last executing test programs: 8.468755547s ago: executing program 3 (id=2791): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x16, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r2}, 0x20) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}]}, &(0x7f0000000240)=0x10) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000280)={0x0, {{0xa, 0x4e24, 0x10001, @local, 0x1}}, {{0xa, 0x4e23, 0xa7, @local, 0x9}}}, 0x108) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048864}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r6}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509000000000000db6874fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x23, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x7, 0x2, 0xb, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1a}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6d}, @alu={0x7, 0x1, 0x6, 0x9, 0x6, 0x6, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7.341556074s ago: executing program 3 (id=2803): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000002a40)={&(0x7f00000029c0)=[{&(0x7f0000000140)="c702ff42be5a6c655bfc17a0f398787454f980677f6571b0a9b589dcdd98d856ef1fd9640218699f4c138409818a773cb8905b5201420df49421e03426a015a6f9e24606a6ed733472654abb719ce6cf41392dc6fa1723fa56bc8789d48de4b78fd7c9b3c4fd94e1dc4d038e48910de9a2d32c368550015d8f004558a1b40df5ffe5947d9a7fb0da513b305daaab9bdf85c17e40", 0x94}, {&(0x7f0000001480)="6178b9c605f11d9c1dd48e8980eb6d7dc207337e0c91bcc48d390ace02510eaca198b8c2fb5f2128d46804951a597359937f147db10cefcd2ce801a70246dcc7260729beefe37caf9626ce9f3ad663949670c488753263c9d6ee12192ee0da8c9ba8ad34c000aff7426ee2c80017f31e2da125758ac37de8d3642c49233b94a90aab4edc80f55814ab1422", 0x8b}, {&(0x7f0000001540)="30817abdd40fdb93434e330b0b9d81081ceb7832a148e5a1790444963174a6766373420918861a5f380004d60c291a224fa057f1ad7356fbb231a17dd863845b7596a14b799895edf38c357529306fcfe28f2b65cc7fafcf52ac554421ac0219b251e99ec59fc3792b2dd705cfbb93398f6089fa19d46bd8b5ceb0f9919f0fdde6bdc96459f114399e7c5e0652264ae158b3a97fe37f7a79ebd6fef20b2cb767cd534730038b6b299b216971ddad2791e3d7996d88eb375488fe4df849a3b8da3b3dacbd88880613", 0xc8}, {&(0x7f0000001640)="a0262afb6839f6660a27343fcdfde62682a58a8e05eefb26d7a5cf28f2c110ed4e5d2381f2a146b6761de11bd4bc7f155d1e3aca4dc27114162e2db06cd1a9f158a3d59233dac8484fa48a2cf7ce426aae3e210dc0f53b2125b06b1794801cf19987797999a2f168fa2f238549f0ccc807d64ee8758eb5fc53084e67ee7327869afd3fe2eacc264057d555752dc54a7b554e8e32873981db", 0x98}, {&(0x7f0000001700)="0039468f65e59f74ae4527a6e50b7ef9c6638ed127b94cd56281acc3d3ee45d44507be8510ea2757992701e11385ece2c6a11d560b35cf05eb48763a90f68271c80b86d479d11e42b207692ae248755c2c203790214e055b47a742bd29d59ee695e2ef68830e76898f3d669db666838d7923af4a1a262aa71568e5fcfd998834c5fb928a1f3150a8dc9db28f93df9aa02e491b9678f1e4777df44b35c6cbf4ceee0aa2e86716042081a714e8793ed41d112d1b67d0c0f7ddabf6c770380cd71abc90c0a4307dc76c01e84c90e3cf59716cc78cc38ad3", 0xd6}, {&(0x7f0000001800)="6cb8d0928e70bae70331c430f550fa897c1f99604b308943c0031e3ba8280208126b47e31466b0e8b97cf95587f2cf964f73b1b47c87cf77793d8b25975a45ea11b869b0fd929959fe6493a833e367f7b12103b581629cd0f8395f02e94dacb30ebda32c8c1e81d0ba2e53cb35653fd5cdd7a19f5c7531401bb8db199b7e205b645953c8a7e739d6574e0e96f00a9994", 0x90}, {&(0x7f00000018c0)="b842a909be4ab19f6214ad866775fa2f010f5798c718a00e516c4d75896d1b8f7be11903adb0d2907d2b5e0710a9f0f9c0976a05caca6b8407569f0b0960cce4a34fb62b227708f0e1b1babdfbbde4c1a601c7da313e72b408f7eaf246e4ec2d7b604017e7ba76e627d6075672efe47368899e82632dd87912e8f6e37932b36e46b0708c8fa48247214e301b474cee34af8e79e0f6146af576df7dba36e2dab496889f92a7b6fce6a793a9008f8b8b95d764e79f63f8962e24ac10d3df8c022164df2118e24aca2d9a7f82cb", 0xcc}, {&(0x7f00000019c0)="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", 0x1000}], 0x8, 0x5, 0x0, 0x1, 0x5d7, 0x9, 0x5, 0xc123}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="89a25031b0f94f0cd90348a0d21ee413fa55c26836ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9890c9dcac5cf843794592a5d408bd312d70e14da62181e3aaa9c243d775a318fc99b73e54d27ac3f01a78de2df421629d0c172f41ca731248a0717e47bf7a4295f9f76b94c660e7d40b2edfaa8fb394752ba13a", 0xa6}, {&(0x7f00000000c0)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf988204009c7c4e32c04727f8d89748c90122000000000000000000000800f51834517bed4d0bfc521236429a9e127fdb471c239215fcfc4dd80b3e53052e310b7048f9b8f4cb004d8328aaa6b41d21", 0x73}, {&(0x7f0000000300)="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", 0x1174}], 0x3, 0x2) 7.287242902s ago: executing program 3 (id=2804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtaction={0x48, 0x32, 0x1, 0x70bd24, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200308c0000280012800b0001006d61637365630000180002800c0004000400000100c2800005000d000100000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f0000b2a200000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x100, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffd0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c65}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 6.241793467s ago: executing program 3 (id=2815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.124112169s ago: executing program 3 (id=2817): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0xe6905000) (async, rerun: 64) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x7fffffffffffe, 0x13, r1, 0x0) (async, rerun: 64) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x801) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) (async) close(r3) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) (async, rerun: 32) nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff], 'dvmrp0\x00', 'batadv0\x00', {}, {}, 0x3a, 0xbb, 0x0, 0x20}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xea, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@ipv6header={{0x28}, {0x60, 0x9a, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x3, 0x21, '\x00', 'syz1\x00', {0xffffffffffff8001}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x3c, 0x8, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 5.630244941s ago: executing program 3 (id=2821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x4, 0x7c, 0x4, 0x5, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7, 0x80, 0x8, 0x6}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x200, 0x50bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xa, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 2.173809881s ago: executing program 2 (id=2842): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=@newsa={0xf8, 0x1a, 0x7, 0x70b52a, 0x1000, {{@in6=@mcast1, @in=@multicast2, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0x4, 0x3, 0x7f, 0x0, 0x60000}, {0x0, 0x200001, 0x7, 0xfffffffffffffffe}, {0x40000, 0x0, 0x6}, 0x470bd27, 0xfffffffc, 0x2, 0x5, 0x0, 0x30}, [@tfcpad={0x8, 0x16, 0x40}]}, 0xf8}}, 0x0) 2.134918449s ago: executing program 1 (id=2843): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_REFLINK(r5, 0x40186f04, &(0x7f0000000580)={&(0x7f0000000480)='GPL\x00', &(0x7f0000000540)='/dev/net/tun\x00', 0x7}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000300)=""/188, &(0x7f00000003c0)=0xbc) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c00000008001240000000050500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) ioctl$TUNSETLINK(r7, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c0002805e6a9b25000000001400018008000100e00000d530a40aa3a70108000200ac1e7de0663c61c0e64400000c001080080001400000"], 0x70}}, 0x0) 2.076472261s ago: executing program 2 (id=2845): r0 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x43, &(0x7f0000000000), 0xff7b) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000280)=0xb9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00012a8441106ea9449ec3000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="1eff16447fc84631be809a4b19e3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.755006408s ago: executing program 0 (id=2847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002022) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, 0x8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getmulticast={0x14, 0x3a, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004040) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002bc0), 0x2a0, 0x20004840) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@private0, 0x4e23, 0x0, 0x4e23, 0x1, 0x2, 0x0, 0x0, 0x33}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb400000000000000}, {0x202, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d3, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3500, 0x1, 0xdf43fa96afd90343, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xffe, &(0x7f0000000580)=""/4094, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.673454293s ago: executing program 2 (id=2848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, 0x0, 0x20000000}, 0x20) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xff, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffcf, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x8070bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xa, 0x1a}, {0xe, 0xffff}, {0x3, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket(0x0, 0x5, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = epoll_create1(0x80000) epoll_pwait(r9, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r9) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.520286628s ago: executing program 0 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x81, 0x8]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0xf8, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfc40}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0xe4, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:apt_var_log_t:s0\x00'}, @NFTA_SECMARK_CTX={0x33, 0x1, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2d, 0x1, 'system_u:object_r:devicekit_var_run_t:s0\x00'}]}}], {0x14}}, 0x16c}}, 0x0) 1.338836909s ago: executing program 0 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private1, @local, {[@routing={0x2b, 0x0, 0x0, 0x1}]}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x10000000, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x18000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_generic(r1, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x12b8, 0x1b, 0x100, 0x70bd26, 0x25dfdbff, {0x19}, [@generic="04f0bd216e8e27b3b066e6c8fc0ad9830c164b0825c833f70e6796c816af72e070afdaa4e898cc15e832bfce08534b5daa81e6b1c8dd9154ccd2f3e7957ceb4afbaab36fb8d3fa50a7027c0204c0710680c5b3fd95c121134c0e15d05b00b25d9670eda80d6d45b8eb491b51ea5e03d89db2d1532bf68b496a095046630a479e3aa79daf538b2673c5dfd811a1dcce1be7b8b48e2df527652d95013b2a5e2b", @typed={0xfb, 0x5a, 0x0, 0x0, @binary="13293dd5e082a8feb6c7b0d2c6b5d5aa350496867fb4912eac1b5105a4bc5c8fed3ad1f1010126d56059e0a1199d9542755e0083572b6a0d21f0c5d3a9c5c4c17ce4f03d79748d002a42428fb5388e01e0529a91e45fc87ebb8a58f4665aa24631e110b218851359454e5e4a3f91ef01087e12d56360936ebb5c0f16231c9d2202c3ced7a37131c6e1e19016795a58ef86220a5c257e26b15c32bf7f8d2c1da24137cfa46b48a8915dc6a7e3355436bcc59b7cc0311fdc79e067042ef962fcff62662a9e9a8394ab58e55a36587c9a2959c269852b1557c212bb1e3fe587e6562f3aa7b4ce8df23f54cfb42e1d5d980721c26801f57dcd"}, @nested={0x14, 0x20, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xc8}]}, @generic="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", @typed={0x8, 0x129, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x34, 0x7a, 0x0, 0x1, [@generic="9fb556649120cf644336ffb177b9c9bef43ef4f7ffc4023723581b1e5d5380e9", @nested={0x4, 0x52}, @typed={0x8, 0x13c, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xbe}]}, @nested={0x1c, 0x12a, 0x0, 0x1, [@generic="b5d18e7677fa5b499fee86e5cf596a5ca505bdc50cecb90d"]}, @generic="2444eb7a1bc2eadc982585c6892d052066a39ae12fec0e5f3674fca09db75ee0339f2ac807e6efbbf9b8960d2964f593f24a4e3e38f3114545c288e4809354c170f2d58cbbe78a6682e0ae067705347de2e7edd023624dca4882de03c9e7290acdb6ae2c7919bae4fd137caef55cd917b4501770bd636142320e511354c9955efba0dcdd777da1dba08fa8b69fe2e72a62", @typed={0xc, 0x36, 0x0, 0x0, @u64=0xfffffffffffffffd}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x1}, 0x8024) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x3d, 0x78, 0x2, 0xb339f301c854444, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x40, 0x20, 0xffffffd5, 0x6}}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xa, r4, 0x13, r5}, 0x10) 1.109729429s ago: executing program 1 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYRESOCT], 0x78}, 0x1, 0xba01, 0x0, 0x40041}, 0x4048) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='&(\\--\'^+(:\x00', 0xb0002, &(0x7f0000000080)={@_ha_fsid={[0x0, 0xe]}, {0x3, 0x8000, 0x314f061, 0x7}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, 0x1403, 0x200, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300), 0x8) 1.106628203s ago: executing program 0 (id=2852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r2, 0x301, 0x70bd2b, 0x25dfdbfe, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r6, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000200fff78500000086000000850000007d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2000a, 0x0, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000600)="b800000500000000c679f2945354", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@hl={{0x28}, {0x1, 0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9, 0x8, 0xfff7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 1.017585601s ago: executing program 4 (id=2853): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000480005132e9c3e00010000000a000000", @ANYRES32=0x0, @ANYBLOB="0300008008000200030000000800020000000000140001"], 0x48}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.000310888s ago: executing program 1 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffbfffe}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0xa, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x140e, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @generic={0x1, 0x5, 0xe, 0x1ff, 0x8000}]}, &(0x7f0000000340)='syzkaller\x00', 0x3407, 0x51, &(0x7f0000000380)=""/81, 0x40f00, 0x8, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r4, r5, r7], &(0x7f0000000600)=[{0x5, 0x4, 0x1, 0x7}, {0x4, 0x1, 0x3, 0x5}, {0x3, 0x5, 0x2}, {0x1, 0x3, 0xc, 0x3}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0xff}, 0x94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e21, @multicast1}, 0x141, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0xc, 0xffff}) 817.797343ms ago: executing program 4 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 792.475455ms ago: executing program 1 (id=2856): setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x80}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e1}, 0x20008014) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="9b0f2abd70b26b2a872920a8e40004000280"], 0x18}, 0x1, 0x0, 0x0, 0x2885}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@hl={{0x28}, {0x1, 0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9, 0x8, 0xfff7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 720.924603ms ago: executing program 0 (id=2857): syz_emit_ethernet(0x4e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRESHEX, @ANYRES32=0x41424344, @ANYBLOB="dc6b20018cbd2d16c5896ae0228d"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x108) 669.897878ms ago: executing program 4 (id=2858): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 639.741642ms ago: executing program 2 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010b0b793a4877000fbdb9f25000000bc", @ANYRES32=0x0, @ANYBLOB="151d0100000000001c0012800b00010067656e65766500000c00028008000200ac141425"], 0x3c}, 0x1, 0x0, 0x0, 0x2c001}, 0x8000) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x7, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x400, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf2502000000140008007465616d5f736c6176655f3100000000050012000f000000050013002200000005000d000100000006001d000100000008001800ac14142f06001d000200000005000600010000000c001600fdffffffffffffff06001c0000900000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc8fb0103330134ae3f7bc586e216ea1a157484f750440000000100039042abd7020080000000000000041b85d7e74d2550d7407e5d1634e53ce781a0f9e7c18b850ef7163271e78ef88ea628fc78605865f5ccca5c30ddcfb3532d3e6503d9bab85f2f581220d03baf2dd122e4bfbeaf9da4dadf0f340357fcb8be12d3bc0c04c02ae2a142197872639c5083b68228ba27ac1719d7676dbee3e2ee4f82e2991d5c4077a2af01f434350920082be37f56938e9df326d2efec846c23569e20eafce2f5e756b", @ANYRES32=0x0, @ANYBLOB="521a020003110000200012800b00010065727370616e000010000280040012000500160001000000"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x24000020) 567.019366ms ago: executing program 4 (id=2860): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) (async) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r8}) (async) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000580)={0x8, 0x24, '\x00', [@ra={0x5, 0x2, 0x200}, @generic={0x5, 0xde, "dce4fb0c21ea598dd4208358a9dba37f445b808562dd707561f33479619e37e053bee917003da64b8030f248a0fbd66c89fc4cadce711dad4cd4bf0f615fcfa5963d8385e5ac8cdbb7991fcd3961b9c819831c72fa160bef909aa71b197866a87af1d2839ef6f4d0e306670d1bfa048e3a6999bb713b7ba251b51a0afb883b743c6cf646ae11eac5bfe4e3db63489e8b149b8f6a9731e6e64ca88172ac19beeb56f12fd0154b6eb467b26154a16ba0b51b9832bd03a12279de6423f9cd1866bbb276b2ac4fea799b56d7d433bb7fcabdf7bee26334db63561f1dc16dbfec"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x32, 0xe, [0xb, 0xc, 0xe]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x0, [0x9, 0x1]}}]}, 0x128) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 516.511509ms ago: executing program 2 (id=2861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000e000000020000000800", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010001ffff9d004000000000000000000", @ANYRES32=0x0, @ANYBLOB="2085060044009d665954c9c0ed093eed0100400012800b200100697036746e6c00007afe028008000700008000400500060007000000001011004e21000014000200000000f9000000000000", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2002, @remote}}}, 0x108) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xfffffffe}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000e000000020000000800", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010001ffff9d004000000000000000000", @ANYRES32=0x0, @ANYBLOB="2085060044009d665954c9c0ed093eed0100400012800b200100697036746e6c00007afe028008000700008000400500060007000000001011004e21000014000200000000f9000000000000", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2002, @remote}}}, 0x108) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xfffffffe}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) (async) 325.707696ms ago: executing program 1 (id=2862): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/255}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0x2, 0x0, 0x1}, 0x48) listen(r4, 0x9) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3}) pwritev(r4, &(0x7f0000000700)=[{&(0x7f00000001c0)="df21ed4085d273d2cb6d0da4a87ca4d56b8cab0e397cd81f88e369f6fd6c2bb5a0c737005c96cec46acef62811d14256540cb7f1d927301083d7232d3c3a64b145b00ac03f4da6c35ff6e06f2ccecaa2aa20150179341e58eda7c3dadd26", 0x5e}, {&(0x7f0000000240)="fdca95860037fff953c2f6c2a5378019132b0d6e1bf9140eef96f5d8accf218eb88b7725fe22fb5b259b6fbc1122fb3b3bedb35b6b6876076136f4b2ae95ce86dd55e93dc2cadc943e0b40d479d4df7ed8751eff355b8f99a5fa18e9af3cafdf5fabf837e9c3ae23cf67", 0x6a}, {&(0x7f00000002c0)="544ed35faca6f270c5c278e384c78d079ab91851e9ddd0ffb8a465d527312a13794096a6ac46c7b488523d1599", 0x2d}, {&(0x7f0000000300)="7377353734648a4071fa90f2c503fb19cf0cf41c7cbfcdd2d9f63c8103811c75ad8b9deb710738800d75a9f2a4f8e027719b1c817b38dd445f4ecb4c77dbf00ebaacaf47a20e2d7b2f9242cc80546c53b386c6e9aad16c67b612231ff808561c70a453e786adc1d5e0ba92b8e2f84d6f9823b30f6e662acdc13ca41e39cc1575e93f3f0affdcf822ba9b6afa06f7a32ccab3d4f69732ca01767c9df1afe41b", 0x9f}, {&(0x7f00000003c0)="3d8256082fc40bc589393d4aad80fc4577ecd8c4612733c06ebee99a4465c79360fbd0", 0x23}, {&(0x7f0000000400)="60699432af64c2ff8bf68166fb5c5f709719e5a4324c858ec77048cf25077ffb577ec9d86791595763edbfaba0c7ab6dd5126e62e0ae7d8b4a5758f41e3661f085ff35e553650e", 0x47}, {&(0x7f0000000480)="0d90f05abc30e613f1792fc65945448f5e8a23f3e469557eab85f0969530d1a056d4dba8f5f5f1793466d5b6ebc28a98624efd2e36170c332c6d714242ea3e5c89747c62e72ba410c141c2155fc6b292a8b42a30a3df39828030c3a084faf2db31fef6c02a9af5689dfbaedf65782438ebeb0fcafcf9922b0a9b464a9d58cb3d4bf6fbd90328323d728d28433207dd0f63dfb7d77f70c5d5727e61dbb3e63243435284d03c4d1df96d4c141a708e30664241825fc599272d1430b5ab407be6e0a78c083e68cb5c6f592b27881091201aae0cdd205a826cf23f8114ee5da78a02ac35828072e8715fe000cd1a40ef25e9ca1495de8a", 0xf5}, {&(0x7f0000000580)="5179a3b527526ac830ce131d6bbd7f1fa52ffd3d154ac50c54b989274380df09e2593f3bf4ad9417ee0a311663aa2ccd612f4d7e9e2fe9eaf13fb1aca8ad9a564e5c98ffca6502213e0e95c5e2bf6a4949c64ecfe1b6627493bed907a2592534028645be2e2ed2a7af24", 0x6a}, {&(0x7f0000000600)="7dd5", 0x2}, {&(0x7f0000000640)="b1df1631868fc7a2052f4038109f5b42f38f06d61341b96623ec0e5c475e788176365858047b84ee05295533bb740af3e19497e58ea4f90eb0233e3683e8f46b86b7f8238b852bca0045a51d08b0b14f45618909b1e475b0a8ad2c86d5cb4b4dfdca2129ba25eaa76901602266c66a5f23cab4db44f511463ea722d0ff09e4ee652f7f", 0x83}], 0xa, 0x2, 0x5f3a802d) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r8, &(0x7f0000000180)="cc2eb78d81955bb92657a6a6a2f7e93d00554a2ac051950777259c83a5b5496e9314145bf3ca36ef37eebc716bbebce211f3e16327c6327cb2fe3ac7d3", 0x3d, 0x4000010, 0x0, 0x0) setsockopt$inet_opts(r7, 0x0, 0x6, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@dstopts={{0x18, 0x29, 0x37, {0x16}}}], 0x18}, 0x3400c8d4) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x3a) 225.780108ms ago: executing program 4 (id=2863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000020000000f0000000800000041"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x6}, {0x0, 0xa}, {0xffe0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept4$unix(0xffffffffffffffff, &(0x7f00000016c0), &(0x7f0000001740)=0x6e, 0x800) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000140)={r8, &(0x7f0000001640)='@]/{\x00\x8aV\xb3/\x9f\x96l[gSc\xe6\xa3S\xb5?\xc1I\x8c\xf5,\x03X8>mO\xdcZ\x984\xb2\x11\xeey\x1b\xe9/^\x91\x1aYg\x99l\xebl\x0e\xf2\xb7\xbb\xf8\x11\x8a&\xd9\x8f\x11\'\xe8t\xb7\xeaK', 0x50000, &(0x7f0000000040)={@align=0x6, {0x161, 0x3, 0x2, 0x9c}}, 0xe67, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x6}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x90) clock_gettime(0x0, &(0x7f0000005f80)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r11, r10, 0x0, 0x10000) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, 0x0, 0x0) connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 200.742627ms ago: executing program 0 (id=2864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8014000000000100000000000000aa0000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000a000004000000000000000005000000080000000500210002"], 0x100}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x521034a182060619}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24028080}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x80, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x80}}, 0x4000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x7, 0xc}, 0x20) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000004e000100000000000000124e9a1302"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}}, 0x0) 18.873795ms ago: executing program 4 (id=2865): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f00000014c0)={&(0x7f0000000180)={0x2c, 0x2, r2, 0xa}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)="4ee18aa6a7632ffb88a479146b4b47d2c4704dd088510a79a1d7a21514bd0b281309697ad2098184942a21fe11a557e257af277674a6009dbc248ba2ac57c2893c23204c139311721141e49a70d20565a84d60ba350220c1333d", 0x5a}, {&(0x7f0000000240)="6dfa3bc80c0538647f0f5ac658c56caa7e7e168290606735476cd4978c2c783a009be3785882b488fa247fa78878c9f0d2fa72e7d8b39a2c896ab8f6b33b8a4e4e5b9eb14a2c8c9f9deb1cc143e44d75c77c2fb69be841fd69606685b97bc28890ff37d37e3daf18fc299aef81b0891682b8bc3d166072b7817c4748b33dba5e4be6bcdefcca30dbf602fa", 0x8b}, {&(0x7f0000000300)="1fe2a06e4276bfb531d0a30db6ab4e64bf131a78491a69e9404bf2c023bd0da8f999ebae20f907b28f2fce9aad18e2", 0x2f}, {&(0x7f0000000340)="958e3c7a699bc2", 0x7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="af9a85e9a0cbb177bd87d88a0ec083633975e64074ef66670e36758bd306e8a625a4a520639868168282e59e62ec42799853a4fcd0cf15ce761b7eb2b491811f36b307a0ab1453a50e9ab622561871a05632aa3f69c80730b0e48569b70626c05ac0f6ab578210d18793f3313c", 0x6d}, {&(0x7f0000001400)="6da81a5e0bb6d9a02a2b2213737a16", 0xf}], 0x7}, 0x4000800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000015c0)={0x1, &(0x7f0000001500)="74668a931c", &(0x7f0000001540)=""/106}, 0x20) socketpair(0x21, 0xa, 0xfffff7df, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001640)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@newtclass={0x3c, 0x28, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0x6}, {0xffe0, 0x5}, {0xc, 0xa}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001780)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f00000017c0)={0x1d, r5, 0x0, {0x3, 0x0, 0x1}, 0x1}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x48, r6, 0xd08, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="9c01259fb38a"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x48}}, 0x24004800) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(r8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000019c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x2}, 0x20) r9 = socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x20002, 0x0) r10 = gettid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000001a40)=r10) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001a80)=0x1, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r11, 0x8070587c, &(0x7f0000001ac0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000001b40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000001b80)="ac0b6a148441adc53473d7641ef331b7810056688fd1fc17edaf93525eb12ec86878ebab1c7230e62673257e832681deb172f8289ad277c534368544dac250f79b5f60dafc1d46ed04f5ea61adea05e20b3bcfe0dc1cb85f5f3a02d3007972e47645a3a67eb4c10a1b3d33c3f3e934076bc86beff217fece9b1cdcb309f8355217991bac2ebf66df10320aabea5c270c1a3c29c99dae96b26836386f0ee0dfa7f0e2", 0xa2}, {&(0x7f0000001c40)="65c2f97cf2a2c30cc365fe2048cabd", 0xf}, {&(0x7f0000001c80)="ed16a0b3ee3a2c", 0x7}, {&(0x7f0000001cc0)="6e8c44464bf2243d213c31797197b79790a32e6916abe8071576e2f15145a1cc407297b24323b23aec672db4d8ae98728951d54f1a0a73fbffc4e3128b8b7edb707e094d68a8e42642e6758c951180695c0b2e2e52d5b8efe8f7126e1f337853c0754ac514e0ee036a1ecf7f999ad1b37b85a6885d60ba8ec24c5ee6f61f09de6866f2a9a75fd3a4343fb4a1c46835a25523aadc6acfa9f2e180ea6128aead2a0722857ee9538e52876d90ef5567d381786b435a084e98303a0f13cf731a580755d8614cc1d4fc35da8339786d7679bc86ce77e2", 0xd4}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="f0eb0a1e98cfad48f62a7693e11a76ba0b83766a6dac907c2e6f13d979a988caae4465c503d985afa2e60857f262af39be76e9353b4bc78202e9c948c92a494479c33ff6a8612e252d607edf90d3c7f2898301436ab84828", 0x58}, {&(0x7f0000002e40)="45630ff27274a8d3f3eec17cc6b4a47a625c76e3809b427adab3715e7fcc87e6900ca910f59e88578cb6f8cc9d26601394d0ae7d95674d7daeb93dca92bdf76903f7f2186e58717d85412eda334ca08f7215cf3f79899863ddd508b4ceb3cc3d30d10e4d915dde9e694fa8abcd5614d59188cc05de42f8183af71ac1122dd040806f4a622c95fc4de99d9f4e785a834ffe3bb90e1d3a292eb02df37f70097079f20575c72769f8d225a981de719effc1e9d308", 0xb3}, {&(0x7f0000002f00)="9e9df866fc33675862cc9e23ad0051ec2113654574c3f16e665ade3740740f6966afc373f940152447c0a31f4667afb452d23d8b3755dbc920b9ce3751c35e039610bdd61244ac6ef46baf1d161b61c30bd0677e0688b99f3147c53b8e768d06d9ac60af", 0x64}], 0x8, &(0x7f0000003000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000030c0), &(0x7f0000003100)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000003140)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000003280)={0x3, 0x8, 0x0, 0xffffff80}, &(0x7f00000032c0)=0x10) 10.275177ms ago: executing program 1 (id=2866): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xfffffffd, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 0s ago: executing program 2 (id=2867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x14000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x1, 0xffffab57, 0x444, {{0x9, 0x4, 0x2, 0x35, 0x24, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x41}, @remote, @loopback]}]}}}}}) r7 = socket(0x11, 0x3, 0x7) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f00000005c0)={0x2000a210}) epoll_pwait(r8, &(0x7f0000000340)=[{}, {}], 0x2, 0x5, &(0x7f0000000380)={[0x6]}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, r6, 0xffc3}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): 2 bytes leftover after parsing attributes in process `syz.4.1702'. [ 285.335835][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 285.341809][T13025] macsec1: entered promiscuous mode [ 286.457590][T13077] macsec1: entered promiscuous mode [ 286.822127][T13090] sctp: [Deprecated]: syz.0.1719 (pid 13090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.822127][T13090] Use struct sctp_sack_info instead [ 286.969003][T13102] netlink: 'syz.2.1722': attribute type 13 has an invalid length. [ 287.730160][T13102] tipc: Resetting bearer [ 287.866206][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'. [ 287.896622][T13114] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.956206][T13114] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 288.050959][T13126] syzkaller0: entered promiscuous mode [ 288.051001][T13126] syzkaller0: entered allmulticast mode [ 289.706711][T13085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.973594][T13147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1736'. [ 290.359982][T13168] macsec1: entered promiscuous mode [ 290.811017][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 290.885479][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 290.885530][T13188] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1745'. [ 290.914200][T13188] vlan2: entered allmulticast mode [ 291.262957][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 291.269455][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 291.368994][T13220] macsec1: entered promiscuous mode [ 291.743661][T13236] geneve3: entered promiscuous mode [ 291.743710][T13236] geneve3: entered allmulticast mode [ 292.083633][T13242] syzkaller0: entered promiscuous mode [ 292.083659][T13242] syzkaller0: entered allmulticast mode [ 292.136769][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 292.330247][T13251] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 292.870867][T10533] block nbd10: Possible stuck request ffff888026ebe000: control (read@0,4096B). Runtime 120 seconds [ 293.509172][T10533] block nbd1: Possible stuck request ffff888026a81c00: control (read@0,4096B). Runtime 180 seconds [ 294.162290][T13200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.433664][T13260] tipc: Enabled bearer , priority 0 [ 294.445636][T13260] tipc: Resetting bearer [ 294.454822][T13259] tipc: Resetting bearer [ 294.508232][T13259] tipc: Disabling bearer [ 294.607882][T13268] syzkaller0: entered promiscuous mode [ 294.607926][T13268] syzkaller0: entered allmulticast mode [ 294.634312][T13267] tipc: Enabled bearer , priority 0 [ 294.876388][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 294.909473][T13286] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1770'. [ 295.073888][T13296] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 295.075179][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 295.097508][T13296] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.120463][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 295.123624][T13284] nbd47: detected capacity change from 0 to 53687091200 [ 295.184747][T13276] tipc: Resetting bearer [ 295.231738][T13276] tipc: Disabling bearer [ 295.297075][ T52] block nbd47: Receive control failed (result -32) [ 295.428890][T10460] block nbd2: Possible stuck request ffff888026b2e000: control (read@0,4096B). Runtime 180 seconds [ 295.446796][T10533] block nbd3: Possible stuck request ffff888026bce000: control (read@0,4096B). Runtime 180 seconds [ 295.628442][T13310] netlink: 'syz.1.1775': attribute type 29 has an invalid length. [ 295.628499][T13310] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 296.023754][T13331] __nla_validate_parse: 1 callbacks suppressed [ 296.023809][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 296.023823][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'. [ 296.024026][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 296.024040][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'. [ 296.031625][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'. [ 296.400914][T13340] tipc: Resetting bearer [ 296.492651][T13340] tipc: Disabling bearer [ 296.527131][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 296.690138][T13358] smc: net device lo applied user defined pnetid SYZ2 [ 296.701928][T13358] smc: net device lo erased user defined pnetid SYZ2 [ 297.001232][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 297.156232][T13385] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 297.211735][T13387] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1795'. [ 297.337200][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 297.929987][T13412] netlink: zone id is out of range [ 297.930066][T13412] netlink: zone id is out of range [ 297.930173][T13412] netlink: zone id is out of range [ 297.930210][T13412] netlink: zone id is out of range [ 297.930218][T13412] netlink: zone id is out of range [ 297.930225][T13412] netlink: zone id is out of range [ 297.930232][T13412] netlink: zone id is out of range [ 297.930239][T13412] netlink: zone id is out of range [ 297.930244][T13412] netlink: zone id is out of range [ 297.930251][T13412] netlink: zone id is out of range [ 298.284472][T13432] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.343763][T13432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1808'. [ 298.366422][T13432] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 298.672795][T13443] bond0: left promiscuous mode [ 298.672833][T13443] batadv_slave_0: left promiscuous mode [ 298.697565][T13443] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 298.698251][T13446] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 298.716594][T13450] geneve0: Caught tx_queue_len zero misconfig [ 298.729192][T13455] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 298.772153][T13455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.913291][T13455] bond7: (slave geneve4): making interface the new active one [ 298.927268][T13455] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 298.960010][T11744] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.960071][T11744] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.960122][T11744] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.960155][T11744] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.004532][T13471] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 299.344872][T13489] macsec1: entered promiscuous mode [ 299.584826][T13476] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 299.604803][T13476] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 300.172006][T13508] tipc: Enabling of bearer rejected, failed to enable media [ 300.174144][T13501] smbdirect: ib_dev[syz2] removed [ 300.355621][T13519] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000 [ 300.403907][T13518] syzkaller1: entered promiscuous mode [ 300.403945][T13518] syzkaller1: entered allmulticast mode [ 300.446655][T13518] lo speed is unknown, defaulting to 1000 [ 300.456807][T13518] lo speed is unknown, defaulting to 1000 [ 300.558368][ T2034] block nbd11: Possible stuck request ffff888026f1e000: control (read@0,4096B). Runtime 120 seconds [ 300.558491][T10460] block nbd4: Possible stuck request ffff888026bf0000: control (read@0,4096B). Runtime 180 seconds [ 300.717902][T13533] macsec1: entered promiscuous mode [ 301.332943][T13547] __nla_validate_parse: 13 callbacks suppressed [ 301.332998][T13547] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1840'. [ 301.554822][T13558] netlink: 'syz.2.1842': attribute type 21 has an invalid length. [ 301.596678][T13559] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.1839'. [ 301.641338][T13557] veth1_to_bond: entered promiscuous mode [ 301.641388][T13557] veth1_to_bond: entered allmulticast mode [ 301.648142][T13558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 301.648179][T13558] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 301.787074][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'. [ 301.833083][T10533] block nbd5: Possible stuck request ffff888026cae000: control (read@0,4096B). Runtime 180 seconds [ 302.205885][T13569] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 302.491492][ T26] block nbd12: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 120 seconds [ 302.503301][T10533] block nbd6: Possible stuck request ffff888026d07000: control (read@0,4096B). Runtime 180 seconds [ 302.559344][T13587] lo speed is unknown, defaulting to 1000 [ 302.579412][T13587] lo speed is unknown, defaulting to 1000 [ 302.581362][T13589] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 302.706425][ T5740] lo speed is unknown, defaulting to 1000 [ 302.706458][ T5740] syz0: Port: 1 Link DOWN [ 302.841857][T13599] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1852'. [ 302.966647][T13609] syzkaller0: entered promiscuous mode [ 302.966676][T13609] syzkaller0: entered allmulticast mode [ 303.756753][T10533] block nbd7: Possible stuck request ffff888026d37000: control (read@0,4096B). Runtime 180 seconds [ 305.036891][T10533] block nbd8: Possible stuck request ffff888026da0000: control (read@0,4096B). Runtime 180 seconds [ 306.052093][T13647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1865'. [ 306.187315][T13649] netlink: 'syz.0.1866': attribute type 4 has an invalid length. [ 306.297006][T13653] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1870'. [ 306.297064][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 306.371969][T13660] netlink: 'syz.0.1871': attribute type 5 has an invalid length. [ 306.386177][T13660] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1871'. [ 306.468850][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 306.774608][T13675] syzkaller0: entered promiscuous mode [ 306.781279][T13675] syzkaller0: entered allmulticast mode [ 306.893211][T13679] nbd: must specify a device to reconfigure [ 306.987571][T13683] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1877'. [ 306.998880][T13683] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1877'. [ 307.008201][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 307.334489][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 307.345805][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 307.355166][T13700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.441199][T13700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.647410][T13715] bond8 (unregistering): Released all slaves [ 307.706851][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 307.791552][T13729] macsec1: entered promiscuous mode [ 310.795030][T13748] macsec1: entered promiscuous mode [ 311.163635][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 311.282030][T13773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.322530][T13775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.337853][T13775] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 311.352401][T13775] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 311.388878][T13776] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 311.389591][T13776] bond8: (slave wlan1): Opening slave failed [ 311.445658][T13780] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 311.452298][T13780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 311.895592][T13789] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 311.905933][T13791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 311.946003][T13790] siw: device registration error -23 [ 312.010331][T13790] syzkaller0: entered promiscuous mode [ 312.010370][T13790] syzkaller0: entered allmulticast mode [ 312.060366][T13794] net_ratelimit: 61 callbacks suppressed [ 312.063119][T13794] netlink: zone id is out of range [ 312.063134][T13794] netlink: zone id is out of range [ 312.063141][T13794] netlink: zone id is out of range [ 312.063148][T13794] netlink: zone id is out of range [ 312.063154][T13794] netlink: zone id is out of range [ 312.063161][T13794] netlink: zone id is out of range [ 312.067514][T13794] netlink: zone id is out of range [ 312.067527][T13794] netlink: zone id is out of range [ 312.067533][T13794] netlink: zone id is out of range [ 312.067541][T13794] netlink: zone id is out of range [ 312.104062][T13790] erspan0: left promiscuous mode [ 312.220610][T13801] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 312.220646][T13801] netlink: 'syz.4.1903': attribute type 268 has an invalid length. [ 312.220674][T13801] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1903'. [ 312.227403][T13802] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 312.227423][T13802] netlink: 'syz.4.1903': attribute type 268 has an invalid length. [ 312.227436][T13802] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1903'. [ 312.351451][ T5726] lo speed is unknown, defaulting to 1000 [ 312.588391][T13807] macsec1: entered promiscuous mode [ 312.793743][T13811] netlink: 'syz.1.1906': attribute type 32 has an invalid length. [ 312.936069][T13814] tipc: Resetting bearer [ 313.037313][T13820] netlink: 'syz.3.1909': attribute type 8 has an invalid length. [ 313.037362][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 313.048180][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.286835][T13834] tipc: Enabled bearer , priority 2 [ 313.696751][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 313.800723][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 313.996448][T10533] block nbd9: Possible stuck request ffff888026e15080: control (read@0,4096B). Runtime 180 seconds [ 314.291451][T13861] macsec1: entered promiscuous mode [ 314.320375][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 314.347596][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1920'. [ 314.350708][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 314.363081][T13864] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.1920'. [ 314.363107][T13864] netlink: 'syz.4.1920': attribute type 2 has an invalid length. [ 314.373470][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.373615][T13866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.669319][T13883] lo speed is unknown, defaulting to 1000 [ 314.676985][T13883] lo speed is unknown, defaulting to 1000 [ 315.169534][T13899] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 315.516490][T13914] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 315.689795][T13914] bond9: (slave bridge10): Enslaving as a backup interface with an up link [ 315.744755][T13921] bond9: (slave bridge11): Enslaving as a backup interface with a down link [ 315.784760][T13921] bond9: (slave bridge12): Enslaving as a backup interface with a down link [ 315.981401][T13923] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 316.681074][T13956] __nla_validate_parse: 12 callbacks suppressed [ 316.681132][T13956] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1948'. [ 316.681170][T13956] netlink: 'syz.4.1948': attribute type 9 has an invalid length. [ 316.681181][T13956] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 316.776966][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 316.914243][T13965] macsec1: entered promiscuous mode [ 317.124227][T13974] ip6erspan0: entered allmulticast mode [ 317.156638][T13974] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1954'. [ 317.197557][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 317.333698][T13984] netlink: 'syz.2.1957': attribute type 2 has an invalid length. [ 317.333753][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 317.402885][T13983] bond8: entered allmulticast mode [ 317.419609][T13982] wireguard0: entered promiscuous mode [ 317.425254][T13982] wireguard0: entered allmulticast mode [ 317.462726][T13994] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1958'. [ 317.472714][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 317.472750][T13986] net_ratelimit: 1706 callbacks suppressed [ 317.472760][T13986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.810451][T14014] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 317.810496][T14014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1966'. [ 318.752027][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 318.965911][T14061] lo speed is unknown, defaulting to 1000 [ 318.970051][T14061] lo speed is unknown, defaulting to 1000 [ 319.075106][T14072] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 319.308629][T14072] 8021q: adding VLAN 0 to HW filter on device bond13 [ 319.367300][T14072] sctp: [Deprecated]: syz.4.1976 (pid 14072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.367300][T14072] Use struct sctp_sack_info instead [ 319.477165][T14080] veth3: entered allmulticast mode [ 319.592631][T14080] bond13: (slave veth3): Enslaving as an active interface with an up link [ 320.191025][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1986'. [ 320.246465][T14122] tipc: Resetting bearer [ 320.373041][T14122] tipc: Resetting bearer [ 320.407137][T14122] tipc: Disabling bearer [ 320.424597][T14111] syzkaller0: entered promiscuous mode [ 320.424639][T14111] syzkaller0: entered allmulticast mode [ 321.106975][T14160] batman_adv: batadv0: Adding interface: ip6gretap2 [ 321.107023][T14160] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.107066][T14160] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 321.846743][T14178] tipc: Enabled bearer , priority 0 [ 322.021400][T14182] x_tables: duplicate underflow at hook 1 [ 322.336002][T14196] __nla_validate_parse: 3 callbacks suppressed [ 322.336059][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 322.336079][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 322.336141][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 322.415199][T14202] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 322.415240][T14202] netlink: 64387 bytes leftover after parsing attributes in process `syz.4.2005'. [ 322.442663][T14198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2004'. [ 322.453313][T14198] sctp: [Deprecated]: syz.1.2004 (pid 14198) Use of int in max_burst socket option deprecated. [ 322.453313][T14198] Use struct sctp_assoc_value instead [ 322.477050][T14202] syzkaller1: entered promiscuous mode [ 322.477087][T14202] syzkaller1: entered allmulticast mode [ 322.739942][T14209] macsec1: entered promiscuous mode [ 322.793320][T14218] tipc: Enabled bearer , priority 0 [ 322.941678][T14222] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 322.952225][T10533] block nbd10: Possible stuck request ffff888026ebe000: control (read@0,4096B). Runtime 150 seconds [ 323.018432][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2010'. [ 323.088327][T14222] bond10: entered promiscuous mode [ 323.095672][T14222] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.302608][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 323.382396][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'. [ 323.382439][T14245] batman_adv: batadv0: Removing interface: ip6gretap2 [ 323.590702][T10533] block nbd1: Possible stuck request ffff888026a81c00: control (read@0,4096B). Runtime 210 seconds [ 323.746806][T14210] tipc: Disabling bearer [ 323.972145][T14259] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 324.159877][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 324.344947][T14278] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 324.402508][T14279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.420414][T14279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.431332][T14279] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 324.461492][T14279] bond0 (unregistering): Released all slaves [ 324.494832][T14291] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2023'. [ 324.630808][T14287] syzkaller1: entered promiscuous mode [ 324.630851][T14287] syzkaller1: entered allmulticast mode [ 324.733082][T14304] FAULT_INJECTION: forcing a failure. [ 324.733082][T14304] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 324.753020][T14287] sctp: [Deprecated]: syz.0.2021 (pid 14287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.753020][T14287] Use struct sctp_sack_info instead [ 324.777887][T14304] CPU: 0 UID: 0 PID: 14304 Comm: syz.1.2027 Not tainted syzkaller #0 PREEMPT(full) [ 324.777915][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.777926][T14304] Call Trace: [ 324.777935][T14304] [ 324.777943][T14304] dump_stack_lvl+0xe8/0x150 [ 324.777976][T14304] should_fail_ex+0x410/0x560 [ 324.778008][T14304] prepare_alloc_pages+0x223/0x600 [ 324.778034][T14304] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 324.778059][T14304] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.778082][T14304] ? __pfx_policy_nodemask+0x10/0x10 [ 324.778106][T14304] ? __lock_acquire+0x6df/0x2e50 [ 324.778132][T14304] alloc_pages_mpol+0x21e/0x390 [ 324.778160][T14304] alloc_pages_noprof+0xb1/0x2b0 [ 324.778183][T14304] pte_alloc_one+0x22/0x370 [ 324.778206][T14304] __pte_alloc+0x25/0x1a0 [ 324.778238][T14304] do_pte_missing+0x2db7/0x34b0 [ 324.778270][T14304] ? do_raw_spin_unlock+0xf5/0x200 [ 324.778299][T14304] ? __pmd_alloc+0x40a/0x5c0 [ 324.778326][T14304] handle_mm_fault+0x1a53/0x3750 [ 324.778364][T14304] ? handle_mm_fault+0xf1/0x3750 [ 324.778400][T14304] ? __pfx_handle_mm_fault+0x10/0x10 [ 324.778439][T14304] ? __lock_acquire+0x6df/0x2e50 [ 324.778462][T14304] ? lock_mm_and_find_vma+0xa7/0x340 [ 324.778491][T14304] do_user_addr_fault+0x746/0x1340 [ 324.778527][T14304] exc_page_fault+0x6a/0xc0 [ 324.778555][T14304] asm_exc_page_fault+0x26/0x30 [ 324.778573][T14304] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 324.778595][T14304] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e 0f 1f [ 324.778611][T14304] RSP: 0018:ffffc9000d90fa18 EFLAGS: 00050202 [ 324.778629][T14304] RAX: ffffffff84db8900 RBX: ffff88803dbf8670 RCX: 0000000000000004 [ 324.778647][T14304] RDX: 0000000000000000 RSI: ffff88803dbf8670 RDI: 0000000000000000 [ 324.778659][T14304] RBP: ffffc9000d90fb90 R08: ffff88803dbf8673 R09: 1ffff11007b7f0ce [ 324.778672][T14304] R10: dffffc0000000000 R11: ffffed1007b7f0cf R12: 1ffff92001b21f86 [ 324.778714][T14304] R13: 0000000000000000 R14: ffffc9000d90fc40 R15: 0000000000000004 [ 324.778732][T14304] ? _copy_to_iter+0x160/0x1810 [ 324.778763][T14304] _copy_to_iter+0x255/0x1810 [ 324.778787][T14304] ? __up_read+0x29c/0x930 [ 324.778822][T14304] ? __pfx__copy_to_iter+0x10/0x10 [ 324.778866][T14304] raw_getsockopt+0x2f7/0x3e0 [ 324.778889][T14304] ? irqentry_exit+0x218/0x910 [ 324.778918][T14304] ? trace_irq_disable+0x3b/0x140 [ 324.778942][T14304] ? __pfx_raw_getsockopt+0x10/0x10 [ 324.778977][T14304] ? rep_movs_alternative+0xf/0xa0 [ 324.779000][T14304] ? sock_common_getsockopt+0x2d/0xb0 [ 324.779024][T14304] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 324.779058][T14304] do_sock_getsockopt+0x51d/0x7e0 [ 324.779084][T14304] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 324.779122][T14304] ? __fget_files+0x3a2/0x420 [ 324.779145][T14304] ? __fget_files+0x2a/0x420 [ 324.779176][T14304] __x64_sys_getsockopt+0x1a4/0x240 [ 324.779262][T14304] do_syscall_64+0x166/0x520 [ 324.779332][T14304] ? trace_irq_disable+0x3b/0x140 [ 324.779351][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.779370][T14304] ? clear_bhb_loop+0x70/0xc0 [ 324.779394][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.779413][T14304] RIP: 0033:0x7fb6b8b9e159 [ 324.779430][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.779445][T14304] RSP: 002b:00007fb6b9af9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 324.779465][T14304] RAX: ffffffffffffffda RBX: 00007fb6b8e25fa0 RCX: 00007fb6b8b9e159 [ 324.779479][T14304] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000004 [ 324.779490][T14304] RBP: 00007fb6b9af9090 R08: 0000200000000040 R09: 0000000000000000 [ 324.779503][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.779514][T14304] R13: 00007fb6b8e26038 R14: 00007fb6b8e25fa0 R15: 00007ffdb920c628 [ 324.779554][T14304] [ 324.790814][T14311] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 325.304291][T14316] tipc: Resetting bearer [ 325.325995][T14316] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 325.342215][ T5725] lo speed is unknown, defaulting to 1000 [ 325.342245][ T5725] syz0: Port: 1 Link ACTIVE [ 325.360364][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.461311][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.470094][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.497601][T14319] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 325.504325][T14319] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 325.504367][T14319] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 325.538498][T10533] block nbd3: Possible stuck request ffff888026bce000: control (read@0,4096B). Runtime 210 seconds [ 325.564865][T10460] block nbd2: Possible stuck request ffff888026b2e000: control (read@0,4096B). Runtime 210 seconds [ 325.567515][T14319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 325.716059][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.723474][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.737614][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.751500][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.760389][T14319] wg2 speed is unknown, defaulting to 1000 [ 325.934161][T14349] FAULT_INJECTION: forcing a failure. [ 325.934161][T14349] name failslab, interval 1, probability 0, space 0, times 0 [ 325.934215][T14349] CPU: 0 UID: 0 PID: 14349 Comm: syz.0.2038 Not tainted syzkaller #0 PREEMPT(full) [ 325.934236][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.934245][T14349] Call Trace: [ 325.934251][T14349] [ 325.934257][T14349] dump_stack_lvl+0xe8/0x150 [ 325.934282][T14349] should_fail_ex+0x410/0x560 [ 325.934311][T14349] should_failslab+0xa8/0x100 [ 325.934332][T14349] ? ptlock_alloc+0x20/0x70 [ 325.934358][T14349] kmem_cache_alloc_noprof+0xa1/0x600 [ 325.934386][T14349] ? ptlock_alloc+0x20/0x70 [ 325.934414][T14349] ptlock_alloc+0x20/0x70 [ 325.934433][T14349] pte_alloc_one+0x7a/0x370 [ 325.934453][T14349] __pte_alloc+0x25/0x1a0 [ 325.934482][T14349] do_pte_missing+0x2db7/0x34b0 [ 325.934507][T14349] ? do_raw_spin_unlock+0xf5/0x200 [ 325.934535][T14349] ? __pmd_alloc+0x40a/0x5c0 [ 325.934560][T14349] handle_mm_fault+0x1a53/0x3750 [ 325.934594][T14349] ? handle_mm_fault+0xf1/0x3750 [ 325.934627][T14349] ? __pfx_handle_mm_fault+0x10/0x10 [ 325.934662][T14349] ? __lock_acquire+0x6df/0x2e50 [ 325.934684][T14349] ? lock_mm_and_find_vma+0xa7/0x340 [ 325.934712][T14349] do_user_addr_fault+0x746/0x1340 [ 325.934746][T14349] exc_page_fault+0x6a/0xc0 [ 325.934772][T14349] asm_exc_page_fault+0x26/0x30 [ 325.934789][T14349] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 325.934810][T14349] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e 0f 1f [ 325.934827][T14349] RSP: 0018:ffffc9000d91fa18 EFLAGS: 00050202 [ 325.934843][T14349] RAX: ffffffff84db8900 RBX: ffff8880362449f0 RCX: 0000000000000004 [ 325.934856][T14349] RDX: 0000000000000000 RSI: ffff8880362449f0 RDI: 0000000000000000 [ 325.934867][T14349] RBP: ffffc9000d91fb90 R08: ffff8880362449f3 R09: 1ffff11006c4893e [ 325.934880][T14349] R10: dffffc0000000000 R11: ffffed1006c4893f R12: 1ffff92001b23f86 [ 325.934893][T14349] R13: 0000000000000000 R14: ffffc9000d91fc40 R15: 0000000000000004 [ 325.934912][T14349] ? _copy_to_iter+0x160/0x1810 [ 325.934944][T14349] _copy_to_iter+0x255/0x1810 [ 325.934969][T14349] ? __up_read+0x29c/0x930 [ 325.935010][T14349] ? __pfx__copy_to_iter+0x10/0x10 [ 325.935052][T14349] raw_getsockopt+0x2f7/0x3e0 [ 325.935073][T14349] ? irqentry_exit+0x218/0x910 [ 325.935095][T14349] ? trace_irq_disable+0x3b/0x140 [ 325.935118][T14349] ? __pfx_raw_getsockopt+0x10/0x10 [ 325.935151][T14349] ? rep_movs_alternative+0xf/0xa0 [ 325.935170][T14349] ? sock_common_getsockopt+0x2d/0xb0 [ 325.935195][T14349] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 325.935220][T14349] do_sock_getsockopt+0x51d/0x7e0 [ 325.935245][T14349] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 325.935279][T14349] ? __fget_files+0x3a2/0x420 [ 325.935301][T14349] ? __fget_files+0x2a/0x420 [ 325.935331][T14349] __x64_sys_getsockopt+0x1a4/0x240 [ 325.935359][T14349] do_syscall_64+0x166/0x520 [ 325.935382][T14349] ? trace_irq_disable+0x3b/0x140 [ 325.935399][T14349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.935416][T14349] ? clear_bhb_loop+0x70/0xc0 [ 325.935438][T14349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.935455][T14349] RIP: 0033:0x7f801e59e159 [ 325.935471][T14349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.935485][T14349] RSP: 002b:00007f801f3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 325.935502][T14349] RAX: ffffffffffffffda RBX: 00007f801e825fa0 RCX: 00007f801e59e159 [ 325.935515][T14349] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000004 [ 325.935526][T14349] RBP: 00007f801f3c1090 R08: 0000200000000040 R09: 0000000000000000 [ 325.935538][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.935548][T14349] R13: 00007f801e826038 R14: 00007f801e825fa0 R15: 00007ffe28d90348 [ 325.935578][T14349] [ 326.244172][T14352] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 326.244210][T14352] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 326.244245][T14352] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 326.258511][T14356] netlink: 'syz.3.2040': attribute type 4 has an invalid length. [ 326.330828][T14352] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.653208][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.910387][T13856] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.910451][T13856] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.910506][T13856] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.928232][T13856] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.969455][T14396] FAULT_INJECTION: forcing a failure. [ 327.969455][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 327.969492][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.0.2049 Not tainted syzkaller #0 PREEMPT(full) [ 327.969512][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.969521][T14396] Call Trace: [ 327.969528][T14396] [ 327.969535][T14396] dump_stack_lvl+0xe8/0x150 [ 327.969560][T14396] should_fail_ex+0x410/0x560 [ 327.969585][T14396] should_failslab+0xa8/0x100 [ 327.969604][T14396] ? __anon_vma_prepare+0xc3/0x4d0 [ 327.969629][T14396] kmem_cache_alloc_noprof+0xa1/0x600 [ 327.969657][T14396] ? __anon_vma_prepare+0xc3/0x4d0 [ 327.969687][T14396] __anon_vma_prepare+0xc3/0x4d0 [ 327.969708][T14396] ? __pte_alloc+0x15e/0x1a0 [ 327.969738][T14396] do_pte_missing+0x2f18/0x34b0 [ 327.969781][T14396] handle_mm_fault+0x1a53/0x3750 [ 327.969814][T14396] ? handle_mm_fault+0xf1/0x3750 [ 327.969857][T14396] ? __pfx_handle_mm_fault+0x10/0x10 [ 327.969901][T14396] ? __lock_acquire+0x6df/0x2e50 [ 327.969924][T14396] ? lock_mm_and_find_vma+0xa7/0x340 [ 327.969952][T14396] do_user_addr_fault+0x746/0x1340 [ 327.969986][T14396] exc_page_fault+0x6a/0xc0 [ 327.970012][T14396] asm_exc_page_fault+0x26/0x30 [ 327.970030][T14396] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 327.970051][T14396] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e 0f 1f [ 327.970066][T14396] RSP: 0018:ffffc9000d91fa18 EFLAGS: 00050202 [ 327.970082][T14396] RAX: ffffffff84db8900 RBX: ffff8880362458f0 RCX: 0000000000000004 [ 327.970095][T14396] RDX: 0000000000000000 RSI: ffff8880362458f0 RDI: 0000000000000000 [ 327.970106][T14396] RBP: ffffc9000d91fb90 R08: ffff8880362458f3 R09: 1ffff11006c48b1e [ 327.970120][T14396] R10: dffffc0000000000 R11: ffffed1006c48b1f R12: 1ffff92001b23f86 [ 327.970133][T14396] R13: 0000000000000000 R14: ffffc9000d91fc40 R15: 0000000000000004 [ 327.970151][T14396] ? _copy_to_iter+0x160/0x1810 [ 327.970183][T14396] _copy_to_iter+0x255/0x1810 [ 327.970209][T14396] ? __up_read+0x29c/0x930 [ 327.970242][T14396] ? __pfx__copy_to_iter+0x10/0x10 [ 327.970282][T14396] raw_getsockopt+0x2f7/0x3e0 [ 327.970303][T14396] ? irqentry_exit+0x218/0x910 [ 327.970325][T14396] ? trace_irq_disable+0x3b/0x140 [ 327.970348][T14396] ? __pfx_raw_getsockopt+0x10/0x10 [ 327.970380][T14396] ? rep_movs_alternative+0xf/0xa0 [ 327.970398][T14396] ? sock_common_getsockopt+0x2d/0xb0 [ 327.970423][T14396] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 327.970448][T14396] do_sock_getsockopt+0x51d/0x7e0 [ 327.970473][T14396] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 327.970507][T14396] ? __fget_files+0x3a2/0x420 [ 327.970529][T14396] ? __fget_files+0x2a/0x420 [ 327.970558][T14396] __x64_sys_getsockopt+0x1a4/0x240 [ 327.970585][T14396] do_syscall_64+0x166/0x520 [ 327.970608][T14396] ? trace_irq_disable+0x3b/0x140 [ 327.970625][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.970643][T14396] ? clear_bhb_loop+0x70/0xc0 [ 327.970665][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.970682][T14396] RIP: 0033:0x7f801e59e159 [ 327.970697][T14396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.970712][T14396] RSP: 002b:00007f801f3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 327.970729][T14396] RAX: ffffffffffffffda RBX: 00007f801e825fa0 RCX: 00007f801e59e159 [ 327.970742][T14396] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000004 [ 327.970753][T14396] RBP: 00007f801f3c1090 R08: 0000200000000040 R09: 0000000000000000 [ 327.970764][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.970775][T14396] R13: 00007f801e826038 R14: 00007f801e825fa0 R15: 00007ffe28d90348 [ 327.970804][T14396] [ 328.073182][T14398] __nla_validate_parse: 5 callbacks suppressed [ 328.073200][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 328.073213][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'. [ 328.073236][T14398] netlink: 'syz.0.2050': attribute type 11 has an invalid length. [ 328.073797][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 328.073820][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'. [ 328.073838][T14398] netlink: 'syz.0.2050': attribute type 11 has an invalid length. [ 328.461351][T14329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.934640][T14432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2058'. [ 328.964001][T14417] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 329.155396][T14436] FAULT_INJECTION: forcing a failure. [ 329.155396][T14436] name failslab, interval 1, probability 0, space 0, times 0 [ 329.155445][T14436] CPU: 1 UID: 0 PID: 14436 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) [ 329.155466][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.155476][T14436] Call Trace: [ 329.155484][T14436] [ 329.155491][T14436] dump_stack_lvl+0xe8/0x150 [ 329.155523][T14436] should_fail_ex+0x410/0x560 [ 329.155557][T14436] should_failslab+0xa8/0x100 [ 329.155578][T14436] ? __anon_vma_prepare+0x10e/0x4d0 [ 329.155604][T14436] kmem_cache_alloc_noprof+0xa1/0x600 [ 329.155632][T14436] ? kmem_cache_alloc_noprof+0x156/0x600 [ 329.155657][T14436] ? __anon_vma_prepare+0x10e/0x4d0 [ 329.155686][T14436] __anon_vma_prepare+0x10e/0x4d0 [ 329.155713][T14436] do_pte_missing+0x2f18/0x34b0 [ 329.155759][T14436] handle_mm_fault+0x1a53/0x3750 [ 329.155794][T14436] ? handle_mm_fault+0xf1/0x3750 [ 329.155829][T14436] ? __pfx_handle_mm_fault+0x10/0x10 [ 329.155865][T14436] ? __lock_acquire+0x6df/0x2e50 [ 329.155888][T14436] ? lock_mm_and_find_vma+0xa7/0x340 [ 329.155917][T14436] do_user_addr_fault+0x746/0x1340 [ 329.155950][T14436] exc_page_fault+0x6a/0xc0 [ 329.155978][T14436] asm_exc_page_fault+0x26/0x30 [ 329.155997][T14436] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 329.156018][T14436] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e 0f 1f [ 329.156034][T14436] RSP: 0018:ffffc90005637a18 EFLAGS: 00050202 [ 329.156050][T14436] RAX: ffffffff84db8900 RBX: ffff88803dbfe7f0 RCX: 0000000000000004 [ 329.156062][T14436] RDX: 0000000000000000 RSI: ffff88803dbfe7f0 RDI: 0000000000000000 [ 329.156073][T14436] RBP: ffffc90005637b90 R08: ffff88803dbfe7f3 R09: 1ffff11007b7fcfe [ 329.156085][T14436] R10: dffffc0000000000 R11: ffffed1007b7fcff R12: 1ffff92000ac6f86 [ 329.156097][T14436] R13: 0000000000000000 R14: ffffc90005637c40 R15: 0000000000000004 [ 329.156116][T14436] ? _copy_to_iter+0x160/0x1810 [ 329.156147][T14436] _copy_to_iter+0x255/0x1810 [ 329.156171][T14436] ? __up_read+0x29c/0x930 [ 329.156212][T14436] ? __pfx__copy_to_iter+0x10/0x10 [ 329.156244][T14436] raw_getsockopt+0x2f7/0x3e0 [ 329.156262][T14436] ? irqentry_exit+0x218/0x910 [ 329.156281][T14436] ? trace_irq_disable+0x3b/0x140 [ 329.156303][T14436] ? __pfx_raw_getsockopt+0x10/0x10 [ 329.156336][T14436] ? rep_movs_alternative+0xf/0xa0 [ 329.156358][T14436] ? sock_common_getsockopt+0x2d/0xb0 [ 329.156381][T14436] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 329.156406][T14436] do_sock_getsockopt+0x51d/0x7e0 [ 329.156430][T14436] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 329.156465][T14436] ? __fget_files+0x3a2/0x420 [ 329.156487][T14436] ? __fget_files+0x2a/0x420 [ 329.156517][T14436] __x64_sys_getsockopt+0x1a4/0x240 [ 329.156543][T14436] do_syscall_64+0x166/0x520 [ 329.156567][T14436] ? trace_irq_disable+0x3b/0x140 [ 329.156583][T14436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.156601][T14436] ? clear_bhb_loop+0x70/0xc0 [ 329.156624][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.156640][T14436] RIP: 0033:0x7f801e59e159 [ 329.156657][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.156671][T14436] RSP: 002b:00007f801f3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 329.156689][T14436] RAX: ffffffffffffffda RBX: 00007f801e825fa0 RCX: 00007f801e59e159 [ 329.156702][T14436] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000004 [ 329.156712][T14436] RBP: 00007f801f3c1090 R08: 0000200000000040 R09: 0000000000000000 [ 329.156724][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.156734][T14436] R13: 00007f801e826038 R14: 00007f801e825fa0 R15: 00007ffe28d90348 [ 329.156764][T14436] [ 329.796379][T14464] tap0: tun_chr_ioctl cmd 1074025677 [ 329.796503][T14464] tap0: linktype set to 768 [ 330.091289][T14473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.098488][T14477] FAULT_INJECTION: forcing a failure. [ 330.098488][T14477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.098521][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.1.2072 Not tainted syzkaller #0 PREEMPT(full) [ 330.098541][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.098551][T14477] Call Trace: [ 330.098558][T14477] [ 330.098566][T14477] dump_stack_lvl+0xe8/0x150 [ 330.098597][T14477] should_fail_ex+0x410/0x560 [ 330.098628][T14477] prepare_alloc_pages+0x223/0x600 [ 330.098653][T14477] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 330.098676][T14477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 330.098699][T14477] ? __pfx_policy_nodemask+0x10/0x10 [ 330.098721][T14477] ? lock_acquire+0x115/0x350 [ 330.098745][T14477] alloc_pages_mpol+0x21e/0x390 [ 330.098771][T14477] folio_alloc_mpol_noprof+0x39/0x160 [ 330.098795][T14477] vma_alloc_folio_noprof+0xe1/0x1e0 [ 330.098819][T14477] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 330.098853][T14477] ? __anon_vma_prepare+0x411/0x4d0 [ 330.098882][T14477] do_pte_missing+0x173a/0x34b0 [ 330.098926][T14477] handle_mm_fault+0x1a53/0x3750 [ 330.098958][T14477] ? handle_mm_fault+0xf1/0x3750 [ 330.098992][T14477] ? __pfx_handle_mm_fault+0x10/0x10 [ 330.099026][T14477] ? __lock_acquire+0x6df/0x2e50 [ 330.099048][T14477] ? lock_mm_and_find_vma+0xa7/0x340 [ 330.099076][T14477] do_user_addr_fault+0x746/0x1340 [ 330.099120][T14477] exc_page_fault+0x6a/0xc0 [ 330.099147][T14477] asm_exc_page_fault+0x26/0x30 [ 330.099164][T14477] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 330.099185][T14477] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 66 04 00 66 2e 0f 1f [ 330.099201][T14477] RSP: 0018:ffffc900054b7a18 EFLAGS: 00050202 [ 330.099217][T14477] RAX: ffffffff84db8900 RBX: ffff88803dbfe070 RCX: 0000000000000004 [ 330.099229][T14477] RDX: 0000000000000000 RSI: ffff88803dbfe070 RDI: 0000000000000000 [ 330.099243][T14477] RBP: ffffc900054b7b90 R08: ffff88803dbfe073 R09: 1ffff11007b7fc0e [ 330.099257][T14477] R10: dffffc0000000000 R11: ffffed1007b7fc0f R12: 1ffff92000a96f86 [ 330.099269][T14477] R13: 0000000000000000 R14: ffffc900054b7c40 R15: 0000000000000004 [ 330.099288][T14477] ? _copy_to_iter+0x160/0x1810 [ 330.099320][T14477] _copy_to_iter+0x255/0x1810 [ 330.099344][T14477] ? __up_read+0x29c/0x930 [ 330.099378][T14477] ? __pfx__copy_to_iter+0x10/0x10 [ 330.099419][T14477] raw_getsockopt+0x2f7/0x3e0 [ 330.099439][T14477] ? irqentry_exit+0x218/0x910 [ 330.099461][T14477] ? trace_irq_disable+0x3b/0x140 [ 330.099483][T14477] ? __pfx_raw_getsockopt+0x10/0x10 [ 330.099516][T14477] ? rep_movs_alternative+0xf/0xa0 [ 330.099534][T14477] ? sock_common_getsockopt+0x2d/0xb0 [ 330.099559][T14477] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 330.099583][T14477] do_sock_getsockopt+0x51d/0x7e0 [ 330.099608][T14477] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 330.099642][T14477] ? __fget_files+0x3a2/0x420 [ 330.099664][T14477] ? __fget_files+0x2a/0x420 [ 330.099693][T14477] __x64_sys_getsockopt+0x1a4/0x240 [ 330.099721][T14477] do_syscall_64+0x166/0x520 [ 330.099744][T14477] ? trace_irq_disable+0x3b/0x140 [ 330.099760][T14477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.099778][T14477] ? clear_bhb_loop+0x70/0xc0 [ 330.099800][T14477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.099835][T14477] RIP: 0033:0x7fb6b8b9e159 [ 330.099854][T14477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.099868][T14477] RSP: 002b:00007fb6b9af9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 330.099887][T14477] RAX: ffffffffffffffda RBX: 00007fb6b8e25fa0 RCX: 00007fb6b8b9e159 [ 330.099899][T14477] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000004 [ 330.099910][T14477] RBP: 00007fb6b9af9090 R08: 0000200000000040 R09: 0000000000000000 [ 330.099922][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.099932][T14477] R13: 00007fb6b8e26038 R14: 00007fb6b8e25fa0 R15: 00007ffdb920c628 [ 330.099961][T14477] [ 330.610936][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2076'. [ 330.628395][ T2034] block nbd4: Possible stuck request ffff888026bf0000: control (read@0,4096B). Runtime 210 seconds [ 330.639266][T10460] block nbd11: Possible stuck request ffff888026f1e000: control (read@0,4096B). Runtime 150 seconds [ 330.651534][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 330.712570][T14491] ipvlan4: entered allmulticast mode [ 330.712618][T14491] syz_tun: entered allmulticast mode [ 331.201878][T14519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.223250][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'. [ 331.223292][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'. [ 331.373462][T14528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2083'. [ 331.390487][T14526] syzkaller0: entered promiscuous mode [ 331.397820][T14526] syzkaller0: entered allmulticast mode [ 331.769019][T14540] syzkaller1: entered promiscuous mode [ 331.774735][T14540] syzkaller1: entered allmulticast mode [ 331.930439][T10533] block nbd5: Possible stuck request ffff888026cae000: control (read@0,4096B). Runtime 210 seconds [ 332.563992][ T26] block nbd6: Possible stuck request ffff888026d07000: control (read@0,4096B). Runtime 210 seconds [ 332.565403][T10533] block nbd12: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 150 seconds [ 333.831974][T10533] block nbd7: Possible stuck request ffff888026d37000: control (read@0,4096B). Runtime 210 seconds [ 334.643337][T14568] macsec1: entered allmulticast mode [ 334.643376][T14568] veth1_macvtap: entered allmulticast mode [ 334.660369][T14568] veth1_macvtap: left allmulticast mode [ 334.818478][T14583] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 334.818612][T14583] syzkaller1: linktype set to 769 [ 334.944157][T14587] __nla_validate_parse: 1 callbacks suppressed [ 334.951637][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 335.109888][T10533] block nbd8: Possible stuck request ffff888026da0000: control (read@0,4096B). Runtime 210 seconds [ 335.260665][T14604] netlink: 'syz.2.2101': attribute type 39 has an invalid length. [ 335.457498][T14615] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2103'. [ 335.541117][T14624] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.2106'. [ 336.356826][T14655] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 336.559467][T14655] bond12: entered promiscuous mode [ 336.559925][T14655] 8021q: adding VLAN 0 to HW filter on device bond12 [ 336.734298][T14662] bond12: (slave bridge0): making interface the new active one [ 336.734342][T14662] bridge0: entered promiscuous mode [ 336.742885][T14662] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 336.790147][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 336.842421][T14679] x_tables: duplicate underflow at hook 1 [ 336.886487][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 337.060058][T14697] tipc: Can't bind to reserved service type 1 [ 337.104467][T14676] syzkaller0: entered promiscuous mode [ 337.104519][T14676] syzkaller0: entered allmulticast mode [ 337.192934][T14700] ip_tables: iptables: counters copy to user failed while replacing table [ 339.956650][T14708] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2126'. [ 339.956961][T14716] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2126'. [ 340.103159][T14725] openvswitch: netlink: Duplicate or invalid key (type 0). [ 340.246313][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 340.246352][T14725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'. [ 340.701294][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2137'. [ 340.922152][T14764] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 341.017430][T14774] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 341.017484][T14774] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 341.018268][T14774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 341.170884][T14764] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 341.205260][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 341.613281][T14791] lo speed is unknown, defaulting to 1000 [ 341.629085][T14791] lo speed is unknown, defaulting to 1000 [ 341.758566][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.504690][T14791] wg2 speed is unknown, defaulting to 1000 [ 342.586928][T14824] netlink: 'syz.3.2151': attribute type 9 has an invalid length. [ 342.696787][T14829] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 342.842745][T14829] 8021q: adding VLAN 0 to HW filter on device bond13 [ 343.144599][T14834] bond13: (slave veth7): Enslaving as an active interface with a down link [ 343.177072][T14836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.192248][T14836] bond13: (slave batadv0): making interface the new active one [ 343.205974][T14836] batadv0: entered promiscuous mode [ 343.215193][T14836] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 343.361603][T14843] netlink: 'syz.4.2155': attribute type 49 has an invalid length. [ 343.413472][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2156'. [ 343.431895][T14839] bond13 (unregistering): (slave veth7): Releasing active interface [ 343.492215][T14839] bond13 (unregistering): (slave batadv0): Releasing active interface [ 343.492258][T14839] batadv0: left promiscuous mode [ 343.532351][T14839] bond13 (unregistering): Released all slaves [ 343.670624][T14856] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2156'. [ 343.786780][T14856] bond_slave_0: entered allmulticast mode [ 343.806518][T14867] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 343.921383][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2162'. [ 343.938639][T14878] sctp: [Deprecated]: syz.4.2158 (pid 14878) Use of int in max_burst socket option. [ 343.938639][T14878] Use struct sctp_assoc_value instead [ 344.076502][T10533] block nbd9: Possible stuck request ffff888026e15080: control (read@0,4096B). Runtime 210 seconds [ 344.077002][T14867] syzkaller0: entered promiscuous mode [ 344.077022][T14867] syzkaller0: entered allmulticast mode [ 344.401092][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 344.845657][T14888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.147107][T14935] __nla_validate_parse: 2 callbacks suppressed [ 345.147159][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 345.342202][T14939] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 345.568495][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 345.568538][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 345.569140][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 345.569159][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 346.099807][T14964] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2181'. [ 346.225490][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 346.251276][T14969] IPVS: stopping master sync thread 7966 ... [ 346.265383][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 346.267918][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 346.300569][T14970] macvtap4: entered allmulticast mode [ 346.300622][T14970] dummy0: entered allmulticast mode [ 346.324403][T14970] dummy0: left allmulticast mode [ 346.536197][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 347.046016][T15002] syzkaller0: entered promiscuous mode [ 347.053681][T15002] syzkaller0: entered allmulticast mode [ 347.062607][T15004] lo: Caught tx_queue_len zero misconfig [ 347.130143][T15005] bond14: option primary_reselect: invalid value (6) [ 347.139386][T15005] bond14 (unregistering): Released all slaves [ 347.175227][T15002] tipc: Enabled bearer , priority 0 [ 347.195647][T15002] tipc: Resetting bearer [ 347.206997][T15001] tipc: Resetting bearer [ 347.286625][T15001] tipc: Disabling bearer [ 347.705949][T15046] bond14: Unable to set up delay as MII monitoring is disabled [ 347.715685][T15046] bond14 (unregistering): Released all slaves [ 348.179464][T15055] macsec1: entered promiscuous mode [ 348.306490][T15057] netlink: 'syz.0.2202': attribute type 9 has an invalid length. [ 348.641585][T15061] ip6gre1: entered promiscuous mode [ 348.647023][T15061] ip6gre1: entered allmulticast mode [ 350.383624][T15024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.411239][T15049] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 350.411284][T15049] __nla_validate_parse: 5 callbacks suppressed [ 350.411310][T15049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2196'. [ 350.411690][T15049] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 350.749336][T15076] tipc: Enabling of bearer rejected, already enabled [ 350.750142][T15080] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 350.956931][T15096] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 351.035295][T15098] syzkaller0: tun_chr_ioctl cmd 35108 [ 351.283081][T15104] netlink: Failed to add helper -22 [ 351.289686][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.864145][T15128] lo speed is unknown, defaulting to 1000 [ 351.890129][T15128] lo speed is unknown, defaulting to 1000 [ 352.303994][T15161] netlink: 'syz.0.2224': attribute type 4 has an invalid length. [ 352.304039][T15161] netlink: 'syz.0.2224': attribute type 8 has an invalid length. [ 352.305436][T15161] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2224'. [ 352.499889][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 352.502748][T15128] wg2 speed is unknown, defaulting to 1000 [ 352.605798][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 352.641465][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'. [ 353.046428][T10533] block nbd10: Possible stuck request ffff888026ebe000: control (read@0,4096B). Runtime 180 seconds [ 353.240448][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.676448][T10533] block nbd1: Possible stuck request ffff888026a81c00: control (read@0,4096B). Runtime 240 seconds [ 354.168171][T15223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2238'. [ 354.324983][T15231] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.337378][T15231] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.345418][T15231] tipc: Enabled bearer , priority 10 [ 354.400562][T15232] tipc: Enabling of bearer rejected, failed to enable media [ 354.458078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.458393][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.514520][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'. [ 354.525209][T15239] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 354.544159][T15237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2244'. [ 354.571440][T15237] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2244'. [ 354.571492][T15237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 354.727922][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.728128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.793201][T15247] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2248'. [ 354.939456][T15256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.081176][T15253] netlink: 'syz.0.2250': attribute type 11 has an invalid length. [ 355.081212][T15253] netlink: 'syz.0.2250': attribute type 13 has an invalid length. [ 355.243252][T15271] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 355.383031][T15281] block nbd48: server does not support multiple connections per device. [ 355.393755][T15281] block nbd48: shutting down sockets [ 355.589320][T10533] block nbd3: Possible stuck request ffff888026bce000: control (read@0,4096B). Runtime 240 seconds [ 355.605736][T10460] block nbd2: Possible stuck request ffff888026b2e000: control (read@0,4096B). Runtime 240 seconds [ 355.608522][T15293] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 355.641883][T15284] __nla_validate_parse: 5 callbacks suppressed [ 355.649638][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 355.659096][T15284] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 355.668105][T15284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2260'. [ 355.777104][T15298] bond6: (slave veth11): Enslaving as an active interface with a down link [ 355.792350][T15284] geneve5: entered promiscuous mode [ 355.798017][T15284] geneve5: entered allmulticast mode [ 355.808931][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 355.874613][T15293] bond6: (slave veth13): Enslaving as an active interface with a down link [ 355.884233][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 355.890990][T15298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.939408][T15293] netlink: 'syz.2.2261': attribute type 4 has an invalid length. [ 355.962269][T15293] netlink: 'syz.2.2261': attribute type 4 has an invalid length. [ 356.160803][T15322] netlink: 'syz.4.2270': attribute type 2 has an invalid length. [ 356.172829][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2270'. [ 356.308029][ C0] net_ratelimit: 3 callbacks suppressed [ 356.308107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.308281][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.609232][T15347] xt_hashlimit: size too large, truncated to 1048576 [ 356.732827][T15357] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.760893][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 356.839862][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 356.863435][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 357.161937][T15367] sctp: [Deprecated]: syz.0.2278 (pid 15367) Use of int in max_burst socket option. [ 357.161937][T15367] Use struct sctp_assoc_value instead [ 357.347965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.348191][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.393345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.393505][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.437891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.438091][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.230138][T15377] syzkaller1: entered promiscuous mode [ 360.230182][T15377] syzkaller1: entered allmulticast mode [ 360.365521][T15399] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 360.365564][T15399] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2283'. [ 360.365587][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 360.462996][T15395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.473213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.473368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.601572][T15420] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20002 [ 360.716860][ T2034] block nbd11: Possible stuck request ffff888026f1e000: control (read@0,4096B). Runtime 180 seconds [ 360.728117][T10460] block nbd4: Possible stuck request ffff888026bf0000: control (read@0,4096B). Runtime 240 seconds [ 361.072937][T15458] syzkaller1: entered promiscuous mode [ 361.072984][T15458] syzkaller1: entered allmulticast mode [ 361.184318][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 361.186322][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 361.190723][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 361.241598][T15465] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2299'. [ 361.463054][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2302'. [ 361.507917][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.508116][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.558784][T15476] netlink: 'syz.1.2303': attribute type 8 has an invalid length. [ 361.558825][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 361.569217][T15476] veth1_to_team: entered promiscuous mode [ 361.570454][T15476] gretap0: entered promiscuous mode [ 361.575938][T15476] veth1_to_team: left promiscuous mode [ 361.582857][T15476] gretap0: left promiscuous mode [ 361.609142][T15479] netlink: 'syz.1.2303': attribute type 1 has an invalid length. [ 361.644319][T15479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.989564][T10533] block nbd5: Possible stuck request ffff888026cae000: control (read@0,4096B). Runtime 240 seconds [ 362.547924][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.548117][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.628249][ T26] block nbd12: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 180 seconds [ 362.628310][T10533] block nbd6: Possible stuck request ffff888026d07000: control (read@0,4096B). Runtime 240 seconds [ 363.597882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.598019][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.839098][T15440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.840027][T15469] netlink: 'syz.2.2300': attribute type 23 has an invalid length. [ 363.911211][T10533] block nbd7: Possible stuck request ffff888026d37000: control (read@0,4096B). Runtime 240 seconds [ 364.195823][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 364.412543][T15510] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.450895][T15510] bond9: (slave lo): Enslaving as an active interface with an up link [ 364.474997][T15510] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 364.503029][ T5712] lo speed is unknown, defaulting to 1000 [ 364.504311][ T8696] lo speed is unknown, defaulting to 1000 [ 364.528527][ T5712] lo speed is unknown, defaulting to 1000 [ 364.627990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.628192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.701433][T15529] netlink: Invalid conntrack timeout [ 364.793699][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 364.808251][T15536] nbd48: detected capacity change from 0 to 53687091200 [ 364.840104][ T52] block nbd48: Receive control failed (result -32) [ 364.986893][T15540] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2316'. [ 365.125392][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 365.210781][T10533] block nbd8: Possible stuck request ffff888026da0000: control (read@0,4096B). Runtime 240 seconds [ 365.295104][T15551] ipvlan3: entered allmulticast mode [ 365.361730][T15547] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 366.102866][T15547] bond7 (unregistering): Released all slaves [ 366.130372][T15566] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 366.460414][T15585] __nla_validate_parse: 66 callbacks suppressed [ 366.460463][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 366.516444][T15590] netlink: 'syz.3.2328': attribute type 13 has an invalid length. [ 366.707840][ C0] net_ratelimit: 3 callbacks suppressed [ 366.707896][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.708100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.196680][T15579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 367.747941][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.748157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.950064][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 368.063849][T15654] bond13: entered promiscuous mode [ 368.606588][T15673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 368.620279][T15674] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 368.787877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.788122][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.862367][T15673] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2347'. [ 369.036743][T15682] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 369.036788][T15682] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2350'. [ 369.077470][T15682] team0: Device wg2 is of different type [ 369.154876][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 369.534466][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 369.564791][T15706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.703075][T15717] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 369.772488][T15717] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.794341][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2356'. [ 369.827849][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.828064][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.971862][T15726] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2358'. [ 370.000299][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 370.010821][T15724] netlink: 'syz.2.2359': attribute type 10 has an invalid length. [ 370.018972][T15724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2359'. [ 370.229203][T15737] netlink: 'syz.2.2364': attribute type 6 has an invalid length. [ 370.734738][T15765] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 370.834334][T15765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.930201][T15767] bond5: (slave dummy0): Releasing active interface [ 370.937541][T15767] dummy0: left promiscuous mode [ 370.965305][T15767] bond10: (slave dummy0): making interface the new active one [ 370.975349][T15767] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 370.984970][T15765] : renamed from dummy0 (while UP) [ 371.550005][T15796] netlink: 'syz.1.2381': attribute type 2 has an invalid length. [ 371.680416][T15808] tipc: New replicast peer: 255.255.255.255 [ 371.688842][T15808] tipc: Enabled bearer , priority 10 [ 371.908083][ C0] net_ratelimit: 2 callbacks suppressed [ 371.908134][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.908270][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.991728][T15824] __nla_validate_parse: 5 callbacks suppressed [ 371.991783][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2387'. [ 372.039542][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 372.095040][T15826] netlink: 1311 bytes leftover after parsing attributes in process `syz.4.2389'. [ 372.175789][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2390'. [ 372.202384][T15830] lo speed is unknown, defaulting to 1000 [ 372.222515][T15830] lo speed is unknown, defaulting to 1000 [ 372.387246][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 372.387290][T15842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2391'. [ 372.605616][T15846] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 372.699529][T15830] wg2 speed is unknown, defaulting to 1000 [ 372.957859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.958101][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.099593][T15860] xt_hashlimit: size too large, truncated to 1048576 [ 373.507850][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.687508][T15874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.704735][T15874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.906520][T15874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.918515][T15874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.987975][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.988180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.156176][T10533] block nbd9: Possible stuck request ffff888026e15080: control (read@0,4096B). Runtime 240 seconds [ 374.412056][T15874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.426927][T15874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 374.611578][T15874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.624494][T15874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.027852][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.028056][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.199159][ T30] audit: type=1804 audit(1788636533.617:10): pid=15927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2410" name="/newroot/491/cgroup.controllers" dev="tmpfs" ino=2578 res=1 errno=0 [ 375.227475][ T30] audit: type=1800 audit(1788636533.647:11): pid=15927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2410" name="cgroup.controllers" dev="tmpfs" ino=2578 res=0 errno=0 [ 375.258655][T11098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 375.258702][T11098] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.698396][T13855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 375.698444][T13855] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.717394][T13855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 375.717426][T13855] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.717475][T13855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 375.717496][T13855] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.929496][T15951] batman_adv: batadv0: Adding interface: macvtap4 [ 375.936267][T15951] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.936327][T15951] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 376.012120][T15954] netlink: 'syz.3.2417': attribute type 16 has an invalid length. [ 376.012171][T15954] netlink: 'syz.3.2417': attribute type 30 has an invalid length. [ 376.068154][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.229513][T15963] pimreg1: renamed from bridge0 [ 376.245900][T15963] pimreg1: entered allmulticast mode [ 376.247381][T15963] pimreg1: entered promiscuous mode [ 376.320191][T15972] veth1_to_bridge: entered allmulticast mode [ 376.322824][T15972] netlink: 86 bytes leftover after parsing attributes in process `syz.3.2421'. [ 376.406761][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 376.581464][T15985] syzkaller1: entered promiscuous mode [ 376.581510][T15985] syzkaller1: entered allmulticast mode [ 376.637146][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637146][T15985] Use struct sctp_sack_info instead [ 376.637224][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637224][T15985] Use struct sctp_sack_info instead [ 376.637256][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637256][T15985] Use struct sctp_sack_info instead [ 376.637288][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637288][T15985] Use struct sctp_sack_info instead [ 376.637325][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637325][T15985] Use struct sctp_sack_info instead [ 376.637361][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637361][T15985] Use struct sctp_sack_info instead [ 376.637397][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637397][T15985] Use struct sctp_sack_info instead [ 376.637434][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637434][T15985] Use struct sctp_sack_info instead [ 376.637470][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637470][T15985] Use struct sctp_sack_info instead [ 376.637506][T15985] sctp: [Deprecated]: syz.1.2424 (pid 15985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.637506][T15985] Use struct sctp_sack_info instead [ 376.642602][T15985] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 376.642621][T15985] netlink: 'syz.1.2424': attribute type 2 has an invalid length. [ 376.642632][T15985] netlink: 'syz.1.2424': attribute type 3 has an invalid length. [ 377.107879][ C0] net_ratelimit: 2 callbacks suppressed [ 377.107926][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.108135][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.327998][T16016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2431'. [ 377.567329][T16014] syzkaller1: entered promiscuous mode [ 377.573251][T16014] syzkaller1: entered allmulticast mode [ 377.792180][T16034] Bluetooth: hci0: unsupported parameter 5135 [ 377.792226][T16034] Bluetooth: hci0: unsupported parameter 8192 [ 377.792252][T16034] Bluetooth: hci0: unsupported parameter 5135 [ 377.792262][T16034] Bluetooth: hci0: unsupported parameter 8192 [ 377.805056][T16035] Bluetooth: hci0: unsupported parameter 5135 [ 377.805077][T16035] Bluetooth: hci0: unsupported parameter 8192 [ 377.805088][T16035] Bluetooth: hci0: unsupported parameter 5135 [ 377.805098][T16035] Bluetooth: hci0: unsupported parameter 8192 [ 378.136040][T16046] syzkaller1: entered promiscuous mode [ 378.143658][T16046] syzkaller1: entered allmulticast mode [ 378.144150][T16052] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 378.157976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.158160][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.273717][T16071] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 378.277639][T16052] bond8: entered promiscuous mode [ 378.287051][T16052] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.386639][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 378.461110][T16071] 8021q: adding VLAN 0 to HW filter on device bond12 [ 378.553685][T16086] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2447'. [ 378.569332][T16086] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 378.604731][T16089] Bluetooth: MGMT ver 1.23 [ 378.773300][T16097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2450'. [ 378.782776][T16096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2450'. [ 379.141833][T16108] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2453'. [ 379.153378][T16108] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2453'. [ 379.170157][T16108] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2453'. [ 379.188107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.188265][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.336933][T16114] veth1_to_bond: Caught tx_queue_len zero misconfig [ 379.609608][T16117] netlink: 'syz.3.2456': attribute type 11 has an invalid length. [ 379.693201][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'. [ 379.709837][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2459'. [ 379.900795][T16138] netlink: 'syz.3.2461': attribute type 1 has an invalid length. [ 380.227965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.228168][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.267880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.307879][ C0] net_ratelimit: 1 callbacks suppressed [ 382.307928][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.308210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.555277][T16156] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 382.559861][T16154] netlink: 'syz.0.2467': attribute type 15 has an invalid length. [ 382.595840][T16156] 8021q: adding VLAN 0 to HW filter on device bond13 [ 382.617600][T16156] __nla_validate_parse: 3 callbacks suppressed [ 382.617927][ T90] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 382.617965][ T90] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 382.617995][ T90] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 382.618024][ T90] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 382.618743][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 382.629640][T16163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2465'. [ 382.852318][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 382.994953][T16168] 8021q: adding VLAN 0 to HW filter on device bond14 [ 383.002732][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 383.110437][T10533] block nbd10: Possible stuck request ffff888026ebe000: control (read@0,4096B). Runtime 210 seconds [ 383.112097][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 383.112116][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 383.150931][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 383.162172][T16168] 8021q: adding VLAN 0 to HW filter on device bond15 [ 383.169948][T16168] bond14: (slave bond15): Enslaving as an active interface with an up link [ 383.212202][T16183] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 383.212250][T16183] netlink: 'syz.4.2469': attribute type 4 has an invalid length. [ 383.212263][T16183] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2469'. [ 383.213937][T16183] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 383.213955][T16183] netlink: 'syz.4.2469': attribute type 4 has an invalid length. [ 383.213966][T16183] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2469'. [ 383.306221][T16181] bond14 (unregistering): (slave bond15): Releasing backup interface [ 383.327227][T16181] bond14 (unregistering): Released all slaves [ 383.347970][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.348202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.596950][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 383.751571][T10533] block nbd1: Possible stuck request ffff888026a81c00: control (read@0,4096B). Runtime 270 seconds [ 383.880704][T16217] can: request_module (can-proto-0) failed. [ 384.203008][T16229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.352621][T16229] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 384.388106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.388322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.654941][T16265] Bluetooth: hci0: unsupported parameter 5135 [ 384.661273][T16265] Bluetooth: hci0: unsupported parameter 8192 [ 384.661296][T16265] Bluetooth: hci0: unsupported parameter 5135 [ 384.661308][T16265] Bluetooth: hci0: unsupported parameter 8192 [ 384.701251][T16265] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 384.913733][T16279] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 384.961560][T16279] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 385.429482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.429707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.599061][T16306] ip6gretap0: entered promiscuous mode [ 385.622040][T16306] 8021q: adding VLAN 0 to HW filter on device »»»»»» [ 385.634670][T16306] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.669697][T10460] block nbd2: Possible stuck request ffff888026b2e000: control (read@0,4096B). Runtime 270 seconds [ 385.680774][T10533] block nbd3: Possible stuck request ffff888026bce000: control (read@0,4096B). Runtime 270 seconds [ 385.688792][T16315] netlink: 'syz.3.2503': attribute type 27 has an invalid length. [ 385.707087][T16313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.839286][T16306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.839336][T16306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.861577][T16306] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 385.873350][T16306] veth1_vlan: left promiscuous mode [ 385.886545][T16306] veth1_vlan: entered promiscuous mode [ 385.898032][T16306] veth1_macvtap: left promiscuous mode [ 385.904999][T16306] veth0_macvtap: left promiscuous mode [ 385.912130][T16306] veth0_macvtap: entered promiscuous mode [ 385.919440][T16306] veth1_macvtap: entered promiscuous mode [ 385.935025][T16306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.946245][T16306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.958920][T16306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.967458][T16306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.981684][T16306] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 386.015591][T16306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.024041][T16306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.048651][T16306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.059086][T16306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.107456][T16306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.124223][T16306] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 386.138090][ T3002] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.138123][ T3002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.215877][ T3002] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 386.216215][ T3002] bond0: (slave veth0_to_bond): making interface the new active one [ 386.224859][ T3002] veth0_to_bond: entered promiscuous mode [ 386.225135][ T3002] veth0_to_bond: entered allmulticast mode [ 386.235463][ T3002] bond0: active interface up! [ 386.292485][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.292603][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.312704][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.312812][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.407599][T16329] syzkaller0: entered promiscuous mode [ 386.407771][T16329] syzkaller0: entered allmulticast mode [ 386.588394][T13855] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.599331][T13855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.612005][T16350] xt_LOG: level 115 >= 8 [ 386.616730][T13855] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.616779][T13855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.708783][T13855] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.708837][T13855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.371151][T16375] vxcan3: entered promiscuous mode [ 387.518086][ C0] net_ratelimit: 6 callbacks suppressed [ 387.518133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.518303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.934153][T16391] __nla_validate_parse: 6 callbacks suppressed [ 387.934184][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2521'. [ 387.952222][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2521'. [ 388.308239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.308311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.557877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.558045][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.854473][T16395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.858749][T16395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.347822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.587919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.752109][T16356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.200744][T16423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2529'. [ 390.222635][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'. [ 390.347237][T16420] syzkaller0: entered promiscuous mode [ 390.355066][T16420] syzkaller0: entered allmulticast mode [ 390.525173][T16431] syzkaller1: entered promiscuous mode [ 390.534083][T16431] syzkaller1: entered allmulticast mode [ 390.546060][T16436] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2535'. [ 390.666679][ T5629] block nbd50: Receive control failed (result -32) [ 390.670828][ T52] block nbd49: Receive control failed (result -32) [ 390.671354][ T5614] block nbd50: Receive control failed (result -32) [ 390.671430][ T4932] block nbd49: Receive control failed (result -32) [ 390.706898][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 390.716140][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 390.716221][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 390.729171][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2536'. [ 390.791937][ T2034] block nbd4: Possible stuck request ffff888026bf0000: control (read@0,4096B). Runtime 270 seconds [ 390.792015][T10460] block nbd11: Possible stuck request ffff888026f1e000: control (read@0,4096B). Runtime 210 seconds [ 390.931929][T16452] netlink: 'syz.1.2537': attribute type 13 has an invalid length. [ 391.027270][T16469] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 391.157790][T16476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2540'. [ 391.180106][ T8696] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.261029][ T5712] wg2 speed is unknown, defaulting to 1000 [ 391.457162][T16474] bond9: (slave geneve5): Opening slave failed [ 391.489953][ T5712] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.539960][T16476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.591529][T16503] netlink: 'syz.4.2544': attribute type 32 has an invalid length. [ 391.741547][T16481] syzkaller0: entered promiscuous mode [ 391.741583][T16481] syzkaller0: entered allmulticast mode [ 391.828160][ T5725] syz1: Port: 1 Link ACTIVE [ 391.941636][T16508] netlink: 'syz.2.2545': attribute type 1 has an invalid length. [ 392.074295][T10533] block nbd5: Possible stuck request ffff888026cae000: control (read@0,4096B). Runtime 270 seconds [ 392.709354][T10533] block nbd12: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 210 seconds [ 392.709399][ T26] block nbd6: Possible stuck request ffff888026d07000: control (read@0,4096B). Runtime 270 seconds [ 392.720513][ C0] net_ratelimit: 12 callbacks suppressed [ 392.720526][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.720609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.511666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.511736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.757896][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.758094][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.995687][T10533] block nbd7: Possible stuck request ffff888026d37000: control (read@0,4096B). Runtime 270 seconds [ 394.548136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.797908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.798118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.064913][T16508] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 395.096466][T16527] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 395.111627][T16529] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 395.278881][T10533] block nbd8: Possible stuck request ffff888026da0000: control (read@0,4096B). Runtime 270 seconds [ 395.552179][T16543] __nla_validate_parse: 4 callbacks suppressed [ 395.552240][T16543] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2552'. [ 395.587898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.860822][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2557'. [ 396.482703][T16570] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 2, id = 0 [ 397.279563][T16592] netlink: 'syz.2.2570': attribute type 13 has an invalid length. [ 397.323761][T16592] gretap0: refused to change device tx_queue_len [ 397.472190][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2573'. [ 397.662841][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2576'. [ 397.917967][ C0] net_ratelimit: 9 callbacks suppressed [ 397.918021][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.918213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.402335][T16639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2581'. [ 398.708166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.708240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.894611][T16662] netlink: Unknown nat attribute (0) [ 398.894668][T16662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.947815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.949613][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.194398][T16680] netlink: NAT attribute has 4 unknown bytes [ 399.202897][T16680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.450282][T16686] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 399.896500][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 400.117975][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2599'. [ 400.127564][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 400.159673][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 400.464230][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2605'. [ 400.865519][T16751] __nla_validate_parse: 1 callbacks suppressed [ 400.865560][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 400.890331][T16751] ipvlan5: entered allmulticast mode [ 400.890383][T16751] syz_tun: entered allmulticast mode [ 400.998793][T16761] netlink: 'syz.1.2611': attribute type 2 has an invalid length. [ 401.023568][T16740] syzkaller1: entered promiscuous mode [ 401.023608][T16740] syzkaller1: entered allmulticast mode [ 401.304133][T16773] pim6reg1: entered promiscuous mode [ 401.310254][T16773] pim6reg1: entered allmulticast mode [ 401.443778][T16782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2615'. [ 401.444867][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2615'. [ 401.600304][T16786] ip6gre1: entered allmulticast mode [ 401.714604][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 401.770204][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 401.883785][T16803] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 402.124693][T16813] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2623'. [ 402.980853][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 403.107827][ C0] net_ratelimit: 14 callbacks suppressed [ 403.107874][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.108027][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.434722][ T4932] block nbd51: Receive control failed (result -32) [ 403.447584][T16848] bond0: invalid NS target ff00:100::200:0 specified for addition [ 403.447628][T16848] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 403.539907][T16850] bond14: option tlb_dynamic_lb: invalid value (128) [ 403.552977][T16850] bond14 (unregistering): Released all slaves [ 403.593828][T16853] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 403.907841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.907908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.079568][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 404.157861][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.158096][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.229411][T10533] block nbd9: Possible stuck request ffff888026e15080: control (read@0,4096B). Runtime 270 seconds [ 404.282691][T16876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.334390][T16882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.402942][T16867] pim6reg: entered allmulticast mode [ 404.421702][T16867] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 404.524065][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'. [ 404.656432][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2648'. [ 404.692288][T16904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.693779][T16906] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 404.783696][T16910] netlink: 'syz.2.2650': attribute type 4 has an invalid length. [ 404.820478][T16914] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 404.838496][T16906] netlink: 'syz.2.2650': attribute type 4 has an invalid length. [ 404.948125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.197921][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.198102][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.400192][T16934] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 405.747755][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.993974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.046402][T16946] __nla_validate_parse: 5 callbacks suppressed [ 406.052860][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 406.238606][T16960] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2665'. [ 406.254935][T16960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 406.259815][T16963] x_tables: duplicate underflow at hook 1 [ 406.486395][T16972] pim6reg1: entered promiscuous mode [ 406.486442][T16972] pim6reg1: entered allmulticast mode [ 406.712685][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 406.787861][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.043479][T16962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.043523][T16962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.210677][T16999] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 407.221151][T16999] bridge6: entered allmulticast mode [ 407.342324][T16962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.370036][T16962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.495506][T17016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2677'. [ 407.680296][T16962] »»»»»»: (slave netdevsim1): Releasing backup interface [ 407.720985][T16962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.721047][T16962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.002093][T16962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.002152][T16962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.051559][T17031] Unsupported ieee802154 address type: 0 [ 408.266910][T17047] netlink: 'syz.4.2687': attribute type 10 has an invalid length. [ 408.297474][T17047] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.309175][ C0] net_ratelimit: 10 callbacks suppressed [ 408.309235][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.309412][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.330987][T17047] bond0: (slave team0): Enslaving as an active interface with an up link [ 408.341824][T17047] team_slave_0: entered promiscuous mode [ 408.341986][T17047] team_slave_1: entered promiscuous mode [ 408.362596][T17052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2685'. [ 408.373861][T17052] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2685'. [ 408.530661][ T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.530714][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.827862][T13856] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.836415][T13856] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.899883][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.899938][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.949056][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.949113][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.108097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.108151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.136313][T17070] dvmrp1: entered allmulticast mode [ 409.354482][T17083] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2695'. [ 409.364490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.364623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.392785][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 409.505179][T17089] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 409.681569][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 410.148051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.398023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.398211][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.889279][T17146] netlink: 'syz.3.2714': attribute type 6 has an invalid length. [ 411.113110][T17164] __nla_validate_parse: 2 callbacks suppressed [ 411.113151][T17164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2717'. [ 411.188077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.386869][T17169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 411.945684][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2726'. [ 412.512664][T17230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2733'. [ 412.526608][T17230] netlink: 'syz.0.2733': attribute type 5 has an invalid length. [ 412.557211][T17230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2733'. [ 412.563195][T17233] netlink: 'syz.0.2733': attribute type 5 has an invalid length. [ 412.869182][T17245] bond15 (unregistering): Released all slaves [ 413.052769][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 413.200404][T10533] block nbd10: Possible stuck request ffff888026ebe000: control (read@0,4096B). Runtime 240 seconds [ 413.508093][ C0] net_ratelimit: 10 callbacks suppressed [ 413.508151][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.508313][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.835416][T10533] block nbd1: Possible stuck request ffff888026a81c00: control (read@0,4096B). Runtime 300 seconds [ 414.309898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.565337][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.565512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.755769][T17200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.755831][T17200] nci: nci_start_poll: failed to set local general bytes [ 414.771925][T17193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.076195][T17283] netlink: 'syz.0.2743': attribute type 1 has an invalid length. [ 415.245537][T17291] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2746'. [ 415.349000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.349077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.509210][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 415.597824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.598004][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.763197][T10533] block nbd3: Possible stuck request ffff888026bce000: control (read@0,4096B). Runtime 300 seconds [ 415.767130][T10460] block nbd2: Possible stuck request ffff888026b2e000: control (read@0,4096B). Runtime 300 seconds [ 416.389042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.985522][T17283] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 417.255028][T17322] veth0: entered promiscuous mode [ 417.260260][T17318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2753'. [ 417.281221][T17318] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.283696][T17318] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.352845][T17320] veth0: left promiscuous mode [ 417.673675][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 417.693632][T17341] syzkaller0: left promiscuous mode [ 417.693672][T17341] syzkaller0: left allmulticast mode [ 417.894179][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 417.924320][T17350] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 417.935012][T17350] batman_adv: batadv0: Adding interface: gretap2 [ 417.935027][T17350] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.955680][T17350] batman_adv: batadv0: Interface activated: gretap2 [ 418.014678][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 418.042497][T17363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2761'. [ 418.198809][T17367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.493517][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 418.532974][T17379] syzkaller0: entered promiscuous mode [ 418.538794][T17379] syzkaller0: entered allmulticast mode [ 418.707948][ C0] net_ratelimit: 7 callbacks suppressed [ 418.708009][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.708186][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.828457][T17388] netlink: 'syz.4.2767': attribute type 21 has an invalid length. [ 418.828520][T17388] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2767'. [ 419.751930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.752108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.797899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.798118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.884212][T10460] block nbd4: Possible stuck request ffff888026bf0000: control (read@0,4096B). Runtime 300 seconds [ 420.896702][ T2034] block nbd11: Possible stuck request ffff888026f1e000: control (read@0,4096B). Runtime 240 seconds [ 421.847881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.848091][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.948696][T17388] netlink: 'syz.4.2767': attribute type 4 has an invalid length. [ 421.948725][T17388] netlink: 'syz.4.2767': attribute type 5 has an invalid length. [ 421.948757][T17388] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2767'. [ 422.150565][T10533] block nbd5: Possible stuck request ffff888026cae000: control (read@0,4096B). Runtime 300 seconds [ 422.323141][T17424] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.2775'. [ 422.791281][ T26] block nbd12: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 240 seconds [ 422.791362][T10533] block nbd6: Possible stuck request ffff888026d07000: control (read@0,4096B). Runtime 300 seconds [ 422.843130][T17439] netlink: 'syz.3.2779': attribute type 2 has an invalid length. [ 422.867930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.868132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.936642][T17440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2778'. [ 423.229467][T17446] netlink: 4416 bytes leftover after parsing attributes in process `syz.2.2782'. [ 423.359013][T17452] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 423.419945][T17447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'. [ 423.438908][T17455] syzkaller0: entered promiscuous mode [ 423.444623][T17455] syzkaller0: entered allmulticast mode [ 423.503076][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 423.907911][ C0] net_ratelimit: 1 callbacks suppressed [ 423.907968][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.908200][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.071059][T10533] block nbd7: Possible stuck request ffff888026d37000: control (read@0,4096B). Runtime 300 seconds [ 424.230407][T17495] IPVS: set_ctl: invalid protocol: 137 172.20.20.20:20000 [ 424.354216][T17502] syzkaller1: entered promiscuous mode [ 424.360053][T17502] syzkaller1: entered allmulticast mode [ 424.433281][T17511] netlink: 'syz.1.2797': attribute type 17 has an invalid length. [ 424.850564][T17521] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.924991][T17521] veth1_vlan: left promiscuous mode [ 424.926041][T17521] veth0_vlan: left promiscuous mode [ 424.927506][T17521] veth0_vlan: entered promiscuous mode [ 424.937244][T17521] veth1_vlan: entered promiscuous mode [ 424.951443][T17521] veth1_macvtap: left promiscuous mode [ 424.958013][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.958219][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.962184][T17521] veth1_macvtap: entered promiscuous mode [ 424.993394][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.996496][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.999191][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.011030][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.056109][T17521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.076989][T17521] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 425.096610][T17521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.101372][T17521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.121846][T17521] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 425.230761][T17531] netlink: 'syz.3.2804': attribute type 3 has an invalid length. [ 425.263080][ T50] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.263338][ T50] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.290711][ T8696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.311440][ T50] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 425.320552][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.320645][ T50] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 425.320669][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.320702][ T50] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 425.320726][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.320792][ T50] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 425.320821][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.391678][T10533] block nbd8: Possible stuck request ffff888026da0000: control (read@0,4096B). Runtime 300 seconds [ 425.453346][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.453495][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.453606][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.453727][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.453831][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.453941][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.454044][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.454148][T17535] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 425.573614][T17543] lo: entered allmulticast mode [ 425.597618][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2807'. [ 425.748149][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.749774][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.844000][T17539] lo: left allmulticast mode [ 425.988051][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.988233][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.071643][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.211660][T17568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.229121][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.327798][ T30] audit: type=1804 audit(1788636584.747:12): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.327879][ T30] audit: type=1800 audit(1788636584.747:13): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2817" name="cgroup.controllers" dev="tmpfs" ino=3100 res=0 errno=0 [ 426.327932][ T30] audit: type=1800 audit(1788636584.747:14): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2817" name="cgroup.controllers" dev="tmpfs" ino=3100 res=0 errno=0 [ 426.332018][ T30] audit: type=1804 audit(1788636584.757:15): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.355833][ T30] audit: type=1804 audit(1788636584.777:16): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.366676][ T30] audit: type=1804 audit(1788636584.777:17): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.408477][ T30] audit: type=1804 audit(1788636584.817:18): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.443106][ T30] audit: type=1804 audit(1788636584.847:19): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.562498][ T30] audit: type=1804 audit(1788636584.987:20): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.585763][ T30] audit: type=1804 audit(1788636584.987:21): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2817" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 426.612762][T17596] tipc: Enabling of bearer rejected, failed to enable media [ 427.163780][T17617] netlink: 3536 bytes leftover after parsing attributes in process `syz.0.2825'. [ 427.179750][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 427.182584][T17618] netlink: 3808 bytes leftover after parsing attributes in process `syz.2.2824'. [ 427.303594][ T4932] Bluetooth: hci4: link tx timeout [ 427.365873][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.373886][ T4932] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 427.404264][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.415131][ T4932] Bluetooth: hci4: link tx timeout [ 427.415135][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.425575][ T4932] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 427.433800][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.442218][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.223878][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 428.224461][T17647] 8021q: adding VLAN 0 to HW filter on device bond15 [ 428.262837][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 428.295351][ T5614] block nbd52: Receive control failed (result -32) [ 428.299620][T17651] bond15: (slave gretap3): Enslaving as a backup interface with an up link [ 428.304907][ T4932] block nbd52: Receive control failed (result -32) [ 428.436901][T17647] bond15 (unregistering): (slave gretap3): Removing an active aggregator [ 428.437591][T17647] bond15 (unregistering): (slave gretap3): Releasing backup interface [ 428.482142][T17647] bond15 (unregistering): Released all slaves [ 428.569832][T17661] 8021q: adding VLAN 0 to HW filter on device bond14 [ 428.863342][T17622] lo speed is unknown, defaulting to 1000 [ 428.870757][T17622] lo speed is unknown, defaulting to 1000 [ 429.107975][ C0] net_ratelimit: 11 callbacks suppressed [ 429.108026][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.108192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.376641][T17622] wg2 speed is unknown, defaulting to 1000 [ 429.428346][ T5614] Bluetooth: hci4: command 0x0405 tx timeout [ 429.508112][ T5614] Bluetooth: hci5: command tx timeout [ 429.667867][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 429.908364][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.908595][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.042086][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.054030][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.061313][T17622] bridge_slave_0: entered allmulticast mode [ 430.064769][T17622] bridge_slave_0: entered promiscuous mode [ 430.074773][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.088187][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.088368][T17622] bridge_slave_1: entered allmulticast mode [ 430.091617][T17622] bridge_slave_1: entered promiscuous mode [ 430.158689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.158900][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.244990][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.266626][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.348337][T17723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2844'. [ 430.376003][T17622] team0: Port device team_slave_0 added [ 430.385448][T17622] team0: Port device team_slave_1 added [ 430.453454][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2844'. [ 430.478110][T17729] sock: sock_set_timeout: `syz.2.2845' (pid 17729) tries to set negative timeout [ 430.524150][T17726] erspan0: left allmulticast mode [ 430.529955][T17733] x_tables: duplicate underflow at hook 3 [ 430.717151][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.717190][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.717213][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.745796][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.745813][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.745836][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.749362][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2843'. [ 430.749390][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 430.913979][T17622] hsr_slave_0: entered promiscuous mode [ 430.926791][T17622] hsr_slave_1: entered promiscuous mode [ 430.934477][T17622] debugfs: 'hsr0' already exists in 'hsr' [ 430.941078][T17622] Cannot create hsr debugfs directory [ 430.947982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.948234][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.982678][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 431.187856][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.522640][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 431.551298][T17761] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 431.591884][ T52] Bluetooth: hci5: command tx timeout [ 431.741799][T17777] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 431.878117][T17778] C: renamed from veth1_to_team (while UP) [ 431.879118][T17785] validate_nla: 10 callbacks suppressed [ 431.879134][T17785] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 431.879146][T17785] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2861'. [ 431.879159][T17785] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 431.905185][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 432.017510][T17778] block nbd0: reconnected socket [ 432.031727][ T52] block nbd0: Receive control failed (result -32) [ 432.075050][T17795] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 432.075096][T17795] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 432.462058][T17622] [ 432.464453][T17622] ====================================================== [ 432.471481][T17622] WARNING: possible circular locking dependency detected [ 432.478520][T17622] syzkaller #0 Not tainted [ 432.482940][T17622] ------------------------------------------------------ [ 432.489965][T17622] syz-executor/17622 is trying to acquire lock: [ 432.496199][T17622] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 432.506095][T17622] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.506095][T17622] but task is already holding lock: [ 432.513465][T17622] ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 432.522301][T17622] [ 432.522301][T17622] which lock already depends on the new lock. [ 432.522301][T17622] [ 432.532791][T17622] [ 432.532791][T17622] the existing dependency chain (in reverse order) is: [ 432.541828][T17622] [ 432.541828][T17622] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 432.549033][T17622] __mutex_lock+0x19d/0x1550 [ 432.554263][T17622] get_device_parent+0x16f/0x3a0 [ 432.559720][T17622] device_add+0x2d4/0xb80 [ 432.564577][T17622] device_create+0x269/0x300 [ 432.569701][T17622] msr_device_create+0x33/0x50 [ 432.575137][T17622] cpuhp_invoke_callback+0x434/0x810 [ 432.580980][T17622] cpuhp_thread_fun+0x362/0x780 [ 432.586345][T17622] smpboot_thread_fn+0x565/0xa70 [ 432.591815][T17622] kthread+0x38b/0x480 [ 432.596391][T17622] ret_from_fork+0x514/0xb70 [ 432.601635][T17622] ret_from_fork_asm+0x1a/0x30 [ 432.606946][T17622] [ 432.606946][T17622] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 432.614601][T17622] cpuhp_thread_fun+0x127/0x780 [ 432.619969][T17622] smpboot_thread_fn+0x565/0xa70 [ 432.625449][T17622] kthread+0x38b/0x480 [ 432.630028][T17622] ret_from_fork+0x514/0xb70 [ 432.635149][T17622] ret_from_fork_asm+0x1a/0x30 [ 432.640426][T17622] [ 432.640426][T17622] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 432.648141][T17622] cpus_read_lock+0x42/0x160 [ 432.653243][T17622] static_key_slow_inc+0x12/0x30 [ 432.658740][T17622] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 432.665038][T17622] nbd_genl_foreach_sock+0x265/0x450 [ 432.670889][T17622] nbd_genl_reconfigure+0xbbb/0x1040 [ 432.676691][T17622] genl_family_rcv_msg_doit+0x233/0x340 [ 432.682850][T17622] genl_rcv_msg+0x614/0x7a0 [ 432.687867][T17622] netlink_rcv_skb+0x226/0x4a0 [ 432.693233][T17622] genl_rcv+0x28/0x40 [ 432.697750][T17622] netlink_unicast+0x7bd/0x940 [ 432.703021][T17622] netlink_sendmsg+0x813/0xb40 [ 432.708297][T17622] sock_sendmsg_nosec+0x13a/0x180 [ 432.713948][T17622] ____sys_sendmsg+0x54e/0x850 [ 432.719262][T17622] ___sys_sendmsg+0x2a5/0x360 [ 432.724455][T17622] __x64_sys_sendmsg+0x1b1/0x290 [ 432.729904][T17622] do_syscall_64+0x166/0x520 [ 432.735109][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.741537][T17622] [ 432.741537][T17622] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 432.749269][T17622] __mutex_lock+0x19d/0x1550 [ 432.754392][T17622] nbd_queue_rq+0x373/0xff0 [ 432.759408][T17622] blk_mq_dispatch_rq_list+0x499/0x1990 [ 432.765625][T17622] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 432.772491][T17622] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 432.778981][T17622] blk_mq_run_work_fn+0x16c/0x300 [ 432.784518][T17622] process_scheduled_works+0xc3d/0x1630 [ 432.790579][T17622] worker_thread+0xa47/0xfb0 [ 432.795704][T17622] kthread+0x38b/0x480 [ 432.800283][T17622] ret_from_fork+0x514/0xb70 [ 432.805389][T17622] ret_from_fork_asm+0x1a/0x30 [ 432.810667][T17622] [ 432.810667][T17622] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 432.817864][T17622] __mutex_lock+0x19d/0x1550 [ 432.823225][T17622] nbd_queue_rq+0xc1/0xff0 [ 432.828178][T17622] blk_mq_dispatch_rq_list+0x499/0x1990 [ 432.834250][T17622] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 432.841094][T17622] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 432.847604][T17622] blk_mq_run_work_fn+0x16c/0x300 [ 432.853227][T17622] process_scheduled_works+0xc3d/0x1630 [ 432.859285][T17622] worker_thread+0xa47/0xfb0 [ 432.864388][T17622] kthread+0x38b/0x480 [ 432.868963][T17622] ret_from_fork+0x514/0xb70 [ 432.874063][T17622] ret_from_fork_asm+0x1a/0x30 [ 432.879342][T17622] [ 432.879342][T17622] -> #5 (set->srcu){.+.+}-{0:0}: [ 432.886450][T17622] __synchronize_srcu+0xc9/0x2f0 [ 432.891929][T17622] elevator_switch+0x1e8/0x7b0 [ 432.897322][T17622] elevator_change+0x2fa/0x480 [ 432.902600][T17622] elevator_set_default+0x375/0x440 [ 432.908312][T17622] blk_register_queue+0x3f3/0x4e0 [ 432.913925][T17622] __add_disk+0x6cb/0xe30 [ 432.918780][T17622] add_disk_fwnode+0x100/0x3a0 [ 432.924063][T17622] nbd_dev_add+0x733/0xb60 [ 432.929461][T17622] nbd_init+0x168/0x1f0 [ 432.934666][T17622] do_one_initcall+0x250/0x870 [ 432.939950][T17622] do_initcall_level+0x10a/0x1a0 [ 432.945442][T17622] do_initcalls+0x59/0xa0 [ 432.950278][T17622] kernel_init_freeable+0x29d/0x3e0 [ 432.955986][T17622] kernel_init+0x22/0x1d0 [ 432.960833][T17622] ret_from_fork+0x514/0xb70 [ 432.965929][T17622] ret_from_fork_asm+0x1a/0x30 [ 432.971209][T17622] [ 432.971209][T17622] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 432.979120][T17622] __mutex_lock+0x19d/0x1550 [ 432.984252][T17622] elevator_change+0x1af/0x480 [ 432.989548][T17622] elevator_set_none+0xb5/0x140 [ 432.995023][T17622] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 433.001357][T17622] nbd_start_device+0x189/0xb30 [ 433.006737][T17622] nbd_genl_connect+0x167d/0x1cd0 [ 433.012899][T17622] genl_family_rcv_msg_doit+0x233/0x340 [ 433.018973][T17622] genl_rcv_msg+0x614/0x7a0 [ 433.024019][T17622] netlink_rcv_skb+0x226/0x4a0 [ 433.029293][T17622] genl_rcv+0x28/0x40 [ 433.033790][T17622] netlink_unicast+0x7bd/0x940 [ 433.039154][T17622] netlink_sendmsg+0x813/0xb40 [ 433.044428][T17622] sock_sendmsg_nosec+0x13a/0x180 [ 433.050069][T17622] ____sys_sendmsg+0x54e/0x850 [ 433.055513][T17622] ___sys_sendmsg+0x2a5/0x360 [ 433.060700][T17622] __x64_sys_sendmsg+0x1b1/0x290 [ 433.066145][T17622] do_syscall_64+0x166/0x520 [ 433.071344][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.077748][T17622] [ 433.077748][T17622] -> #3 (&q->q_usage_counter(io)#108){++++}-{0:0}: [ 433.086425][T17622] blk_alloc_queue+0x544/0x690 [ 433.091701][T17622] __blk_mq_alloc_disk+0x194/0x390 [ 433.097343][T17622] nbd_dev_add+0x494/0xb60 [ 433.102362][T17622] nbd_genl_connect+0x96c/0x1cd0 [ 433.107816][T17622] genl_family_rcv_msg_doit+0x233/0x340 [ 433.113875][T17622] genl_rcv_msg+0x614/0x7a0 [ 433.119017][T17622] netlink_rcv_skb+0x226/0x4a0 [ 433.124398][T17622] genl_rcv+0x28/0x40 [ 433.129013][T17622] netlink_unicast+0x7bd/0x940 [ 433.134286][T17622] netlink_sendmsg+0x813/0xb40 [ 433.139583][T17622] sock_sendmsg_nosec+0x13a/0x180 [ 433.145125][T17622] ____sys_sendmsg+0x54e/0x850 [ 433.150419][T17622] ___sys_sendmsg+0x2a5/0x360 [ 433.155604][T17622] __x64_sys_sendmsg+0x1b1/0x290 [ 433.161050][T17622] do_syscall_64+0x166/0x520 [ 433.166157][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.172559][T17622] [ 433.172559][T17622] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 433.179775][T17622] fs_reclaim_acquire+0x71/0x100 [ 433.185267][T17622] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 433.191510][T17622] alloc_inode+0xb8/0x1b0 [ 433.196397][T17622] iget_locked+0x131/0x6a0 [ 433.201325][T17622] kernfs_get_inode+0x4f/0x770 [ 433.206608][T17622] kernfs_get_tree+0x5cd/0x980 [ 433.211883][T17622] vfs_get_tree+0x92/0x2a0 [ 433.216812][T17622] do_new_mount+0x319/0xdc0 [ 433.221876][T17622] __se_sys_mount+0x31d/0x420 [ 433.227064][T17622] do_syscall_64+0x166/0x520 [ 433.232256][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.238753][T17622] [ 433.238753][T17622] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 433.246748][T17622] down_write+0x96/0x200 [ 433.251596][T17622] kernfs_remove_by_name_ns+0x4e/0x140 [ 433.257674][T17622] device_links_driver_bound+0x4ab/0x1440 [ 433.263995][T17622] driver_bound+0xd8/0x2e0 [ 433.269002][T17622] really_probe+0x774/0xae0 [ 433.274023][T17622] __driver_probe_device+0x1e8/0x360 [ 433.279823][T17622] driver_probe_device+0x4f/0x240 [ 433.285353][T17622] __device_attach_driver+0x270/0x410 [ 433.291230][T17622] bus_for_each_drv+0x258/0x2f0 [ 433.296611][T17622] __device_attach+0x2c4/0x450 [ 433.301881][T17622] device_initial_probe+0xa1/0xd0 [ 433.307763][T17622] bus_probe_device+0x12a/0x220 [ 433.313147][T17622] device_add+0x7d7/0xb80 [ 433.318099][T17622] faux_device_create_with_groups+0x1a5/0x2b0 [ 433.324808][T17622] regulator_dummy_init+0x19/0x40 [ 433.330455][T17622] regulator_init+0xca/0x110 [ 433.335590][T17622] do_one_initcall+0x250/0x870 [ 433.340907][T17622] do_initcall_level+0x10a/0x1a0 [ 433.346461][T17622] do_initcalls+0x59/0xa0 [ 433.351308][T17622] kernel_init_freeable+0x29d/0x3e0 [ 433.357023][T17622] kernel_init+0x22/0x1d0 [ 433.361862][T17622] ret_from_fork+0x514/0xb70 [ 433.366966][T17622] ret_from_fork_asm+0x1a/0x30 [ 433.372251][T17622] [ 433.372251][T17622] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 433.380874][T17622] __lock_acquire+0x15ff/0x2e50 [ 433.386273][T17622] lock_acquire+0x115/0x350 [ 433.391286][T17622] down_read+0x4a/0x330 [ 433.395952][T17622] kernfs_remove+0x35/0x80 [ 433.400876][T17622] __kobject_del+0xe0/0x310 [ 433.405998][T17622] kobject_del+0x45/0x60 [ 433.410859][T17622] cleanup_glue_dir+0x1a3/0x220 [ 433.416240][T17622] device_del+0x77d/0x8f0 [ 433.421080][T17622] unregister_netdevice_many_notify+0x1be1/0x2140 [ 433.428102][T17622] unregister_netdevice_queue+0x2f5/0x340 [ 433.434419][T17622] nsim_destroy+0x275/0x800 [ 433.439511][T17622] __nsim_dev_port_del+0x14e/0x200 [ 433.445168][T17622] nsim_dev_reload_destroy+0x288/0x490 [ 433.451167][T17622] nsim_drv_remove+0x58/0x170 [ 433.456352][T17622] device_release_driver_internal+0x48b/0x880 [ 433.462925][T17622] bus_remove_device+0x444/0x560 [ 433.468375][T17622] device_del+0x524/0x8f0 [ 433.473231][T17622] device_unregister+0x21/0xf0 [ 433.478510][T17622] del_device_store+0x2b5/0x370 [ 433.484222][T17622] kernfs_fop_write_iter+0x3a4/0x540 [ 433.490013][T17622] vfs_write+0x612/0xba0 [ 433.494783][T17622] ksys_write+0x150/0x270 [ 433.499724][T17622] do_syscall_64+0x166/0x520 [ 433.504862][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.511265][T17622] [ 433.511265][T17622] other info that might help us debug this: [ 433.511265][T17622] [ 433.521582][T17622] Chain exists of: [ 433.521582][T17622] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 433.521582][T17622] [ 433.534956][T17622] Possible unsafe locking scenario: [ 433.534956][T17622] [ 433.542491][T17622] CPU0 CPU1 [ 433.547862][T17622] ---- ---- [ 433.553220][T17622] lock(gdp_mutex); [ 433.557105][T17622] lock(cpuhp_state-up); [ 433.563939][T17622] lock(gdp_mutex); [ 433.570343][T17622] rlock(&root->kernfs_supers_rwsem); [ 433.575787][T17622] [ 433.575787][T17622] *** DEADLOCK *** [ 433.575787][T17622] [ 433.583912][T17622] locks held by syz-executor/17622: 8, last CPU#1: [ 433.590395][T17622] #0: ffff8880358bc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 433.599790][T17622] #1: ffff88803be72080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 433.609646][T17622] #2: ffff888028a16008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 433.619800][T17622] #3: ffffffff8fac85a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 433.630072][T17622] #4: ffff88807b547128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 433.640588][T17622] #5: ffff88807b546258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 433.650587][T17622] #6: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 433.659537][T17622] #7: ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 433.668662][T17622] [ 433.668662][T17622] stack backtrace: [ 433.674554][T17622] CPU: 1 UID: 0 PID: 17622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 433.684081][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.694137][T17622] Call Trace: [ 433.697514][T17622] [ 433.700450][T17622] dump_stack_lvl+0xe8/0x150 [ 433.705081][T17622] print_circular_bug+0x2e2/0x300 [ 433.710104][T17622] check_noncircular+0x12f/0x150 [ 433.715044][T17622] __lock_acquire+0x15ff/0x2e50 [ 433.719899][T17622] ? __pfx___mutex_trylock_common+0x10/0x10 [ 433.725826][T17622] lock_acquire+0x115/0x350 [ 433.730404][T17622] ? kernfs_remove+0x35/0x80 [ 433.734990][T17622] down_read+0x4a/0x330 [ 433.739142][T17622] ? kernfs_remove+0x35/0x80 [ 433.743820][T17622] kernfs_remove+0x35/0x80 [ 433.748244][T17622] __kobject_del+0xe0/0x310 [ 433.752758][T17622] kobject_del+0x45/0x60 [ 433.757074][T17622] cleanup_glue_dir+0x1a3/0x220 [ 433.761923][T17622] device_del+0x77d/0x8f0 [ 433.766247][T17622] ? __pfx_device_del+0x10/0x10 [ 433.771096][T17622] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 433.777255][T17622] ? netdev_unregister_kobject+0x347/0x450 [ 433.783164][T17622] unregister_netdevice_many_notify+0x1be1/0x2140 [ 433.789595][T17622] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 433.796460][T17622] ? __mutex_lock+0x30b/0x1550 [ 433.801222][T17622] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 433.806257][T17622] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 433.811275][T17622] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 433.816295][T17622] unregister_netdevice_queue+0x2f5/0x340 [ 433.822007][T17622] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 433.828239][T17622] nsim_destroy+0x275/0x800 [ 433.832738][T17622] __nsim_dev_port_del+0x14e/0x200 [ 433.837836][T17622] nsim_dev_reload_destroy+0x288/0x490 [ 433.843283][T17622] nsim_drv_remove+0x58/0x170 [ 433.847949][T17622] ? __pfx_nsim_bus_remove+0x10/0x10 [ 433.853225][T17622] device_release_driver_internal+0x48b/0x880 [ 433.859281][T17622] bus_remove_device+0x444/0x560 [ 433.864208][T17622] ? __pfx_bus_remove_device+0x10/0x10 [ 433.869664][T17622] ? kernfs_remove_by_name_ns+0x101/0x140 [ 433.875373][T17622] device_del+0x524/0x8f0 [ 433.879695][T17622] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 433.885495][T17622] ? __pfx_device_del+0x10/0x10 [ 433.890337][T17622] ? lock_acquire+0x115/0x350 [ 433.895003][T17622] device_unregister+0x21/0xf0 [ 433.899854][T17622] del_device_store+0x2b5/0x370 [ 433.904808][T17622] ? __pfx_del_device_store+0x10/0x10 [ 433.910191][T17622] ? sysfs_file_kobj+0x1e4/0x230 [ 433.915670][T17622] ? sysfs_kf_write+0x166/0x260 [ 433.920819][T17622] ? __pfx_sysfs_kf_write+0x10/0x10 [ 433.926017][T17622] kernfs_fop_write_iter+0x3a4/0x540 [ 433.931335][T17622] vfs_write+0x612/0xba0 [ 433.935610][T17622] ? __pfx_vfs_write+0x10/0x10 [ 433.940592][T17622] ? do_sys_openat2+0x14e/0x200 [ 433.945445][T17622] ? kmem_cache_free+0x182/0x650 [ 433.950377][T17622] ksys_write+0x150/0x270 [ 433.954704][T17622] ? __pfx_ksys_write+0x10/0x10 [ 433.959636][T17622] do_syscall_64+0x166/0x520 [ 433.964243][T17622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.970422][T17622] ? clear_bhb_loop+0x70/0xc0 [ 433.975888][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.982564][T17622] RIP: 0033:0x7fad8f15e98e [ 433.986996][T17622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.006683][T17622] RSP: 002b:00007ffe0eddfc28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.015452][T17622] RAX: ffffffffffffffda RBX: 000055558dcf7500 RCX: 00007fad8f15e98e [ 434.023425][T17622] RDX: 0000000000000001 RSI: 00007ffe0eddfcb0 RDI: 0000000000000005 [ 434.031387][T17622] RBP: 00007fad8f2358a7 R08: 0000000000000000 R09: 0000000000000000 [ 434.039346][T17622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.047305][T17622] R13: 00007ffe0eddfcb0 R14: 00007fad8ff54620 R15: 0000000000000003 [ 434.055269][T17622] [ 434.178238][ T52] Bluetooth: hci5: command tx timeout [ 434.307868][ C0] net_ratelimit: 11 callbacks suppressed [ 434.307900][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.308019][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.338931][T10533] block nbd9: Possible stuck request ffff888026e15080: control (read@0,4096B). Runtime 300 seconds [ 434.340810][T17814] tipc: Resetting bearer [ 434.366004][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.449940][T17814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.490335][T17814] veth1_vlan: left allmulticast mode [ 434.533995][T17814] batman_adv: batadv0: Interface deactivated: gretap1 [ 434.565942][T17814] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 434.660556][ T5712] wg2 speed is unknown, defaulting to 1000 [ 434.660607][ T5712] syz2: Port: 1 Link DOWN [ 434.759241][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.759283][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 434.759971][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.759999][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 434.760085][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.760109][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 434.760138][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.760163][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 435.107886][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.107996][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.229244][ T90] bridge_slave_1: left allmulticast mode [ 435.229913][ T90] bridge_slave_1: left promiscuous mode [ 435.230083][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.242789][ T90] bridge_slave_0: left allmulticast mode [ 435.242813][ T90] bridge_slave_0: left promiscuous mode [ 435.243007][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.280487][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.295878][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.305332][ T90] bond0 (unregistering): Released all slaves [ 435.347982][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.348121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.480274][ T90] hsr_slave_0: left promiscuous mode [ 435.485729][ T90] hsr_slave_1: left promiscuous mode [ 435.486381][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.491774][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.553974][ T90] team0 (unregistering): Port device team_slave_1 removed [ 435.562977][ T90] team0 (unregistering): Port device team_slave_0 removed [ 436.148118][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.148229][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.387866][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.388007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.788380][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 438.817866][ T4982] udevd[4982]: worker [7330] /devices/virtual/block/nbd8 timeout; kill it [ 438.817952][ T4982] udevd[4982]: seq 16277 '/devices/virtual/block/nbd8' killed [ 438.817979][ T4982] udevd[4982]: worker [7229] /devices/virtual/block/nbd7 timeout; kill it [ 438.818025][ T4982] udevd[4982]: seq 16150 '/devices/virtual/block/nbd7' killed [ 438.818052][ T4982] udevd[4982]: worker [7260] /devices/virtual/block/nbd9 timeout; kill it [ 438.818096][ T4982] udevd[4982]: seq 16714 '/devices/virtual/block/nbd9' killed [ 438.818123][ T4982] udevd[4982]: worker [5624] /devices/virtual/block/nbd10 timeout; kill it [ 438.818168][ T4982] udevd[4982]: seq 18306 '/devices/virtual/block/nbd10' killed [ 438.818195][ T4982] udevd[4982]: worker [7306] /devices/virtual/block/nbd11 timeout; kill it [ 438.818305][ T4982] udevd[4982]: seq 18792 '/devices/virtual/block/nbd11' killed [ 439.507887][ C0] net_ratelimit: 10 callbacks suppressed [ 439.507923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.508034][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.308383][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.308508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.548470][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.548568][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.347932][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.348109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.587872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.588022][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available