last executing test programs: 5.822949074s ago: executing program 0 (id=6802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000280)='\x00', 0x40, &(0x7f00000002c0)={@align=0x8, {0x9, 0x5, 0x0, 0xdab}}, 0x0, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x3}, {[0x0, 0xfffffff9, 0x3, 0xc56]}, 0x5ae, 0x56, &(0x7f0000000500)=""/86}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000600)={@private=0xa010102, @rand_addr=0x64010102, 0xffffffffffffffff, "23f2ae794654b8c3bb1d764cce8081d3a709605002d33209964c060b9c179606", 0xffffffff, 0x401, 0x9, 0x7}, 0x3c) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568", @ANYRESDEC=r5, @ANYRES32=r7, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.679064376s ago: executing program 0 (id=6807): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x24060400) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x0, 0x2}}, 0x26) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 4.40542419s ago: executing program 0 (id=6810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x255fdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {0x7, 0x1}, {0x7, 0x2}}}, 0x24}}, 0x884) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="020000001000010000000000000000000000000a140000000e0a010100000000000000000100000a140000001100010000000000000000000200000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4018}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) setsockopt$sock_timeval(r10, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.26352252s ago: executing program 3 (id=6812): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000300)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000300fffb00000000010000000c00050017000000007ebb00100007800c000180080001009a0532d13da12c7ce8cce6d5144121103ca522b3ef853515cf780deb9619b385b077067c", @ANYRES32=r3, @ANYBLOB="0c0002008000000000000000"], 0x3c}}, 0x20000000) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002000)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="df25010018001c5293cb5c4c6d3901a17f1f3e51187d4c61180f0bdac5ecf6e0436daf51dd0d9ece1165d2e1fa64d1d752dcf11a68ea4ed3081431510509138c9704ee2405fb"], 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040800) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r6, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x13, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000b475405e000000000100008018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702100008000000b70300000300000085000000060000009500000000000000950000000000000018470000ffffffff000000000000000006000000d077de15cf244ae7e569f49e00000000000003000000183500000500000000000000000000009500000000000000ab7fbbd701303a0dc1184e3dab5ad7c3c2c555f6f6968886dcec5700da9d117c14eb3dac408a6345cf054b7c3ef9bf2dbea6d4e2e92b534433e7ead13314041ff3a02fd84372167442e63c66deb4434366ab8be87a"], &(0x7f0000002180)='syzkaller\x00', 0x8, 0x20, &(0x7f00000021c0)=""/32, 0x41100, 0x18, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0xa, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002280), &(0x7f00000022c0)=[{0x1, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x9}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001180)=ANY=[@ANYRES32=r9, @ANYBLOB="913cb005d58ab75b321b7f4b10f6dae4a57b2b2a38919054e07575180296c0228548074628d801540dc55edb6701d61c1ef44b3640e099a3bad2d541bf41d3d3e76f1e"], 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{}, &(0x7f0000002080), &(0x7f00000023c0)=r8}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000003400048018000180080001006c6f67002c00028008000540ffffff081800018007000100727400000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001d40)={{r1, &(0x7f0000000040)='\'\x12\'&%,^+&+\\\x00', 0x181400, &(0x7f0000000100)={@align=0x2, {0x5, 0x2, 0x8001, 0x3}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x8}, 0xa, &(0x7f0000001c00)=[{0x1, 0x9, &(0x7f0000000200)='bond\x00', &(0x7f00000002c0)="d162e855f2c2a05f8c715d45f13af8db16497a37bdca683b83abf6fc11583d05c5b3be2011cda7aefb8c7c6ab1c6e80a83da4695a29c8ec72f538a7f8084f8ac86d3a353c90c5f66ddf22b59d1add2ff6144a3e34b333937b577fef91db5f65e53f1fa3e5cd545723cf4ba4c4ad73bffa5ccc1964fe8d39ec2ed3be46b7d14e0931fcd6e4785c8", 0x87, 0x20}, {0x3, 0x80000, &(0x7f0000000380)='syz1\x00', &(0x7f0000000480), 0x0, 0x38}, {0x3, 0x320, &(0x7f0000000500)='[[#\\,,%\xe8{%+:*($\xff-&/\x00', &(0x7f0000000540)="a919e05ae6c46b83e058eec3818bf50b730d59388aa1e37f35e2403b8ea91b3d7d3dea1e466802d4bc69ee5a952a1b97daf8e50cb8fa3787f52fde3bde9797d7f321df898cd161da5190d5ca82c39a63980284204f9e1fc017214b61dca5c2a5e31d86b5346d941a7ef83238d5a068452d433b038c14e3cba4043424634ff48fe66aa933a3ff71", 0x87, 0x3a}, {0x2, 0x0, &(0x7f0000000600)='syz2\x00', &(0x7f0000000640)="27cc5a5e8e33b35868e37cb9452749e0c5b0555de9b405b997246f68c63f11a18692aeaa42f776220971d8fe8a2b64ad6e8854967034cda9f698cdf4fde1fda0128651473d3ad5ef26a972a42e374104e5eb5f197b705fefc747bdace892fbcc7606bfe4f439243a6839f1278d7366105cc39f8a699678e6b9a2fcd4196912d2bf61c1bf8755a2", 0x87, 0x20}, {0x1, 0xe3, &(0x7f0000000700)=')\x00', &(0x7f0000000740)="fff429fbf1d4f5ebc8ed603c5ed2439dce0cdd20a1bec33f2f5a99d309233de1ad5305b7dff18655c4b18bce3bfc83c4c47da2196ca43d5a67b45819f40e02f6cf9336ab64da982e9b686f08be81f560604b53a662805bccc3971ea92a52a48de28f28a71f62cd0c8a16c8e85795e2ccfb30240984b1f924e9f7f124580ecd47e96216cc39e6ca219f94a2e1b8ac1a4bbdb98c72ef631241416057d1f34776f871172d3a82df2e993d1d72db2ba8df6b52352472b693787386c0ff2e6bad1dabaeafda4620689c769ac249c3dcb8b77b2260af4958349124a56d895c2738fd4e50e154f3421017c7a4b6282f", 0xec, 0xe}, {0x2, 0x68, &(0x7f0000001980), &(0x7f0000000880)="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", 0x800, 0x10}, {0x2, 0x9, &(0x7f0000001880)='-)\'#{/\x00', &(0x7f00000018c0)="164cb942861d3c8d8b85beaf88724491e1429e2304785f67b28663b98d537d4c649ad6788650c05ab71952d9f7e742e54e2c7fc25ad44631e563ced8f3f9320685f7865221df338d513d28f6ba4da66c1ff7639720cdfe5c261bf20c9c4c96a18afc23b469c6d75ab80e366394ec2bfc5822a369f92ea71d03e8b68dcd6028f8949d3ab0794f973f6d6c0b1231d6f9f0d7d4a9f213c40c86468318ad80d7ac631d0c6551d6c15545073e2e0e9555318388ddb19fdee7ce2f", 0xb8, 0x20}, {0x1, 0x7f, &(0x7f0000000480)='\x80\xfa\xc9o\x80\x00S\xa1\xb3y\xb9!c|\xb86Y\v\xb2\x9c\xa3\tf\x91Q\xb2\xc6\x98\xa4\xc4Q~\xf6\x90\'\xe8\x88\xc8pA\x80F{@#x\xb3\xfb\xb0\xb3)D\x8e\'\xbfJ/\xc3\x92\xe5\xed\x03\x80\x12\xf3\xb0z\xd4\xc3\x02W\xbc\x9e\xd6\x0f\x88\xfd\vZ:\xb2\xfb\xe0N\x12\xa1\x9b\x87\xb4I', &(0x7f00000019c0)="9ed282859c916be549a4f726cb91e7e012adb99170f76dffab08d5be317d5f5249c902386fdb6ceef46d3143a8b24e234ef46daeda8c95cf", 0x38, 0x40}, {0x1, 0x0, &(0x7f0000001a00)=',\x00', &(0x7f0000001a40)="33f62428cf9794152bb828490ac5d2737a132a3fd0cfecc102401707060ca18d32a25845e8e9e4a491fc66df938e9f2abc2c1b4b0fcd9b91d8e1fa736f6df13e92ae5b50c2ecfae5b388e1236416d2b345f70b48a225a3bdc9cf408e65b351065edefc233d549d010c9effb2a147735640c57e6d8ff4c4cd393fbfa64f189df6dcc8d53e2ddc3fb1ffb65021a821cc64267afa4d0fb7818ad77283170002615f6bab1b6f6bce365009f9bfe64e4e3f133a758b5aaa7e", 0xb6}, {0x2, 0x0, &(0x7f0000001b00)='rt\x00', &(0x7f0000001b40)="973162e786b68d59b1f02dc3f36ae538c1e4303befa4f16762de7d47713dec40ac72bfb24221d50879537490fb8291eac9c6ac493a19e21ef0ad2eb44160e7ab144cb1654cfb3a7cbd9f34b488213e514d01b617fb00ef9db7cfa31de30c8fb435b2fe49733a259493a0faf4f47f959c90409cbbddb6a865b0cb2cb641ebcbd382122d731a7f1e78e7cd59f0181115de156946494d5e5aaab4d72d6a5f4ae53f8967880cf54e02e83afa82ebc2acd5173687a386042451d481", 0xb9}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x25, 0x2006}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') bind$can_j1939(r10, &(0x7f0000000840)={0x1d, r6, 0x1, {0x1}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000832000001c00128009000100626f6e6400000000100c000280080003000000000000000e57f868b0f5c0d27cabc6021f7b2375baa9f14a8529ac3e06704e44d13e013ab30f90a264dc06c8e906c00f5b8ae04d015b644746"], 0x3c}}, 0x28000000) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendto(r12, 0x0, 0xfffffecd, 0x4000804, &(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr=0x64010102}, 0xffffffff, 0x1, 0x1, 0x1}}, 0x80) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3.522052905s ago: executing program 4 (id=6813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x32}, 0x94) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r2, &(0x7f00000006c0)="3c0fe1ab2e1a3b62f942ee63384568f7eb3a91a3e16376e273b1caa28d9b26765ec9884f16b511a58d23bda0077bfa937e33aa3edbf3990019e642235c1c8f73b5a9e2705bdd2b223ed8484d8a8bee2631ba87f6bb0cb0c09d68f3a672ac49d80591babb9a2e913f72649903aed3c0f73672e6048b1e64563a0d6c6d9eeab4dcdf5882f27ea2fb969b9b5add5122631e4b1d46e01621e0c8a04880ae394f52707a83d893b08576f7f089c360cd63b4e3c7a7970ec6e73da7c9c6201fbf653fc4b05bf0afbc6bc19341da118d9c8534", &(0x7f00000007c0)=@tcp=r1, 0x2}, 0x20) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0xcc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000ad0000009500000000000000e58bcbe93bd5e915c1476ea1884e2315930a3adaa3adf4a499abb09a695d697d1f8cae67ddfcd0f0a50e662a0e3d93f292a61e27271442116c6badbd6f84b7989d2c6884e647ee3e0263baa275ce1908f1e595ab12797edae7e17f30df1275808c4a1443c78c9ec7d3bbad2915dd9482bb90c32f620afbf9d2a3c8c07a68b607950893b24c26184f6ae49732e0d220b7e75aec751b8f15fc74f3913b01d731abccc2145b875d1ea03fd8e63b5eab3d8f5c8bbd76eb7d006927572a483cc16bc7c6c13135117badaf277f9b6969a86b92a1b41abf6752a6f81020d6265f156fda612cdde2869d5ff7ca6c98539a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2a}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000400), 0x0, 0x4b, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f00000000c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000002d00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB="602000001200110a27bd7000ffdbdf25280905024e204e220800000004000000ea69000001000000050000000010000072b200000200000055d1e6144255adf2711791c1c1499080e9eb73db42e8b8bab2b97c91c657ba8e364a54c0b521a83860d712ef3c009f22acb6cdfed897f8bf56c87ac92c83bd796218361a1e4e901509fc1234664d9ccfc3b8bd62e2f53213ac36011458101f7e10dd4b7729ebb3ed5025f90023163d91ef5f665dc77f", @ANYRES32=r6, @ANYBLOB="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"], 0x2060}, 0x1, 0x0, 0x0, 0x24040814}, 0x8000) 3.2924147s ago: executing program 1 (id=6814): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x1}, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$inet(0x2, 0x3, 0x8) (async) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 3.191492974s ago: executing program 3 (id=6815): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000fcffffff000000000000000024400400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002000300"/28], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) 2.983251349s ago: executing program 4 (id=6816): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) r2 = socket(0x2b, 0x1, 0x1) bind$xdp(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.861298152s ago: executing program 0 (id=6817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000f18007adc404e12800e000100697036673092470f091e720cf593726574617000000004000280"], 0x38}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0], 0x78}, 0x1, 0x0, 0x0, 0x48855}, 0x1000c080) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x13, 0x0, 0x32) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) recvmsg(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/14, 0xe}, 0x40000000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000680)=""/4122, &(0x7f0000000000)=0x101a) 2.811905258s ago: executing program 1 (id=6818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getuid() sendmsg$nl_netfilter(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000000040)={0x13cc, 0xe, 0xb, 0x101, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@generic="818f77f2fa71aee55480d58d7c538d3cb899f3aaf1a0fdcf6dd42dcb84aafe2ee875298d184e8fd93409e3d1a6c1fb4e524e8028516ac02f89814e9bd521df7ea310b8f9e594bf927a8c7b9ea2025f7c0345d50425131040f6bb213ec08893f79b779ca09ee423daa15c88e15b2a4a356e18553aae0b308dba314c07a16ab2f5cdbd27e60dce10f1714af68c17a6e1c6311e6e2f19ccd40a6de0700c967b06fda7f5292993697a47d94596187c06cb6a", @typed={0xc, 0x5f, 0x0, 0x0, @u64=0x7}, @generic="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", @generic="02a28fd0d586498cd43eaded009aa9", @typed={0x8, 0x8, 0x0, 0x0, @uid=r1}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0xe4, 0x96, 0x0, 0x1, [@generic="ea1da69a4ba6cd2a132b4632d8b81c9e93625a7b5cd4cf1c69091d6ff10f0396ee42adce40f33911b9dfa6f8e73ecabefbd61e45f4e13d43a8966a48ac8eb1cf64e677e4f78b71ade05273a8381535105f3ecd45b983083ce25616f4aeeffacc49bf00738f77648e68a4e7785ff2f7bfff18b45b984dce0af3455a1a864a1146aee5aed72dc062e281b4a2bacc666c9bbef0db6cc4d004cc0f10c20c9fae410312afca457b92", @generic="4e79d7468dd153ebf3b9ed8f9f5b74779a9472055b76a640da5d7e523f883418df9ce9316b596476a54aec066360", @nested={0x4, 0x3e}, @typed={0x4, 0x84}, @nested={0x4, 0x164}]}, @generic="669fabff8cb14bacdc7472ace4c0b2aba67e338a4b7a6302234b9692e9d21c92a673d5667d0edae62ee0bcfd3c955bed658b00827e55a2f7bd980f81b6e01ad228fc240a30477de15c6dfe4de097ef0ece8a60366f73add1fe114d9ecf4082073e4cf2121b3dd0e3c53a810c8be46ab4176dd0988f6e8f6567e9d7f0e1baa0dc83de896440b3a2c4540ccd17bc93d62213", @typed={0x14, 0x166, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x14d, 0x1c, 0x0, 0x1, [@nested={0x4, 0xae}, @generic="366b60ee834f2e8145d1c85dc78d5bc0968927cc8242f951ab69baed5d4bb3add1163df6930c914e417533e45445d87e34b6ae98ad753f6f248aae407c4ac598b6814349933693ac95981595be1a034020a10b47816562fee8705b2f31ed60cff72ff580109d19a606c69fbba921c35b2101ac8ef88a4480e96cc67b68", @nested={0x4, 0x13a}, @generic="7a04ed7869210b7f8a7a7ca1b3199bb11330e874aae724528022b486820db568d606039986d81730e906ba6ed4e561b9a9c7e237a7da01342c900f21d3ad61e5adc3d2a1286e0c60d015bba0b577fbc9d26aa2835b392f9cb85cc88cf7bc99f8c428391226a292d13824cc3423d3eab61ef87d3635266afd05417c81eba3f0543945280c9e0f4767e241264145e97cb85fdb2aca8ace82e7098d0a98594f68c58b0c158f52cadfb16072fee9ff660e511916dc4a43c770a44d23817237397885f7ddaac1"]}]}, 0x13cc}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x7d3c4294a91b3bf0) r2 = socket(0x22, 0x6, 0x89) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)=0x0) r5 = getgid() r6 = gettid() r7 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001700)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000017c0)=0x0) r11 = getgid() sendmmsg$unix(r3, &(0x7f00000018c0)=[{{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="3962682c197498e5061be287f6d572de731fd403b21f65b7a72ee999f3b89ac547f92e349ce6e324b3e06f08654f3b611fdcc83a364d19fa", 0x38}], 0x1, &(0x7f0000001800)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r1, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r1, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r1, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r1, r11}}}], 0x98, 0x20000880}}], 0x1, 0x20004800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001900)={{{@in6=@remote, @in=@remote}}}, &(0x7f0000001a00)=0xe8) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r12, &(0x7f0000003f00)=[{{&(0x7f0000001a40)=@isdn={0x22, 0x6, 0x8, 0x6, 0x7d}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="c0fb32be875bff3bb8fe23906a66f1883025f30954139fafb77ac9a768ca3f6f40465cd53e1140ea58d41f8a2fdec928", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b40)="96cac33b48d5b8b21a579118051dcd611754be2cacf715f1eedf7edb2b793d4f8cdf8814b9c49bb14cf12b574621c7e5da47686915a79942114b75a765d103be80376c1d7609cc6804224599c148d92ee59a5c14cd1191280cdfe088169321fc074f6a467f49be73849d3c23954ccfa554b902d642a3fca174e3643710d62094b045f0d1692cac35d39951239b381801fc5666e7ec8b0c5372f1b266d56faa58a7503c58e3768af09109ac2404378f23696b0a415f767bb0ed422fab98d384b7b545a8340c2eaa9de7", 0xc9}, {&(0x7f0000002c40)="ab92e0c7c1c40bdb4951ca1a7027aa214f49eb1fe6b2fb43d32e7339c3d459251244bd3ff5b391bcad", 0x29}, {&(0x7f0000002c80)="40613cfe1a800c51bb23a52f015cbb232edc7fd59573ff1cb85f9f62dd83a9f560337909e890f6b53b6c62fb12ab4e42b3af2ef40d41ca7a6d", 0x39}, {&(0x7f0000002cc0)="fb3c37fcfc2088683c7f7b54b910265acee17eb93dd9afd5fde351f556b97b41d2649b80cc77f65fb6df43f1508873a505b88b31dde290", 0x37}], 0x4, &(0x7f0000002d40)=[@mark={{0x14, 0x1, 0x24, 0x831}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}}, {{&(0x7f0000002d80)=@ax25={{0x3, @bcast, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)="6dd705c5197235", 0x7}, {&(0x7f0000002e40)="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", 0x1000}], 0x2, &(0x7f0000003e80)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x62}}], 0x78}}], 0x3, 0x24000000) bind$bt_hci(r2, &(0x7f0000003fc0)={0x1f, 0x0, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000004000), &(0x7f0000004080)=0x68) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000040c0)={0x0, 0x2, 0x5}, &(0x7f0000004100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000004140)={r13, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000004200)=0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004240), &(0x7f0000004280)=0xc) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r14, 0x8010671f, &(0x7f00000043c0)={&(0x7f00000042c0)=""/233, 0xe9}) syz_genetlink_get_family_id$l2tp(&(0x7f0000004400), r2) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000004740)=@base={0x0, 0xad, 0x4, 0x10001, 0x480, 0xffffffffffffffff, 0xd98b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000047c0)={&(0x7f0000004440)="edb24566bd28271bf23ab033973b081f9c257ad25a28154f4d0d8d72580769ff17cba683a540fa204abb167fe124bb9820b7f7e74d612fd0324ce2453d4222acf6c0ec8b4c583ff02a36f0d8945c0b24c7af56545ed217a296c7117fbfd3e63e", &(0x7f00000044c0)=""/209, &(0x7f00000045c0)="d07507e27271b8fc633b7573016689e5373b024ec9c69f8b234e8a652a9295add977645edc84b98d9458559fd5efcfba0f352ed3cc9a09b7741ec9b0ebf01107b93ff828f8aed01e94d1dbde42934b7892ab5bfc82f8fb08750f92147dd1d6782f082016bdbb68d65919f110d4eed4ea0e8c4732be69630905d2db2f7ec1ef7d72166cd6922b9052b75c07935ac1252187a454a52f8084509c67a1cc240e6dd9eb0a220bcb42512ba662d3fca7497ec249852a0c64bfcf2e1df78a36a35268e0c168c9790f42dc146b3fc4b321a211ac8be3626c6bcfb26e785cae8b72741ccb5f319a1bbe5028b59403df7f39", &(0x7f00000046c0)="7579e8b9c65106c7828900094daa67766a1f327e8c6e6189630db0d9ca3c5e5b08de15124b6b182a62de98829d052c4b91b52709a967eeb06e6b8f1f25f4ae3c1cb273efd04bb13342d80295f92a0fd579cb0826aa84d7636248f9a6d4d2ec622f717c04e070d48694c5572ccf8470be9283", 0x1, r15, 0x4}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) 2.508841171s ago: executing program 1 (id=6820): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES32=r0], 0xffffffffffffff9c}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2.448367566s ago: executing program 3 (id=6821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007", @ANYRESDEC=0x0], 0x48) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000210000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) (async) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='\x00', &(0x7f0000000040)='K$+[\\\x00', 0x7}) 2.222185451s ago: executing program 4 (id=6823): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@ipv6_getroute={0x138, 0x1a, 0x200, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x20, 0x7, 0xfe, 0x3, 0xff, 0x9, 0x800}, [@RTA_MARK={0x8, 0x10, 0xbfd}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x17, 0x7, r2}}, @RTA_METRICS={0xbd, 0x8, 0x0, 0x1, "d93210818da882cdbd92efc9801ba3823a6b1c7daaf0d6e96cd8a6d3db8bae293d455a16f54a8f6656c089efcbbcf7065fcf5e59763b9ec4ed7cd3c60ceb2e1d89811fe7fed9b80c45faf2fef720d6b962f1e99930b3e3781805f77201abc61100b282728e4f0f5a031c57d37ec9fedc2965bd45e16136fabf23a6dd96684462366228868b8e67beb559d3df98e71ac96559f92f3dd73fad1561bad4b1613d1fea3b63f611a3f3a787dcc40128c0c329c88e3c1648c89e87a2"}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @RTA_EXPIRES={0x8, 0x17, 0x9f62}, @RTA_IIF={0x8, 0x3, r3}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_UID={0x8, 0x19, r4}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.168222536s ago: executing program 3 (id=6824): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8fefff60000bfa100000000000007810000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd6, &(0x7f0000000340)=""/214, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x21, 0x8, 0x49}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x1c}}, 0x1) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000002b3c2f522e575f1a698866119040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 2.034173369s ago: executing program 2 (id=6825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x8}, 0x90) (async) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x4d17ea3b}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000000, 0x8010, r3, 0x180000000) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8810) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000002c0)=0x6, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x2, 0x3be, {{0x38, 0x4, 0x0, 0x1e, 0xe0, 0x67, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @generic={0x89, 0x6, "e2ca0e30"}, @generic={0x94, 0xf, "2d9ef74da65fb1e47d6396f8d1"}, @generic={0x83, 0x2}, @timestamp={0x44, 0x8, 0x2f, 0x0, 0xd, [0x6]}, @timestamp_prespec={0x44, 0x54, 0x26, 0x3, 0x0, [{@remote, 0x9}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x527}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@multicast1, 0xffff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x100}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x9}, {@empty, 0x7fffffff}]}, @cipso={0x86, 0x56, 0x3, [{0x5, 0x4, "fe54"}, {0x7, 0xe, "acdbbaa03039e17ada4d647c"}, {0x5, 0x8, "8b1ad2bbf1bf"}, {0x0, 0x12, "5e0c9a3d294584a7eb725705414ee53c"}, {0x0, 0x11, "ac4d169eba3be351f665d40bd63688"}, {0x5, 0x3, "fc"}, {0x0, 0xd, "280a82e1088ad5e7d695e2"}, {0x1, 0x3, "8e"}]}]}}}}}) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x6, 0x4e22, 0x0, 0xa, 0x10, 0x20, 0x0, r7, r8}, {0x7f, 0xffff, 0x80000001, 0x7, 0x3, 0x1, 0x8000, 0x3}, {0x2, 0xc3, 0xd, 0x2}, 0xfffffffa, 0x6e6bbd, 0x2, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0xff}, 0x2, @in=@private=0xa010101, 0x34ff, 0x2, 0x3, 0x40, 0x8, 0x4, 0x7}}, 0xe8) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r9, 0x4, 0x0, 0x2, 0xe9, 0x22, @dev={0xfe, 0x80, '\x00', 0x40}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x0, 0x7, 0xc}}) listen(r2, 0xee) recvfrom$inet6(r0, &(0x7f0000000780)=""/119, 0x77, 0x40002040, &(0x7f0000000800)={0xa, 0x4e23, 0x81, @local, 0xfffffffb}, 0x1c) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000840)) (async) r10 = accept$inet6(r5, &(0x7f0000000880)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000008c0)=0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f00000009c0)={0x1, 'lo\x00', {}, 0x4}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r11) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000a40), 0x2) 1.944225575s ago: executing program 4 (id=6826): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x25, 0x0, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x34, 0x319, 0x70bd26, 0x9000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000002000010029bd70000000000002000000000000020000000008000400fbffffff0500130001"], 0x40}}, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) write$cgroup_type(r3, &(0x7f0000000140), 0x9) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xff}, @rand_addr=0x64010102}}}], 0x20}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x58, &(0x7f0000000040)}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r0) 1.79952373s ago: executing program 2 (id=6827): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 1.549319912s ago: executing program 0 (id=6828): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x338) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6}) r6 = socket(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4b71}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4004005) 1.493307198s ago: executing program 2 (id=6829): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8918, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0xd, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="130000002402000000000000", @ANYRES32=r1, @ANYRES64=0x0], 0x20) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x40000044) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d0001007379"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)=@newtfilter={0x8a0, 0x2c, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff3}, {0xb, 0xffe0}, {0x4, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x874, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_POLICE={0x82c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8d91}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1000000, 0x1, 0x5, 0xffffffff, 0xffff, 0x1, 0x910, 0xae30, 0x3, 0x45d1, 0xa4a1, 0x4, 0x6, 0x10000000, 0x7, 0x1, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x8, 0xffffffff, 0x20000000, 0x3, 0x84, 0x5, 0x3ff, 0x82c9, 0x1, 0x6, 0xa35, 0x8, 0x0, 0x4, 0x0, 0x1a9, 0x2000, 0x2, 0x1, 0x400, 0x4, 0x0, 0xffff, 0xb, 0x0, 0x800, 0x4, 0x2, 0x0, 0x3, 0x7fff, 0x8, 0xd, 0xfffffffb, 0x6, 0x1, 0x7, 0x7, 0x7, 0x1, 0x8, 0x22, 0x5, 0x1, 0x9, 0x0, 0xfffffffc, 0x4, 0xb, 0x100, 0x20006, 0x8, 0x4, 0x1ff, 0x6, 0x0, 0x80000001, 0x9, 0x6, 0x8, 0x10000, 0x7, 0x5, 0x7, 0x100, 0x1, 0x7, 0x3, 0x1ff, 0x4, 0xfffffffc, 0xfffffff1, 0x5, 0x8, 0xc4db, 0x1, 0x7ff, 0xfffffffd, 0xa00, 0x7, 0x0, 0x7fff, 0xffff, 0xe, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x6, 0x2, 0x3d77, 0x5, 0x40, 0x200000, 0x7, 0xfffffff8, 0xff, 0x2, 0x2, 0x401, 0x40, 0x2e3c, 0x0, 0x7, 0x6, 0x58, 0x200, 0x5, 0x0, 0x2, 0x800, 0x3, 0x6, 0x80000001, 0x5, 0x0, 0x0, 0x3da, 0x6, 0xfffffffc, 0x10000, 0x1, 0xfffffffa, 0x623, 0x2, 0xf1e, 0xb686, 0x0, 0x3c, 0x4, 0x0, 0x8, 0x3aa9, 0x1ff, 0x2, 0x975e, 0x7, 0x778, 0x7, 0x3, 0x7, 0x9, 0x80, 0xe, 0x7, 0x100, 0x1ff, 0x3, 0xfffffff9, 0x3, 0x4, 0x52300000, 0x7e207fe2, 0x2, 0x80000001, 0x1a924166, 0x5, 0x80000000, 0xfffffff9, 0x5, 0x9, 0x3, 0x3, 0x8, 0x1, 0x1, 0x0, 0x2, 0xc1af, 0x7fff, 0x7, 0xfffffff5, 0x7, 0x2, 0x2, 0x0, 0x8, 0x7, 0x3, 0x10001, 0x0, 0x80000000, 0xb, 0x1d, 0x10000, 0x8, 0x402, 0x1, 0x800, 0xc32, 0x4, 0x9081, 0x1, 0x5, 0x3, 0x4, 0x7, 0x56, 0x10, 0x993, 0x6, 0x1, 0x1000, 0xd09, 0xa, 0x9, 0x5, 0x9, 0x4, 0x1, 0xdf, 0x6, 0x10000, 0x2, 0x1, 0xa, 0x1, 0x5, 0x6, 0x4, 0x800, 0xe27b, 0xf75, 0x3, 0x2, 0x8, 0x9, 0xd5, 0x61b, 0x99, 0xb81, 0x1, 0x110, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffa70, 0x7e1, 0x8, 0x55293a35, 0x0, 0x8, 0xbdd, 0x87, 0x3, 0x5, 0xfffffff8, 0x58f, 0x0, 0x7, 0x9, 0x4, 0x7, 0x3, 0x3, 0x5, 0xd0e4, 0xb, 0xb, 0x3b13, 0x8, 0xe, 0xa, 0x0, 0x2, 0x40008, 0x2, 0xfffffa0c, 0x10000, 0x63, 0xfffff17b, 0x81, 0x7, 0x4, 0x18000, 0x7, 0x3, 0x0, 0xffff, 0xffffffff, 0x2, 0x40, 0x23c, 0x7, 0x3, 0x6, 0x80000001, 0xea000000, 0xc, 0x6, 0x4, 0x400, 0xa, 0x9, 0xa92f, 0x7, 0x838, 0x2, 0xfffffff7, 0x505b, 0x51ba, 0x3, 0x3, 0x5ba, 0x3, 0x7ff, 0x7, 0x6, 0x70a1929a, 0x80000000, 0x9, 0xf9f, 0xa, 0xfffffffe, 0x7fff, 0x7, 0x3, 0x4, 0xb, 0x8, 0x0, 0xfc5, 0x7, 0x2, 0x2, 0x8f92, 0xa3, 0x9, 0x9, 0x7, 0x9d, 0x1, 0xdeb, 0x9, 0x4009, 0x4, 0x8, 0xffff0000, 0x20, 0x497, 0x6, 0x6, 0xfffffffc, 0x4, 0x1, 0xe7, 0xfff, 0x9e98, 0x43, 0x5, 0xb695, 0x9af2, 0x1, 0x3ff, 0xffff, 0x5, 0xffffffff, 0x1, 0x6, 0xf, 0x0, 0x1, 0x9, 0x8, 0x7fff, 0x7, 0x1, 0x3, 0x100, 0x2, 0x1, 0x80000000, 0x2, 0x5, 0x9, 0x6, 0x7, 0x6, 0x6, 0x6, 0xf0, 0x9738, 0xffffff7f, 0x81, 0x8, 0x5, 0x7, 0x2, 0x5, 0x3, 0x5, 0x9, 0xffff, 0xfffffff9, 0x7fffffff, 0x400, 0x5d, 0x7, 0x7, 0x6, 0x2, 0x100, 0x5, 0x7, 0x6, 0xfff, 0xfffffffd, 0x10000, 0x7, 0x7, 0xfffffffb, 0x8, 0x0, 0x8, 0x2, 0x2, 0x0, 0xa3, 0x41, 0x7, 0x2, 0xd, 0x0, 0x5, 0x3, 0x3, 0x1000, 0x7fffffff, 0x0, 0x1, 0x4, 0x8, 0x2fdf, 0x8, 0xcd25137, 0x7, 0x6, 0x5, 0x0, 0x80009, 0x8, 0x4, 0x101, 0x3, 0x4, 0x3, 0xfffffff7, 0x4, 0x0, 0x2, 0xb6, 0x6, 0x3, 0x2, 0x2, 0x2, 0xfffffff4, 0x9, 0x73c0, 0x3, 0x5, 0x0, 0x4, 0xb, 0x2, 0x7fffffff, 0x0, 0x5, 0x7, 0x8000, 0xfffffff7, 0x80000001, 0x5, 0x6, 0x2, 0x101, 0x4, 0x101, 0x4, 0x1, 0x0, 0x7, 0x3, 0x2, 0x8, 0x2, 0xa, 0x109b, 0x5, 0x8, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x7fffffff}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) connect$inet6(r9, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) (async) sendmmsg$inet6(r9, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) (async) setsockopt$inet6_opts(r9, 0x29, 0x37, 0x0, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r10) 1.416272333s ago: executing program 3 (id=6830): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000001680)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x2, 0xffff, 0x3, @private0, @remote, 0x7800, 0x8000, 0x8, 0x9}}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xd}, {0x8, 0xfff3}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x35f36b5a}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48090}, 0x20008800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e20, @broadcast}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) sendmsg$AUDIT_SET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x3e9, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x1, 0x1, r10, 0x5, 0x1, 0xc0, 0x9, 0x0, 0x16, 0xd4}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) 1.299198862s ago: executing program 4 (id=6831): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.259929722s ago: executing program 1 (id=6832): syz_emit_ethernet(0x122, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffffffffff42e17dbe6edb8100000086dd6000000000e83c0020010000000000000000000000000000ff0200000000000000000000000000018404000000000000c9"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d2c0012802800081c903e01006c617374000000001800028008000140fffffe000c000240fffffffffffffff8080003400000011014"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 1.259418856s ago: executing program 2 (id=6833): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffe, 0x100, 0x100, 0x0, 0x40}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x43339d41532428b}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1ec, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc711}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeb1a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6146}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x28}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "332960d06ae9e50152368da6b738c350190713e03661aef53eff"}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48840}, 0x4000) 923.594767ms ago: executing program 1 (id=6834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x206, 0x0, 0x0, 0x40, 0x72, 0x1, 0x3, 0x9, 0x0, 0x8, 'syz1\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) (async, rerun: 32) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x3) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) (async) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000840)={r5, r8}) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) 636.494622ms ago: executing program 1 (id=6835): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), 0x4) unshare(0x20000400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) unshare(0x20400) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1ab, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x64}, {@in6=@loopback, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x100000, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}]}, 0x1a0}}, 0x800) r4 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x60000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10) shutdown(r0, 0x1) sendmsg$802154_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)="6d2900000098b121b1aa5151203e726fc4d021b3c508ec3e6914004b1f4c792765e2cbfcf66e5b3ff82c0980bf3ce6e3bcb6decf09b31718f1c844a528d808bb69c571f19a62c54bfb72f8854bdef63fc72cd215514369e4bf130de5c773259d351400800000000000000d3361ecfcd6c3b854672a6ffa26e2c30c74ec1001e46d7ad52af5c1940b98e0cd7db59140c606862a73f89c1ad535ceb5ee9ecb2709000000f85e5511fc7f9c6c5c96b740a3fe38321156670f60b38c2b81", 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x200c918c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x20f, 0x9, {{0x9, 0x4, 0x3, 0x1, 0x24, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf6, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}]}, @end]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x8, 0xffe0}, {0xb, 0xfff3}, {0xfff3}}, [{0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2008}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044810}, 0x20000081) 227.359268ms ago: executing program 2 (id=6836): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x8) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x1, @local}}, 0x1e) 219.78949ms ago: executing program 3 (id=6837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0xe, 0x4, 0x82, 0x3, 0xc, 0x5, 0x8}, 0x6c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) 106.392437ms ago: executing program 0 (id=6838): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000240)={@broadcast, @multicast1, 0x8, "d30f388c52647612d91de4353d68b0fa00", 0x1080, 0x0, 0x7a5d9b33, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="e0", 0x1}], 0x1) socket(0x1d, 0x80802, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000240)={@broadcast, @multicast1, 0x8, "d30f388c52647612d91de4353d68b0fa00", 0x1080, 0x0, 0x7a5d9b33, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="e0", 0x1}], 0x1) (async) 40.481143ms ago: executing program 2 (id=6839): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x923}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x5f, r5}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delvlan={0x3c, 0x71, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4000002) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000600)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x923}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x5f, r5}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delvlan={0x3c, 0x71, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4000002) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 0s ago: executing program 4 (id=6840): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) kernel console output (not intermixed with test programs): some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 861.614959][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.653709][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.184626][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5746'. [ 862.346745][T30091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.455635][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 862.486839][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 862.500847][T30091] veth0_vlan: entered promiscuous mode [ 862.531833][T30091] veth1_vlan: entered promiscuous mode [ 862.684627][T30091] veth0_macvtap: entered promiscuous mode [ 862.707539][T30091] veth1_macvtap: entered promiscuous mode [ 862.785330][T30091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.844292][T30091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.898448][ T6632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.919290][ T6632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.945617][ T6632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.978767][ T6632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.272588][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 863.381393][T20990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.430082][T20990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.513168][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 863.606052][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.629880][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.947981][T30381] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 864.319829][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5757'. [ 864.582937][T30404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.645159][T24421] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 864.675827][T24421] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 864.692092][T30400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.705378][ T6252] wlan1: authenticated [ 864.757548][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 864.876911][T30400] vlan2: entered allmulticast mode [ 864.893170][ T13] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 864.909447][T30400] bond0: entered allmulticast mode [ 864.924145][T30404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.932917][T30400] bond_slave_0: entered allmulticast mode [ 864.957199][T30400] bond_slave_1: entered allmulticast mode [ 865.127978][T30428] netlink: 'syz.2.5768': attribute type 9 has an invalid length. [ 865.165667][T30428] netlink: 'syz.2.5768': attribute type 6 has an invalid length. [ 865.212509][T30428] netlink: 'syz.2.5768': attribute type 7 has an invalid length. [ 865.262358][T30428] netlink: 'syz.2.5768': attribute type 8 has an invalid length. [ 866.199581][T30453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 866.291840][T30456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5772'. [ 866.376605][ T6632] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 866.493082][ T6632] wlan1: association with 08:02:11:00:00:00 timed out [ 866.784536][T30468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5772'. [ 867.017119][T30445] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 867.045827][T30445] syzkaller0: entered promiscuous mode [ 867.051788][T30445] syzkaller0: entered allmulticast mode [ 867.126238][T30456] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 867.150180][T30478] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.164123][T30458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.200734][T30476] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.394105][T30478] team0: Port device dummy0 added [ 867.399916][T30478] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.423771][T30478] team0: Port device dummy0 removed [ 867.453795][T30478] .`: (slave dummy0): Enslaving as an active interface with an up link [ 867.463654][T30478] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.478782][T30478] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.501268][T30492] netlink: 'syz.2.5777': attribute type 11 has an invalid length. [ 867.519287][T30478] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 867.603790][T30495] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5779'. [ 867.615100][T30495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5779'. [ 867.718724][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5781'. [ 867.743038][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5781'. [ 868.109396][T30518] : renamed from bond0 (while UP) [ 868.162876][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5785'. [ 868.217157][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5785'. [ 868.743399][T30527] team1: entered promiscuous mode [ 868.765744][T30527] team1: entered allmulticast mode [ 868.783674][T30527] 8021q: adding VLAN 0 to HW filter on device team1 [ 868.816100][T30530] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 868.893909][T30530] team2: entered promiscuous mode [ 868.901870][T30530] team2: entered allmulticast mode [ 868.913480][T30530] 8021q: adding VLAN 0 to HW filter on device team2 [ 869.391932][T30555] __nla_validate_parse: 5 callbacks suppressed [ 869.391954][T30555] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5793'. [ 869.438153][T30555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5793'. [ 869.724740][T30579] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5796'. [ 869.821182][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5796'. [ 869.955552][T30593] openvswitch: netlink: Missing key (keys=40, expected=80) [ 870.347638][T30613] validate_nla: 29 callbacks suppressed [ 870.347660][T30613] netlink: 'syz.2.5807': attribute type 14 has an invalid length. [ 870.395874][T30613] netlink: 'syz.2.5807': attribute type 1 has an invalid length. [ 870.404478][T30613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5807'. [ 870.461984][T30615] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5808'. [ 870.493782][T30615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5808'. [ 871.083588][T30628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5810'. [ 871.145732][T30632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5810'. [ 871.228324][T30639] netlink: 'syz.4.5814': attribute type 61 has an invalid length. [ 871.273661][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 871.734735][T30660] batman_adv: batadv0: Interface activated: vlan2 [ 871.820342][T30660] 8021q: adding VLAN 0 to HW filter on device .` [ 871.824659][T30670] netlink: 'syz.2.5822': attribute type 13 has an invalid length. [ 871.835999][T30670] netlink: 'syz.2.5822': attribute type 27 has an invalid length. [ 871.850376][T30660] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.913231][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 871.986503][T30662] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 872.213901][T30683] netlink: 'syz.0.5825': attribute type 10 has an invalid length. [ 872.267355][T30692] netlink: 'syz.0.5825': attribute type 10 has an invalid length. [ 872.435948][T30695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'. [ 872.490593][T30702] geneve4: entered promiscuous mode [ 872.644371][T30709] sctp: [Deprecated]: syz.1.5832 (pid 30709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 872.644371][T30709] Use struct sctp_sack_info instead [ 872.674853][T30709] netlink: 'syz.1.5832': attribute type 1 has an invalid length. [ 872.975169][T30734] netlink: 'syz.0.5839': attribute type 21 has an invalid length. [ 873.026533][T30740] netlink: 'syz.3.5840': attribute type 1 has an invalid length. [ 873.643760][T30778] bond_slave_0: entered promiscuous mode [ 873.683091][T30778] bond_slave_0: entered allmulticast mode [ 874.386565][T30807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.476350][T30816] bond0: (slave veth0_to_bond): making interface the new active one [ 874.513775][T30816] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 874.579490][T30818] macvlan2: entered promiscuous mode [ 874.591665][T30818] macvlan2: entered allmulticast mode [ 874.603945][T30818] bond0: entered promiscuous mode [ 874.617048][T30818] veth0_to_bond: entered promiscuous mode [ 874.636862][T30818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 874.664242][T30818] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 874.693023][T30818] bond0: left promiscuous mode [ 874.704313][T30818] veth0_to_bond: left promiscuous mode [ 874.967557][T30835] tun0: tun_chr_ioctl cmd 1074812118 [ 874.987437][T30835] tun0: tun_chr_ioctl cmd 1074033169 [ 875.025005][T30835] __nla_validate_parse: 12 callbacks suppressed [ 875.025028][T30835] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5863'. [ 875.115680][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 875.634979][T30862] netlink: 34 bytes leftover after parsing attributes in process `syz.0.5873'. [ 875.713991][T30872] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5874'. [ 875.731344][T30872] nbd: must specify a size in bytes for the device [ 875.843988][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.876679][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.894513][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.903853][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.914262][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.983227][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 875.998195][T30889] syzkaller0: entered promiscuous mode [ 876.007506][T30889] syzkaller0: entered allmulticast mode [ 876.026457][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 876.040509][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 876.062651][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 876.071191][T30882] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 876.094200][T30883] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 876.108785][T30883] bond1 (unregistering): Released all slaves [ 876.346691][T30898] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5879'. [ 876.909363][T30927] netlink: 5220 bytes leftover after parsing attributes in process `syz.1.5888'. [ 876.919322][T30926] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5890'. [ 876.950352][T30926] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.958064][T30926] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.978579][T30927] netlink: 964 bytes leftover after parsing attributes in process `syz.1.5888'. [ 877.006849][T30937] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5890'. [ 877.018136][T30927] netlink: 5220 bytes leftover after parsing attributes in process `syz.1.5888'. [ 877.094448][T30937] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.101917][T30937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.109590][T30937] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.116855][T30937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.147258][T30937] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.155045][T30937] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.140032][T31021] : entered promiscuous mode [ 879.888451][T31033] vlan3: entered promiscuous mode [ 879.894768][T31033] geneve1: entered promiscuous mode [ 879.900257][T31033] vlan3: entered allmulticast mode [ 879.906684][T31033] geneve1: entered allmulticast mode [ 880.149235][T31046] openvswitch: netlink: Multiple metadata blocks provided [ 880.206184][T31046] openvswitch: netlink: Multiple metadata blocks provided [ 880.367639][T31059] __nla_validate_parse: 6 callbacks suppressed [ 880.367662][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 880.405837][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 880.557196][T31061] geneve3: entered promiscuous mode [ 880.575218][T31061] geneve3: entered allmulticast mode [ 880.584253][T31063] sctp: [Deprecated]: syz.1.5922 (pid 31063) Use of int in maxseg socket option. [ 880.584253][T31063] Use struct sctp_assoc_value instead [ 880.589079][ T3282] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20003 - 0 [ 880.627893][ T3282] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20003 - 0 [ 880.665756][ T3282] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20003 - 0 [ 880.696365][ T3282] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20003 - 0 [ 880.807729][T31075] Bluetooth: MGMT ver 1.23 [ 880.915256][T31087] validate_nla: 2 callbacks suppressed [ 880.915278][T31087] netlink: 'syz.3.5928': attribute type 1 has an invalid length. [ 880.947257][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'. [ 880.958670][T31084] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5929'. [ 880.977731][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'. [ 880.986823][T31087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.035425][T31087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5928'. [ 881.272390][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.298562][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.314321][T31074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.669893][T31121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5938'. [ 881.694508][T31121] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 881.800327][T31128] syzkaller1: entered promiscuous mode [ 881.816164][T31128] syzkaller1: entered allmulticast mode [ 881.821965][T31130] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 881.837618][T31130] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 882.055747][T31145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5943'. [ 882.065993][T31145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5943'. [ 882.076319][T31145] netlink: 'syz.1.5943': attribute type 14 has an invalid length. [ 882.088989][T31145] netlink: 'syz.1.5943': attribute type 13 has an invalid length. [ 882.137798][T31147] macsec1: entered allmulticast mode [ 882.143472][T31147] bond0: entered allmulticast mode [ 882.148832][T31147] veth0_to_bond: entered allmulticast mode [ 882.162573][T31147] veth0_to_bond: entered promiscuous mode [ 882.183856][T31147] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 882.195876][T31147] bond0: left allmulticast mode [ 882.200920][T31147] veth0_to_bond: left allmulticast mode [ 882.224912][T13728] veth0_to_bond: left promiscuous mode [ 882.426848][T31166] netlink: 'syz.3.5950': attribute type 1 has an invalid length. [ 882.435418][T31165] netlink: 'syz.3.5950': attribute type 1 has an invalid length. [ 882.445480][T31163] xt_l2tp: unknown flags: 51 [ 882.497354][T31169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5951'. [ 882.506496][T31165] bond2: (slave bridge2): making interface the new active one [ 882.515963][T31165] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 882.534786][T31170] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 882.765799][T31180] netlink: 'syz.1.5955': attribute type 1 has an invalid length. [ 882.775097][T31178] ip6t_REJECT: ECHOREPLY is not supported [ 883.959871][T31226] syzkaller1: entered promiscuous mode [ 884.008936][T31226] syzkaller1: entered allmulticast mode [ 884.023484][T31234] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.030893][T31234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.038978][T31234] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.046670][T31234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.524642][T31244] dvmrp0: entered allmulticast mode [ 884.616172][T31259] syzkaller0: entered promiscuous mode [ 884.629624][T31259] syzkaller0: entered allmulticast mode [ 884.786562][T31264] netlink: 'syz.2.5978': attribute type 21 has an invalid length. [ 885.130156][T31283] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 885.196683][T31281] netlink: 'syz.3.5982': attribute type 2 has an invalid length. [ 886.066222][T31323] __nla_validate_parse: 15 callbacks suppressed [ 886.066245][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5991'. [ 886.507206][T31331] netlink: 'syz.4.5994': attribute type 1 has an invalid length. [ 886.512034][T31332] sctp: [Deprecated]: syz.2.5995 (pid 31332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 886.512034][T31332] Use struct sctp_sack_info instead [ 886.531234][T31331] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5994'. [ 886.583234][T31331] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5994'. [ 886.980803][T31357] tipc: Enabled bearer , priority 0 [ 887.008776][T31357] syzkaller0: entered promiscuous mode [ 887.029207][T31357] syzkaller0: entered allmulticast mode [ 887.120183][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.140868][T31357] tipc: Resetting bearer [ 887.161746][T31356] tipc: Resetting bearer [ 887.171822][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.185479][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.219585][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.240386][T31356] tipc: Disabling bearer [ 887.246699][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.259978][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.274052][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 887.275254][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6002'. [ 887.913542][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 888.044770][T31409] netlink: 'syz.2.6013': attribute type 1 has an invalid length. [ 888.284717][T31416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 888.324552][T31416] gretap1: entered allmulticast mode [ 888.655591][T31443] netlink: 'syz.0.6023': attribute type 21 has an invalid length. [ 888.750133][T21569] block nbd3: Receive control failed (result -32) [ 888.880188][T31454] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 888.966627][T31457] netlink: 'syz.0.6025': attribute type 3 has an invalid length. [ 889.088461][T31463] netlink: 'syz.2.6027': attribute type 4 has an invalid length. [ 889.111120][T31463] netlink: 'syz.2.6027': attribute type 4 has an invalid length. [ 889.178030][T31465] geneve5: entered promiscuous mode [ 889.197137][T30569] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 33108 - 0 [ 889.218331][T30569] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 33108 - 0 [ 889.245995][T30569] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 33108 - 0 [ 889.269584][T30569] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 33108 - 0 [ 889.648011][T31491] netlink: zone id is out of range [ 889.668558][T31491] netlink: zone id is out of range [ 889.685857][T31491] netlink: zone id is out of range [ 889.703855][T31491] netlink: zone id is out of range [ 889.717400][T31491] netlink: zone id is out of range [ 889.738986][T31491] netlink: zone id is out of range [ 889.768106][T31491] netlink: zone id is out of range [ 889.778298][T31491] netlink: zone id is out of range [ 889.807682][T31491] netlink: zone id is out of range [ 889.835305][ T1654] block nbd1: Possible stuck request ffff8880280f5080: control (read@0,1024B). Runtime 90 seconds [ 890.108671][T31509] TCP: TCP_TX_DELAY enabled [ 890.340146][T31517] ip6gre1: entered promiscuous mode [ 890.366054][T31517] ip6gre1: entered allmulticast mode [ 890.735859][T31548] netlink: 'syz.1.6050': attribute type 1 has an invalid length. [ 890.776660][T31548] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 890.836810][T31556] netlink: 'syz.3.6051': attribute type 5 has an invalid length. [ 890.950472][T31559] ip6gre1: entered promiscuous mode [ 890.965332][T31559] ip6gre1: entered allmulticast mode [ 891.550053][T31595] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 891.733038][T31603] block nbd4: server does not support multiple connections per device. [ 891.756009][ T6252] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 891.767660][T31603] block nbd4: shutting down sockets [ 891.784752][ T6252] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 891.793361][T26758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 891.832921][T31608] __nla_validate_parse: 76 callbacks suppressed [ 891.832945][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6062'. [ 891.914091][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6062'. [ 892.322778][T26758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.383223][T26758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.418989][ T5664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 892.453683][ T5664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 892.468613][ T5664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 892.488395][ T5664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 892.523164][ T5664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 892.627414][T21569] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 892.638118][T21569] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 892.646937][T21569] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 892.655729][T21569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 892.670444][T21569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 892.922301][T20989] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.939253][T20989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.954827][T31630] netlink: 'syz.2.6066': attribute type 1 has an invalid length. [ 892.963657][T20989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33108 - 0 [ 893.003625][T31629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'. [ 893.019305][T31629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'. [ 893.108466][T31634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6067'. [ 893.188915][T31630] macvlan2: entered promiscuous mode [ 893.195982][T31630] macvlan2: entered allmulticast mode [ 893.300599][T20989] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.311481][T20989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.325868][T20989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33108 - 0 [ 893.399496][T31626] bond11: (slave gretap2): making interface the new active one [ 893.427395][T31626] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 893.547518][T20989] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.588247][T20989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.626604][T20989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33108 - 0 [ 893.708339][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6070'. [ 893.737138][T31655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6070'. [ 893.779287][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6070'. [ 893.851079][T20989] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.873151][T20989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.897220][T20989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33108 - 0 [ 893.935550][T31659] tipc: Enabled bearer , priority 0 [ 893.960180][T31667] syzkaller0: entered allmulticast mode [ 894.722809][T21569] Bluetooth: hci5: command tx timeout [ 894.738848][T31667] tipc: Disabling bearer [ 894.847960][T31696] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6077'. [ 894.927008][ T3282] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 895.014543][T31702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6079'. [ 895.070408][T20988] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 895.100997][T31702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.330188][T20989] dvmrp8: left allmulticast mode [ 895.359229][T20989] batman_adv: 60ªX¹¦À: Interface deactivated: gretap1 [ 895.912420][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 896.052764][T20989] bond8 (unregistering): (slave erspan1): Releasing active interface [ 896.067634][T20989] erspan1 (unregistering): left promiscuous mode [ 896.139298][T20989] batman_adv: 60ªX¹¦À: Removing interface: gretap1 [ 896.229636][T20989] bond3 (unregistering): (slave gretap2): Releasing active interface [ 896.299063][T20989] bond6 (unregistering): (slave gretap3): Releasing active interface [ 896.676269][T20989] bond4 (unregistering): (slave bridge9): Releasing active interface [ 896.691901][T20989] bond5 (unregistering): (slave bridge10): Releasing backup interface [ 896.700797][T20989] bridge10 (unregistering): left promiscuous mode [ 896.709875][T20989] bridge10 (unregistering): left allmulticast mode [ 896.726242][T20989] bond7 (unregistering): (slave bridge11): Releasing active interface [ 896.735987][T20989] bridge11 (unregistering): left promiscuous mode [ 896.742738][T20989] bridge11 (unregistering): left allmulticast mode [ 896.769038][T20989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.780136][T20989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.791297][T20989] bond0 (unregistering): Released all slaves [ 896.792694][T21569] Bluetooth: hci5: command tx timeout [ 896.811937][T20989] bond1 (unregistering): Released all slaves [ 896.830765][T20989] bond2 (unregistering): Released all slaves [ 896.846829][T20989] bond3 (unregistering): Released all slaves [ 896.863271][T20989] bond4 (unregistering): Released all slaves [ 896.884890][T20989] bond5 (unregistering): Released all slaves [ 896.903359][T20989] bond6 (unregistering): Released all slaves [ 896.932990][T20989] bond7 (unregistering): Released all slaves [ 896.947875][T20989] bond8 (unregistering): Released all slaves [ 896.962802][T20989] bond9 (unregistering): Released all slaves [ 896.990566][T20989] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 897.001946][T20989] bond10 (unregistering): Released all slaves [ 897.024575][T30569] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 897.034167][T30569] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 897.431835][T20989] tipc: Left network mode [ 897.752860][T31610] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.780423][T31610] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.788110][T31610] bridge_slave_0: entered allmulticast mode [ 897.805145][T31610] bridge_slave_0: entered promiscuous mode [ 897.840979][T31610] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.853233][T31610] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.860793][T31610] bridge_slave_1: entered allmulticast mode [ 897.869012][T31610] bridge_slave_1: entered promiscuous mode [ 897.896718][T31708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.079283][T31610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.118718][T31785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6088'. [ 898.128106][T31785] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6088'. [ 898.163646][T31785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6088'. [ 898.167672][T31610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.217785][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6090'. [ 898.246651][T31785] netlink: 296 bytes leftover after parsing attributes in process `syz.3.6088'. [ 898.269998][T31789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6090'. [ 898.386962][T31610] team0: Port device team_slave_0 added [ 898.435557][T31610] team0: Port device team_slave_1 added [ 898.579245][T20989] hsr_slave_0: left promiscuous mode [ 898.591019][T20989] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 898.618837][T20989] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 898.650324][T20989] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 898.674167][T20989] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 898.789145][T20989] veth1_macvtap: left promiscuous mode [ 898.875597][T21569] Bluetooth: hci5: command tx timeout [ 899.217480][T20989] pim6reg (unregistering): left allmulticast mode [ 899.640701][T20989] team_slave_1 (unregistering): left allmulticast mode [ 899.649250][T20989] team0 (unregistering): Port device team_slave_1 removed [ 899.819917][ T12] smbdirect: ib_dev[syz2] removed [ 899.958199][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 899.976740][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 899.991098][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 900.007893][T31610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.016301][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.047074][T31610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.100047][T31610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.128712][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.185922][T31847] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6100'. [ 900.226279][T31610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.271995][T31853] x_tables: duplicate underflow at hook 3 [ 900.510855][T31848] syzkaller1: entered promiscuous mode [ 900.545989][T31848] syzkaller1: entered allmulticast mode [ 900.664497][T31610] hsr_slave_0: entered promiscuous mode [ 900.701219][T31610] hsr_slave_1: entered promiscuous mode [ 900.717642][T31610] debugfs: 'hsr0' already exists in 'hsr' [ 900.755587][T31610] Cannot create hsr debugfs directory [ 900.848600][T31867] geneve2: entered promiscuous mode [ 900.871456][T31867] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 900.952612][T21569] Bluetooth: hci5: command tx timeout [ 901.036936][ T3390] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.084428][T20989] IPVS: stop unused estimator thread 0... [ 901.434983][ T3390] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.444818][ T3390] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.512851][ T3390] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.600201][T31897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'. [ 902.089840][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 902.171863][T31906] syzkaller1: entered promiscuous mode [ 902.195796][T31906] syzkaller1: entered allmulticast mode [ 902.248040][T31610] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 902.534466][T31610] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 903.039174][T31610] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 903.306820][T31956] sctp: [Deprecated]: syz.1.6118 (pid 31956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.306820][T31956] Use struct sctp_sack_info instead [ 903.407505][T31956] sctp: [Deprecated]: syz.1.6118 (pid 31956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.407505][T31956] Use struct sctp_sack_info instead [ 903.489337][T31610] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 903.548088][T31967] netlink: 'syz.2.6122': attribute type 1 has an invalid length. [ 903.673919][T31972] __nla_validate_parse: 7 callbacks suppressed [ 903.673938][T31972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6124'. [ 904.330775][T32009] Cannot find del_set index 3 as target [ 904.408800][T32009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6133'. [ 904.414426][T31993] tipc: Started in network mode [ 904.424682][T31993] tipc: Node identity d6a4363f794, cluster identity 4711 [ 904.452489][T31993] tipc: Enabled bearer , priority 0 [ 904.494729][T32014] netlink: 'syz.1.6133': attribute type 30 has an invalid length. [ 904.516079][T32014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6133'. [ 904.552394][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 904.673107][T32014] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 904.686034][T32014] bond12 (unregistering): Released all slaves [ 904.853145][T31610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 904.893754][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.904883][T31610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 904.939712][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.968649][T31610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 905.009485][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.037681][T31610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 905.060493][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.315472][T32053] syzkaller0: entered promiscuous mode [ 905.337328][T32053] syzkaller0: entered allmulticast mode [ 905.588428][ T5769] tipc: Node number set to 2950968895 [ 905.652610][T31610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.711768][T32073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6145'. [ 905.719237][T31610] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.842714][T20988] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.850372][T20988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.911445][T20988] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.918708][T20988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.395325][T32100] net_ratelimit: 168 callbacks suppressed [ 906.395348][T32100] openvswitch: netlink: Message has 4 unknown bytes. [ 907.523235][T32139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.597776][T31610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.661059][T32146] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.6156'. [ 908.287348][T32169] netlink: 'syz.3.6161': attribute type 12 has an invalid length. [ 908.574553][T31610] veth0_vlan: entered promiscuous mode [ 908.628546][T32184] tipc: Enabled bearer , priority 0 [ 908.648974][T32184] syzkaller0: entered promiscuous mode [ 908.667305][T32184] syzkaller0: entered allmulticast mode [ 908.850616][T31610] veth1_vlan: entered promiscuous mode [ 908.876704][T32184] tipc: Resetting bearer [ 908.944825][T32182] tipc: Resetting bearer [ 909.024627][T32182] tipc: Disabling bearer [ 909.108852][T31610] veth0_macvtap: entered promiscuous mode [ 909.141776][T31610] veth1_macvtap: entered promiscuous mode [ 909.265898][T31610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.331694][T31610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.385826][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.525024][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.549107][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.767613][T32222] team1: left promiscuous mode [ 909.823838][T32222] team2: left promiscuous mode [ 909.857842][T32228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.928365][T32222] vlan3: left promiscuous mode [ 910.011603][T32222] geneve1: left promiscuous mode [ 910.062478][T32222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 910.089756][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.391561][T32238] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.6175'. [ 910.439235][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.460813][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.539550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.567047][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.771766][T32244] netlink: 'syz.1.6178': attribute type 1 has an invalid length. [ 910.796295][T32244] netlink: 'syz.1.6178': attribute type 2 has an invalid length. [ 910.969782][T32252] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 911.016780][T32252] syzkaller0: entered promiscuous mode [ 911.036835][T32252] syzkaller0: entered allmulticast mode [ 911.130176][T32262] xt_hashlimit: size too large, truncated to 1048576 [ 911.185541][T32262] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 911.339621][T32274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'. [ 911.349777][T32274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'. [ 912.125947][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 912.155323][T32313] FAULT_INJECTION: forcing a failure. [ 912.155323][T32313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.173545][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 912.192022][T32313] CPU: 1 UID: 0 PID: 32313 Comm: syz.2.6195 Not tainted syzkaller #0 PREEMPT(full) [ 912.192050][T32313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 912.192062][T32313] Call Trace: [ 912.192070][T32313] [ 912.192079][T32313] dump_stack_lvl+0xe8/0x150 [ 912.192114][T32313] should_fail_ex+0x412/0x560 [ 912.192142][T32313] _copy_from_iter+0x1d3/0x1670 [ 912.192167][T32313] ? rcu_is_watching+0x15/0xb0 [ 912.192196][T32313] ? __pfx__copy_from_iter+0x10/0x10 [ 912.192226][T32313] ? netlink_sendmsg+0x650/0xb40 [ 912.192247][T32313] ? skb_put+0x11b/0x210 [ 912.192271][T32313] netlink_sendmsg+0x6c0/0xb40 [ 912.192313][T32313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.192337][T32313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 912.192365][T32313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 912.192395][T32313] ____sys_sendmsg+0x972/0x9f0 [ 912.192416][T32313] ? __might_fault+0xaf/0x130 [ 912.192449][T32313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.192482][T32313] ? import_iovec+0x73/0xa0 [ 912.192509][T32313] ___sys_sendmsg+0x2a5/0x360 [ 912.192530][T32313] ? __lock_acquire+0x6b5/0x2cf0 [ 912.192557][T32313] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.192619][T32313] ? __fget_files+0x2a/0x420 [ 912.192643][T32313] ? __fget_files+0x3a0/0x420 [ 912.192678][T32313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 912.192705][T32313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.192738][T32313] ? __pfx_ksys_write+0x10/0x10 [ 912.192776][T32313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.192798][T32313] do_syscall_64+0x174/0x580 [ 912.192818][T32313] ? trace_irq_disable+0x3b/0x140 [ 912.192847][T32313] ? clear_bhb_loop+0x40/0x90 [ 912.192872][T32313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.192892][T32313] RIP: 0033:0x7f4699f9ce59 [ 912.192912][T32313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.192929][T32313] RSP: 002b:00007f469ae42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.192950][T32313] RAX: ffffffffffffffda RBX: 00007f469a216090 RCX: 00007f4699f9ce59 [ 912.192964][T32313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 912.192990][T32313] RBP: 00007f469ae42090 R08: 0000000000000000 R09: 0000000000000000 [ 912.193002][T32313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.193014][T32313] R13: 00007f469a216128 R14: 00007f469a216090 R15: 00007ffd43a7c3d8 [ 912.193046][T32313] [ 912.248560][T32315] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6194'. [ 912.635693][T32311] bond12: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 912.663693][T32311] bond12 (unregistering): Released all slaves [ 912.721383][T32344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6194'. [ 912.733173][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6194'. [ 912.759907][T32344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 912.965751][T32348] only policy match revision 0 supported [ 912.965775][T32348] unable to load match [ 913.375539][T32359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6207'. [ 913.611136][T32369] FAULT_INJECTION: forcing a failure. [ 913.611136][T32369] name failslab, interval 1, probability 0, space 0, times 0 [ 913.670866][T32369] CPU: 1 UID: 0 PID: 32369 Comm: syz.3.6209 Not tainted syzkaller #0 PREEMPT(full) [ 913.670895][T32369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.670907][T32369] Call Trace: [ 913.670916][T32369] [ 913.670924][T32369] dump_stack_lvl+0xe8/0x150 [ 913.670954][T32369] should_fail_ex+0x412/0x560 [ 913.670983][T32369] should_failslab+0xa8/0x100 [ 913.671003][T32369] ? skb_clone+0x212/0x3a0 [ 913.671034][T32369] kmem_cache_alloc_noprof+0x87/0x650 [ 913.671061][T32369] ? apparmor_capable+0x126/0x170 [ 913.671092][T32369] skb_clone+0x212/0x3a0 [ 913.671113][T32369] ? nfnetlink_rcv+0x4b0/0x27b0 [ 913.671137][T32369] nfnetlink_rcv+0x4de/0x27b0 [ 913.671160][T32369] ? preempt_schedule_common+0x82/0xd0 [ 913.671182][T32369] ? preempt_schedule_thunk+0x16/0x30 [ 913.671216][T32369] ? __local_bh_enable_ip+0xe1/0x130 [ 913.671235][T32369] ? __dev_queue_xmit+0x2b6/0x3950 [ 913.671258][T32369] ? __dev_queue_xmit+0x1fe5/0x3950 [ 913.671279][T32369] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.671310][T32369] ? __dev_queue_xmit+0x2b6/0x3950 [ 913.671340][T32369] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 913.671380][T32369] ? ref_tracker_free+0x693/0x840 [ 913.671406][T32369] ? __pfx_ref_tracker_free+0x10/0x10 [ 913.671434][T32369] ? do_raw_spin_lock+0x12b/0x2f0 [ 913.671475][T32369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 913.671505][T32369] ? lockdep_hardirqs_on+0x7a/0x110 [ 913.671526][T32369] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 913.671556][T32369] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 913.671609][T32369] netlink_unicast+0x75c/0x8e0 [ 913.671643][T32369] netlink_sendmsg+0x813/0xb40 [ 913.671677][T32369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.671705][T32369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.671735][T32369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 913.671766][T32369] ____sys_sendmsg+0x972/0x9f0 [ 913.671794][T32369] ? __might_fault+0xaf/0x130 [ 913.671827][T32369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.671860][T32369] ? import_iovec+0x73/0xa0 [ 913.671889][T32369] ___sys_sendmsg+0x2a5/0x360 [ 913.671910][T32369] ? __lock_acquire+0x6b5/0x2cf0 [ 913.671936][T32369] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.671997][T32369] ? __fget_files+0x2a/0x420 [ 913.672018][T32369] ? __fget_files+0x3a0/0x420 [ 913.672063][T32369] __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.672088][T32369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.672119][T32369] ? __pfx_ksys_write+0x10/0x10 [ 913.672155][T32369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.672176][T32369] do_syscall_64+0x174/0x580 [ 913.672195][T32369] ? trace_irq_disable+0x3b/0x140 [ 913.672221][T32369] ? clear_bhb_loop+0x40/0x90 [ 913.672244][T32369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.672264][T32369] RIP: 0033:0x7f7e3899ce59 [ 913.672283][T32369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.672299][T32369] RSP: 002b:00007f7e398d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.672321][T32369] RAX: ffffffffffffffda RBX: 00007f7e38c16090 RCX: 00007f7e3899ce59 [ 913.672335][T32369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 913.672347][T32369] RBP: 00007f7e398d3090 R08: 0000000000000000 R09: 0000000000000000 [ 913.672359][T32369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.672371][T32369] R13: 00007f7e38c16128 R14: 00007f7e38c16090 R15: 00007ffccd644868 [ 913.672406][T32369] [ 915.340880][T32416] FAULT_INJECTION: forcing a failure. [ 915.340880][T32416] name failslab, interval 1, probability 0, space 0, times 0 [ 915.372560][T32416] CPU: 1 UID: 0 PID: 32416 Comm: syz.3.6221 Not tainted syzkaller #0 PREEMPT(full) [ 915.372591][T32416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.372603][T32416] Call Trace: [ 915.372612][T32416] [ 915.372621][T32416] dump_stack_lvl+0xe8/0x150 [ 915.372652][T32416] should_fail_ex+0x412/0x560 [ 915.372679][T32416] should_failslab+0xa8/0x100 [ 915.372700][T32416] ? skb_clone+0x212/0x3a0 [ 915.372727][T32416] kmem_cache_alloc_noprof+0x87/0x650 [ 915.372753][T32416] ? apparmor_capable+0x126/0x170 [ 915.372780][T32416] skb_clone+0x212/0x3a0 [ 915.372801][T32416] ? nfnetlink_rcv+0x4b0/0x27b0 [ 915.372825][T32416] nfnetlink_rcv+0x4de/0x27b0 [ 915.372857][T32416] ? lockdep_hardirqs_on+0x7a/0x110 [ 915.372879][T32416] ? __local_bh_enable_ip+0xd0/0x130 [ 915.372898][T32416] ? __dev_queue_xmit+0x2b6/0x3950 [ 915.372923][T32416] ? __dev_queue_xmit+0x1fe5/0x3950 [ 915.372945][T32416] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 915.372974][T32416] ? __dev_queue_xmit+0x2b6/0x3950 [ 915.373003][T32416] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 915.373043][T32416] ? ref_tracker_free+0x693/0x840 [ 915.373069][T32416] ? __pfx_ref_tracker_free+0x10/0x10 [ 915.373120][T32416] ? skb_clone+0x246/0x3a0 [ 915.373147][T32416] ? __netlink_deliver_tap+0x807/0x850 [ 915.373170][T32416] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.373200][T32416] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.373222][T32416] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.373252][T32416] netlink_unicast+0x75c/0x8e0 [ 915.373286][T32416] netlink_sendmsg+0x813/0xb40 [ 915.373319][T32416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.373345][T32416] ? aa_sock_msg_perm+0xf1/0x1b0 [ 915.373374][T32416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 915.373404][T32416] ____sys_sendmsg+0x972/0x9f0 [ 915.373427][T32416] ? __might_fault+0xaf/0x130 [ 915.373459][T32416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.373493][T32416] ? import_iovec+0x73/0xa0 [ 915.373521][T32416] ___sys_sendmsg+0x2a5/0x360 [ 915.373541][T32416] ? __lock_acquire+0x6b5/0x2cf0 [ 915.373568][T32416] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.373631][T32416] ? __fget_files+0x2a/0x420 [ 915.373653][T32416] ? __fget_files+0x3a0/0x420 [ 915.373690][T32416] __x64_sys_sendmsg+0x1bd/0x2a0 [ 915.373716][T32416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.373750][T32416] ? __pfx_ksys_write+0x10/0x10 [ 915.373789][T32416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.373812][T32416] do_syscall_64+0x174/0x580 [ 915.373833][T32416] ? trace_irq_disable+0x3b/0x140 [ 915.373862][T32416] ? clear_bhb_loop+0x40/0x90 [ 915.373888][T32416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.373907][T32416] RIP: 0033:0x7f7e3899ce59 [ 915.373928][T32416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.373945][T32416] RSP: 002b:00007f7e398d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.373967][T32416] RAX: ffffffffffffffda RBX: 00007f7e38c16090 RCX: 00007f7e3899ce59 [ 915.373981][T32416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 915.373993][T32416] RBP: 00007f7e398d3090 R08: 0000000000000000 R09: 0000000000000000 [ 915.374005][T32416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.374016][T32416] R13: 00007f7e38c16128 R14: 00007f7e38c16090 R15: 00007ffccd644868 [ 915.374050][T32416] [ 915.934818][T32429] __nla_validate_parse: 5 callbacks suppressed [ 915.934838][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 915.954653][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 916.173885][T32431] tipc: Enabled bearer , priority 0 [ 916.227942][T32436] syzkaller0: entered promiscuous mode [ 916.230655][T32450] netlink: 'syz.2.6230': attribute type 1 has an invalid length. [ 916.251618][T32436] syzkaller0: entered allmulticast mode [ 916.395805][T32460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'. [ 916.406466][T32453] tipc: Resetting bearer [ 916.436954][T32460] vlan1: entered allmulticast mode [ 916.444512][T32460] macvtap0: entered allmulticast mode [ 916.450828][T32460] veth0_macvtap: entered allmulticast mode [ 916.458756][T32430] tipc: Resetting bearer [ 916.494068][T32430] tipc: Disabling bearer [ 916.505569][T32455] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6230'. [ 916.582031][T32464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6233'. [ 916.607121][T32450] syzkaller1: entered promiscuous mode [ 916.624862][T32450] syzkaller1: entered allmulticast mode [ 916.633948][T32464] netlink: 'syz.3.6233': attribute type 31 has an invalid length. [ 916.656666][T32466] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6234'. [ 916.840694][T32473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6236'. [ 916.862828][T32474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6236'. [ 916.996658][T32476] openvswitch: netlink: Flow actions attr not present in new flow. [ 917.062545][T32482] syzkaller0: entered promiscuous mode [ 917.076303][T32482] syzkaller0: entered allmulticast mode [ 917.091979][T32485] netlink: 'syz.3.6239': attribute type 1 has an invalid length. [ 917.114064][T32482] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6238'. [ 917.187662][T32493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6239'. [ 917.241155][T32485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 917.506802][T32497] bond3: entered promiscuous mode [ 917.523723][T32497] bond3: entered allmulticast mode [ 917.549365][T32505] mac80211_hwsim hwsim85 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 917.663258][T32514] xt_TCPMSS: Only works on TCP SYN packets [ 917.694817][T32518] netlink: 'syz.1.6250': attribute type 10 has an invalid length. [ 917.791870][T32514] bridge_slave_1: left allmulticast mode [ 917.800401][T32514] bridge_slave_1: left promiscuous mode [ 917.807111][T32514] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.819745][T32514] bridge_slave_0: left allmulticast mode [ 917.826430][T32514] bridge_slave_0: left promiscuous mode [ 917.834743][T32514] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.096063][T32536] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 918.188961][T32538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.327747][T32545] vlan4: entered promiscuous mode [ 919.262526][T32568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.918974][ T1654] block nbd1: Possible stuck request ffff8880280f5080: control (read@0,1024B). Runtime 120 seconds [ 920.036376][T32617] x_tables: duplicate underflow at hook 3 [ 920.164202][T32624] FAULT_INJECTION: forcing a failure. [ 920.164202][T32624] name failslab, interval 1, probability 0, space 0, times 0 [ 920.186324][T32624] CPU: 1 UID: 0 PID: 32624 Comm: syz.3.6270 Not tainted syzkaller #0 PREEMPT(full) [ 920.186354][T32624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.186367][T32624] Call Trace: [ 920.186375][T32624] [ 920.186384][T32624] dump_stack_lvl+0xe8/0x150 [ 920.186424][T32624] should_fail_ex+0x412/0x560 [ 920.186452][T32624] should_failslab+0xa8/0x100 [ 920.186474][T32624] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 920.186501][T32624] ? __kasan_kmalloc+0x93/0xb0 [ 920.186527][T32624] ? __request_module+0x2ec/0x630 [ 920.186549][T32624] ? __kmalloc_cache_noprof+0x31c/0x660 [ 920.186580][T32624] kstrdup+0x42/0x100 [ 920.186603][T32624] __request_module+0x2ec/0x630 [ 920.186635][T32624] ? __pfx___request_module+0x10/0x10 [ 920.186655][T32624] ? kasan_quarantine_put+0xbb/0x1f0 [ 920.186707][T32624] ? security_capable+0x7e/0x2c0 [ 920.186736][T32624] ? dev_load+0x21/0x1f0 [ 920.186752][T32624] dev_load+0x190/0x1f0 [ 920.186771][T32624] dev_ioctl+0x59f/0x1150 [ 920.186806][T32624] sock_do_ioctl+0x23e/0x320 [ 920.186837][T32624] ? __pfx_sock_do_ioctl+0x10/0x10 [ 920.186858][T32624] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 920.186905][T32624] sock_ioctl+0x5c6/0x7f0 [ 920.186934][T32624] ? __pfx_sock_ioctl+0x10/0x10 [ 920.186961][T32624] ? __fget_files+0x2a/0x420 [ 920.186984][T32624] ? __fget_files+0x3a0/0x420 [ 920.187017][T32624] ? __fget_files+0x2a/0x420 [ 920.187045][T32624] ? bpf_lsm_file_ioctl+0x9/0x20 [ 920.187073][T32624] ? __pfx_sock_ioctl+0x10/0x10 [ 920.187099][T32624] __se_sys_ioctl+0xfc/0x170 [ 920.187126][T32624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.187148][T32624] do_syscall_64+0x174/0x580 [ 920.187166][T32624] ? trace_irq_disable+0x3b/0x140 [ 920.187193][T32624] ? clear_bhb_loop+0x40/0x90 [ 920.187217][T32624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.187235][T32624] RIP: 0033:0x7f7e3899ce59 [ 920.187255][T32624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.187277][T32624] RSP: 002b:00007f7e398f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.187298][T32624] RAX: ffffffffffffffda RBX: 00007f7e38c15fa0 RCX: 00007f7e3899ce59 [ 920.187311][T32624] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000003 [ 920.187324][T32624] RBP: 00007f7e398f4090 R08: 0000000000000000 R09: 0000000000000000 [ 920.187335][T32624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.187346][T32624] R13: 00007f7e38c16038 R14: 00007f7e38c15fa0 R15: 00007ffccd644868 [ 920.187380][T32624] [ 920.540323][T32632] netlink: 'syz.0.6274': attribute type 1 has an invalid length. [ 920.596264][T32629] IPv6: sit7: Disabled Multicast RS [ 920.933170][T32642] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 921.001219][ T6731] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 921.006767][T32642] __nla_validate_parse: 10 callbacks suppressed [ 921.008145][T32642] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6276'. [ 921.249364][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6279'. [ 921.275515][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6279'. [ 921.275654][T20989] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.293844][T20989] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.303965][T20989] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.313969][T20989] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.554995][T32647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.556593][T32683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6284'. [ 921.795430][T32685] FAULT_INJECTION: forcing a failure. [ 921.795430][T32685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.832487][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.868140][T32685] CPU: 0 UID: 0 PID: 32685 Comm: syz.1.6285 Not tainted syzkaller #0 PREEMPT(full) [ 921.868167][T32685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.868177][T32685] Call Trace: [ 921.868185][T32685] [ 921.868193][T32685] dump_stack_lvl+0xe8/0x150 [ 921.868220][T32685] should_fail_ex+0x412/0x560 [ 921.868247][T32685] _copy_from_user+0x2d/0xb0 [ 921.868270][T32685] kstrtouint_from_user+0xd6/0x180 [ 921.868300][T32685] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 921.868338][T32685] proc_fail_nth_write+0x8e/0x210 [ 921.868362][T32685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 921.868391][T32685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 921.868415][T32685] vfs_write+0x29a/0xb90 [ 921.868451][T32685] ? __pfx_vfs_write+0x10/0x10 [ 921.868477][T32685] ? __fget_files+0x2a/0x420 [ 921.868504][T32685] ? __fget_files+0x3a0/0x420 [ 921.868523][T32685] ? __fget_files+0x2a/0x420 [ 921.868554][T32685] ksys_write+0x150/0x270 [ 921.868581][T32685] ? __pfx_ksys_write+0x10/0x10 [ 921.868604][T32685] ? __pfx_sock_ioctl+0x10/0x10 [ 921.868634][T32685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.868654][T32685] do_syscall_64+0x174/0x580 [ 921.868672][T32685] ? trace_irq_disable+0x3b/0x140 [ 921.868697][T32685] ? clear_bhb_loop+0x40/0x90 [ 921.868720][T32685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.868737][T32685] RIP: 0033:0x7f79f5b5d68e [ 921.868755][T32685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 921.868770][T32685] RSP: 002b:00007f79f6a99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.868790][T32685] RAX: ffffffffffffffda RBX: 00007f79f6a9a6c0 RCX: 00007f79f5b5d68e [ 921.868803][T32685] RDX: 0000000000000001 RSI: 00007f79f6a9a0a0 RDI: 0000000000000004 [ 921.868815][T32685] RBP: 00007f79f6a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 921.868826][T32685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.868837][T32685] R13: 00007f79f5e16038 R14: 00007f79f5e15fa0 R15: 00007fff6503ca18 [ 921.868871][T32685] [ 922.205426][T32699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 922.220618][T32699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 922.238744][T32699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 922.247591][T32699] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 922.255496][T32699] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 922.351974][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6289'. [ 922.414778][T32703] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 923.315175][T32757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.907293][ T316] veth0: entered promiscuous mode [ 924.078804][T32686] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.089085][T32686] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.097496][T32686] bridge_slave_0: entered allmulticast mode [ 924.106550][T32686] bridge_slave_0: entered promiscuous mode [ 924.187458][T32686] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.196466][T32686] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.204269][T32686] bridge_slave_1: entered allmulticast mode [ 924.213278][T32686] bridge_slave_1: entered promiscuous mode [ 924.235794][ T338] xt_hashlimit: size too large, truncated to 1048576 [ 924.316524][ T324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6308'. [ 924.325812][T21569] Bluetooth: hci4: command tx timeout [ 924.340565][ T340] netlink: 'syz.3.6311': attribute type 1 has an invalid length. [ 924.340911][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.373967][ T340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6311'. [ 924.453039][ T344] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6311'. [ 924.474511][ T332] bridge_slave_0 (unregistering): left allmulticast mode [ 924.490638][ T332] bridge_slave_0 (unregistering): left promiscuous mode [ 924.498596][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.510831][ T336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.557971][T32686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.570352][ T343] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6312'. [ 924.584941][ T346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6312'. [ 924.599030][ T308] veth0: left promiscuous mode [ 924.604984][T30568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.610985][T32686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.615400][T30568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.770734][T32686] team0: Port device team_slave_0 added [ 924.805458][T32686] team0: Port device team_slave_1 added [ 924.891484][T32686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.899084][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.926891][T32686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.944506][T32686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.963109][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.997484][T32686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.126964][ T362] IPv6: addrconf: prefix option has invalid lifetime [ 925.138708][ T358] bridge4: port 1(veth3) entered blocking state [ 925.145938][ T358] bridge4: port 1(veth3) entered disabled state [ 925.153631][ T358] veth3: entered allmulticast mode [ 925.162496][ T358] veth3: entered promiscuous mode [ 925.179856][ T356] bond0: (slave veth0_to_bond): Releasing active interface [ 925.190866][ T356] bridge4: port 2(veth0_to_bond) entered blocking state [ 925.199920][ T356] bridge4: port 2(veth0_to_bond) entered disabled state [ 925.207953][ T356] veth0_to_bond: entered allmulticast mode [ 925.217616][ T356] veth0_to_bond: entered promiscuous mode [ 925.296003][ T356] bridge4: port 3(veth5) entered blocking state [ 925.303779][ T356] bridge4: port 3(veth5) entered disabled state [ 925.311030][ T356] veth5: entered allmulticast mode [ 925.319352][ T356] veth5: entered promiscuous mode [ 925.356028][T32686] hsr_slave_0: entered promiscuous mode [ 925.383342][T32686] hsr_slave_1: entered promiscuous mode [ 925.391218][T32686] debugfs: 'hsr0' already exists in 'hsr' [ 925.401124][T32686] Cannot create hsr debugfs directory [ 925.722673][ T384] netlink: 'syz.3.6325': attribute type 32 has an invalid length. [ 926.060437][T32686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.075264][T32686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 926.150030][ T392] __nla_validate_parse: 11 callbacks suppressed [ 926.150058][ T392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'. [ 926.211032][ T392] vlan6: entered promiscuous mode [ 926.235529][ T392] geneve1: entered promiscuous mode [ 926.258885][ T392] vlan6: entered allmulticast mode [ 926.274028][ T392] geneve1: entered allmulticast mode [ 926.344153][ T395] bridge0: port 1(ipvlan3) entered blocking state [ 926.352827][ T395] bridge0: port 1(ipvlan3) entered disabled state [ 926.373112][ T395] ipvlan3: entered allmulticast mode [ 926.385800][ T395] bridge0: entered allmulticast mode [ 926.392678][T21569] Bluetooth: hci4: command tx timeout [ 926.407222][ T395] ipvlan3: left allmulticast mode [ 926.415128][ T395] bridge0: left allmulticast mode [ 926.511025][T32686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.559171][T32686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 926.786667][T32686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.821305][T32686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 926.926416][ T423] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6334'. [ 926.966664][ T423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6334'. [ 927.015285][ T428] netlink: 7916 bytes leftover after parsing attributes in process `syz.3.6335'. [ 927.027614][T32686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.048152][T32686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 927.679189][T32686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 928.100765][T32686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.339202][T32686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 928.360123][T32686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.369425][T32686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 928.383846][T32686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.435153][T32686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 928.471778][T32686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.480563][T21569] Bluetooth: hci4: command tx timeout [ 928.498059][ T473] netlink: 'syz.4.6348': attribute type 3 has an invalid length. [ 928.534826][ T473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6348'. [ 928.560890][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6348'. [ 928.581853][ T482] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6351'. [ 928.582724][ T473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6348'. [ 928.596168][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6351'. [ 928.791937][ T491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6352'. [ 928.884710][T32686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.937461][T32686] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.972030][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.979419][T20981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.025682][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.033294][T20981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.080895][ T501] netlink: 'syz.4.6354': attribute type 20 has an invalid length. [ 929.237479][ T507] netlink: 'syz.1.6356': attribute type 83 has an invalid length. [ 930.091516][T32686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.264448][ T546] bridge0: port 1(erspan0) entered blocking state [ 930.276619][ T546] bridge0: port 1(erspan0) entered disabled state [ 930.288741][ T546] erspan0: entered allmulticast mode [ 930.299850][ T546] erspan0: entered promiscuous mode [ 930.309711][ T546] vlan5: entered promiscuous mode [ 930.322477][ T546] geneve0: entered promiscuous mode [ 930.341828][ T546] bridge0: port 1(erspan0) entered blocking state [ 930.348727][ T546] bridge0: port 1(erspan0) entered forwarding state [ 930.439862][ T550] erspan0: left allmulticast mode [ 930.471730][ T550] erspan0: left promiscuous mode [ 930.480861][ T550] bridge0: port 1(erspan0) entered disabled state [ 930.513176][ T550] vlan5: left promiscuous mode [ 930.521684][ T550] geneve0: left promiscuous mode [ 930.552869][T21569] Bluetooth: hci4: command tx timeout [ 930.619373][T32686] veth0_vlan: entered promiscuous mode [ 930.641579][ T558] netlink: 'syz.3.6367': attribute type 3 has an invalid length. [ 930.665878][T32686] veth1_vlan: entered promiscuous mode [ 930.786499][T32686] veth0_macvtap: entered promiscuous mode [ 930.816322][T32686] veth1_macvtap: entered promiscuous mode [ 930.839346][ T567] sctp: [Deprecated]: syz.2.6370 (pid 567) Use of int in max_burst socket option. [ 930.839346][ T567] Use struct sctp_assoc_value instead [ 930.891632][ T567] netlink: 'syz.2.6370': attribute type 1 has an invalid length. [ 930.934554][T32686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.998402][T32686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.038209][ T570] veth1_to_team: entered promiscuous mode [ 931.060697][ T570] veth1_to_team: left promiscuous mode [ 931.131649][T20989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.172083][T20989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.196788][T20989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.260727][T20989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.725636][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.741946][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.759427][ T589] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20000 [ 931.976082][ T3390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.011496][ T3390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.154672][ T600] __nla_validate_parse: 10 callbacks suppressed [ 932.154696][ T600] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6379'. [ 932.231748][ T606] syzkaller1: entered promiscuous mode [ 932.253369][ T606] syzkaller1: entered allmulticast mode [ 933.061671][ T633] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6386'. [ 933.101898][T32699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.120751][T32699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.131731][T32699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.146051][T32699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.157370][T32699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.339086][ T631] syzkaller1: entered promiscuous mode [ 933.374996][ T631] syzkaller1: entered allmulticast mode [ 933.638038][ T30] audit: type=1804 audit(1780431950.523:24): pid=627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6385" name="/newroot/144/memory.events" dev="tmpfs" ino=755 res=1 errno=0 [ 933.726500][ T30] audit: type=1800 audit(1780431950.523:25): pid=627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6385" name="memory.events" dev="tmpfs" ino=755 res=0 errno=0 [ 933.780449][ T30] audit: type=1804 audit(1780431950.523:26): pid=627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6385" name="/newroot/144/memory.events" dev="tmpfs" ino=755 res=1 errno=0 [ 934.130125][T30568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 934.210559][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.223438][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.306906][ T666] vlan3: left allmulticast mode [ 934.334221][ T666] geneve0: left allmulticast mode [ 934.378257][ T666] vlan3: left promiscuous mode [ 934.397367][ T666] geneve0: left promiscuous mode [ 934.412708][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.447076][ T666] bridge0: port 3(vlan3) entered disabled state [ 934.458132][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.496751][ T666] bridge_slave_1: left allmulticast mode [ 934.522244][ T666] bridge_slave_1: left promiscuous mode [ 934.540883][ T666] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.571023][ T666] bridge_slave_0: left allmulticast mode [ 934.584140][ T666] bridge_slave_0: left promiscuous mode [ 934.600227][ T666] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.645552][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.656791][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 934.821289][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.870539][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 934.897405][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59835 - 0 [ 934.921494][T30568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37873 - 0 [ 934.945003][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6397'. [ 934.982666][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6397'. [ 935.145423][ T699] mac80211_hwsim hwsim90 wlan0: entered promiscuous mode [ 935.187805][ T699] mac80211_hwsim hwsim90 wlan0: entered allmulticast mode [ 935.200710][T21569] Bluetooth: hci2: command tx timeout [ 935.485981][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.538584][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 935.563105][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59835 - 0 [ 935.599310][T30568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37873 - 0 [ 935.736235][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.747846][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 935.759870][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59835 - 0 [ 935.771259][T30568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 37873 - 0 [ 935.819353][ T731] netlink: 'syz.4.6406': attribute type 1 has an invalid length. [ 935.912036][ T731] bond1: entered promiscuous mode [ 935.915383][ T736] netlink: 'syz.0.6407': attribute type 5 has an invalid length. [ 935.919345][ T731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.970111][ T737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.979582][ T737] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 935.990232][ T737] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 936.010599][ T737] bond1: (slave vti0): making interface the new active one [ 936.020099][ T737] vti0: entered promiscuous mode [ 936.035655][ T737] bond1: (slave vti0): Enslaving as an active interface with an up link [ 936.306051][ T753] netlink: 'syz.2.6411': attribute type 1 has an invalid length. [ 936.565070][T20981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 936.869558][ T6252] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 936.904325][ T778] netlink: 'syz.2.6415': attribute type 7 has an invalid length. [ 936.947398][ T6252] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 936.993575][T30568] vlan5: left allmulticast mode [ 937.011945][T30568] geneve0: left allmulticast mode [ 937.021522][T30568] bridge0: port 3(vlan5) entered disabled state [ 937.111885][T30568] dvmrp0: left allmulticast mode [ 937.123956][T30568] dvmrp8: left allmulticast mode [ 937.146858][ T792] netlink: 'syz.2.6420': attribute type 7 has an invalid length. [ 937.163909][ T792] netlink: 'syz.2.6420': attribute type 8 has an invalid length. [ 937.171755][ T792] __nla_validate_parse: 8 callbacks suppressed [ 937.171773][ T792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6420'. [ 937.242437][T30568] batman_adv: batadv0: Interface deactivated: vlan2 [ 937.272615][T21569] Bluetooth: hci2: command tx timeout [ 937.436380][T30568] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 937.587698][T30568] gretap0 (unregistering): left allmulticast mode [ 937.606424][T30568] batman_adv: batadv0: Removing interface: vlan2 [ 937.648936][T30568] bond4 (unregistering): (slave geneve2): Releasing active interface [ 937.763402][T30568] bond5 (unregistering): (slave bridge5): Releasing active interface [ 937.838493][T30568] .` (unregistering): (slave dummy0): Releasing backup interface [ 937.852039][T30568] .` (unregistering): Released all slaves [ 937.863918][T30568] bond1 (unregistering): Released all slaves [ 937.879639][T30568] bond2 (unregistering): Released all slaves [ 937.896054][T30568] bond3 (unregistering): (slave bond0): Releasing backup interface [ 937.906741][T30568] bond3 (unregistering): Released all slaves [ 937.931072][T30568] bond4 (unregistering): Released all slaves [ 937.947768][T30568] bond5 (unregistering): Released all slaves [ 937.964270][T30568] bond6 (unregistering): Released all slaves [ 937.989828][T30568] bond7 (unregistering): (slave veth3): Releasing active interface [ 938.001283][T30568] bond7 (unregistering): Released all slaves [ 938.017939][T30568] bond8 (unregistering): Released all slaves [ 938.035350][T30568] bond9 (unregistering): Released all slaves [ 938.057551][T30568] bond0 (unregistering): Released all slaves [ 938.071793][T30568] bond10 (unregistering): Released all slaves [ 938.086705][T30568] bond11 (unregistering): Released all slaves [ 938.101329][ T6252] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 938.173394][ T792] gretap0: entered promiscuous mode [ 938.197179][ T792] gretap0: left promiscuous mode [ 938.371162][ T804] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6423'. [ 938.404282][ T804] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 938.508451][T30568] 5nè‹Ò: left promiscuous mode [ 938.631459][ T30] audit: type=1800 audit(1780431955.513:27): pid=814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6426" name="memory.events" dev="tmpfs" ino=291 res=0 errno=0 [ 938.672766][ T30] audit: type=1804 audit(1780431955.513:28): pid=814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6426" name="/newroot/53/memory.events" dev="tmpfs" ino=291 res=1 errno=0 [ 938.695101][T30568] : left promiscuous mode [ 938.941898][T30568] tipc: Left network mode [ 938.968872][T30568] IPVS: stopping master sync thread 22586 ... [ 939.237845][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.260305][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.295501][ T634] bridge_slave_0: entered allmulticast mode [ 939.315263][ T634] bridge_slave_0: entered promiscuous mode [ 939.338913][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.353787][T21569] Bluetooth: hci2: command tx timeout [ 939.362947][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.379287][ T634] bridge_slave_1: entered allmulticast mode [ 939.399474][ T634] bridge_slave_1: entered promiscuous mode [ 939.686047][ T853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6432'. [ 939.714343][ T634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.783786][ T634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.894615][ T846] netlink: 'syz.2.6432': attribute type 15 has an invalid length. [ 940.115395][ T634] team0: Port device team_slave_0 added [ 940.165064][ T634] team0: Port device team_slave_1 added [ 940.450924][ T634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.481287][ T634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.559858][ T634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.708904][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 940.717539][ T889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 940.733554][ T634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.762770][ T634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.826816][ T634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.981589][ T889] hsr_slave_0: left promiscuous mode [ 940.996337][ T889] hsr_slave_1: left promiscuous mode [ 941.368378][ T899] netlink: 'syz.4.6441': attribute type 1 has an invalid length. [ 941.373809][ T901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6443'. [ 941.381868][ T634] hsr_slave_0: entered promiscuous mode [ 941.405675][ T634] hsr_slave_1: entered promiscuous mode [ 941.433608][T21569] Bluetooth: hci2: command tx timeout [ 941.498266][T30568] hsr_slave_0: left promiscuous mode [ 941.525038][T30568] hsr_slave_1: left promiscuous mode [ 942.256134][ T899] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 942.284696][ T908] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 942.308368][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 942.594520][ T946] FAULT_INJECTION: forcing a failure. [ 942.594520][ T946] name failslab, interval 1, probability 0, space 0, times 0 [ 942.642764][ T940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6447'. [ 942.669012][ T946] CPU: 1 UID: 0 PID: 946 Comm: syz.4.6446 Not tainted syzkaller #0 PREEMPT(full) [ 942.669041][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.669052][ T946] Call Trace: [ 942.669061][ T946] [ 942.669070][ T946] dump_stack_lvl+0xe8/0x150 [ 942.669099][ T946] should_fail_ex+0x412/0x560 [ 942.669128][ T946] should_failslab+0xa8/0x100 [ 942.669153][ T946] __kvmalloc_node_noprof+0x178/0x8a0 [ 942.669183][ T946] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 942.669219][ T946] __nf_hook_entries_try_shrink+0x328/0x700 [ 942.669252][ T946] ? net_generic+0x1e/0x240 [ 942.669282][ T946] nf_hook_entries_delete_raw+0x14e/0x220 [ 942.669314][ T946] nf_nat_unregister_fn+0x208/0x3b0 [ 942.669340][ T946] ? __pfx_nf_nat_ipv6_unregister_fn+0x10/0x10 [ 942.669362][ T946] nf_tables_commit+0x61f5/0xa7c0 [ 942.669400][ T946] ? nft_pernet+0x23/0x240 [ 942.669419][ T946] ? nft_pernet+0x23/0x240 [ 942.669449][ T946] ? nft_pernet+0x23/0x240 [ 942.669473][ T946] ? __pfx_nf_tables_commit+0x10/0x10 [ 942.669501][ T946] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 942.669527][ T946] ? nft_flush_table+0x1749/0x18e0 [ 942.669554][ T946] ? nft_pernet+0x23/0x240 [ 942.669580][ T946] ? nf_tables_deltable+0x678/0xe80 [ 942.669620][ T946] ? __pfx_nf_tables_deltable+0x10/0x10 [ 942.669671][ T946] nfnetlink_rcv+0x1c19/0x27b0 [ 942.669748][ T946] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 942.669789][ T946] ? ref_tracker_free+0x693/0x840 [ 942.669848][ T946] ? __netlink_deliver_tap+0x807/0x850 [ 942.669884][ T946] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.669906][ T946] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.669936][ T946] netlink_unicast+0x75c/0x8e0 [ 942.669967][ T946] netlink_sendmsg+0x813/0xb40 [ 942.670003][ T946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.670036][ T946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 942.670068][ T946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 942.670100][ T946] ____sys_sendmsg+0x972/0x9f0 [ 942.670124][ T946] ? __might_fault+0xaf/0x130 [ 942.670158][ T946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.670193][ T946] ? import_iovec+0x73/0xa0 [ 942.670222][ T946] ___sys_sendmsg+0x2a5/0x360 [ 942.670244][ T946] ? __lock_acquire+0x6b5/0x2cf0 [ 942.670271][ T946] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.670354][ T946] ? __fget_files+0x2a/0x420 [ 942.670377][ T946] ? __fget_files+0x3a0/0x420 [ 942.670414][ T946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 942.670440][ T946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.670474][ T946] ? __pfx_ksys_write+0x10/0x10 [ 942.670513][ T946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.670535][ T946] do_syscall_64+0x174/0x580 [ 942.670554][ T946] ? trace_irq_disable+0x3b/0x140 [ 942.670582][ T946] ? clear_bhb_loop+0x40/0x90 [ 942.670607][ T946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.670626][ T946] RIP: 0033:0x7f032e19ce59 [ 942.670644][ T946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.670661][ T946] RSP: 002b:00007f032f03e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.670681][ T946] RAX: ffffffffffffffda RBX: 00007f032e416090 RCX: 00007f032e19ce59 [ 942.670695][ T946] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 942.670715][ T946] RBP: 00007f032f03e090 R08: 0000000000000000 R09: 0000000000000000 [ 942.670728][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 942.670739][ T946] R13: 00007f032e416128 R14: 00007f032e416090 R15: 00007ffd89621318 [ 942.670775][ T946] [ 943.146172][ T961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6449'. [ 943.233973][ T966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6449'. [ 943.469506][T30568] IPVS: stop unused estimator thread 0... [ 943.481800][ T961] netlink: 'syz.3.6449': attribute type 1 has an invalid length. [ 943.538762][ T634] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 943.884624][ T990] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6453'. [ 943.975473][ T634] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 944.410885][ T634] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 944.586153][ T634] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 944.665618][ T1011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6459'. [ 944.686947][ T1011] netlink: 'syz.2.6459': attribute type 11 has an invalid length. [ 944.724625][ T1012] syzkaller0: entered promiscuous mode [ 944.740753][ T1012] syzkaller0: entered allmulticast mode [ 945.680652][ T1052] tipc: Enabling of bearer rejected, already enabled [ 945.720487][ T634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.774511][ T634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.803205][ T634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.865441][ T634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.905919][ T1048] syzkaller0: entered promiscuous mode [ 945.945563][ T1048] syzkaller0: entered allmulticast mode [ 945.993119][ T634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 946.036160][ T634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.081469][ T1057] tipc: Resetting bearer [ 946.161972][ T634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 946.235470][ T634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.501369][ T634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.573537][ T634] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.607729][T30568] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.615849][T30568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.661611][T30568] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.669107][T30568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.793857][ T1096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6469'. [ 946.819942][ T634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.098961][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6470'. [ 947.198123][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6470'. [ 947.655799][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6474'. [ 948.191654][ T1137] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6477'. [ 948.246145][ T1137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6477'. [ 948.707269][ T1155] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6479'. [ 948.712484][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'. [ 948.739996][ T1155] netlink: ct family unspecified [ 948.748859][ T634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.947299][ T634] veth0_vlan: entered promiscuous mode [ 949.054137][ T634] veth1_vlan: entered promiscuous mode [ 949.144491][ T1171] syzkaller0: entered promiscuous mode [ 949.154432][ T1171] syzkaller0: entered allmulticast mode [ 949.386487][ T634] veth0_macvtap: entered promiscuous mode [ 949.398224][ T1183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6487'. [ 949.441590][ T634] veth1_macvtap: entered promiscuous mode [ 949.455731][ T1181] syz_tun: entered promiscuous mode [ 949.547747][ T634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.635891][ T634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.717375][T20981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.747068][T20981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.875660][T20981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.911241][T20981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.997097][ T1654] block nbd1: Possible stuck request ffff8880280f5080: control (read@0,1024B). Runtime 150 seconds [ 951.417301][ T1224] netlink: 'syz.2.6493': attribute type 1 has an invalid length. [ 951.428446][ T1224] netlink: 'syz.2.6493': attribute type 1 has an invalid length. [ 951.742338][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.782285][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.797521][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'. [ 951.827594][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'. [ 951.880830][T20981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.902315][T20981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.071849][ T1235] team0: entered allmulticast mode [ 952.094721][ T1235] team_slave_0: entered allmulticast mode [ 952.115410][ T1235] team_slave_1: entered allmulticast mode [ 952.180189][ T1235] team0: left allmulticast mode [ 952.191610][ T1235] team_slave_0: left allmulticast mode [ 952.207394][ T1235] team_slave_1: left allmulticast mode [ 952.282945][ T1248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6499'. [ 952.502707][ T1259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 952.728416][T32699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 952.748902][T32699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 952.758862][T32699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 952.774637][T32699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 952.791541][T32699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 952.859711][ T1272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 952.903575][ T1272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 953.210881][ T1282] syzkaller0: entered promiscuous mode [ 953.238780][ T1282] syzkaller0: entered allmulticast mode [ 953.370923][ T1285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6510'. [ 953.423246][ T1287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6511'. [ 953.685741][ T1302] netlink: 'syz.3.6512': attribute type 10 has an invalid length. [ 953.729607][ T1302] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6512'. [ 953.926648][ T1312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6514'. [ 954.007585][ T1313] xt_hashlimit: max too large, truncated to 1048576 [ 954.042552][ T1318] netlink: 'syz.0.6515': attribute type 1 has an invalid length. [ 954.146955][ T1318] bond1: entered promiscuous mode [ 954.160826][ T1318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.275955][ T1322] bond1: (slave bridge2): making interface the new active one [ 954.276335][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6518'. [ 954.293611][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6518'. [ 954.294590][ T1322] bridge2: entered promiscuous mode [ 954.315470][ T1322] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 954.333031][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 954.347372][ T1323] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 954.360364][ T1323] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 954.373315][ T5776] IPVS: starting estimator thread 0... [ 954.399522][ T1333] netlink: 'syz.4.6519': attribute type 1 has an invalid length. [ 954.418426][ T1330] vxcan0: entered allmulticast mode [ 954.480095][ T1329] IPVS: using max 27 ests per chain, 64800 per kthread [ 954.496068][ T1335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.587971][ T1333] bond2: (slave bridge0): Enslaving as a backup interface with an up link [ 954.622312][ T3390] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 954.663757][ T1335] bond2: (slave bridge1): Enslaving as a backup interface with a down link [ 954.778655][ T1348] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6522'. [ 954.822344][T20981] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 954.873962][T21569] Bluetooth: hci1: command tx timeout [ 955.020260][ T1353] netlink: 'syz.4.6523': attribute type 30 has an invalid length. [ 955.138555][ T1353] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 955.416093][ T1353] bond3 (unregistering): Released all slaves [ 955.470883][ T1364] bridge0: port 3(syz_tun) entered blocking state [ 955.482533][ T1364] bridge0: port 3(syz_tun) entered disabled state [ 955.523540][ T1364] syz_tun: entered allmulticast mode [ 955.545137][ T1364] bridge0: port 3(syz_tun) entered blocking state [ 955.551745][ T1364] bridge0: port 3(syz_tun) entered forwarding state [ 955.831005][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.839979][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.848282][ T1264] bridge_slave_0: entered allmulticast mode [ 955.857710][ T1264] bridge_slave_0: entered promiscuous mode [ 955.867972][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.877383][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.885327][ T1264] bridge_slave_1: entered allmulticast mode [ 955.896001][ T1264] bridge_slave_1: entered promiscuous mode [ 956.001521][ T1264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.019838][ T1387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.035173][ T1264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.091307][ T1395] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 956.143020][ T1264] team0: Port device team_slave_0 added [ 956.153477][ T1264] team0: Port device team_slave_1 added [ 956.239780][ T1264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.276207][ T1264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.304874][ T1264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.377760][ T1264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.396422][ T1264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.451185][ T1264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.768657][ T1264] hsr_slave_0: entered promiscuous mode [ 956.784610][ T1264] hsr_slave_1: entered promiscuous mode [ 956.793859][ T1264] debugfs: 'hsr0' already exists in 'hsr' [ 956.808671][ T1264] Cannot create hsr debugfs directory [ 956.821104][ T1432] netlink: 'syz.4.6544': attribute type 21 has an invalid length. [ 956.953146][T21569] Bluetooth: hci1: command tx timeout [ 957.054480][ T1440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 957.061786][ T1440] IPv6: NLM_F_CREATE should be set when creating new route [ 957.069202][ T1440] IPv6: NLM_F_CREATE should be set when creating new route [ 957.278061][ T1264] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.290375][ T1264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.301569][ T1264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.415355][ T1264] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.426258][ T1264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.437908][ T1264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.465856][ T1447] syzkaller0: entered promiscuous mode [ 957.473611][ T1447] syzkaller0: entered allmulticast mode [ 957.481515][ T1452] tipc: Started in network mode [ 957.494135][ T1452] tipc: Node identity 1a9e0011f7e7, cluster identity 4711 [ 957.514464][ T1452] tipc: Enabled bearer , priority 0 [ 957.548993][ T1446] tipc: Resetting bearer [ 957.579850][ T1446] tipc: Disabling bearer [ 957.593736][ T1264] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.605378][ T1264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.617295][ T1264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.769439][ T1264] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.779768][ T1264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.792860][ T1264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 958.002092][ T1473] __nla_validate_parse: 20 callbacks suppressed [ 958.022620][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 958.240239][ T1475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6555'. [ 959.032438][T21569] Bluetooth: hci1: command tx timeout [ 960.535221][ T1457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.570603][ T1264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 960.609617][ T1264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.648608][ T1264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 960.673957][ T1264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.693979][ T1264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 960.739308][ T1264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.750510][ T1264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 960.763648][ T1264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.116500][T21569] Bluetooth: hci1: command tx timeout [ 961.158311][ T1264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.197337][ T1264] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.249045][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.256334][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.264365][ T1525] netlink: 'syz.0.6566': attribute type 5 has an invalid length. [ 961.298872][ T1525] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6566'. [ 961.343906][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.351154][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.411813][ T1531] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6567'. [ 961.440009][ T1531] netlink: 'syz.4.6567': attribute type 10 has an invalid length. [ 961.471674][ T1531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6567'. [ 962.082183][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6571'. [ 962.956166][ T1594] vlan2: entered promiscuous mode [ 962.976380][ T1594] bridge0: entered promiscuous mode [ 963.265524][ T1264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.368387][ T1615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6586'. [ 963.404949][ T1615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6586'. [ 963.447725][ T1264] veth0_vlan: entered promiscuous mode [ 963.490595][ T1264] veth1_vlan: entered promiscuous mode [ 963.617390][ T1264] veth0_macvtap: entered promiscuous mode [ 963.641319][ T1264] veth1_macvtap: entered promiscuous mode [ 963.823401][ T1635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6591'. [ 963.858367][ T1264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.924317][ T1264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.968961][ T6252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.989637][ T6252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.026971][ T6252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.064150][ T6252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.965120][ T1643] bridge0: port 3(syz_tun) entered disabled state [ 964.997740][ T1643] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.005342][ T1643] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.309625][ T1643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.345793][ T1643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.740410][T20981] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.777971][ T6252] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.812461][ T6252] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.833721][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.908268][ T1676] syzkaller1: entered promiscuous mode [ 965.926388][ T1676] syzkaller1: entered allmulticast mode [ 965.950309][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.969448][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.990265][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.017219][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.027371][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.038437][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.048000][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.059688][ T1682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6599'. [ 966.240552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.257530][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.496784][ T1697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 966.915896][ T1728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6609'. [ 966.943097][ T1702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.172395][ T1702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.354176][ T1702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.393781][ T1740] macvtap1: entered promiscuous mode [ 967.399236][ T1740] bridge0: entered promiscuous mode [ 967.407826][ T1740] bridge0: port 4(macvtap1) entered blocking state [ 967.414664][ T1740] bridge0: port 4(macvtap1) entered disabled state [ 967.421611][ T1740] macvtap1: entered allmulticast mode [ 967.427343][ T1740] bridge0: entered allmulticast mode [ 967.448456][ T1740] macvtap1: left allmulticast mode [ 967.456740][ T1740] bridge0: left allmulticast mode [ 967.465421][ T1740] bridge0: left promiscuous mode [ 967.564397][ T1702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.820099][ T6731] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.892020][ T6731] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.938118][T32699] block nbd4: Receive control failed (result -32) [ 967.945611][T21569] block nbd4: Receive control failed (result -32) [ 968.069728][ T6731] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.174877][ T1763] netlink: 'syz.1.6618': attribute type 1 has an invalid length. [ 968.200512][T20981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.422600][ T1780] __nla_validate_parse: 2 callbacks suppressed [ 968.422623][ T1780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6623'. [ 968.425403][ T1777] : entered promiscuous mode [ 968.430167][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6625'. [ 968.834864][ T1797] netlink: 209 bytes leftover after parsing attributes in process `syz.3.6630'. [ 969.474398][ T1810] syzkaller0: entered promiscuous mode [ 969.486141][ T1810] syzkaller0: entered allmulticast mode [ 969.550177][ T1810] tipc: Started in network mode [ 969.582873][ T1810] tipc: Node identity 2af6d9efde9f, cluster identity 4711 [ 969.633950][ T1810] tipc: Enabled bearer , priority 0 [ 969.719858][ T1814] syzkaller0: entered promiscuous mode [ 969.771259][ T1814] syzkaller0: entered allmulticast mode [ 969.926783][ T1816] tipc: Started in network mode [ 969.941842][ T1816] tipc: Node identity 3ad856c619bf, cluster identity 4711 [ 969.969040][ T1846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6638'. [ 969.971269][ T1816] tipc: Enabled bearer , priority 0 [ 969.996076][ T1846] netlink: 'syz.4.6638': attribute type 7 has an invalid length. [ 970.006584][ T1846] netlink: 'syz.4.6638': attribute type 8 has an invalid length. [ 970.014933][ T1810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6633'. [ 970.037148][ T1809] tipc: Resetting bearer [ 970.053334][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6638'. [ 970.124629][ T1809] tipc: Disabling bearer [ 970.162925][ T1846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6638'. [ 970.178660][ T1848] bond4: option arp_all_targets: invalid value (1819701495) [ 970.193333][ T1848] bond4 (unregistering): Released all slaves [ 970.226169][ T1816] tipc: Resetting bearer [ 970.320846][ T1816] tipc: Disabling bearer [ 970.649018][ T1862] netlink: 'syz.4.6644': attribute type 15 has an invalid length. [ 970.670854][ T1862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6644'. [ 970.697082][ T1862] netlink: 'syz.4.6644': attribute type 15 has an invalid length. [ 970.730113][ T1862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6644'. [ 970.828402][ T1862] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 971.301143][ T1876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 971.561714][ T1888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6647'. [ 972.300732][ T1921] vlan2: entered promiscuous mode [ 972.313764][ T1921] bridge0: entered promiscuous mode [ 972.441135][ T1917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 972.546306][ T1917] bond5 (unregistering): Released all slaves [ 973.196554][ T1938] syzkaller0: entered promiscuous mode [ 973.213217][ T1938] syzkaller0: entered allmulticast mode [ 973.233967][ T1940] syzkaller1: entered promiscuous mode [ 973.239733][ T1940] syzkaller1: entered allmulticast mode [ 973.545159][ T1960] __nla_validate_parse: 5 callbacks suppressed [ 973.545180][ T1960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6665'. [ 973.788541][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6670'. [ 974.069348][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6673'. [ 974.081038][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6673'. [ 974.281019][ T1995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6675'. [ 974.320425][ T5762] IPVS: starting estimator thread 0... [ 974.445049][ T2003] IPVS: using max 29 ests per chain, 69600 per kthread [ 974.456527][ T2009] netlink: 'syz.1.6679': attribute type 6 has an invalid length. [ 974.519755][ T2009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6679'. [ 974.586354][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6680'. [ 974.663368][ T2018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6682'. [ 974.903104][ T2031] netlink: 'syz.0.6683': attribute type 10 has an invalid length. [ 974.939588][ T2031] syz_tun: left allmulticast mode [ 974.949279][ T2031] bridge0: port 3(syz_tun) entered disabled state [ 974.996207][ T2031] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 975.052527][ T2036] tipc: Enabled bearer , priority 0 [ 975.063620][ T2035] syzkaller0: entered promiscuous mode [ 975.070647][ T2035] syzkaller0: entered allmulticast mode [ 975.078695][ T2041] tipc: Enabling of bearer rejected, already enabled [ 975.197611][ T2042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6688'. [ 975.222669][ T2036] tipc: Resetting bearer [ 975.317241][ T2036] tipc: Disabling bearer [ 975.335915][ T2051] netlink: 'syz.2.6690': attribute type 1 has an invalid length. [ 975.346549][ T2051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6690'. [ 975.369908][ T2044] bond5: entered promiscuous mode [ 975.377089][ T2044] bond5: entered allmulticast mode [ 975.383486][ T2044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 975.393923][ T2049] netlink: 'syz.0.6689': attribute type 4 has an invalid length. [ 975.445392][ T2056] netlink: 'syz.0.6689': attribute type 4 has an invalid length. [ 975.776569][ T2070] netlink: 'syz.1.6695': attribute type 1 has an invalid length. [ 975.891261][ T2070] bond1: entered promiscuous mode [ 975.905402][ T2070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.929352][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 975.971900][ T2070] bond1: (slave bridge1): making interface the new active one [ 975.980573][ T2070] bridge1: entered promiscuous mode [ 975.988978][ T2070] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 976.031988][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 976.091256][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 976.770232][ T2106] netlink: 'syz.0.6706': attribute type 1 has an invalid length. [ 976.844652][T24416] xfrm0 speed is unknown, defaulting to 1000 [ 976.863160][ T2081] infiniband syz0: set active [ 976.879510][ T2081] infiniband syz0: added xfrm0 [ 976.907084][ T2081] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 976.925474][ T2081] infiniband syz0: Couldn't open port 1 [ 976.967023][ T2081] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 976.967175][T30567] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.987583][ T2081] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 976.998387][T30567] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.018797][ T2081] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 977.061389][T30567] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.089034][T30567] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.101390][ T2081] RDS/IB: syz0: added [ 977.109355][ T2081] smc: adding ib device syz0 with port count 1 [ 977.119012][ T2121] tipc: Enabled bearer , priority 0 [ 977.138772][ T2121] syzkaller0: entered promiscuous mode [ 977.145934][ T2081] smc: ib device syz0 port 1 has no pnetid [ 977.163916][ T2121] syzkaller0: entered allmulticast mode [ 977.179504][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 977.217772][T24318] xfrm0 speed is unknown, defaulting to 1000 [ 977.238757][ T2121] tipc: Resetting bearer [ 977.266776][ T2118] tipc: Resetting bearer [ 977.313606][ T2118] tipc: Disabling bearer [ 977.628013][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 977.819471][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 977.960294][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.105478][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.261152][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.407862][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.557605][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.704254][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 978.857301][ T2081] xfrm0 speed is unknown, defaulting to 1000 [ 980.074439][ T1654] block nbd1: Possible stuck request ffff8880280f5080: control (read@0,1024B). Runtime 180 seconds [ 982.016351][ T5003] udevd[5003]: worker [27622] /devices/virtual/block/nbd1 timeout; kill it [ 982.025742][ T5003] udevd[5003]: seq 42246 '/devices/virtual/block/nbd1' killed [ 992.009042][ T2139] __nla_validate_parse: 11 callbacks suppressed [ 992.009065][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6719'. [ 992.056060][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6719'. [ 992.067939][ T2137] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6716'. [ 992.301606][ T2150] netlink: 'syz.1.6721': attribute type 1 has an invalid length. [ 992.355503][ T2150] netlink: 'syz.1.6721': attribute type 1 has an invalid length. [ 992.411986][ T2156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6721'. [ 992.517628][ T2161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 992.616322][ T2173] tipc: Enabled bearer , priority 0 [ 992.629799][ T2173] syzkaller0: entered promiscuous mode [ 992.643677][ T2173] syzkaller0: entered allmulticast mode [ 992.660868][ T2173] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 992.756337][ T2173] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 992.786128][ T2173] tipc: Resetting bearer [ 992.810008][ T2173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6728'. [ 992.831552][ T2173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6728'. [ 992.876802][ T2173] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6728'. [ 992.892491][ T2173] netlink: 'syz.0.6728': attribute type 2 has an invalid length. [ 992.910944][ T2173] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6728'. [ 992.957850][ T2172] tipc: Resetting bearer [ 992.993069][ T2184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6731'. [ 993.058567][ T2172] tipc: Disabling bearer [ 993.098974][ T2188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6732'. [ 993.179364][ T2178] Bluetooth: MGMT ver 1.23 [ 993.192841][ T2178] Bluetooth: hci1: too big key_count value 29096 [ 993.756214][ T2213] xfrm0 speed is unknown, defaulting to 1000 [ 994.230940][ T2235] xt_hashlimit: size too large, truncated to 1048576 [ 994.984525][ T2265] netlink: 'syz.1.6752': attribute type 1 has an invalid length. [ 995.007350][ T2265] netlink: 'syz.1.6752': attribute type 1 has an invalid length. [ 995.658043][ T2284] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 995.688532][ T2284] bond2: (slave lo): Enslaving as an active interface with an up link [ 995.700895][ T2284] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 995.799993][ T30] audit: type=1800 audit(1780432012.683:29): pid=2293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6763" name=20 dev="tmpfs" ino=1161 res=0 errno=0 [ 996.168686][ T2310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 997.166701][ T2334] openvswitch: netlink: Flow actions attr not present in new flow. [ 997.378919][ T2345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.391735][ T2347] __nla_validate_parse: 10 callbacks suppressed [ 997.391760][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6780'. [ 997.459202][ T2347] gretap1: entered allmulticast mode [ 997.480071][ T2350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6781'. [ 997.576179][ T2360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 997.583540][ T2360] IPv6: NLM_F_CREATE should be set when creating new route [ 997.590833][ T2360] IPv6: NLM_F_CREATE should be set when creating new route [ 997.644508][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6782'. [ 997.709664][ T2368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6785'. [ 997.760875][ T2368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6785'. [ 998.697498][ T2415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6798'. [ 999.195003][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6798'. [ 999.683519][ T2463] netlink: 'syz.0.6802': attribute type 32 has an invalid length. [ 999.831832][ T3282] bond11 (unregistering): (slave geneve2): Releasing active interface [ 999.840774][ T3282] geneve2 (unregistering): left allmulticast mode [ 999.931251][ T3282] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 999.944695][ T3282] bridge3 (unregistering): left promiscuous mode [ 999.951348][ T3282] bridge3 (unregistering): left allmulticast mode [ 999.989908][ T3282] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 1000.022327][ T3282] bridge4 (unregistering): left promiscuous mode [ 1000.081760][ T3282]  (unregistering): Released all slaves [ 1000.112718][ T3282] bond1 (unregistering): Released all slaves [ 1000.170169][ T3282] bond2 (unregistering): Released all slaves [ 1000.208967][ T3282] bond3 (unregistering): Released all slaves [ 1000.244287][ T3282] bond4 (unregistering): (slave veth5): Releasing backup interface [ 1000.252509][ T3282] veth5: left promiscuous mode [ 1000.259390][ T3282] bond4 (unregistering): Released all slaves [ 1000.286663][ T3282] bond5 (unregistering): Released all slaves [ 1000.313618][ T3282] bond6 (unregistering): Released all slaves [ 1000.331168][ T3282] bond7 (unregistering): Released all slaves [ 1000.357102][ T3282] bond8 (unregistering): (slave lo): Releasing backup interface [ 1000.365546][ T3282] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1000.379599][ T3282] bond8 (unregistering): Released all slaves [ 1000.396411][ T3282] bond9 (unregistering): Released all slaves [ 1000.435141][ T3282] bond0 (unregistering): Released all slaves [ 1000.457401][ T3282] bond10 (unregistering): Released all slaves [ 1000.477662][ T3282] bond11 (unregistering): Released all slaves [ 1000.526081][ T2454] tipc: Enabled bearer , priority 10 [ 1000.735440][ T3282] tipc: Disabling bearer [ 1000.760597][ T3282] tipc: Left network mode [ 1000.915861][ T2502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1000.991329][ T2502] tipc: Enabling of bearer rejected, already enabled [ 1001.303258][ T2510] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1001.336324][ T2510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1001.371514][ T2510] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1001.410971][ T2510] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1001.501679][ T2539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1001.869570][ T2536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1002.177758][ T2539] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1002.192064][ T6871] tipc: Node number set to 4100577775 [ 1002.500515][ T2548] ip6gre1: entered promiscuous mode [ 1002.508817][ T2548] ip6gre1: entered allmulticast mode [ 1002.871423][ T2569] __nla_validate_parse: 1 callbacks suppressed [ 1002.871455][ T2569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'. [ 1003.093827][ T2572] ip6t_srh: unknown srh invflags 4000 [ 1003.445481][ T2574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6820'. [ 1003.729810][ T2611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6826'. [ 1004.268087][ T2631] netlink: 'syz.0.6828': attribute type 12 has an invalid length. [ 1004.296036][ T2637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1004.313934][ T2637] netlink: 'syz.4.6831': attribute type 9 has an invalid length. [ 1004.377771][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6830'. [ 1004.429365][ T2643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6832'. [ 1004.468295][ T2645] netlink: 'syz.2.6833': attribute type 6 has an invalid length. [ 1004.483693][ T2632] gretap0: entered promiscuous mode [ 1004.492811][ T2645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6833'. [ 1004.505752][ T2632] macvlan0: entered allmulticast mode [ 1004.525806][ T2632] gretap0: entered allmulticast mode [ 1004.953278][ T2650] block nbd6: server does not support multiple connections per device. [ 1005.061559][ T2650] block nbd6: shutting down sockets [ 1005.547241][ T3282] [ 1005.549642][ T3282] ====================================================== [ 1005.556765][ T3282] WARNING: possible circular locking dependency detected [ 1005.563790][ T3282] syzkaller #0 Not tainted [ 1005.568220][ T3282] ------------------------------------------------------ [ 1005.575405][ T3282] kworker/u8:8/3282 is trying to acquire lock: [ 1005.581560][ T3282] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1005.592100][ T3282] [ 1005.592100][ T3282] but task is already holding lock: [ 1005.599650][ T3282] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 1005.609247][ T3282] [ 1005.609247][ T3282] which lock already depends on the new lock. [ 1005.609247][ T3282] [ 1005.619831][ T3282] [ 1005.619831][ T3282] the existing dependency chain (in reverse order) is: [ 1005.628949][ T3282] [ 1005.628949][ T3282] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1005.637235][ T3282] down_write+0x96/0x200 [ 1005.642033][ T3282] kernfs_add_one+0x41/0x5c0 [ 1005.647195][ T3282] kernfs_create_dir_ns+0xde/0x130 [ 1005.652847][ T3282] internal_create_group+0x425/0x1190 [ 1005.658755][ T3282] cpuhp_invoke_callback+0x445/0x860 [ 1005.664568][ T3282] cpuhp_issue_call+0x430/0x7a0 [ 1005.669941][ T3282] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1005.676541][ T3282] __cpuhp_setup_state+0x3f/0x60 [ 1005.682011][ T3282] do_one_initcall+0x250/0x870 [ 1005.687398][ T3282] do_initcall_level+0x104/0x190 [ 1005.692952][ T3282] do_initcalls+0x59/0xa0 [ 1005.697891][ T3282] kernel_init_freeable+0x2a6/0x3e0 [ 1005.703613][ T3282] kernel_init+0x1d/0x1d0 [ 1005.708557][ T3282] ret_from_fork+0x514/0xb70 [ 1005.713664][ T3282] ret_from_fork_asm+0x1a/0x30 [ 1005.719055][ T3282] [ 1005.719055][ T3282] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1005.726967][ T3282] [ 1005.726967][ T3282] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1005.734703][ T3282] cpus_read_lock+0x42/0x160 [ 1005.739905][ T3282] static_key_slow_inc+0x12/0x30 [ 1005.745651][ T3282] ipv6_flowlabel_opt+0x1b94/0x29c0 [ 1005.751398][ T3282] do_ipv6_setsockopt+0xd9f/0x3150 [ 1005.757146][ T3282] ipv6_setsockopt+0x59/0x170 [ 1005.762373][ T3282] rawv6_setsockopt+0x276/0x5f0 [ 1005.767865][ T3282] do_sock_setsockopt+0x17c/0x1b0 [ 1005.773531][ T3282] __x64_sys_setsockopt+0x13d/0x1b0 [ 1005.779264][ T3282] do_syscall_64+0x174/0x580 [ 1005.784383][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.790837][ T3282] [ 1005.790837][ T3282] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1005.798666][ T3282] lock_sock_nested+0x41/0x100 [ 1005.803959][ T3282] inet_shutdown+0x6a/0x390 [ 1005.809178][ T3282] nbd_mark_nsock_dead+0x2e9/0x560 [ 1005.814825][ T3282] sock_shutdown+0x15e/0x260 [ 1005.819941][ T3282] nbd_clear_sock+0x24/0x170 [ 1005.825056][ T3282] nbd_config_put+0x2dd/0x580 [ 1005.830285][ T3282] nbd_genl_connect+0x19d5/0x1cf0 [ 1005.836013][ T3282] genl_family_rcv_msg_doit+0x22a/0x330 [ 1005.842203][ T3282] genl_rcv_msg+0x61c/0x7a0 [ 1005.847308][ T3282] netlink_rcv_skb+0x232/0x4b0 [ 1005.852614][ T3282] genl_rcv+0x28/0x40 [ 1005.857140][ T3282] netlink_unicast+0x75c/0x8e0 [ 1005.862518][ T3282] netlink_sendmsg+0x813/0xb40 [ 1005.867903][ T3282] ____sys_sendmsg+0x972/0x9f0 [ 1005.873449][ T3282] ___sys_sendmsg+0x2a5/0x360 [ 1005.878650][ T3282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1005.884214][ T3282] do_syscall_64+0x174/0x580 [ 1005.889328][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.895774][ T3282] [ 1005.895774][ T3282] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1005.903448][ T3282] __mutex_lock+0x1a3/0x1550 [ 1005.908600][ T3282] nbd_queue_rq+0x37b/0x1100 [ 1005.913719][ T3282] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1005.919801][ T3282] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1005.926668][ T3282] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1005.933277][ T3282] blk_mq_run_hw_queue+0x348/0x4f0 [ 1005.938937][ T3282] blk_mq_dispatch_list+0xd16/0xe10 [ 1005.944772][ T3282] blk_mq_flush_plug_list+0x48d/0x570 [ 1005.950695][ T3282] __blk_flush_plug+0x3ed/0x4d0 [ 1005.956082][ T3282] __submit_bio+0x28d/0x580 [ 1005.961225][ T3282] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1005.967535][ T3282] block_read_full_folio+0x7b7/0x830 [ 1005.973362][ T3282] filemap_read_folio+0x137/0x3b0 [ 1005.979006][ T3282] do_read_cache_folio+0x358/0x590 [ 1005.984743][ T3282] read_part_sector+0xb6/0x2b0 [ 1005.990120][ T3282] adfspart_check_ICS+0xb1/0x960 [ 1005.995584][ T3282] bdev_disk_changed+0x817/0x1770 [ 1006.001175][ T3282] blkdev_get_whole+0x380/0x510 [ 1006.006579][ T3282] bdev_open+0x31e/0xd30 [ 1006.011644][ T3282] blkdev_open+0x470/0x610 [ 1006.016594][ T3282] do_dentry_open+0x822/0x13a0 [ 1006.021885][ T3282] vfs_open+0x3b/0x340 [ 1006.026478][ T3282] path_openat+0x2e08/0x3860 [ 1006.031858][ T3282] do_file_open+0x23e/0x4a0 [ 1006.037064][ T3282] do_sys_openat2+0x113/0x200 [ 1006.042275][ T3282] __x64_sys_openat+0x138/0x170 [ 1006.047649][ T3282] do_syscall_64+0x174/0x580 [ 1006.053221][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.059638][ T3282] [ 1006.059638][ T3282] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1006.066894][ T3282] __mutex_lock+0x1a3/0x1550 [ 1006.072033][ T3282] nbd_queue_rq+0xc6/0x1100 [ 1006.077081][ T3282] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1006.083161][ T3282] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1006.090233][ T3282] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1006.096823][ T3282] blk_mq_run_hw_queue+0x348/0x4f0 [ 1006.102636][ T3282] blk_mq_dispatch_list+0xd16/0xe10 [ 1006.108449][ T3282] blk_mq_flush_plug_list+0x48d/0x570 [ 1006.114345][ T3282] __blk_flush_plug+0x3ed/0x4d0 [ 1006.119753][ T3282] __submit_bio+0x28d/0x580 [ 1006.124783][ T3282] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1006.131043][ T3282] block_read_full_folio+0x7b7/0x830 [ 1006.136885][ T3282] filemap_read_folio+0x137/0x3b0 [ 1006.142633][ T3282] do_read_cache_folio+0x358/0x590 [ 1006.148387][ T3282] read_part_sector+0xb6/0x2b0 [ 1006.153798][ T3282] adfspart_check_ICS+0xb1/0x960 [ 1006.159366][ T3282] bdev_disk_changed+0x817/0x1770 [ 1006.165116][ T3282] blkdev_get_whole+0x380/0x510 [ 1006.170586][ T3282] bdev_open+0x31e/0xd30 [ 1006.175359][ T3282] blkdev_open+0x470/0x610 [ 1006.180308][ T3282] do_dentry_open+0x822/0x13a0 [ 1006.185600][ T3282] vfs_open+0x3b/0x340 [ 1006.190198][ T3282] path_openat+0x2e08/0x3860 [ 1006.195325][ T3282] do_file_open+0x23e/0x4a0 [ 1006.200626][ T3282] do_sys_openat2+0x113/0x200 [ 1006.205942][ T3282] __x64_sys_openat+0x138/0x170 [ 1006.211586][ T3282] do_syscall_64+0x174/0x580 [ 1006.216700][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.223389][ T3282] [ 1006.223389][ T3282] -> #4 (set->srcu){.+.+}-{0:0}: [ 1006.230517][ T3282] __synchronize_srcu+0xca/0x300 [ 1006.235977][ T3282] elevator_switch+0x1e8/0x7a0 [ 1006.241273][ T3282] elevator_change+0x2cc/0x450 [ 1006.246820][ T3282] elevator_set_default+0x36c/0x430 [ 1006.252543][ T3282] blk_register_queue+0x3e9/0x4e0 [ 1006.258098][ T3282] __add_disk+0x677/0xd50 [ 1006.263056][ T3282] add_disk_fwnode+0xfb/0x480 [ 1006.268281][ T3282] nbd_dev_add+0x72c/0xb50 [ 1006.273325][ T3282] nbd_init+0x168/0x1f0 [ 1006.278001][ T3282] do_one_initcall+0x250/0x870 [ 1006.283288][ T3282] do_initcall_level+0x104/0x190 [ 1006.288938][ T3282] do_initcalls+0x59/0xa0 [ 1006.293877][ T3282] kernel_init_freeable+0x2a6/0x3e0 [ 1006.299691][ T3282] kernel_init+0x1d/0x1d0 [ 1006.304632][ T3282] ret_from_fork+0x514/0xb70 [ 1006.309830][ T3282] ret_from_fork_asm+0x1a/0x30 [ 1006.315411][ T3282] [ 1006.315411][ T3282] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1006.323360][ T3282] __mutex_lock+0x1a3/0x1550 [ 1006.328481][ T3282] elevator_change+0x1b3/0x450 [ 1006.333771][ T3282] elevator_set_none+0xb5/0x140 [ 1006.339148][ T3282] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1006.345568][ T3282] nbd_start_device+0x17f/0xb10 [ 1006.351122][ T3282] nbd_genl_connect+0x165b/0x1cf0 [ 1006.356683][ T3282] genl_family_rcv_msg_doit+0x22a/0x330 [ 1006.362760][ T3282] genl_rcv_msg+0x61c/0x7a0 [ 1006.367810][ T3282] netlink_rcv_skb+0x232/0x4b0 [ 1006.373094][ T3282] genl_rcv+0x28/0x40 [ 1006.377607][ T3282] netlink_unicast+0x75c/0x8e0 [ 1006.383051][ T3282] netlink_sendmsg+0x813/0xb40 [ 1006.388357][ T3282] ____sys_sendmsg+0x972/0x9f0 [ 1006.393648][ T3282] ___sys_sendmsg+0x2a5/0x360 [ 1006.398859][ T3282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1006.404675][ T3282] do_syscall_64+0x174/0x580 [ 1006.409825][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.416370][ T3282] [ 1006.416370][ T3282] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1006.425096][ T3282] blk_alloc_queue+0x546/0x680 [ 1006.430667][ T3282] __blk_mq_alloc_disk+0x197/0x390 [ 1006.436397][ T3282] nbd_dev_add+0x499/0xb50 [ 1006.441441][ T3282] nbd_init+0x168/0x1f0 [ 1006.446236][ T3282] do_one_initcall+0x250/0x870 [ 1006.451724][ T3282] do_initcall_level+0x104/0x190 [ 1006.457236][ T3282] do_initcalls+0x59/0xa0 [ 1006.462208][ T3282] kernel_init_freeable+0x2a6/0x3e0 [ 1006.467972][ T3282] kernel_init+0x1d/0x1d0 [ 1006.472933][ T3282] ret_from_fork+0x514/0xb70 [ 1006.478058][ T3282] ret_from_fork_asm+0x1a/0x30 [ 1006.483378][ T3282] [ 1006.483378][ T3282] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1006.490598][ T3282] fs_reclaim_acquire+0x71/0x100 [ 1006.496079][ T3282] kmem_cache_alloc_noprof+0x40/0x650 [ 1006.502252][ T3282] __kernfs_iattrs+0xdf/0x320 [ 1006.507686][ T3282] kernfs_iop_setattr+0xea/0x3f0 [ 1006.513263][ T3282] notify_change+0xc1a/0xf40 [ 1006.518596][ T3282] do_truncate+0x1c2/0x250 [ 1006.523581][ T3282] path_openat+0x2f89/0x3860 [ 1006.528734][ T3282] do_file_open+0x23e/0x4a0 [ 1006.533780][ T3282] do_sys_openat2+0x113/0x200 [ 1006.539044][ T3282] __x64_sys_openat+0x138/0x170 [ 1006.544631][ T3282] do_syscall_64+0x174/0x580 [ 1006.549863][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.556459][ T3282] [ 1006.556459][ T3282] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1006.564984][ T3282] __lock_acquire+0x15a5/0x2cf0 [ 1006.570369][ T3282] lock_acquire+0x106/0x350 [ 1006.575488][ T3282] down_write+0x96/0x200 [ 1006.580255][ T3282] kernfs_unlink_sibling+0x71/0x180 [ 1006.586073][ T3282] kernfs_rename_ns+0x4a6/0x830 [ 1006.592178][ T3282] sysfs_rename_link_ns+0x16e/0x1b0 [ 1006.599104][ T3282] device_rename+0x110/0x210 [ 1006.604488][ T3282] __dev_change_net_namespace+0x15d3/0x20a0 [ 1006.611020][ T3282] cfg802154_switch_netns+0xbf/0x3d0 [ 1006.617017][ T3282] cfg802154_pernet_exit+0x75/0xe0 [ 1006.622840][ T3282] ops_undo_list+0x49f/0x940 [ 1006.628226][ T3282] cleanup_net+0x56b/0x800 [ 1006.633453][ T3282] process_scheduled_works+0xb5d/0x1860 [ 1006.639769][ T3282] worker_thread+0xa53/0xfc0 [ 1006.645070][ T3282] kthread+0x389/0x470 [ 1006.649868][ T3282] ret_from_fork+0x514/0xb70 [ 1006.655379][ T3282] ret_from_fork_asm+0x1a/0x30 [ 1006.660885][ T3282] [ 1006.660885][ T3282] other info that might help us debug this: [ 1006.660885][ T3282] [ 1006.671242][ T3282] Chain exists of: [ 1006.671242][ T3282] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1006.671242][ T3282] [ 1006.685775][ T3282] Possible unsafe locking scenario: [ 1006.685775][ T3282] [ 1006.693249][ T3282] CPU0 CPU1 [ 1006.698794][ T3282] ---- ---- [ 1006.704160][ T3282] lock(&root->kernfs_rwsem); [ 1006.708928][ T3282] lock(cpuhp_state_mutex); [ 1006.716127][ T3282] lock(&root->kernfs_rwsem); [ 1006.723511][ T3282] lock(&root->kernfs_iattr_rwsem); [ 1006.728803][ T3282] [ 1006.728803][ T3282] *** DEADLOCK *** [ 1006.728803][ T3282] [ 1006.736982][ T3282] 5 locks held by kworker/u8:8/3282: [ 1006.742273][ T3282] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1006.753446][ T3282] #1: ffffc9000da9fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1006.764474][ T3282] #2: ffffffff8fdba168 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1006.773934][ T3282] #3: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1006.783529][ T3282] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 1006.793552][ T3282] [ 1006.793552][ T3282] stack backtrace: [ 1006.799543][ T3282] CPU: 0 UID: 0 PID: 3282 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1006.799561][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1006.799572][ T3282] Workqueue: netns cleanup_net [ 1006.799591][ T3282] Call Trace: [ 1006.799598][ T3282] [ 1006.799606][ T3282] dump_stack_lvl+0xe8/0x150 [ 1006.799624][ T3282] print_circular_bug+0x2e1/0x300 [ 1006.799645][ T3282] check_noncircular+0x12e/0x150 [ 1006.799665][ T3282] __lock_acquire+0x15a5/0x2cf0 [ 1006.799683][ T3282] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.799700][ T3282] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.799716][ T3282] ? kernfs_unlink_sibling+0x71/0x180 [ 1006.799736][ T3282] lock_acquire+0x106/0x350 [ 1006.799750][ T3282] ? kernfs_unlink_sibling+0x71/0x180 [ 1006.799776][ T3282] down_write+0x96/0x200 [ 1006.799792][ T3282] ? kernfs_unlink_sibling+0x71/0x180 [ 1006.799813][ T3282] ? __pfx_down_write+0x10/0x10 [ 1006.799828][ T3282] ? kernfs_root+0x1c/0x230 [ 1006.799845][ T3282] ? kernfs_root+0x1c/0x230 [ 1006.799861][ T3282] ? kernfs_root+0x1c/0x230 [ 1006.799878][ T3282] ? kernfs_root+0x1ea/0x230 [ 1006.799896][ T3282] kernfs_unlink_sibling+0x71/0x180 [ 1006.799918][ T3282] kernfs_rename_ns+0x4a6/0x830 [ 1006.799942][ T3282] sysfs_rename_link_ns+0x16e/0x1b0 [ 1006.799961][ T3282] device_rename+0x110/0x210 [ 1006.799978][ T3282] __dev_change_net_namespace+0x15d3/0x20a0 [ 1006.800005][ T3282] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1006.800028][ T3282] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.800047][ T3282] ? __mutex_trylock_common+0x158/0x260 [ 1006.800066][ T3282] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1006.800085][ T3282] ? rcu_is_watching+0x15/0xb0 [ 1006.800103][ T3282] ? trace_contention_end+0x3d/0x140 [ 1006.800122][ T3282] ? __mutex_lock+0x319/0x1550 [ 1006.800140][ T3282] ? do_raw_spin_unlock+0xf5/0x210 [ 1006.800160][ T3282] ? _raw_spin_unlock+0x28/0x50 [ 1006.800181][ T3282] ? __pfx___mutex_lock+0x10/0x10 [ 1006.800197][ T3282] ? __pfx_netdev_run_todo+0x10/0x10 [ 1006.800216][ T3282] cfg802154_switch_netns+0xbf/0x3d0 [ 1006.800236][ T3282] cfg802154_pernet_exit+0x75/0xe0 [ 1006.800255][ T3282] ops_undo_list+0x49f/0x940 [ 1006.800271][ T3282] ? __pfx_ops_undo_list+0x10/0x10 [ 1006.800285][ T3282] ? idr_destroy+0x227/0x290 [ 1006.800308][ T3282] cleanup_net+0x56b/0x800 [ 1006.800322][ T3282] ? __pfx_cleanup_net+0x10/0x10 [ 1006.800338][ T3282] ? process_scheduled_works+0xa70/0x1860 [ 1006.800360][ T3282] ? process_scheduled_works+0xa70/0x1860 [ 1006.800375][ T3282] process_scheduled_works+0xb5d/0x1860 [ 1006.800399][ T3282] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.800416][ T3282] ? assign_work+0x3d5/0x5e0 [ 1006.800431][ T3282] worker_thread+0xa53/0xfc0 [ 1006.800455][ T3282] kthread+0x389/0x470 [ 1006.800472][ T3282] ? __pfx_worker_thread+0x10/0x10 [ 1006.800486][ T3282] ? __pfx_kthread+0x10/0x10 [ 1006.800503][ T3282] ret_from_fork+0x514/0xb70 [ 1006.800519][ T3282] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.800534][ T3282] ? __switch_to+0xc79/0x1410 [ 1006.800555][ T3282] ? __pfx_kthread+0x10/0x10 [ 1006.800572][ T3282] ret_from_fork_asm+0x1a/0x30 [ 1006.800594][ T3282] [ 1007.215589][ T3282] hsr_slave_0: left promiscuous mode [ 1007.221566][ T3282] hsr_slave_1: left promiscuous mode [ 1007.263006][ T3282] pim6reg (unregistering): left allmulticast mode [ 1007.813363][ T3282] IPVS: stop unused estimator thread 0... [ 1010.153351][ T1654] block nbd1: Possible stuck request ffff8880280f5080: control (read@0,1024B). Runtime 210 seconds