last executing test programs: 1.664464612s ago: executing program 2 (id=2088): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000003640)=""/224, 0xe0}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0400000000000000"], 0x18}], 0x1}, 0x2000080) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) 1.492719698s ago: executing program 3 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="10205e80200005006000050004000100705e22842f5b238d0c210a16291b6acfe13602c96b51f9e9455f4a6d140bcce34dccc636a192a9e9da3149ef61dd380ea60dea08182f0a44e69aff0d11789c423dc3fdcb3ec0c54b27390e81ff7f9b4fa64a20c9ae9ee65e490360113cc06d3191062eaf0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf256808000008000300", @ANYRES32=r10, @ANYBLOB="1400c700040108020d036006683fe5f4d2d65d3c"], 0x30}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fddbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900060000006e0000001c00238006000d0008fdff05000f000100000024002380060012000700000008000900ff7f000008001500300000000800140074ffffff08000300"/80, @ANYRES32=r4, @ANYBLOB="0c009900070000005d0000000c0099007f0000003400000008000300", @ANYRES32=r10, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0xa, 0x2, 0x0) r12 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x21, 0x0}, 0x4e20, 0x2003, 'sed\x00', 0x1, 0xa7e, 0x70}, 0x2c) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r13, 0x541b, &(0x7f00000000c0)) write$bt_hci(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="03000088ee4dbc214cd20f"], 0xb) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000000)={{0x2, @rand_addr=0x64010102, 0x4f21, 0x3, 'sh\x00', 0x5, 0x8, 0xe}, {@rand_addr=0x64010102, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x26, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x5b, 0x12d5c}}, 0x44) sendmsg$sock(r11, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x200}}], 0x18}, 0x0) 1.420955575s ago: executing program 4 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000007}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x112}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x14) 1.280530899s ago: executing program 0 (id=2096): r0 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r0, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='gT/\\', 0x4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0xffffffffffffffb5) 1.219274356s ago: executing program 3 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0c85, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'erspan0\x00', @random="9a6a20d706ff"}) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x431, @empty, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300c0f97395e4e530b1afdd701a3498201968b1c855f604addc", @ANYRES32=r4, @ANYBLOB="14005a8010000180040001000600020000280000"], 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010001", 0x7) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@restrict={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @union]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x4a}, 0x20) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="660a000000000000611171000000000095002067eb58f65435eefe90d5840960505077d0557f82d6fa335d673532935d1cd49b143383821beb73fdbf895f5402df03b000008bba4236fd726a3580f35d0a9d63ce914f1f13ef98f16bec9d1270fb34fa6cbaf1c5c03e1e5e2386a923ccedca1c4b26728bfd3a3c9074d7ddc67dca8c8411352e6a71682c119d2b2b7419a488ba2dd1ece39ac21b094eaa1ef5e4ebf005615bf9f3b9d4450d1403bd0a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r10, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.152750327s ago: executing program 0 (id=2099): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0xc, 0x7c7, "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"}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001040)={0x5074, 0x7, 0xfff7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_team\x00'}) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000010c0)={0x0, 0x8}, 0x8) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000001100)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8a, 0xfa, 0x20, @private1, @empty, 0x7, 0x40, 0xfffffff6, 0x9}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x4) getpeername$packet(r2, &(0x7f0000001300)={0x11, 0x0, 0x0}, &(0x7f0000001340)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x140, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000001540)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) syz_emit_ethernet(0xcc, &(0x7f00000017c0)={@remote, @empty, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0xccaa, 0x0, 0x1}, {0x200}, {0xffde}, {0x58}, {0x81}], @generic="cf195d77ebce3a73469e46533fcff71b02b7225309cafc8988496baf4765983382e79857f3d584305c8673261824e1f2ef1859dce970eee189994be0aaa88321f82eb2ab3f66f21de38f7baa8d83bb8f2fd1947b8d0a199d639c757e8ad86999adb956ae0c4cde9ce94479b9ebf70cbb76bd345196db8ce1f5027c57aa81db287fef7ce91bffef4f3b9a3856f0a08a97ed51562ce19c18ebaaf47eb293b6778902b1acaf99ea"}}}}, &(0x7f00000018c0)={0x0, 0x2, [0xc85, 0x45c, 0xd5f, 0x11c]}) r8 = socket(0xa, 0x800, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) recvmmsg(r1, &(0x7f0000005940)=[{{&(0x7f0000001900)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/89, 0x59}, {&(0x7f0000001a00)=""/243, 0xf3}, {&(0x7f0000001b00)=""/113, 0x71}], 0x3}}, {{&(0x7f0000001bc0)=@isdn, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000001d00)=""/241, 0xf1}, {&(0x7f0000001e00)=""/137, 0x89}, {&(0x7f0000001ec0)=""/165, 0xa5}], 0x4, &(0x7f0000001fc0)=""/13, 0xd}, 0x80000000}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002080)=""/88, 0x58}, {&(0x7f0000002100)=""/81, 0x51}, {&(0x7f0000002180)=""/166, 0xa6}], 0x3, &(0x7f0000002280)=""/22, 0x16}, 0xfbb0}, {{&(0x7f00000022c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002340)=""/200, 0xc8}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/91, 0x5b}, {&(0x7f0000002500)=""/178, 0xb2}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/178, 0xb2}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x654}, {{&(0x7f0000004700)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004780)=""/208, 0xd0}], 0x1}, 0x9}, {{&(0x7f00000048c0)=@sco, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/40, 0x28}, {&(0x7f0000004980)=""/152, 0x98}, {&(0x7f0000004a40)=""/208, 0xd0}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/121, 0x79}, {&(0x7f0000004cc0)=""/89, 0x59}], 0x6, &(0x7f0000004dc0)=""/89, 0x59}, 0x4}, {{&(0x7f0000004e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004ec0)=""/110, 0x6e}], 0x1, &(0x7f0000004f80)=""/196, 0xc4}, 0x6}, {{&(0x7f0000005080)=@phonet, 0x80, &(0x7f0000005400)=[{&(0x7f0000005100)=""/243, 0xf3}, {&(0x7f0000005200)=""/242, 0xf2}, {&(0x7f0000005300)=""/178, 0xb2}, {&(0x7f00000053c0)=""/7, 0x7}], 0x4, &(0x7f0000005440)=""/92, 0x5c}}, {{&(0x7f00000054c0)=@x25, 0x80, &(0x7f0000005840)=[{&(0x7f0000005540)=""/238, 0xee}, {&(0x7f0000005640)=""/11, 0xb}, {&(0x7f0000005680)=""/157, 0x9d}, {&(0x7f0000005740)=""/163, 0xa3}, {&(0x7f0000005800)=""/3, 0x3}], 0x5, &(0x7f00000058c0)=""/101, 0x65}, 0xd}], 0x9, 0x100, &(0x7f0000005b80)={0x77359400}) write$cgroup_subtree(r2, &(0x7f0000005bc0)={[{0x2d, 'rlimit'}, {0x2d, 'io'}, {0x3b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'rdma'}, {0x2b, 'blkio'}]}, 0x2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005c80)={{r2, 0xffffffffffffffff}, &(0x7f0000005c00), &(0x7f0000005c40)=r2}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r6, r2, 0x1, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006000)={0x6, 0x14, &(0x7f0000005cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @ldst={0x0, 0x0, 0x0, 0x5f19856e717f8d01, 0x7, 0xfffffffffffffff0, 0x4}, @generic={0x2, 0x9, 0x0, 0x596d, 0xfffffff9}, @call={0x85, 0x0, 0x0, 0x98}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @generic={0x1, 0x4, 0x6, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x75}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}]}, &(0x7f0000005d80)='syzkaller\x00', 0x2, 0xe7, &(0x7f0000005dc0)=""/231, 0x41000, 0x0, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000005ec0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000005f80)=[r1, r11, 0xffffffffffffffff, r1, r2, r1], &(0x7f0000005fc0)=[{0x3, 0x1, 0x3, 0x3}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000060c0)={0x0, 0xf, 0x5, [0x9, 0x5f, 0x3, 0x4, 0x3]}, &(0x7f0000006100)=0x12) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000006140)=@assoc_value={r12, 0x94a}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000006180)={r12, 0x7f}, &(0x7f00000061c0)=0x8) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006240), r9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000006380)={&(0x7f0000006200), 0xc, &(0x7f0000006340)={&(0x7f00000062c0)={0x4c, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000006400), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000006640)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006600)={&(0x7f0000006440)={0x1b0, r15, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) 1.112279838s ago: executing program 4 (id=2100): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x2, 0x4) 963.420716ms ago: executing program 3 (id=2101): sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_address={0x3, 0x12a5769c372b91d6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x10000085) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x20004010) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390423bd6001fbdbdf25027650b9", @ANYRES32=r4, @ANYBLOB="81b8000000000000280012800b0001006970366772650000180002800400120006000200090000000800140067060000"], 0x48}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @local}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0xfe33) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xffffffff) r8 = accept4(r7, 0x0, 0x0, 0x0) listen(r8, 0x3ff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x80800005, 0x4, 0x40}]}]}}, &(0x7f0000000340)=""/5, 0x32, 0x5, 0x1, 0x4}, 0x28) r9 = socket(0x2b, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x3, &(0x7f0000000640)=0x6, 0x4) 896.946497ms ago: executing program 0 (id=2102): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x1, 0x1b}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)="fab06112962d679995ee97ac2d076d971360560591951a1b2e53227d68ef810db5924d4f34f59277e6e87085659d4d", 0x2f}, {&(0x7f0000000600)="fb3d454eb946b3e76dd52a17cd4f5b2145e8a29c3503e477e704e0b253dec0b1f13dff1686e622130718b34a37cf2ab62103c6841fbc1442ac93375a95ff385edd6ccb98010294dae4c993c9727611b664adcc084777c2108fd47d80f91300ca2a1f941999966b41ee71667d218c3a1d42fe1d7eeac3cd1d99818ec91e978fb30f85b17b00d24d83afc126feff25", 0x8e}], 0x2, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x18}, 0x4000) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}]}, 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) r8 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80800) ioctl(r8, 0x8, &(0x7f0000000900)="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") 894.805837ms ago: executing program 4 (id=2103): socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 813.004842ms ago: executing program 3 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) getsockname$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x3, 0x280, 0x41, @mcast2, @private1, 0x80, 0x8000, 0x5}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 729.394436ms ago: executing program 2 (id=2105): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c8, &(0x7f0000000000)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x9f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000100)="3ce51cb160721c2692748b1385a84127259fd2", 0x13}, {&(0x7f0000000140)="50bfd9dfcea2a256a3d2117462dba00fd948d8bf6f29bcdee86eb4020287885b35a8de91a39f170f7c", 0x29}, {&(0x7f00000001c0)="0a1d2fd6d2a307a36a29dc29008c3a06d066fa9d9d551716f5c595aa9ac97ae7848d", 0x22}], 0x4}, 0x0) 628.696168ms ago: executing program 2 (id=2106): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c91ffffff0601010000b40000000005000100070b00000000000000"], 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2c, 0x0, 0x1, 0x4}]}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/13], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x941}, 0x94) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x80000) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000300)=@req3={0x800, 0xfffffffc, 0x4, 0x5, 0x5b, 0x7, 0xa}, 0x1c) 627.714345ms ago: executing program 3 (id=2107): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x40) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) 581.185488ms ago: executing program 4 (id=2108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000880), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x6748}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c890}, 0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000001000000000", @ANYRES16=r3, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40090) 491.795475ms ago: executing program 4 (id=2109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000015c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000040006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) 491.164912ms ago: executing program 2 (id=2110): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) 490.594771ms ago: executing program 3 (id=2111): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xd, [{@loopback, 0x100000}]}]}}}}}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000600)=0x80000002, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9fc88982d56f6d}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40810) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) listen(r2, 0x7fffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000180)={r5, &(0x7f0000000000)='\x00', 0x800, &(0x7f0000000040)={@align=0x7fffffffffffffff, {0x8, 0x7, 0x1, 0x3b0a}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000240)={r8, 0xf}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r7, 0x40106e80, &(0x7f0000000380)={0x7, 0x1}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r10, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000300)=""/45, &(0x7f0000000340)=0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000001010104000000003c0002802c00018014000300dba324d9c5b1fe8000000000000000000000000000aa1400db51077ecfb9ec39358eb5783b37f90400200100000000000000000000000000ff7f00000000000000000000000800074000"], 0x5c}}, 0x0) 427.337138ms ago: executing program 4 (id=2113): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) epoll_create1(0xcd52dcdb6de9c7d3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) recvmmsg(r0, &(0x7f0000009180)=[{{&(0x7f0000000040)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/19, 0x13}, {&(0x7f0000001d00)=""/5, 0x5}, {&(0x7f0000001d40)=""/159, 0x9f}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000001e40)=""/159, 0x9f}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x9, &(0x7f0000002fc0)=""/146, 0x92}, 0x1}, {{&(0x7f0000003080)=@x25={0x9, @remote}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/143, 0x8f}, {&(0x7f0000003300)=""/29, 0x1d}, {&(0x7f0000003340)=""/123, 0x7b}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/15, 0xf}, {&(0x7f0000003500)=""/143, 0x8f}, {&(0x7f00000035c0)=""/59, 0x3b}], 0x9}}, {{&(0x7f00000036c0)=@can, 0x80, &(0x7f0000004800)=[{&(0x7f0000003740)=""/67, 0x43}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/61, 0x3d}], 0x3, &(0x7f0000004840)=""/198, 0xc6}, 0x5}, {{&(0x7f0000004940)=@rc, 0x80, &(0x7f0000007cc0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/56, 0x38}, {&(0x7f0000005a00)=""/234, 0xea}, {&(0x7f0000005b00)=""/195, 0xc3}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000007c00)=""/130, 0x82}], 0x7}, 0x6}, {{&(0x7f0000007d40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007dc0)=""/254, 0xfe}, {&(0x7f0000007ec0)=""/232, 0xe8}], 0x2, &(0x7f0000008000)=""/252, 0xfc}, 0x7fffffff}, {{&(0x7f0000008100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000008600)=[{&(0x7f0000008180)=""/145, 0x91}, {&(0x7f0000008240)=""/18, 0x12}, {&(0x7f0000008280)=""/179, 0xb3}, {&(0x7f0000008340)=""/38, 0x26}, {&(0x7f0000008380)=""/185, 0xb9}, {&(0x7f0000008440)=""/165, 0xa5}, {&(0x7f0000008500)=""/227, 0xe3}], 0x7, &(0x7f0000008680)=""/133, 0x85}, 0x5}, {{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000008740)=""/14, 0xe}, {&(0x7f0000008780)=""/160, 0xa0}, {&(0x7f0000008840)=""/236, 0xec}, {&(0x7f0000008940)=""/220, 0xdc}, {&(0x7f0000008a40)=""/207, 0xcf}, {&(0x7f0000008b40)=""/88, 0x58}, {&(0x7f0000008bc0)=""/58, 0x3a}, {&(0x7f0000008c00)=""/107, 0x6b}], 0x8, &(0x7f0000000140)=""/63, 0x3f}, 0x1}, {{&(0x7f0000008d40)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000008dc0)=""/153, 0x99}, {&(0x7f0000008e80)=""/136, 0x88}, {&(0x7f0000008f40)=""/220, 0xdc}, {&(0x7f0000009040)=""/77, 0x4d}], 0x4, &(0x7f0000009100)=""/96, 0x60}, 0x2}], 0x8, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) 364.934835ms ago: executing program 2 (id=2114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x805}, 0x40011) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 345.862956ms ago: executing program 2 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYRES64=r1, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES16=r1], 0x48) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000000033890b23051516"], 0x14}}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="040001b0000000c1"], 0x8) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x7ff, @mcast2, 0x1}}}, &(0x7f0000000040)=0x84) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f00000009c0)=""/2, 0x2}, {&(0x7f0000000a00)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000001b40)=""/90, 0x5a}, 0x36f7}, {{&(0x7f0000001bc0)=@pptp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c40)=""/72, 0x48}, {&(0x7f0000001cc0)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/245, 0xf5}, {&(0x7f0000001ec0)=""/62, 0x3e}, {&(0x7f0000001f00)=""/168, 0xa8}], 0x5}, 0x34a}], 0x2, 0x10002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x32aa, 0x8, 0x5, 0x7, 0x4}, &(0x7f0000000440)={0x9b, 0x8, 0x0, 0x1, 0x5, 0x4, 0x4, 0x4}, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0xff, 0x0, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000100)={{r0}, 0x3, 0x8, 0xc8}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r9, 0x0, 0x0, 0x0) 315.269231ms ago: executing program 1 (id=2116): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c8, &(0x7f0000000000)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x9f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000100)="3ce51cb160721c2692748b1385a84127259fd2", 0x13}, {&(0x7f0000000140)="50bfd9dfcea2a256a3d2117462dba00fd948d8bf6f29bcdee86eb4020287885b35a8de91a39f170f7c", 0x29}, {&(0x7f00000001c0)="0a1d2fd6d2a307a36a29dc29008c3a06d066fa9d9d551716f5c595aa9ac97ae7848d", 0x22}], 0x4}, 0x0) 274.291721ms ago: executing program 1 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f4, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x540ee4ca}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}]}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "a261ac3bffbdb2fcb44be2787e73b36235fde40f0a32bd92290ca199a813313d9f00b345a2c64f6836ef1508c131a531aec5c8ff5a5c0f8a81b3923e6bfeb9fed1796f8a1cd0f880f877ad7733bc6453cc7f3d5594d610144b3be827e60ba02421a3109bc21c3ae26886d049ec8e4a6217cdb1104efe687b2b508b5b7d33d4d8faa09e7bc87467907c3d56646f80eccc05d8549d21bd661c0c6039dc93a65ed8f8efca26c5930ca8a86487428a50b786c7b5d635634c80728c6766bf1df7596ba4fe223924c216353048a55ac9f1313083"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "482396ccee4c0404ed920c7b50de6ed16a624898ee4c1fe49fa0a30f34eccaffead5f2e0af9a347ed55a8b07a7840d98feed214b41859ccb0e28961b789c593ea0dea213f8b2127dae85a81afed26da6d1dbb1b99175b3f6fd82112ecddf6949fa0252f17816963e00324bf55378931dcb79985279be89d1900c44"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x44094}, 0x240008c0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/18, 0x12}], 0x1, &(0x7f0000000640)=""/139, 0x8b}, 0x4}, {{&(0x7f0000000700)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000780)=""/243, 0xf3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/255, 0xff}, {&(0x7f0000001980)=""/65, 0x41}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/197, 0xc5}], 0x6, &(0x7f0000002b80)=""/233, 0xe9}, 0x5}, {{&(0x7f0000002c80), 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d00)=""/197, 0xc5}, {&(0x7f0000002e00)=""/192, 0xc0}], 0x2, &(0x7f0000002f00)=""/82, 0x52}, 0x9}, {{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f0000003340)=[{&(0x7f0000003000)=""/165, 0xa5}, {&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/87, 0x57}, {&(0x7f0000003240)=""/242, 0xf2}], 0x5, &(0x7f00000033c0)=""/233, 0xe9}, 0xfffffffd}], 0x4, 0x43, &(0x7f00000035c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003640), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000036c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003740)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000003840)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80882ee0bbd02892}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x54, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x54}}, 0x884) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000038c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000003900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000003a00)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x2c, r12, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x8040) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000003a40)={'ip6_vti0\x00', {0x2, 0x4e24, @loopback}}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x0, 0x0, {0xffff, 0x1000, 0x0, 0x10, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0xf, 0x2}}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x5, 0x1}, {0x4}, {0xb}, {0x18}, {0x48, 0x1}, {0x1b}, {0x18, 0x1}, {0x4}, {0x18, 0x1}, {0x2}, {0x6c, 0x1}, {0xb}, {0x6}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x68}}, 0x4044000) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000003bc0)={0x0, 0x6, 0x7fff, 0x1}, &(0x7f0000003c00)=0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r15, &(0x7f0000003d00)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048014}, 0x14000080) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = gettid() ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000003e80)={0xffffffffffffffff, &(0x7f0000003d80)='-):&(%\\\x00', 0x216400, &(0x7f0000003dc0)={@align=0x7, {0x0, 0x7fff, 0x4, 0xea0d}}, 0x80000001, &(0x7f0000003e00)={@_ha_fsid}, &(0x7f0000003e40)=0x4}) r19 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r16, &(0x7f0000004080)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004040)={&(0x7f0000003ec0)={0x154, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r17}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r18}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r19}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x10044) sendmsg$DEVLINK_CMD_SB_POOL_GET(r18, &(0x7f0000004300)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000042c0)={&(0x7f0000004140)={0x154, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfa}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x1b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x64ce}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ae1}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x154}}, 0x4) 177.104041ms ago: executing program 1 (id=2118): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xfdaf) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async) r7 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$NILFS_IOCTL_GET_SUINFO(r7, 0x80186e84, &(0x7f0000000240)={&(0x7f00000000c0)=[{0xa6d, 0x8}], 0x1, 0x10, 0x8, 0x8}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x422000, 0x0) (async) r9 = getpid() r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r16 = syz_open_procfs$namespace(r13, &(0x7f0000001780)='ns/ipc\x00') (async) r17 = getpid() sendmmsg$unix(r12, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r17, r14}}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r18 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r18, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) (async) r19 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) (async) r20 = gettid() sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="d49673f7aca4253d2746190ec4b4b8c0953feb4fc6e25a052611faff0410b72269dd", 0x22}, {&(0x7f00000002c0)="3e518a2646e291d329f54ff8d8d72cb9d2435c6a69c58c38c8a850ce7c207b4b97c4a0bbb1638555cf9962b16800c7c060a97e8611920149caa90a19d1291b43da38dec6bf0f2e9d5c70e6176af584bf78de29f0a727ed257daf1832c60db736c33be7ea64868a43306d38dd313786808db224ed445059fa63f329ce7a2a88c154bc2fa6d5df3620fffa97319ab643670c42cdd770fe976dc17821f65755", 0x9e}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r15}}}, @rights={{0x18, 0x1, 0x1, [r18, r3]}}, @rights={{0x1c, 0x1, 0x1, [r19, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee00, 0xee00}}}], 0xb8, 0x20004010}, 0xc080) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3ff, 0x1, 0x7, 0x1}, {0x7fff, 0x8, 0x3, 0x1ff}, {0x2, 0x9, 0x8c, 0x4}, {0x7, 0x0, 0x3, 0x69e}]}) 176.534052ms ago: executing program 0 (id=2119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x80000000, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000600)}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f00000005c0)={0x2c8, 0x27, 0x1, 0x70bd27, 0x25dfdbfd, {0x1}, [@generic="8c6be6c08a56ab4094988ca1aa75461f7fa518cd329741e25d23b97dd3a1a101c99f25b9371cf3a7737cf365ab5212c24819a558fbb882b99a53dd77f0d63ea51b9aec716df873f556abc6afc6268f5b060d17df14c1193f80a1060bfc9e4c0b884bbb519e3ea2ad70abd230275b9701fa9f7d53a973659c512674287e6b4d6c788ab1898e0719b2cffe1759c78c4459a4a64bcd6015a532ef122e2ab8804e0765870b4e92f1d79bfb5c433d2829a773f0679f", @generic="000f1c413e2a92da83b5186c813ffdb1d84c566d13412c58a4d19a3b40a8c79373fecf541c5d2b3be426ad70329e44206b978b19867020f82b7eb2dd2bc8c2313f696fa78d3c7fddb1bae77a49ec526eaf90def5838565f6fed1546981575771516bf2af4a316dcd6722c0a1c50d6795b19baee13cc2465979ccd92613da1af3de9c118f77e0a8f8720db85e2c51544aee42dac42443a7f5d43be58c0f8df65249fda03ff9c838a31b7e209c2c3dfe79373f3ba98cc2b0d52b39aa64e1db1b57873b6b1ec0a261bc6b829747ca09e1", @generic="6d7d195cc48d8db0976c91d983787e4d86b149e7ec4fc3a7e8c8ac3790026fe3a33b58121d3a4a7d250fdd3c61b7b1dc0c25016243378e151354abb69cca1c565a77e586607b7b03652188de56bd1b85b546a582ba84033bb3c8b26d7aa7ea94b554baeda21341d64600ac", @generic="faa42543d9abbf0429204c050e892e402d742438d81285b38030f7cd9bfe1720c6cab1fa492e56e4eeb664657eaa8441884dbd3059f1fe71b595050605ed2d6916bcd107e32521a60d742f16c7bd7c40e6f35522a6d46b54a3b15c2e80a3bc4dfe61288ce33cf9f80634f9335774ecef21a860a7cb4d99e4a293dd952de0a33e7ec39a2339695ed5405c9463f4275f6351d6f5d9cf1d19f80ffefab75f846cf5747eb39b3ca0c6c2637fe3b64bf509320333a94b", @nested={0x10, 0x112, 0x0, 0x1, [@typed={0xc, 0x156, 0x0, 0x0, @u64=0x8e}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x8000) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) 139.441516ms ago: executing program 1 (id=2120): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (rerun: 32) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xe0) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 88.791911ms ago: executing program 0 (id=2121): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 21.080699ms ago: executing program 1 (id=2122): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1}) unshare(0x8000600) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000006900)=[{{&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0) 2.458018ms ago: executing program 0 (id=2123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000340)=""/171, 0x0, 0xab, 0x0, 0x6}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0xa2, &(0x7f00000003c0)}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0) 0s ago: executing program 1 (id=2124): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) kernel console output (not intermixed with test programs): batadv_slave_0 [ 76.402736][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.440887][ T5935] xt_bpf: check failed: parse error [ 76.491461][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.492517][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.526779][ T178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.544385][ T178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.575145][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.594627][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.600358][ T5833] Bluetooth: hci4: command tx timeout [ 76.606409][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.608418][ T5836] Bluetooth: hci0: command tx timeout [ 76.618932][ T5145] Bluetooth: hci1: command tx timeout [ 76.623262][ T5836] Bluetooth: hci3: command tx timeout [ 76.637638][ T178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.667914][ T5836] Bluetooth: hci2: command tx timeout [ 76.676824][ T178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.730065][ T178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.744134][ T178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.790907][ T178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.815863][ T178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.858971][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.888125][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.004274][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.023711][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.077499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.085359][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.151554][ T5963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12'. [ 77.188721][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.196945][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.228532][ T5970] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 77.236866][ T5970] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 77.273930][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.277483][ T5970] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.295139][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.349531][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.401012][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.427735][ T5973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.707146][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.930485][ T6003] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 78.063056][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.071450][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.116182][ T6013] x_tables: duplicate underflow at hook 1 [ 78.217248][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.330069][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.345210][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.460478][ T1158] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.497519][ T1158] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.588822][ T1158] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.627989][ T1158] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.638105][ T6029] netlink: 'syz.1.25': attribute type 8 has an invalid length. [ 78.667580][ T5836] Bluetooth: hci3: command tx timeout [ 78.673154][ T5824] Bluetooth: hci4: command tx timeout [ 78.682160][ T5824] Bluetooth: hci1: command tx timeout [ 78.682306][ T5833] Bluetooth: hci0: command tx timeout [ 78.730708][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.757612][ T5833] Bluetooth: hci2: command tx timeout [ 78.810307][ T6040] netlink: 'syz.4.31': attribute type 30 has an invalid length. [ 78.837520][ T6046] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 78.956968][ T6040] bond1: option arp_missed_max: invalid value (0) [ 78.987017][ T6040] bond1: option arp_missed_max: allowed values 1 - 255 [ 79.018211][ T6040] bond1 (unregistering): Released all slaves [ 79.073152][ T6046] vþ: entered promiscuous mode [ 79.309438][ T6070] tipc: Started in network mode [ 79.324809][ T6070] tipc: Node identity ac14140f, cluster identity 4711 [ 79.356383][ T6070] tipc: New replicast peer: 255.255.255.255 [ 79.379124][ T6070] tipc: Enabled bearer , priority 10 [ 79.415582][ T6078] openvswitch: netlink: Flow key attr not present in new flow. [ 79.611743][ T6080] vlan2: entered promiscuous mode [ 79.616844][ T6080] bridge0: entered promiscuous mode [ 79.777976][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 80.318969][ T6104] netlink: 72 bytes leftover after parsing attributes in process `syz.1.48'. [ 80.329465][ T6104] --map-set only usable from mangle table [ 80.350226][ T6105] xt_hashlimit: size too large, truncated to 1048576 [ 80.378818][ T5933] tipc: Node number set to 2886997007 [ 80.476179][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.50'. [ 80.782843][ T6118] syzkaller0: entered promiscuous mode [ 80.789245][ T6118] syzkaller0: entered allmulticast mode [ 81.022839][ T6129] Zero length message leads to an empty skb [ 81.241816][ T6139] tipc: Started in network mode [ 81.262258][ T6139] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 81.280139][ T6139] tipc: Enabled bearer , priority 24 [ 81.283515][ T6146] netlink: Conntrack attr has 4 unknown bytes [ 81.306104][ T6139] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 81.675522][ T6159] __nla_validate_parse: 4 callbacks suppressed [ 81.675545][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 81.696721][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 81.748238][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 81.748276][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 81.767063][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 81.817901][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 81.852283][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 82.036343][ T6171] warning: `syz.4.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.503258][ T64] syzkaller0: tun_net_xmit 76 [ 82.529101][ T5933] syzkaller0: tun_net_xmit 76 [ 82.534225][ T64] syzkaller0: tun_net_xmit 48 [ 82.539981][ T5914] tipc: Node number set to 10005162 [ 82.546854][ T6203] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 82.558163][ T6203] netlink: 96 bytes leftover after parsing attributes in process `syz.2.80'. [ 82.569076][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.2.80'. [ 82.594420][ T6203] netlink: 658 bytes leftover after parsing attributes in process `syz.2.80'. [ 83.537875][ T6211] bridge0: port 3(team0) entered blocking state [ 83.553039][ T6211] bridge0: port 3(team0) entered disabled state [ 83.563249][ T6211] team0: entered allmulticast mode [ 83.597942][ T6211] team_slave_0: entered allmulticast mode [ 83.603853][ T6211] team_slave_1: entered allmulticast mode [ 83.622219][ T6211] team0: entered promiscuous mode [ 83.628612][ T6211] team_slave_0: entered promiscuous mode [ 83.637780][ T6211] team_slave_1: entered promiscuous mode [ 83.644450][ T6211] bridge0: port 3(team0) entered blocking state [ 83.651086][ T6211] bridge0: port 3(team0) entered forwarding state [ 83.679145][ T6215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.194717][ T6249] trusted_key: syz.4.96 sent an empty control message without MSG_MORE. [ 84.266981][ T6251] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 84.340039][ T6251] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.665861][ T6284] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 84.719427][ T6283] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 84.812387][ T6291] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 84.830868][ T6291] bond1 (unregistering): Released all slaves [ 86.298267][ T6352] IPv6: sit1: Disabled Multicast RS [ 86.305323][ T6352] sit1: entered allmulticast mode [ 86.382408][ T6359] Bluetooth: MGMT ver 1.23 [ 86.523284][ T6366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.556622][ T6366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.649985][ T6373] veth0: entered promiscuous mode [ 86.665143][ T6373] veth0: left promiscuous mode [ 86.860219][ T1211] cfg80211: failed to load regulatory.db [ 86.914417][ T6385] tipc: Failed to obtain node identity [ 86.920278][ T6385] tipc: Enabling of bearer rejected, failed to enable media [ 86.937152][ T6384] tipc: Failed to obtain node identity [ 86.977676][ T6384] tipc: Enabling of bearer rejected, failed to enable media [ 87.101212][ T6391] bond1: entered allmulticast mode [ 87.120162][ T6396] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 87.170061][ T6396] __nla_validate_parse: 5 callbacks suppressed [ 87.170080][ T6396] netlink: 224 bytes leftover after parsing attributes in process `syz.3.136'. [ 87.419193][ T6375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.434971][ T6410] C: renamed from lo (while UP) [ 87.449267][ T6410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 87.479664][ T6412] ip6gre1: entered promiscuous mode [ 87.484928][ T6412] ip6gre1: entered allmulticast mode [ 87.951826][ T6433] bond1: entered allmulticast mode [ 87.952529][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 87.969356][ T6433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.983609][ T6439] macvlan2: entered promiscuous mode [ 87.994999][ T6439] macvlan2: entered allmulticast mode [ 88.024358][ T6439] bond1: entered promiscuous mode [ 88.062776][ T6439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.087160][ T6439] bond1: left promiscuous mode [ 88.143118][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 89.150471][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.182'. [ 89.252702][ T6508] bond0: entered promiscuous mode [ 89.312734][ T6508] bond_slave_0: entered promiscuous mode [ 89.336827][ T6508] bond_slave_1: entered promiscuous mode [ 89.357298][ T6508] batadv_slave_0: entered promiscuous mode [ 89.377937][ T6508] batadv_slave_0: left promiscuous mode [ 89.393927][ T6508] bond0: left promiscuous mode [ 89.410025][ T6508] bond_slave_0: left promiscuous mode [ 89.439289][ T6508] bond_slave_1: left promiscuous mode [ 89.503396][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 89.728357][ T6530] tipc: Enabled bearer , priority 0 [ 89.763870][ T6523] syzkaller0: entered promiscuous mode [ 89.781949][ T6523] syzkaller0: entered allmulticast mode [ 89.842017][ T6523] tipc: Resetting bearer [ 89.861242][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.908600][ T6521] tipc: Resetting bearer [ 89.958715][ T6521] tipc: Disabling bearer [ 90.135588][ T6537] syzkaller0: entered promiscuous mode [ 90.154862][ T6537] syzkaller0: entered allmulticast mode [ 91.443052][ T6559] syzkaller0: entered promiscuous mode [ 91.448910][ T6559] syzkaller0: entered allmulticast mode [ 91.605353][ T6573] netlink: zone id is out of range [ 91.631517][ T6573] netlink: zone id is out of range [ 91.636700][ T6573] netlink: set zone limit has 8 unknown bytes [ 91.707780][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.289378][ T6612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.219'. [ 92.594539][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 94.886019][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 94.919770][ T6723] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 94.935808][ T6720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.961459][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 95.002293][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 95.253174][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.305521][ T6747] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 95.370158][ T6741] bridge_slave_0 (unregistering): left allmulticast mode [ 95.378730][ T6741] bridge_slave_0 (unregistering): left promiscuous mode [ 95.386163][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.389146][ T6756] sctp: [Deprecated]: syz.2.274 (pid 6756) Use of int in max_burst socket option deprecated. [ 95.389146][ T6756] Use struct sctp_assoc_value instead [ 95.463503][ T6750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.508668][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.531562][ T6747] bridge_slave_1: left allmulticast mode [ 95.568611][ T6747] bridge_slave_1: left promiscuous mode [ 95.579323][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.579384][ T6765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.278'. [ 95.619511][ T6747] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 95.631490][ T6769] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 95.641835][ T6769] netlink: 224 bytes leftover after parsing attributes in process `syz.3.277'. [ 95.682918][ T6765] : renamed from hsr0 [ 95.743647][ T6771] netlink: 996 bytes leftover after parsing attributes in process `syz.0.279'. [ 95.845194][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 95.921370][ T6777] bridge0: port 3(ipvlan2) entered blocking state [ 95.999222][ T6777] bridge0: port 3(ipvlan2) entered disabled state [ 96.027163][ T6777] ipvlan2: entered allmulticast mode [ 96.050635][ T6777] bridge0: entered allmulticast mode [ 96.068814][ T6777] ipvlan2: left allmulticast mode [ 96.117195][ T6777] bridge0: left allmulticast mode [ 96.170464][ T6803] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 96.358044][ T6800] syzkaller0: entered promiscuous mode [ 96.363711][ T6800] syzkaller0: entered allmulticast mode [ 96.521655][ T6808] syzkaller0: entered promiscuous mode [ 96.552693][ T6808] syzkaller0: entered allmulticast mode [ 97.815665][ T6821] pim6reg: entered allmulticast mode [ 97.829162][ T6817] bridge_slave_0 (unregistering): left allmulticast mode [ 97.836396][ T6817] bridge_slave_0 (unregistering): left promiscuous mode [ 97.844565][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.267703][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.251088][ T6846] tipc: Started in network mode [ 117.256027][ T6846] tipc: Node identity ac141441, cluster identity 4711 [ 117.274799][ T6846] tipc: Enabled bearer , priority 10 [ 117.306275][ T6855] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 117.353938][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.547749][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.619753][ T6873] syzkaller0: entered promiscuous mode [ 117.627230][ T6873] syzkaller0: entered allmulticast mode [ 117.736159][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'. [ 117.753251][ T6879] vlan2: entered promiscuous mode [ 117.774386][ T6879] ip6gretap0: entered promiscuous mode [ 117.896548][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 117.982821][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 118.064280][ T6900] bond0: entered promiscuous mode [ 118.079817][ T6900] bond_slave_0: entered promiscuous mode [ 118.103485][ T6900] bond_slave_1: entered promiscuous mode [ 118.129603][ T6900] gretap0: entered promiscuous mode [ 118.137559][ T6900] hsr1: entered promiscuous mode [ 118.310761][ T6914] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.319'. [ 118.359373][ T6918] syzkaller1: entered promiscuous mode [ 118.369550][ T6918] syzkaller1: entered allmulticast mode [ 118.388396][ T24] tipc: Node number set to 2886997057 [ 118.445688][ T6923] syzkaller0: entered promiscuous mode [ 118.461180][ T6923] syzkaller0: entered allmulticast mode [ 118.737001][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 118.782696][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 118.840151][ T6948] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 118.925840][ T6948] bond2: (slave gretap1): making interface the new active one [ 118.939896][ T6948] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 119.083426][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 119.117802][ T6959] bond0: entered promiscuous mode [ 119.127523][ T6959] bond_slave_0: entered promiscuous mode [ 119.140476][ T6959] bond_slave_1: entered promiscuous mode [ 119.152016][ T6959] bridge_slave_1: entered promiscuous mode [ 119.170676][ T6959] gretap0: entered promiscuous mode [ 119.177472][ T6959] debugfs: 'hsr1' already exists in 'hsr' [ 119.183497][ T6959] Cannot create hsr debugfs directory [ 119.271919][ T6963] netlink: 'syz.4.332': attribute type 3 has an invalid length. [ 119.351771][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 119.578764][ T6984] syzkaller0: entered promiscuous mode [ 119.608863][ T6984] syzkaller0: entered allmulticast mode [ 119.850287][ T6999] netlink: 27 bytes leftover after parsing attributes in process `syz.1.343'. [ 119.955061][ T7007] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 120.138388][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 120.178022][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 120.217574][ T7017] Bluetooth: MGMT ver 1.23 [ 120.377768][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.424536][ T7021] bridge_slave_0 (unregistering): left allmulticast mode [ 120.449201][ T7021] bridge_slave_0 (unregistering): left promiscuous mode [ 120.469583][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.781113][ T7041] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 120.839351][ T7045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.032651][ T1153] tipc: Subscription rejected, illegal request [ 121.099180][ T7060] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 121.369362][ T7071] macvtap1: entered promiscuous mode [ 121.383491][ T7071] vlan0: entered promiscuous mode [ 121.398129][ T7071] macvtap1: entered allmulticast mode [ 121.408748][ T7071] vlan0: entered allmulticast mode [ 121.425784][ T7071] veth0_vlan: entered allmulticast mode [ 121.622332][ T7096] netlink: 'syz.4.373': attribute type 3 has an invalid length. [ 121.633739][ T7094] syzkaller0: entered promiscuous mode [ 121.665941][ T7094] syzkaller0: entered allmulticast mode [ 122.037999][ T7107] scsi_nl_rcv_msg: discarding partial skb [ 122.105201][ T7120] bond1: entered promiscuous mode [ 122.111358][ T7120] bond1: entered allmulticast mode [ 122.122284][ T7120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.494197][ T7135] bond3: option xmit_hash_policy: invalid value (64) [ 122.503956][ T7135] bond3 (unregistering): Released all slaves [ 122.585846][ T7144] ipvlan2: entered allmulticast mode [ 122.614740][ T7144] syz_tun: entered allmulticast mode [ 123.012899][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.035661][ T7169] __nla_validate_parse: 7 callbacks suppressed [ 123.035680][ T7169] netlink: 80 bytes leftover after parsing attributes in process `syz.0.395'. [ 123.063484][ T7169] netlink: 80 bytes leftover after parsing attributes in process `syz.0.395'. [ 123.095933][ T7175] ieee802154 phy1 wpan1: encryption failed: -22 [ 123.108815][ T7174] netlink: 2012 bytes leftover after parsing attributes in process `syz.4.397'. [ 123.119315][ T7174] netlink: 2012 bytes leftover after parsing attributes in process `syz.4.397'. [ 123.139880][ T7177] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 123.158849][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 123.272275][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 123.333782][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 123.401743][ T7191] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 123.449889][ T7196] netlink: 'syz.2.404': attribute type 21 has an invalid length. [ 123.475828][ T7191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.537124][ T7202] netlink: 56 bytes leftover after parsing attributes in process `syz.0.405'. [ 123.560852][ T7201] bond2: (slave veth0_to_bond): making interface the new active one [ 123.599087][ T7201] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.674671][ T7196] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 123.699017][ T7196] bond3 (unregistering): Released all slaves [ 123.845966][ T7186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.870748][ T7186] bond2: (slave bond3): Enslaving as an active interface with a down link [ 123.931438][ T7224] tipc: Enabling of bearer rejected, already enabled [ 123.975135][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 124.026536][ T7236] syzkaller1: entered promiscuous mode [ 124.038186][ T7236] syzkaller1: entered allmulticast mode [ 124.210925][ T7241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.417'. [ 124.233407][ T7244] bond0: entered promiscuous mode [ 124.238617][ T7244] bond_slave_0: entered promiscuous mode [ 124.244491][ T7244] bond_slave_1: entered promiscuous mode [ 124.255499][ T7244] gretap0: entered promiscuous mode [ 124.267107][ T7244] debugfs: 'hsr1' already exists in 'hsr' [ 124.274918][ T7244] Cannot create hsr debugfs directory [ 124.284070][ T7244] hsr1: entered promiscuous mode [ 124.565383][ T7267] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 124.711769][ T7267] bond3: entered promiscuous mode [ 124.721323][ T7267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.736562][ T7280] ip6gre1: entered allmulticast mode [ 124.743654][ T7281] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 124.755088][ T7275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.860416][ T7283] xt_l2tp: v2 tid > 0xffff: 1114244 [ 125.184552][ T7302] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.254956][ T7302] bond3 (unregistering): Released all slaves [ 125.289243][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.296791][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.315078][ T7316] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 125.441810][ T7308] team0: No ports can be present during mode change [ 125.506927][ T7329] netlink: 'syz.2.440': attribute type 3 has an invalid length. [ 125.730854][ T5833] block nbd0: Receive control failed (result -32) [ 125.773884][ T7342] ipvlan2: entered allmulticast mode [ 125.779813][ T7342] batadv_slave_1: entered allmulticast mode [ 125.786699][ T7351] netlink: 'syz.1.444': attribute type 21 has an invalid length. [ 125.788668][ T7342] batman_adv: batadv0: Adding interface: ipvlan2 [ 125.802199][ T7342] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.986692][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.023539][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.034942][ T7342] batman_adv: batadv0: Interface activated: ipvlan2 [ 126.045903][ T7370] x_tables: duplicate underflow at hook 1 [ 126.490305][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.573435][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.614508][ T7407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.742971][ T7399] : entered promiscuous mode [ 126.858006][ T7411] syzkaller1: entered promiscuous mode [ 126.863595][ T7411] syzkaller1: entered allmulticast mode [ 126.877551][ T7407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.935478][ T7421] hsr_slave_0: left promiscuous mode [ 126.969870][ T7421] hsr_slave_1: left promiscuous mode [ 127.150616][ T7428] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 127.185831][ T7428] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 127.555886][ T7454] FAULT_INJECTION: forcing a failure. [ 127.555886][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.572995][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.0.475 Not tainted syzkaller #0 PREEMPT(full) [ 127.573021][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.573038][ T7454] Call Trace: [ 127.573046][ T7454] [ 127.573053][ T7454] dump_stack_lvl+0xe8/0x150 [ 127.573090][ T7454] should_fail_ex+0x412/0x560 [ 127.573121][ T7454] _copy_from_user+0x2d/0xb0 [ 127.573143][ T7454] ___sys_sendmsg+0x1c6/0x360 [ 127.573171][ T7454] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.573225][ T7454] ? __fget_files+0x2a/0x420 [ 127.573241][ T7454] ? __fget_files+0x3a0/0x420 [ 127.573265][ T7454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 127.573289][ T7454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.573320][ T7454] ? __pfx_ksys_write+0x10/0x10 [ 127.573350][ T7454] do_syscall_64+0x14d/0xf80 [ 127.573373][ T7454] ? trace_irq_disable+0x3b/0x150 [ 127.573389][ T7454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.573406][ T7454] ? clear_bhb_loop+0x40/0x90 [ 127.573428][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.573445][ T7454] RIP: 0033:0x7fb9cfd9c819 [ 127.573467][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.573481][ T7454] RSP: 002b:00007fb9d0ce3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.573506][ T7454] RAX: ffffffffffffffda RBX: 00007fb9d0015fa0 RCX: 00007fb9cfd9c819 [ 127.573519][ T7454] RDX: 0000000000004080 RSI: 0000200000000340 RDI: 0000000000000003 [ 127.573530][ T7454] RBP: 00007fb9d0ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 127.573541][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.573552][ T7454] R13: 00007fb9d0016038 R14: 00007fb9d0015fa0 R15: 00007fff7f005198 [ 127.573578][ T7454] [ 127.587869][ T7456] openvswitch: netlink: Flow key attr not present in new flow. [ 127.776552][ T7461] veth0_macvtap: left promiscuous mode [ 127.825128][ T7460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 127.914455][ T7460] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.929614][ T7460] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.042338][ T7476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.049918][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 128.057935][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 128.065196][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 128.133265][ T7476] __nla_validate_parse: 18 callbacks suppressed [ 128.133284][ T7476] netlink: 64 bytes leftover after parsing attributes in process `syz.0.482'. [ 128.235475][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'. [ 128.240068][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 128.257259][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 128.297305][ T7491] validate_nla: 2 callbacks suppressed [ 128.297323][ T7491] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 128.354399][ T7491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.488'. [ 128.460964][ T7503] netlink: 'syz.3.491': attribute type 2 has an invalid length. [ 128.673058][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 128.687092][ T7518] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 128.711951][ T7518] netlink: 100 bytes leftover after parsing attributes in process `syz.2.496'. [ 129.242304][ T796] IPVS: starting estimator thread 0... [ 129.356849][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.370740][ T7555] IPVS: using max 36 ests per chain, 86400 per kthread [ 129.442010][ T7558] bridge_slave_0 (unregistering): left allmulticast mode [ 129.492742][ T7558] bridge_slave_0 (unregistering): left promiscuous mode [ 129.529604][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.582015][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 129.605328][ T7563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.822602][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 129.886567][ T7587] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 129.915824][ T7593] syzkaller0: entered promiscuous mode [ 129.921544][ T7593] syzkaller0: entered allmulticast mode [ 130.157222][ T7609] netlink: 'syz.0.517': attribute type 8 has an invalid length. [ 130.166064][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 130.543843][ T7621] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 130.560468][ T7621] macvlan2: entered promiscuous mode [ 130.590092][ T7621] macvlan2: entered allmulticast mode [ 130.596022][ T7621] bond3: entered promiscuous mode [ 130.608197][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.648984][ T7621] bridge2: entered promiscuous mode [ 130.665329][ T7621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.702863][ T7621] bond3: left promiscuous mode [ 130.722440][ T7621] bridge2: left promiscuous mode [ 130.874062][ T7635] gretap1: entered promiscuous mode [ 130.890133][ T7635] gretap1: entered allmulticast mode [ 130.970851][ T7643] netlink: 'syz.2.530': attribute type 25 has an invalid length. [ 130.991632][ T7639] syzkaller0: entered promiscuous mode [ 131.000529][ T7639] syzkaller0: entered allmulticast mode [ 131.021703][ T7647] Cannot find del_set index 4 as target [ 131.033186][ T7649] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 132.733253][ T7696] sctp: [Deprecated]: syz.0.546 (pid 7696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.733253][ T7696] Use struct sctp_sack_info instead [ 132.802377][ T7698] bond2: entered promiscuous mode [ 132.810227][ T7698] bond2: entered allmulticast mode [ 132.816034][ T7698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.916393][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959476][ T7709] netlink: 'syz.2.550': attribute type 3 has an invalid length. [ 132.984814][ T7705] syzkaller0: entered promiscuous mode [ 132.992154][ T7705] syzkaller0: entered allmulticast mode [ 133.000077][ T7709] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 133.036098][ T7713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.057920][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.086799][ T7712] pim6reg: entered allmulticast mode [ 133.990035][ T7719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.140428][ T7748] __nla_validate_parse: 8 callbacks suppressed [ 134.140448][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 134.482170][ T7752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.563410][ T7713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.710336][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 134.748921][ T7713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.815841][ T7713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.834687][ T7763] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.565'. [ 134.957104][ T7774] FAULT_INJECTION: forcing a failure. [ 134.957104][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.981384][ T7774] CPU: 1 UID: 0 PID: 7774 Comm: syz.4.567 Not tainted syzkaller #0 PREEMPT(full) [ 134.981411][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.981421][ T7774] Call Trace: [ 134.981428][ T7774] [ 134.981436][ T7774] dump_stack_lvl+0xe8/0x150 [ 134.981465][ T7774] should_fail_ex+0x412/0x560 [ 134.981496][ T7774] _copy_to_user+0x31/0xb0 [ 134.981519][ T7774] simple_read_from_buffer+0xe1/0x170 [ 134.981549][ T7774] proc_fail_nth_read+0x1bb/0x230 [ 134.981577][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.981605][ T7774] ? rw_verify_area+0x2a6/0x4d0 [ 134.981623][ T7774] ? tun_chr_write_iter+0x18a/0x200 [ 134.981641][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.981667][ T7774] vfs_read+0x20c/0xa70 [ 134.981685][ T7774] ? fdget_pos+0x246/0x320 [ 134.981706][ T7774] ? __pfx___mutex_lock+0x10/0x10 [ 134.981731][ T7774] ? __pfx_vfs_read+0x10/0x10 [ 134.981752][ T7774] ? __fget_files+0x2a/0x420 [ 134.981771][ T7774] ? __fget_files+0x3a0/0x420 [ 134.981786][ T7774] ? __fget_files+0x2a/0x420 [ 134.981809][ T7774] ksys_read+0x150/0x270 [ 134.981834][ T7774] ? __pfx_ksys_read+0x10/0x10 [ 134.981864][ T7774] do_syscall_64+0x14d/0xf80 [ 134.981886][ T7774] ? trace_irq_disable+0x3b/0x150 [ 134.981902][ T7774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.981940][ T7774] ? clear_bhb_loop+0x40/0x90 [ 134.981961][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.981979][ T7774] RIP: 0033:0x7f878ad5d04e [ 134.981996][ T7774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.982010][ T7774] RSP: 002b:00007f878bbc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.982034][ T7774] RAX: ffffffffffffffda RBX: 00007f878bbc26c0 RCX: 00007f878ad5d04e [ 134.982047][ T7774] RDX: 000000000000000f RSI: 00007f878bbc20a0 RDI: 0000000000000004 [ 134.982057][ T7774] RBP: 00007f878bbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 134.982068][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.982078][ T7774] R13: 00007f878b016038 R14: 00007f878b015fa0 R15: 00007ffd0785eaf8 [ 134.982107][ T7774] [ 135.035650][ T1153] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.300706][ T1153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.378808][ T1153] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.416013][ T7791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.445890][ T1153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.561402][ T7793] syzkaller0: entered promiscuous mode [ 135.569899][ T7793] syzkaller0: entered allmulticast mode [ 135.667179][ T7807] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 135.906893][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 137.034447][ T7826] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 137.141047][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 137.152572][ T7840] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.585'. [ 137.159874][ T7831] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.173225][ T7831] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 137.225217][ T7839] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 137.244475][ T7841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.282242][ T7826] macvlan2: entered promiscuous mode [ 137.295620][ T7826] macvlan2: entered allmulticast mode [ 137.344797][ T7826] bond4: entered promiscuous mode [ 137.359531][ T7826] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.372273][ T7826] bond4: left promiscuous mode [ 137.404948][ T7714] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.493020][ T7854] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 137.504440][ T7714] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.538297][ T7714] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.685525][ T7871] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 137.694733][ T7871] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 137.855890][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 137.877052][ T7882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.105263][ T7896] nftables ruleset with unbound chain [ 138.109633][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 138.120738][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 138.131044][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 138.350310][ T7909] netlink: 'syz.3.607': attribute type 15 has an invalid length. [ 138.443235][ T7913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.469563][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.118936][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.143357][ T1153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.168201][ T1153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.190810][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.324763][ T7973] netlink: 'syz.1.627': attribute type 1 has an invalid length. [ 139.375460][ T7973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.461015][ T7977] H: renamed from dummy0 [ 139.664213][ T7993] __nla_validate_parse: 7 callbacks suppressed [ 139.664231][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 139.685894][ T7990] netlink: 100 bytes leftover after parsing attributes in process `syz.0.633'. [ 139.686363][ T7993] ipvlan2: entered allmulticast mode [ 139.701524][ T7993] syz_tun: entered allmulticast mode [ 139.723126][ T7994] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 139.731899][ T7996] vcan0: tx address claim with dest, not broadcast [ 140.010363][ T1158] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 140.115328][ T8019] bond2 (unregistering): Released all slaves [ 140.151854][ T8026] xt_connbytes: Forcing CT accounting to be enabled [ 140.169217][ T8024] syzkaller0: entered promiscuous mode [ 140.174915][ T8024] syzkaller0: entered allmulticast mode [ 140.185543][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 140.203472][ T8028] netlink: 'syz.4.646': attribute type 30 has an invalid length. [ 140.219463][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 140.269033][ T8030] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 140.305550][ T8030] bridge_slave_1: left allmulticast mode [ 140.316463][ T8030] bridge_slave_1: left promiscuous mode [ 140.324242][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.332057][ T8032] netlink: 100 bytes leftover after parsing attributes in process `syz.4.648'. [ 140.348126][ T8030] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 140.351198][ T8032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.374200][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 140.493017][ T8043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'. [ 140.681285][ T8053] syzkaller0: entered promiscuous mode [ 140.697064][ T8053] syzkaller0: entered allmulticast mode [ 141.022361][ T8066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.657'. [ 141.033760][ T8066] netlink: 'syz.0.657': attribute type 23 has an invalid length. [ 141.224695][ T8076] bond0: Error: Cannot enslave bond to itself. [ 141.226683][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.661'. [ 141.253068][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 141.497317][ T8085] syzkaller1: entered promiscuous mode [ 141.509370][ T8085] syzkaller1: entered allmulticast mode [ 141.602543][ T8090] syzkaller0: entered allmulticast mode [ 141.612499][ T8091] syzkaller0 (unregistering): left allmulticast mode [ 141.710403][ T8094] bond3: left promiscuous mode [ 141.952921][ T8107] syzkaller0: entered promiscuous mode [ 141.959060][ T8107] syzkaller0: entered allmulticast mode [ 143.078329][ T8119] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 143.186235][ T8133] sctp: [Deprecated]: syz.4.678 (pid 8133) Use of int in max_burst socket option. [ 143.186235][ T8133] Use struct sctp_assoc_value instead [ 143.523543][ T8154] netlink: 'syz.0.684': attribute type 4 has an invalid length. [ 143.911484][ T8177] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 144.270693][ T8202] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 144.287535][ T8202] dummy0: entered promiscuous mode [ 144.339326][ T8202] bridge0: port 2(dummy0) entered blocking state [ 144.350696][ T8202] bridge0: port 2(dummy0) entered disabled state [ 144.379711][ T8202] dummy0: entered allmulticast mode [ 144.474126][ T8206] pim6reg1: entered promiscuous mode [ 144.521949][ T8206] pim6reg1: entered allmulticast mode [ 144.760013][ T8223] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 145.019359][ T8237] __nla_validate_parse: 10 callbacks suppressed [ 145.019376][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.073061][ T8244] tipc: Can't bind to reserved service type 0 [ 145.153026][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 145.202362][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 145.272133][ T8254] netlink: 788 bytes leftover after parsing attributes in process `syz.0.714'. [ 145.323168][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.342251][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.347030][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 145.430775][ T8270] SET target dimension over the limit! [ 145.440662][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 145.440795][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 145.465949][ T8265] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 145.480585][ T8265] bond4 (unregistering): Released all slaves [ 145.519350][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 145.546043][ T1158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.558963][ T1158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.625184][ T1158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.669932][ T1158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.761290][ T8285] bond0: entered promiscuous mode [ 145.766387][ T8285] bond_slave_0: entered promiscuous mode [ 145.772847][ T8285] bond_slave_1: entered promiscuous mode [ 145.779288][ T8285] bridge_slave_1: entered promiscuous mode [ 145.791276][ T8285] gretap0: entered promiscuous mode [ 145.798142][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 145.803981][ T8285] Cannot create hsr debugfs directory [ 147.852660][ T8351] gtp0: entered promiscuous mode [ 147.871567][ T8351] gtp0: entered allmulticast mode [ 148.468014][ T8393] netlink: 'syz.1.751': attribute type 21 has an invalid length. [ 148.540012][ T8395] netlink: 'syz.1.751': attribute type 21 has an invalid length. [ 149.100903][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.132168][ T8431] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 149.165239][ T8431] team0: Failed to send options change via netlink (err -105) [ 149.172312][ T8444] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 149.178397][ T8431] team0: Port device batadv1 added [ 149.271210][ T8444] bond4: entered promiscuous mode [ 149.276647][ T8444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.342199][ T8451] macvtap2: entered allmulticast mode [ 149.420878][ T8444] bond4: (slave bridge2): making interface the new active one [ 149.484589][ T8444] bridge2: entered promiscuous mode [ 149.491750][ T8444] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 149.505988][ T8464] bond0: entered allmulticast mode [ 149.525669][ T8464] bond_slave_0: entered allmulticast mode [ 149.536573][ T8464] bond_slave_1: entered allmulticast mode [ 149.544104][ T8464] bridge_slave_1: entered allmulticast mode [ 149.635997][ T8472] netlink: 'syz.0.775': attribute type 16 has an invalid length. [ 149.645316][ T8472] netlink: 'syz.0.775': attribute type 17 has an invalid length. [ 149.765784][ T8472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.882097][ T8492] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 150.271516][ T8511] syzkaller0: entered promiscuous mode [ 150.277856][ T8511] syzkaller0: entered allmulticast mode [ 150.329057][ T8524] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 150.369103][ T30] audit: type=1800 audit(1776174237.261:2): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="memory.events" dev="tmpfs" ino=737 res=0 errno=0 [ 150.413055][ T8524] bond4: entered promiscuous mode [ 150.419291][ T8524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.454916][ T8532] block nbd1: Unsupported socket: should be TCP or UNIX. [ 150.469994][ T8528] tipc: Resetting bearer [ 150.551233][ T8539] __nla_validate_parse: 17 callbacks suppressed [ 150.551252][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.788'. [ 151.064954][ T8573] netlink: 9 bytes leftover after parsing attributes in process `syz.0.806'. [ 151.373347][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 151.424831][ T8589] x_tables: duplicate underflow at hook 2 [ 151.440359][ T8586] syzkaller1: entered promiscuous mode [ 151.445979][ T8586] syzkaller1: entered allmulticast mode [ 151.603702][ T8604] netlink: 'syz.0.816': attribute type 9 has an invalid length. [ 151.757793][ T8611] netlink: 'syz.3.818': attribute type 8 has an invalid length. [ 151.838489][ T8618] xt_hashlimit: size too large, truncated to 1048576 [ 152.294544][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 152.331899][ T8627] netlink: 'syz.1.823': attribute type 39 has an invalid length. [ 152.616762][ T8642] netlink: 'syz.4.829': attribute type 2 has an invalid length. [ 152.747750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.842386][ T8654] sock: sock_timestamping_bind_phc: sock not bind to device [ 153.061843][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 153.101917][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 153.514772][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 153.525099][ T8691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.842'. [ 153.534406][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 153.587594][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 153.777527][ T8714] validate_nla: 2 callbacks suppressed [ 153.777545][ T8714] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 153.881306][ T8718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 153.892246][ T8718] SET target dimension over the limit! [ 154.067708][ T8728] netlink: 'syz.1.851': attribute type 3 has an invalid length. [ 154.271853][ T8740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 154.794573][ T8775] tap0: tun_chr_ioctl cmd 2148553947 [ 155.383843][ T8816] syz_tun: refused to change device tx_queue_len [ 155.835658][ T8829] netem: unknown loss type 0 [ 155.840870][ T8829] netem: change failed [ 156.767752][ T8883] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 156.789662][ T8883] __nla_validate_parse: 2 callbacks suppressed [ 156.789677][ T8883] netlink: 224 bytes leftover after parsing attributes in process `syz.2.896'. [ 156.882651][ T8897] netlink: 'syz.3.900': attribute type 15 has an invalid length. [ 156.899673][ T8893] netlink: 'syz.0.899': attribute type 11 has an invalid length. [ 156.909119][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 157.041445][ T8903] netlink: 'syz.2.902': attribute type 83 has an invalid length. [ 157.069135][ T8894] syz.3.900 (8894) used greatest stack depth: 15400 bytes left [ 157.220056][ T8918] nbd: must specify a device to reconfigure [ 157.242314][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.280271][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.332916][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.372682][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.411521][ T8934] x_tables: duplicate underflow at hook 3 [ 157.474575][ T8937] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 157.495702][ T8937] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 157.587281][ T8944] bond5: option mode: invalid value (133) [ 157.595585][ T8944] bond5 (unregistering): Released all slaves [ 157.809782][ T8960] netlink: 'syz.3.915': attribute type 3 has an invalid length. [ 157.930978][ T8967] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 158.063002][ T8976] netlink: 'syz.1.919': attribute type 11 has an invalid length. [ 158.091585][ T8976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.919'. [ 158.337134][ T8995] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 158.444903][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 158.716023][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 158.763728][ T9021] netlink: 88 bytes leftover after parsing attributes in process `syz.0.932'. [ 158.833384][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 159.002674][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.936'. [ 159.049421][ T9029] syzkaller0: entered promiscuous mode [ 159.054967][ T9029] syzkaller0: entered allmulticast mode [ 159.139399][ T9039] IPVS: length: 8 != 1152 [ 159.147066][ T9039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 159.164171][ T9041] tipc: Resetting bearer [ 159.171689][ T9039] netlink: 9 bytes leftover after parsing attributes in process `syz.0.938'. [ 159.301203][ T9041] tipc: Disabling bearer [ 159.331070][ T9039] 0·: renamed from hsr_slave_1 (while UP) [ 159.342676][ T9039] 0·: entered allmulticast mode [ 159.348449][ T9039] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 159.426716][ T178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 159.466418][ T178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 159.537331][ T178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 159.563952][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 160.132355][ T9102] syzkaller0: entered promiscuous mode [ 160.138448][ T9102] syzkaller0: entered allmulticast mode [ 160.430718][ T9113] netlink: 'syz.1.957': attribute type 10 has an invalid length. [ 160.449784][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.489761][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.497023][ T9122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.850829][ T9146] xt_hashlimit: max too large, truncated to 1048576 [ 160.978182][ T9154] ip6t_srh: unknown srh invflags 4000 [ 161.108400][ T9160] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 161.164483][ T9164] netlink: 'syz.4.976': attribute type 5 has an invalid length. [ 161.177149][ T9160] bond5: (slave gretap1): making interface the new active one [ 161.192248][ T9160] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 161.670622][ T9196] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 161.710210][ T9201] macvlan0: entered promiscuous mode [ 161.817898][ T9206] erspan0: entered promiscuous mode [ 161.823233][ T9206] erspan0: entered allmulticast mode [ 161.828058][ T9211] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.856753][ T9206] __nla_validate_parse: 87 callbacks suppressed [ 161.856773][ T9206] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.988'. [ 161.894073][ T9216] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.996857][ T9221] netlink: 348 bytes leftover after parsing attributes in process `syz.1.992'. [ 162.357114][ T9252] netlink: 'syz.1.999': attribute type 3 has an invalid length. [ 162.385746][ T9252] netlink: 'syz.1.999': attribute type 3 has an invalid length. [ 162.406378][ T9252] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 162.422944][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 162.434862][ T9252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.999'. [ 162.594098][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 162.600029][ T9252] .`: renamed from bond0 (while UP) [ 162.967128][ T9272] 8021q: VLANs not supported on ip6_vti0 [ 162.987394][ T9274] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.028461][ T9275] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 163.119486][ T9275] team0: Device veth0_vlan failed to register rx_handler [ 163.209837][ T9282] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2 [ 163.225014][ T9282] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @ [ 163.259460][ T9274] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.381838][ T9274] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.470228][ T9274] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.641667][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.657114][ T9314] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.704520][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.759420][ T178] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.801105][ T178] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.136212][ T9339] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1022'. [ 164.321330][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 164.345647][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1025'. [ 164.350125][ T9346] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.552968][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 164.580890][ T9369] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 164.649658][ T9368] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 164.737212][ T9376] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 164.830802][ T9369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.885967][ T9377] bond5: (slave gretap2): making interface the new active one [ 164.923393][ T9377] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 164.943075][ T9383] netlink: 'syz.0.1031': attribute type 29 has an invalid length. [ 164.953103][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 165.202124][ T9405] 8021q: VLANs not supported on syzkaller1 [ 165.515072][ T9424] syzkaller0: entered promiscuous mode [ 165.535450][ T9424] syzkaller0: entered allmulticast mode [ 165.888791][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.900078][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.927242][ T9439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.302701][ T9443] netlink: 'syz.3.1048': attribute type 14 has an invalid length. [ 166.311977][ T9443] netlink: 'syz.3.1048': attribute type 13 has an invalid length. [ 166.905033][ T9509] __nla_validate_parse: 7 callbacks suppressed [ 166.905056][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 166.963134][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 166.988621][ T9513] lo: Caught tx_queue_len zero misconfig [ 167.033033][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 167.148780][ T9525] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 167.391805][ T9541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1079'. [ 167.571372][ T24] IPVS: starting estimator thread 0... [ 167.667509][ T9557] IPVS: using max 29 ests per chain, 69600 per kthread [ 167.737512][ T9569] veth1_to_bond: entered allmulticast mode [ 167.750150][ T9565] veth1_to_bond: left allmulticast mode [ 167.775374][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 167.953481][ T9588] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 167.976634][ T9587] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 168.131629][ T9584] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.193116][ T9584] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 168.255216][ T9608] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.505320][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 168.543439][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 168.971526][ T9665] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 169.112482][ T9673] SET target dimension over the limit! [ 169.119470][ T9676] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 169.156725][ T9676] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 169.380063][ T9699] gretap1: entered promiscuous mode [ 169.380955][ T9701] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 169.404097][ T9699] batman_adv: batadv0: Adding interface: gretap1 [ 169.436023][ T9699] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 169.491048][ T9699] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 169.539775][ T9712] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 169.564966][ T9712] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1123'. [ 169.694854][ T9719] openvswitch: netlink: Missing valid actions attribute. [ 169.725066][ T9719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.978469][ T5833] Bluetooth: hci4: link tx timeout [ 169.985090][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.324656][ T5833] Bluetooth: hci4: link tx timeout [ 170.330481][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.349653][ T5833] Bluetooth: hci4: link tx timeout [ 170.354837][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.419349][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'. [ 170.473815][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 170.485495][ T9767] tc_dump_action: action bad kind [ 170.515322][ T9770] netlink: 'syz.3.1137': attribute type 12 has an invalid length. [ 170.544248][ T9770] netlink: 'syz.3.1137': attribute type 29 has an invalid length. [ 170.554077][ T9770] netlink: 'syz.3.1137': attribute type 2 has an invalid length. [ 170.672311][ T5833] Bluetooth: hci4: link tx timeout [ 170.682838][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.149032][ T5833] Bluetooth: hci4: link tx timeout [ 171.154387][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.549187][ T9835] syzkaller0: entered promiscuous mode [ 171.554811][ T9835] syzkaller0: entered allmulticast mode [ 171.762032][ T5833] Bluetooth: hci4: link tx timeout [ 171.770219][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.788749][ T5833] Bluetooth: hci4: link tx timeout [ 171.795098][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.943795][ T9857] __nla_validate_parse: 8 callbacks suppressed [ 171.943816][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 172.025128][ T5833] Bluetooth: hci4: link tx timeout [ 172.041984][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 172.593165][ T9909] validate_nla: 1 callbacks suppressed [ 172.593183][ T9909] netlink: 'syz.0.1173': attribute type 10 has an invalid length. [ 172.653606][ T9910] netlink: 'syz.1.1171': attribute type 15 has an invalid length. [ 172.664452][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'. [ 172.690672][ T9913] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.724494][ T9909] team0 (unregistering): Port device team_slave_0 removed [ 172.727787][ T9913] xt_SECMARK: invalid mode: 9 [ 172.766135][ T9909] team0 (unregistering): Port device team_slave_1 removed [ 172.783280][ T9913] syzkaller1: entered promiscuous mode [ 172.789564][ T9913] syzkaller1: entered allmulticast mode [ 172.863410][ T9923] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 172.877317][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 172.887347][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 172.899654][ T9923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.908159][ T9924] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 172.926669][ T9924] team0 (unregistering): Port device team_slave_0 removed [ 172.941389][ T9924] team0 (unregistering): Port device team_slave_1 removed [ 172.960522][ T9924] team0 (unregistering): Port device batadv1 removed [ 173.008500][ T9931] netlink: 'syz.0.1178': attribute type 4 has an invalid length. [ 173.278890][ T9892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.614778][ T9966] IPv6: Can't replace route, no match found [ 173.646723][ T9966] IPv6: Can't replace route, no match found [ 173.811091][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.886677][ T9981] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1194'. [ 173.900705][ T9983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.909998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.920360][ T9983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.952777][ T9976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.963576][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.059991][ T9994] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 174.074507][ T9996] netlink: 'syz.1.1198': attribute type 4 has an invalid length. [ 174.161488][ T9994] bond6: entered promiscuous mode [ 174.190039][ T9994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.218882][T10007] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 174.233534][T10004] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 174.250126][ T9999] macvtap1: entered allmulticast mode [ 174.255664][T10007] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1197'. [ 174.269871][T10007] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 174.277883][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1197'. [ 174.289386][T10015] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 174.374278][ T9994] bond6: (slave bridge5): making interface the new active one [ 174.382337][ T9994] bridge5: entered promiscuous mode [ 174.390246][ T9994] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 174.526250][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'. [ 174.550880][T10029] netlink: 396 bytes leftover after parsing attributes in process `syz.0.1207'. [ 174.622989][T10034] sctp: [Deprecated]: syz.3.1208 (pid 10034) Use of int in max_burst socket option. [ 174.622989][T10034] Use struct sctp_assoc_value instead [ 175.010303][T10059] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.1213'. [ 175.052921][T10059] net_ratelimit: 3 callbacks suppressed [ 175.053159][T10059] openvswitch: netlink: Message has 6 unknown bytes. [ 175.150642][T10063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.248876][T10069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.525998][T10085] bond0: entered promiscuous mode [ 175.553624][T10085] bond0: left promiscuous mode [ 175.788285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.058876][T10109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.121436][T10118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.162119][T10118] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 176.185064][T10118] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 176.223732][T10118] bond7: (slave xfrm1): making interface the new active one [ 176.246977][T10118] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 176.363345][T10124] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 176.477937][T10136] bond6: entered promiscuous mode [ 176.547511][T10136] bond6: entered allmulticast mode [ 176.553083][T10136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.646943][T10133] bond6 (unregistering): Released all slaves [ 177.147969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.454434][T10193] __nla_validate_parse: 8 callbacks suppressed [ 177.454454][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'. [ 177.476316][T10193] bond0: entered promiscuous mode [ 177.504443][T10193] bond0: left promiscuous mode [ 180.268503][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.827843][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.027891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.307922][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.868873][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.877040][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.354344][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.356410][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.431043][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 196.433348][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 196.437120][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 196.449389][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.910078][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.920292][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.859598][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 198.908386][T10272] validate_nla: 8 callbacks suppressed [ 198.908405][T10272] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 199.024075][T10278] syzkaller0: entered promiscuous mode [ 199.030494][T10278] syzkaller0: entered allmulticast mode [ 199.477135][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1260'. [ 200.513388][T10292] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 200.616562][T10312] sctp: [Deprecated]: syz.4.1262 (pid 10312) Use of int in max_burst socket option deprecated. [ 200.616562][T10312] Use struct sctp_assoc_value instead [ 200.656486][T10317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.814395][T10327] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1266'. [ 201.019934][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'. [ 201.118811][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 201.178445][T10346] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.192055][T10344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.201421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.213226][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1272'. [ 201.387880][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.415849][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.418276][T10357] syzkaller0: entered promiscuous mode [ 201.430936][T10357] syzkaller0: entered allmulticast mode [ 201.442326][T10359] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1275'. [ 201.672475][T10371] can: request_module (can-proto-3) failed. [ 202.670360][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.905427][T10362] netlink: 'syz.1.1276': attribute type 2 has an invalid length. [ 203.206117][T10393] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1283'. [ 203.322207][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 203.561891][T10410] syzkaller0: entered promiscuous mode [ 203.569992][T10410] syzkaller0: entered allmulticast mode [ 203.674961][T10415] syzkaller0: entered promiscuous mode [ 203.682532][T10415] syzkaller0: entered allmulticast mode [ 203.834115][T10424] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 203.947884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.956518][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.171995][T10424] batman_adv: batadv0: Adding interface: netdevsim0 [ 205.195180][T10424] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.262448][T10424] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 205.327867][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 205.364573][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 205.373090][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 205.386317][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 205.435273][T10437] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 205.448970][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'. [ 205.463443][T10446] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1303'. [ 205.694730][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 205.732240][T10470] x_tables: duplicate underflow at hook 2 [ 205.899597][T10481] syzkaller0: entered promiscuous mode [ 205.906210][T10481] syzkaller0: entered allmulticast mode [ 205.921460][T10483] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1310'. [ 205.947555][T10483] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 205.982893][T10491] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 206.160796][T10486] syzkaller0: entered promiscuous mode [ 206.166323][T10486] syzkaller0: entered allmulticast mode [ 206.232494][T10504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1316'. [ 207.167218][ T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.731162][T10522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1320'. [ 207.779918][T10521] xt_TCPMSS: Only works on TCP SYN packets [ 208.063294][T10551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.292786][T10568] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 208.304635][T10559] syzkaller0: entered promiscuous mode [ 208.311517][T10559] syzkaller0: entered allmulticast mode [ 208.428121][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.472094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.711273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.724365][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.062444][T10628] netlink: 'syz.1.1347': attribute type 12 has an invalid length. [ 210.070743][T10628] netlink: 'syz.1.1347': attribute type 11 has an invalid length. [ 210.411434][T10654] ipvlan2: entered allmulticast mode [ 210.416872][T10654] batadv_slave_1: entered allmulticast mode [ 210.431095][T10654] batman_adv: batadv0: Adding interface: ipvlan2 [ 210.438083][T10654] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.461233][T10658] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 210.466314][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.472999][T10658] __nla_validate_parse: 7 callbacks suppressed [ 210.473017][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 210.482416][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.507677][T10654] batman_adv: batadv0: Interface activated: ipvlan2 [ 210.515673][T10658] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1357'. [ 210.642585][T10664] syzkaller0: entered promiscuous mode [ 210.648504][T10664] syzkaller0: entered allmulticast mode [ 211.933671][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 211.943279][T10619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.951001][T10668] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 211.961680][T10648] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 211.971449][T10648] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1354'. [ 212.094973][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.103532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.211493][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1367'. [ 212.220590][T10682] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.324864][T10677] bridge_slave_0 (unregistering): left allmulticast mode [ 212.345517][T10677] bridge_slave_0 (unregistering): left promiscuous mode [ 212.398778][T10677] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.520622][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 212.594958][T10705] syzkaller0: entered promiscuous mode [ 212.612861][T10705] syzkaller0: entered allmulticast mode [ 212.764741][T10718] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1371'. [ 212.909972][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.018054][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1374'. [ 213.311289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.198087][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.211413][T10713] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 214.237144][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1375'. [ 214.401884][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'. [ 214.412267][T10740] SET target dimension over the limit! [ 214.597203][T10750] bond0: left allmulticast mode [ 214.627094][T10750] bond_slave_0: left allmulticast mode [ 214.655916][T10750] bond_slave_1: left allmulticast mode [ 214.693782][T10759] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 214.704256][T10761] netlink: 'syz.2.1385': attribute type 9 has an invalid length. [ 214.714791][T10761] netlink: 'syz.2.1385': attribute type 11 has an invalid length. [ 214.788337][T10761] netlink: 'syz.2.1385': attribute type 12 has an invalid length. [ 214.798838][T10766] x_tables: duplicate underflow at hook 3 [ 215.060961][T10784] lo: Caught tx_queue_len zero misconfig [ 215.216551][T10788] netlink: 'syz.1.1391': attribute type 21 has an invalid length. [ 215.230872][T10788] netlink: 'syz.1.1391': attribute type 21 has an invalid length. [ 215.233067][T10789] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 215.451552][T10806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.460866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.622618][T10817] __nla_validate_parse: 8 callbacks suppressed [ 215.622638][T10817] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1401'. [ 215.643149][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.652039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.872151][T10836] openvswitch: netlink: Key type 343 is out of range max 32 [ 215.965827][T10841] veth0: entered promiscuous mode [ 216.062743][T10840] veth0: left promiscuous mode [ 216.212373][T10847] syzkaller0: entered promiscuous mode [ 216.218176][T10847] syzkaller0: entered allmulticast mode [ 216.232382][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.246304][T10855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.514826][T10875] xt_hashlimit: size too large, truncated to 1048576 [ 217.996751][T10899] netlink: 'syz.4.1425': attribute type 9 has an invalid length. [ 218.094907][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 218.096378][T10906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1429'. [ 218.678762][ T1158] net_ratelimit: 2 callbacks suppressed [ 218.678782][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.740560][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 218.767161][T10932] ip6tnl0: Caught tx_queue_len zero misconfig [ 218.838853][T10934] can: request_module (can-proto-0) failed. [ 218.916034][T10936] can: request_module (can-proto-0) failed. [ 218.923897][T10945] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 218.959209][T10946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.308034][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.316179][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.353213][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1446'. [ 219.436921][T10973] netlink: 'syz.0.1448': attribute type 21 has an invalid length. [ 219.450622][T10973] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1448'. [ 219.463120][T10974] netlink: 'syz.0.1448': attribute type 21 has an invalid length. [ 219.473742][T10974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1448'. [ 219.535474][T10980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1450'. [ 219.716936][T10991] xt_hashlimit: size too large, truncated to 1048576 [ 219.958951][T10987] nbd2: detected capacity change from 0 to 63 [ 219.987844][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.013256][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.024928][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.038269][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.048022][T10996] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 220.062810][ T5145] block nbd2: Receive control failed (result -104) [ 220.072199][T11000] x_tables: duplicate underflow at hook 1 [ 220.077610][ T5836] block nbd2: Receive control failed (result -32) [ 220.104789][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 220.750499][T11034] __nla_validate_parse: 3 callbacks suppressed [ 220.750520][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 221.071522][T11050] syzkaller0: entered promiscuous mode [ 221.099302][T11050] syzkaller0: entered allmulticast mode [ 221.241155][T11069] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1479'. [ 221.428807][T11082] GUP no longer grows the stack in syz.0.1484 (11082): 200000003000-20000000a000 (200000001000) [ 221.440292][T11082] CPU: 1 UID: 0 PID: 11082 Comm: syz.0.1484 Not tainted syzkaller #0 PREEMPT(full) [ 221.440320][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.440333][T11082] Call Trace: [ 221.440341][T11082] [ 221.440350][T11082] dump_stack_lvl+0xe8/0x150 [ 221.440386][T11082] __get_user_pages+0x2453/0x29d0 [ 221.440420][T11082] ? __lock_acquire+0x6b5/0x2cf0 [ 221.440466][T11082] ? __gup_longterm_locked+0xc4e/0x1630 [ 221.440496][T11082] ? down_read_killable+0x1bb/0x340 [ 221.440522][T11082] __gup_longterm_locked+0xdcf/0x1630 [ 221.440578][T11082] gup_fast_fallback+0x1d82/0x22e0 [ 221.440639][T11082] ? __pfx_gup_fast_fallback+0x10/0x10 [ 221.440668][T11082] ? futex_unqueue+0x22/0x240 [ 221.440689][T11082] ? futex_unqueue+0x22/0x240 [ 221.440707][T11082] ? is_valid_gup_args+0x11f/0x200 [ 221.440731][T11082] ? get_user_pages_fast+0x4d/0xb0 [ 221.440755][T11082] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 221.440779][T11082] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 221.440799][T11082] iov_iter_get_pages2+0x5e/0xa0 [ 221.440819][T11082] __se_sys_vmsplice+0x7b3/0x1490 [ 221.440847][T11082] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 221.440862][T11082] ? __pfx_futex_wait+0x10/0x10 [ 221.440893][T11082] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.440953][T11082] do_syscall_64+0x14d/0xf80 [ 221.440975][T11082] ? trace_irq_disable+0x3b/0x150 [ 221.440988][T11082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.441004][T11082] ? clear_bhb_loop+0x40/0x90 [ 221.441022][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.441037][T11082] RIP: 0033:0x7fb9cfd9c819 [ 221.441052][T11082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.441065][T11082] RSP: 002b:00007fb9d0ce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 221.441083][T11082] RAX: ffffffffffffffda RBX: 00007fb9d0015fa0 RCX: 00007fb9cfd9c819 [ 221.441094][T11082] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 221.441104][T11082] RBP: 00007fb9cfe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 221.441113][T11082] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 221.441122][T11082] R13: 00007fb9d0016038 R14: 00007fb9d0015fa0 R15: 00007fff7f005198 [ 221.441145][T11082] [ 221.804446][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 221.994941][T11109] tipc: Enabling of bearer rejected, failed to enable media [ 222.104338][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 222.143941][T11123] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1495'. [ 222.159733][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 222.793837][T11175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1509'. [ 222.932363][T11179] syzkaller1: entered promiscuous mode [ 222.943531][T11179] syzkaller1: entered allmulticast mode [ 223.214898][T11208] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 223.264128][T11208] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 223.315024][T11214] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 223.326781][T11208] macvlan2: entered promiscuous mode [ 223.334372][T11208] macvlan2: entered allmulticast mode [ 223.340314][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 223.349739][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 223.377855][T11208] bond6: entered promiscuous mode [ 223.382973][T11208] bridge4: entered promiscuous mode [ 223.399014][T11208] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.414301][T11208] bond6: left promiscuous mode [ 223.419455][T11208] bridge4: left promiscuous mode [ 223.474292][T11225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.679378][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 223.804777][T11252] netlink: 'syz.1.1527': attribute type 3 has an invalid length. [ 223.813095][T11252] netlink: 'syz.1.1527': attribute type 3 has an invalid length. [ 224.001222][T11260] syzkaller0: entered promiscuous mode [ 224.006944][T11260] syzkaller0: entered allmulticast mode [ 224.219493][T11280] xt_ecn: cannot match TCP bits for non-tcp packets [ 224.370482][T11285] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.438561][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.802009][T11325] syzkaller0: entered promiscuous mode [ 224.808000][T11325] syzkaller0: entered allmulticast mode [ 225.032749][T11337] syzkaller1: left promiscuous mode [ 225.040554][T11337] syzkaller1: left allmulticast mode [ 225.066314][T11338] 8021q: VLANs not supported on syzkaller1 [ 225.072885][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.081132][ T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.294494][T11352] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 225.495708][T11363] syzkaller0: entered promiscuous mode [ 225.502557][T11363] syzkaller0: entered allmulticast mode [ 225.684127][T11375] netlink: zone id is out of range [ 225.691321][T11375] netlink: zone id is out of range [ 225.709095][ T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.718112][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.727464][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.731598][T11375] netlink: zone id is out of range [ 225.742483][T11375] netlink: zone id is out of range [ 225.747973][T11375] netlink: zone id is out of range [ 225.847117][T11383] __nla_validate_parse: 5 callbacks suppressed [ 225.847224][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1568'. [ 225.870473][T11383] netlink: 'syz.3.1568': attribute type 20 has an invalid length. [ 225.878659][T11383] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.052140][T11393] netlink: 'syz.1.1571': attribute type 1 has an invalid length. [ 226.066249][T11394] syzkaller1: entered allmulticast mode [ 226.100159][T11393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.128746][T11403] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.136262][T11403] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 226.148509][T11403] bond7: (slave vcan0): Error -95 calling set_mac_address [ 226.167667][T11393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1571'. [ 226.197706][T11393] netlink: 'syz.1.1571': attribute type 26 has an invalid length. [ 226.205974][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 226.216685][T11393] netlink: 'syz.1.1571': attribute type 26 has an invalid length. [ 226.226361][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 226.292839][T11410] syzkaller0: entered promiscuous mode [ 226.298658][T11410] syzkaller0: entered allmulticast mode [ 226.569074][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 226.609055][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1582'. [ 226.705793][T11436] syzkaller1: entered promiscuous mode [ 226.712004][T11436] syzkaller1: entered allmulticast mode [ 226.747889][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 226.768206][T11436] erspan0: left allmulticast mode [ 226.968930][T11450] syzkaller0: entered promiscuous mode [ 226.974459][T11450] syzkaller0: entered allmulticast mode [ 227.105596][T11458] xt_nat: multiple ranges no longer supported [ 227.130824][T11458] xt_hashlimit: size too large, truncated to 1048576 [ 227.202689][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1593'. [ 227.221812][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 227.425066][T11469] netlink: 'syz.4.1595': attribute type 3 has an invalid length. [ 227.546276][T11478] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.621587][T11485] syzkaller0: entered promiscuous mode [ 227.627322][T11485] syzkaller0: entered allmulticast mode [ 227.710221][T11494] nbd: couldn't find a device at index 1048580 [ 227.934448][T11509] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.967290][T11498] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 228.012573][T11507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1609'. [ 228.029137][T11507] bridge: RTM_NEWNEIGH with invalid ether address [ 228.032502][T11519] netlink: 'syz.2.1608': attribute type 83 has an invalid length. [ 228.074447][T11522] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1609'. [ 228.111701][T11517] bridge: RTM_NEWNEIGH with invalid ether address [ 228.253925][T11529] xt_hashlimit: size too large, truncated to 1048576 [ 228.669095][T11555] syzkaller0: entered promiscuous mode [ 228.674629][T11555] syzkaller0: entered allmulticast mode [ 229.160656][T11580] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 229.254686][T11580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.290299][T11588] vlan3: entered promiscuous mode [ 229.306008][T11588] bond4: entered promiscuous mode [ 229.319626][T11588] vlan3: entered allmulticast mode [ 229.324820][T11588] bond4: entered allmulticast mode [ 229.352787][T11593] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 229.373638][T11593] netlink: 'syz.3.1626': attribute type 2 has an invalid length. [ 229.566052][T11611] net_ratelimit: 50 callbacks suppressed [ 229.566071][T11611] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 229.693693][T11614] syzkaller0: entered promiscuous mode [ 229.726876][T11614] syzkaller0: entered allmulticast mode [ 229.763892][T11629] tipc: Enabling of bearer rejected, media not registered [ 229.969242][T11645] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 230.194800][ T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.829008][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.837273][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.846841][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.856102][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.066266][T11698] syzkaller0: refused to change device tx_queue_len [ 231.095945][T11692] tipc: Started in network mode [ 231.117515][T11692] tipc: Node identity ac141441, cluster identity 4711 [ 231.142692][T11692] tipc: Enabling of bearer rejected, failed to enable media [ 231.186351][T11699] syzkaller0: entered promiscuous mode [ 231.205334][T11699] syzkaller0: entered allmulticast mode [ 231.413086][T11722] __nla_validate_parse: 12 callbacks suppressed [ 231.413105][T11722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1651'. [ 231.673139][T11740] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20004 [ 232.028025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.095466][T11764] syzkaller0: entered promiscuous mode [ 232.102174][T11764] syzkaller0: entered allmulticast mode [ 232.411745][T11786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.455107][T11738] Bluetooth: hci3: Opcode 0x080f failed: -4 [ 233.068067][ T5145] Bluetooth: hci4: link tx timeout [ 233.073311][ T5145] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.707561][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 235.147666][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 235.321673][T11773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.480004][T11838] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.543404][T11836] veth1_macvtap: left promiscuous mode [ 235.581494][T11842] netlink: 'syz.4.1675': attribute type 2 has an invalid length. [ 235.638287][T11848] syzkaller0: entered promiscuous mode [ 235.666755][T11848] syzkaller0: entered allmulticast mode [ 235.948998][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.040074][T11874] syzkaller0: entered promiscuous mode [ 236.063254][T11874] syzkaller0: entered allmulticast mode [ 236.121964][T11883] netlink: 'syz.3.1687': attribute type 10 has an invalid length. [ 236.216491][T11880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.242769][T11883] ipt_ECN: cannot use operation on non-tcp rule [ 236.588278][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.596482][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.605365][T11908] syzkaller0: entered promiscuous mode [ 236.616190][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.628156][T11908] syzkaller0: entered allmulticast mode [ 236.630039][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.865540][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 236.959835][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.993592][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 237.295288][T11952] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1707'. [ 237.333860][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 237.343645][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 237.406086][T11956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1703'. [ 237.894495][T11967] syzkaller0: entered promiscuous mode [ 237.909008][T11967] syzkaller0: entered allmulticast mode [ 238.278121][T12000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.285471][T12000] IPv6: NLM_F_CREATE should be set when creating new route [ 238.462703][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 238.595999][T12014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.764704][T11983] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 239.788114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.807630][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 239.983236][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1721'. [ 240.148469][T12054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1723'. [ 240.169035][T12053] IPVS: ip_vs_add_dest(): server weight less than zero [ 240.506290][T12073] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 240.552700][T12075] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4181141712/4181141713 [ 240.654682][T12075] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4181141712/4181141713 [ 240.694145][T12084] syzkaller0: entered promiscuous mode [ 240.722526][T12084] syzkaller0: entered allmulticast mode [ 241.280276][T12120] syzkaller0: entered promiscuous mode [ 241.285821][T12120] syzkaller0: entered allmulticast mode [ 241.565590][T12126] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 241.584882][T12144] can: request_module (can-proto-0) failed. [ 241.666405][T12126] bond7 (unregistering): Released all slaves [ 241.966124][T12168] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 242.014127][T12153] syzkaller0: entered promiscuous mode [ 242.019795][T12153] syzkaller0: entered allmulticast mode [ 242.035696][T12168] __nla_validate_parse: 4 callbacks suppressed [ 242.035716][T12168] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1752'. [ 242.102559][T12168] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1752'. [ 242.127679][T12168] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1752'. [ 242.128314][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 242.163204][T12180] netlink: 'syz.2.1755': attribute type 8 has an invalid length. [ 243.993870][T12225] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.040187][T12225] bond5: (slave lo): Enslaving as an active interface with an up link [ 244.081577][T12225] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 244.103830][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 244.116439][T12231] can: request_module (can-proto-5) failed. [ 244.273791][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 244.339979][T12252] openvswitch: netlink: Missing key (keys=40, expected=80) [ 244.354770][T12229] syzkaller0: entered promiscuous mode [ 244.398008][T12229] syzkaller0: entered allmulticast mode [ 244.491316][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 244.510072][T12242] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.518780][T12242] bond7: (slave bond8): Enslaving as an active interface with an up link [ 244.527546][T12265] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1765'. [ 244.539014][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 244.551815][T12256] team0 (unregistering): Port device team_slave_0 removed [ 244.561924][T12256] team0 (unregistering): Port device team_slave_1 removed [ 246.002265][T12278] pim6reg: entered allmulticast mode [ 246.119400][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 246.129889][T12289] dummy0: left allmulticast mode [ 246.136048][T12289] bridge0: port 2(dummy0) entered disabled state [ 246.181127][T12289] batman_adv: batadv0: Adding interface: dummy0 [ 246.198956][T12289] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.227564][T12289] batman_adv: batadv0: Interface activated: dummy0 [ 246.296111][T12293] batadv0: mtu less than device minimum [ 246.332349][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.338804][T12302] netlink: 'syz.2.1771': attribute type 7 has an invalid length. [ 246.344348][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.362562][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.374347][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.375210][T12302] netlink: 'syz.2.1771': attribute type 8 has an invalid length. [ 246.385999][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.404663][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.416407][T12293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.512673][T12302] veth0: entered promiscuous mode [ 246.532232][T12302] batadv0: entered promiscuous mode [ 246.559640][T12302] hsr2: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 246.863057][T12338] syzkaller0: entered promiscuous mode [ 246.886600][T12338] syzkaller0: entered allmulticast mode [ 247.219763][T12359] __nla_validate_parse: 4 callbacks suppressed [ 247.219783][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 247.277938][T12359] block nbd3: Unsupported socket: should be TCP or UNIX. [ 247.475565][T12372] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1796'. [ 247.659243][T12385] syzkaller0: entered promiscuous mode [ 247.664781][T12385] syzkaller0: entered allmulticast mode [ 247.949468][T12409] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1799'. [ 250.031487][ T1167] block nbd2: Connection timed out, retrying (0/2 alive) [ 250.039693][ T1167] block nbd2: Connection timed out, retrying (0/2 alive) [ 250.046855][ T1167] block nbd2: Connection timed out, retrying (0/2 alive) [ 250.055800][ T1167] block nbd2: Connection timed out, retrying (0/2 alive) [ 250.063660][ T11] block nbd2: Dead connection, failed to find a fallback [ 250.072292][ T11] block nbd2: shutting down sockets [ 250.079824][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.090684][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 250.099030][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.109173][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 250.116955][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.127376][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 250.136225][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.145768][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 250.154916][T10268] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.165804][T10268] Buffer I/O error on dev nbd2, logical block 0, async page read [ 250.174100][T10268] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.183914][T10268] Buffer I/O error on dev nbd2, logical block 1, async page read [ 250.191947][T10268] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.201831][T10268] Buffer I/O error on dev nbd2, logical block 2, async page read [ 250.210016][T10268] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.220189][T10268] Buffer I/O error on dev nbd2, logical block 3, async page read [ 250.229737][T10268] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.239274][T10268] Buffer I/O error on dev nbd2, logical block 0, async page read [ 250.247070][T10268] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.256718][T10268] Buffer I/O error on dev nbd2, logical block 1, async page read [ 250.265032][T10268] ldm_validate_partition_table(): Disk read failed. [ 250.273573][T10268] Dev nbd2: unable to read RDB block 0 [ 250.279700][T10268] nbd2: unable to read partition table [ 250.299080][T10268] ldm_validate_partition_table(): Disk read failed. [ 250.305957][T10268] Dev nbd2: unable to read RDB block 0 [ 250.311997][T10268] nbd2: unable to read partition table [ 250.494152][T12377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.645948][T12425] syzkaller0: entered promiscuous mode [ 250.652420][T12425] syzkaller0: entered allmulticast mode [ 250.674734][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 250.699164][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 250.752878][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'. [ 250.763354][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 250.866634][T12437] delete_channel: no stack [ 251.599915][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'. [ 251.620579][T12447] syzkaller0: entered promiscuous mode [ 251.626174][T12447] syzkaller0: entered allmulticast mode [ 251.633780][T12450] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 251.643044][T12450] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1815'. [ 251.843972][T12458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1816'. [ 251.911171][T12466] net_ratelimit: 15 callbacks suppressed [ 251.911191][T12466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.994719][T12469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.260307][T12487] syzkaller0: entered promiscuous mode [ 252.265831][T12487] syzkaller0: entered allmulticast mode [ 252.329981][T12495] __nla_validate_parse: 5 callbacks suppressed [ 252.329999][T12495] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1830'. [ 252.345793][T12495] netlink: 2292 bytes leftover after parsing attributes in process `syz.0.1830'. [ 252.651810][T12515] openvswitch: netlink: IP tunnel TTL not specified. [ 252.659399][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 252.705205][T12523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.921374][T12519] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 253.033719][T12544] syzkaller0: entered promiscuous mode [ 253.048283][T12544] syzkaller0: entered allmulticast mode [ 253.061973][T12548] lo speed is unknown, defaulting to 1000 [ 253.127835][T12548] lo speed is unknown, defaulting to 1000 [ 253.134864][T12553] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1848'. [ 253.149783][T12548] lo speed is unknown, defaulting to 1000 [ 253.292282][T12558] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1850'. [ 253.368864][T12566] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 253.384506][T12566] netlink: 'syz.2.1852': attribute type 3 has an invalid length. [ 253.408052][T12566] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1852'. [ 253.658113][ T24] lo speed is unknown, defaulting to 1000 [ 253.664916][T12548] infiniband syz2: set active [ 253.675106][T12548] infiniband syz2: added lo [ 253.708825][T12587] syzkaller0: entered promiscuous mode [ 253.721203][T12587] syzkaller0: entered allmulticast mode [ 253.762660][T12548] RDS/IB: syz2: added [ 253.768023][T12548] smc: adding ib device syz2 with port count 1 [ 253.774584][T12548] smc: ib device syz2 port 1 has no pnetid [ 254.121532][ T24] lo speed is unknown, defaulting to 1000 [ 254.140148][T12548] lo speed is unknown, defaulting to 1000 [ 254.381821][T12603] netlink: 'syz.1.1865': attribute type 4 has an invalid length. [ 254.391399][T12606] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.401033][T12607] sctp: [Deprecated]: syz.2.1866 (pid 12607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.401033][T12607] Use struct sctp_sack_info instead [ 254.506744][T12603] netlink: 'syz.1.1865': attribute type 4 has an invalid length. [ 254.700226][T12627] xt_ipcomp: unknown flags 1D [ 254.724718][T12548] lo speed is unknown, defaulting to 1000 [ 254.807159][T12625] syzkaller0: entered promiscuous mode [ 254.847042][T12625] syzkaller0: entered allmulticast mode [ 254.904388][T12644] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 255.794594][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.615921][T12644] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 256.642815][T12548] lo speed is unknown, defaulting to 1000 [ 256.922244][T12692] netlink: 'syz.2.1883': attribute type 19 has an invalid length. [ 256.956387][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 257.334243][T12548] lo speed is unknown, defaulting to 1000 [ 257.472815][T12727] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1892'. [ 257.892958][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 257.921261][T12748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1897'. [ 257.931390][T12752] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1898'. [ 257.951006][T12548] lo speed is unknown, defaulting to 1000 [ 257.977699][T12748] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1897'. [ 258.089859][T12762] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1901'. [ 258.099541][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1902'. [ 258.152256][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1902'. [ 258.227040][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 258.430318][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1908'. [ 258.814527][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.956517][T12815] lo speed is unknown, defaulting to 1000 [ 259.038918][T12817] bridge0: port 3(team0) entered disabled state [ 259.062097][T12817] team0 (unregistering): left allmulticast mode [ 259.071175][T12817] team_slave_0: left allmulticast mode [ 259.076966][T12817] team_slave_1: left allmulticast mode [ 259.083511][T12817] team0 (unregistering): left promiscuous mode [ 259.090937][T12817] team_slave_0: left promiscuous mode [ 259.096671][T12817] team_slave_1: left promiscuous mode [ 259.104195][T12817] bridge0: port 3(team0) entered disabled state [ 259.130720][T12817] team0 (unregistering): Port device team_slave_0 removed [ 259.150872][T12817] team0 (unregistering): Port device team_slave_1 removed [ 259.593093][T12851] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 259.657587][T12846] can: request_module (can-proto-5) failed. [ 259.798719][T12851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.870957][T12860] bond7: (slave bridge3): making interface the new active one [ 259.890702][T12860] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 259.927842][T12871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.986988][T12871] netlink: 'syz.0.1929': attribute type 6 has an invalid length. [ 260.318055][T12880] syzkaller0: entered promiscuous mode [ 260.323594][T12880] syzkaller0: entered allmulticast mode [ 260.578840][T12907] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 260.622938][T12909] Cannot find map_set index 65533 as target [ 260.870746][T12926] s5ÿÿø: renamed from vlan1 [ 260.875435][T12925] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 260.919865][T12930] bond7: Invalid ad_actor_system MAC address. [ 260.926313][T12930] bond7: option ad_actor_system: invalid value (1) [ 260.944945][T12930] bond7 (unregistering): Released all slaves [ 261.034846][T12938] syzkaller0: entered promiscuous mode [ 261.041358][T12938] syzkaller0: entered allmulticast mode [ 261.364490][T12962] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 261.372825][T12962] nbd: error processing sock list [ 261.389041][T12962] xt_TCPMSS: Only works on TCP SYN packets [ 261.451236][T12970] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 261.474685][T12970] nbd: error processing sock list [ 261.717740][T12987] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 261.829865][T12987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.879163][T12989] bond7: (slave gretap2): making interface the new active one [ 261.898469][T12989] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 262.088774][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.105605][T13015] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 262.108471][T13016] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 262.159228][T13018] netlink: 'syz.3.1977': attribute type 33 has an invalid length. [ 262.252384][T13019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.283425][T13019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.335955][T13018] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 262.379428][T13018] bond8 (unregistering): Released all slaves [ 262.517085][T13019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.529812][T13019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.634825][T13041] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 262.655906][T13041] __nla_validate_parse: 21 callbacks suppressed [ 262.655925][T13041] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1984'. [ 262.700569][T13019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.716573][T13019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.769419][T13044] lo speed is unknown, defaulting to 1000 [ 262.883992][T13019] batman_adv: batadv0: Removing interface: netdevsim0 [ 262.898319][T13019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.007901][T13019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.031769][T13054] xt_hashlimit: size too large, truncated to 1048576 [ 263.191397][T13058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.418385][T13063] syzkaller0: entered promiscuous mode [ 263.434242][T13063] syzkaller0: entered allmulticast mode [ 263.465802][ T24] IPVS: starting estimator thread 0... [ 263.481489][T13074] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 263.506553][ T64] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.520613][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.567990][T13075] IPVS: using max 42 ests per chain, 100800 per kthread [ 263.716826][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1994'. [ 263.739125][ T178] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.748150][ T178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.763570][T13081] bond0: entered promiscuous mode [ 263.770709][T13081] bond0: left promiscuous mode [ 263.810625][T13071] syzkaller0: entered promiscuous mode [ 263.816279][T13071] syzkaller0: entered allmulticast mode [ 265.198881][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.207221][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.216138][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.224727][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.260976][T13103] dvmrp0: entered allmulticast mode [ 265.386295][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2000'. [ 265.527053][T13119] bond9: (slave gretap0): Device is not bonding slave [ 265.537731][T13119] bond9: option active_slave: invalid value (gretap0) [ 265.546898][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 265.581377][T13119] bond9 (unregistering): Released all slaves [ 265.822062][T13147] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 265.876125][T13147] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.901823][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 265.916060][T13147] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.931518][T13147] bond8: (slave bond9): Enslaving as an active interface with a down link [ 265.965953][T13150] syzkaller0: entered promiscuous mode [ 265.979792][T13150] syzkaller0: entered allmulticast mode [ 266.212711][T13172] sctp: [Deprecated]: syz.4.2016 (pid 13172) Use of int in max_burst socket option deprecated. [ 266.212711][T13172] Use struct sctp_assoc_value instead [ 266.613934][T13190] netlink: 'syz.4.2025': attribute type 1 has an invalid length. [ 266.678092][T13190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.698843][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2027'. [ 266.808172][T13196] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 267.193817][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2034'. [ 267.242010][T13227] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 267.276379][T13216] bond0: entered promiscuous mode [ 267.292140][T13216] bond_slave_0: entered promiscuous mode [ 267.317910][T13216] bond_slave_1: entered promiscuous mode [ 267.333539][T13216] gretap0: entered promiscuous mode [ 267.339694][T13216] debugfs: 'hsr0' already exists in 'hsr' [ 267.345634][T13216] Cannot create hsr debugfs directory [ 267.349818][T13217] netlink: 'syz.0.2033': attribute type 9 has an invalid length. [ 267.423771][T13237] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2038'. [ 267.436047][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2038'. [ 267.471387][T13238] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2036'. [ 267.498098][T13238] 0·: renamed from hsr_slave_1 (while UP) [ 267.525393][T13238] 0·: entered allmulticast mode [ 267.536350][T13238] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 267.719239][T13254] netlink: 'syz.4.2043': attribute type 12 has an invalid length. [ 267.773432][T13252] bridge2: entered promiscuous mode [ 267.797696][T13252] bridge2: entered allmulticast mode [ 267.892795][T13267] __nla_validate_parse: 1 callbacks suppressed [ 267.892813][T13267] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2047'. [ 267.951330][T13273] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 267.960712][T13267] netlink: 'syz.1.2047': attribute type 2 has an invalid length. [ 267.963209][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2049'. [ 268.119757][T13286] sctp: [Deprecated]: syz.1.2055 (pid 13286) Use of int in max_burst socket option. [ 268.119757][T13286] Use struct sctp_assoc_value instead [ 268.143819][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 268.258764][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 268.275694][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 268.294280][T13295] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 268.331578][T13295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.386481][T13295] bond9: (slave veth3): Enslaving as an active interface with a down link [ 268.427210][T13295] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 268.456209][T13308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2061'. [ 268.470907][T13295] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 268.492909][T13295] netlink: 'syz.4.2056': attribute type 2 has an invalid length. [ 268.564669][T13315] syzkaller0: entered promiscuous mode [ 268.584146][T13315] syzkaller0: entered allmulticast mode [ 268.694493][T13319] syzkaller0: entered promiscuous mode [ 268.700294][T13319] syzkaller0: entered allmulticast mode [ 268.799503][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2066'. [ 268.872491][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2068'. [ 268.911761][T13343] Cannot find map_set index 65533 as target [ 270.480279][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 270.661705][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 270.696592][T13374] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 271.009107][T13404] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 271.145759][T13414] chnl_net:caif_netlink_parms(): no params data found [ 271.237148][T13425] netlink: 'syz.1.2095': attribute type 3 has an invalid length. [ 271.281751][T13414] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20257 [ 271.480811][ T5145] block nbd3: Receive control failed (result -1) [ 271.725519][T13450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.392923][T13492] dvmrp0: entered allmulticast mode [ 272.598271][T13514] [ 272.600685][T13514] ====================================================== [ 272.607711][T13514] WARNING: possible circular locking dependency detected [ 272.614426][T13518] validate_nla: 5 callbacks suppressed [ 272.614445][T13518] netlink: 'syz.0.2123': attribute type 3 has an invalid length. [ 272.614748][T13514] syzkaller #0 Not tainted [ 272.614759][T13514] ------------------------------------------------------ [ 272.614767][T13514] syz.1.2124/13514 is trying to acquire lock: [ 272.645524][T13514] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 272.654655][T13514] [ 272.654655][T13514] but task is already holding lock: [ 272.662013][T13514] ffff88805d8c2800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 272.671502][T13514] [ 272.671502][T13514] which lock already depends on the new lock. [ 272.671502][T13514] [ 272.681937][T13514] [ 272.681937][T13514] the existing dependency chain (in reverse order) is: [ 272.690942][T13514] [ 272.690942][T13514] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 272.698585][T13514] __might_fault+0xcb/0x130 [ 272.703609][T13514] _copy_from_user+0x28/0xb0 [ 272.708813][T13514] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 272.715342][T13514] ip_generic_getfrag+0x149/0x2d0 [ 272.720876][T13514] __ip6_append_data+0x36be/0x3c50 [ 272.726495][T13514] ip6_append_data+0x10f/0x280 [ 272.731766][T13514] rawv6_sendmsg+0x12d3/0x18e0 [ 272.737043][T13514] ____sys_sendmsg+0x80a/0x9f0 [ 272.742319][T13514] ___sys_sendmsg+0x2a5/0x360 [ 272.747507][T13514] __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.753018][T13514] do_syscall_64+0x14d/0xf80 [ 272.758125][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.764548][T13514] [ 272.764548][T13514] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 272.772288][T13514] lock_sock_nested+0x48/0x100 [ 272.777667][T13514] inet_shutdown+0x6a/0x390 [ 272.782689][T13514] nbd_mark_nsock_dead+0x2e9/0x560 [ 272.788327][T13514] recv_work+0x1c7f/0x1d90 [ 272.793446][T13514] process_scheduled_works+0xb6e/0x18c0 [ 272.799514][T13514] worker_thread+0xa53/0xfc0 [ 272.804617][T13514] kthread+0x388/0x470 [ 272.809189][T13514] ret_from_fork+0x51e/0xb90 [ 272.814289][T13514] ret_from_fork_asm+0x1a/0x30 [ 272.819565][T13514] [ 272.819565][T13514] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 272.827194][T13514] __mutex_lock+0x19f/0x1300 [ 272.832303][T13514] nbd_queue_rq+0x37b/0x1100 [ 272.837400][T13514] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 272.843466][T13514] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 272.850301][T13514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 272.856894][T13514] blk_mq_run_hw_queue+0x348/0x4f0 [ 272.862605][T13514] blk_mq_dispatch_list+0xd16/0xe10 [ 272.868415][T13514] blk_mq_flush_plug_list+0x48d/0x570 [ 272.874304][T13514] __blk_flush_plug+0x3ed/0x4d0 [ 272.879674][T13514] __submit_bio+0x28d/0x580 [ 272.884685][T13514] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 272.890914][T13514] block_read_full_folio+0x599/0x830 [ 272.896711][T13514] filemap_read_folio+0x137/0x3b0 [ 272.902246][T13514] do_read_cache_folio+0x358/0x590 [ 272.907871][T13514] read_part_sector+0xb6/0x2b0 [ 272.913235][T13514] adfspart_check_ICS+0xa5/0xa40 [ 272.918681][T13514] bdev_disk_changed+0x7ba/0x1550 [ 272.924214][T13514] blkdev_get_whole+0x380/0x510 [ 272.929569][T13514] bdev_open+0x31e/0xd30 [ 272.934318][T13514] blkdev_open+0x470/0x610 [ 272.939328][T13514] do_dentry_open+0x785/0x14e0 [ 272.944602][T13514] vfs_open+0x3b/0x340 [ 272.949187][T13514] path_openat+0x2e08/0x3860 [ 272.954288][T13514] do_file_open+0x23e/0x4a0 [ 272.959295][T13514] do_sys_openat2+0x113/0x200 [ 272.964583][T13514] __x64_sys_openat+0x138/0x170 [ 272.969978][T13514] do_syscall_64+0x14d/0xf80 [ 272.975120][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.981541][T13514] [ 272.981541][T13514] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 272.988749][T13514] __mutex_lock+0x19f/0x1300 [ 272.993856][T13514] nbd_queue_rq+0xc6/0x1100 [ 272.998869][T13514] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 273.004944][T13514] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 273.011791][T13514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 273.018293][T13514] blk_mq_run_hw_queue+0x348/0x4f0 [ 273.023948][T13514] blk_mq_dispatch_list+0xd16/0xe10 [ 273.029654][T13514] blk_mq_flush_plug_list+0x48d/0x570 [ 273.035534][T13514] __blk_flush_plug+0x3ed/0x4d0 [ 273.040896][T13514] __submit_bio+0x28d/0x580 [ 273.045911][T13514] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 273.052054][T13514] block_read_full_folio+0x599/0x830 [ 273.057849][T13514] filemap_read_folio+0x137/0x3b0 [ 273.063412][T13514] do_read_cache_folio+0x358/0x590 [ 273.069045][T13514] read_part_sector+0xb6/0x2b0 [ 273.074412][T13514] adfspart_check_ICS+0xa5/0xa40 [ 273.079861][T13514] bdev_disk_changed+0x7ba/0x1550 [ 273.085567][T13514] blkdev_get_whole+0x380/0x510 [ 273.090932][T13514] bdev_open+0x31e/0xd30 [ 273.095778][T13514] blkdev_open+0x470/0x610 [ 273.100714][T13514] do_dentry_open+0x785/0x14e0 [ 273.106004][T13514] vfs_open+0x3b/0x340 [ 273.110583][T13514] path_openat+0x2e08/0x3860 [ 273.115701][T13514] do_file_open+0x23e/0x4a0 [ 273.120712][T13514] do_sys_openat2+0x113/0x200 [ 273.125907][T13514] __x64_sys_openat+0x138/0x170 [ 273.131274][T13514] do_syscall_64+0x14d/0xf80 [ 273.136384][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.142796][T13514] [ 273.142796][T13514] -> #3 (set->srcu){.+.+}-{0:0}: [ 273.149911][T13514] __synchronize_srcu+0xca/0x300 [ 273.155361][T13514] elevator_switch+0x1e8/0x7a0 [ 273.160725][T13514] elevator_change+0x2cc/0x450 [ 273.166013][T13514] elevator_set_default+0x36c/0x430 [ 273.171749][T13514] blk_register_queue+0x366/0x430 [ 273.177295][T13514] __add_disk+0x677/0xd50 [ 273.182142][T13514] add_disk_fwnode+0xfb/0x480 [ 273.187333][T13514] nbd_dev_add+0x72c/0xb50 [ 273.192259][T13514] nbd_init+0x168/0x1f0 [ 273.196941][T13514] do_one_initcall+0x250/0x8d0 [ 273.202240][T13514] do_initcall_level+0x104/0x190 [ 273.207710][T13514] do_initcalls+0x59/0xa0 [ 273.212560][T13514] kernel_init_freeable+0x2a6/0x3e0 [ 273.218283][T13514] kernel_init+0x1d/0x1d0 [ 273.223119][T13514] ret_from_fork+0x51e/0xb90 [ 273.228320][T13514] ret_from_fork_asm+0x1a/0x30 [ 273.233616][T13514] [ 273.233616][T13514] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 273.241514][T13514] __mutex_lock+0x19f/0x1300 [ 273.246624][T13514] elevator_change+0x1b3/0x450 [ 273.251912][T13514] elevator_set_none+0xb5/0x140 [ 273.257293][T13514] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 273.263617][T13514] nbd_start_device+0x17f/0xb10 [ 273.268984][T13514] nbd_genl_connect+0x165b/0x1cf0 [ 273.274623][T13514] genl_family_rcv_msg_doit+0x22a/0x330 [ 273.280700][T13514] genl_rcv_msg+0x61c/0x7a0 [ 273.285720][T13514] netlink_rcv_skb+0x232/0x4b0 [ 273.290995][T13514] genl_rcv+0x28/0x40 [ 273.295494][T13514] netlink_unicast+0x80f/0x9b0 [ 273.300767][T13514] netlink_sendmsg+0x813/0xb40 [ 273.306051][T13514] ____sys_sendmsg+0x972/0x9f0 [ 273.311325][T13514] ___sys_sendmsg+0x2a5/0x360 [ 273.316513][T13514] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.321961][T13514] do_syscall_64+0x14d/0xf80 [ 273.327235][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.333638][T13514] [ 273.333638][T13514] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 273.342235][T13514] blk_alloc_queue+0x546/0x680 [ 273.347515][T13514] __blk_mq_alloc_disk+0x197/0x390 [ 273.353137][T13514] nbd_dev_add+0x499/0xb50 [ 273.358060][T13514] nbd_init+0x168/0x1f0 [ 273.362724][T13514] do_one_initcall+0x250/0x8d0 [ 273.368002][T13514] do_initcall_level+0x104/0x190 [ 273.373454][T13514] do_initcalls+0x59/0xa0 [ 273.378295][T13514] kernel_init_freeable+0x2a6/0x3e0 [ 273.384002][T13514] kernel_init+0x1d/0x1d0 [ 273.388842][T13514] ret_from_fork+0x51e/0xb90 [ 273.394380][T13514] ret_from_fork_asm+0x1a/0x30 [ 273.399655][T13514] [ 273.399655][T13514] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 273.406858][T13514] __lock_acquire+0x15a5/0x2cf0 [ 273.412219][T13514] lock_acquire+0xf0/0x2e0 [ 273.417144][T13514] fs_reclaim_acquire+0x71/0x100 [ 273.422587][T13514] prepare_alloc_pages+0x152/0x650 [ 273.428205][T13514] __alloc_frozen_pages_noprof+0x12f/0x380 [ 273.434546][T13514] alloc_pages_mpol+0x232/0x4a0 [ 273.439931][T13514] vma_alloc_folio_noprof+0xea/0x210 [ 273.445726][T13514] do_pte_missing+0x1656/0x3490 [ 273.451082][T13514] handle_mm_fault+0x1bec/0x3310 [ 273.456793][T13514] do_user_addr_fault+0x75b/0x1340 [ 273.462416][T13514] exc_page_fault+0x6a/0xc0 [ 273.467430][T13514] asm_exc_page_fault+0x26/0x30 [ 273.472790][T13514] rep_movs_alternative+0x4a/0x90 [ 273.478333][T13514] _copy_to_user+0x8a/0xb0 [ 273.483267][T13514] ethtool_get_strings+0x7a3/0x8d0 [ 273.488894][T13514] dev_ethtool+0x132e/0x1ae0 [ 273.493996][T13514] dev_ioctl+0x392/0x1150 [ 273.498849][T13514] sock_do_ioctl+0x23e/0x320 [ 273.503945][T13514] sock_ioctl+0x5c6/0x7f0 [ 273.508787][T13514] __se_sys_ioctl+0xfc/0x170 [ 273.513885][T13514] do_syscall_64+0x14d/0xf80 [ 273.518994][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.525398][T13514] [ 273.525398][T13514] other info that might help us debug this: [ 273.525398][T13514] [ 273.535610][T13514] Chain exists of: [ 273.535610][T13514] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 273.535610][T13514] [ 273.548208][T13514] Possible unsafe locking scenario: [ 273.548208][T13514] [ 273.555650][T13514] CPU0 CPU1 [ 273.561002][T13514] ---- ---- [ 273.566356][T13514] rlock(&mm->mmap_lock); [ 273.570761][T13514] lock(sk_lock-AF_INET6); [ 273.577786][T13514] lock(&mm->mmap_lock); [ 273.584630][T13514] lock(fs_reclaim); [ 273.588642][T13514] [ 273.588642][T13514] *** DEADLOCK *** [ 273.588642][T13514] [ 273.596792][T13514] 2 locks held by syz.1.2124/13514: [ 273.601985][T13514] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 273.610958][T13514] #1: ffff88805d8c2800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 273.620876][T13514] [ 273.620876][T13514] stack backtrace: [ 273.626755][T13514] CPU: 1 UID: 0 PID: 13514 Comm: syz.1.2124 Not tainted syzkaller #0 PREEMPT(full) [ 273.626772][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.626781][T13514] Call Trace: [ 273.626790][T13514] [ 273.626797][T13514] dump_stack_lvl+0xe8/0x150 [ 273.626818][T13514] print_circular_bug+0x2e1/0x300 [ 273.626840][T13514] check_noncircular+0x12e/0x150 [ 273.626861][T13514] __lock_acquire+0x15a5/0x2cf0 [ 273.626880][T13514] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.626897][T13514] lock_acquire+0xf0/0x2e0 [ 273.626913][T13514] ? prepare_alloc_pages+0x152/0x650 [ 273.626929][T13514] ? __page_table_check_zero+0x6a/0x3e0 [ 273.626944][T13514] ? __page_table_check_zero+0x6a/0x3e0 [ 273.626959][T13514] fs_reclaim_acquire+0x71/0x100 [ 273.626974][T13514] ? prepare_alloc_pages+0x152/0x650 [ 273.626989][T13514] prepare_alloc_pages+0x152/0x650 [ 273.627012][T13514] __alloc_frozen_pages_noprof+0x12f/0x380 [ 273.627030][T13514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.627048][T13514] ? __pfx_policy_nodemask+0x10/0x10 [ 273.627065][T13514] ? __lock_acquire+0x6b5/0x2cf0 [ 273.627082][T13514] alloc_pages_mpol+0x232/0x4a0 [ 273.627100][T13514] vma_alloc_folio_noprof+0xea/0x210 [ 273.627117][T13514] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.627137][T13514] do_pte_missing+0x1656/0x3490 [ 273.627158][T13514] handle_mm_fault+0x1bec/0x3310 [ 273.627182][T13514] ? handle_mm_fault+0xee/0x3310 [ 273.627203][T13514] ? __pfx_handle_mm_fault+0x10/0x10 [ 273.627227][T13514] ? lock_mm_and_find_vma+0xa7/0x340 [ 273.627242][T13514] do_user_addr_fault+0x75b/0x1340 [ 273.627263][T13514] exc_page_fault+0x6a/0xc0 [ 273.627282][T13514] asm_exc_page_fault+0x26/0x30 [ 273.627295][T13514] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 273.627312][T13514] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 273.627325][T13514] RSP: 0018:ffffc9000c8279c8 EFLAGS: 00050206 [ 273.627337][T13514] RAX: ffffffff84afa501 RBX: 0000000000000fa0 RCX: 00000000000004ec [ 273.627347][T13514] RDX: 0000000000000000 RSI: ffffc90005a52ab4 RDI: 0000200000001000 [ 273.627357][T13514] RBP: ffffc9000c827ad0 R08: ffffc90005a52f9f R09: 1ffff92000b4a5f3 [ 273.627367][T13514] R10: dffffc0000000000 R11: fffff52000b4a5f4 R12: 00002000000014ec [ 273.627377][T13514] R13: 00007ffffffff000 R14: ffffc90005a52000 R15: 000020000000054c [ 273.627389][T13514] ? _copy_from_user+0x51/0xb0 [ 273.627408][T13514] _copy_to_user+0x8a/0xb0 [ 273.627424][T13514] ethtool_get_strings+0x7a3/0x8d0 [ 273.627447][T13514] ? __pfx_ethtool_get_strings+0x10/0x10 [ 273.627470][T13514] dev_ethtool+0x132e/0x1ae0 [ 273.627492][T13514] ? __pfx_dev_ethtool+0x10/0x10 [ 273.627517][T13514] ? dev_load+0x21/0x1f0 [ 273.627535][T13514] dev_ioctl+0x392/0x1150 [ 273.627555][T13514] sock_do_ioctl+0x23e/0x320 [ 273.627573][T13514] ? __pfx_sock_do_ioctl+0x10/0x10 [ 273.627588][T13514] ? do_futex+0x333/0x420 [ 273.627615][T13514] sock_ioctl+0x5c6/0x7f0 [ 273.627640][T13514] ? __pfx_sock_ioctl+0x10/0x10 [ 273.627663][T13514] ? __fget_files+0x2a/0x420 [ 273.627678][T13514] ? __fget_files+0x3a0/0x420 [ 273.627693][T13514] ? __fget_files+0x2a/0x420 [ 273.627708][T13514] ? bpf_lsm_file_ioctl+0x9/0x20 [ 273.627730][T13514] ? __pfx_sock_ioctl+0x10/0x10 [ 273.627753][T13514] __se_sys_ioctl+0xfc/0x170 [ 273.627773][T13514] do_syscall_64+0x14d/0xf80 [ 273.627794][T13514] ? trace_irq_disable+0x3b/0x150 [ 273.627806][T13514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.627824][T13514] ? clear_bhb_loop+0x40/0x90 [ 273.627838][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.627851][T13514] RIP: 0033:0x7ff7b1b9c819 [ 273.627864][T13514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.627876][T13514] RSP: 002b:00007ff7b2a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.627890][T13514] RAX: ffffffffffffffda RBX: 00007ff7b1e15fa0 RCX: 00007ff7b1b9c819 [ 273.627899][T13514] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 273.627908][T13514] RBP: 00007ff7b1c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 273.627917][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.627925][T13514] R13: 00007ff7b1e16038 R14: 00007ff7b1e15fa0 R15: 00007ffd4451d2b8 [ 273.627940][T13514] [ 274.112127][T13518] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode