [ 1862.113048][T18678] but task is already holding lock: [ 1862.120429][T18678] ffff8880b366a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1862.129953][T18678] [ 1862.129953][T18678] which lock already depends on the new lock. [ 1862.129953][T18678] [ 1862.140375][T18678] [ 1862.140375][T18678] the existing dependency chain (in reverse order) is: [ 1862.149404][T18678] [ 1862.149404][T18678] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1862.157334][T18678] __mutex_lock+0x19d/0x1590 [ 1862.162487][T18678] elevator_change+0x1af/0x480 [ 1862.167839][T18678] elevator_set_none+0xb5/0x140 [ 1862.173250][T18678] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1862.179717][T18678] nbd_start_device+0x189/0xb30 [ 1862.185203][T18678] nbd_genl_connect+0x1597/0x1c10 [ 1862.190787][T18678] genl_family_rcv_msg_doit+0x233/0x340 [ 1862.196898][T18678] genl_rcv_msg+0x614/0x7a0 [ 1862.202040][T18678] netlink_rcv_skb+0x226/0x4a0 [ 1862.207358][T18678] genl_rcv+0x28/0x40 [ 1862.211890][T18678] netlink_unicast+0x7bb/0x940 [ 1862.217206][T18678] netlink_sendmsg+0x813/0xb40 [ 1862.222512][T18678] ____sys_sendmsg+0x9b9/0xa20 [ 1862.227827][T18678] ___sys_sendmsg+0x2a5/0x360 [ 1862.233050][T18678] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1862.238542][T18678] do_syscall_64+0x174/0x580 [ 1862.243678][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.250113][T18678] [ 1862.250113][T18678] -> #5 (&q->q_usage_counter(io)#116){++++}-{0:0}: [ 1862.258875][T18678] blk_alloc_queue+0x544/0x690 [ 1862.264188][T18678] __blk_mq_alloc_disk+0x194/0x390 [ 1862.269846][T18678] nbd_dev_add+0x494/0xb60 [ 1862.274811][T18678] nbd_genl_connect+0x992/0x1c10 [ 1862.280297][T18678] genl_family_rcv_msg_doit+0x233/0x340 [ 1862.286396][T18678] genl_rcv_msg+0x614/0x7a0 [ 1862.291452][T18678] netlink_rcv_skb+0x226/0x4a0 [ 1862.296774][T18678] genl_rcv+0x28/0x40 [ 1862.301306][T18678] netlink_unicast+0x7bb/0x940 [ 1862.306623][T18678] netlink_sendmsg+0x813/0xb40 [ 1862.312018][T18678] ____sys_sendmsg+0x9b9/0xa20 [ 1862.317326][T18678] ___sys_sendmsg+0x2a5/0x360 [ 1862.322544][T18678] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1862.328025][T18678] do_syscall_64+0x174/0x580 [ 1862.333158][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.339594][T18678] [ 1862.339594][T18678] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1862.346909][T18678] fs_reclaim_acquire+0x71/0x100 [ 1862.352405][T18678] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1862.358757][T18678] __alloc_skb+0x1d7/0x7a0 [ 1862.363735][T18678] __ip6_append_data+0x2ea3/0x4080 [ 1862.369480][T18678] ip6_append_data+0x108/0x270 [ 1862.374792][T18678] rawv6_sendmsg+0x1298/0x18c0 [ 1862.380108][T18678] ____sys_sendmsg+0x853/0xa20 [ 1862.385418][T18678] ___sys_sendmsg+0x2a5/0x360 [ 1862.390636][T18678] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1862.396115][T18678] do_syscall_64+0x174/0x580 [ 1862.401510][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.407949][T18678] [ 1862.407949][T18678] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1862.415725][T18678] lock_sock_nested+0x41/0x100 [ 1862.421053][T18678] inet_shutdown+0x6a/0x390 [ 1862.426196][T18678] nbd_mark_nsock_dead+0x2cb/0x550 [ 1862.431864][T18678] recv_work+0x1cef/0x1e10 [ 1862.436833][T18678] process_scheduled_works+0xa8e/0x14e0 [ 1862.442923][T18678] worker_thread+0xa47/0xfb0 [ 1862.448060][T18678] kthread+0x389/0x470 [ 1862.452678][T18678] ret_from_fork+0x514/0xb70 [ 1862.457825][T18678] ret_from_fork_asm+0x1a/0x30 [ 1862.463133][T18678] [ 1862.463133][T18678] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1862.470823][T18678] __mutex_lock+0x19d/0x1590 [ 1862.475960][T18678] nbd_queue_rq+0x373/0x1150 [ 1862.481098][T18678] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1862.487187][T18678] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1862.494123][T18678] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1862.500652][T18678] blk_mq_run_hw_queue+0x348/0x4f0 [ 1862.506306][T18678] blk_mq_dispatch_list+0xd11/0xe10 [ 1862.512049][T18678] blk_mq_flush_plug_list+0x45f/0x540 [ 1862.517967][T18678] __blk_flush_plug+0x3ed/0x4d0 [ 1862.523419][T18678] __submit_bio+0x465/0x560 [ 1862.528482][T18678] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1862.534663][T18678] block_read_full_folio+0x599/0x830 [ 1862.540496][T18678] filemap_read_folio+0x12c/0x3a0 [ 1862.546070][T18678] do_read_cache_folio+0x354/0x590 [ 1862.551737][T18678] read_part_sector+0xb6/0x2b0 [ 1862.557077][T18678] adfspart_check_ICS+0xb1/0x960 [ 1862.562559][T18678] bdev_disk_changed+0x82b/0x1780 [ 1862.568129][T18678] blkdev_get_whole+0x372/0x510 [ 1862.573526][T18678] bdev_open+0x324/0xd70 [ 1862.578311][T18678] blkdev_open+0x461/0x600 [ 1862.583271][T18678] do_dentry_open+0x816/0x1380 [ 1862.588581][T18678] vfs_open+0x3b/0x340 [ 1862.593195][T18678] path_openat+0x2e3b/0x3890 [ 1862.598334][T18678] do_file_open+0x23e/0x4a0 [ 1862.603391][T18678] do_sys_openat2+0x113/0x200 [ 1862.608613][T18678] __x64_sys_openat+0x138/0x170 [ 1862.614012][T18678] do_syscall_64+0x174/0x580 [ 1862.619148][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.625585][T18678] [ 1862.625585][T18678] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1862.632832][T18678] __mutex_lock+0x19d/0x1590 [ 1862.637965][T18678] nbd_queue_rq+0xc1/0x1150 [ 1862.643018][T18678] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1862.649107][T18678] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1862.655984][T18678] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1862.662511][T18678] blk_mq_run_hw_queue+0x348/0x4f0 [ 1862.668171][T18678] blk_mq_dispatch_list+0xd11/0xe10 [ 1862.673912][T18678] blk_mq_flush_plug_list+0x45f/0x540 [ 1862.679832][T18678] __blk_flush_plug+0x3ed/0x4d0 [ 1862.685228][T18678] __submit_bio+0x465/0x560 [ 1862.690308][T18678] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1862.696500][T18678] block_read_full_folio+0x599/0x830 [ 1862.702334][T18678] filemap_read_folio+0x12c/0x3a0 [ 1862.707912][T18678] do_read_cache_folio+0x354/0x590 [ 1862.713753][T18678] read_part_sector+0xb6/0x2b0 [ 1862.719246][T18678] adfspart_check_ICS+0xb1/0x960 [ 1862.724736][T18678] bdev_disk_changed+0x82b/0x1780 [ 1862.730318][T18678] blkdev_get_whole+0x372/0x510 [ 1862.735718][T18678] bdev_open+0x324/0xd70 [ 1862.740516][T18678] blkdev_open+0x461/0x600 [ 1862.745479][T18678] do_dentry_open+0x816/0x1380 [ 1862.750795][T18678] vfs_open+0x3b/0x340 [ 1862.755410][T18678] path_openat+0x2e3b/0x3890 [ 1862.760639][T18678] do_file_open+0x23e/0x4a0 [ 1862.765783][T18678] do_sys_openat2+0x113/0x200 [ 1862.771009][T18678] __x64_sys_openat+0x138/0x170 [ 1862.776406][T18678] do_syscall_64+0x174/0x580 [ 1862.781540][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.787983][T18678] [ 1862.787983][T18678] -> #0 (set->srcu){.+.+}-{0:0}: [ 1862.795233][T18678] __lock_acquire+0x1520/0x2cd0 [ 1862.800729][T18678] lock_sync+0x9d/0x120 [ 1862.805436][T18678] __synchronize_srcu+0xc9/0x2f0 [ 1862.810924][T18678] elevator_switch+0x1e8/0x7b0 [ 1862.816241][T18678] elevator_change+0x2fa/0x480 [ 1862.821564][T18678] elevator_set_default+0x375/0x440 [ 1862.827310][T18678] blk_register_queue+0x3f3/0x4e0 [ 1862.832891][T18678] __add_disk+0x6cb/0xe30 [ 1862.837781][T18678] add_disk_fwnode+0xfb/0x4b0 [ 1862.843011][T18678] nbd_dev_add+0x733/0xb60 [ 1862.847983][T18678] nbd_genl_connect+0x992/0x1c10 [ 1862.853471][T18678] genl_family_rcv_msg_doit+0x233/0x340 [ 1862.859598][T18678] genl_rcv_msg+0x614/0x7a0 [ 1862.864686][T18678] netlink_rcv_skb+0x226/0x4a0 [ 1862.869995][T18678] genl_rcv+0x28/0x40 [ 1862.874524][T18678] netlink_unicast+0x7bb/0x940 [ 1862.879843][T18678] netlink_sendmsg+0x813/0xb40 [ 1862.885152][T18678] ____sys_sendmsg+0x9b9/0xa20 [ 1862.890460][T18678] ___sys_sendmsg+0x2a5/0x360 [ 1862.895696][T18678] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1862.901189][T18678] do_syscall_64+0x174/0x580 [ 1862.906323][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.912765][T18678] [ 1862.912765][T18678] other info that might help us debug this: [ 1862.912765][T18678] [ 1862.923096][T18678] Chain exists of: [ 1862.923096][T18678] set->srcu --> &q->q_usage_counter(io)#116 --> &q->elevator_lock [ 1862.923096][T18678] [ 1862.936883][T18678] Possible unsafe locking scenario: [ 1862.936883][T18678] [ 1862.944381][T18678] CPU0 CPU1 [ 1862.949819][T18678] ---- ---- [ 1862.955217][T18678] lock(&q->elevator_lock); [ 1862.959833][T18678] lock(&q->q_usage_counter(io)#116); [ 1862.967849][T18678] lock(&q->elevator_lock); [ 1862.974985][T18678] sync(set->srcu); [ 1862.978907][T18678] [ 1862.978907][T18678] *** DEADLOCK *** [ 1862.978907][T18678] [ 1862.987152][T18678] 6 locks held by syz.0.13756/18678: [ 1862.992452][T18678] #0: ffffffff8fe31888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1863.000734][T18678] #1: ffffffff8fe316c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1863.009768][T18678] #2: ffff8880350741c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 1863.020172][T18678] #3: ffff8880b366a200 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1863.030050][T18678] #4: ffff8880b3669c88 (&q->q_usage_counter(queue)#166){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1863.041095][T18678] #5: ffff8880b366a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1863.050977][T18678] [ 1863.050977][T18678] stack backtrace: [ 1863.056887][T18678] CPU: 0 UID: 0 PID: 18678 Comm: syz.0.13756 Not tainted syzkaller #0 PREEMPT(full) [ 1863.056915][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1863.056927][T18678] Call Trace: [ 1863.056936][T18678] [ 1863.056946][T18678] dump_stack_lvl+0xe8/0x150 [ 1863.056972][T18678] print_circular_bug+0x2e1/0x300 [ 1863.057001][T18678] check_noncircular+0x12e/0x150 [ 1863.057029][T18678] __lock_acquire+0x1520/0x2cd0 [ 1863.057051][T18678] ? check_noncircular+0xda/0x150 [ 1863.057079][T18678] ? lockdep_unlock+0x5d/0xd0 [ 1863.057095][T18678] ? __lock_acquire+0x13e8/0x2cd0 [ 1863.057119][T18678] ? __synchronize_srcu+0xb5/0x2f0 [ 1863.057137][T18678] lock_sync+0x9d/0x120 [ 1863.057155][T18678] ? __synchronize_srcu+0xb5/0x2f0 [ 1863.057177][T18678] __synchronize_srcu+0xc9/0x2f0 [ 1863.057197][T18678] ? __pfx___synchronize_srcu+0x10/0x10 [ 1863.057215][T18678] ? do_raw_spin_lock+0x12b/0x2f0 [ 1863.057249][T18678] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1863.057270][T18678] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1863.057302][T18678] ? synchronize_srcu+0x20a/0x260 [ 1863.057324][T18678] elevator_switch+0x1e8/0x7b0 [ 1863.057347][T18678] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1863.057376][T18678] elevator_change+0x2fa/0x480 [ 1863.057400][T18678] ? do_raw_spin_unlock+0xf5/0x210 [ 1863.057430][T18678] elevator_set_default+0x375/0x440 [ 1863.057456][T18678] ? __pfx_elevator_set_default+0x10/0x10 [ 1863.057484][T18678] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1863.057563][T18678] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1863.057618][T18678] blk_register_queue+0x3f3/0x4e0 [ 1863.057648][T18678] __add_disk+0x6cb/0xe30 [ 1863.057681][T18678] add_disk_fwnode+0xfb/0x4b0 [ 1863.057712][T18678] nbd_dev_add+0x733/0xb60 [ 1863.057744][T18678] ? __pfx_nbd_dev_add+0x10/0x10 [ 1863.057793][T18678] ? bpf_lsm_capable+0x9/0x20 [ 1863.057813][T18678] ? security_capable+0x7e/0x2c0 [ 1863.057846][T18678] nbd_genl_connect+0x992/0x1c10 [ 1863.057878][T18678] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1863.057908][T18678] ? rcu_is_watching+0x15/0xb0 [ 1863.057932][T18678] ? trace_kmalloc+0x2a/0xf0 [ 1863.057964][T18678] ? __nla_parse+0x40/0x60 [ 1863.057990][T18678] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1863.058021][T18678] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1863.058054][T18678] genl_family_rcv_msg_doit+0x233/0x340 [ 1863.058087][T18678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1863.058121][T18678] ? __lock_acquire+0x683/0x2cd0 [ 1863.058147][T18678] genl_rcv_msg+0x614/0x7a0 [ 1863.058177][T18678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1863.058204][T18678] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1863.058239][T18678] netlink_rcv_skb+0x226/0x4a0 [ 1863.058260][T18678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1863.058289][T18678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1863.058318][T18678] ? down_read+0x270/0x2e0 [ 1863.058342][T18678] ? genl_rcv+0xd/0x40 [ 1863.058369][T18678] genl_rcv+0x28/0x40 [ 1863.058394][T18678] netlink_unicast+0x7bb/0x940 [ 1863.058431][T18678] netlink_sendmsg+0x813/0xb40 [ 1863.058458][T18678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1863.058482][T18678] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1863.058513][T18678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1863.058539][T18678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1863.058562][T18678] ____sys_sendmsg+0x9b9/0xa20 [ 1863.058585][T18678] ? __might_fault+0xaf/0x130 [ 1863.058614][T18678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1863.058640][T18678] ? import_iovec+0x73/0xa0 [ 1863.058665][T18678] ___sys_sendmsg+0x2a5/0x360 [ 1863.058686][T18678] ? __lock_acquire+0x683/0x2cd0 [ 1863.058709][T18678] ? __pfx____sys_sendmsg+0x10/0x10 [ 1863.058734][T18678] ? futex_wake+0x4d7/0x5b0 [ 1863.058783][T18678] ? __fget_files+0x2a/0x420 [ 1863.058808][T18678] ? __fget_files+0x3a2/0x420 [ 1863.058839][T18678] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1863.058862][T18678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1863.058889][T18678] ? rcu_is_watching+0x15/0xb0 [ 1863.058917][T18678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.058939][T18678] do_syscall_64+0x174/0x580 [ 1863.058963][T18678] ? trace_irq_disable+0x3b/0x140 [ 1863.058993][T18678] ? clear_bhb_loop+0x40/0x90 [ 1863.059017][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.059038][T18678] RIP: 0033:0x7f4f8939ce59 [ 1863.059059][T18678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.059078][T18678] RSP: 002b:00007f4f8a2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.059101][T18678] RAX: ffffffffffffffda RBX: 00007f4f89615fa0 RCX: 00007f4f8939ce59 [ 1863.059118][T18678] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1863.059132][T18678] RBP: 00007f4f89432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1863.059146][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1863.059159][T18678] R13: 00007f4f89616038 R14: 00007f4f89615fa0 R15: 00007ffe72523ec8 [ 1863.059186][T18678] [ 1864.153004][T18683] bond8: option miimon: invalid value (18446744073709551607) [ 1864.161432][T18683] bond8: option miimon: allowed values 0 - 2147483647 [ 1864.175688][T18683] bond8 (unregistering): Released all slaves [ 1864.236260][ T4948] block nbd128: Receive control failed (result -32) [ 1864.484547][ C1] net_ratelimit: 27273 callbacks suppressed [ 1864.484572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.498873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.507140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.515407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.523611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.531877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.540415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.548701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.556980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.565249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.494472][ C1] net_ratelimit: 52465 callbacks suppressed [ 1869.494496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.508805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.517032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.525324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.533570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.541846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.550038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.558275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.566471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.574755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.844684][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.851964][ C0] bridge0: topology change detected, propagating [ 1869.858543][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.865790][ C0] bridge0: topology change detected, propagating [ 1870.484624][ C0] bridge0: port 3(batadv1) entered forwarding state [ 1870.491294][ C0] bridge0: topology change detected, propagating