last executing test programs: 4.945321196s ago: executing program 0 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004890000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r8, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x3c}}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0xd7f8, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x9, 0x6}, {0x6}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@delqdisc={0x1f4, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa}, {0xffe0, 0x8}, {0x5, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x65}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x0, 0xa2e, 0x2, 0xbac2, 0xfffffffa, 0x2}}, {0x8, 0x2, [0x8, 0x7]}}, {{0x1c, 0x1, {0x1, 0x3, 0xffff, 0xe, 0x2, 0x5, 0x10, 0x2}}, {0x8, 0x2, [0x7, 0x800]}}, {{0x1c, 0x1, {0x5, 0x0, 0x300, 0xe5f, 0x2, 0x1, 0x7fffffff, 0x8}}, {0x14, 0x2, [0x7f, 0xd7, 0x5, 0xc86, 0x7f, 0x6, 0x100, 0x6]}}]}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x31, 0x5, 0xa, 0x26, 0x0, 0x8, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xd, 0x3, 0x7, 0x7e, 0x0, 0x1, 0x1, 0x6}}, {0x10, 0x2, [0x6, 0x9, 0x0, 0x50, 0x80, 0x3]}}, {{0x1c, 0x1, {0x6, 0x1, 0xff, 0x101, 0x1, 0xf, 0xfffffff4, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0x5, 0x3, 0x0, 0x6, 0x2, 0x3, 0x0, 0x1}}, {0x6, 0x2, [0x200]}}, {{0x1c, 0x1, {0x2, 0x3, 0xb, 0x4, 0x2, 0xfffffff8, 0x2, 0x4}}, {0xc, 0x2, [0x4, 0x6, 0xff, 0x2]}}, {{0x1c, 0x1, {0x5, 0x54, 0x3, 0x9, 0x0, 0x400, 0x500000, 0x2}}, {0x8, 0x2, [0x43, 0x81]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x101, 0x2, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x80, 0x1ea, 0x7, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0xfff, 0x7, 0x2, 0x160f, 0x21, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094) 4.896150454s ago: executing program 3 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x8000400) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r3, r3, 0x0, 0x40) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e9890000", @ANYRES16=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x0}, 0x20) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) (async) r8 = socket$netlink(0x10, 0x3, 0xb) getsockopt$netlink(r8, 0x10e, 0xa, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) r11 = openat$cgroup_type(r10, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2944d}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1000, 0xfffffffc, 0xfffffffb}}]}, {0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e22, 0xd, @mcast1, 0x10001}}, 0x8, 0x3, 0x7, 0x5, 0x6}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r12, 0x4) 4.535107483s ago: executing program 3 (id=1185): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0x7}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x47, 0x2, 0xff69, 0x6, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x7, 0x1}, 0x3, 0x8, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) unshare(0x2c060000) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a00005a000000000dee00026b1104000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) 4.097302158s ago: executing program 1 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x7, 0xd0, &(0x7f0000000340)=""/208, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x63, 0x10, &(0x7f0000000980)={0x0, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:* r\n)'], 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @empty}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x2, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r7, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) 3.948221393s ago: executing program 0 (id=1189): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0xfff2}, {0xffe5, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x1, 0xfff1}, {0xf, 0x6}}}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 2.93202938s ago: executing program 3 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)="ac", 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xc}, {0x0, 0x7}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x48}}, 0x20040054) 2.864111391s ago: executing program 4 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff2f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0) 2.784009054s ago: executing program 1 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd7}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000140)=""/224, &(0x7f0000000100)=0xe0) 2.727747088s ago: executing program 0 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x65, 0x0, 0x2, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7810, 0x80, 0xfffffffd, 0x339}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000580)={r0, &(0x7f0000000480)='\x00', 0x40002, &(0x7f00000004c0)={@align=0x4, {0xa, 0x7ff, 0x8001, 0x5}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x4}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x9, 0x5, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pi6 \x00'}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xaec, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xe, &(0x7f00000005c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @alu={0x882958bf559a67e0, 0x1, 0x2, 0x7, 0xa, 0x50, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ce8}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0x8, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r6, r7, r8, 0x1, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffff9}, 0x94) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000980)=0x63, 0x2) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f00000009c0)={0xa, 0x4e23, 0x10001, @mcast1, 0x1b}, 0x1c) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000a80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)="e65ddba13a37c8ba99e1ca612b2e3a5acd572ed10f31cc01b62d4cc9005ce4df9527e45c7176246078c1a88adfafc5881bcd4a390554c25383648d492cf988bac2a47a7a7f589562036acf778d12cfa058aeb79bc98876879d130470bc98f499208d2030f155d6f811e2f2b69239ad9890f14f92fdf05f530d", 0x79}, {&(0x7f0000000b40)="1892b6d52e1babcacca864cad6324b09da8473fc6d63e3c12b21427a6627ad34c7decc8cebd364945e0ad7d2b3de6b2927b8361372d130909fc1aa938fd78ff1bd021451fd3e98351ca5daa4f077c27c52e4eb8d0b3ccf31fa07ba4585bd51d64340416af25a06959bd5481138376ff0c97bdb63dc30a9d325b8b82813f899251f361d9c62e5bead10774f3d689b44041148702117aa2f274ac38d91231e8465c74a35f36dfbd8f3869eced2e670ae9c6ddf894e834ef511344dfda3f0bd0c734fd2bd9b55c4fb9ea0adb186be9dd4d76d4cf0144db494bb91cc4c7f", 0xdc}, {&(0x7f0000000c40)="85ad9a7472725d2d6c914b09ffd996be72cf6b018cc9c89c7da83975ffc3e44e5444ff5c6234b1236e59eb459b735265f22e8adea8670bde205db6616e97f4dc6a01657d3d9eea89fc86013505b8ee241f26c81708d2d55500f4e734c7692c5a4cf63e6e64544ad5d67073f0ab9c8955fe5c087b4ea4c869b7e057721d8c34ba9f8e88e3b797b06def92adf686820a2afeae60433bfbda57f6d18f26eb87aed7a4841dc47539df39c6089c76e913bdcad9ac98e403f38f7eef", 0xb9}, {&(0x7f0000000d00)="ec01b9aa43e7fdde851c679e048082dfe33a552c7ff8717fb207350e482d2c295a000ebb24860f0167c447398450747e319e518ab2868406259787d94e9f07eff28e4abaebd4a9c6d7722855cff25986e66140afe4b4e7f441c9a02e3c9e5d4dc02c255fbeceb44b96b4ad250df3cd9aeec16c6e2d040a88772f7fea29c21c3ec900009c91ebb744a04de2865e79f21864d8676c697dd105d5ec55865284fd88d319bd5ee0b81a623896f3064656cbdf46aa5ce3ed86a3d6fe56a4ddd2c7d0c6fd9f9c666d9113deaa694f9336604421484fd73d94", 0xd5}, {&(0x7f0000000e00)="501b7a719811d5275cae2f3ff2dc7bed2f0f606eb600a861dac9f2d8ff5cba313646696fd988b33005c1a2af87dcc0e9e1428bc49a94351bc563c436fd27d38be9c1eb98980c3ac864a08c2b6fc039dc710d0dcbaa1d753e619170ff849f6273de986e1b5e3d099c912a3776a9e9a421690b5535e9c6ef45588ed34fcc3345cbde81a14f", 0x84}], 0x5, &(0x7f0000000f40)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@noop, @noop, @timestamp_addr={0x44, 0x2c, 0x4e, 0x1, 0x6, [{@rand_addr=0x64010100, 0xda20}, {@multicast2, 0x5}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@rand_addr=0x64010101, 0x8}]}, @rr={0x7, 0x23, 0x18, [@remote, @broadcast, @loopback, @multicast2, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x14}]}, @cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "3950058f95f86fbb46b648"}]}, @timestamp={0x44, 0x18, 0xe2, 0x0, 0x9, [0xfffffffd, 0x400, 0x9, 0x0, 0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xa8}}, {{&(0x7f0000001000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001040)="0f8eaaac42a4f10652a8f91d64c4850a8a229a2edb2b4502c14a6ecb8adad00375d74b65049c394461c510691483a163d7acbdd13524fab3f2b04ff4112341cea715f8894490609bdb4711381636ca12cae74520a6cf2272", 0x58}, {&(0x7f00000010c0)="31659ee8ae9de3974beac1e204c73142ebff48dc9fbfc7161e2d10cdd9220edc3681664206e73d651579bd92c667314721c0acb3a4b33ebaaab19072b1acd3cf6176a201f8330d1961566175eb4e2887c996fde3974f5bda2540647b1aba8c0f9826b533755a358a9ba3d653fdd76c3aed977a4c3d1009283da7e9e304258b20a995bf10ff762c78c1f6fbf5221af49ea9b307801d2b1bb20babb72e7d7b1a27ea12c57213ca752a5eee07af1377ff69f584321f6e0278de3ee2a2e9124fa27f37b288c60a5ba59c0bc6ec016d5f6f79aebd6756bd338538ba1b05449b1e2bb8e868713dd29a1e152dabbed72bb9b453ff7ceee42bafeaa1bc24d9c67c61", 0xfe}, {&(0x7f00000011c0)="363e0a55fc8bd3deb8b30aebd603b22aa026d8c41faaf162f50837206659a1416f9fab4f7e5736327c6a196a6a4d4653df6a0a6470f2929aff40acd81ef50497eef4f17e8235e009", 0x48}, {&(0x7f0000001240)="5d5bb0b975d8a58cdd5a71afad1731ce", 0x10}, {&(0x7f0000001280)="0449973455e6663404997f9b56eca5665aef562677d9549660a8267a4af6fa3e4112f7755618cf65ebc655d2af5593d71d0ec399b15377a9463bd99489f28484cbced8ffc1284a2c4d23ba2b84f920a513d813ffa7771f7aef3e95ac151b4dc804f88a7ca2dbb5b9c14e2ece639ccc8ccec276ab29062d964913036033dc", 0x7e}, {&(0x7f0000001300)}, {&(0x7f0000001340)="5bda7d38ea991db93ab4662550f7b7a53d5d581c39560cf83736f848caf40b0d47f3b95a96e36115e019245a5c6f0cbb49947796baae0afeb5cb3545cf3d04712a4e9c6b0ff5fe2f4c99e676c2b6c4110382fc3b296c56771d0c1aba4258762138b279687bd72b5fdc881f302e1bceb807bb66c85586d96d", 0x78}, {&(0x7f00000013c0)="59e21f14c15329c0f2bc9a6ef93696d6616a039274d315ad7d5331a94c7479fb819ddb55992d5e16b9acda66b940b127416002beab1a0a56890f9d56c8835b29623994b0c591e460900a9d9d4e80d81b0c4e62ccbb96118324518e8836453f85303e3a8d467502ada9159314e8a9ec8888b59b73d7b9b2e4ddf6683812d38927ec366481", 0x84}, {&(0x7f0000001480)="33a6573f0ff9824ed0ed54f4d1959686f5304395514b37b5cf8e0f62bd29b907d3837a275dbc0caf35613e4e272a7c4a6c989878864a282fbca4920ef8d3c5a43a14a2819a0b6b153aaff38ca45b2e5dd3d4262bfa43cb6ac49e5f2a2802e49da01168d52a2da2d7c06eb9be475b4de89c1a259fb0f1dc3dc72a786459d80d034739a70d39e3588d7836848245ed8573d4b155b2a2a61a9cef78a3daa23dc3", 0x9f}, {&(0x7f0000001540)="afcf9cc3b7dfc641d47c465ffd9d50a853ab1b13915ea72cd94ef7b02a9d3f37935ae16726de0ce2d8113a3ca2ec55103e21ce6cf39f561f56e69621a1fc4688bdd029de22eaa6e01f9460041fc9980e523c0d5fdfa32bca9aad11caef8818cfa34b3ae867666045faf9fe33da234979e131d499eb07d39cbb2cf392bde0b34354fdc0d545575be266226265a1d882c3c10fd472d85a77395ac8cbca0531032ee7c747eae7f4bb8a6709ba21daf23b8328a5e2cee7babf7c780805ff35ac95bd6d44e534f7328f149616d065603cb9da6775ce62649a1f8b62c4cc8e4f074232fe86b590", 0xe4}], 0xa, &(0x7f0000001700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xc8}}], 0x2, 0x10) sendmsg$nl_route_sched_retired(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=@delqdisc={0x7c, 0x25, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0x2, 0x2}, {0xf, 0x7}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1b}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x820}, 0x4) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001b00), r5) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r10, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@generic={&(0x7f0000001c00)='./file0\x00', 0x0, 0x8}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x8, 0x9, @local, "eff68144d6380a35", @local, "54f479dbe986a2f3"}}}}, &(0x7f0000001cc0)={0x0, 0x2, [0x2b9, 0x549, 0xd73, 0xb2a]}) r11 = socket$inet(0x2, 0x5, 0x7f) setsockopt$inet_buf(r11, 0x0, 0x2b, &(0x7f0000001d00)="9cb6b2bfaee7ffadf99b544665b71679e01ebb88a83d9336b5a4720c866be6de4939852faf10faa71726f98c5e81e6a332805e55fafb69373b8d7c66e1c2761330aa3b114ae73de4d63f768e7ea34ec55b80f79f90ebee3ef588485262fee0d900838329f39912735bfe661c5d0c5bbd2344468ec9b245de0716f7d733126ed61fbd26ad59904cd24b6e2f87ab7d34a73d5e9efa43ec429180", 0x99) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001dc0), 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), 0xffffffffffffffff) r12 = socket(0x6, 0x3, 0xd) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) 2.687558207s ago: executing program 2 (id=1200): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 2.536936782s ago: executing program 2 (id=1201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r1, &(0x7f0000000240)="d6db44892c6ba6d97d99d8d99a208451bf04a3907ad0730fe899bf251c220383d60de03c9a3ce7855a13ff0303d8fb252c51a9ca7ee643d36ca46f6e126465cb3e7f04755c809e41e07d93c7125a1dedb36a40dfb842ac4349f8d0a59d98202a9e823234a09bdf30d00afbbf6c2d556b19445a90f07633685ef3a3b82bd61256e803b12befdbf7c7b54b77d4c50c38a9ca989ce0797a3a116c5d65577ad89a908ff9749258597aa4aeb380f57f54cc1f03dee83e5fa0fff0b0de4f34ea", 0xbd, 0xc000, &(0x7f0000000300)=@in={0x2, 0x4e24, @loopback}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f0000000000)="41000200010001", 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.408675518s ago: executing program 1 (id=1202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000810) 2.398448217s ago: executing program 4 (id=1203): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000440)={0x27, 0x0}, &(0x7f00000004c0)=0x60, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="b70800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000800)="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", &(0x7f0000000100)=@udp=r4, 0x4}, 0x20) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf254c0000000c00a70040000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a600ff00000000000000bedd335d4e333d5362d0ce82da77b8446163835a2733985f9ec8fd3dfe879b9121d7f4b93bf1c9132262ba354e97036a54cea3048cb0af54fb90052e2e7328c19c2a78a09e41dc83"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xf679000) (async) r7 = accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x1400) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) (async) setsockopt$inet_int(r10, 0x0, 0x1a, 0x0, 0x0) (async) sendmsg$nfc_llcp(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x27, r1, 0x1, 0x2, 0x8, 0x0, "05d7d893dee107f170bfd262f3ce215324c9daf1355f1d2fbe3a2a66048482e2022f055fb37c15fb3c6eef93c30704dc397e2b9fb60ec07e145c12bd0c0b3f", 0xfff}, 0x60, &(0x7f00000003c0)=[{&(0x7f00000005c0)="4aaade7f23fb3b37a7979edbedc95ad5593c22eef62fda73f75e4ee5e6abefb333e8", 0x22}, {&(0x7f00000001c0)="c68c177674e0882eab74cd6919e9d6b6c9ba7bdb4db0a259b05e4cc802c9d43c53af73c9a94e4bbdb00e87baefc4f844508aefb6d446b8dfe2e13892605b73acc7a58c5e1e6d65ed78269b40b05cd0c52112b84259f2f0ee2e44baa8c95db97691e8c63ff4ef9fe6f99628736f9c5c5deffcbfd15d8c1134d4777aaa2a2c8d9b6476472a1254c80d74eb76b40b3459e42941eb05bc569c84c646a063c9b6f252bf180bad53de4ae978e7b1de98f74bae57cf6c44b25108e82eb60e7565a69e83f9af0a00afa8e337167b7fca761b370a4c00587b74", 0xd5}, {&(0x7f00000002c0)="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", 0xffffffffffffff8c}], 0x3, 0x0, 0x0, 0x4000000}, 0x40000) 2.348365604s ago: executing program 3 (id=1204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r1, &(0x7f0000000040)="1c0000001e005f0214f6fffffffffff8070000001f00000000000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, 0x0, 0x0, 0x61, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000001c0)=0x3) write$ppp(r7, 0x0, 0x0) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000000180)=0xffffffff) write(r8, &(0x7f00000000c0)="af05", 0x2) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r3, 0x80}], 0x1, 0x101) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c00018008000200010000003cee6f67dfa60a8d7f1ff65f4786d8cb027c63c5e507f5f579c6c53ad8f43844fc0b711b24018f9ea51340d53829"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in6=@private1}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) 2.207823294s ago: executing program 0 (id=1205): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3ff, 0x0, 0x800}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001ac0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 2.207237228s ago: executing program 1 (id=1206): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in={0x2, 0x4e23, @loopback}], 0x2c) sendmmsg$inet6(r2, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c000000019000100ffffffff00000000e0000000793700000000000000000000000800000000000000000100000000000000030a000020000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000100010000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000f7ffffffffffffff000000000000000200000000000000000000000000000000000103020000000008001f0003000000"], 0xc0}}, 0x2c000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in={0x2, 0x4e23, @loopback}], 0x2c) (async) sendmmsg$inet6(r2, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c000000019000100ffffffff00000000e0000000793700000000000000000000000800000000000000000100000000000000030a000020000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000100010000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000f7ffffffffffffff000000000000000200000000000000000000000000000000000103020000000008001f0003000000"], 0xc0}}, 0x2c000010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (async) 2.036708329s ago: executing program 1 (id=1207): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.8946603s ago: executing program 0 (id=1208): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000006c0)=""/119, 0x77) sendmsg$NFT_BATCH(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006fc0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80c5}, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3120000080000000280019800800010004000000090002002d5b262f00000000070002007b27000005881c000000000008007f641b000000"], 0x50}, 0x1, 0x0, 0x0, 0x4058815}, 0x4840) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x1}, 0x8) 1.767828193s ago: executing program 4 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x265, 0xe29, 0x2, 0x3ff}, 0x1000, 0x0, 0x23, 0x2, 0x4, 0x12, 0x16, 0x19, 0x4, 0x7, {0xf66b, 0x8, 0x6, 0x5, 0x3, 0x400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000041}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d32468ec0d2482dad61c09102c28", 0x12, 0x1, &(0x7f0000000140)={0x11, 0x5, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES8=r1, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230000000000008847000000000000000000000000000000000000000063f63c7e006d11fffc0200000000000000000000000000012001000000000000000000000000008cad006a51660000004e234e2100659078040000000700000001000080000000000dc78570a32a95308be43de6de1d4387eb88b98272377ca36452c170f14104b8c6e1e9851bb987b6295365dc996db5af0a3305ba4c531bec8064d89316255db3521d73b8466b18b3bd163c9d5a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.725624548s ago: executing program 1 (id=1210): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r3, &(0x7f0000005900)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000003600)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/132, 0x84}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x7, &(0x7f0000003680)=""/80, 0x50}, 0x3}, {{&(0x7f0000003700)=@alg, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003780)=""/223, 0xdf}, {&(0x7f0000003880)=""/20, 0x14}, {&(0x7f00000038c0)=""/218, 0xda}, {&(0x7f00000039c0)=""/42, 0x2a}], 0x4, &(0x7f0000003a40)=""/45, 0x2d}, 0x8}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/18, 0x12}, {&(0x7f0000003ac0)=""/209, 0xd1}], 0x2, &(0x7f0000003c00)=""/102, 0x66}, 0x3}, {{&(0x7f0000003c80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003d00)=""/160, 0xa0}, {&(0x7f0000003dc0)=""/117, 0x75}, {&(0x7f0000003e40)=""/172, 0xac}, {&(0x7f0000003f00)=""/104, 0x68}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/236, 0xec}], 0x6, &(0x7f0000005100)=""/99, 0x63}, 0x8}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005180)=""/28, 0x1c}, {&(0x7f00000051c0)=""/20, 0x14}, {&(0x7f0000005200)=""/43, 0x2b}, {&(0x7f0000005240)=""/119, 0x77}, {&(0x7f00000052c0)=""/96, 0x60}, {&(0x7f0000005340)=""/74, 0x4a}, {&(0x7f00000053c0)=""/63, 0x3f}], 0x7}, 0x5}, {{&(0x7f0000005580)=@phonet, 0x80, &(0x7f0000005880)=[{&(0x7f0000005600)=""/154, 0x9a}, {&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f0000000900)=""/164, 0xa4}], 0x3, &(0x7f00000058c0)=""/23, 0x17}, 0x8}], 0x6, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 1.692009345s ago: executing program 2 (id=1211): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000008a5e9cd7f26eae680c00000002000000000000000000000b010000000000"], &(0x7f0000001b80)=""/4076, 0x26, 0xfec, 0xa}, 0x28) splice(r2, 0x0, r2, &(0x7f00000001c0)=0x80000000000000, 0xffffffff, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='memory.current\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) r6 = socket(0x10, 0x3, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)={0x3c, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socket(0x11, 0x3, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) connect$netlink(r6, &(0x7f0000000240)=@unspec, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8b003acd", @ANYRES16=r12, @ANYBLOB="01002cbd70000080000034000000080001007063690011000200303030303a30303a31302e30000000000f00a8007365636f6e646e616d6500000800030005000000"], 0x48}}, 0x20000000) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/19, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r13], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', r13, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0xab7bb000) 819.214955ms ago: executing program 3 (id=1212): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x2, 0x4, 0x1, 0x4, 0x0, 0x0, [@local]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) 740.735493ms ago: executing program 4 (id=1213): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x42000) 624.820307ms ago: executing program 0 (id=1214): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x2, 0xc, 0x2}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x2, 0xc, 0x2}], 0x10, 0x9}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x840c5, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x840c5, 0x4) 602.660982ms ago: executing program 2 (id=1215): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r0, 0x701, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x40}}, 0x20000000) 383.805232ms ago: executing program 4 (id=1216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000217500000085000000080000009500"/33], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 281.734834ms ago: executing program 2 (id=1217): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000020000000200000000600000000e54d93257cafa79b979599fa0000000100000d000000000400000002000000010000000000000c01000000002e5f002e000000000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) 221.074213ms ago: executing program 3 (id=1218): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='eM', 0x2) shutdown(r0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x20, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) close(0x3) (async) listen(r1, 0x8) (async) accept4(r1, 0x0, 0x0, 0x0) (async) write(r2, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) (async) write(r2, &(0x7f0000000180)='eM', 0x2) (async) shutdown(r0, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x20, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 12.082116ms ago: executing program 4 (id=1219): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8242e0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4}, 0x20) getsockname$packet(r0, 0x0, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x400004, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(0x4) 0s ago: executing program 2 (id=1220): socket$key(0xf, 0x3, 0x2) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r3, @ANYRES64=r2], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x30}], 0x49249249249246c, 0x11) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xf}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 79.398188][ T5611] cgroup: Unknown subsys name 'net' [ 79.540289][ T5611] cgroup: Unknown subsys name 'cpuset' [ 79.549812][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.211171][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.390839][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.398741][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.411189][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.419660][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.428589][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.436739][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.447459][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.455626][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.455772][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.471555][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.473011][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.480158][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.489526][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.495062][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.501095][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.508620][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.517181][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.526577][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.529731][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.537131][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.551285][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.559444][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.567963][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.575374][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.586107][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.412253][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.420105][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.427821][ T5631] bridge_slave_0: entered allmulticast mode [ 85.434965][ T5631] bridge_slave_0: entered promiscuous mode [ 85.501428][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.509228][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.516787][ T5631] bridge_slave_1: entered allmulticast mode [ 85.524024][ T5631] bridge_slave_1: entered promiscuous mode [ 85.597547][ T50] Bluetooth: hci2: command tx timeout [ 85.598454][ T5630] Bluetooth: hci1: command tx timeout [ 85.618272][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.625600][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.633776][ T5637] bridge_slave_0: entered allmulticast mode [ 85.643244][ T5637] bridge_slave_0: entered promiscuous mode [ 85.676540][ T5630] Bluetooth: hci3: command tx timeout [ 85.676566][ T5627] Bluetooth: hci0: command tx timeout [ 85.676832][ T50] Bluetooth: hci4: command tx timeout [ 85.702329][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.709728][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.717594][ T5637] bridge_slave_1: entered allmulticast mode [ 85.724919][ T5637] bridge_slave_1: entered promiscuous mode [ 85.788160][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.834328][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.869033][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.916798][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.945682][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.953054][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.960692][ T5624] bridge_slave_0: entered allmulticast mode [ 85.968245][ T5624] bridge_slave_0: entered promiscuous mode [ 85.999135][ T5631] team0: Port device team_slave_0 added [ 86.005192][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.012577][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.020057][ T5623] bridge_slave_0: entered allmulticast mode [ 86.027647][ T5623] bridge_slave_0: entered promiscuous mode [ 86.035044][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.043517][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.051212][ T5624] bridge_slave_1: entered allmulticast mode [ 86.058743][ T5624] bridge_slave_1: entered promiscuous mode [ 86.090976][ T5631] team0: Port device team_slave_1 added [ 86.096868][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.104020][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.112044][ T5623] bridge_slave_1: entered allmulticast mode [ 86.119236][ T5623] bridge_slave_1: entered promiscuous mode [ 86.135489][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.142942][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.150572][ T5634] bridge_slave_0: entered allmulticast mode [ 86.157835][ T5634] bridge_slave_0: entered promiscuous mode [ 86.166908][ T5637] team0: Port device team_slave_0 added [ 86.204150][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.211522][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.219212][ T5634] bridge_slave_1: entered allmulticast mode [ 86.226457][ T5634] bridge_slave_1: entered promiscuous mode [ 86.235706][ T5637] team0: Port device team_slave_1 added [ 86.270586][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.301933][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.309205][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.335392][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.350460][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.362301][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.404845][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.412102][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.438232][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.451163][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.472642][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.483083][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.490464][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.517031][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.551433][ T5624] team0: Port device team_slave_0 added [ 86.559331][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.569617][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.577148][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.603578][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.635599][ T5624] team0: Port device team_slave_1 added [ 86.665255][ T5634] team0: Port device team_slave_0 added [ 86.674419][ T5634] team0: Port device team_slave_1 added [ 86.682018][ T5623] team0: Port device team_slave_0 added [ 86.731574][ T5623] team0: Port device team_slave_1 added [ 86.777231][ T5631] hsr_slave_0: entered promiscuous mode [ 86.783721][ T5631] hsr_slave_1: entered promiscuous mode [ 86.812238][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.819481][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.845679][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.875199][ T5637] hsr_slave_0: entered promiscuous mode [ 86.882170][ T5637] hsr_slave_1: entered promiscuous mode [ 86.888767][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 86.895124][ T5637] Cannot create hsr debugfs directory [ 86.901701][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.909120][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.935168][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.947436][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.954535][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.981029][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.994458][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.001792][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.028724][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.043569][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.051202][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.078465][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.092298][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.100058][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.126730][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.398380][ T5623] hsr_slave_0: entered promiscuous mode [ 87.405482][ T5623] hsr_slave_1: entered promiscuous mode [ 87.411848][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 87.418302][ T5623] Cannot create hsr debugfs directory [ 87.429755][ T5634] hsr_slave_0: entered promiscuous mode [ 87.436139][ T5634] hsr_slave_1: entered promiscuous mode [ 87.442523][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 87.448749][ T5634] Cannot create hsr debugfs directory [ 87.460470][ T5624] hsr_slave_0: entered promiscuous mode [ 87.467415][ T5624] hsr_slave_1: entered promiscuous mode [ 87.473949][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 87.479993][ T5624] Cannot create hsr debugfs directory [ 87.677482][ T50] Bluetooth: hci1: command tx timeout [ 87.686672][ T50] Bluetooth: hci2: command tx timeout [ 87.756506][ T50] Bluetooth: hci4: command tx timeout [ 87.756558][ T5627] Bluetooth: hci3: command tx timeout [ 87.768268][ T5630] Bluetooth: hci0: command tx timeout [ 88.057330][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.071785][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.080601][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.092255][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.102170][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.112748][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.131480][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.141594][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.209933][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.220715][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.230483][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.243842][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.262049][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.272349][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.281524][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.291378][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.385175][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.401816][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.415332][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.428475][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.448624][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.461563][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.470347][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.481406][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.578613][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.591884][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.600023][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.610393][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.618676][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.630180][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.648784][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.659514][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.795023][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.826105][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.836382][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.844393][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.855174][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.865452][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.876017][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.885324][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.895855][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.917921][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.958201][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.994799][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.002442][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.024743][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.034696][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.041967][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.085794][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.092973][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.121710][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.128960][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.147827][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.210771][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.244848][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.269193][ T5637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.280414][ T5637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.326980][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.334971][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.358328][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.394394][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.401762][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.441792][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.449166][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.502429][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.509716][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.631036][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.678886][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.759826][ T5630] Bluetooth: hci2: command tx timeout [ 89.765795][ T5627] Bluetooth: hci1: command tx timeout [ 89.772863][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.836673][ T5627] Bluetooth: hci4: command tx timeout [ 89.843020][ T5630] Bluetooth: hci0: command tx timeout [ 89.843047][ T50] Bluetooth: hci3: command tx timeout [ 89.864479][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.871743][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.910622][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.917973][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.544522][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.781478][ T5637] veth0_vlan: entered promiscuous mode [ 90.830525][ T5637] veth1_vlan: entered promiscuous mode [ 90.909045][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.945885][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.009369][ T5637] veth0_macvtap: entered promiscuous mode [ 91.049543][ T5637] veth1_macvtap: entered promiscuous mode [ 91.092677][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.154472][ T5631] veth0_vlan: entered promiscuous mode [ 91.181335][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.223966][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.238335][ T5624] veth0_vlan: entered promiscuous mode [ 91.247672][ T5631] veth1_vlan: entered promiscuous mode [ 91.288972][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.302117][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.313196][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.324704][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354826][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.382864][ T5624] veth1_vlan: entered promiscuous mode [ 91.451299][ T5634] veth0_vlan: entered promiscuous mode [ 91.530092][ T5634] veth1_vlan: entered promiscuous mode [ 91.541475][ T5631] veth0_macvtap: entered promiscuous mode [ 91.566919][ T5624] veth0_macvtap: entered promiscuous mode [ 91.590505][ T5631] veth1_macvtap: entered promiscuous mode [ 91.619845][ T5624] veth1_macvtap: entered promiscuous mode [ 91.674547][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.693026][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.725109][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.741553][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773359][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.794545][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.812842][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.825063][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.825748][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.842167][ T5627] Bluetooth: hci2: command tx timeout [ 91.842237][ T50] Bluetooth: hci1: command tx timeout [ 91.854058][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.871149][ T5634] veth0_macvtap: entered promiscuous mode [ 91.884959][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.894422][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915222][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.916639][ T50] Bluetooth: hci0: command tx timeout [ 91.924878][ T5627] Bluetooth: hci3: command tx timeout [ 91.924907][ T5627] Bluetooth: hci4: command tx timeout [ 91.925169][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.978452][ T5634] veth1_macvtap: entered promiscuous mode [ 91.989911][ T1103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.995987][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.001879][ T1103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044200][ T5623] veth0_vlan: entered promiscuous mode [ 92.107748][ T9] cfg80211: failed to load regulatory.db [ 92.152563][ T5623] veth1_vlan: entered promiscuous mode [ 92.195923][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.259573][ T5826] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 92.262078][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.297985][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.320620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.331899][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393854][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.411079][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.424907][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.437559][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.448072][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.480564][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.503069][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.581889][ T5623] veth0_macvtap: entered promiscuous mode [ 92.624707][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.625019][ T5623] veth1_macvtap: entered promiscuous mode [ 92.640525][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.773207][ T5833] Zero length message leads to an empty skb [ 92.795043][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.810666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.822386][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.851261][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.914524][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.928367][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.963159][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.018002][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.027047][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.053338][ T5630] block nbd0: Receive control failed (result -32) [ 93.062149][ T50] block nbd0: Receive control failed (result -32) [ 93.171426][ T5844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.203749][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.218929][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.380666][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.404359][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.445577][ T1163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.497492][ T1163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.580781][ T1163] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.592159][ T1163] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.627268][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.646126][ T5854] Bluetooth: MGMT ver 1.23 [ 93.652428][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.913489][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.953306][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.197394][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.206817][ T5861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11'. [ 94.215896][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.243299][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 94.256959][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 94.267335][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 94.530542][ T5877] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 94.833763][ T5889] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.928197][ T5630] block nbd1: Receive control failed (result -32) [ 94.928201][ T50] block nbd1: Receive control failed (result -32) [ 95.165591][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 95.383538][ T5914] netlink: 'syz.4.22': attribute type 2 has an invalid length. [ 95.473971][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 95.553256][ T5913] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 95.622985][ T5913] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17'. [ 95.661652][ T5907] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 95.768317][ T5925] netlink: 'syz.2.24': attribute type 9 has an invalid length. [ 95.848151][ T5927] FAULT_INJECTION: forcing a failure. [ 95.848151][ T5927] name failslab, interval 1, probability 0, space 0, times 1 [ 95.870628][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) [ 95.870666][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.870689][ T5927] Call Trace: [ 95.870696][ T5927] [ 95.870714][ T5927] dump_stack_lvl+0xe8/0x150 [ 95.870779][ T5927] should_fail_ex+0x412/0x560 [ 95.870813][ T5927] should_failslab+0xa8/0x100 [ 95.870854][ T5927] __kmalloc_cache_noprof+0x88/0x660 [ 95.870895][ T5927] ? nbd_add_socket+0x48f/0xba0 [ 95.870934][ T5927] nbd_add_socket+0x48f/0xba0 [ 95.870974][ T5927] ? __pfx_nbd_add_socket+0x10/0x10 [ 95.871004][ T5927] ? __nla_parse+0x40/0x60 [ 95.871051][ T5927] nbd_genl_connect+0x13e2/0x1cf0 [ 95.871080][ T5927] ? __pfx___nla_validate_parse+0x10/0x10 [ 95.871146][ T5927] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.871184][ T5927] ? rcu_is_watching+0x15/0xb0 [ 95.871209][ T5927] ? trace_kmalloc+0x2a/0xf0 [ 95.871251][ T5927] ? __nla_parse+0x40/0x60 [ 95.871290][ T5927] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 95.871321][ T5927] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 95.871374][ T5927] genl_family_rcv_msg_doit+0x22a/0x330 [ 95.871427][ T5927] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.871496][ T5927] ? __lock_acquire+0x6b5/0x2cf0 [ 95.871571][ T5927] genl_rcv_msg+0x61c/0x7a0 [ 95.871616][ T5927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.871656][ T5927] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.871695][ T5927] netlink_rcv_skb+0x232/0x4b0 [ 95.871731][ T5927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.871763][ T5927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.871808][ T5927] ? down_read+0x270/0x2e0 [ 95.871833][ T5927] ? genl_rcv+0xd/0x40 [ 95.871864][ T5927] genl_rcv+0x28/0x40 [ 95.871892][ T5927] netlink_unicast+0x75c/0x8e0 [ 95.871929][ T5927] netlink_sendmsg+0x813/0xb40 [ 95.871970][ T5927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.871999][ T5927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 95.872028][ T5927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.872057][ T5927] ____sys_sendmsg+0x972/0x9f0 [ 95.872084][ T5927] ? __might_fault+0xaf/0x130 [ 95.872116][ T5927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.872153][ T5927] ? import_iovec+0x73/0xa0 [ 95.872184][ T5927] ___sys_sendmsg+0x2a5/0x360 [ 95.872208][ T5927] ? __lock_acquire+0x6b5/0x2cf0 [ 95.872249][ T5927] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.872316][ T5927] ? __fget_files+0x2a/0x420 [ 95.872339][ T5927] ? __fget_files+0x3a0/0x420 [ 95.872375][ T5927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 95.872402][ T5927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.872439][ T5927] ? __pfx_ksys_write+0x10/0x10 [ 95.872487][ T5927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.872508][ T5927] do_syscall_64+0x15f/0xf80 [ 95.872535][ T5927] ? trace_irq_disable+0x3b/0x140 [ 95.872563][ T5927] ? clear_bhb_loop+0x40/0x90 [ 95.872590][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.872608][ T5927] RIP: 0033:0x7f7ce699cdd9 [ 95.872626][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.872642][ T5927] RSP: 002b:00007f7ce790b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.872663][ T5927] RAX: ffffffffffffffda RBX: 00007f7ce6c15fa0 RCX: 00007f7ce699cdd9 [ 95.872677][ T5927] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 95.872688][ T5927] RBP: 00007f7ce790b090 R08: 0000000000000000 R09: 0000000000000000 [ 95.872708][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.872720][ T5927] R13: 00007f7ce6c16038 R14: 00007f7ce6c15fa0 R15: 00007ffec19deca8 [ 95.872752][ T5927] [ 97.580183][ T5630] block nbd2: Receive control failed (result -32) [ 97.580183][ T50] block nbd2: Receive control failed (result -32) [ 97.912489][ T5630] block nbd3: Receive control failed (result -32) [ 97.913371][ T50] block nbd3: Receive control failed (result -32) [ 98.415573][ T5993] FAULT_INJECTION: forcing a failure. [ 98.415573][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.444171][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) [ 98.444201][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.444213][ T5993] Call Trace: [ 98.444222][ T5993] [ 98.444230][ T5993] dump_stack_lvl+0xe8/0x150 [ 98.444259][ T5993] should_fail_ex+0x412/0x560 [ 98.444291][ T5993] _copy_from_user+0x2d/0xb0 [ 98.444319][ T5993] ___sys_sendmsg+0x1c6/0x360 [ 98.444345][ T5993] ? __lock_acquire+0x6b5/0x2cf0 [ 98.444371][ T5993] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.444401][ T5993] ? kstrtouint+0x6e/0xe0 [ 98.444450][ T5993] ? __fget_files+0x2a/0x420 [ 98.444472][ T5993] ? __fget_files+0x3a0/0x420 [ 98.444505][ T5993] __sys_sendmmsg+0x27c/0x4e0 [ 98.444536][ T5993] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.444560][ T5993] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 98.444611][ T5993] ? ksys_write+0x242/0x270 [ 98.444641][ T5993] ? __pfx_ksys_write+0x10/0x10 [ 98.444673][ T5993] __x64_sys_sendmmsg+0xa0/0xc0 [ 98.444699][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.444720][ T5993] do_syscall_64+0x15f/0xf80 [ 98.444745][ T5993] ? clear_bhb_loop+0x40/0x90 [ 98.444768][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.444787][ T5993] RIP: 0033:0x7fe027b9cdd9 [ 98.444807][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.444823][ T5993] RSP: 002b:00007fe0289e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.444845][ T5993] RAX: ffffffffffffffda RBX: 00007fe027e15fa0 RCX: 00007fe027b9cdd9 [ 98.444859][ T5993] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a [ 98.444871][ T5993] RBP: 00007fe0289e2090 R08: 0000000000000000 R09: 0000000000000000 [ 98.444883][ T5993] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 98.444894][ T5993] R13: 00007fe027e16038 R14: 00007fe027e15fa0 R15: 00007ffee8789f18 [ 98.444925][ T5993] [ 98.815210][ T5996] geneve2: entered promiscuous mode [ 98.832646][ T5996] geneve2: entered allmulticast mode [ 98.895355][ T66] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.930961][ T66] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.970003][ T6001] x_tables: duplicate underflow at hook 2 [ 98.971328][ T66] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.019454][ T66] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.063881][ T6006] __nla_validate_parse: 6 callbacks suppressed [ 99.063921][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.55'. [ 99.067913][ T6004] nbd: socks must be embedded in a SOCK_ITEM attr [ 99.083602][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.55'. [ 99.137695][ T6004] block nbd4: shutting down sockets [ 99.491418][ T30] audit: type=1107 audit(1777649730.220:2): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.689937][ T5630] block nbd4: Receive control failed (result -32) [ 99.783331][ T50] block nbd4: Receive control failed (result -32) [ 99.948975][ T6038] FAULT_INJECTION: forcing a failure. [ 99.948975][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 100.026938][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 100.026967][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.026978][ T6038] Call Trace: [ 100.026985][ T6038] [ 100.026993][ T6038] dump_stack_lvl+0xe8/0x150 [ 100.027024][ T6038] should_fail_ex+0x412/0x560 [ 100.027055][ T6038] should_failslab+0xa8/0x100 [ 100.027086][ T6038] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 100.027123][ T6038] ? __alloc_skb+0x186/0x7d0 [ 100.027145][ T6038] ? __alloc_skb+0x1d0/0x7d0 [ 100.027164][ T6038] ? __local_bh_enable_ip+0xd0/0x130 [ 100.027190][ T6038] __alloc_skb+0x1d0/0x7d0 [ 100.027217][ T6038] netlink_sendmsg+0x5d4/0xb40 [ 100.027251][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.027279][ T6038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.027307][ T6038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.027337][ T6038] ____sys_sendmsg+0x972/0x9f0 [ 100.027362][ T6038] ? __might_fault+0xaf/0x130 [ 100.027394][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.027429][ T6038] ? import_iovec+0x73/0xa0 [ 100.027461][ T6038] ___sys_sendmsg+0x2a5/0x360 [ 100.027486][ T6038] ? __lock_acquire+0x6b5/0x2cf0 [ 100.027513][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.027544][ T6038] ? kstrtouint+0x6e/0xe0 [ 100.027595][ T6038] ? __fget_files+0x2a/0x420 [ 100.027618][ T6038] ? __fget_files+0x3a0/0x420 [ 100.027653][ T6038] __sys_sendmmsg+0x27c/0x4e0 [ 100.027685][ T6038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.027708][ T6038] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 100.027761][ T6038] ? ksys_write+0x242/0x270 [ 100.027793][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 100.027828][ T6038] __x64_sys_sendmmsg+0xa0/0xc0 [ 100.027852][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.027873][ T6038] do_syscall_64+0x15f/0xf80 [ 100.027895][ T6038] ? trace_irq_disable+0x3b/0x140 [ 100.027924][ T6038] ? clear_bhb_loop+0x40/0x90 [ 100.027949][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.027973][ T6038] RIP: 0033:0x7fe027b9cdd9 [ 100.027993][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.028009][ T6038] RSP: 002b:00007fe0289e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.028031][ T6038] RAX: ffffffffffffffda RBX: 00007fe027e15fa0 RCX: 00007fe027b9cdd9 [ 100.028044][ T6038] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a [ 100.028057][ T6038] RBP: 00007fe0289e2090 R08: 0000000000000000 R09: 0000000000000000 [ 100.028069][ T6038] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 100.028081][ T6038] R13: 00007fe027e16038 R14: 00007fe027e15fa0 R15: 00007ffee8789f18 [ 100.028119][ T6038] [ 100.445446][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.456685][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.849949][ T6076] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.853876][ T6066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.857287][ T6075] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.031322][ T50] block nbd5: Receive control failed (result -32) [ 101.031727][ T5630] block nbd5: Receive control failed (result -32) [ 101.076146][ T6066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.315147][ T6066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.395026][ T6087] syz.0.78 uses obsolete (PF_INET,SOCK_PACKET) [ 101.507475][ T6066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.550131][ T6090] netlink: 280 bytes leftover after parsing attributes in process `syz.0.78'. [ 101.841958][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.854539][ T6099] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 101.955640][ T1163] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.062473][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.090967][ T6104] sctp: [Deprecated]: syz.4.82 (pid 6104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.090967][ T6104] Use struct sctp_sack_info instead [ 102.142012][ T1163] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.909227][ T5630] block nbd6: Receive control failed (result -32) [ 102.910513][ T50] block nbd6: Receive control failed (result -32) [ 103.393796][ T6141] netlink: 'syz.1.92': attribute type 83 has an invalid length. [ 103.605010][ T6146] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 103.675170][ T6151] FAULT_INJECTION: forcing a failure. [ 103.675170][ T6151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.698321][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.4.97 Not tainted syzkaller #0 PREEMPT(full) [ 103.698357][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.698369][ T6151] Call Trace: [ 103.698377][ T6151] [ 103.698386][ T6151] dump_stack_lvl+0xe8/0x150 [ 103.698415][ T6151] should_fail_ex+0x412/0x560 [ 103.698445][ T6151] _copy_from_user+0x2d/0xb0 [ 103.698473][ T6151] ___sys_sendmsg+0x1c6/0x360 [ 103.698500][ T6151] ? __lock_acquire+0x6b5/0x2cf0 [ 103.698527][ T6151] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.698588][ T6151] ? __fget_files+0x2a/0x420 [ 103.698611][ T6151] ? __fget_files+0x3a0/0x420 [ 103.698645][ T6151] __x64_sys_sendmsg+0x1bd/0x2a0 [ 103.698673][ T6151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.698706][ T6151] ? __pfx_ksys_write+0x10/0x10 [ 103.698741][ T6151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.698762][ T6151] do_syscall_64+0x15f/0xf80 [ 103.698784][ T6151] ? trace_irq_disable+0x3b/0x140 [ 103.698812][ T6151] ? clear_bhb_loop+0x40/0x90 [ 103.698835][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.698855][ T6151] RIP: 0033:0x7f136659cdd9 [ 103.698875][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.698891][ T6151] RSP: 002b:00007f13674ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.698913][ T6151] RAX: ffffffffffffffda RBX: 00007f1366815fa0 RCX: 00007f136659cdd9 [ 103.698927][ T6151] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 103.698939][ T6151] RBP: 00007f13674ee090 R08: 0000000000000000 R09: 0000000000000000 [ 103.698951][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.698963][ T6151] R13: 00007f1366816038 R14: 00007f1366815fa0 R15: 00007fffe3eee568 [ 103.698995][ T6151] [ 104.489275][ T6168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.226913][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 105.351326][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.110'. [ 105.368759][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 105.418563][ T6190] bond1: entered promiscuous mode [ 105.453472][ T6190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.029616][ T6111] Set syz1 is full, maxelem 65536 reached [ 133.038304][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044752][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.626891][ T6244] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 154.818741][ T6250] 8021q: VLANs not supported on ip6gre0 [ 154.923430][ T6259] block nbd1: NBD_DISCONNECT [ 154.923855][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 154.939130][ T6259] block nbd1: Send disconnect failed -32 [ 154.962041][ T6259] block nbd1: Send disconnect failed -32 [ 155.003131][ T6259] block nbd1: shutting down sockets [ 155.150018][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 155.159505][ T6276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.162519][ T6276] SET target dimension over the limit! [ 155.274656][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 155.329830][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 155.550290][ T6282] netlink: 34 bytes leftover after parsing attributes in process `syz.1.130'. [ 155.681785][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 155.897485][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 156.018498][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 156.062674][ T6302] nbd: must specify a size in bytes for the device [ 156.094422][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'. [ 156.147961][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'. [ 156.399471][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.407423][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.589876][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.623049][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.768944][ T6313] tipc: Started in network mode [ 156.775235][ T6313] tipc: Node identity 4a79aaa08832, cluster identity 4711 [ 156.784556][ T6313] tipc: Enabled bearer , priority 0 [ 156.812557][ T6329] tipc: Resetting bearer [ 156.821054][ T66] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.829920][ T66] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.862410][ T6303] tipc: Disabling bearer [ 156.879149][ T66] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.888709][ T66] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.961295][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 156.994473][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.001654][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.008795][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.015659][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.023250][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.030385][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.037307][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.044254][ T6341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 157.634893][ T6357] warning: `syz.1.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.403752][ T6375] xt_l2tp: v2 doesn't support IP mode [ 160.496079][ T6380] team0 (unregistering): Port device team_slave_0 removed [ 160.548870][ T6380] team0 (unregistering): Port device team_slave_1 removed [ 161.086616][ T6419] __nla_validate_parse: 157 callbacks suppressed [ 161.086639][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 161.423976][ T6435] vlan2: entered promiscuous mode [ 161.435095][ T6435] bridge0: entered promiscuous mode [ 161.908280][ T50] block nbd1: Receive control failed (result -32) [ 161.908866][ T5630] block nbd1: Receive control failed (result -32) [ 161.980700][ T6454] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 162.018741][ T6454] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 162.047790][ T6454] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.178'. [ 162.357034][ T6478] : renamed from veth1_to_batadv [ 162.369891][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 162.418235][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 162.668974][ T6486] netlink: 'syz.0.190': attribute type 298 has an invalid length. [ 162.792623][ T6498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.194'. [ 162.842153][ T6498] unsupported nlmsg_type 40 [ 163.114679][ T6489] pim6reg99999991: entered allmulticast mode [ 163.755733][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.193'. [ 164.016907][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 164.420989][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 164.662642][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 164.677989][ T6565] bridge1: port 1(bond3) entered blocking state [ 164.681192][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 164.694164][ T6565] bridge1: port 1(bond3) entered disabled state [ 164.706755][ T6565] bond3: entered allmulticast mode [ 164.722016][ T6565] bond3: entered promiscuous mode [ 165.140315][ T6592] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 165.524240][ T6604] tipc: Started in network mode [ 165.545062][ T6604] tipc: Node identity 5643a02c0898, cluster identity 4711 [ 165.585253][ T6604] tipc: Enabled bearer , priority 0 [ 165.661756][ T6614] syzkaller0: entered promiscuous mode [ 165.683712][ T6614] syzkaller0: entered allmulticast mode [ 165.710613][ T6619] Cannot find map_set index 2 as target [ 165.820242][ T6622] syzkaller1: entered promiscuous mode [ 165.826002][ T6622] syzkaller1: entered allmulticast mode [ 165.868818][ T6604] tipc: Resetting bearer [ 166.000702][ T6614] ip6tnl1: entered promiscuous mode [ 166.013432][ T6614] ip6tnl1: entered allmulticast mode [ 166.193893][ T6599] tipc: Resetting bearer [ 166.252575][ T6599] tipc: Disabling bearer [ 166.433307][ T6643] netlink: 'syz.0.222': attribute type 8 has an invalid length. [ 166.493443][ T6645] __nla_validate_parse: 2 callbacks suppressed [ 166.493465][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.223'. [ 166.514571][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.222'. [ 166.913526][ T6688] netlink: 232 bytes leftover after parsing attributes in process `syz.4.228'. [ 166.987048][ T6687] ip6gre1: entered promiscuous mode [ 167.009796][ T6687] ip6gre1: entered allmulticast mode [ 167.069790][ T6687] Cannot find set identified by id 0 to match [ 167.158610][ T6704] bridge0: port 3(syz_tun) entered blocking state [ 167.179490][ T6704] bridge0: port 3(syz_tun) entered disabled state [ 167.187459][ T6704] syz_tun: entered allmulticast mode [ 167.199557][ T6704] syz_tun: entered promiscuous mode [ 167.228441][ T6704] bridge0: port 3(syz_tun) entered blocking state [ 167.235204][ T6704] bridge0: port 3(syz_tun) entered forwarding state [ 167.912850][ T6746] tipc: Enabled bearer , priority 0 [ 167.959607][ T6746] syzkaller0: entered promiscuous mode [ 167.986097][ T6746] syzkaller0: entered allmulticast mode [ 168.171698][ T6766] tipc: Resetting bearer [ 168.220886][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.244'. [ 168.588296][ T6777] net_ratelimit: 3321 callbacks suppressed [ 168.588318][ T6777] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 168.710559][ T6743] tipc: Resetting bearer [ 168.763275][ T6743] tipc: Disabling bearer [ 168.805677][ T6789] dummy0: entered promiscuous mode [ 168.822573][ T6789] dummy0: left promiscuous mode [ 169.173609][ T6805] netlink: 'syz.0.255': attribute type 15 has an invalid length. [ 169.457421][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 169.570563][ T6830] sctp: [Deprecated]: syz.4.259 (pid 6830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.570563][ T6830] Use struct sctp_sack_info instead [ 169.613147][ T6819] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 169.623731][ T6819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.259'. [ 169.666673][ T6819] netlink: 68 bytes leftover after parsing attributes in process `syz.4.259'. [ 171.092871][ T6816] syzkaller0: entered promiscuous mode [ 171.098712][ T6816] syzkaller0: entered allmulticast mode [ 171.185348][ T6837] xt_limit: Overflow, try lower: 268435456/134217728 [ 171.791348][ T6868] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 171.817523][ T6868] netlink: 'syz.4.267': attribute type 2 has an invalid length. [ 171.870242][ T6874] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 171.887995][ T6874] netlink: 'syz.4.267': attribute type 2 has an invalid length. [ 172.966666][ T6890] team0 (unregistering): Port device team_slave_0 removed [ 172.993459][ T6890] team0 (unregistering): Port device team_slave_1 removed [ 173.086906][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 173.520581][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 173.790877][ T6916] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 173.885771][ T6917] netlink: 44 bytes leftover after parsing attributes in process `syz.1.280'. [ 173.932312][ T6916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.398551][ T6938] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 174.400885][ T6940] SET target dimension over the limit! [ 174.483555][ T6938] SET target dimension over the limit! [ 174.821859][ T6963] netlink: 1 bytes leftover after parsing attributes in process `syz.4.289'. [ 174.931240][ T6963] netlink: 68 bytes leftover after parsing attributes in process `syz.4.289'. [ 175.006181][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 175.018987][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 175.047434][ T6972] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 175.095799][ T6972] bond1: entered promiscuous mode [ 175.102106][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.188005][ T5630] block nbd7: Receive control failed (result -32) [ 175.196525][ T50] block nbd7: Receive control failed (result -32) [ 175.759223][ T6994] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 175.859217][ T6994] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 175.935015][ T7000] netlink: 'syz.0.303': attribute type 39 has an invalid length. [ 175.946191][ T7003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.194422][ T7010] netlink: 'syz.1.307': attribute type 21 has an invalid length. [ 176.205839][ T7010] netlink: 128 bytes leftover after parsing attributes in process `syz.1.307'. [ 176.220057][ T7010] netlink: 'syz.1.307': attribute type 5 has an invalid length. [ 176.229088][ T7010] netlink: 3 bytes leftover after parsing attributes in process `syz.1.307'. [ 176.285624][ T7012] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.588840][ T7024] block nbd1: NBD_DISCONNECT [ 176.595494][ T7024] block nbd1: Send disconnect failed -32 [ 176.604890][ T7024] block nbd1: Send disconnect failed -32 [ 176.611712][ T7024] block nbd1: shutting down sockets [ 177.070492][ T7046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.319'. [ 177.141691][ T7046] dummy0: entered promiscuous mode [ 177.793415][ T7070] netlink: 'syz.3.322': attribute type 27 has an invalid length. [ 177.805867][ T7070] dummy0: left promiscuous mode [ 177.941503][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.951542][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.979111][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.079879][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.102512][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.120303][ T7070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.132842][ T7070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.166541][ T7070] veth1_vlan: left promiscuous mode [ 178.173494][ T7070] veth0_vlan: left promiscuous mode [ 178.181767][ T7070] veth0_vlan: entered promiscuous mode [ 178.187259][ T7082] __nla_validate_parse: 1 callbacks suppressed [ 178.187296][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 178.204290][ T7082] xt_TCPMSS: Only works on TCP SYN packets [ 178.207367][ T7070] veth1_vlan: entered promiscuous mode [ 178.239850][ T7070] veth1_macvtap: left promiscuous mode [ 178.247560][ T7070] veth0_macvtap: left promiscuous mode [ 178.261265][ T7070] veth0_macvtap: entered promiscuous mode [ 178.275984][ T7070] veth1_macvtap: entered promiscuous mode [ 178.291861][ T7070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.301926][ T7070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.311340][ T7070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.321054][ T7070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.331697][ T7070] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 178.358718][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.366210][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.403668][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.411095][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.504903][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.326'. [ 178.531423][ T6673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.541426][ T6673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.552733][ T7082] bridge_slave_1: left allmulticast mode [ 178.558875][ T7082] bridge_slave_1: left promiscuous mode [ 178.567425][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.579193][ T7082] bridge_slave_0: left allmulticast mode [ 178.590673][ T7082] bridge_slave_0: left promiscuous mode [ 178.602351][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.653717][ T6673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.663231][ T6673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.134617][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 179.341653][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 179.444949][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.455810][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.465969][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.475932][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.486836][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.497457][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.640162][ T7129] batadv0: entered promiscuous mode [ 179.653887][ T7129] dummy0: entered promiscuous mode [ 179.670401][ T7129] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 179.687525][ T7129] hsr1: entered allmulticast mode [ 179.693917][ T7129] batadv0: entered allmulticast mode [ 179.713540][ T7129] dummy0: entered allmulticast mode [ 180.132416][ T5630] block nbd1: Receive control failed (result -32) [ 180.139236][ T50] block nbd1: Receive control failed (result -32) [ 180.363757][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.875970][ T7213] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 181.990931][ T7213] bond1 (unregistering): Released all slaves [ 182.753112][ T7252] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 182.800413][ T7246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.268220][ T7252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.328394][ T7256] bond1: (slave gretap1): making interface the new active one [ 183.341229][ T7256] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 183.400773][ T7260] bond1 (unregistering): (slave gretap1): Releasing active interface [ 183.412812][ T7260] bond1 (unregistering): Released all slaves [ 183.483997][ T7246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.745692][ T7246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.789353][ T7277] nbd: must specify an index to disconnect [ 183.929361][ T7246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.100407][ T7287] __nla_validate_parse: 35 callbacks suppressed [ 184.100428][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'. [ 184.158001][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'. [ 184.251740][ T6691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.279626][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.307786][ T6692] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.388325][ T6691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.433649][ T6691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.918650][ T7309] macsec2: entered promiscuous mode [ 184.970671][ T7310] gre0 speed is unknown, defaulting to 1000 [ 185.001146][ T7316] netlink: 56 bytes leftover after parsing attributes in process `syz.1.385'. [ 185.019214][ T7314] netlink: 'syz.1.385': attribute type 7 has an invalid length. [ 185.029550][ T7310] gre0 speed is unknown, defaulting to 1000 [ 185.057233][ T7310] gre0 speed is unknown, defaulting to 1000 [ 185.570403][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 186.053723][ T5755] gre0 speed is unknown, defaulting to 1000 [ 186.060995][ T7310] infiniband syz1: set active [ 186.087502][ T7310] infiniband syz1: added gre0 [ 186.172136][ T7310] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 186.195150][ T7310] infiniband syz1: Couldn't open port 1 [ 186.246589][ T7310] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 186.301858][ T7310] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 186.359048][ T7310] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 186.369346][ T7344] netlink: 52 bytes leftover after parsing attributes in process `syz.1.393'. [ 186.411756][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.420973][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.615048][ T7310] RDS/IB: syz1: added [ 186.639920][ T7310] smc: adding ib device syz1 with port count 1 [ 186.666148][ T7310] smc: ib device syz1 port 1 has no pnetid [ 186.687253][ T5765] gre0 speed is unknown, defaulting to 1000 [ 186.710517][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 186.714428][ T7310] gre0 speed is unknown, defaulting to 1000 [ 186.742751][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 187.009147][ T7362] xt_hashlimit: size too large, truncated to 1048576 [ 187.383910][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 187.413408][ T7377] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 187.669793][ T7310] gre0 speed is unknown, defaulting to 1000 [ 188.185782][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 188.300627][ T7402] : entered promiscuous mode [ 188.578612][ T7310] gre0 speed is unknown, defaulting to 1000 [ 188.607341][ T7413] netlink: 'syz.4.408': attribute type 12 has an invalid length. [ 188.839564][ T7411] block nbd8: server does not support multiple connections per device. [ 188.867928][ T7411] block nbd8: shutting down sockets [ 189.283733][ T7310] gre0 speed is unknown, defaulting to 1000 [ 189.463015][ T7427] __nla_validate_parse: 1 callbacks suppressed [ 189.463037][ T7427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.411'. [ 189.720341][ T7406] gre0 speed is unknown, defaulting to 1000 [ 190.129079][ T7441] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 190.201738][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 190.217425][ T7453] netlink: 'syz.4.417': attribute type 12 has an invalid length. [ 190.274708][ T6678] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.292393][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 190.306378][ T6678] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.320046][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 190.326542][ T6678] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.337664][ T7453] netlink: 'syz.4.417': attribute type 12 has an invalid length. [ 190.370743][ T7310] gre0 speed is unknown, defaulting to 1000 [ 190.395829][ T6678] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.547863][ T7461] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 190.866743][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 191.024093][ T7464] tap0: tun_chr_ioctl cmd 1074025677 [ 191.054544][ T7464] tap0: linktype set to 6 [ 191.142635][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.423'. [ 191.175748][ T7475] Cannot find add_set index 0 as target [ 191.206453][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 191.261217][ T7474] gre0 speed is unknown, defaulting to 1000 [ 191.573922][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.424'. [ 191.742711][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 192.373164][ T7495] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.429'. [ 192.670786][ T7500] block nbd3: NBD_DISCONNECT [ 192.683763][ T7500] block nbd3: Send disconnect failed -32 [ 192.690065][ T7500] block nbd3: Send disconnect failed -32 [ 192.723976][ T7500] block nbd3: shutting down sockets [ 192.847952][ T7502] netlink: 'syz.4.432': attribute type 22 has an invalid length. [ 192.869898][ T7502] bond0: option ad_select: unable to set because the bond device is up [ 193.226111][ T7504] gre0 speed is unknown, defaulting to 1000 [ 193.456526][ T30] audit: type=1804 audit(1777649824.170:3): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.437" name="/newroot/84/cgroup.controllers" dev="tmpfs" ino=446 res=1 errno=0 [ 193.561758][ T30] audit: type=1800 audit(1777649824.180:4): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.437" name="cgroup.controllers" dev="tmpfs" ino=446 res=0 errno=0 [ 193.839254][ T5630] block nbd3: Receive control failed (result -32) [ 193.846897][ T50] block nbd3: Receive control failed (result -32) [ 194.044080][ T7542] vlan2: entered promiscuous mode [ 194.057341][ T7542] erspan0: entered promiscuous mode [ 194.071123][ T7542] vlan2: entered allmulticast mode [ 194.093648][ T7542] erspan0: entered allmulticast mode [ 194.479624][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496580][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.708558][ T7551] netlink: 'syz.3.444': attribute type 3 has an invalid length. [ 195.294881][ T7565] __nla_validate_parse: 6 callbacks suppressed [ 195.294904][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.448'. [ 195.615443][ T7579] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 195.635956][ T7578] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 195.726131][ T7578] bond2: (slave geneve2): making interface the new active one [ 195.763504][ T7578] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 195.799519][ T6678] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.830775][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 195.843776][ T6678] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.873951][ T6678] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.899974][ T7587] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 195.906120][ T6678] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.933462][ T7578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.266327][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 196.699372][ T7606] nbd: must specify an index to disconnect [ 196.908955][ T7613] dummy0: mtu less than device minimum [ 196.972053][ T7615] netlink: 276 bytes leftover after parsing attributes in process `syz.0.462'. [ 197.717485][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 197.804615][ T7645] lo: entered allmulticast mode [ 198.209971][ T7653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.364980][ T7660] netlink: 'syz.1.477': attribute type 61 has an invalid length. [ 198.413735][ T7660] netlink: 'syz.1.477': attribute type 62 has an invalid length. [ 198.467608][ T7663] tipc: Enabling of bearer rejected, failed to enable media [ 198.494545][ T7663] block nbd3: NBD_DISCONNECT [ 198.507719][ T7663] block nbd3: Send disconnect failed -32 [ 198.527830][ T7663] block nbd3: Send disconnect failed -32 [ 198.544669][ T7663] block nbd3: shutting down sockets [ 198.641891][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 198.654990][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 198.801250][ T7653] syz.4.475 (7653) used greatest stack depth: 17944 bytes left [ 198.883051][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 198.925995][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.483'. [ 199.908119][ T7720] netlink: 92 bytes leftover after parsing attributes in process `syz.4.490'. [ 199.933176][ T7717] gre0 speed is unknown, defaulting to 1000 [ 200.009928][ T7725] netlink: zone id is out of range [ 200.027388][ T7725] netlink: get zone limit has 4 unknown bytes [ 200.302241][ T7728] netlink: 'syz.2.494': attribute type 7 has an invalid length. [ 200.844849][ T50] block nbd3: Receive control failed (result -32) [ 200.851670][ T5630] block nbd3: Receive control failed (result -32) [ 200.963968][ T7752] __nla_validate_parse: 2 callbacks suppressed [ 200.963988][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 201.192486][ T7757] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 201.251153][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 201.485899][ T7762] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 201.551845][ T5765] gre0 speed is unknown, defaulting to 1000 [ 201.767543][ T7773] lo: entered allmulticast mode [ 201.783824][ T7773] lo: left allmulticast mode [ 202.432480][ T7772] gre0 speed is unknown, defaulting to 1000 [ 203.204775][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 203.262758][ T7806] netlink: 52 bytes leftover after parsing attributes in process `syz.4.510'. [ 203.290040][ T7814] netlink: 52 bytes leftover after parsing attributes in process `syz.4.510'. [ 203.632342][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 203.796146][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.803853][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.908386][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.924823][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.110707][ T7824] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 204.132656][ T7798] gre0 speed is unknown, defaulting to 1000 [ 204.147053][ T6690] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.169695][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'. [ 204.176373][ T6690] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.213129][ T6690] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.253171][ T6690] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.696717][ T7850] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 205.706834][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 205.916101][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 206.011226][ T7859] gre0 speed is unknown, defaulting to 1000 [ 206.208628][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 206.226681][ T7866] netlink: 'syz.0.524': attribute type 22 has an invalid length. [ 206.238555][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 206.269477][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 206.270804][ T6673] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.286521][ T7866] netlink: 'syz.0.524': attribute type 22 has an invalid length. [ 206.296530][ T6673] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.306409][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 206.310074][ T6673] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.337671][ T6673] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.675754][ T7825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.801313][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 206.801341][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 206.801376][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 207.375720][ T5630] block nbd8: Receive control failed (result -32) [ 207.383181][ T50] block nbd8: Receive control failed (result -32) [ 207.468603][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 207.532609][ T7894] openvswitch: netlink: Invalid VLAN frame [ 207.581257][ T7894] tipc: Started in network mode [ 207.605927][ T7894] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 207.652834][ T7894] tipc: Enabled bearer , priority 31 [ 207.706945][ T7900] sctp: [Deprecated]: syz.0.534 (pid 7900) Use of int in maxseg socket option. [ 207.706945][ T7900] Use struct sctp_assoc_value instead [ 208.249519][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 208.378509][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 208.390307][ T7925] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 208.409146][ T7929] sctp: [Deprecated]: syz.2.541 (pid 7929) Use of int in maxseg socket option. [ 208.409146][ T7929] Use struct sctp_assoc_value instead [ 208.438095][ T7929] xt_TCPMSS: Only works on TCP SYN packets [ 208.585013][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 208.622594][ T7932] bond0: Unable to set up delay as MII monitoring is disabled [ 208.759413][ T806] tipc: Node number set to 10136234 [ 208.776063][ T7941] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 208.823654][ T7941] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 208.962785][ T7941] 8021q: VLANs not supported on xfrm0 [ 209.181449][ T7948] netlink: 92 bytes leftover after parsing attributes in process `syz.2.544'. [ 209.214070][ T7947] gre0 speed is unknown, defaulting to 1000 [ 209.405269][ T7955] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 209.500349][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 209.693288][ T7955] ip6gretap1: entered promiscuous mode [ 209.712160][ T7955] ip6gretap1: entered allmulticast mode [ 210.382102][ T7983] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 210.455199][ T7989] syzkaller0: entered promiscuous mode [ 210.472126][ T7989] syzkaller0: entered allmulticast mode [ 210.633877][ T7991] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 210.633877][ T7991] Please contact the netfilter-devel mailing list or update your nftables rules. [ 210.669622][ T7953] gre0 speed is unknown, defaulting to 1000 [ 211.340563][ T8007] x_tables: ip_tables: ah match: only valid for protocol 51 [ 212.155941][ T8023] __nla_validate_parse: 3 callbacks suppressed [ 212.155965][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 212.503829][ T8028] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 213.013582][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 213.147549][ T8052] gre0 speed is unknown, defaulting to 1000 [ 213.456533][ T8073] netlink: 'syz.4.575': attribute type 8 has an invalid length. [ 213.486436][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 213.529267][ T8073] bridge0: port 3(syz_tun) entered disabled state [ 213.537436][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.545932][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.644437][ T8089] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.578'. [ 213.699527][ T8089] netlink: 996 bytes leftover after parsing attributes in process `syz.2.578'. [ 214.003158][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 214.089497][ T8104] smc: removing ib device syz1 [ 214.113849][ T8105] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 214.164826][ T8104] smbdirect: ib_dev[syz1] removed [ 214.272788][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 214.300105][ T8109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 214.373332][ T8109] 8021q: VLANs not supported on ip6_vti0 [ 214.707800][ T8118] vlan2: entered promiscuous mode [ 214.722094][ T8118] bridge0: entered promiscuous mode [ 215.882249][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 216.423239][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 216.733848][ T8151] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 217.229605][ T8164] syzkaller1: entered promiscuous mode [ 217.247218][ T8164] syzkaller1: entered allmulticast mode [ 217.721808][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 217.824034][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 218.039107][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 218.220582][ T8194] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 218.309921][ T8200] netlink: 92 bytes leftover after parsing attributes in process `syz.1.609'. [ 218.310458][ T8197] syzkaller1: entered promiscuous mode [ 218.331056][ T8197] syzkaller1: entered allmulticast mode [ 218.448460][ T8206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 218.586312][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 218.644287][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.653423][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.810720][ T8214] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 218.828364][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.844704][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.939685][ T8202] ip6gre1: left promiscuous mode [ 218.944765][ T8202] ip6gre1: left allmulticast mode [ 218.956901][ T8202] syzkaller1: left promiscuous mode [ 218.962158][ T8202] syzkaller1: left allmulticast mode [ 218.988505][ T6665] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.997430][ T6665] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.068439][ T6665] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.098998][ T6665] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.112915][ T6665] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.123750][ T6665] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.164514][ T6665] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.173385][ T6665] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.278316][ T8226] sctp: [Deprecated]: syz.4.615 (pid 8226) Use of int in max_burst socket option. [ 219.278316][ T8226] Use struct sctp_assoc_value instead [ 219.657408][ T8239] openvswitch: netlink: Flow actions attr not present in new flow. [ 219.711660][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 219.791568][ T8242] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 219.846892][ T8242] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 219.982964][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 219.997739][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.623'. [ 220.047256][ T8252] vlan2: entered promiscuous mode [ 220.067430][ T8252] erspan0: entered promiscuous mode [ 220.103015][ T8252] vlan2: entered allmulticast mode [ 220.127640][ T8252] erspan0: entered allmulticast mode [ 220.340234][ T8266] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 220.442977][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 220.734303][ T8276] syzkaller0: entered promiscuous mode [ 220.785974][ T8276] syzkaller0: entered allmulticast mode [ 221.623054][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.654621][ T8307] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 221.734635][ T8308] bond2 (unregistering): Released all slaves [ 222.285340][ T5743] IPVS: starting estimator thread 0... [ 222.387689][ T8335] IPVS: using max 28 ests per chain, 67200 per kthread [ 222.660838][ T5755] IPVS: starting estimator thread 0... [ 222.767036][ T8346] IPVS: using max 27 ests per chain, 64800 per kthread [ 222.840387][ T8348] __nla_validate_parse: 7 callbacks suppressed [ 222.840412][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 224.198478][ T8375] netlink: 'syz.0.652': attribute type 30 has an invalid length. [ 224.336743][ T8375] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 224.358875][ T8375] bond2 (unregistering): Released all slaves [ 224.677266][ T8387] virt_wifi0: entered allmulticast mode [ 225.190014][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 226.278149][ T8437] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 227.529261][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 227.564092][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 228.158949][ T8490] TCP: TCP_TX_DELAY enabled [ 228.243608][ T8490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.673'. [ 228.381544][ T8486] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.472955][ T8486] bond5: (slave lo): Enslaving as an active interface with an up link [ 228.510354][ T8486] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 228.650196][ T8505] netlink: 'syz.0.677': attribute type 29 has an invalid length. [ 229.350393][ T50] block nbd9: Receive control failed (result -32) [ 232.174640][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 232.183934][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 232.193444][ T8540] netlink: 58 bytes leftover after parsing attributes in process `syz.4.684'. [ 232.528717][ T8549] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.686'. [ 232.539262][ T8550] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.686'. [ 233.259678][ T30] audit: type=1804 audit(1777649863.990:5): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.695" name="/newroot/136/memory.events" dev="tmpfs" ino=714 res=1 errno=0 [ 233.322701][ T30] audit: type=1800 audit(1777649864.020:6): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.695" name="memory.events" dev="tmpfs" ino=714 res=0 errno=0 [ 233.573126][ T8580] bond3: Unable to set down delay as MII monitoring is disabled [ 233.618111][ T8580] bond3 (unregistering): Released all slaves [ 233.967919][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 234.021805][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.702'. [ 234.118747][ T8606] bond3: option arp_all_targets: invalid value (129) [ 234.132756][ T8606] bond3 (unregistering): Released all slaves [ 234.762155][ T8635] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.712'. [ 234.824458][ T8635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.075667][ T8644] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 235.310031][ T8644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.445389][ T8643] bond8: (slave gretap1): making interface the new active one [ 235.468378][ T8643] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 235.497191][ T8653] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 239.432394][ T8712] bridge0: port 4(vlan2) entered blocking state [ 239.439274][ T8712] bridge0: port 4(vlan2) entered disabled state [ 239.445908][ T8712] vlan2: entered allmulticast mode [ 239.465751][ T8712] geneve0: entered allmulticast mode [ 239.483531][ T8712] vlan2: entered promiscuous mode [ 239.513540][ T8712] geneve0: entered promiscuous mode [ 239.577796][ T8715] netlink: 'syz.1.728': attribute type 6 has an invalid length. [ 239.599289][ T8715] netlink: 'syz.1.728': attribute type 7 has an invalid length. [ 239.625991][ T8715] netlink: 'syz.1.728': attribute type 8 has an invalid length. [ 239.658657][ T8715] netlink: 'syz.1.728': attribute type 15 has an invalid length. [ 239.814504][ T8718] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.825722][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.851160][ T8718] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.894529][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 240.739321][ T8751] tipc: Can't bind to reserved service type 2 [ 241.113739][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 241.374626][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 241.398257][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 241.423428][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 241.688589][ T8773] tipc: Started in network mode [ 241.707322][ T8773] tipc: Node identity ac14140f, cluster identity 4711 [ 241.754365][ T8773] tipc: New replicast peer: 255.255.255.255 [ 241.784226][ T8773] tipc: Enabled bearer , priority 10 [ 241.880707][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 241.924846][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 242.112583][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 242.256498][ T8787] bond6: entered promiscuous mode [ 242.270600][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 242.277255][ T8787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.313456][ T8799] veth1_macvtap: left promiscuous mode [ 242.350257][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.746'. [ 242.465702][ T50] block nbd10: Receive control failed (result -32) [ 242.467620][ T5630] block nbd10: Receive control failed (result -32) [ 242.612534][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 242.675245][ T8815] xt_TCPMSS: Only works on TCP SYN packets [ 242.793566][ T8818] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.847617][ T8825] Bluetooth: MGMT ver 1.23 [ 243.094812][ T8821] bond9: (slave veth5): Enslaving as an active interface with an up link [ 243.107549][ T5765] tipc: Node number set to 2886997007 [ 243.152899][ T8818] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 243.981831][ T8863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.097744][ T8866] openvswitch: netlink: EtherType 50a is less than min 600 [ 244.275191][ T8868] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 245.199407][ T8904] xt_l2tp: missing protocol rule (udp|l2tpip) [ 245.311834][ T8907] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 246.123913][ T8934] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 246.341343][ T8941] __nla_validate_parse: 15 callbacks suppressed [ 246.341366][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 246.504804][ T8948] openvswitch: netlink: EtherType 50a is less than min 600 [ 246.842330][ T8958] IPVS: Error connecting to the multicast addr [ 247.448970][ T6663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.482961][ T6663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.507281][ T8983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.795'. [ 247.539189][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 247.709300][ T8984] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 248.103121][ T9014] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 248.142887][ T9014] netlink: 2 bytes leftover after parsing attributes in process `syz.3.805'. [ 248.174345][ T9013] xt_CONNSECMARK: invalid mode: 254 [ 248.182161][ T9014] veth1_virt_wifi: entered promiscuous mode [ 248.207472][ T9014] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 248.239935][ T9014] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 248.263236][ T9014] veth1_virt_wifi: entered allmulticast mode [ 248.278941][ T9014] veth1_virt_wifi: left allmulticast mode [ 248.426441][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.807'. [ 248.555590][ T9029] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.803'. [ 248.881062][ T5630] block nbd11: Receive control failed (result -32) [ 248.882207][ T50] block nbd11: Receive control failed (result -32) [ 248.919102][ T9037] tipc: New replicast peer: 255.255.255.255 [ 248.975379][ T9037] tipc: Enabled bearer , priority 10 [ 249.133516][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 249.479110][ T9052] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 249.798327][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 249.950669][ T9081] netlink: 68 bytes leftover after parsing attributes in process `syz.1.819'. [ 250.124486][ T9076] bond8: option min_links: invalid value (18446744073709551612) [ 250.188165][ T9076] bond8: option min_links: allowed values 0 - 2147483647 [ 250.238120][ T9076] bond8 (unregistering): Released all slaves [ 250.255820][ T9087] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 250.367157][ T806] tipc: Node number set to 1591451692 [ 250.586305][ T9087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.610968][ T9092] bond4: (slave geneve3): making interface the new active one [ 250.620720][ T9092] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 250.944905][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'. [ 251.155424][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.963144][ T9153] __nla_validate_parse: 1 callbacks suppressed [ 251.963263][ T9153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.843'. [ 251.990753][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 252.040676][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 252.166087][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.847'. [ 252.221229][ T9153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 252.273745][ T9165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 252.335671][ T9164] syzkaller1: entered promiscuous mode [ 252.363309][ T9164] syzkaller1: entered allmulticast mode [ 252.967035][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 253.321104][ T9218] netlink: 'syz.4.856': attribute type 11 has an invalid length. [ 253.344927][ T9218] netlink: 'syz.4.856': attribute type 23 has an invalid length. [ 253.382764][ T9218] netlink: 224 bytes leftover after parsing attributes in process `syz.4.856'. [ 253.497486][ T9223] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 253.564329][ T9223] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 253.764867][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 254.107427][ T9242] nbd: nbd3 already in use [ 254.120626][ T9242] block nbd3: NBD_DISCONNECT [ 254.132709][ T9242] block nbd3: Send disconnect failed -32 [ 254.156979][ T9242] block nbd3: Send disconnect failed -32 [ 254.176138][ T9242] block nbd3: shutting down sockets [ 254.237260][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.870'. [ 254.251997][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 254.627700][ T9269] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 254.654963][ T9268] netlink: 'syz.2.875': attribute type 2 has an invalid length. [ 254.678526][ T9272] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 254.845818][ T9268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.017850][ T5766] IPVS: starting estimator thread 0... [ 255.024773][ T9284] tipc: Enabled bearer , priority 10 [ 255.126823][ T9285] IPVS: using max 29 ests per chain, 69600 per kthread [ 255.241602][ T9289] syzkaller0: entered promiscuous mode [ 255.253862][ T9289] syzkaller0: entered allmulticast mode [ 255.457594][ T9298] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 255.914511][ T9292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.922078][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.928775][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.347577][ T5630] block nbd3: Receive control failed (result -32) [ 256.352440][ T50] block nbd3: Receive control failed (result -32) [ 258.780790][ T9343] __nla_validate_parse: 7 callbacks suppressed [ 258.780811][ T9343] netlink: 144 bytes leftover after parsing attributes in process `syz.4.897'. [ 258.823906][ T9343] netlink: 'syz.4.897': attribute type 3 has an invalid length. [ 259.295981][ T9369] netlink: 'syz.1.903': attribute type 29 has an invalid length. [ 259.327551][ T9369] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 259.357234][ T9369] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 259.435507][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 259.536017][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 259.589502][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.908'. [ 259.674800][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 259.697207][ T5630] block nbd12: Receive control failed (result -32) [ 259.697810][ T50] block nbd12: Receive control failed (result -32) [ 259.925833][ T9394] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.912'. [ 259.942266][ T9393] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 260.183334][ T9408] xt_TCPMSS: Only works on TCP SYN packets [ 260.192787][ T9393] bond11: entered promiscuous mode [ 260.209239][ T9393] 8021q: adding VLAN 0 to HW filter on device bond11 [ 260.239495][ T9412] netlink: 3 bytes leftover after parsing attributes in process `syz.0.917'. [ 260.251171][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.916'. [ 260.328744][ T9404] 8021q: adding VLAN 0 to HW filter on device bond11 [ 260.352918][ T9404] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 260.397514][ T9404] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 260.484023][ T9404] bond11: (slave wireguard0): making interface the new active one [ 260.506494][ T9404] wireguard0: entered promiscuous mode [ 260.533222][ T9404] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 260.602046][ T9406] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address [ 260.632496][ T9406] bond11: (slave wireguard1): Enslaving as a backup interface with an up link [ 260.663278][ T9408] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.722205][ T9393] geneve2: entered promiscuous mode [ 260.737106][ T9393] geneve2: entered allmulticast mode [ 260.774352][ T9416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 260.997523][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 261.044926][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.926'. [ 261.064175][ T9441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.073303][ T9441] IPv6: NLM_F_CREATE should be set when creating new route [ 261.105565][ T9442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.208214][ T9445] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 261.428323][ T9459] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 261.461548][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.912448][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 262.163634][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.170990][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 262.205118][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.313673][ T9494] netlink: 'syz.0.941': attribute type 7 has an invalid length. [ 262.827577][ T9518] netlink: 'syz.0.946': attribute type 21 has an invalid length. [ 262.833354][ T9504] syzkaller0: entered promiscuous mode [ 262.851670][ T9504] syzkaller0: entered allmulticast mode [ 263.059991][ T9529] netlink: 'syz.4.951': attribute type 30 has an invalid length. [ 265.319585][ T9529] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 265.339815][ T9535] tipc: Enabled bearer , priority 0 [ 265.363958][ T9536] syzkaller0: entered promiscuous mode [ 265.373926][ T9536] syzkaller0: entered allmulticast mode [ 265.518829][ T9549] __nla_validate_parse: 8 callbacks suppressed [ 265.518852][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'. [ 265.550272][ T9549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.557808][ T9549] IPv6: NLM_F_CREATE should be set when creating new route [ 265.601785][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'. [ 265.633305][ T9543] tipc: Resetting bearer [ 265.650290][ T9549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.761194][ T9543] tipc: Disabling bearer [ 265.900698][ T9565] v: renamed from veth0_vlan (while UP) [ 266.023854][ T6663] tipc: Resetting bearer [ 266.062614][ T9578] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 266.100992][ T9578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.129646][ T9578] bond6: (slave dummy0): making interface the new active one [ 266.139047][ T9578] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 266.149702][ T9563] netlink: 'syz.4.956': attribute type 29 has an invalid length. [ 266.648841][ T50] block nbd13: Receive control failed (result -32) [ 266.732846][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 266.760885][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 267.153002][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 267.539042][ T9637] IPVS: Error connecting to the multicast addr [ 267.831385][ T30] audit: type=1107 audit(1777649898.560:7): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÞuRíÊíÈE¼.ò,VÌòóÚä¶*ÖÏH2x·odgÛ"9\Ö?èÑÏ—ù€LO¬ôY [ 267.831385][ T30] ã~@Eùã¤×ÿvå-†TzzžÎQ—-Ÿ' [ 268.272450][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 268.283167][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 268.469434][ T9664] nbd: nbd4 already in use [ 268.480916][ T9665] block nbd0: NBD_DISCONNECT [ 268.488955][ T9665] block nbd0: Send disconnect failed -32 [ 268.499738][ T9665] block nbd0: Send disconnect failed -32 [ 268.505770][ T9665] block nbd0: shutting down sockets [ 269.260676][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 269.278476][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 269.497354][ T9697] netlink: 'syz.4.995': attribute type 4 has an invalid length. [ 269.655870][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 269.806600][ T9719] netlink: 'syz.4.1001': attribute type 3 has an invalid length. [ 269.834026][ T9719] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 270.570470][ T9677] tipc: Resetting bearer [ 270.628920][ T9677] tipc: Resetting bearer [ 270.659683][ T9677] tipc: Resetting bearer [ 270.733519][ T9752] __nla_validate_parse: 7 callbacks suppressed [ 270.733540][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 271.141944][ T9757] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1010'. [ 271.185783][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 271.266029][ T9757] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 271.791816][ T9770] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 271.851107][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 271.915239][ T9784] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 271.953874][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 272.097996][ T9770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.162206][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'. [ 272.167782][ T9787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.190188][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'. [ 272.222666][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1019'. [ 272.246798][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1019'. [ 272.675630][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 273.482163][ T9847] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 273.882039][ T9862] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 273.989457][ T9868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.026827][ T9862] bond8: entered promiscuous mode [ 274.037076][ T9862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.053305][ T9868] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 275.037250][ T9907] bond9: option packets_per_slave: invalid value (1048582) [ 275.044778][ T9907] bond9: option packets_per_slave: allowed values 0 - 65535 [ 275.072857][ T9907] bond9 (unregistering): Released all slaves [ 275.443903][ T9919] netlink: 'syz.3.1051': attribute type 2 has an invalid length. [ 275.504158][ T9919] netlink: 'syz.3.1051': attribute type 8 has an invalid length. [ 275.627017][ T9917] netlink: 'syz.3.1051': attribute type 2 has an invalid length. [ 275.642070][ T9917] netlink: 'syz.3.1051': attribute type 8 has an invalid length. [ 275.926065][ T9937] syzkaller0: entered promiscuous mode [ 275.954816][ T9937] syzkaller0: entered allmulticast mode [ 276.110278][ T9945] __nla_validate_parse: 14 callbacks suppressed [ 276.110300][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'. [ 276.518384][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.593006][ T9965] vlan2: entered promiscuous mode [ 276.608545][ T9965] gretap0: entered promiscuous mode [ 276.821720][ T9968] xt_hashlimit: size too large, truncated to 1048576 [ 276.904714][ T9967] syzkaller0: entered promiscuous mode [ 276.956459][ T9967] syzkaller0: entered allmulticast mode [ 277.846601][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1072'. [ 278.176172][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1075'. [ 278.668856][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1075'. [ 280.040546][T10003] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 280.524329][T10035] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1081'. [ 280.533806][T10030] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 280.589436][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 280.605649][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 280.654191][T10029] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 280.944367][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'. [ 281.127387][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 281.420355][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1091'. [ 281.434604][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1092'. [ 281.720395][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 281.735375][T10094] netlink: 'syz.2.1094': attribute type 11 has an invalid length. [ 281.782135][T10094] netlink: 12332 bytes leftover after parsing attributes in process `syz.2.1094'. [ 281.911393][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 282.001281][T10102] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 282.173107][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 282.280958][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 282.420447][T10125] xt_hashlimit: size too large, truncated to 1048576 [ 282.451639][T10110] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.517748][T10140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 282.524830][T10110] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 282.768996][T10140] bond9: (slave bridge8): Enslaving as an active interface with a down link [ 282.850770][T10117] ip6gretap2: entered promiscuous mode [ 282.877580][T10117] ip6gretap2: entered allmulticast mode [ 283.110256][T10153] bond13: ARP target 9.0.0.0 is already present [ 283.119185][T10153] bond13: option arp_ip_target: invalid value (9) [ 283.148222][T10153] bond13 (unregistering): Released all slaves [ 283.168689][T10164] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1108'. [ 283.588012][T10182] netlink: 'syz.4.1114': attribute type 4 has an invalid length. [ 283.996033][T10200] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 284.540104][T10221] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 284.873418][T10237] netlink: 'syz.4.1130': attribute type 2 has an invalid length. [ 284.915703][T10237] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 285.646460][T10255] syzkaller1: entered promiscuous mode [ 285.659888][T10255] syzkaller1: entered allmulticast mode [ 285.950324][T10269] syzkaller0: entered promiscuous mode [ 285.967361][T10269] syzkaller0: entered allmulticast mode [ 286.388502][T10283] ipt_REJECT: TCP_RESET invalid for non-tcp [ 286.725512][T10296] __nla_validate_parse: 11 callbacks suppressed [ 286.725532][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1147'. [ 287.000661][T10314] netlink: 'syz.0.1150': attribute type 13 has an invalid length. [ 287.071241][T10314] netlink: 'syz.0.1150': attribute type 17 has an invalid length. [ 287.380193][T10314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.424131][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.499669][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.576402][T10314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.598275][T10314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.619700][T10314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.638415][T10314] virt_wifi0: left allmulticast mode [ 287.657812][T10314] veth1_vlan: left promiscuous mode [ 287.675238][T10314] veth0_vlan: left promiscuous mode [ 287.691240][T10314] veth0_vlan: entered promiscuous mode [ 287.702703][T10314] veth1_vlan: entered promiscuous mode [ 287.712953][T10314] veth1_macvtap: left promiscuous mode [ 287.720521][T10314] veth0_macvtap: left promiscuous mode [ 287.727957][T10314] veth0_macvtap: entered promiscuous mode [ 287.745782][T10314] veth1_macvtap: entered promiscuous mode [ 287.763700][T10314] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 287.831729][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.839155][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.868625][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.875875][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.994826][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 288.057403][ T1175] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.073055][ T1175] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.275320][ T6673] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.301784][ T6673] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.315352][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 288.367381][T10371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1162'. [ 288.425033][T10343] syzkaller0: entered promiscuous mode [ 288.441479][T10343] syzkaller0: entered allmulticast mode [ 288.574940][T10379] syzkaller1: entered promiscuous mode [ 288.582714][T10379] syzkaller1: entered allmulticast mode [ 289.723979][T10404] netlink: zone id is out of range [ 289.729484][T10404] netlink: zone id is out of range [ 289.734787][T10404] netlink: zone id is out of range [ 289.742610][T10404] netlink: zone id is out of range [ 289.747908][T10404] netlink: zone id is out of range [ 289.753099][T10404] netlink: zone id is out of range [ 289.759274][T10404] netlink: zone id is out of range [ 289.764436][T10404] netlink: zone id is out of range [ 289.769772][T10404] netlink: zone id is out of range [ 289.829028][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'. [ 289.935031][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1171'. [ 289.946730][T10410] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1171'. [ 290.700674][T10344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.710352][T10357] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 290.719041][T10357] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 290.737896][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 293.098428][T10421] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 293.289485][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 293.358987][T10437] netlink: 'syz.2.1176': attribute type 61 has an invalid length. [ 293.617838][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 293.673494][T10453] veth1_macvtap: left promiscuous mode [ 293.718540][T10460] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 293.735130][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1183'. [ 293.745502][T10460] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 293.753616][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1183'. [ 293.753673][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'. [ 293.852128][T10463] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1185'. [ 293.994963][T10469] bond13: Removing last arp target with arp_interval on [ 294.121028][T10476] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 294.132253][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 294.147745][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 294.167850][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 294.197916][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 294.645806][T10476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.712663][T10476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.824666][T10476] tipc: Resetting bearer [ 295.209696][T10518] netlink: 'syz.2.1194': attribute type 64 has an invalid length. [ 295.294240][ T6673] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.328498][ T6673] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.415783][ T6673] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.467055][ T6673] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.843201][T10540] Bluetooth: MGMT ver 1.23 [ 296.126482][T10558] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 296.165887][T10558] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 296.199731][T10560] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 296.220303][T10561] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 296.248570][T10560] dummy0: entered promiscuous mode [ 296.288401][T10560] bridge0: port 3(dummy0) entered blocking state [ 296.308378][T10560] bridge0: port 3(dummy0) entered disabled state [ 296.322230][T10560] dummy0: entered allmulticast mode [ 296.568798][T10567] syzkaller0: entered promiscuous mode [ 296.588114][T10567] syzkaller0: entered allmulticast mode [ 297.203423][T10575] nbd0: detected capacity change from 0 to 63 [ 297.231004][T10578] block nbd0: NBD_DISCONNECT [ 297.280360][T10578] block nbd0: Disconnected due to user request. [ 297.321951][T10578] block nbd0: shutting down sockets [ 297.365850][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.375297][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.396716][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.406027][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 297.413918][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.423028][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 297.430888][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.440202][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 297.470529][ T6248] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.511613][ T6248] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.536153][ T6248] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.558874][ T6248] Buffer I/O error on dev nbd0, logical block 1, async page read [ 297.575198][ T6248] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.595882][ T6248] Buffer I/O error on dev nbd0, logical block 2, async page read [ 297.628749][ T6248] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.644701][T10592] bridge0: port 3(syz_tun) entered blocking state [ 297.657122][ T6248] Buffer I/O error on dev nbd0, logical block 3, async page read [ 297.667938][T10592] bridge0: port 3(syz_tun) entered disabled state [ 297.687093][T10592] syz_tun: entered allmulticast mode [ 297.701239][ T6248] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.730187][T10592] syz_tun: entered promiscuous mode [ 297.735591][ T6248] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.752362][ T6248] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.786150][ T6248] Buffer I/O error on dev nbd0, logical block 1, async page read [ 297.851747][ T6248] ldm_validate_partition_table(): Disk read failed. [ 297.914042][ T6248] Dev nbd0: unable to read RDB block 0 [ 297.921245][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 297.927386][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 297.953074][ T6248] nbd0: unable to read partition table [ 298.055440][ T6248] ldm_validate_partition_table(): Disk read failed. [ 298.112211][ T6248] Dev nbd0: unable to read RDB block 0 [ 298.153424][ T6248] nbd0: unable to read partition table [ 298.294302][ T6248] [ 298.296706][ T6248] ====================================================== [ 298.303905][ T6248] WARNING: possible circular locking dependency detected [ 298.311106][ T6248] syzkaller #0 Not tainted [ 298.315613][ T6248] ------------------------------------------------------ [ 298.322628][ T6248] udevd/6248 is trying to acquire lock: [ 298.328264][ T6248] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 298.338126][ T6248] [ 298.338126][ T6248] but task is already holding lock: [ 298.345489][ T6248] ffffffff90172860 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 298.356026][ T6248] [ 298.356026][ T6248] which lock already depends on the new lock. [ 298.356026][ T6248] [ 298.366430][ T6248] [ 298.366430][ T6248] the existing dependency chain (in reverse order) is: [ 298.375444][ T6248] [ 298.375444][ T6248] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 298.383444][ T6248] __mutex_lock+0x1a3/0x1550 [ 298.388562][ T6248] kobject_uevent_net_broadcast+0x27e/0x560 [ 298.395100][ T6248] kobject_uevent_env+0x55c/0x9e0 [ 298.400684][ T6248] device_add+0x557/0xbb0 [ 298.405636][ T6248] device_create+0x269/0x300 [ 298.410760][ T6248] msr_device_create+0x33/0x50 [ 298.416072][ T6248] cpuhp_invoke_callback+0x445/0x860 [ 298.421958][ T6248] cpuhp_thread_fun+0x36b/0x780 [ 298.427339][ T6248] smpboot_thread_fn+0x541/0xa50 [ 298.432814][ T6248] kthread+0x388/0x470 [ 298.437422][ T6248] ret_from_fork+0x514/0xb70 [ 298.442555][ T6248] ret_from_fork_asm+0x1a/0x30 [ 298.447993][ T6248] [ 298.447993][ T6248] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 298.455602][ T6248] cpuhp_thread_fun+0x127/0x780 [ 298.461089][ T6248] smpboot_thread_fn+0x541/0xa50 [ 298.466556][ T6248] kthread+0x388/0x470 [ 298.471180][ T6248] ret_from_fork+0x514/0xb70 [ 298.476292][ T6248] ret_from_fork_asm+0x1a/0x30 [ 298.481596][ T6248] [ 298.481596][ T6248] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 298.489335][ T6248] cpus_read_lock+0x42/0x160 [ 298.494446][ T6248] static_key_slow_inc+0x12/0x30 [ 298.499911][ T6248] setup_udp_tunnel_sock+0x2fd/0x510 [ 298.505733][ T6248] l2tp_tunnel_register+0xde2/0x1490 [ 298.511635][ T6248] pppol2tp_connect+0x8b7/0x17c0 [ 298.517108][ T6248] __sys_connect+0x312/0x450 [ 298.522346][ T6248] __x64_sys_connect+0x7a/0x90 [ 298.527634][ T6248] do_syscall_64+0x15f/0xf80 [ 298.532751][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.539174][ T6248] [ 298.539174][ T6248] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 298.547019][ T6248] lock_sock_nested+0x41/0x100 [ 298.552399][ T6248] inet_shutdown+0x6a/0x390 [ 298.557451][ T6248] nbd_mark_nsock_dead+0x2e9/0x560 [ 298.563087][ T6248] sock_shutdown+0x15e/0x260 [ 298.568200][ T6248] nbd_clear_sock+0x24/0x170 [ 298.573309][ T6248] nbd_config_put+0x2dd/0x580 [ 298.578511][ T6248] nbd_genl_connect+0x19d5/0x1cf0 [ 298.584086][ T6248] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.590164][ T6248] genl_rcv_msg+0x61c/0x7a0 [ 298.595211][ T6248] netlink_rcv_skb+0x232/0x4b0 [ 298.600539][ T6248] genl_rcv+0x28/0x40 [ 298.605090][ T6248] netlink_unicast+0x75c/0x8e0 [ 298.610500][ T6248] netlink_sendmsg+0x813/0xb40 [ 298.615808][ T6248] ____sys_sendmsg+0x972/0x9f0 [ 298.621222][ T6248] ___sys_sendmsg+0x2a5/0x360 [ 298.626428][ T6248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.631950][ T6248] do_syscall_64+0x15f/0xf80 [ 298.637130][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.643548][ T6248] [ 298.643548][ T6248] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 298.651203][ T6248] __mutex_lock+0x1a3/0x1550 [ 298.656322][ T6248] nbd_queue_rq+0x37b/0x1100 [ 298.661541][ T6248] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 298.667640][ T6248] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 298.674502][ T6248] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 298.681037][ T6248] blk_mq_run_hw_queue+0x348/0x4f0 [ 298.686775][ T6248] blk_mq_dispatch_list+0xd16/0xe10 [ 298.692503][ T6248] blk_mq_flush_plug_list+0x48d/0x570 [ 298.698404][ T6248] __blk_flush_plug+0x3ed/0x4d0 [ 298.703957][ T6248] __submit_bio+0x28d/0x580 [ 298.709048][ T6248] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 298.715305][ T6248] block_read_full_folio+0x599/0x830 [ 298.721201][ T6248] filemap_read_folio+0x137/0x3b0 [ 298.726757][ T6248] do_read_cache_folio+0x358/0x590 [ 298.732397][ T6248] read_part_sector+0xb6/0x2b0 [ 298.737690][ T6248] adfspart_check_ICS+0xb1/0x960 [ 298.743332][ T6248] bdev_disk_changed+0x817/0x1770 [ 298.748889][ T6248] blkdev_get_whole+0x380/0x510 [ 298.754271][ T6248] bdev_open+0x31e/0xd30 [ 298.759046][ T6248] blkdev_open+0x470/0x610 [ 298.764050][ T6248] do_dentry_open+0x785/0x14e0 [ 298.769340][ T6248] vfs_open+0x3b/0x340 [ 298.774061][ T6248] path_openat+0x2e08/0x3860 [ 298.779188][ T6248] do_file_open+0x23e/0x4a0 [ 298.784485][ T6248] do_sys_openat2+0x113/0x200 [ 298.789686][ T6248] __x64_sys_openat+0x138/0x170 [ 298.795065][ T6248] do_syscall_64+0x15f/0xf80 [ 298.800191][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.806618][ T6248] [ 298.806618][ T6248] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 298.813839][ T6248] __mutex_lock+0x1a3/0x1550 [ 298.818956][ T6248] nbd_queue_rq+0xc6/0x1100 [ 298.823985][ T6248] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 298.830072][ T6248] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 298.836944][ T6248] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 298.843453][ T6248] blk_mq_run_hw_queue+0x348/0x4f0 [ 298.849103][ T6248] blk_mq_dispatch_list+0xd16/0xe10 [ 298.854921][ T6248] blk_mq_flush_plug_list+0x48d/0x570 [ 298.860825][ T6248] __blk_flush_plug+0x3ed/0x4d0 [ 298.866299][ T6248] __submit_bio+0x28d/0x580 [ 298.871348][ T6248] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 298.877510][ T6248] block_read_full_folio+0x599/0x830 [ 298.883318][ T6248] filemap_read_folio+0x137/0x3b0 [ 298.888869][ T6248] do_read_cache_folio+0x358/0x590 [ 298.894601][ T6248] read_part_sector+0xb6/0x2b0 [ 298.899982][ T6248] adfspart_check_ICS+0xb1/0x960 [ 298.905622][ T6248] bdev_disk_changed+0x817/0x1770 [ 298.911178][ T6248] blkdev_get_whole+0x380/0x510 [ 298.916648][ T6248] bdev_open+0x31e/0xd30 [ 298.921417][ T6248] blkdev_open+0x470/0x610 [ 298.926353][ T6248] do_dentry_open+0x785/0x14e0 [ 298.931650][ T6248] vfs_open+0x3b/0x340 [ 298.936240][ T6248] path_openat+0x2e08/0x3860 [ 298.941361][ T6248] do_file_open+0x23e/0x4a0 [ 298.946395][ T6248] do_sys_openat2+0x113/0x200 [ 298.951612][ T6248] __x64_sys_openat+0x138/0x170 [ 298.957104][ T6248] do_syscall_64+0x15f/0xf80 [ 298.962327][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.968751][ T6248] [ 298.968751][ T6248] -> #3 (set->srcu){.+.+}-{0:0}: [ 298.975886][ T6248] __synchronize_srcu+0xca/0x300 [ 298.981480][ T6248] elevator_switch+0x1e8/0x7a0 [ 298.986891][ T6248] elevator_change+0x2cc/0x450 [ 298.992234][ T6248] elevator_set_default+0x36c/0x430 [ 298.998130][ T6248] blk_register_queue+0x3e9/0x4e0 [ 299.003732][ T6248] __add_disk+0x677/0xd50 [ 299.008616][ T6248] add_disk_fwnode+0xfb/0x480 [ 299.013819][ T6248] nbd_dev_add+0x72c/0xb50 [ 299.018851][ T6248] nbd_init+0x168/0x1f0 [ 299.023542][ T6248] do_one_initcall+0x250/0x870 [ 299.028866][ T6248] do_initcall_level+0x104/0x190 [ 299.034354][ T6248] do_initcalls+0x59/0xa0 [ 299.039225][ T6248] kernel_init_freeable+0x2a6/0x3e0 [ 299.045028][ T6248] kernel_init+0x1d/0x1d0 [ 299.049937][ T6248] ret_from_fork+0x514/0xb70 [ 299.055233][ T6248] ret_from_fork_asm+0x1a/0x30 [ 299.060531][ T6248] [ 299.060531][ T6248] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 299.068362][ T6248] __mutex_lock+0x1a3/0x1550 [ 299.073492][ T6248] elevator_change+0x1b3/0x450 [ 299.078809][ T6248] elevator_set_none+0xb5/0x140 [ 299.084285][ T6248] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 299.090615][ T6248] nbd_start_device+0x17f/0xb10 [ 299.096089][ T6248] nbd_genl_connect+0x165b/0x1cf0 [ 299.101639][ T6248] genl_family_rcv_msg_doit+0x22a/0x330 [ 299.107891][ T6248] genl_rcv_msg+0x61c/0x7a0 [ 299.112933][ T6248] netlink_rcv_skb+0x232/0x4b0 [ 299.118228][ T6248] genl_rcv+0x28/0x40 [ 299.122741][ T6248] netlink_unicast+0x75c/0x8e0 [ 299.128203][ T6248] netlink_sendmsg+0x813/0xb40 [ 299.133582][ T6248] ____sys_sendmsg+0x972/0x9f0 [ 299.139002][ T6248] ___sys_sendmsg+0x2a5/0x360 [ 299.144215][ T6248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.149684][ T6248] do_syscall_64+0x15f/0xf80 [ 299.155072][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.161579][ T6248] [ 299.161579][ T6248] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 299.170279][ T6248] blk_alloc_queue+0x546/0x680 [ 299.175578][ T6248] __blk_mq_alloc_disk+0x197/0x390 [ 299.181225][ T6248] nbd_dev_add+0x499/0xb50 [ 299.186165][ T6248] nbd_init+0x168/0x1f0 [ 299.190849][ T6248] do_one_initcall+0x250/0x870 [ 299.196146][ T6248] do_initcall_level+0x104/0x190 [ 299.201619][ T6248] do_initcalls+0x59/0xa0 [ 299.206475][ T6248] kernel_init_freeable+0x2a6/0x3e0 [ 299.212202][ T6248] kernel_init+0x1d/0x1d0 [ 299.217060][ T6248] ret_from_fork+0x514/0xb70 [ 299.222180][ T6248] ret_from_fork_asm+0x1a/0x30 [ 299.227561][ T6248] [ 299.227561][ T6248] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 299.234954][ T6248] __lock_acquire+0x15a5/0x2cf0 [ 299.240417][ T6248] lock_acquire+0x106/0x350 [ 299.245445][ T6248] fs_reclaim_acquire+0x71/0x100 [ 299.251001][ T6248] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 299.257336][ T6248] __alloc_skb+0x1d0/0x7d0 [ 299.262277][ T6248] alloc_uevent_skb+0x7d/0x230 [ 299.267573][ T6248] kobject_uevent_net_broadcast+0x2fa/0x560 [ 299.273999][ T6248] kobject_uevent_env+0x55c/0x9e0 [ 299.279551][ T6248] nbd_config_put+0x14c/0x580 [ 299.284843][ T6248] nbd_release+0xfe/0x140 [ 299.289706][ T6248] bdev_release+0x536/0x650 [ 299.294737][ T6248] blkdev_release+0x15/0x20 [ 299.300264][ T6248] __fput+0x44f/0xa60 [ 299.304869][ T6248] fput_close_sync+0x11f/0x240 [ 299.310168][ T6248] __x64_sys_close+0x7e/0x110 [ 299.315375][ T6248] do_syscall_64+0x15f/0xf80 [ 299.320500][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.326919][ T6248] [ 299.326919][ T6248] other info that might help us debug this: [ 299.326919][ T6248] [ 299.337325][ T6248] Chain exists of: [ 299.337325][ T6248] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 299.337325][ T6248] [ 299.350114][ T6248] Possible unsafe locking scenario: [ 299.350114][ T6248] [ 299.357655][ T6248] CPU0 CPU1 [ 299.363121][ T6248] ---- ---- [ 299.368595][ T6248] lock(uevent_sock_mutex); [ 299.373207][ T6248] lock(cpuhp_state-up); [ 299.380270][ T6248] lock(uevent_sock_mutex); [ 299.387563][ T6248] lock(fs_reclaim); [ 299.391639][ T6248] [ 299.391639][ T6248] *** DEADLOCK *** [ 299.391639][ T6248] [ 299.399910][ T6248] 3 locks held by udevd/6248: [ 299.404585][ T6248] #0: ffff88802775e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 299.414177][ T6248] #1: ffff888027792a60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 299.424960][ T6248] #2: ffffffff90172860 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 299.435940][ T6248] [ 299.435940][ T6248] stack backtrace: [ 299.441833][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 299.441852][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.441863][ T6248] Call Trace: [ 299.441872][ T6248] [ 299.441880][ T6248] dump_stack_lvl+0xe8/0x150 [ 299.441909][ T6248] print_circular_bug+0x2e1/0x300 [ 299.441931][ T6248] check_noncircular+0x12e/0x150 [ 299.441953][ T6248] __lock_acquire+0x15a5/0x2cf0 [ 299.441971][ T6248] ? lockdep_unlock+0x5d/0xd0 [ 299.441984][ T6248] ? __lock_acquire+0x146e/0x2cf0 [ 299.442005][ T6248] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 299.442026][ T6248] lock_acquire+0x106/0x350 [ 299.442041][ T6248] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 299.442062][ T6248] ? lock_acquire+0x106/0x350 [ 299.442080][ T6248] fs_reclaim_acquire+0x71/0x100 [ 299.442102][ T6248] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 299.442122][ T6248] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 299.442143][ T6248] ? __alloc_skb+0x1d0/0x7d0 [ 299.442160][ T6248] ? __local_bh_enable_ip+0xd0/0x130 [ 299.442176][ T6248] __alloc_skb+0x1d0/0x7d0 [ 299.442196][ T6248] alloc_uevent_skb+0x7d/0x230 [ 299.442220][ T6248] kobject_uevent_net_broadcast+0x2fa/0x560 [ 299.442245][ T6248] kobject_uevent_env+0x55c/0x9e0 [ 299.442270][ T6248] nbd_config_put+0x14c/0x580 [ 299.442289][ T6248] nbd_release+0xfe/0x140 [ 299.442305][ T6248] ? __pfx_nbd_release+0x10/0x10 [ 299.442320][ T6248] bdev_release+0x536/0x650 [ 299.442345][ T6248] ? __pfx_blkdev_release+0x10/0x10 [ 299.442359][ T6248] blkdev_release+0x15/0x20 [ 299.442373][ T6248] __fput+0x44f/0xa60 [ 299.442395][ T6248] fput_close_sync+0x11f/0x240 [ 299.442413][ T6248] ? __pfx_fput_close_sync+0x10/0x10 [ 299.442432][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.442449][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.442464][ T6248] __x64_sys_close+0x7e/0x110 [ 299.442483][ T6248] do_syscall_64+0x15f/0xf80 [ 299.442502][ T6248] ? clear_bhb_loop+0x40/0x90 [ 299.442519][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.442535][ T6248] RIP: 0033:0x7f0cd56a7407 [ 299.442549][ T6248] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 299.442563][ T6248] RSP: 002b:00007ffece3084e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 299.442579][ T6248] RAX: ffffffffffffffda RBX: 00007f0cd5d97880 RCX: 00007f0cd56a7407 [ 299.442591][ T6248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 299.442601][ T6248] RBP: 00007f0cd5d976e8 R08: 0000000000000000 R09: 0000000000000000 [ 299.442610][ T6248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 299.442620][ T6248] R13: 0000562ae5cb6190 R14: 0000000000000008 R15: 0000562ae5cbcba0 [ 299.442637][ T6248] [ 299.547435][T10617] __nla_validate_parse: 213 callbacks suppressed [ 299.547453][T10617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1220'. [ 299.637052][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1220'. [ 299.664253][T10611] bond10: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 299.761805][T10611] bond10 (unregistering): Released all slaves