last executing test programs: 3m19.61926581s ago: executing program 0 (id=1707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3m19.314086322s ago: executing program 0 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 3m19.206492002s ago: executing program 0 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a31000000001400048008000240d4fe000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 3m18.915383599s ago: executing program 0 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0xf0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000700000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m18.508314453s ago: executing program 0 (id=1720): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3m18.079006242s ago: executing program 0 (id=1723): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async, rerun: 32) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) 3m3.012355821s ago: executing program 32 (id=1723): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async, rerun: 32) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) 23.310374256s ago: executing program 4 (id=2986): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b70a0000000000009500c2000000000095000012000000f3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 22.777594549s ago: executing program 4 (id=2989): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x17b, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) (fail_nth: 8) 22.240188105s ago: executing program 4 (id=2993): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x20080000) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0xc0, 0xe8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x9, 0x6}}]}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x7, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000", @ANYBLOB='\b\x00'], 0x90}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/6, 0x6}, {&(0x7f0000001ec0)=""/121, 0x79}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)=""/108, 0x6c}], 0x5, 0x0, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xffb0}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.674121304s ago: executing program 4 (id=2998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req3={0x5, 0x3, 0x2, 0x1, 0xc6e5, 0x8, 0x1}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000040)='\x00', 0x28000, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x1]}, {0x3, 0x5, 0x3ff, 0xf}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) socket$xdp(0x2c, 0x3, 0x0) 4.115896836s ago: executing program 3 (id=3105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8992, &(0x7f00000006c0)={'veth0_vlan\x00', @ifru_settings={0x9, 0x7, @cisco=&(0x7f0000000000)={0x0, 0x6}}}) 4.022827288s ago: executing program 1 (id=3107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x4, @void}, 0x10) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_rxfh={0x46, 0x5, 0x400, 0x27, 0xc, "a16467", 0xfcb2003, [0x1ff, 0x5, 0x2, 0xffff, 0x3]}}) (async) r9 = socket$netlink(0x10, 0x3, 0x5) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) (async) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) (async) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) 3.900022539s ago: executing program 3 (id=3108): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002520702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="d80000002f00090027bd7000fbdbdf2504000000c4001a803e00", @ANYRES64=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x80014) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004002000080000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x13, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf143}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf35f, 0x0, 0x0, 0x0, 0xfffff000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x6, 0x42964110, 0x10}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e21, 0x7fff, @mcast2, 0x7}}}, &(0x7f00000006c0)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r5, @in={{0x2, 0x4e22, @local}}}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.997581776s ago: executing program 5 (id=3115): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) socket$inet6(0xa, 0x80002, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000040)=0x3, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000001380)={{r9}, "15c381b228f7fbb9ceefe173b7a326ad8772c7a26e454bc657a3c80d5b97716a92db051d862a9fb409ad7fdecf349edd65e59f9f2498f1d0533bc9a4b6ef09afa5328d7719205f54a22ac44cb72c03cb5e8c248633f73c86ed491d43e933ff6b66f59701971a8e182c8f9213c7e8c5d2dac3d89761801f56e0a2d39f3dcf74e4dc8edb154277a9782886ff7660ab753b97c3562a236becf8bff7b2935fef2573028d4a91deb1ab4357c8a61bb510771252bb1959d4ea4c75350af829fb7390f274e48342270d10012b0b53055d6f33f8883e562f60271947bc05e84befaa628360f0c615558585f2a43f9356d9cf1f0b3697e83f3c5cedc970c9ebecefd03e806ca817ae54edcf615ab30c2199b69d7bf77525c65873ece3f5fbc45a23b2867b82fd96894d4324f62e88d056bb8953171a74860f2c9f4fb3d393d8fe5571dd5cf35557c1fb27fbc1334e99e5d048731da24709603405e03c9b5da3a4fd5eb5e8fb3dccf0572b155625292ac3bb6a1efb3c1df5423024cbdf832afd0197b3a0f86508f087274213d3645b55bee7a7c3125494834181a60a543564b89278e0ca8719ac9e154bf52d8632978b40cb11c6262d23e4d933d75b13284d5d3bf10001815eb004292ed6b5ac692a0cded21fa8242be39470fd2576c9fc67baca605a5af9d82714258297c92ff7300969005e7bf1e50f65e9584bafd1389527fe7469651b0ab471eb71979dfaa47ee635bc266a28dd362d74ca9faa6f3f3ff728aebbede2baae1abb6a310f82891d992ee36757706723e5e02564dd799b2d62c4460504842274763d881de8d8bdb8c7fad07e9a6d1a752de518fa40951761dd4ca640a489e124f9315730beaf2c7dd15a47240b3c5bc2e03a35a3f26df9ed36865a2dd5b0d7423b7b6dcfd9d48d0209cc35369006dd04a814201813660f2d000badf1576944e20b9c61e1fbac7ffab170bf7cab29143d33d10c887b1acf4fdb7573cb7d2c1cc5257bf3c1ef88a2ba612423b6d2db44374866a94d2c954f3cca4aad470485b306f9d6e8a69e9f4ffbde1b75d596f2bc2e5238906e8f8927aac3695826d17d7e30a0439a038f069adeb1dd0eeb7cb8d7230d45d5bd0dd3049da7e2a84c19df0c60785482daa0d57b92455497e2b4762111de7be38379cb87726889d845ebb7602d383a65ab5781b92f843c9365103b1b0ab3b39a76e758a1a8a5b7ca0eff0715322482d3e85c9a482382770344bb9cfe06ea52a44313b4abf1d7f50ccd9f8e3af14c2d7d5a9921f5ca44f10fae44f0255d51671bbd82ac6765015e3d1392845b35c6a33c1bd946b4a813d054200ef9b04d4240a2421e970a229eaecf7465a667e02e8bfd22dea144f91396df91c7ba4a110855a0bea173b3a0bbf9d8c4ae38e334bf6fa9bc2191f0a5fab2f17159591a36487b7df2fbd404088d56fb405db09f5a449e2dbdf4c221b3ea8f7b1e4dffa16309d31af617b754f719a2dd0f6cda69dc4c3c1c8a6a77fe117b7a02507044c3a0d1767af9a49d3d355ca5aff2db8d9e35366013adb371fb91db69e85436d0c6c6179185157c8f17e02df8a6f9811bf08df6254a37708cd788de61de3536dc3d42a7ee227d579bda3f4c3133f026754b19c25484b4c59dd1441fba5d633d06b220d172925bd3354f588f8af6143266649b9ad985049540652f5fd2ddd880adfa891ade9d7cb0f1a891f4ba11f8aaef1daa7e997161f24b14dc7ce5d3dbb1c069471b642ef08fd88e7a7f6dc3b5429efc858d762579932e76bc6cf12f69ca8c3d8b49df87bc2230bff0b1a8a349da9d3b26d3aa5c799f7aceb5794cd3a66a71eed32c5126a9d8c411fc285d5af84b69c5c6dffc950a7eb971b61b3d58b0eab011b242f68a491fbab3c85b29c106d6234bbc77b91c1998f4981b50d27a46e497bcf06dc7cea337db1bbffa338fb9d2b5006609b195151c166ec8bd3ce322b2583efed2cbe3580b75297e6a86adf714423db6972ac9c352d22d1f93e313e76747872994a6d8fd804d0f39cef800481b9e34eb5a371ee9dd8c65d39423ef074f4e71184e34506d5d36e90ae729e0dcdf96e01e0cedc7fa17f9152b08f7fecc95a8f608fc23dc85159d3cecd289b27269ecb2b67598bec81284a2d36c8f1c08a567fb4eeda833a826fa93771baa05c1ed26c1032e86fb6103d7d9d2c105c8b2428bea7e6675ed7b11aa9c6c6448c1384dd1521d5e2a73044b1cbd249208ef21b3957bce1c7fbb367d325a2daff40207e8cee5d021ebb2abda105fae7b4d9a1a60f05a9337f5ac18ee9dfc26724c13d7f683f2008e9b85c365588e054e7552dcb973190a3a24a8adcc700d886a9b4b4ffc1b348b3aef564ecf0986a4f96cd71e3cd7e30e2c12236e608f078ac443d5ee74057dbd8aa7538c6f7cdfeaa2b64d3718e1644c7ce04d9a78f46d93cc3a1c712240db673d996cc0f934bec76cc55e17b91dd8870d2e6b1e95f138615c3be82542e0c2b95d81d8a222e6e25ca72fecf0791b0c842907f492fe62dc315d63a34f6e0a03962772acc8e88c2af349f983866fe8b0dce2cc02ac53ac68ce8cd2fe72a260356917d8d7dfc625871952372372f8b7196d828d1a02dcda973d9256bd32c0b01b094441f94e65f4eec71fde5dcd94265a2fb0a9a8d5dc990110561f9775b89c162d3e946e4b92bd52757245f27d49e5561e51b4455e877654b763a96e9e467e3af807cf2f27673e2729c6c34c36000ecd7781c438760883d2e2cdba73ad4288945bc8492cbc62f8ab585c3e89ba8630f6eb85594a8a678a3bda1e32701fed19486efe12f569b0e6bc2bcfaf5ccfc9613eae3321f2783622b3284d1abd735af6d370b1d7f1bdf1c310cc457023506dc9095660367f58f03120b055a777088eae0767bb47f0d11f633670544d6bf39edf2252ca78e009ffd197111c2ad5621c4f06bccaa9c61aa569d771c68b9f931b9969328df45dec7d021259a205aa8d5eab6e8f0641562d867fad04ccaf5e639abbfe08b178e91f49f96b0a7124a04af3562989b5ab0bacacb56cc3151fd1d900a31a7da32b0f7ff62f2ab7be347d404f9b02b548c4b9907a459be6bf53cb2234c24c5677c206ad59c16bd61dc8cb3405e6dfef623470138667314e3068d4d39e9c1bcc5074611a595e1e1da470167f3e783185870b1cb0e3f6908a50710e299306238292a6c0c2dabe6f27c61aff59eafeec799e896fc282bdc7ac952439fa4a3d04ff82d445514df84dd40f1a5f9756eb8793feb4c2eed4cf1bc266a2de90eaf2fa834709e169c68cf602ab71be8d337a4760ec3738d93ebe9903d77b418e7ff5d614ea35c75c0bddcb34adafb1e173dd53c6b365967fd35f5fb9888ff524a96b2f9796fad3548f63b00a6770ffcc6e9d51267b5e41d1ac74ecb503f5aa1033a4320b55b8575f581583f9961492743a350c32557a0bd6a57d487cefe1a676f86909854363c7956a12822e3c7d858bd24fcb919871116ba148888ab57a955f5b5f158f990b094cad8878886dc7de8d70b4c95a61bfc0f4d7acd4916397ed5f6594978239cc69a32637adf333be0f55a8cdff2a52c2ce270001e735eb12510067b8756e3ed600774655a0956608d27b82df99cc48ae90a74af851aa1399d5e5c84cd60dec493f2a7810a93af5d7c2cca93260f8963d72925083b7c6b2074087ef72287a81deb06ffcf1e7e61e94ee9b84536588ebdcf2b81f1caa10a4d0ff1eab7d34b3fd32bd87b0f310b461009784d2b0d2ebdf87ccf2b8c5d40557d3649dac90f01c9e5b6840a3438609dfd957c75f3a60fcb51cd2fdc83087498535a7ad0ea4689a26b26788d9b7d6eb819a6f052166f80fc699914e1417164fde9be11f47d0587d0981915b650d53faaf56c589b584e8cb3ba4b8b6021a4b8ea73fa1de308a326d85703fb623016392c5e1d83dfa684adf47f25ce4e9c21e6c46fee14317f52477ed586f27e86cd704fdb64756e646a7d7a3aeea86df77a3d0fe3bdc71189eabea41aac9ea066916f61a2919135ef9d15d1809f92220089afaab030055d2ccb5f39e56004c50bfaa7ee0b2612b86dcebc704f0a1322dc49d7c0b578f39d98953e85d312d40b16df1ba2b0468550932113367bf209256ccb677573f908176cc341af4c1f1927eaec87f7616609717f3f0dc54d735a6fe3c475d842168d7bc364e4b317d79dedb936534f836171b8b616a1b00bd313ae738715f7a77be187051fe8e0a99ed20b1c5217ec0dd684fbd99f6d3dc4a533dcf52c256ef5a66f82de8903e83930410cb8513e1a239b3dc143dbc87e79047e5336c7e53736c57d1a603ed8d430e88c7f66cf05aeacc8ab393e387bce8fec4117071f78d7f9315a2b5fcd640e3acfb970f58ff1098dcc84c25e2f80caa019ea096dafb7a8d08897ea7f67c0b2a81ad2059cdfcceb9ba59a923d1f707b56c7e004d38f4959032b2c8e3fb4a299d0468e787cd5a0485ded3111872569c97eed877390318055300ea31a2e03ffe7ca6e999a20006ab4e190b39b4d7c5cb586653411536747a87b79e500a406e72ba04463298e52365f272bced2b22bf3a27243598fa85a30a05f855c298c014684ebe44e22ef8ecd25f12fb91c8433cde16d68ca5e686ca7951247a14e0adb5952f458bf780565ba2304721c5328ee4455b5591cc4152cf991749e7c1807cd7e33a4f19209d0a57ffede27279389e13b326d45d9dde0dbbcef6cbebd184eb60903e795a291ec36ba6e3451ccb279ec812e59b63fdb25ae6a75039bbf8d7584f7e7de9b8c1a2fa6cc15b664684e6f2d5c4fe876696e2773a43cc9afe709f4748e45f2594676d253df24cd888990f8bd3eed8888b475f2a9e5840624febafc45d984660d8dee150f9332e6c13482b743e580776c809a23dfab1af4f6fde0669ca642258b3a401c0b4552ce8e2242cf50772625b3673f636622fbc81ac96777e0b1c6b5465e706ec40ce0e6e4d5ff4aaf37b276f509baee46f4412ef93715efd5d309f07680b54af06418fb2bc9208d189096c64ec8934c7b3dfc3991fdefc81d916c2d4336c60a687c8d02e657322eb98d7a06b8901580e69d276acfbe2ca362d1d4d14f50e63008c7cac5e1ba86a7bbf3cdb91b62a7be01a5b00493e4ab3b7dc4ba6e9ac2e83c63c89e10315cf3594df370fc4cfeb2e204de02db337ec88d37f19d3874e5d02d3d2240f574d9153260431e3233604d864b2bc85617b3e96e6ccb69bd4209aa05e3b363508af75cda8d00799e4016eb9dcca873bb8ebbb3ea87f68dab59621d79e0bb36c08f893b0fe7080d1a05900dcf6554588dfb1c61f771fa576cb43be41503ae70d8f92c409cd1aa20b44cc9eeb1ef193cff89ff04034a86f211108f39bb590bd5d1e29474923c8b597f3497e41c92a8ef92d02c6d37643440eb396846f572da55280864a01bbbb003bf86d2ef104b18cc025f0fd333753e796e44eb7f945e0c9e4723dc425061544f4d9badc952e7adda02673fb552010ee8166893780d6834aa2220f71d898fd37a137b6ee81535f54d3c8c5954c0d771a8628e56cf585203bc39f2c6f8b9b86a6ed30242d6abea2c8f0fa28d27db4b642aa3e4d54c8440b9502a22da2dc5ef9b152fed1d2f586068b70f00186cd1c264ef151a6a369269d25ed813cd1ad146c7eef404b799911e1d74e6a7998dbf8e2d0a56507c6261ae8a21e1078c152f265f72e0113a2e9dfa97a4a5d7a428866666003e323aeeee4512000e241cb647e8cb0e6ea1baa309667400ccdfc30b11487ea0e4a984a3ef6"}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x4c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0xa, 0x4, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x0, 0x1, 0x8, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x2e, [@loopback, @multicast2, @private=0xa010100, @multicast2]}]}}, "1af57f0645aca055"}}}}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f00000006c0)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x520, 0xffffffff, 0x380, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@private1, @empty, [0xff, 0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x3ff, [0xfffffffe], 0xe, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'vlan0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x7f, 0x6, 0x62}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x17, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000005c0)={'virt_wifi0\x00', @remote}) 2.955615645s ago: executing program 2 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000040000000800000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703f1ff08000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.894921292s ago: executing program 1 (id=3117): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800004000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x4, 0xfffffffd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8992, &(0x7f00000006c0)={'veth0_vlan\x00', @ifru_settings={0x7f, 0x7, @te1=0x0}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='O\x00', 0x40c2, &(0x7f0000000140)={@align=0x7, {0x4, 0x40, 0x7, 0x1}}, 0x7fffffff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xffffffff}) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000280)) 2.739844878s ago: executing program 3 (id=3118): openat$tun(0xffffffffffffff9c, 0x0, 0x5058a1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000060000000000000000000000000000000000581f9dbb68a2f4be0705c8b2d247cbe51b4ddf67b526bebfee027cab7a140a67dc8c99162fe0c5c7430a40a62964329668bf3e29377d34b8db3c8809db1212325f0470a55d412206a6082fa3c6c970681f06aa174f23f4a32ad3564a5e8035c19f15bd81435a1690c0ba96597ea725e2f5260a954e6116d1ea33fd7f56cae9b0bdb0db7396829a89262d75f4d193e46cdb6484f6c95f30ae770ba51b8ebd0d9d0fb6bc569d8b1f979f02db1d59cbee58d90000000000000000001eebf9c5fa23c7d61cbaa1b563bb3c6bfa77875ee6ee7d515c361feebf7ac13f4c4d12a1e541a2d167"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}}, 0x4800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000306010200004000000000000000000005000107000000c7af3b6937ef26d295a08fc6afa52a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r5) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xab67}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111d900"/32], &(0x7f0000000c40)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)="b9ac6b7f7c65de66a911743ebfff9eb4c93191b2ae9cd67789c4229f301abfb63570c0c26be03bd407b73d86c2fac7437d0ab7d4fcdd92180d2d64bd1de0a60c907182"}, {&(0x7f00000022c0)="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"}, {&(0x7f0000001c80)="d970547d49f115cc25a004135de468502c72249f77932629f4ce1da725ebe5369f0bfcda49ab267fc0c120a96cbfb72704e5527b498f9c931c99a500d39db5517b3a9a7eec24553a37b1aee8b511b1cfe755f515af36b8bb37ad44cb3f148d8d8649812f044eac9ba9083df74687d53353c4d57e5a18113b47d01329ef2c5b35c7164a7f5c06ab35420606794db01f562e211f12b3c8c2d99b66e0996c0e43780db095f264b4b8c6bbd886e3f82e676fee06ac99102d3c6aa5de7c5363ea218d2a387099433afa362932657b8b4003a3dae1a26593165d44c00288d004ecfbfa7477c84c6690fcb2dcfe0302f37a"}], 0x0, &(0x7f0000001dc0)=[@iv={0x0, 0x117, 0x2, 0x0, "0e5e0fb5f9853688c40952aa596c023ff0fd5a48cde5d27122285c0e8a33d8969835151cc9b6c955ae26e578236771ccf352894983f5ac0cebc69eaa93afd3b136ff7f9a45645c3648a967bea4f14c72d97eefdf7559abf1937542c57dcb04d884db5703bd8d809e064446c6f9b9e1ba7eed5d36d25dc1d4658d0e09a7e62dfa9f939e090de6267b6bc21b69a869fa731339d4b7f5b18bc11c06446141d2351bc19a0ffaa7879d8b06a69966813cf2585671eb7a13c80c19"}, @iv={0x0, 0x117, 0x2, 0x0, "17a1ebbe2f6375c2cabff5acab864efaeba6ef28396bd26a36d75ea1b9c31c29cf75f74d4059cf62"}, @iv={0x0, 0x117, 0x2, 0x0, "604290a5d575865f0aab93a685cd9fe460c27ff37a4d7d789a6bf607adf6409ce003f8275f5562e8657feaba4819a6388ee2fc5c289dc0e98399f7f4ad8fc46e26f79f16498e2daae27d339e8fabd7e9d603078da1f6ab0dcace96fc01213fd49b01875e60c8bf02d211679444f6be4439c0171a8ff5011e39a7efb3d859415c17e6aa70631b36d148"}], 0x0, 0x8040}], 0x1, 0x480c1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40004) close(0x3) 2.739604747s ago: executing program 2 (id=3119): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.569740105s ago: executing program 2 (id=3120): r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x2004}) 1.906037001s ago: executing program 2 (id=3121): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)='netdevsim', 0x260380, &(0x7f00000000c0)={@align, {0x2, 0x2, 0x9, 0xf}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x4, 0x2, 0x3ff}, {0xd5, 0x5, 0x7f, 0x80000000}, {0x4, 0x0, 0x8, 0xe0}, {0x0, 0x4, 0x0, 0xd1}, {0x2, 0x8, 0x3, 0x2}, {0x1, 0x6, 0x4, 0xffffffde}, {0x5105, 0x9, 0x53, 0x5}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="05000000010001", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000001000b00020100000e0001006e657464657673696d0000000f0002006e657464657673696d30020008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)='netdevsim', 0x260380, &(0x7f00000000c0)={@align, {0x2, 0x2, 0x9, 0xf}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x4, 0x2, 0x3ff}, {0xd5, 0x5, 0x7f, 0x80000000}, {0x4, 0x0, 0x8, 0xe0}, {0x0, 0x4, 0x0, 0xd1}, {0x2, 0x8, 0x3, 0x2}, {0x1, 0x6, 0x4, 0xffffffde}, {0x5105, 0x9, 0x53, 0x5}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000080)="05000000010001", 0x7) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000001000b00020100000e0001006e657464657673696d0000000f0002006e657464657673696d30020008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x8000) (async) 1.866362748s ago: executing program 5 (id=3122): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x10ff, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3, 0x300}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x45}, 0x28) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4005) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB='oO'], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x800, 0x1, 0xc, 0x87cb, 0x80, 0x1, 0xf, 0x2, 0x0}, &(0x7f0000000500)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000800)={r8, 0x9, 0x7fffffff, 0x1}, &(0x7f0000000840)=0x10) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 1.808216829s ago: executing program 1 (id=3123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000140}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r6, 0x211, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x3c}}, 0x40081) close(r4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB='d}'], 0x50) sendmmsg$inet(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000580)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f00000003c0)="a2da6188c01433205e020987ac65807d6618c653379002c4d542f78a2e23268b328095c6223217826036ecba4c35612a020a", 0x32}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40), 0xffffff70}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000380)="080000000e8c", 0x6}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x3, 0x4008440) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.554630005s ago: executing program 1 (id=3124): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x1000000, 'veth0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0x2, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a0) 1.516675403s ago: executing program 2 (id=3125): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000001000a0000000c00000005000000020000000000000500000000005f615f00b3756e74d3a86c2783c801e5b34202f6c23220bf49e0fd927ccb3255361d78aadabd9fece6a7049ef667c9828d5fa4a2d275005528c3f76b1d46dc59ee17b7b1c3972dda3626eb40c2bbad4b01cd94f14a42477c2589d70917e399789acfdd04ff06d1b937e2ff07e463e1684e76488c2c9d925375aec021e1b8372a524d08119d5dad7682df2f258aae5e807f195f4047d188f96ca0a4765fa8f8cb3d238334f3"], 0x0, 0x29, 0x0, 0x1}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) sendfile(r5, r4, 0x0, 0xf03a0005) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000001640)=0xfffffff8, 0x4) mkdirat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r8, r8, 0x0, 0x9) r10 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_int(r10, 0x1, 0x22, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES8, @ANYRES64=r2, @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x20004814}, 0x8804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf25030000000800010000000000100007800c00018008000100", @ANYRES32=r11, @ANYBLOB="8aeb3976c9e33ace943ca27326b1bb235bcdf0837410016ceed2adc1db1013aeb51c81aa21f5fa6302e3772302793ee51615ea1d2849e34ce4a50113f85f1daa7e225f"], 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 1.40404674s ago: executing program 3 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="45080063f8fb7733df25020000000800010008616c674fdc32fe3c27bd81b6f8f7259df1ae0049542bf0359e0afa66cfd0153366110f68c0531e051a445d0d1e3658c9516a1dab4964049b6c6cbb8653c0867292e1b61265e58e180f8a97f2d3739574cab9500e30cd02c6ef770976ad01336c51174fd377d623db4fb661a2443d81858325fef09cb38a5f213c7e960f8996fc3923ece6658a4db3b92a1bf612ee1a7a6ca6ede71b8e0d3b1ef4c635cbaa24f5a7d983d099a2c4a81fc31e165dcafeb6dc71a83eb6f8684bb79b6a87d26131ddbc89b8bbe0f50b", @ANYRES32=r6], 0x1c}}, 0x4008054) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r3, &(0x7f0000006280)=[{0x0}, {&(0x7f00000041c0)="d2cf43efec", 0x5}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x4, 0x4, "987c804f"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25120000001800018014000200626f6e645f736c6176655f310000000008000900ff030000080007000b000000857ee76e41bde95a41d25c6f66db8f67ad45f929fbe4ca91cfe3075a9c6d7d3bcbd460fc4c852db63acfb4f6c846ccf24744b00765e2399823f16a4a59cd7e91e172f61530727de5c7b0513498228cd7449ba226ebf26f8a94b01a1290b4a8"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c054) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESDEC=r10, @ANYBLOB="7cbc269677c9dd2b18eb365c214c005df5f8259a7533472edb28b884d56fe554061140840d762bbcf3ba6cdc502ada0ef74d4a7e5dcfb997640e3a15800426547715971259b5427687a0d8b999392a084a14d68c15e9cb9066a447711e3768d5ec9c4875947228eab1ae35c1a8733ef0fcd134f2c99e5ca93e71afdc0fc734a7b3ffa19fc009e511db8bd4a97aa13ea69f61fc2a7db883b2af46a13ebbf200", @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x2885}, 0x80) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r12], 0xfdef) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000000180)={r12, &(0x7f0000000040)='&\b', 0x30001, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x5]}, {0xdfa8, 0x7, 0x3, 0xcb5}}, 0xb2, &(0x7f0000000100), &(0x7f0000000140)=0x8}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0x7, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x700, 0x8000, 0x0, 0x4}}) 1.283149248s ago: executing program 1 (id=3127): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x520, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130002000000007988cec85400fbdbdf25fc00000000000000000000000000e022524d0000000000220000000000000009"], 0xb8}}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x80, 0x0}, 0x54890) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 1.250101074s ago: executing program 5 (id=3128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x4000000, 0x0, 0x24000890}, 0x0) 970.593463ms ago: executing program 5 (id=3129): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 845.899539ms ago: executing program 5 (id=3130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x800) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x3, 0x1ff, {{0x5, 0x4, 0x2, 0x32, 0x14, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @empty}}}}) sendto$inet6(r1, &(0x7f0000000300)="be679950edff953ca668bd309573f3dc1d7ac2287e821ee389a703739fd99ba1bf9f88b5efdec8fc150b6e896b26239d49993609edfd002e43d3922bb69eff8fae53d63ee7176293e0b1a0cdc007bad720eae66957f38b38ff9c9c3299b4c951c205f897a1e0ac8824e2cfac489f361d394e0ce980b63f23022e5f7f7747e5b34a272335f9b1823e2b662da39b0b15b4bb2fb384f813422d025fadc0e90014e1d2b3a9c44a1a7ea05790a3416345212bfb7b726bcc2e40cc7a03f3fdf108205d7e225ef4e421415a", 0xc8, 0x841, 0x0, 0x0) 823.647369ms ago: executing program 2 (id=3131): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002e8e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa08}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x7, 0x1, 0x8001}}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 728.974466ms ago: executing program 3 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f0000000018000200030000000003"], 0xe38}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x4000}) 625.434996ms ago: executing program 4 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000400000004000000754a820defb27d5e0600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendfile(r2, r4, 0x0, 0x2) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, 0x7800, 0x20, 0x0, 0x22e0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff000000"], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 215.306974ms ago: executing program 5 (id=3133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000140}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r6, 0x211, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x3c}}, 0x40081) close(r4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB='d}'], 0x50) sendmmsg$inet(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000580)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f00000003c0)="a2da6188c01433205e020987ac65807d6618c653379002c4d542f78a2e23268b328095c6223217826036ecba4c35612a020a", 0x32}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40), 0xffffff70}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000380)="080000000e8c", 0x6}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x3, 0x4008440) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 80.277129ms ago: executing program 3 (id=3134): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40020) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="d172e1526b3f75c88baf73b93b70", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 80.135895ms ago: executing program 4 (id=3135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x40, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) (fail_nth: 1) 0s ago: executing program 1 (id=3136): openat$tun(0xffffffffffffff9c, 0x0, 0x5058a1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@delchain={0x2c, 0x65, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {0xffe0, 0xfff3}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r9) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000480)={r11, 0x7, 0x3}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000140)={0x2000}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): N 0 to HW filter on device netdevsim1 [ 288.001361][T11980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.016469][T12146] netlink: 'syz.2.1858': attribute type 11 has an invalid length. [ 288.016597][T12146] netlink: 'syz.2.1858': attribute type 14 has an invalid length. [ 288.042190][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.052592][T11980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.108830][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.147507][T12161] netlink: 'syz.3.1860': attribute type 4 has an invalid length. [ 288.157712][T12162] netlink: 'syz.3.1860': attribute type 4 has an invalid length. [ 288.612795][T11980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.780483][T11980] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.842387][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.842521][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.901900][T12195] netlink: 'syz.4.1865': attribute type 5 has an invalid length. [ 288.918134][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.918259][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.934055][T12194] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 289.306027][T12206] netlink: 'syz.4.1870': attribute type 10 has an invalid length. [ 289.306068][T12206] __nla_validate_parse: 9 callbacks suppressed [ 289.306102][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1870'. [ 289.360068][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1870'. [ 289.724673][T12215] syzkaller1: entered promiscuous mode [ 289.724715][T12215] syzkaller1: entered allmulticast mode [ 289.863601][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 289.987687][ T5624] Bluetooth: hci5: command tx timeout [ 291.207787][ T5738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.520026][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.531105][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.602961][T12270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1888'. [ 292.057522][ T5738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.111841][T12288] ip6t_rt: unknown flags 1F [ 292.322121][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 292.353079][T12279] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.411694][T12283] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 292.531929][T12279] validate_nla: 6 callbacks suppressed [ 292.532006][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.592601][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.602745][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.603056][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.624163][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.641243][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.641499][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.641758][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.641987][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.642212][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.685765][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 292.696969][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.705481][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.713777][T12279] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 292.829443][T12295] Cannot find del_set index 2 as target [ 293.218816][ T89] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.245444][T12315] sit1: entered promiscuous mode [ 293.280167][T12316] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 293.335030][T12316] bond3 (unregistering): Released all slaves [ 293.550979][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1901'. [ 293.744820][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'. [ 294.030217][T11980] veth0_vlan: entered promiscuous mode [ 294.053069][T11980] veth1_vlan: entered promiscuous mode [ 294.065883][T12336] syzkaller0: left promiscuous mode [ 294.065921][T12336] syzkaller0: left allmulticast mode [ 294.181822][T11980] veth0_macvtap: entered promiscuous mode [ 294.206333][T11980] veth1_macvtap: entered promiscuous mode [ 294.271088][T11980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.401131][T11980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.427533][ T1160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.450331][ T1160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.450522][ T1160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.450622][ T1160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.320850][T12368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1917'. [ 295.321063][T12368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1917'. [ 295.411522][T12368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1917'. [ 295.411705][T12368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1917'. [ 295.491332][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.491473][T12361] bridge0: port 1(bridge_slave_0) entered listening state [ 295.515619][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.515784][T12361] bridge0: port 2(bridge_slave_1) entered listening state [ 295.594620][T12361] macvlan2: left allmulticast mode [ 295.603671][T12361] macvlan3: left allmulticast mode [ 295.614621][T12361] macvlan4: left allmulticast mode [ 295.625664][T12361] bond1: left promiscuous mode [ 295.633869][T12361] bond2: left promiscuous mode [ 295.639655][T12361] bridge1: left promiscuous mode [ 295.644975][T12361] bond2: left allmulticast mode [ 295.655976][T12361] bridge1: left allmulticast mode [ 295.669284][T12361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.680080][T12361] veth3: left allmulticast mode [ 295.700491][T12361] bridge3: left promiscuous mode [ 295.716500][T12361] macvlan5: left allmulticast mode [ 295.721872][T12361] erspan0: left allmulticast mode [ 295.729834][T12361] veth7: left allmulticast mode [ 295.742072][T12361] bond5: left promiscuous mode [ 295.747603][T12361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.760385][T12361] veth0_to_team: entered promiscuous mode [ 295.775146][T12361] sit1: left promiscuous mode [ 295.791464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.799722][ T5738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.815253][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.927928][T12381] syzkaller0: entered promiscuous mode [ 295.934895][T12381] syzkaller0: entered allmulticast mode [ 296.177709][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.177751][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.235204][ T7731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.243294][ T7731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.253978][ T5738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.262192][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.635695][T12397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1926'. [ 296.700446][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.734001][T12397] x_tables: duplicate entry at hook 1 [ 296.751482][T12402] x_tables: duplicate entry at hook 1 [ 297.177480][ T1899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.259354][ T1899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.754162][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 297.903201][T12438] No such timeout policy "syz1" [ 297.940281][T12411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.105105][T12438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.105143][T12438] IPv6: NLM_F_CREATE should be set when creating new route [ 298.390983][T12450] FAULT_INJECTION: forcing a failure. [ 298.390983][T12450] name failslab, interval 1, probability 0, space 0, times 0 [ 298.404935][T12450] CPU: 0 UID: 0 PID: 12450 Comm: syz.5.1939 Not tainted syzkaller #0 PREEMPT(full) [ 298.404964][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.404976][T12450] Call Trace: [ 298.404984][T12450] [ 298.404993][T12450] dump_stack_lvl+0xe8/0x150 [ 298.405028][T12450] should_fail_ex+0x410/0x560 [ 298.405065][T12450] should_failslab+0xa8/0x100 [ 298.405089][T12450] ? skb_clone+0x212/0x3a0 [ 298.405112][T12450] kmem_cache_alloc_noprof+0xa1/0x600 [ 298.405144][T12450] ? skb_clone+0x212/0x3a0 [ 298.405174][T12450] skb_clone+0x212/0x3a0 [ 298.405200][T12450] __netlink_deliver_tap+0x413/0x860 [ 298.405238][T12450] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.405265][T12450] netlink_deliver_tap+0x19c/0x1b0 [ 298.405292][T12450] netlink_unicast+0x781/0x940 [ 298.405328][T12450] netlink_sendmsg+0x813/0xb40 [ 298.405363][T12450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.405398][T12450] ? apparmor_socket_sendmsg+0x98/0x360 [ 298.405433][T12450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.405457][T12450] sock_sendmsg_nosec+0x13a/0x180 [ 298.405488][T12450] ____sys_sendmsg+0x54e/0x850 [ 298.405516][T12450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.405549][T12450] ? import_iovec+0x73/0xa0 [ 298.405576][T12450] ___sys_sendmsg+0x2a5/0x360 [ 298.405597][T12450] ? __lock_acquire+0x6df/0x2e50 [ 298.405632][T12450] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.405695][T12450] ? __fget_files+0x2a/0x420 [ 298.405721][T12450] ? __fget_files+0x3a2/0x420 [ 298.405763][T12450] __x64_sys_sendmsg+0x1b1/0x290 [ 298.405790][T12450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.405836][T12450] do_syscall_64+0x166/0x520 [ 298.405866][T12450] ? trace_irq_disable+0x3b/0x140 [ 298.405886][T12450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.405907][T12450] ? clear_bhb_loop+0x70/0xc0 [ 298.405933][T12450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.405954][T12450] RIP: 0033:0x7f70b619e159 [ 298.405975][T12450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.405993][T12450] RSP: 002b:00007f70b6fca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.406018][T12450] RAX: ffffffffffffffda RBX: 00007f70b6425fa0 RCX: 00007f70b619e159 [ 298.406034][T12450] RDX: 0000000000048080 RSI: 0000200000000340 RDI: 0000000000000003 [ 298.406048][T12450] RBP: 00007f70b6fca090 R08: 0000000000000000 R09: 0000000000000000 [ 298.406062][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.406075][T12450] R13: 00007f70b6426038 R14: 00007f70b6425fa0 R15: 00007ffc043dfce8 [ 298.406109][T12450] [ 298.471147][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1939'. [ 298.640829][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 298.659774][ T5624] block nbd6: Receive control failed (result -1) [ 298.796355][T12456] validate_nla: 58 callbacks suppressed [ 298.796476][T12456] netlink: 'syz.4.1940': attribute type 5 has an invalid length. [ 299.275967][T12469] netlink: 'syz.5.1944': attribute type 1 has an invalid length. [ 299.276010][T12469] netlink: 'syz.5.1944': attribute type 2 has an invalid length. [ 299.660915][T12477] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1947'. [ 300.363009][T12504] syzkaller0: left promiscuous mode [ 300.363049][T12504] syzkaller0: left allmulticast mode [ 300.457860][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.549616][T12514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1958'. [ 301.151928][T12526] lo speed is unknown, defaulting to 1000 [ 302.819331][T12580] bond7: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 302.830761][T12580] bond7: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 302.843873][T12580] bond7: entered allmulticast mode [ 302.849872][T12580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.352987][T12595] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 303.369891][T12594] ip6gre2: entered promiscuous mode [ 303.375431][T12594] ip6gre2: entered allmulticast mode [ 303.466990][T12595] bond8: entered promiscuous mode [ 303.483693][T12595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.503250][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 303.503293][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 303.522240][T12602] netlink: 'syz.5.1993': attribute type 2 has an invalid length. [ 303.530691][T12602] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1993'. [ 303.535825][T12598] vlan3: entered allmulticast mode [ 303.535863][T12598] bond8: entered allmulticast mode [ 303.588357][T12608] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 303.614980][T12603] dvmrp1: entered allmulticast mode [ 303.761768][ T83] tipc: Subscription rejected, illegal request [ 303.793887][T12595] bond8: (slave bridge2): making interface the new active one [ 303.805587][T12595] bridge2: entered promiscuous mode [ 303.806136][T12595] bridge2: entered allmulticast mode [ 303.826823][T12595] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 303.827345][T12600] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 303.827732][T12600] dvmrp1: left allmulticast mode [ 303.886756][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 303.916673][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 304.392855][T12612] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 304.562221][T12627] syzkaller1: entered promiscuous mode [ 304.570223][T12627] syzkaller1: entered allmulticast mode [ 305.017313][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.240421][T12648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2004'. [ 305.249892][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 305.249947][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 305.540440][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 305.782967][T12673] xt_bpf: check failed: parse error [ 305.825559][T12670] syzkaller1: entered promiscuous mode [ 305.825658][T12670] syzkaller1: entered allmulticast mode [ 306.174757][T12666] lo speed is unknown, defaulting to 1000 [ 306.206762][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 306.219088][T12682] veth1_macvtap: left promiscuous mode [ 306.338824][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 90 seconds [ 306.339015][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 90 seconds [ 306.339083][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 90 seconds [ 306.339175][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 90 seconds [ 306.570707][T12683] ipvlan3: entered promiscuous mode [ 306.576451][T12683] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.589694][T12683] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 306.601523][T12683] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 306.716871][T12687] syzkaller0: entered promiscuous mode [ 306.728183][T12687] syzkaller0: entered allmulticast mode [ 306.942788][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 306.972986][T12694] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 307.337903][T12705] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2025'. [ 307.352294][T12705] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 307.576376][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 307.588510][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2029'. [ 307.771798][T12725] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 307.867922][T12725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.876452][T12726] bond3: entered allmulticast mode [ 307.885109][T12726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2032'. [ 307.910332][T12729] bond3: (slave ip6gretap0): making interface the new active one [ 307.918549][T12729] ip6gretap0: entered allmulticast mode [ 307.925189][T12729] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 307.946235][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 308.099058][T12740] pim6reg99999999: entered allmulticast mode [ 308.114021][ T83] tipc: Subscription rejected, illegal request [ 308.234790][T12740] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 308.305495][T12740] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 308.352609][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 308.404680][T12755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 309.497517][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.453059][T12719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.463432][T12731] netlink: 'syz.1.2024': attribute type 1 has an invalid length. [ 310.726717][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 310.984835][ T1160] IPVS: starting estimator thread 0... [ 311.068212][T12770] IPVS: using max 25 ests per chain, 60000 per kthread [ 311.260905][ T7732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.269803][ T7732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.322794][ T83] tipc: Subscription rejected, illegal request [ 311.416848][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.442863][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.444070][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.468414][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.480794][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.495909][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.510563][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.522860][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.539339][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.551870][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.565254][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.570881][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.589319][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.601628][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.613963][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.627648][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.628786][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.652058][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.663977][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.676611][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.690300][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.702970][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.726328][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.738226][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.750642][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.762150][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.773133][T12790] __nla_validate_parse: 1 callbacks suppressed [ 311.773194][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2045'. [ 311.791595][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.824511][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.836020][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.848737][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.850531][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.865739][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.908507][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.937719][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.038635][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.053828][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.068760][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.069992][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.172227][T12798] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 312.232984][ T7732] tipc: Subscription rejected, illegal request [ 312.263959][T12799] Bluetooth: hci0: unsupported parameter 5135 [ 312.270254][T12799] Bluetooth: hci0: unsupported parameter 8192 [ 312.276635][T12799] Bluetooth: hci0: unsupported parameter 5135 [ 312.293048][T12801] syzkaller0: entered promiscuous mode [ 312.299003][T12801] syzkaller0: entered allmulticast mode [ 312.309816][T12799] Bluetooth: hci0: unsupported parameter 8192 [ 312.563014][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 312.572385][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 312.586128][T12809] netlink: 'syz.1.2052': attribute type 19 has an invalid length. [ 312.586229][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 312.649706][T12808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.826310][T12809] netlink: 'syz.1.2052': attribute type 19 has an invalid length. [ 312.837421][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 312.886986][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 313.047435][ T83] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.047511][ T83] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.047574][ T83] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.047632][ T83] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.052963][T12826] tap0: tun_chr_ioctl cmd 1074025677 [ 313.053220][T12826] tap0: linktype set to 778 [ 313.570537][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 313.715759][T12864] netlink: 'syz.4.2061': attribute type 5 has an invalid length. [ 313.761788][T12854] syzkaller1: entered promiscuous mode [ 313.768090][T12854] syzkaller1: entered allmulticast mode [ 314.014666][T12869] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 314.160375][T12869] bond9: entered promiscuous mode [ 314.167854][T12869] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.751901][T12872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.762184][T12872] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 314.762250][T12872] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 314.808238][T12872] bond9: (slave gre1): making interface the new active one [ 314.816717][T12872] gre1: entered promiscuous mode [ 314.826840][T12872] bond9: (slave gre1): Enslaving as an active interface with an up link [ 315.891081][T12901] syzkaller1: entered promiscuous mode [ 315.905873][T12901] syzkaller1: entered allmulticast mode [ 316.101614][T12910] netlink: 'syz.4.2072': attribute type 5 has an invalid length. [ 316.425177][T12916] openvswitch: netlink: Missing valid actions attribute. [ 316.425341][T12916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.611307][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 316.794071][T12928] syzkaller1: entered promiscuous mode [ 316.800497][T12928] syzkaller1: entered allmulticast mode [ 317.178192][T12940] 8021q: VLANs not supported on nlmon0 [ 317.494860][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 317.508346][T12949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2083'. [ 317.724866][T12945] bond0: entered allmulticast mode [ 317.986923][T12965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2085'. [ 318.196935][T12968] syzkaller1: entered promiscuous mode [ 318.204849][T12968] syzkaller1: entered allmulticast mode [ 318.954523][T12996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2099'. [ 319.039029][T12992] siw: device registration error -23 [ 319.472895][T13011] lo speed is unknown, defaulting to 1000 [ 319.762101][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 319.791355][T13017] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2104'. [ 319.791516][T13017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2104'. [ 320.573097][T13041] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2110'. [ 320.686550][T13042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2110'. [ 320.700463][T13034] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2110'. [ 320.823165][T13045] bridge0: port 3(veth0) entered blocking state [ 320.831760][T13045] bridge0: port 3(veth0) entered disabled state [ 320.831964][T13045] veth0: entered allmulticast mode [ 320.846769][T13045] veth0: entered promiscuous mode [ 320.852818][T13045] bridge0: port 3(veth0) entered blocking state [ 320.852989][T13045] bridge0: port 3(veth0) entered forwarding state [ 321.017361][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.859269][T13059] syzkaller0: entered promiscuous mode [ 321.859337][T13059] syzkaller0: entered allmulticast mode [ 322.173545][T13068] veth3: entered promiscuous mode [ 322.181577][T13068] veth3: entered allmulticast mode [ 322.271743][T13069] veth3: entered promiscuous mode [ 322.280277][T13069] veth3: entered allmulticast mode [ 322.452742][T13087] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 322.542552][T13082] syzkaller1: entered promiscuous mode [ 322.542593][T13082] syzkaller1: entered allmulticast mode [ 322.621481][T13084] __nla_validate_parse: 4 callbacks suppressed [ 322.621529][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 322.719538][T13091] 8021q: VLANs not supported on nlmon0 [ 322.807599][T13093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2126'. [ 322.807824][T13093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2126'. [ 322.898884][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 322.914708][T13098] openvswitch: netlink: Missing valid actions attribute. [ 322.920982][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 322.933036][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 322.934357][T13093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2126'. [ 322.939039][T13093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2126'. [ 322.943132][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 322.962097][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 322.985075][T13098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.456611][T13107] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 324.476723][ T7732] bond5: (slave dummy0): link status definitely down, disabling slave [ 324.593970][T13113] syzkaller1: entered promiscuous mode [ 324.594034][T13113] syzkaller1: entered allmulticast mode [ 325.385658][T13155] veth0: left allmulticast mode [ 325.385713][T13155] veth0: left promiscuous mode [ 325.386368][T13155] bridge0: port 3(veth0) entered disabled state [ 325.435716][T13155] bridge_slave_0: left allmulticast mode [ 325.435766][T13155] bridge_slave_0: left promiscuous mode [ 325.442171][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.493651][T13155] bridge_slave_1: left allmulticast mode [ 325.493729][T13155] bridge_slave_1: left promiscuous mode [ 325.493946][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.507190][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 325.588114][T13155] bond0: (slave bond_slave_0): Releasing backup interface [ 325.656832][T13155] bond0: (slave bond_slave_1): Releasing backup interface [ 325.721360][T13155] team0: Port device team_slave_0 removed [ 325.752307][T13155] team0: Port device team_slave_1 removed [ 325.755965][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.760220][T13155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.774437][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.774463][T13155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.790682][T13155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.836381][T13157] team0: Mode changed to "activebackup" [ 326.149030][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 326.777575][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.381002][T13212] Unknown options in mask 6 [ 327.388768][T13212] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 328.542879][T13217] bridge7: entered promiscuous mode [ 328.545930][T13217] bridge7: entered allmulticast mode [ 328.664710][T13235] netlink: 'syz.5.2151': attribute type 1 has an invalid length. [ 328.729498][T13236] __nla_validate_parse: 71 callbacks suppressed [ 328.730364][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2150'. [ 328.919233][T13241] sit0: entered promiscuous mode [ 328.919283][T13241] sit0: entered allmulticast mode [ 329.059088][T13246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2152'. [ 329.118852][T13235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 329.600868][T13254] nbd: couldn't find a device at index 2 [ 329.602851][T13257] nbd: couldn't find a device at index 2 [ 329.645040][T13254] bond5: (slave dummy0): Releasing backup interface [ 329.686267][T13257] netlink: 'syz.2.2156': attribute type 11 has an invalid length. [ 329.686324][T13257] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.2156'. [ 329.699149][T13254] bond6: (slave veth0_to_bond): Releasing backup interface [ 329.755406][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2157'. [ 329.820140][T13254] bond0: (slave bond_slave_0): Releasing backup interface [ 329.875187][T13254] bond0: (slave bond_slave_1): Releasing backup interface [ 330.013926][T13254] bond4: (slave geneve2): Releasing active interface [ 330.061105][T13254] bond5: (slave veth1): Releasing backup interface [ 330.106890][T13254] bond8: (slave bridge2): Releasing backup interface [ 330.106954][T13254] bond8: (slave bridge2): the permanent HWaddr of slave - 7e:f6:7f:f0:87:a9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.107000][T13254] bridge2: left promiscuous mode [ 330.109327][T13254] bridge2: left allmulticast mode [ 330.109449][T13254] bond8: (slave bridge3): making interface the new active one [ 330.109463][T13254] bridge3: entered promiscuous mode [ 330.109788][T13254] bridge3: entered allmulticast mode [ 330.136940][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 330.524322][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 330.524376][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 330.820952][T13254] bond8: (slave bridge3): Releasing backup interface [ 330.821003][T13254] bridge3: left promiscuous mode [ 330.821180][T13254] bridge3: left allmulticast mode [ 330.906044][T13254] bond9: (slave gre1): Releasing backup interface [ 330.906102][T13254] gre1: left promiscuous mode [ 330.941987][ T1899] syz1: Port: 1 Link DOWN [ 331.703324][T13314] openvswitch: netlink: Missing valid actions attribute. [ 331.703406][T13314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.812144][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 331.873829][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 331.880004][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 331.987394][T13321] Cannot find del_set index 2 as target [ 332.007259][T13323] netlink: set zone limit has 4 unknown bytes [ 332.105396][T13323] ovs-s: entered promiscuous mode [ 332.535749][T13343] netlink: 'syz.1.2177': attribute type 5 has an invalid length. [ 332.924359][T13354] openvswitch: netlink: Missing valid actions attribute. [ 332.924424][T13354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.991033][T13357] IPVS: Error connecting to the multicast addr [ 334.035233][T13387] x_tables: duplicate underflow at hook 2 [ 334.063700][T13390] __nla_validate_parse: 2 callbacks suppressed [ 334.064438][T13390] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2191'. [ 334.101766][T13391] openvswitch: netlink: Missing valid actions attribute. [ 334.101842][T13391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.485092][T13402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 334.741374][T13407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2198'. [ 335.545883][T13427] openvswitch: netlink: Missing valid actions attribute. [ 335.545954][T13427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.662284][T13429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2205'. [ 335.662381][T13429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2205'. [ 335.705834][T13430] netlink: 472 bytes leftover after parsing attributes in process `syz.3.2206'. [ 335.705892][T13430] openvswitch: netlink: Flow key attr not present in new flow. [ 335.912290][T13434] sctp: [Deprecated]: syz.2.2208 (pid 13434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.912290][T13434] Use struct sctp_sack_info instead [ 336.096750][T13442] batadv0: entered allmulticast mode [ 336.381987][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 120 seconds [ 336.382145][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 120 seconds [ 336.382281][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 120 seconds [ 336.382379][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 120 seconds [ 336.660267][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 337.052743][T13468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2215'. [ 337.103323][T13468] xt_connbytes: Forcing CT accounting to be enabled [ 337.155988][T13461] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.157287][T13461] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.544854][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 337.650916][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 337.823634][T13461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.856220][T13461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.580814][T13508] netlink: 'syz.5.2225': attribute type 15 has an invalid length. [ 338.864981][T13486] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 338.932627][ T1160] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.932948][T13508] netlink: 'syz.5.2225': attribute type 15 has an invalid length. [ 338.933284][ T1160] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.933478][ T1160] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.933581][ T1160] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.944257][ T1160] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.944327][ T1160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.944461][ T1160] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.944524][ T1160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.944620][ T1160] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.944684][ T1160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.944787][ T1160] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.944849][ T1160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.511426][ T12] tipc: Subscription rejected, illegal request [ 339.581777][T13531] __nla_validate_parse: 3 callbacks suppressed [ 339.581839][T13531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2231'. [ 339.783172][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 339.784727][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 339.803692][T13538] Cannot find del_set index 2 as target [ 340.153797][T13550] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2234'. [ 340.153883][T13550] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2234'. [ 340.319319][T13551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.515807][T13551] macsec1: entered allmulticast mode [ 340.515863][T13551] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 340.524900][T13551] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 340.550785][T13551] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 341.325150][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 341.954343][T13592] ±ÿ: renamed from lo [ 342.120900][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 342.121257][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 342.160979][T13600] Cannot find del_set index 2 as target [ 342.233692][T13599] ipvlan2: entered allmulticast mode [ 342.233735][T13599] macvlan1: entered allmulticast mode [ 342.233766][T13599] veth1_vlan: entered allmulticast mode [ 342.291305][T13599] batman_adv: batadv0: Adding interface: ipvlan2 [ 342.291350][T13599] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.294441][T13599] batman_adv: batadv0: Interface activated: ipvlan2 [ 342.379473][T13606] ipvlan3: entered allmulticast mode [ 342.408202][T13606] batman_adv: batadv0: Adding interface: ipvlan3 [ 342.408237][T13606] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.408285][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 342.408306][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.408324][T13606] batman_adv: batadv0: Interface activated: ipvlan3 [ 342.520096][T13599] x_tables: duplicate underflow at hook 2 [ 342.567882][T13612] SET target dimension over the limit! [ 342.571041][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 343.227511][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 343.342545][T13627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.535199][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026a60800: rx timeout, send abort [ 343.535424][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c9abc00: rx timeout, send abort [ 343.535670][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026a60800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.535800][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c9abc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.626599][T13627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.705770][T13627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.765199][T13627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.850366][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.939001][ T7732] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.939074][ T7732] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.939131][ T7732] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.169136][T13656] netlink: 'syz.5.2260': attribute type 4 has an invalid length. [ 344.584695][T13666] syz_tun: entered allmulticast mode [ 344.711837][T13666] dvmrp8: entered allmulticast mode [ 345.383948][T13665] syz_tun: left allmulticast mode [ 346.496512][T13643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.224472][T13692] net_ratelimit: 1 callbacks suppressed [ 347.224555][T13692] ip_tables: iptables: counters copy to user failed while replacing table [ 347.247875][T13692] netlink: 'syz.4.2273': attribute type 12 has an invalid length. [ 347.265855][T13692] __nla_validate_parse: 1 callbacks suppressed [ 347.265915][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 347.283262][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'. [ 347.581593][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 347.720337][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 347.960776][T13706] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 347.966349][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 347.994229][T13703] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 348.236934][T13706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.509064][T13717] lo speed is unknown, defaulting to 1000 [ 348.926289][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 348.972024][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 350.105688][T13777] Unknown options in mask 6 [ 350.110795][T13777] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2294'. [ 350.120805][T13777] netlink: 'syz.5.2294': attribute type 1 has an invalid length. [ 350.128666][T13777] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2294'. [ 350.462192][T13793] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 350.462625][T13793] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 350.464885][T13793] veth1_virt_wifi: entered allmulticast mode [ 350.479926][T13793] veth1_virt_wifi: left allmulticast mode [ 350.796711][ T7732] tipc: Subscription rejected, illegal request [ 350.820727][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 350.843531][ T7732] tipc: Subscription rejected, illegal request [ 350.929323][T13803] Cannot find del_set index 2 as target [ 351.273425][T13811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.422344][T13818] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 351.577587][T13818] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.681205][T13822] bond8: (slave veth1): Enslaving as an active interface with a down link [ 351.970485][T13829] syzkaller0: left promiscuous mode [ 351.975867][T13829] syzkaller0: left allmulticast mode [ 352.481939][T13845] 8021q: VLANs not supported on nlmon0 [ 352.843089][T13855] __nla_validate_parse: 3 callbacks suppressed [ 352.843136][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2316'. [ 352.919493][T13854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.972124][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 353.334455][T13865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.632584][T13874] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 353.643983][T13875] sctp: [Deprecated]: syz.3.2323 (pid 13875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.643983][T13875] Use struct sctp_sack_info instead [ 353.715889][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 353.742932][T13865] syzkaller0: left promiscuous mode [ 353.799732][T13865] bond8: left promiscuous mode [ 353.807241][T13865] bond9: left promiscuous mode [ 353.958977][T13875] bond9: (slave veth13): Enslaving as an active interface with a down link [ 354.181405][T13890] openvswitch: netlink: Missing valid actions attribute. [ 354.181473][T13890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.185747][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 354.408591][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'. [ 355.076025][T13913] lo speed is unknown, defaulting to 1000 [ 355.160089][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'. [ 355.324054][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 355.442717][T13913] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2334'. [ 355.821766][T13941] 8021q: VLANs not supported on nlmon0 [ 356.603131][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 356.716654][T13955] Cannot find set identified by id 0 to match [ 357.089098][T13976] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.2349'. [ 357.376488][T13982] netlink: 'syz.1.2352': attribute type 32 has an invalid length. [ 358.165565][T14001] tc_dump_action: action bad kind [ 358.220820][T14005] __nla_validate_parse: 3 callbacks suppressed [ 358.228048][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'. [ 358.297969][T14007] netlink: 'syz.2.2362': attribute type 2 has an invalid length. [ 358.340779][T14009] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 358.367785][T14007] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 358.380456][T14005] Cannot find set identified by id 0 to match [ 358.420603][T14009] veth0_to_bond: entered promiscuous mode [ 358.584364][T14015] netlink: 'syz.2.2366': attribute type 4 has an invalid length. [ 358.605739][T14015] netlink: 'syz.2.2366': attribute type 4 has an invalid length. [ 359.189989][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2370'. [ 360.008014][T14042] syzkaller0: entered promiscuous mode [ 360.013790][T14042] syzkaller0: entered allmulticast mode [ 360.292382][T14044] netlink: 'syz.3.2376': attribute type 12 has an invalid length. [ 360.325752][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2376'. [ 360.468830][T14050] netlink: 'syz.5.2377': attribute type 2 has an invalid length. [ 360.577929][T14050] þ: entered promiscuous mode [ 361.075709][T14061] netlink: 1060 bytes leftover after parsing attributes in process `syz.5.2379'. [ 361.582655][T14072] syzkaller0: entered promiscuous mode [ 361.582697][T14072] syzkaller0: entered allmulticast mode [ 361.699568][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 361.867109][T14079] Unknown options in mask 6 [ 361.876253][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2387'. [ 361.876329][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2387'. [ 361.896627][T14079] netlink: 'syz.5.2387': attribute type 1 has an invalid length. [ 361.906639][T14079] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2387'. [ 363.234752][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 363.675186][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 364.476936][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 364.530356][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2407'. [ 364.631732][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2407'. [ 364.679691][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 364.689332][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 365.160179][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 365.350339][T14144] x_tables: duplicate underflow at hook 2 [ 365.353680][T14144] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 365.416157][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 365.433341][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.801268][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2414'. [ 365.921915][T14158] netlink: 'syz.4.2416': attribute type 5 has an invalid length. [ 366.110436][T14163] tipc: Enabled bearer , priority 0 [ 366.133622][T14163] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 366.202789][T14168] netlink: 'syz.4.2418': attribute type 2 has an invalid length. [ 366.224474][T14163] syzkaller0: mtu less than device minimum [ 366.229934][T14168] FAULT_INJECTION: forcing a failure. [ 366.229934][T14168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.229989][T14168] CPU: 0 UID: 0 PID: 14168 Comm: syz.4.2418 Not tainted syzkaller #0 PREEMPT(full) [ 366.230011][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.230022][T14168] Call Trace: [ 366.230058][T14168] [ 366.230105][T14168] dump_stack_lvl+0xe8/0x150 [ 366.230247][T14168] should_fail_ex+0x410/0x560 [ 366.230335][T14168] _copy_from_user+0x2d/0xb0 [ 366.230382][T14168] ___sys_sendmsg+0x1c6/0x360 [ 366.230474][T14168] ? __lock_acquire+0x6df/0x2e50 [ 366.230541][T14168] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.230600][T14168] ? __fget_files+0x2a/0x420 [ 366.230658][T14168] ? __fget_files+0x3a2/0x420 [ 366.230696][T14168] __x64_sys_sendmsg+0x1b1/0x290 [ 366.230721][T14168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.230767][T14168] do_syscall_64+0x166/0x520 [ 366.230929][T14168] ? trace_irq_disable+0x3b/0x140 [ 366.230973][T14168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.231018][T14168] ? clear_bhb_loop+0x70/0xc0 [ 366.231044][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.231065][T14168] RIP: 0033:0x7f1835d9e159 [ 366.231107][T14168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.231125][T14168] RSP: 002b:00007f1836bf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.231156][T14168] RAX: ffffffffffffffda RBX: 00007f1836025fa0 RCX: 00007f1835d9e159 [ 366.231171][T14168] RDX: 000000002004c000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 366.231185][T14168] RBP: 00007f1836bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 366.231198][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.231211][T14168] R13: 00007f1836026038 R14: 00007f1836025fa0 R15: 00007ffee6ebcaf8 [ 366.231245][T14168] [ 366.458373][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 150 seconds [ 366.458537][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 150 seconds [ 366.458673][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 150 seconds [ 366.458767][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 150 seconds [ 366.673718][T14185] syzkaller0: entered promiscuous mode [ 367.130564][T14196] veth1_macvtap: left promiscuous mode [ 367.453667][T14215] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 367.956446][T14223] Cannot find del_set index 2 as target [ 368.338618][T14244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.354087][T14244] __nla_validate_parse: 7 callbacks suppressed [ 368.360892][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'. [ 368.510500][T14244] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2442'. [ 368.591368][T14252] netlink: 'syz.2.2450': attribute type 2 has an invalid length. [ 368.708952][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 368.850465][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 369.054459][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.054825][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.055408][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.055662][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.058515][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.058796][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.059046][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.059283][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.059530][T14264] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 369.218399][T14268] syzkaller1: entered promiscuous mode [ 369.218461][T14268] syzkaller1: entered allmulticast mode [ 369.878749][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 369.886773][T14292] netlink: 'syz.4.2461': attribute type 2 has an invalid length. [ 369.923814][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 370.240905][T14298] tipc: New replicast peer: 255.255.255.255 [ 370.241647][T14298] tipc: Enabled bearer , priority 10 [ 370.248711][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 370.250654][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 370.252379][T14298] netlink: 'syz.2.2464': attribute type 1 has an invalid length. [ 370.316516][T14298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2464'. [ 370.569134][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2465'. [ 370.572189][T14302] pim6reg1: entered promiscuous mode [ 370.572209][T14302] pim6reg1: entered allmulticast mode [ 371.367738][ T5753] tipc: Node number set to 4261395554 [ 371.378552][T14324] netlink: 'syz.1.2473': attribute type 2 has an invalid length. [ 371.378608][T14324] netlink: 'syz.1.2473': attribute type 2 has an invalid length. [ 371.588556][T14334] bridge: RTM_NEWNEIGH with invalid ether address [ 371.964218][T14338] syzkaller1: entered promiscuous mode [ 371.972090][T14338] syzkaller1: entered allmulticast mode [ 374.059835][T14396] __nla_validate_parse: 3 callbacks suppressed [ 374.059885][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 374.084191][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 374.131130][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 374.131987][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 374.336398][T14398] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2503'. [ 374.336457][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 374.341907][T14398] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2503'. [ 374.365077][T14398] tipc: Trying to set illegal importance in message [ 374.690668][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 374.860967][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 375.085386][T14433] xt_bpf: check failed: parse error [ 375.375246][T14439] netlink: 'syz.5.2515': attribute type 1 has an invalid length. [ 375.429768][T14439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.564374][T14439] veth3: entered allmulticast mode [ 376.393862][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2524'. [ 377.253934][T14465] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 377.983366][T14484] veth3: entered allmulticast mode [ 378.008323][T14484] team0: Port device veth3 added [ 378.028271][T14486] syzkaller1: entered promiscuous mode [ 378.033931][T14486] syzkaller1: entered allmulticast mode [ 378.176770][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.176770][T14494] Use struct sctp_sack_info instead [ 378.176845][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.176845][T14494] Use struct sctp_sack_info instead [ 378.176910][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.176910][T14494] Use struct sctp_sack_info instead [ 378.176957][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.176957][T14494] Use struct sctp_sack_info instead [ 378.212067][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212067][T14494] Use struct sctp_sack_info instead [ 378.212135][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212135][T14494] Use struct sctp_sack_info instead [ 378.212181][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212181][T14494] Use struct sctp_sack_info instead [ 378.212226][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212226][T14494] Use struct sctp_sack_info instead [ 378.212270][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212270][T14494] Use struct sctp_sack_info instead [ 378.212314][T14494] sctp: [Deprecated]: syz.1.2536 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.212314][T14494] Use struct sctp_sack_info instead [ 378.561549][T14503] ±ÿ: entered allmulticast mode [ 379.099737][T14511] bond8: (slave veth1): Releasing active interface [ 379.733442][T14520] syzkaller1: entered promiscuous mode [ 379.733516][T14520] syzkaller1: entered allmulticast mode [ 379.945740][T14546] netlink: 'syz.1.2550': attribute type 5 has an invalid length. [ 380.212408][T14555] __nla_validate_parse: 5 callbacks suppressed [ 380.212489][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 380.243021][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 380.411442][T14555] Cannot find del_set index 2 as target [ 381.063684][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2556'. [ 381.513391][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2560'. [ 381.522983][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2560'. [ 382.330181][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 382.469738][T14628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2572'. [ 382.672403][T14634] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.2572'. [ 382.688826][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 382.749636][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'. [ 383.476463][T14646] syzkaller0: left promiscuous mode [ 383.476595][T14646] syzkaller0: left allmulticast mode [ 383.632902][T14655] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 384.076791][T14674] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 384.673564][T14692] 8021q: adding VLAN 0 to HW filter on device bond10 [ 384.745506][T14697] bridge: RTM_NEWNEIGH with invalid ether address [ 385.079855][T14681] ip_tables: iptables: counters copy to user failed while replacing table [ 385.333720][T14710] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 385.790425][T14726] netlink: 'syz.4.2601': attribute type 3 has an invalid length. [ 385.820913][T14726] __nla_validate_parse: 5 callbacks suppressed [ 385.829348][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 385.863548][T14726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.876201][T14731] ip6t_ah: unknown flags 4 [ 386.169180][T14739] bridge: RTM_NEWNEIGH with invalid ether address [ 386.594332][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2607'. [ 386.703671][T14756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2607'. [ 387.108818][T14766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2613'. [ 388.563871][T14725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.786963][T14785] xt_bpf: check failed: parse error [ 388.921852][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 388.933608][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 388.955993][T14788] Cannot find del_set index 2 as target [ 389.239433][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 389.264913][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 389.293834][T14802] netlink: 'syz.1.2624': attribute type 2 has an invalid length. [ 389.328829][T14792] Cannot find del_set index 2 as target [ 389.863055][T14820] xt_bpf: check failed: parse error [ 389.916616][T14822] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2628'. [ 389.997613][T14822] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2628'. [ 390.246694][T14825] openvswitch: netlink: Flow actions attr not present in new flow. [ 390.309813][T14830] Cannot find set identified by id 0 to match [ 390.738541][T14837] netlink: 'syz.1.2635': attribute type 46 has an invalid length. [ 391.015716][T14824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.060034][T14841] __nla_validate_parse: 6 callbacks suppressed [ 391.060096][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2637'. [ 391.173543][T14839] syzkaller0: left promiscuous mode [ 391.173590][T14839] syzkaller0: left allmulticast mode [ 391.583757][T14850] netlink: 'syz.5.2639': attribute type 5 has an invalid length. [ 392.039807][T14855] bridge_slave_0: entered promiscuous mode [ 392.142221][T14852] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2640'. [ 392.142275][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 392.147989][T14852] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2640'. [ 392.349617][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 392.452452][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 392.454282][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 393.430130][T14890] netlink: 'syz.5.2651': attribute type 5 has an invalid length. [ 393.613744][T14893] sctp: [Deprecated]: syz.3.2653 (pid 14893) Use of int in maxseg socket option. [ 393.613744][T14893] Use struct sctp_assoc_value instead [ 394.003680][T14895] bond11: option all_slaves_active: invalid value (255) [ 394.450605][T14895] bond11 (unregistering): Released all slaves [ 394.484053][T14918] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2655'. [ 394.484184][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2655'. [ 394.551848][T14918] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2655'. [ 394.597135][T14912] Cannot find del_set index 2 as target [ 396.092829][T14967] __nla_validate_parse: 3 callbacks suppressed [ 396.092894][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 396.368884][T14975] netlink: 'syz.2.2672': attribute type 5 has an invalid length. [ 396.540665][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 180 seconds [ 396.540797][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 180 seconds [ 396.540865][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 180 seconds [ 396.540929][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 180 seconds [ 396.672275][T14984] xt_bpf: check failed: parse error [ 396.801361][T14993] netlink: 3568 bytes leftover after parsing attributes in process `syz.4.2678'. [ 396.984370][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 397.010768][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 397.535195][T15014] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2682'. [ 397.635248][T15014] syzkaller1: entered allmulticast mode [ 397.714189][T15021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2682'. [ 397.784674][T15023] netlink: 'syz.4.2685': attribute type 5 has an invalid length. [ 397.863882][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2686'. [ 398.263418][T15036] xt_bpf: check failed: parse error [ 398.509259][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.520761][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2691'. [ 398.544603][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.544645][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2691'. [ 398.582154][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.590471][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2691'. [ 398.622505][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.643143][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.652192][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.675991][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.694046][T15049] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 398.800191][ T5624] Bluetooth: hci5: link tx timeout [ 398.800372][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 398.954935][ T5624] Bluetooth: hci5: link tx timeout [ 398.954974][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 398.999952][ T5624] Bluetooth: hci5: link tx timeout [ 398.999992][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.393260][T15072] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 399.738885][ T5624] Bluetooth: hci5: link tx timeout [ 399.738924][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.901194][ T5624] Bluetooth: hci5: link tx timeout [ 399.901233][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.861939][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 401.109404][T15118] ´: entered promiscuous mode [ 401.234062][T15128] xt_bpf: check failed: parse error [ 401.528778][T15139] xt_hashlimit: size too large, truncated to 1048576 [ 401.648120][ T12] tipc: Subscription rejected, illegal request [ 401.987121][T15152] ip6gre2: entered promiscuous mode [ 401.987164][T15152] ip6gre2: entered allmulticast mode [ 402.235750][T15154] __nla_validate_parse: 14 callbacks suppressed [ 402.235824][T15154] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2722'. [ 402.238349][T15154] tipc: Trying to set illegal importance in message [ 403.187358][T15170] validate_nla: 3 callbacks suppressed [ 403.187414][T15170] netlink: 'syz.5.2726': attribute type 6 has an invalid length. [ 403.187434][T15170] netlink: 'syz.5.2726': attribute type 7 has an invalid length. [ 403.187451][T15170] netlink: 'syz.5.2726': attribute type 8 has an invalid length. [ 403.703162][T15215] tipc: Trying to set illegal importance in message [ 404.134078][T15211] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2733'. [ 404.692485][T15233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2743'. [ 404.705053][T15233] netlink: 1200 bytes leftover after parsing attributes in process `syz.3.2743'. [ 404.705206][T15233] netlink: 1200 bytes leftover after parsing attributes in process `syz.3.2743'. [ 404.990203][T15249] xt_bpf: check failed: parse error [ 405.263287][T15257] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2749'. [ 405.274511][T15257] tipc: Trying to set illegal importance in message [ 405.725303][T15269] netlink: 'syz.1.2754': attribute type 2 has an invalid length. [ 406.100035][T15269] ´: entered promiscuous mode [ 406.108644][T15275] bridge0: port 1(syz_tun) entered blocking state [ 406.108770][T15275] bridge0: port 1(syz_tun) entered disabled state [ 406.109012][T15275] syz_tun: entered allmulticast mode [ 406.142207][T15275] syz_tun: entered promiscuous mode [ 406.170985][T15275] bridge0: port 1(syz_tun) entered blocking state [ 406.171103][T15275] bridge0: port 1(syz_tun) entered forwarding state [ 406.202442][T15270] syzkaller1: entered promiscuous mode [ 406.213451][T15270] syzkaller1: entered allmulticast mode [ 406.910239][T15301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2763'. [ 406.922906][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 406.996747][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 407.241639][T15310] tipc: Enabling of bearer rejected, already enabled [ 407.314877][T15314] xt_CONNSECMARK: invalid mode: 254 [ 407.397878][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2767'. [ 407.821703][T15336] syzkaller0: entered promiscuous mode [ 407.821754][T15336] syzkaller0: entered allmulticast mode [ 407.937964][T15340] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 407.938014][T15340] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2773'. [ 408.236966][T15349] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.595114][ T7731] tipc: Subscription rejected, illegal request [ 408.637708][T15360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 408.648340][T15360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 408.710450][T15360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 408.710541][T15360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 408.852660][T15366] bridge2: entered promiscuous mode [ 408.852726][T15366] bridge2: entered allmulticast mode [ 408.882022][T15366] team0: Port device bridge2 added [ 408.942432][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2786'. [ 408.942526][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2786'. [ 409.150662][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2786'. [ 409.150737][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2786'. [ 409.690603][T15395] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.064838][T15412] netlink: 'syz.1.2793': attribute type 11 has an invalid length. [ 410.626401][T15431] x_tables: duplicate underflow at hook 3 [ 410.775508][T15434] pim6reg1: entered promiscuous mode [ 410.775557][T15434] pim6reg1: entered allmulticast mode [ 410.856755][T15448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.861157][T15448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.749898][T15532] netlink: 'syz.3.2811': attribute type 8 has an invalid length. [ 412.749943][T15532] __nla_validate_parse: 9 callbacks suppressed [ 412.749973][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 413.187199][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 414.064281][T15573] syzkaller0: left promiscuous mode [ 414.064350][T15573] syzkaller0: left allmulticast mode [ 414.328209][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2822'. [ 414.380166][T15575] vlan0: entered promiscuous mode [ 414.645717][ T7731] tipc: Subscription rejected, illegal request [ 414.716606][T15586] af_packet: packet size is too long (65554 > 2016) [ 414.926635][T15593] bridge: RTM_NEWNEIGH with invalid ether address [ 414.933631][T15593] bridge: RTM_NEWNEIGH with invalid ether address [ 416.106017][T15620] bridge_slave_0: left allmulticast mode [ 416.106148][T15620] bridge_slave_0: left promiscuous mode [ 416.106857][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.129416][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 416.136071][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 416.138834][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 416.140080][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 416.140851][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.237649][T15620] bridge_slave_1: left allmulticast mode [ 416.237707][T15620] bridge_slave_1: left promiscuous mode [ 416.237955][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.332203][T15620] bond0: (slave bond_slave_0): Releasing backup interface [ 416.389049][T15620] bond0: (slave bond_slave_1): Releasing backup interface [ 416.419046][T15620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.517871][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 416.654189][T15643] unsupported nlmsg_type 40 [ 416.662182][T15638] tipc: Enabled bearer , priority 0 [ 417.967679][T15666] netlink: 'syz.2.2840': attribute type 4 has an invalid length. [ 417.986573][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 417.987892][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 417.991177][T15621] lo speed is unknown, defaulting to 1000 [ 418.071416][T15671] Cannot find del_set index 2 as target [ 418.217889][ T5624] Bluetooth: hci6: command tx timeout [ 418.380878][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2844'. [ 418.391924][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2844'. [ 418.532292][T15686] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.658307][T15687] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.910120][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2846'. [ 418.993362][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 419.100990][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2846'. [ 419.101166][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2846'. [ 419.101299][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2846'. [ 419.101429][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2846'. [ 420.297239][ T5624] Bluetooth: hci6: command tx timeout [ 420.319624][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.319832][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.319997][T15621] bridge_slave_0: entered allmulticast mode [ 420.333920][T15621] bridge_slave_0: entered promiscuous mode [ 420.346929][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.347107][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.347259][T15621] bridge_slave_1: entered allmulticast mode [ 420.356357][T15621] bridge_slave_1: entered promiscuous mode [ 420.575260][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.610525][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.745767][T15751] Cannot find set identified by id 0 to match [ 420.841495][T15621] team0: Port device team_slave_0 added [ 420.893110][T15621] team0: Port device team_slave_1 added [ 421.015564][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.025968][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.055211][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.122933][T15761] tbf_change: 24 callbacks suppressed [ 421.123502][T15761] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 421.165121][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.173885][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.204998][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.565586][T15621] hsr_slave_0: entered promiscuous mode [ 421.573741][T15621] hsr_slave_1: entered promiscuous mode [ 421.576421][T15621] debugfs: 'hsr0' already exists in 'hsr' [ 421.576443][T15621] Cannot create hsr debugfs directory [ 421.664024][T15773] Unknown options in mask 6 [ 421.717968][T15779] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 422.025887][T15778] syzkaller0: entered promiscuous mode [ 422.025931][T15778] syzkaller0: entered allmulticast mode [ 422.147671][T15787] syzkaller1: entered promiscuous mode [ 422.147719][T15787] syzkaller1: entered allmulticast mode [ 422.378631][ T5624] Bluetooth: hci6: command tx timeout [ 422.583718][T15799] syzkaller0: entered promiscuous mode [ 422.583846][T15799] syzkaller0: entered allmulticast mode [ 423.002222][T15816] __nla_validate_parse: 15 callbacks suppressed [ 423.011680][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 423.028521][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 423.151166][T15805] Cannot find del_set index 2 as target [ 423.351986][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 423.373579][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 423.649667][T15827] FAULT_INJECTION: forcing a failure. [ 423.649667][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 423.680217][T15827] CPU: 1 UID: 0 PID: 15827 Comm: syz.1.2877 Not tainted syzkaller #0 PREEMPT(full) [ 423.680249][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.680262][T15827] Call Trace: [ 423.680270][T15827] [ 423.680280][T15827] dump_stack_lvl+0xe8/0x150 [ 423.680322][T15827] should_fail_ex+0x410/0x560 [ 423.680362][T15827] should_failslab+0xa8/0x100 [ 423.680426][T15827] __kmalloc_noprof+0xfe/0x720 [ 423.680470][T15827] ? __crypto_alloc_tfm+0x101/0x370 [ 423.680593][T15827] ? __crypto_alloc_tfm+0x101/0x370 [ 423.680627][T15827] __crypto_alloc_tfm+0x101/0x370 [ 423.680659][T15827] crypto_spawn_tfm+0x72/0xd0 [ 423.680686][T15827] lskcipher_init_tfm_simple2+0x4c/0xa0 [ 423.680778][T15827] crypto_create_tfm_node+0x143/0x3c0 [ 423.680813][T15827] crypto_spawn_tfm2+0x5c/0x90 [ 423.680837][T15827] lskcipher_init_tfm_simple+0x42/0x90 [ 423.680888][T15827] crypto_create_tfm_node+0x143/0x3c0 [ 423.680923][T15827] crypto_init_lskcipher_ops_sg+0x5b/0xe0 [ 423.680955][T15827] crypto_create_tfm_node+0x143/0x3c0 [ 423.680987][T15827] crypto_spawn_tfm2+0x5c/0x90 [ 423.681012][T15827] crypto_authenc_init_tfm+0x69/0x1c0 [ 423.681083][T15827] crypto_create_tfm_node+0x143/0x3c0 [ 423.681114][T15827] crypto_spawn_tfm2+0x5c/0x90 [ 423.681137][T15827] aead_init_geniv+0xa6/0x170 [ 423.681169][T15827] crypto_create_tfm_node+0x143/0x3c0 [ 423.681202][T15827] crypto_alloc_tfm_node+0x169/0x3e0 [ 423.681241][T15827] esp_init_state+0x615/0x1220 [ 423.681319][T15827] ? ____sys_sendmsg+0x54e/0x850 [ 423.681342][T15827] ? ___sys_sendmsg+0x2a5/0x360 [ 423.681361][T15827] ? __x64_sys_sendmsg+0x1b1/0x290 [ 423.681392][T15827] ? __pfx_esp_init_state+0x10/0x10 [ 423.681435][T15827] ? lock_acquire+0x115/0x350 [ 423.681471][T15827] ? __xfrm_init_state+0x745/0x1320 [ 423.681544][T15827] __xfrm_init_state+0x9dd/0x1320 [ 423.681573][T15827] ? __xfrm_init_state+0x745/0x1320 [ 423.681601][T15827] xfrm_init_state+0x1e/0xa0 [ 423.681627][T15827] pfkey_add+0x1d71/0x2e50 [ 423.681716][T15827] ? __pfx_pfkey_add+0x10/0x10 [ 423.681756][T15827] ? pfkey_sendmsg+0x6ee/0x11d0 [ 423.681782][T15827] pfkey_sendmsg+0xceb/0x11d0 [ 423.681818][T15827] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 423.681866][T15827] ? aa_sock_msg_perm+0x144/0x210 [ 423.681934][T15827] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.681965][T15827] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 423.681985][T15827] sock_sendmsg_nosec+0x13a/0x180 [ 423.682013][T15827] ____sys_sendmsg+0x54e/0x850 [ 423.682041][T15827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.682072][T15827] ? import_iovec+0x73/0xa0 [ 423.682124][T15827] ___sys_sendmsg+0x2a5/0x360 [ 423.682146][T15827] ? __lock_acquire+0x6df/0x2e50 [ 423.682171][T15827] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.682233][T15827] ? __fget_files+0x2a/0x420 [ 423.682260][T15827] ? __fget_files+0x3a2/0x420 [ 423.682297][T15827] __x64_sys_sendmsg+0x1b1/0x290 [ 423.682323][T15827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.682369][T15827] do_syscall_64+0x166/0x520 [ 423.682400][T15827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.682422][T15827] ? clear_bhb_loop+0x70/0xc0 [ 423.682446][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.682466][T15827] RIP: 0033:0x7fe7a5f9e159 [ 423.682487][T15827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.682504][T15827] RSP: 002b:00007fe7a6f28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.682528][T15827] RAX: ffffffffffffffda RBX: 00007fe7a6225fa0 RCX: 00007fe7a5f9e159 [ 423.682543][T15827] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 423.682556][T15827] RBP: 00007fe7a6f28090 R08: 0000000000000000 R09: 0000000000000000 [ 423.682569][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.682582][T15827] R13: 00007fe7a6226038 R14: 00007fe7a6225fa0 R15: 00007fff25d27238 [ 423.682617][T15827] [ 424.459057][ T5624] Bluetooth: hci6: command tx timeout [ 424.591097][T15621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.621356][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.623680][T15621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.640947][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.652391][T15621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 424.712266][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.714891][T15621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 424.761632][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.793119][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 424.827860][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 424.940108][T15855] Cannot find del_set index 2 as target [ 425.236898][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.250913][T15870] FAULT_INJECTION: forcing a failure. [ 425.250913][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 425.250978][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.1.2890 Not tainted syzkaller #0 PREEMPT(full) [ 425.251003][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.251015][T15870] Call Trace: [ 425.251023][T15870] [ 425.251030][T15870] dump_stack_lvl+0xe8/0x150 [ 425.251061][T15870] should_fail_ex+0x410/0x560 [ 425.251096][T15870] should_failslab+0xa8/0x100 [ 425.251121][T15870] __kmalloc_noprof+0xfe/0x720 [ 425.251149][T15870] ? __crypto_alloc_tfm+0x101/0x370 [ 425.251173][T15870] ? __crypto_alloc_tfm+0x101/0x370 [ 425.251205][T15870] __crypto_alloc_tfm+0x101/0x370 [ 425.251235][T15870] crypto_spawn_tfm+0x72/0xd0 [ 425.251258][T15870] lskcipher_init_tfm_simple2+0x4c/0xa0 [ 425.251284][T15870] crypto_create_tfm_node+0x143/0x3c0 [ 425.251314][T15870] crypto_spawn_tfm2+0x5c/0x90 [ 425.251335][T15870] lskcipher_init_tfm_simple+0x42/0x90 [ 425.251362][T15870] crypto_create_tfm_node+0x143/0x3c0 [ 425.251391][T15870] crypto_init_lskcipher_ops_sg+0x5b/0xe0 [ 425.251419][T15870] crypto_create_tfm_node+0x143/0x3c0 [ 425.251448][T15870] crypto_spawn_tfm2+0x5c/0x90 [ 425.251470][T15870] crypto_authenc_init_tfm+0x69/0x1c0 [ 425.251500][T15870] crypto_create_tfm_node+0x143/0x3c0 [ 425.251530][T15870] crypto_spawn_tfm2+0x5c/0x90 [ 425.251551][T15870] aead_init_geniv+0xa6/0x170 [ 425.251583][T15870] crypto_create_tfm_node+0x143/0x3c0 [ 425.251612][T15870] crypto_alloc_tfm_node+0x169/0x3e0 [ 425.251647][T15870] esp_init_state+0x615/0x1220 [ 425.251676][T15870] ? ____sys_sendmsg+0x54e/0x850 [ 425.251695][T15870] ? ___sys_sendmsg+0x2a5/0x360 [ 425.251713][T15870] ? __x64_sys_sendmsg+0x1b1/0x290 [ 425.251743][T15870] ? __pfx_esp_init_state+0x10/0x10 [ 425.251782][T15870] ? lock_acquire+0x115/0x350 [ 425.251814][T15870] ? __xfrm_init_state+0x745/0x1320 [ 425.251844][T15870] __xfrm_init_state+0x9dd/0x1320 [ 425.251870][T15870] ? __xfrm_init_state+0x745/0x1320 [ 425.251899][T15870] xfrm_init_state+0x1e/0xa0 [ 425.251923][T15870] pfkey_add+0x1d71/0x2e50 [ 425.251963][T15870] ? __pfx_pfkey_add+0x10/0x10 [ 425.251998][T15870] pfkey_sendmsg+0xceb/0x11d0 [ 425.252031][T15870] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 425.252075][T15870] ? aa_sock_msg_perm+0x144/0x210 [ 425.252101][T15870] ? apparmor_socket_sendmsg+0x98/0x360 [ 425.252130][T15870] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 425.252150][T15870] sock_sendmsg_nosec+0x13a/0x180 [ 425.252178][T15870] ____sys_sendmsg+0x54e/0x850 [ 425.252204][T15870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.252234][T15870] ? import_iovec+0x73/0xa0 [ 425.252258][T15870] ___sys_sendmsg+0x2a5/0x360 [ 425.252278][T15870] ? __lock_acquire+0x6df/0x2e50 [ 425.252301][T15870] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.252357][T15870] ? __fget_files+0x2a/0x420 [ 425.252380][T15870] ? __fget_files+0x3a2/0x420 [ 425.252414][T15870] __x64_sys_sendmsg+0x1b1/0x290 [ 425.252437][T15870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.252480][T15870] do_syscall_64+0x166/0x520 [ 425.252505][T15870] ? trace_irq_disable+0x3b/0x140 [ 425.252525][T15870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.252545][T15870] ? clear_bhb_loop+0x70/0xc0 [ 425.252569][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.252587][T15870] RIP: 0033:0x7fe7a5f9e159 [ 425.252607][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.252623][T15870] RSP: 002b:00007fe7a6f28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.252644][T15870] RAX: ffffffffffffffda RBX: 00007fe7a6225fa0 RCX: 00007fe7a5f9e159 [ 425.252666][T15870] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 425.252678][T15870] RBP: 00007fe7a6f28090 R08: 0000000000000000 R09: 0000000000000000 [ 425.252690][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.252701][T15870] R13: 00007fe7a6226038 R14: 00007fe7a6225fa0 R15: 00007fff25d27238 [ 425.252732][T15870] [ 425.299330][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.319573][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.319698][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.336926][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.337090][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.812141][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 425.812197][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 426.005158][T15875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2891'. [ 426.630492][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 210 seconds [ 426.630658][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 210 seconds [ 426.630790][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 210 seconds [ 426.630882][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 210 seconds [ 427.210543][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 427.336584][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.657107][T15621] veth0_vlan: entered promiscuous mode [ 427.724023][T15621] veth1_vlan: entered promiscuous mode [ 427.862569][T15621] veth0_macvtap: entered promiscuous mode [ 427.885575][T15621] veth1_macvtap: entered promiscuous mode [ 427.992410][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.008866][T15935] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 428.013771][T15925] __nla_validate_parse: 1 callbacks suppressed [ 428.013789][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 428.014685][T15926] syzkaller1: entered promiscuous mode [ 428.014705][T15926] syzkaller1: entered allmulticast mode [ 428.120974][T15935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.170375][T15935] macvlan11: entered promiscuous mode [ 428.170429][T15935] macvlan11: entered allmulticast mode [ 428.182253][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.195999][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 428.341785][ T7733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.341865][ T7733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.341921][ T7733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.341953][ T7733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.374116][T15935] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 428.405880][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 428.473487][T15944] macvlan12: entered promiscuous mode [ 428.473538][T15944] macvlan12: entered allmulticast mode [ 428.853938][T15956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2906'. [ 428.872971][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 428.873584][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'. [ 428.873611][T15958] netlink: 'syz.4.2907': attribute type 15 has an invalid length. [ 429.047575][ T1160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 429.047716][ T1160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 429.047772][ T1160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 429.047814][ T1160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 429.055594][T15966] xt_bpf: check failed: parse error [ 429.514390][T15973] netlink: 'syz.4.2910': attribute type 13 has an invalid length. [ 429.872120][ T461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.872169][ T461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.125859][ T7733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.125911][ T7733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.133847][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2913'. [ 430.223645][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 430.713962][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 430.714013][T16003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 431.301937][T16013] syzkaller1: entered promiscuous mode [ 431.301981][T16013] syzkaller1: entered allmulticast mode [ 431.373472][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.392183][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.400771][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.413299][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.422009][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.762026][T16024] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 432.974765][T16071] netlink: 'syz.3.2934': attribute type 5 has an invalid length. [ 432.985846][T16071] netlink: 'syz.3.2934': attribute type 9 has an invalid length. [ 433.072850][T16015] lo speed is unknown, defaulting to 1000 [ 433.426601][T16052] __nla_validate_parse: 3 callbacks suppressed [ 433.426654][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 433.426679][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 433.498378][ T5624] Bluetooth: hci0: command tx timeout [ 433.863104][T16091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.079694][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 434.554469][T16113] sctp: [Deprecated]: syz.3.2943 (pid 16113) Use of int in max_burst socket option deprecated. [ 434.554469][T16113] Use struct sctp_assoc_value instead [ 434.664025][T16121] netlink: 'syz.5.2945': attribute type 1 has an invalid length. [ 434.821669][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 434.892166][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2945'. [ 435.172225][T16121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.249078][T16122] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 435.578457][ T5624] Bluetooth: hci0: command tx timeout [ 435.721648][T16136] syzkaller0: entered promiscuous mode [ 435.721696][T16136] syzkaller0: entered allmulticast mode [ 435.982239][T16137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.994758][T16137] team0: Port device bond1 added [ 436.178945][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2950'. [ 436.179082][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2950'. [ 436.554444][T16015] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.555861][T16015] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.576160][T16015] bridge_slave_0: entered allmulticast mode [ 436.596645][T16015] bridge_slave_0: entered promiscuous mode [ 436.625198][T16015] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.625556][T16015] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.625946][T16015] bridge_slave_1: entered allmulticast mode [ 436.654947][T16015] bridge_slave_1: entered promiscuous mode [ 436.719027][T16015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.733080][T16015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.782779][T16015] team0: Port device team_slave_0 added [ 436.792449][T16015] team0: Port device team_slave_1 added [ 436.834968][T16015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.842596][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.870570][T16015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.884896][T16015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.892260][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.918675][T16015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.933899][ T12] tipc: Subscription rejected, illegal request [ 437.000022][T16015] hsr_slave_0: entered promiscuous mode [ 437.006871][T16015] hsr_slave_1: entered promiscuous mode [ 437.013416][T16015] debugfs: 'hsr0' already exists in 'hsr' [ 437.019540][T16015] Cannot create hsr debugfs directory [ 437.658731][ T5624] Bluetooth: hci0: command tx timeout [ 438.420308][T16202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.192611][T16234] xt_HMARK: spi-set and port-set can't be combined [ 439.201137][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 439.214049][T16236] team0: entered promiscuous mode [ 439.214246][T16236] team0: entered allmulticast mode [ 439.493644][T16243] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 439.623700][T16243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.737224][ T5624] Bluetooth: hci0: command tx timeout [ 439.866084][T16242] bridge4: entered promiscuous mode [ 439.990304][T16253] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2972'. [ 440.085858][T16256] netlink: 'syz.3.2976': attribute type 2 has an invalid length. [ 440.139733][T16015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.161532][T16015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.172821][T16015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.189455][T16015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.198054][T16015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.218409][T16015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.227535][T16015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.258180][T16015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.603985][T16015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.762378][T16015] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.780071][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.780206][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.859636][T16271] tc_dump_action: action bad kind [ 440.881588][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.881848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.912956][T16275] tc_dump_action: action bad kind [ 440.920096][T16279] netlink: 3604 bytes leftover after parsing attributes in process `syz.3.2982'. [ 441.433652][ T7731] IPVS: starting estimator thread 0... [ 441.455434][T16293] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 441.542770][T16293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2985'. [ 441.547951][T16295] IPVS: using max 27 ests per chain, 64800 per kthread [ 441.552172][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2985'. [ 441.699337][T16293] veth0_macvtap: left promiscuous mode [ 441.708523][T16293] macvtap0: entered promiscuous mode [ 441.708562][T16293] macvtap0: entered allmulticast mode [ 441.847375][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 441.856862][T16304] FAULT_INJECTION: forcing a failure. [ 441.856862][T16304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.870548][T16304] CPU: 0 UID: 0 PID: 16304 Comm: syz.4.2989 Not tainted syzkaller #0 PREEMPT(full) [ 441.870578][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.870590][T16304] Call Trace: [ 441.870598][T16304] [ 441.870607][T16304] dump_stack_lvl+0xe8/0x150 [ 441.870642][T16304] should_fail_ex+0x410/0x560 [ 441.870678][T16304] _copy_to_user+0x31/0xb0 [ 441.870713][T16304] simple_read_from_buffer+0xe1/0x170 [ 441.870746][T16304] proc_fail_nth_read+0x1bb/0x230 [ 441.870797][T16304] ? common_file_perm+0x20e/0x2b0 [ 441.870822][T16304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.870856][T16304] ? rw_verify_area+0x24a/0x4c0 [ 441.870886][T16304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.870915][T16304] vfs_read+0x213/0xa80 [ 441.870949][T16304] ? __pfx___mutex_lock+0x10/0x10 [ 441.871024][T16304] ? __pfx_vfs_read+0x10/0x10 [ 441.871052][T16304] ? __fget_files+0x2a/0x420 [ 441.871082][T16304] ? __fget_files+0x3a2/0x420 [ 441.871105][T16304] ? __fget_files+0x2a/0x420 [ 441.871140][T16304] ksys_read+0x150/0x270 [ 441.871180][T16304] ? __pfx_ksys_read+0x10/0x10 [ 441.871220][T16304] do_syscall_64+0x166/0x520 [ 441.871248][T16304] ? trace_irq_disable+0x3b/0x140 [ 441.871268][T16304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.871289][T16304] ? clear_bhb_loop+0x70/0xc0 [ 441.871315][T16304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.871335][T16304] RIP: 0033:0x7f1835d5e98e [ 441.871356][T16304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.871374][T16304] RSP: 002b:00007f1836bf8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.871398][T16304] RAX: ffffffffffffffda RBX: 00007f1836bf96c0 RCX: 00007f1835d5e98e [ 441.871413][T16304] RDX: 000000000000000f RSI: 00007f1836bf90a0 RDI: 0000000000000006 [ 441.871425][T16304] RBP: 00007f1836bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 441.871442][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.871455][T16304] R13: 00007f1836026038 R14: 00007f1836025fa0 R15: 00007ffee6ebcaf8 [ 441.871488][T16304] [ 442.239811][ T30] audit: type=1800 audit(1788941745.838:3): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2990" name="blkio.bfq.time_recursive" dev="tmpfs" ino=143 res=0 errno=0 [ 442.374903][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2992'. [ 442.431305][T16310] xt_ecn: cannot match TCP bits for non-tcp packets [ 442.493133][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2994'. [ 442.540770][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 442.552032][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 442.798032][T16321] Unknown options in mask 6 [ 442.808622][T16321] netlink: 'syz.4.2993': attribute type 1 has an invalid length. [ 443.218984][T16015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.226446][T16361] tipc: Started in network mode [ 444.226499][T16361] tipc: Node identity eeeafdd0e718, cluster identity 4711 [ 444.226705][T16361] tipc: Enabled bearer , priority 0 [ 444.401772][T16358] syzkaller0: entered promiscuous mode [ 444.401901][T16358] syzkaller0: entered allmulticast mode [ 444.562472][T16015] veth0_vlan: entered promiscuous mode [ 444.683965][T16358] tipc: Resetting bearer [ 444.813372][T16015] veth1_vlan: entered promiscuous mode [ 444.907170][T16357] tipc: Resetting bearer [ 445.048999][T16357] tipc: Disabling bearer [ 445.389820][T16015] veth0_macvtap: entered promiscuous mode [ 445.419396][T16015] veth1_macvtap: entered promiscuous mode [ 445.487292][T16015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.512799][T16380] __nla_validate_parse: 2 callbacks suppressed [ 445.519587][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'. [ 445.545973][T16386] Unknown options in mask 6 [ 445.551428][T16386] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3007'. [ 445.575388][T16015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.626773][T16388] netlink: 'syz.3.3007': attribute type 1 has an invalid length. [ 445.626902][T16388] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3007'. [ 445.769124][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.769450][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.769614][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.769739][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.151671][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.151712][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.347626][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.347754][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.590855][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2917'. [ 446.601799][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2917'. [ 447.005975][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 447.353402][T16418] netlink: 'syz.5.3017': attribute type 1 has an invalid length. [ 447.614444][T16429] Unknown options in mask 6 [ 447.624526][T16429] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3020'. [ 447.680279][T16433] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 447.680404][T16433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3020'. [ 447.811838][T16421] veth3: entered allmulticast mode [ 447.927718][T16421] bond4: (slave veth3): Enslaving as an active interface with a down link [ 447.934468][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.947422][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.965295][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.974670][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.983912][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.070369][T16418] bond3: (slave veth0_to_bond): Releasing backup interface [ 448.088906][T16418] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 448.421082][T16446] syzkaller0: left promiscuous mode [ 448.421124][T16446] syzkaller0: left allmulticast mode [ 449.028909][T16469] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 449.028957][T16469] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 449.029159][T16469] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3031'. [ 449.029184][T16469] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 449.129691][T16469] macsec1: entered promiscuous mode [ 449.232794][T16472] bridge: RTM_NEWNEIGH with invalid ether address [ 449.240177][T16472] bridge: RTM_NEWNEIGH with invalid ether address [ 449.336952][T16474] Unknown options in mask 6 [ 449.352143][T16474] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3035'. [ 449.362951][T16474] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 449.840580][ T5618] bond0: (slave syz_tun): Releasing backup interface [ 449.884349][T16482] ip_tables: iptables: counters copy to user failed while replacing table [ 450.062974][ T5624] Bluetooth: hci1: command tx timeout [ 450.159314][T16439] lo speed is unknown, defaulting to 1000 [ 450.272043][T16497] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 450.871645][T16515] ÿ: renamed from bond_slave_0 (while UP) [ 451.240602][T16521] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 452.137281][ T5624] Bluetooth: hci1: command tx timeout [ 452.185687][T16542] batman_adv: batadv0: Adding interface: vlan2 [ 452.185736][T16542] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.185784][T16542] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 452.378361][T16548] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 452.932942][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.933146][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.933587][T16439] bridge_slave_0: entered allmulticast mode [ 452.935562][T16439] bridge_slave_0: entered promiscuous mode [ 452.943554][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.945246][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.945373][T16439] bridge_slave_1: entered allmulticast mode [ 452.949753][T16439] bridge_slave_1: entered promiscuous mode [ 453.252773][T16581] __nla_validate_parse: 5 callbacks suppressed [ 453.252837][T16581] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3059'. [ 453.283976][T16573] geneve2: entered promiscuous mode [ 453.285487][T16582] x_tables: duplicate entry at hook 1 [ 453.305416][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.332538][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.619984][T16439] team0: Port device team_slave_0 added [ 453.636423][T16439] team0: Port device team_slave_1 added [ 453.665133][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'. [ 453.870761][T16590] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 453.973757][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.973806][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.974050][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.984823][T16593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3063'. [ 454.041599][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.041646][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.042079][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.071379][T16598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3063'. [ 454.227355][ T5624] Bluetooth: hci1: command tx timeout [ 454.382587][T16439] hsr_slave_0: entered promiscuous mode [ 454.390050][T16439] hsr_slave_1: entered promiscuous mode [ 454.393011][T16439] debugfs: 'hsr0' already exists in 'hsr' [ 454.393032][T16439] Cannot create hsr debugfs directory [ 454.670975][T16600] lo speed is unknown, defaulting to 1000 [ 454.829002][T16614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.675273][T16634] syzkaller0: entered promiscuous mode [ 455.675317][T16634] syzkaller0: entered allmulticast mode [ 455.679205][T16634] syzkaller0: left allmulticast mode [ 455.774511][T16625] syzkaller0: mtu less than device minimum [ 455.775126][T16643] syzkaller0: entered promiscuous mode [ 455.775147][T16643] syzkaller0: entered allmulticast mode [ 456.084286][T16439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 456.299333][ T5624] Bluetooth: hci1: command tx timeout [ 456.300233][T16439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 456.501851][T16439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 456.613708][T16652] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3074'. [ 456.613789][T16652] bond_slave_0: entered promiscuous mode [ 456.706264][ T1986] block nbd3: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 240 seconds [ 456.706398][ T1986] block nbd3: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 240 seconds [ 456.706528][ T1986] block nbd3: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 240 seconds [ 456.706621][ T1986] block nbd3: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 240 seconds [ 456.758614][T16439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 456.945186][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3080'. [ 457.074702][T16663] netlink: 'syz.5.3079': attribute type 8 has an invalid length. [ 457.074769][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3079'. [ 457.137803][T16663] bridge0: port 1(syz_tun) entered disabled state [ 457.431079][T16439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.470568][T16439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.479792][T16439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.522965][T16439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.537847][T16439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.569614][T16439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.579835][T16439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.611807][T16439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.876088][T16694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3085'. [ 457.909984][T16695] netlink: 'syz.5.3086': attribute type 1 has an invalid length. [ 458.051392][T16439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.095053][T16695] bond5: (slave gretap1): making interface the new active one [ 458.121850][T16703] netlink: 'syz.5.3086': attribute type 1 has an invalid length. [ 458.133362][T16695] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 458.200826][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 458.205688][T16439] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.232479][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.232637][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.264210][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.264342][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.291149][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3088'. [ 458.369635][ T83] IPVS: starting estimator thread 0... [ 458.459202][T16711] IPVS: using max 31 ests per chain, 74400 per kthread [ 458.496931][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 458.850558][T16725] Unknown options in mask 6 [ 458.850973][T16725] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3093'. [ 458.851800][T16725] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 458.851818][T16725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3093'. [ 458.985549][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3094'. [ 459.014637][T16729] vlan2: entered promiscuous mode [ 459.014690][T16729] batadv0: entered promiscuous mode [ 459.180580][T16734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3095'. [ 460.329523][T16439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.434352][T16768] Unknown options in mask 6 [ 460.441430][T16768] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3104'. [ 460.454281][T16768] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 460.464174][T16768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3104'. [ 460.917669][T16783] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3108'. [ 460.933446][T16781] netlink: 'syz.1.3107': attribute type 49 has an invalid length. [ 461.071987][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcfd000: rx timeout, send abort [ 461.498853][T16803] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 461.505708][T16439] veth0_vlan: entered promiscuous mode [ 461.535924][T16439] veth1_vlan: entered promiscuous mode [ 461.572151][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcfcc00: rx timeout, send abort [ 461.572231][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcfd000: abort rx timeout. Force session deactivation [ 461.689872][T16439] veth0_macvtap: entered promiscuous mode [ 461.724715][T16439] veth1_macvtap: entered promiscuous mode [ 461.839888][T16439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.949098][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3118'. [ 462.072255][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcfcc00: abort rx timeout. Force session deactivation [ 462.225051][T16807] veth1_vlan: left allmulticast mode [ 462.325090][T16807] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 462.328075][T16807] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 462.470241][T16439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.637902][T16831] syzkaller0: entered promiscuous mode [ 462.645021][T16831] syzkaller0: entered allmulticast mode [ 462.706230][ T7993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.856521][T16838] Bluetooth: MGMT ver 1.23 [ 462.897897][ T5624] Bluetooth: hci5: link tx timeout [ 462.898003][ T5624] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 462.948706][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.948786][ T83] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.948830][ T83] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.948865][ T83] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.948888][ T83] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.948921][ T83] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.948944][ T83] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.948976][ T83] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 462.948999][ T83] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.949031][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.949064][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.168742][T16837] : renamed from dummy0 [ 463.213021][T16848] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 463.289500][ T9010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.289543][ T9010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.516378][T16847] block nbd0: reconnected socket [ 463.544785][ T4934] block nbd0: Receive control failed (result -32) [ 463.555964][T16851] syzkaller1: entered allmulticast mode [ 463.585094][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.585158][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.945687][T16864] bond6: entered allmulticast mode [ 464.065819][T16867] wireguard0: entered promiscuous mode [ 464.065884][T16867] wireguard0: entered allmulticast mode [ 464.102998][T16867] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 464.115945][T16867] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 464.139818][T16871] __nla_validate_parse: 4 callbacks suppressed [ 464.149264][T16871] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.3132'. [ 464.193027][T16875] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 464.715151][T16883] FAULT_INJECTION: forcing a failure. [ 464.715151][T16883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.730861][T16883] CPU: 0 UID: 0 PID: 16883 Comm: syz.4.3135 Not tainted syzkaller #0 PREEMPT(full) [ 464.730891][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.730903][T16883] Call Trace: [ 464.730912][T16883] [ 464.730921][T16883] dump_stack_lvl+0xe8/0x150 [ 464.730962][T16883] should_fail_ex+0x410/0x560 [ 464.730996][T16883] _copy_from_user+0x2d/0xb0 [ 464.731019][T16883] ___sys_sendmsg+0x1c6/0x360 [ 464.731041][T16883] ? __lock_acquire+0x6df/0x2e50 [ 464.731067][T16883] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.731124][T16883] ? __fget_files+0x2a/0x420 [ 464.731150][T16883] ? __fget_files+0x3a2/0x420 [ 464.731185][T16883] __x64_sys_sendmsg+0x1b1/0x290 [ 464.731211][T16883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.731254][T16883] do_syscall_64+0x166/0x520 [ 464.731282][T16883] ? trace_irq_disable+0x3b/0x140 [ 464.731301][T16883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.731321][T16883] ? clear_bhb_loop+0x70/0xc0 [ 464.731346][T16883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.731366][T16883] RIP: 0033:0x7f883d19e159 [ 464.731386][T16883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.731403][T16883] RSP: 002b:00007f883e09e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.731426][T16883] RAX: ffffffffffffffda RBX: 00007f883d425fa0 RCX: 00007f883d19e159 [ 464.731440][T16883] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 464.731453][T16883] RBP: 00007f883e09e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.731465][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.731486][T16883] R13: 00007f883d426038 R14: 00007f883d425fa0 R15: 00007fff3c10cb58 [ 464.731518][T16883] [ 464.937339][ T4934] Bluetooth: hci5: command 0x0406 tx timeout [ 465.019185][ T5624] [ 465.021835][ T5624] ====================================================== [ 465.028902][ T5624] WARNING: possible circular locking dependency detected [ 465.036024][ T5624] syzkaller #0 Not tainted [ 465.040463][ T5624] ------------------------------------------------------ [ 465.047509][ T5624] kworker/u9:3/5624 is trying to acquire lock: [ 465.053683][ T5624] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 465.062588][ T5624] [ 465.062588][ T5624] but task is already holding lock: [ 465.069966][ T5624] ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 465.078604][ T5624] [ 465.078604][ T5624] which lock already depends on the new lock. [ 465.078604][ T5624] [ 465.089032][ T5624] [ 465.089032][ T5624] the existing dependency chain (in reverse order) is: [ 465.098063][ T5624] [ 465.098063][ T5624] -> #8 (dpm_list_mtx){+.+.}-{4:4}: [ 465.105532][ T5624] __mutex_lock+0x19d/0x1550 [ 465.110657][ T5624] device_pm_add+0x7d/0x350 [ 465.115736][ T5624] device_add+0x4eb/0xb80 [ 465.120621][ T5624] device_create+0x269/0x300 [ 465.125746][ T5624] msr_device_create+0x33/0x50 [ 465.131049][ T5624] cpuhp_invoke_callback+0x434/0x810 [ 465.136872][ T5624] cpuhp_thread_fun+0x362/0x780 [ 465.142254][ T5624] smpboot_thread_fn+0x565/0xa70 [ 465.147729][ T5624] kthread+0x38b/0x480 [ 465.152330][ T5624] ret_from_fork+0x514/0xb70 [ 465.157486][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.162790][ T5624] [ 465.162790][ T5624] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 465.170374][ T5624] cpuhp_thread_fun+0x127/0x780 [ 465.175770][ T5624] smpboot_thread_fn+0x565/0xa70 [ 465.181237][ T5624] kthread+0x38b/0x480 [ 465.185829][ T5624] ret_from_fork+0x514/0xb70 [ 465.190938][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.196230][ T5624] [ 465.196230][ T5624] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 465.203960][ T5624] cpus_read_lock+0x42/0x160 [ 465.209077][ T5624] static_key_slow_inc+0x12/0x30 [ 465.214558][ T5624] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 465.220843][ T5624] nbd_genl_foreach_sock+0x265/0x450 [ 465.226679][ T5624] nbd_genl_reconfigure+0xbbb/0x1040 [ 465.232491][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 465.238617][ T5624] genl_rcv_msg+0x614/0x7a0 [ 465.243652][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 465.248943][ T5624] genl_rcv+0x28/0x40 [ 465.253461][ T5624] netlink_unicast+0x7bd/0x940 [ 465.258752][ T5624] netlink_sendmsg+0x813/0xb40 [ 465.264040][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 465.269597][ T5624] ____sys_sendmsg+0x54e/0x850 [ 465.274889][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 465.280087][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 465.285545][ T5624] do_syscall_64+0x166/0x520 [ 465.290771][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.297207][ T5624] [ 465.297207][ T5624] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 465.304863][ T5624] __mutex_lock+0x19d/0x1550 [ 465.309994][ T5624] nbd_queue_rq+0x373/0xff0 [ 465.315030][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 465.321186][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 465.328057][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 465.334566][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 465.340117][ T5624] process_scheduled_works+0xc3d/0x1630 [ 465.346199][ T5624] worker_thread+0xa47/0xfb0 [ 465.351535][ T5624] kthread+0x38b/0x480 [ 465.356166][ T5624] ret_from_fork+0x514/0xb70 [ 465.361279][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.366587][ T5624] [ 465.366587][ T5624] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 465.373805][ T5624] __mutex_lock+0x19d/0x1550 [ 465.378982][ T5624] nbd_queue_rq+0xc1/0xff0 [ 465.383942][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 465.390024][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 465.396898][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 465.403415][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 465.408971][ T5624] process_scheduled_works+0xc3d/0x1630 [ 465.415046][ T5624] worker_thread+0xa47/0xfb0 [ 465.420158][ T5624] kthread+0x38b/0x480 [ 465.424748][ T5624] ret_from_fork+0x514/0xb70 [ 465.429855][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.435172][ T5624] [ 465.435172][ T5624] -> #3 (set->srcu){.+.+}-{0:0}: [ 465.442309][ T5624] __synchronize_srcu+0xc9/0x2f0 [ 465.447799][ T5624] elevator_switch+0x1e8/0x7b0 [ 465.453170][ T5624] elevator_change+0x2fa/0x480 [ 465.458468][ T5624] elevator_set_default+0x375/0x440 [ 465.464263][ T5624] blk_register_queue+0x3f3/0x4e0 [ 465.469887][ T5624] __add_disk+0x6cb/0xe30 [ 465.474761][ T5624] add_disk_fwnode+0x100/0x3a0 [ 465.480065][ T5624] nbd_dev_add+0x733/0xb60 [ 465.485016][ T5624] nbd_init+0x168/0x1f0 [ 465.489851][ T5624] do_one_initcall+0x250/0x870 [ 465.495161][ T5624] do_initcall_level+0x10a/0x1a0 [ 465.500671][ T5624] do_initcalls+0x59/0xa0 [ 465.505536][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 465.511269][ T5624] kernel_init+0x22/0x1d0 [ 465.516130][ T5624] ret_from_fork+0x514/0xb70 [ 465.521240][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.526536][ T5624] [ 465.526536][ T5624] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 465.534359][ T5624] __mutex_lock+0x19d/0x1550 [ 465.539481][ T5624] elevator_change+0x1af/0x480 [ 465.544781][ T5624] elevator_set_none+0xb5/0x140 [ 465.550159][ T5624] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 465.556490][ T5624] nbd_start_device+0x189/0xb30 [ 465.561871][ T5624] nbd_genl_connect+0x167d/0x1cd0 [ 465.567427][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 465.573769][ T5624] genl_rcv_msg+0x614/0x7a0 [ 465.578805][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 465.584113][ T5624] genl_rcv+0x28/0x40 [ 465.588638][ T5624] netlink_unicast+0x7bd/0x940 [ 465.593937][ T5624] netlink_sendmsg+0x813/0xb40 [ 465.599232][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 465.604786][ T5624] ____sys_sendmsg+0x54e/0x850 [ 465.610088][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 465.615285][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 465.620746][ T5624] do_syscall_64+0x166/0x520 [ 465.625878][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.632323][ T5624] [ 465.632323][ T5624] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 465.640942][ T5624] blk_alloc_queue+0x544/0x690 [ 465.646502][ T5624] __blk_mq_alloc_disk+0x194/0x390 [ 465.652137][ T5624] nbd_dev_add+0x494/0xb60 [ 465.657174][ T5624] nbd_init+0x168/0x1f0 [ 465.661872][ T5624] do_one_initcall+0x250/0x870 [ 465.667178][ T5624] do_initcall_level+0x10a/0x1a0 [ 465.672738][ T5624] do_initcalls+0x59/0xa0 [ 465.677591][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 465.683318][ T5624] kernel_init+0x22/0x1d0 [ 465.688177][ T5624] ret_from_fork+0x514/0xb70 [ 465.693287][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.698585][ T5624] [ 465.698585][ T5624] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 465.705829][ T5624] __lock_acquire+0x15ff/0x2e50 [ 465.711203][ T5624] lock_acquire+0x115/0x350 [ 465.716226][ T5624] fs_reclaim_acquire+0x71/0x100 [ 465.721692][ T5624] __kmalloc_noprof+0xbc/0x720 [ 465.726986][ T5624] kobject_get_path+0xc5/0x2f0 [ 465.732355][ T5624] kobject_move+0x2fa/0x720 [ 465.737378][ T5624] device_move+0xe0/0x720 [ 465.742231][ T5624] hci_conn_del_sysfs+0xb8/0x1a0 [ 465.747750][ T5624] hci_conn_del+0xc3d/0x1200 [ 465.752909][ T5624] hci_abort_conn_sync+0xdd0/0x1190 [ 465.758660][ T5624] hci_cmd_sync_work+0x20b/0x3f0 [ 465.764147][ T5624] process_scheduled_works+0xc3d/0x1630 [ 465.770220][ T5624] worker_thread+0xa47/0xfb0 [ 465.775339][ T5624] kthread+0x38b/0x480 [ 465.779928][ T5624] ret_from_fork+0x514/0xb70 [ 465.785080][ T5624] ret_from_fork_asm+0x1a/0x30 [ 465.790372][ T5624] [ 465.790372][ T5624] other info that might help us debug this: [ 465.790372][ T5624] [ 465.800615][ T5624] Chain exists of: [ 465.800615][ T5624] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 465.800615][ T5624] [ 465.812876][ T5624] Possible unsafe locking scenario: [ 465.812876][ T5624] [ 465.820369][ T5624] CPU0 CPU1 [ 465.825733][ T5624] ---- ---- [ 465.831098][ T5624] lock(dpm_list_mtx); [ 465.835266][ T5624] lock(cpuhp_state-up); [ 465.842134][ T5624] lock(dpm_list_mtx); [ 465.848823][ T5624] lock(fs_reclaim); [ 465.852816][ T5624] [ 465.852816][ T5624] *** DEADLOCK *** [ 465.852816][ T5624] [ 465.861023][ T5624] locks held by kworker/u9:3/5624: 5, last CPU#1: [ 465.867505][ T5624] #0: ffff88805585f940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 465.878395][ T5624] #1: ffffc9000478fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 465.890974][ T5624] #2: ffff888052848ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 465.900815][ T5624] #3: ffff8880528480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 465.910567][ T5624] #4: ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 465.919531][ T5624] [ 465.919531][ T5624] stack backtrace: [ 465.925419][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 465.934970][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.945027][ T5624] Workqueue: hci5 hci_cmd_sync_work [ 465.950235][ T5624] Call Trace: [ 465.953513][ T5624] [ 465.956443][ T5624] dump_stack_lvl+0xe8/0x150 [ 465.961048][ T5624] print_circular_bug+0x2e2/0x300 [ 465.966082][ T5624] check_noncircular+0x12f/0x150 [ 465.971026][ T5624] __lock_acquire+0x15ff/0x2e50 [ 465.975881][ T5624] ? __bfs+0x153/0x290 [ 465.979984][ T5624] ? __pfx_hlock_conflict+0x10/0x10 [ 465.985188][ T5624] lock_acquire+0x115/0x350 [ 465.989691][ T5624] ? __kmalloc_noprof+0xbc/0x720 [ 465.994639][ T5624] ? __lock_acquire+0x14b9/0x2e50 [ 465.999664][ T5624] ? kobject_get_path+0xc5/0x2f0 [ 466.004606][ T5624] fs_reclaim_acquire+0x71/0x100 [ 466.009550][ T5624] ? __kmalloc_noprof+0xbc/0x720 [ 466.014496][ T5624] __kmalloc_noprof+0xbc/0x720 [ 466.019270][ T5624] ? get_device_parent+0x20d/0x3a0 [ 466.024389][ T5624] ? kobject_get_path+0xc5/0x2f0 [ 466.029326][ T5624] ? kobject_get_path+0xc5/0x2f0 [ 466.034268][ T5624] kobject_get_path+0xc5/0x2f0 [ 466.039038][ T5624] kobject_move+0x2fa/0x720 [ 466.043546][ T5624] ? __pfx_kobject_move+0x10/0x10 [ 466.048568][ T5624] ? do_raw_spin_unlock+0xf5/0x200 [ 466.053691][ T5624] ? get_device_parent+0x366/0x3a0 [ 466.058811][ T5624] device_move+0xe0/0x720 [ 466.063149][ T5624] hci_conn_del_sysfs+0xb8/0x1a0 [ 466.068097][ T5624] hci_conn_del+0xc3d/0x1200 [ 466.072700][ T5624] ? hci_abort_conn_sync+0xa7b/0x1190 [ 466.078076][ T5624] hci_abort_conn_sync+0xdd0/0x1190 [ 466.083278][ T5624] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 466.088913][ T5624] ? abort_conn_sync+0x26/0x210 [ 466.093771][ T5624] ? abort_conn_sync+0x26/0x210 [ 466.098631][ T5624] ? abort_conn_sync+0x19c/0x210 [ 466.103570][ T5624] ? __pfx_abort_conn_sync+0x10/0x10 [ 466.108860][ T5624] hci_cmd_sync_work+0x20b/0x3f0 [ 466.113819][ T5624] ? process_scheduled_works+0x97a/0x1630 [ 466.119571][ T5624] process_scheduled_works+0xc3d/0x1630 [ 466.125157][ T5624] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.131154][ T5624] ? assign_work+0x3cf/0x5d0 [ 466.135753][ T5624] worker_thread+0xa47/0xfb0 [ 466.140362][ T5624] kthread+0x38b/0x480 [ 466.144438][ T5624] ? __pfx_worker_thread+0x10/0x10 [ 466.149555][ T5624] ? __pfx_kthread+0x10/0x10 [ 466.154163][ T5624] ret_from_fork+0x514/0xb70 [ 466.158782][ T5624] ? __pfx_ret_from_fork+0x10/0x10 [ 466.163912][ T5624] ? __switch_to+0xc89/0x1420 [ 466.168609][ T5624] ? __pfx_kthread+0x10/0x10 [ 466.173303][ T5624] ret_from_fork_asm+0x1a/0x30 [ 466.178105][ T5624] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.746717][T11980] syz_tun (unregistering): left allmulticast mode [ 466.756238][T11980] syz_tun (unregistering): left promiscuous mode [ 466.762822][T11980] bridge0: port 1(syz_tun) entered disabled state [ 467.336699][ T1168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.452237][ T1168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.478602][ T1168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.522122][ T1168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.677442][ T9010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.758681][ T1168] bridge_slave_1: left allmulticast mode [ 467.758774][ T1168] bridge_slave_1: left promiscuous mode [ 467.759170][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.771721][ T1168] bridge_slave_0: left allmulticast mode [ 467.771763][ T1168] bridge_slave_0: left promiscuous mode [ 467.772087][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.983210][ T1168] bond0 (unregistering): (slave 17ÿ): Releasing backup interface [ 468.000022][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.013356][ T1168] bond0 (unregistering): Released all slaves [ 468.039088][ T7733] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.039214][ T7733] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.039278][ T7733] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.325843][ T1168] hsr_slave_0: left promiscuous mode [ 468.333540][ T1168] hsr_slave_1: left promiscuous mode [ 468.339630][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.347390][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.356085][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.356155][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.374415][ T1168] veth1_macvtap: left promiscuous mode [ 468.374516][ T1168] veth0_macvtap: left promiscuous mode [ 468.374673][ T1168] veth1_vlan: left promiscuous mode [ 468.374763][ T1168] veth0_vlan: left promiscuous mode [ 468.701923][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 468.710123][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 469.153851][ T1168] IPVS: stop unused estimator thread 0... [ 469.188498][ T1168] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.245501][ T1168] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.298227][ T1168] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.330091][ T1168] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.525301][ T1168] bridge_slave_1: left allmulticast mode [ 469.525396][ T1168] bridge_slave_1: left promiscuous mode [ 469.525681][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.540102][ T1168] bridge_slave_0: left allmulticast mode [ 469.540142][ T1168] bridge_slave_0: left promiscuous mode [ 469.540422][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.734921][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.753592][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.755855][ T1168] bond0 (unregistering): Released all slaves [ 469.778596][ T83] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.778720][ T83] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.778770][ T83] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.778825][ T83] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.990970][ T1168] hsr_slave_0: left promiscuous mode [ 469.996533][ T1168] hsr_slave_1: left promiscuous mode [ 469.999302][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.999350][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.002901][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.002934][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.024493][ T1168] veth1_macvtap: left promiscuous mode [ 470.024580][ T1168] veth0_macvtap: left promiscuous mode [ 470.024693][ T1168] veth1_vlan: left promiscuous mode [ 470.024782][ T1168] veth0_vlan: left promiscuous mode [ 470.292248][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 470.308040][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 470.775054][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 471.136150][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 471.492958][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 471.851681][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 472.196674][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 472.555462][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 472.906741][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 473.271727][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 473.792308][ T4984] udevd[4984]: worker [5623] /devices/virtual/block/nbd3 timeout; kill it [ 473.792437][ T4984] udevd[4984]: seq 13438 '/devices/virtual/block/nbd3' killed