last executing test programs: 4.224401814s ago: executing program 3 (id=4432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0xfd60, 0x0, 0x0, 0xfffffef4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x20000400) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x40, 0x40, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0xc, 0x8, 0x10001, 0x2ffeb6731e31d452, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x20, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x1d, 0x9, 0x8001, 0x70, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x48, 0x2, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x3, 0x4, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x8, 0x5, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x10, r5}, 0x10) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000005c0)) 4.105829735s ago: executing program 4 (id=4434): socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}, {0x0, 0xb80b}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r3, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) (async) recvmmsg(r3, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfec4, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xabf4b8957485d5d8}, 0x20014881) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfec4, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xabf4b8957485d5d8}, 0x20014881) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x30}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r5], 0xd4}}, 0x804) 3.376424201s ago: executing program 3 (id=4437): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4, 0x3}}, 0x2e) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="0000000000000000000000000000fbfff0e5", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r11) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r14, r13, 0x7}, 0x3d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r14, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x0, 0x0}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r16, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x23, &(0x7f00000003c0)=@raw=[@map_idx={0x18, 0xeb58aa4f6d8ca4e3, 0x5, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x7ae6e87b4b49d705, 0x1, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xa2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x0, 0x10}, 0x10, r15, 0x0, 0x1, &(0x7f00000005c0)=[r9, r16], &(0x7f0000000600)=[{0x0, 0x2, 0xc, 0x4}], 0x10, 0xc5}, 0x94) 2.617229906s ago: executing program 0 (id=4444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000004fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000400"/28], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4c392ea2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x97}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9ad}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x68}}, 0xf371cc2a4cc195fb) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x9732) listen(r7, 0xec) accept4$bt_l2cap(r7, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r8, &(0x7f0000000000)="41000200010001", 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000700)={0x9, 0x6, 0x8, 0x1, 0x81}) sendto$l2tp(r10, &(0x7f0000000300)="0cc5bd46a652a322ef787b9632188750ec396f065458622a03af31b94beae0e1b80e45734302b27b19549a7ffcdc250e9c22d1b8e02dc5f3657257c319803d3ade536831ffbd94abc05226e7141437ab4c075602f07a5269d5b34998a6fd253a69a809627089859b251da4f09e527d8a18e0eaadf24d09857e92f384cfaf017d57205e36744cc258e5e719358d48089401fc4cff58bca06e22ca61931f5bdd8177d95a49b1cacca543d027cf276571f814ea4a3c6a04", 0xb6, 0x0, &(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, 0x4}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x11c}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.429285892s ago: executing program 3 (id=4447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="58000000140019230a834b80040d8c560a117436c379000000ed000000005800074824ca945fff0200004250c28e0ebc20ffff000000008000f0fffeffe809005309fdf510a4baa7bb98318b00"/88, 0x58}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYRES64=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x1, 0xc, 0x7, 0xfffffffffffffff0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x0, 0xd, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r7], &(0x7f0000000400)=[{0x5, 0x5, 0xa, 0x5}], 0x10, 0x4}, 0x94) close(r10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'pim6reg\x00', 0x1000}) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, &(0x7f0000000080)=0xc) 2.404471143s ago: executing program 4 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000001}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) 2.226348788s ago: executing program 0 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x410c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x7, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r1, 0x0, 0x0, 0x80000) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x10, 0x0, 0x4a4ca881, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmmsg(r5, &(0x7f0000002bc0), 0x2a0, 0x20004840) 2.026296377s ago: executing program 4 (id=4452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002940)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xb6, 0x3, 0x48, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x6, 0x8}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r5, r6+60000000}) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 2.025877995s ago: executing program 2 (id=4453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x125, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1.894008956s ago: executing program 1 (id=4454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) 1.28522881s ago: executing program 0 (id=4455): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) r3 = accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x8, 0x8000, 0x80000001}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) (rerun: 64) 1.090194451s ago: executing program 0 (id=4456): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0xfff, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250b0000000c00058007000200"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x81, 0xfffff038}, {0x6, 0x0, 0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="ff882600fddbdf254b00000208000300012000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004845}, 0x20048844) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffbfffff8000, 0x8) close(r10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, &(0x7f00000005c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x10000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000006680), 0x5d, 0x40000004) 1.057288389s ago: executing program 4 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40008841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.039742579s ago: executing program 2 (id=4458): r0 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000640)={{r0}, 0x6, &(0x7f0000000540)=[0x6, 0x0, 0x4db2, 0x401, 0xb99, 0x8], 0xc, 0x2, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0xd7, &(0x7f0000000140)="05b99aea4be7068a389f2c827487a53a83b8409a643d0614c251fd6332d7ec0cf9161dc60ed0752f10253acc4cce0429910689a51b8bc48ad3f954094df6b171f2a6f9328430c0b5fabe811125e67cffab6899a5e105e7337b0b8d81bca3c69c2fa56f60325e8938e2e2b559d69005bbd1739ea259c817923144e7ffa6f040845a0de880e077022f99808d2cc60c66ef278d1266da5be0ebe1306938cdb11a3583275ce9561bc87077dba27ddf85d7c88d23d3820aedb8e5927205826e5017e3163d30eb035aeb81348a3b18b49b25416f2e00fc4dc28e", 0x10, 0x7, 0x100, 0x5, 0xf, 0x1, 0x1, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061108e0000000000170118000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400020000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000170800034000000002080002400000008408000140000000001c0005800c0001007061796c6f6164000c00028003000740000008000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) close(0x4) sendmmsg$unix(r3, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x24004051}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000100)=0x7, 0x4) 938.167675ms ago: executing program 0 (id=4459): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) ppoll(&(0x7f0000001880)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1805000007000f000000006d6ec3b7f1ae056b00", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000050000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefd", 0xfdef}], 0x1) 931.805264ms ago: executing program 2 (id=4460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x70bd28, 0x0, {0xa, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r2) 876.825916ms ago: executing program 1 (id=4461): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130002"], 0x70}}, 0x0) 867.953927ms ago: executing program 2 (id=4462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x200488c1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) (async) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 822.040972ms ago: executing program 1 (id=4463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="18f8ff0000020000000000001e88000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000010b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000000600000018000000030000000000000005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x400, 0x107, &(0x7f00000001c0)=""/182, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xd, 0xc}], 0x10, 0x8}, 0x94) 764.843751ms ago: executing program 2 (id=4464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) 714.95754ms ago: executing program 4 (id=4465): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 713.26761ms ago: executing program 1 (id=4466): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'}) (async, rerun: 32) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) syz_emit_ethernet(0xfc6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001ffffffffffff86dd6a0000000f901100fe8000000000000000000000000000aafe8000000000000000000000000000aa0b12040902"], 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e200000004000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000001000000000000000000000000000000003c000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000008000000000000000000000000000000000000000000000000000000000500000000000000000005000000000004000000000000000000000000030000679e827d5f4982388b00000000000000000000000000020000000000000000000000050000000500000008001e0032050000000000f4000000000000000000000000000000bfa15364e5dc5ab6308767a98bc328520e25815d06f7a867e0fd"], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4001080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "38c5115c55baf63cdd52fc302e89347eb622a1c3c01c13b8070fba06288e64e9222348878c00", 0x24}, 0x60) close(r7) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="03000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYRESHEX=r2], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x8410) (async, rerun: 32) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9800040}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0], 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x8051) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 625.398154ms ago: executing program 4 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002940)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xb6, 0x3, 0x48, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x6, 0x8}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r5, r6+60000000}) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 542.041121ms ago: executing program 3 (id=4468): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000200)=""/226, 0x0, 0x800, 0xd5, 0x1}, 0x20) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x1, 0x7}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000084060100ec000000000100000d"], &(0x7f0000000f40)=""/4079, 0x3a, 0xfef, 0x6, 0x4}, 0x28) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000080), 0x2) 162.607002ms ago: executing program 3 (id=4469): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = getpid() sendmmsg$unix(r2, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x38, 0x40004}}], 0x1, 0x0) (async) r4 = getpid() (async) r5 = getuid() (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c80)={0x360c, 0x103d, 0x301, 0x70bd25, 0xfffffffc, {0x1b}, [@generic="8a96b8d608e98b43fa836133cd34e6e8c189f2aaa78fc0060d2442c85dc85bc432ef1014178e6fd42fb28dbf5b13a7acb114276bf41a9445986284902fed2c94cbdf37c2b8bc999a8ab15ff4c8cda0484d19138afa04d85a8b272c8181d95c569e3b6a7ffdf0e846e0797357d04110ba2ef51e4173c1f6b8e35ea91637a5734f1ff9a147bf72b157554fc2bf3db7a764e905ae4156ed3191cee37755d3e97fcd29d7f0a6a25b2787f560be86fafd5871c773e786136a90ae52bf48ea8961e7c6fef615a7d220856f72e0957c9dfc3ebb23d8ed152d29758deab01b41a2d54d8e07bd5cd7feeefbb7aa7645c0446584", @typed={0xfd, 0x23, 0x0, 0x0, @binary="800ac637da2586cf6fe49873ccd9992221828fd01940e13007287b574b950db312451911644aa4f62dce0eb489414dfea055dd145c4b7d3b93a686620ca7ac339871cae248fd130f91cd0f82047307015fd56860423f6920d00f4dc062877de7b1297e7426feac83768d838aa1c79bc0fd86b056948989e25abc04e9008e3f76542204da560ca2ce8ad382318ac81fbd4fddc6b86568ceaa1627d52844e07ff47c7cee3ebe1e30415a3ac1388a596e43c5ed4fe5da01c2aed5d4b0009a992aebfef0f08a15e1412edb250f8717f2b7fa4675a537682934f43f122ffcf78ed79de16ca9d3ab6c09fcd8742d0b8edc2830671fc053695cc5f6f3"}, @typed={0x6, 0xa4, 0x0, 0x0, @str='$\x00'}, @generic="2b8ce0b07f9803616f8acbda7e8864", @nested={0x8c, 0x110, 0x0, 0x1, [@nested={0x70, 0x73, 0x0, 0x1, [@typed={0x5d, 0xf7, 0x0, 0x0, @binary="bc8a42f5f6173adfee036cee9db3a38813762139870504944484b58056b19e9d8749741786d78b4c62d12854ff63cc595a944761f65bfeff06ed0584d5be5599a77416e1da40c42e944e1e78d2e03904085663cef6c5159512"}, @typed={0x5, 0xc4, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x45}]}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r5}, @nested={0x10, 0x6, 0x0, 0x1, [@typed={0xc, 0x42, 0x0, 0x0, @str='nl80211\x00'}]}]}, @nested={0x3364, 0x108, 0x0, 0x1, [@typed={0x18, 0xfc, 0x0, 0x0, @binary="30ec50fd75e76e8903a09b1c078c1817aa47e081"}, @generic="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", @typed={0xb, 0xb3, 0x0, 0x0, @binary="8682da9c2ab900"}, @nested={0x19c, 0x9b, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x114}, @nested={0x4, 0xbc}, @nested={0x4, 0xc3}, @nested={0x4, 0xaa}, @nested={0xdc, 0x6f, 0x0, 0x1, [@generic="90da6f41aa433555ee14c62739c0b56022ab8622eb0af04fbcac9a459f3ff5082f0dff8a258fcf8183f6bec0630c", @typed={0x8, 0x71, 0x0, 0x0, @pid=r4}, @generic="db610e6f12aceca2c402216804f3e350821e4f734ce6c9bcaeb5a3c7bf63735aa98cfc494defa87b9e89c615dd87ca4488277cb66aa7fe00bd3c90d1c8dce77a3add2c33c03b53fe0199b36c20b8e0c5e2e90c468b411968ec8220002cbef052f4c97a57ce60", @typed={0x4, 0x7}, @nested={0x37, 0xc7, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r4}, @nested={0x4, 0xaa}, @generic="a979a10f7566a3", @nested={0x4, 0xf}]}]}, @nested={0x4, 0x55}, @nested={0x4, 0xdc}, @generic="28fa4ddd0d746e32e02fb0eb31938fe24e32aaece3e5be15b38a663f5c59cdfb424877d78ce4ef758ac22bd546e878f3289373fcbd24b0d84fd20effaa2096b558677e1f1421bd063f750d3de24b0d4054de23d67ad7a211a4d4305db9d342e5b46c61c6a152d5fabd3b3eb1d5a26fc39ff725e1767b1fd607e153e6f260ee2840f8caae63eb7c4cfdf1d71f5b4dea4aed3ddcd0", @typed={0x8, 0x1b, 0x0, 0x0, @pid=r4}]}, @nested={0x21a0, 0xbf, 0x0, 0x1, [@typed={0x14, 0xda, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x100c, 0xf7, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @fd=r1}, @generic="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"]}, @generic="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", @nested={0x158, 0x14f, 0x0, 0x1, [@nested={0x4, 0xb6}, @generic="25faea7841f9bf2afeb0007aa404b12c8c84f2392e1896a6c3bc04aba427955ad6317c9851d0380b8f0bf468c90b5e68834d65aaa140c37d411e9c81f7d36cd09b131a380d7dce7fce37d9d4f8241693de55c463d382dffa6adb349de3da2f1d9c7be8926ca8423b3262d1e0de91878ae76c7fc711a971bdc167c265d00a6558aa1e60a0c1cdaab0d65309bf5e00f207f35fe46b372e50ef3157f89f933e2489149e21c69096412b42e582fd35fb9fc21582067498bb3f37bba67c1c980292146dd88f0d884e7e04956368f90dc7", @generic="2f3c38507cee604299bfc30f0425a3f0f29389b6cb665f8f9a021a4040b4b82ca89e608ba94117a88436ff2baadeb6511ba32b156a7165365f4876753496035e0ee28e6d2b6587e95a0c9ba92f30863cf26e83964af74d074d5b126a931e1356424944952fb311c46fd1896c33cef968f7deac2ea09f8f243547a13a2cba4e1f6eeb"]}, @nested={0x10, 0x7e, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x57}]}, @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@mcast2}]}]}]}, 0x360c}, 0x1, 0x0, 0x0, 0x448d3}, 0x1) (async) unshare(0x2a060400) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2, 0x16, 0x1, 0x8, 0x24, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bb2, 0xd, {0x6, 0x6c, 0x3, 0x3, 0x0, 0xffffffff, 0x0, @in=@rand_addr=0x64010100, @in6=@remote}}, @sadb_lifetime={0x4, 0x4, 0x5, 0x5, 0x5, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x2, 0x61, 0x3, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0x10}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e21, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0xaf}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x3, 0x0, 0x4}]}, 0x120}}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000000)=0x2) (async) bind$alg(r7, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-neon\x00'}, 0x58) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 160.406016ms ago: executing program 1 (id=4470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0101000000000000000002000003300003802cf503801400010077673200000000000000000000000000145e92006e6963766630000000000000000000000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) shutdown(r0, 0x1) syz_emit_ethernet(0x2e, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) 118.230022ms ago: executing program 3 (id=4471): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x123a, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) 61.146812ms ago: executing program 2 (id=4472): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008090000000000000000000063112d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value=0x8000000}, 0x94) 1.367975ms ago: executing program 0 (id=4473): sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130002"], 0x70}}, 0x0) 0s ago: executing program 1 (id=4474): r0 = socket$kcm(0x2d, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async, rerun: 64) close(r5) (async, rerun: 64) socket(0xb, 0x3, 0x1) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) (rerun: 64) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x84}], 0x1, 0x9) (async) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff78) (async, rerun: 32) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r10, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000bb10030001001280090001007665746800000400180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="8200030022000000"], 0x48}}, 0x24008000) (rerun: 64) kernel console output (not intermixed with test programs): 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.334276][T17698] RSP: 002b:00007fc8d7417fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.334295][T17698] RAX: ffffffffffffffda RBX: 00007fc8d74186c0 RCX: 00007fc8d655d68e [ 473.334308][T17698] RDX: 0000000000000001 RSI: 00007fc8d74180a0 RDI: 0000000000000003 [ 473.334319][T17698] RBP: 00007fc8d7418090 R08: 0000000000000000 R09: 0000000000000000 [ 473.334330][T17698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.334340][T17698] R13: 00007fc8d6816038 R14: 00007fc8d6815fa0 R15: 00007ffcba762cf8 [ 473.334370][T17698] [ 473.426928][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 473.475057][T17708] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3103'. [ 473.545184][T17710] ip6gre4: entered promiscuous mode [ 473.588048][T17710] ip6gre4: entered allmulticast mode [ 473.803451][T17716] syzkaller0: entered promiscuous mode [ 473.835188][T17716] syzkaller0: entered allmulticast mode [ 473.896778][T17722] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.3105'. [ 473.906063][T17722] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.3105'. [ 473.974261][ T50] Bluetooth: hci1: command tx timeout [ 474.596142][T17758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3112'. [ 477.130316][T17788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3115'. [ 477.288490][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 477.320851][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 477.412563][T17483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.688446][T17805] syzkaller0: entered promiscuous mode [ 477.716935][T17805] syzkaller0: entered allmulticast mode [ 477.968116][T17813] bridge0: port 3(vlan4) entered blocking state [ 477.997743][T17813] bridge0: port 3(vlan4) entered disabled state [ 478.030659][T17813] vlan4: entered allmulticast mode [ 478.059427][T17813] geneve0: entered allmulticast mode [ 478.072040][T17813] vlan4: entered promiscuous mode [ 478.079612][T17813] geneve0: entered promiscuous mode [ 478.180010][T17819] __nla_validate_parse: 1 callbacks suppressed [ 478.180040][T17819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3123'. [ 478.424814][T17483] veth0_vlan: entered promiscuous mode [ 478.472526][T17483] veth1_vlan: entered promiscuous mode [ 478.569606][T17483] veth0_macvtap: entered promiscuous mode [ 478.614931][T17483] veth1_macvtap: entered promiscuous mode [ 478.700478][T17483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.754463][T17483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.819237][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.846756][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.866261][T17836] netlink: 'syz.3.3126': attribute type 10 has an invalid length. [ 478.886185][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.955438][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.025403][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3128'. [ 479.180419][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.212623][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.325907][T11327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.357568][T11327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.747720][T17856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3129'. [ 480.133114][T17869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.292133][T17876] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 480.323297][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.344256][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.354680][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.365238][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.378041][ T4942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.383006][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3135'. [ 481.653456][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'. [ 481.692616][T17875] ªªªªªª speed is unknown, defaulting to 1000 [ 482.014835][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.270525][T17906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3137'. [ 482.520808][ T4942] Bluetooth: hci0: command tx timeout [ 482.798576][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 482.861881][T17875] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.869032][T17875] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.876263][T17875] bridge_slave_0: entered allmulticast mode [ 482.901381][T17875] bridge_slave_0: entered promiscuous mode [ 482.909991][T17875] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.933444][T17875] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.971914][T17875] bridge_slave_1: entered allmulticast mode [ 482.979725][T17875] bridge_slave_1: entered promiscuous mode [ 483.044367][T17875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.098927][T17875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.225230][T17966] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 483.240810][T17966] bond1: entered promiscuous mode [ 483.247304][T17966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.330150][T17972] xt_CT: No such helper "snmp" [ 483.364157][T17875] team0: Port device team_slave_0 added [ 483.427141][T17875] team0: Port device team_slave_1 added [ 483.473289][T17875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.481039][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.597945][T17875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.612831][T17875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.642538][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.668635][T17875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.725412][T17875] hsr_slave_0: entered promiscuous mode [ 483.756610][T17875] hsr_slave_1: entered promiscuous mode [ 483.762994][T17875] debugfs: 'hsr0' already exists in 'hsr' [ 483.789891][T17875] Cannot create hsr debugfs directory [ 484.234624][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 484.250751][T17996] netlink: 'syz.1.3162': attribute type 16 has an invalid length. [ 484.261598][T17996] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3162'. [ 484.601380][ T4942] Bluetooth: hci0: command tx timeout [ 486.156211][T17974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.218715][T17875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.268654][T17875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.295417][T17875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.302991][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 486.320892][T17875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.340414][T17875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.394655][T17875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.430205][T17875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.449956][T17875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.688710][T17875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.731844][T17875] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.764770][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.771931][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.789624][ T4942] Bluetooth: hci0: command tx timeout [ 486.796819][T18028] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 486.804069][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.835405][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.842616][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.870916][ T30] audit: type=1800 audit(1778649982.983:13): pid=18027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3171" name="memory.events" dev="tmpfs" ino=177 res=0 errno=0 [ 487.263671][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 487.270651][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 487.410935][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 487.432878][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 487.763648][T17875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.962755][T17875] veth0_vlan: entered promiscuous mode [ 488.024770][T17875] veth1_vlan: entered promiscuous mode [ 488.114064][T17875] veth0_macvtap: entered promiscuous mode [ 488.194679][T17875] veth1_macvtap: entered promiscuous mode [ 488.251813][T17875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.253070][T18099] netlink: 'syz.4.3187': attribute type 1 has an invalid length. [ 488.267361][T17875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.283454][T11328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.283672][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3188'. [ 488.306392][T11328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.315135][T11328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.346797][T18099] 8021q: VLANs not supported on xfrm0 [ 488.375012][T11328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.485799][ T7115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.493641][ T7115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.535305][ T7120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.543790][ T7120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.838397][T18116] tipc: Started in network mode [ 488.842436][ T4942] Bluetooth: hci0: command tx timeout [ 488.844823][T18116] tipc: Node identity 768c6787aec9, cluster identity 4711 [ 488.844971][T18116] tipc: Enabled bearer , priority 0 [ 489.049615][T18120] syzkaller0: entered promiscuous mode [ 489.055127][T18120] syzkaller0: entered allmulticast mode [ 489.072752][T18125] syzkaller0: entered promiscuous mode [ 489.086791][T18125] syzkaller0: entered allmulticast mode [ 489.119996][T18128] netlink: 'syz.2.3196': attribute type 3 has an invalid length. [ 489.143584][T18130] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 489.155846][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.168683][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.177322][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.190524][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.198618][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.354671][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3198'. [ 489.619585][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'. [ 489.967387][ T7111] wlan1: Trigger new scan to find an IBSS to join [ 491.246483][ T50] Bluetooth: hci4: command tx timeout [ 491.645208][T18130] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 491.655987][T18130] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 491.683746][T18134] tipc: Resetting bearer [ 491.760885][T18146] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 491.812680][T18147] ip6gretap1: entered promiscuous mode [ 491.815671][T18156] Bluetooth: MGMT ver 1.23 [ 491.818181][T18147] ip6gretap1: entered allmulticast mode [ 491.822699][T18147] bond2: (slave ip6gretap1): making interface the new active one [ 491.828350][T18147] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 491.901472][T18112] tipc: Resetting bearer [ 492.022073][T18112] tipc: Disabling bearer [ 492.130631][ T5357] tipc: Node number set to 3628427143 [ 492.309148][ T1175] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.829089][T18131] ªªªªªª speed is unknown, defaulting to 1000 [ 492.835476][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 492.858086][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'. [ 492.874243][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'. [ 492.885727][T18183] can: request_module (can-proto-0) failed. [ 493.011508][T11335] wlan1: Trigger new scan to find an IBSS to join [ 493.043888][ T1175] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.066982][T18191] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 493.118267][T18198] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 493.261447][T18191] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 493.304172][T18204] ip6gretap0: entered promiscuous mode [ 493.321450][ T50] Bluetooth: hci4: command tx timeout [ 493.570107][ T1175] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.648653][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 493.736527][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 493.964403][T18232] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.002361][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.009499][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.016685][T18131] bridge_slave_0: entered allmulticast mode [ 494.023639][T18131] bridge_slave_0: entered promiscuous mode [ 494.031277][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.038405][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.045639][T18131] bridge_slave_1: entered allmulticast mode [ 494.053394][T18131] bridge_slave_1: entered promiscuous mode [ 494.224247][T18234] netlink: 'syz.2.3223': attribute type 16 has an invalid length. [ 494.269572][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.282730][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.343080][T18239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.352898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.364128][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 494.365690][T18131] team0: Port device team_slave_0 added [ 494.398802][T18131] team0: Port device team_slave_1 added [ 494.482369][ T1175] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.598888][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3229'. [ 494.608921][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3229'. [ 494.624946][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.634933][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.704416][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.717161][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.724117][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.752824][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.812674][T18264] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3227'. [ 494.829129][T18264] 0·: renamed from hsr0 (while UP) [ 494.842943][T18264] 0·: entered allmulticast mode [ 494.847841][T18264] hsr_slave_0: entered allmulticast mode [ 494.853491][T18264] hsr_slave_1: entered allmulticast mode [ 494.872408][T18264] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 494.950179][T18131] hsr_slave_0: entered promiscuous mode [ 494.956708][T18131] hsr_slave_1: entered promiscuous mode [ 494.963020][T18131] debugfs: 'hsr0' already exists in 'hsr' [ 494.968755][T18131] Cannot create hsr debugfs directory [ 494.990069][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 495.259661][T18268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.366811][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3236'. [ 495.402013][ T50] Bluetooth: hci4: command tx timeout [ 495.714072][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3237'. [ 495.812919][T18293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.885065][T18292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.950052][ T1175] pimreg: left allmulticast mode [ 496.246331][ T1175] team0: Port device ip6gre3 removed [ 496.444459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.464694][T18317] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 496.813984][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 496.921422][T11328] wlan1: Trigger new scan to find an IBSS to join [ 497.481465][ T5632] Bluetooth: hci4: command tx timeout [ 497.641355][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 497.650896][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.870184][ T1175] bond9 (unregistering): (slave bridge9): Releasing active interface [ 497.878580][ T1175] bridge9 (unregistering): left promiscuous mode [ 497.885911][ T1175] bridge9 (unregistering): left allmulticast mode [ 497.968055][T11335] wlan1: Creating new IBSS network, BSSID a2:cc:0e:e8:f3:eb [ 498.297702][ T1175] bond0 (unregistering): Released all slaves [ 498.311627][ T1175] bond1 (unregistering): Released all slaves [ 498.334343][ T1175] bond3 (unregistering): Released all slaves [ 498.352454][ T1175] bond2 (unregistering): Released all slaves [ 498.369828][ T1175] bond4 (unregistering): Released all slaves [ 498.388847][ T1175] bond5 (unregistering): Released all slaves [ 498.416994][ T1175] bond6 (unregistering): Released all slaves [ 498.443886][ T1175] bond7 (unregistering): Released all slaves [ 498.462596][ T1175] bond8 (unregistering): Released all slaves [ 498.485175][ T1175] bond9 (unregistering): Released all slaves [ 498.512724][ T1175] bond10 (unregistering): (slave veth7): Releasing active interface [ 498.526218][ T1175] bond10 (unregistering): Released all slaves [ 498.545453][ T1175] bond11 (unregistering): Released all slaves [ 498.571037][ T1175] bond12 (unregistering): Released all slaves [ 498.598699][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 498.805875][T18344] batman_adv: batadv0: Adding interface: ipvlan2 [ 498.839627][T18344] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.882400][T18344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.920460][T18344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.966317][T18344] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 499.128013][T18345] syzkaller0: entered promiscuous mode [ 499.147920][T18345] syzkaller0: entered allmulticast mode [ 499.251998][ T1175] tipc: Disabling bearer [ 499.263302][T18385] batadv_slave_1: entered promiscuous mode [ 499.277841][ T1175] tipc: Left network mode [ 499.464972][ T1175] IPVS: stopping master sync thread 11957 ... [ 499.510953][T18394] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 499.562143][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 499.644606][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3255'. [ 501.568026][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.869413][T18393] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.949514][T18393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.067222][T18385] batadv_slave_1: left promiscuous mode [ 502.279299][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 502.340694][T18419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3259'. [ 502.348857][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3261'. [ 502.691669][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.859644][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3265'. [ 502.882575][T18448] netlink: 'syz.1.3266': attribute type 3 has an invalid length. [ 503.045240][T18454] sctp: [Deprecated]: syz.3.3267 (pid 18454) Use of int in max_burst socket option. [ 503.045240][T18454] Use struct sctp_assoc_value instead [ 503.315430][T18464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'. [ 503.358596][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 503.442849][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 503.464319][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 503.565166][T18469] netlink: 'syz.3.3271': attribute type 32 has an invalid length. [ 503.634945][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 503.759692][T18469] bond0: Setting coupled_control to off (0) [ 504.744421][ T1175] hsr_slave_0: left promiscuous mode [ 504.776991][ T1175] hsr_slave_1: left promiscuous mode [ 504.992960][ T1175] pim6reg (unregistering): left allmulticast mode [ 505.641267][ T4942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 505.647447][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 506.015490][T18131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.045085][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.077992][T18538] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3284'. [ 506.116503][T18131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.232311][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.251582][T18131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 506.298880][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.327471][T18131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.344153][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.419222][T18569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 506.714184][T18581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 506.728733][T18581] gretap1: entered allmulticast mode [ 506.740842][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 506.770554][ T1175] IPVS: stop unused estimator thread 0... [ 506.771771][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 506.814532][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.888362][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.970959][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.978165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.045695][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.052938][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.237710][T18600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.341534][T18607] netlink: 'syz.3.3298': attribute type 10 has an invalid length. [ 508.251201][T18607] team0 (unregistering): Port device team_slave_0 removed [ 508.263029][T18607] team0 (unregistering): Port device team_slave_1 removed [ 508.273499][T18620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 508.386935][ T9] IPVS: starting estimator thread 0... [ 508.585282][T18623] IPVS: using max 32 ests per chain, 76800 per kthread [ 508.592843][T18629] netlink: 'syz.1.3305': attribute type 15 has an invalid length. [ 508.630282][T18629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3305'. [ 508.743441][T18637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3307'. [ 509.016362][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.096764][T18648] netlink: 'syz.2.3310': attribute type 58 has an invalid length. [ 509.105574][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3310'. [ 509.290652][T18131] veth0_vlan: entered promiscuous mode [ 509.320339][T18131] veth1_vlan: entered promiscuous mode [ 509.468265][T18655] IPv6: sit1: Disabled Multicast RS [ 509.524038][T18131] veth0_macvtap: entered promiscuous mode [ 509.557168][T18131] veth1_macvtap: entered promiscuous mode [ 509.627541][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.674477][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.730617][ T7120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.770802][ T7120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.802261][ T7120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.839836][ T7120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.130305][T11337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.159393][T18664] netlink: set zone limit has 4 unknown bytes [ 510.211894][T11337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.299615][T18667] netlink: set zone limit has 4 unknown bytes [ 510.316516][T18677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 510.337696][ T7111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.347746][ T7111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.541915][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.549652][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.676465][T18679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.697235][T18679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.007728][T11337] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.034245][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.079863][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.129141][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.209291][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 511.351516][T18696] –: renamed from dummy0 (while UP) [ 511.508813][T18702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3324'. [ 511.793589][T18712] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3329'. [ 512.120204][T18723] netlink: 'syz.2.3331': attribute type 61 has an invalid length. [ 512.131012][T18723] netlink: 'syz.2.3331': attribute type 62 has an invalid length. [ 512.417175][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 512.429693][T18738] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 512.512691][T18740] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 512.745332][T18754] netlink: 7148 bytes leftover after parsing attributes in process `syz.2.3338'. [ 512.835802][T18760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3340'. [ 513.090930][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 513.364371][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 513.502135][T18788] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3346'. [ 513.554516][T18788] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3346'. [ 513.592995][T18789] netlink: 'syz.4.3348': attribute type 13 has an invalid length. [ 513.628273][T18789] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 514.548329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.625133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.666396][T18806] bridge0: port 3(vlan4) entered blocking state [ 514.672792][T18806] bridge0: port 3(vlan4) entered forwarding state [ 514.694609][T18806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.745170][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.785697][T11335] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 514.932969][T18831] 8021q: VLANs not supported on ipvlan1 [ 515.194185][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.560715][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.796541][T18881] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 515.861939][T18883] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.018676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b10e400: rx timeout, send abort [ 516.039489][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b10e400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 516.227208][T18904] __nla_validate_parse: 9 callbacks suppressed [ 516.227226][T18904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3381'. [ 516.359075][T18910] bond1 (unregistering): Released all slaves [ 516.443324][T18918] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3386'. [ 516.480450][T18913] ªªªªªª speed is unknown, defaulting to 1000 [ 516.542655][T18915] netlink: 'syz.0.3385': attribute type 13 has an invalid length. [ 516.636901][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 516.683999][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 516.738183][T18935] xfrm0: entered allmulticast mode [ 517.355803][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.365282][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.396612][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.405998][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.415413][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.424695][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 517.501263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.513934][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.531232][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.577840][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.827480][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.589342][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.874479][T19040] can: request_module (can-proto-3) failed. [ 518.894067][T19048] vxcan2: entered allmulticast mode [ 519.076970][T19048] vxcan2: entered allmulticast mode [ 520.209790][T19087] netlink: 'syz.3.3433': attribute type 8 has an invalid length. [ 520.332181][T19096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.339440][T19096] IPv6: NLM_F_CREATE should be set when creating new route [ 520.346846][T19096] IPv6: NLM_F_CREATE should be set when creating new route [ 520.354145][T19096] IPv6: NLM_F_CREATE should be set when creating new route [ 520.367995][T19096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.939229][T19102] block nbd3: server does not support multiple connections per device. [ 520.955948][T19102] block nbd3: shutting down sockets [ 521.153814][T19122] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 521.233751][T19133] netlink: 'syz.3.3447': attribute type 39 has an invalid length. [ 521.263600][T19122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.331455][T19137] __nla_validate_parse: 81 callbacks suppressed [ 521.331476][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3449'. [ 521.338494][T19131] bond1: (slave gretap0): Enslaving as a backup interface with an up link [ 521.374727][T19140] net_ratelimit: 3 callbacks suppressed [ 521.374745][T19140] openvswitch: netlink: Message has 4 unknown bytes. [ 521.440858][T19140] netlink: 'syz.1.3450': attribute type 4 has an invalid length. [ 521.462427][ T7120] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 521.528200][T19147] bond1 (unregistering): Released all slaves [ 521.605668][T19155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3455'. [ 521.676746][ T7120] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.302709][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 522.313818][T19185] netlink: 'syz.2.3463': attribute type 4 has an invalid length. [ 522.344752][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'. [ 525.229974][T19238] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3472'. [ 525.355200][T19243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3474'. [ 525.761421][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.874534][ T30] audit: type=1107 audit(1778650021.993:14): pid=19258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 525.938496][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.229696][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.239572][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.249463][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.259258][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.381838][T19273] Bluetooth: MGMT ver 1.23 [ 526.422068][T19270] __nla_validate_parse: 6 callbacks suppressed [ 526.422089][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.449332][T19276] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 526.471586][T19275] netlink: 'syz.2.3477': attribute type 4 has an invalid length. [ 526.490397][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.525458][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.529419][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 526.558627][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.592450][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.654596][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.692726][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.709836][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.761832][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.771747][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 526.843149][T19270] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.951270][T19278] bond1 (unregistering): Released all slaves [ 527.431011][T19305] xfrm0: Caught tx_queue_len zero misconfig [ 527.562020][T19302] sctp: [Deprecated]: syz.3.3488 (pid 19302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.562020][T19302] Use struct sctp_sack_info instead [ 527.925411][T19331] ªªªªªª speed is unknown, defaulting to 1000 [ 528.231510][T19342] netlink: 'syz.0.3498': attribute type 1 has an invalid length. [ 528.239567][T19342] netlink: 'syz.0.3498': attribute type 2 has an invalid length. [ 528.252370][T19331] gretap0: entered promiscuous mode [ 528.258153][T19331] vlan3: entered promiscuous mode [ 528.312141][T19341] bridge_slave_1: left allmulticast mode [ 528.318065][T19341] bridge_slave_1: left promiscuous mode [ 528.361729][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.364268][T19346] netlink: 'syz.3.3500': attribute type 8 has an invalid length. [ 528.386367][T19341] bridge_slave_0: left allmulticast mode [ 528.400362][T19341] bridge_slave_0: left promiscuous mode [ 528.413029][T19341] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.378852][T19362] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 531.446909][T19359] lo: Caught tx_queue_len zero misconfig [ 531.492513][T19381] netlink: 'syz.1.3507': attribute type 10 has an invalid length. [ 531.652952][T19391] __nla_validate_parse: 62 callbacks suppressed [ 531.652970][T19391] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3512'. [ 531.740566][T19381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.756194][T19381] team0: Port device netdevsim1 added [ 531.843227][T19393] xt_HMARK: proto mask must be zero with L3 mode [ 531.863420][T19397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3513'. [ 532.151789][T19394] syzkaller0: entered promiscuous mode [ 532.167912][T19394] syzkaller0: entered allmulticast mode [ 532.241946][T19410] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3516'. [ 540.602149][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.646097][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.722885][ T4942] Bluetooth: hci5: command 0x0406 tx timeout [ 552.764158][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.429342][ T1175] bond0 (unregistering): Released all slaves [ 553.442825][ T1175] bond1 (unregistering): Released all slaves [ 553.465558][ T1175] bond2 (unregistering): Released all slaves [ 553.484615][ T1175] bond3 (unregistering): Released all slaves [ 553.509701][ T1175] bond5 (unregistering): Released all slaves [ 553.530275][ T1175] bond4 (unregistering): Released all slaves [ 553.635908][ T1175] : left promiscuous mode [ 553.715282][ T1175] tipc: Disabling bearer [ 553.734996][ T1175] tipc: Disabling bearer [ 553.741862][ T1175] tipc: Left network mode [ 554.196858][ T1175] veth0_macvtap: left promiscuous mode [ 554.203550][ T1175] veth1_vlan: left promiscuous mode [ 554.208859][ T1175] veth0_vlan: left promiscuous mode [ 554.902947][ T1175] IPVS: stop unused estimator thread 0... [ 563.003925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.008869][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.016545][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.082232][ T4942] Bluetooth: hci2: command 0x0406 tx timeout [ 569.401908][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 582.869474][T19429] Cannot find del_set index 14804 as target [ 582.898893][T19429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3523'. [ 582.972537][ T24] IPVS: starting estimator thread 0... [ 583.074965][T19441] IPVS: using max 33 ests per chain, 79200 per kthread [ 583.130613][T19450] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 583.216627][T19450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.274145][T19457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.289091][T19457] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 583.318073][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3529'. [ 583.429171][T11332] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 583.501696][T19467] netlink: 'syz.2.3528': attribute type 8 has an invalid length. [ 583.535453][T19467] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 583.546469][T19465] smbdirect: ib_dev[syz0] removed [ 583.571250][T11332] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 583.895510][T19456] infiniband syz1: set active [ 583.907680][T19456] infiniband syz1: added veth0_to_bond [ 583.922431][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 583.935713][T19456] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 583.952416][T19456] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 583.984080][T19456] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 583.996292][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 584.030560][T19456] RDS/IB: syz1: added [ 584.035228][T19456] smc: adding ib device syz1 with port count 1 [ 584.041732][T19456] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 584.385789][T19490] gtp0: entered promiscuous mode [ 584.390777][T19490] gtp0: entered allmulticast mode [ 584.429323][T19502] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3535'. [ 584.498402][T19506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3538'. [ 585.273286][T19539] IPv6: addrconf: prefix option has invalid lifetime [ 585.431156][ T5286] veth1_macvtap: left promiscuous mode [ 585.812760][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3548'. [ 586.167529][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3551'. [ 586.180816][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3551'. [ 586.563383][T19578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3553'. [ 586.762623][T19587] Unsupported ieee802154 address type: 0 [ 586.968459][T19595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.007937][T19585] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 587.019030][T19585] bond2 (unregistering): Released all slaves [ 587.043782][T19595] bond2: entered promiscuous mode [ 587.048845][T19595] bond2: entered allmulticast mode [ 587.055448][T19595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.126912][T19595] team0: Port device bond2 added [ 587.132147][T19603] team_slave_1: entered promiscuous mode [ 587.139706][T19603] team0: Port device team_slave_1 removed [ 587.166787][T19603] team_slave_1: entered allmulticast mode [ 587.187745][T19603] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 587.583661][T19610] ªªªªªª speed is unknown, defaulting to 1000 [ 588.034647][T19622] ªªªªªª speed is unknown, defaulting to 1000 [ 588.048734][T19625] __nla_validate_parse: 3 callbacks suppressed [ 588.048753][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'. [ 589.807772][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 589.821502][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 590.681679][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 591.968587][T19685] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 591.969914][T19684] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 592.206878][T19702] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3575'. [ 592.532178][T19710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3578'. [ 593.414412][T19745] netlink: 'syz.2.3587': attribute type 178 has an invalid length. [ 593.651342][T19754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3590'. [ 593.789763][T19764] IPVS: set_ctl: invalid protocol: 182 172.20.20.170:20001 [ 593.922816][T19759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3590'. [ 593.962357][T19759] nbd: device at index 64 is going down [ 596.716461][T19794] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 596.790855][T19801] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 596.837409][T19801] bond2: entered promiscuous mode [ 596.843271][T19801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.993312][T19801] bond2: (slave bridge2): making interface the new active one [ 597.014772][T19801] bridge2: entered promiscuous mode [ 597.057233][T19814] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 597.097396][T19801] bridge2: left promiscuous mode [ 597.342993][T19823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3598'. [ 597.767720][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'. [ 597.895377][T19835] syzkaller0: entered promiscuous mode [ 597.916681][T19835] syzkaller0: entered allmulticast mode [ 597.939624][T19850] tipc: Enabling of bearer rejected, failed to enable media [ 597.947979][T19839] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 598.132271][T19839] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.276614][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 603.456595][T19909] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 603.507007][T19909] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3611'. [ 603.554527][T19909] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 603.623698][T19909] netlink: 634 bytes leftover after parsing attributes in process `syz.3.3611'. [ 603.837713][T19927] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 603.877031][T19937] netlink: 5088 bytes leftover after parsing attributes in process `syz.0.3616'. [ 603.915472][T19927] bond2 (unregistering): Released all slaves [ 604.012894][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 604.566439][ T30] audit: type=1804 audit(1778650100.683:15): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3623" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=591 res=1 errno=0 [ 604.638824][ T30] audit: type=1800 audit(1778650100.683:16): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3623" name="cgroup.controllers" dev="tmpfs" ino=591 res=0 errno=0 [ 604.773717][T19978] Bluetooth: MGMT ver 1.23 [ 606.926480][T19936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.969715][T20018] gtp0: entered promiscuous mode [ 607.974753][T20018] gtp0: entered allmulticast mode [ 608.065648][T20022] netlink: 'syz.3.3630': attribute type 8 has an invalid length. [ 608.106496][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3630'. [ 608.116694][T20022] nbd: couldn't find a device at index 67108864 [ 608.368673][T20030] openvswitch: netlink: Message has 151 unknown bytes. [ 608.470642][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'. [ 608.500045][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'. [ 609.287949][T20073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3642'. [ 609.901538][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3650'. [ 611.265648][T20055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.509061][T20107] virt_wifi0: entered promiscuous mode [ 611.528083][T20107] macsec1: entered promiscuous mode [ 611.569827][T20107] ip6tnl1: entered allmulticast mode [ 611.593228][T20111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3656'. [ 611.608054][T20104] IPVS: Scheduler module ip_vs_sip not found [ 611.616270][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3653'. [ 611.626914][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3653'. [ 611.796829][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 611.816228][T20111] bridge0: port 3(vlan4) entered disabled state [ 611.823891][T20111] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.831445][T20111] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.947709][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.961496][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.137470][T20144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.174184][ T5630] syz1: Port: 1 Link DOWN [ 612.179473][T11337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.191541][T11332] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.210917][T11332] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.220170][T11332] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.541004][T20155] ªªªªªª speed is unknown, defaulting to 1000 [ 612.580884][T20159] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 612.997167][T20169] netlink: 'syz.4.3669': attribute type 4 has an invalid length. [ 613.000131][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 613.018285][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3668'. [ 613.218745][T20176] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 613.343262][T20176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.534969][T20197] __nla_validate_parse: 1 callbacks suppressed [ 613.534987][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3674'. [ 613.680932][T20204] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 613.841671][T20204] bond3: (slave batadv1): Opening slave failed [ 614.207749][T20208] nbd3: detected capacity change from 0 to 63 [ 614.256934][T20218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 614.364556][T20230] netlink: 'syz.0.3684': attribute type 7 has an invalid length. [ 614.376561][ T4942] block nbd3: Receive control failed (result -104) [ 614.378415][ T50] block nbd3: Receive control failed (result -32) [ 614.508594][T20234] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 614.585756][T20238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3686'. [ 614.597449][T20238] unsupported nlmsg_type 40 [ 614.628184][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 614.895790][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3691'. [ 615.291629][T20274] veth1: entered promiscuous mode [ 615.305888][T20274] veth1: entered allmulticast mode [ 615.334338][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3700'. [ 615.424805][T20279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3698'. [ 615.442245][T20274] block nbd4: Unsupported socket: should be TCP or UNIX. [ 615.476986][T20281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.585888][T20284] netlink: 11212 bytes leftover after parsing attributes in process `syz.3.3701'. [ 615.754838][T20298] sit2: entered allmulticast mode [ 615.974937][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'. [ 616.014151][T20310] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 616.325868][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 616.999295][T20353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.232516][T20337] ªªªªªª speed is unknown, defaulting to 1000 [ 617.437517][T20359] dummy0: Caught tx_queue_len zero misconfig [ 617.694277][T20367] x_tables: duplicate underflow at hook 1 [ 618.718697][T20422] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 618.756152][T20425] __nla_validate_parse: 6 callbacks suppressed [ 618.756169][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 619.226508][T20450] FAULT_INJECTION: forcing a failure. [ 619.226508][T20450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.251510][T20450] CPU: 1 UID: 0 PID: 20450 Comm: syz.1.3746 Not tainted syzkaller #0 PREEMPT(full) [ 619.251537][T20450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.251548][T20450] Call Trace: [ 619.251555][T20450] [ 619.251563][T20450] dump_stack_lvl+0xe8/0x150 [ 619.251591][T20450] should_fail_ex+0x412/0x560 [ 619.251619][T20450] _copy_from_user+0x2d/0xb0 [ 619.251646][T20450] __sys_bpf+0x229/0x950 [ 619.251673][T20450] ? __pfx___sys_bpf+0x10/0x10 [ 619.251714][T20450] ? ksys_write+0x242/0x270 [ 619.251751][T20450] ? __pfx_ksys_write+0x10/0x10 [ 619.251778][T20450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.251798][T20450] __x64_sys_bpf+0x7c/0x90 [ 619.251823][T20450] do_syscall_64+0x15f/0xf80 [ 619.251839][T20450] ? trace_irq_disable+0x3b/0x140 [ 619.251864][T20450] ? clear_bhb_loop+0x40/0x90 [ 619.251886][T20450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.251904][T20450] RIP: 0033:0x7fd609d9ce59 [ 619.251920][T20450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.251935][T20450] RSP: 002b:00007fd60ad20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.251954][T20450] RAX: ffffffffffffffda RBX: 00007fd60a015fa0 RCX: 00007fd609d9ce59 [ 619.251966][T20450] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 619.251976][T20450] RBP: 00007fd60ad20090 R08: 0000000000000000 R09: 0000000000000000 [ 619.251987][T20450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.251998][T20450] R13: 00007fd60a016038 R14: 00007fd60a015fa0 R15: 00007ffd2cea5f08 [ 619.252026][T20450] [ 619.613204][T20455] Cannot find add_set index 0 as target [ 619.888572][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3749'. [ 620.119313][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.126807][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.134194][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.141714][T20462] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 620.144942][T20468] openvswitch: netlink: IP tunnel TTL not specified. [ 620.156801][T20469] openvswitch: netlink: IP tunnel TTL not specified. [ 620.163097][T20462] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 620.219421][T20462] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 620.241007][T20462] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 620.280026][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.310593][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.320764][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.329863][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.356392][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.373247][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.384269][T20462] wg1 speed is unknown, defaulting to 1000 [ 620.387714][T20473] netlink: 'syz.0.3754': attribute type 2 has an invalid length. [ 620.425016][T20473] netlink: 'syz.0.3754': attribute type 1 has an invalid length. [ 620.432788][T20473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3754'. [ 620.565707][T20484] FAULT_INJECTION: forcing a failure. [ 620.565707][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 620.583677][T20484] CPU: 0 UID: 0 PID: 20484 Comm: syz.2.3758 Not tainted syzkaller #0 PREEMPT(full) [ 620.583702][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.583712][T20484] Call Trace: [ 620.583719][T20484] [ 620.583727][T20484] dump_stack_lvl+0xe8/0x150 [ 620.583753][T20484] should_fail_ex+0x412/0x560 [ 620.583781][T20484] should_failslab+0xa8/0x100 [ 620.583808][T20484] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 620.583834][T20484] ? __get_vm_area_node+0x13f/0x300 [ 620.583860][T20484] __get_vm_area_node+0x13f/0x300 [ 620.583887][T20484] __vmalloc_node_range_noprof+0x36a/0x1750 [ 620.583911][T20484] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.583931][T20484] ? __lock_acquire+0x6b5/0x2cf0 [ 620.583972][T20484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 620.583996][T20484] ? __lock_acquire+0x6b5/0x2cf0 [ 620.584017][T20484] ? _parse_integer_limit+0x1ae/0x1f0 [ 620.584042][T20484] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.584057][T20484] __vmalloc_noprof+0xd2/0x120 [ 620.584079][T20484] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.584098][T20484] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.584119][T20484] bpf_prog_alloc+0x3c/0x1a0 [ 620.584138][T20484] bpf_prog_load+0x779/0x1a10 [ 620.584165][T20484] ? __pfx_bpf_prog_load+0x10/0x10 [ 620.584182][T20484] ? __might_fault+0xaf/0x130 [ 620.584219][T20484] ? bpf_lsm_bpf+0x9/0x20 [ 620.584234][T20484] ? security_bpf+0x7e/0x2d0 [ 620.584256][T20484] __sys_bpf+0x618/0x950 [ 620.584282][T20484] ? __pfx___sys_bpf+0x10/0x10 [ 620.584322][T20484] ? ksys_write+0x242/0x270 [ 620.584347][T20484] ? __pfx_ksys_write+0x10/0x10 [ 620.584373][T20484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.584392][T20484] __x64_sys_bpf+0x7c/0x90 [ 620.584415][T20484] do_syscall_64+0x15f/0xf80 [ 620.584431][T20484] ? trace_irq_disable+0x3b/0x140 [ 620.584455][T20484] ? clear_bhb_loop+0x40/0x90 [ 620.584476][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.584494][T20484] RIP: 0033:0x7ff75db9ce59 [ 620.584511][T20484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.584526][T20484] RSP: 002b:00007ff75ea97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.584545][T20484] RAX: ffffffffffffffda RBX: 00007ff75de15fa0 RCX: 00007ff75db9ce59 [ 620.584558][T20484] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 620.584569][T20484] RBP: 00007ff75ea97090 R08: 0000000000000000 R09: 0000000000000000 [ 620.584587][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.584598][T20484] R13: 00007ff75de16038 R14: 00007ff75de15fa0 R15: 00007ffd962aab58 [ 620.584627][T20484] [ 620.584854][T20484] syz.2.3758: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 620.741197][ T30] audit: type=1804 audit(1778650116.843:17): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3760" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=904 res=1 errno=0 [ 620.754854][T20484] ,cpuset= [ 620.819157][ T30] audit: type=1800 audit(1778650116.843:18): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3760" name="cgroup.controllers" dev="tmpfs" ino=904 res=0 errno=0 [ 620.823763][T20484] /,mems_allowed=0-1 [ 620.965298][T20484] CPU: 1 UID: 0 PID: 20484 Comm: syz.2.3758 Not tainted syzkaller #0 PREEMPT(full) [ 620.965321][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.965332][T20484] Call Trace: [ 620.965339][T20484] [ 620.965347][T20484] dump_stack_lvl+0xe8/0x150 [ 620.965372][T20484] warn_alloc+0x249/0x340 [ 620.965403][T20484] ? __pfx_warn_alloc+0x10/0x10 [ 620.965429][T20484] ? __get_vm_area_node+0x13f/0x300 [ 620.965456][T20484] ? __get_vm_area_node+0x2b5/0x300 [ 620.965485][T20484] __vmalloc_node_range_noprof+0x38f/0x1750 [ 620.965512][T20484] ? __lock_acquire+0x6b5/0x2cf0 [ 620.965554][T20484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 620.965578][T20484] ? __lock_acquire+0x6b5/0x2cf0 [ 620.965599][T20484] ? _parse_integer_limit+0x1ae/0x1f0 [ 620.965626][T20484] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.965643][T20484] __vmalloc_noprof+0xd2/0x120 [ 620.965666][T20484] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.965686][T20484] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 620.965709][T20484] bpf_prog_alloc+0x3c/0x1a0 [ 620.965728][T20484] bpf_prog_load+0x779/0x1a10 [ 620.965757][T20484] ? __pfx_bpf_prog_load+0x10/0x10 [ 620.965775][T20484] ? __might_fault+0xaf/0x130 [ 620.965818][T20484] ? bpf_lsm_bpf+0x9/0x20 [ 620.965834][T20484] ? security_bpf+0x7e/0x2d0 [ 620.965858][T20484] __sys_bpf+0x618/0x950 [ 620.965885][T20484] ? __pfx___sys_bpf+0x10/0x10 [ 620.965925][T20484] ? ksys_write+0x242/0x270 [ 620.965952][T20484] ? __pfx_ksys_write+0x10/0x10 [ 620.965981][T20484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.966002][T20484] __x64_sys_bpf+0x7c/0x90 [ 620.966027][T20484] do_syscall_64+0x15f/0xf80 [ 620.966044][T20484] ? trace_irq_disable+0x3b/0x140 [ 620.966069][T20484] ? clear_bhb_loop+0x40/0x90 [ 620.966091][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.966109][T20484] RIP: 0033:0x7ff75db9ce59 [ 620.966126][T20484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.966141][T20484] RSP: 002b:00007ff75ea97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.966160][T20484] RAX: ffffffffffffffda RBX: 00007ff75de15fa0 RCX: 00007ff75db9ce59 [ 620.966173][T20484] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 620.966185][T20484] RBP: 00007ff75ea97090 R08: 0000000000000000 R09: 0000000000000000 [ 620.966196][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.966207][T20484] R13: 00007ff75de16038 R14: 00007ff75de15fa0 R15: 00007ffd962aab58 [ 620.966236][T20484] [ 620.966254][T20484] Mem-Info: [ 621.014026][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 621.022666][T20484] active_anon:6180 inactive_anon:0 isolated_anon:0 [ 621.022666][T20484] active_file:3601 inactive_file:40179 isolated_file:0 [ 621.022666][T20484] unevictable:768 dirty:168 writeback:0 [ 621.022666][T20484] slab_reclaimable:11834 slab_unreclaimable:116115 [ 621.022666][T20484] mapped:29585 shmem:1296 pagetables:1646 [ 621.022666][T20484] sec_pagetables:0 bounce:0 [ 621.022666][T20484] kernel_misc_reclaimable:0 [ 621.022666][T20484] free:1287863 free_pcp:25250 free_cma:0 [ 621.289293][T20484] Node 0 active_anon:24720kB inactive_anon:0kB active_file:14404kB inactive_file:160524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77352kB dirty:704kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14284kB pagetables:6460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.323660][T20484] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.356634][T20484] Node 0 DMA free:11152kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:72kB free_cma:0kB [ 621.435098][T20484] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 621.462450][T20484] Node 0 DMA32 free:1313644kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24520kB inactive_anon:0kB active_file:14404kB inactive_file:160524kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:58728kB local_pcp:30752kB free_cma:0kB [ 621.490881][T20513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3765'. [ 621.528660][T20514] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3765'. [ 621.529775][T20484] lowmem_reserve[]: 0 0 0 0 0 [ 621.542754][T20484] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 621.572068][T20484] lowmem_reserve[]: 0 0 0 0 0 [ 621.576892][T20484] Node 1 Normal free:3820900kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:44516kB local_pcp:24648kB free_cma:0kB [ 621.609202][T20484] lowmem_reserve[]: 0 0 0 0 0 [ 621.614201][T20484] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11152kB [ 621.646774][T20484] Node 0 DMA32: 3982*4kB (UME) 3191*8kB (UME) 2049*16kB (UME) 185*32kB (UM) 488*64kB (UME) 842*128kB (UME) 702*256kB (UME) 440*512kB (UME) 294*1024kB (UME) 172*2048kB (UM) 7*4096kB (U) = 1306144kB [ 621.690022][T20484] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 621.702563][T20484] Node 1 Normal: 13*4kB (U) 20*8kB (UM) 19*16kB (UM) 13*32kB (UM) 13*64kB (UM) 11*128kB (UM) 11*256kB (UM) 11*512kB (UM) 8*1024kB (UM) 6*2048kB (U) 925*4096kB (UM) = 3820900kB [ 621.748545][T20484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.767444][T20484] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.777029][T20484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.786947][T20484] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.796479][T20484] 45072 total pagecache pages [ 621.801175][T20484] 0 pages in swap cache [ 621.805670][T20484] Free swap = 124996kB [ 621.810066][T20484] Total swap = 124996kB [ 621.814232][T20484] 2097051 pages RAM [ 621.818042][T20484] 0 pages HighMem/MovableOnly [ 621.822713][T20484] 427136 pages reserved [ 621.826868][T20484] 0 pages cma reserved [ 621.883664][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 622.175218][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'. [ 622.210617][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 622.234327][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 622.421836][T20566] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 622.436122][T20566] bond3 (unregistering): Released all slaves [ 622.494385][ T5845] IPVS: starting estimator thread 0... [ 622.671225][T20574] IPVS: using max 31 ests per chain, 74400 per kthread [ 622.738363][T20586] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 622.779105][T20586] team0: Port device dummy0 added [ 622.857241][T20588] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 622.911530][T20588] team0: Port device dummy0 removed [ 622.938305][T20588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 623.108241][T20594] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 623.488499][T20586] nbd4: detected capacity change from 0 to 63 [ 623.515882][ T50] block nbd4: Receive control failed (result -104) [ 623.516889][ T4942] block nbd4: Receive control failed (result -32) [ 623.738267][T20616] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 623.842517][T20623] __nla_validate_parse: 3 callbacks suppressed [ 623.842534][T20623] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.3798'. [ 623.948420][T20616] gtp2: entered promiscuous mode [ 623.953385][T20616] gtp2: entered allmulticast mode [ 624.091880][T20631] netlink: 'syz.3.3801': attribute type 5 has an invalid length. [ 624.143275][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 624.299620][T20639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3802'. [ 624.347188][T20637] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 624.410009][T20637] bond3: entered promiscuous mode [ 624.415157][T20637] bond3: entered allmulticast mode [ 624.420659][T20637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.447632][T20637] erspan1: entered allmulticast mode [ 624.448051][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.461231][T20637] bond3: (slave erspan1): making interface the new active one [ 624.468713][T20637] erspan1: entered promiscuous mode [ 624.475457][T20637] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 624.475606][T20642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3804'. [ 624.893269][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 624.983162][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 625.003320][T20651] syzkaller0: entered promiscuous mode [ 625.009843][T20651] syzkaller0: entered allmulticast mode [ 625.017493][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 625.069277][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 625.099102][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 625.125564][T20651] tipc: Started in network mode [ 625.130477][T20651] tipc: Node identity 4662c71c22b2, cluster identity 4711 [ 625.137887][T20651] tipc: Enabled bearer , priority 0 [ 625.221796][T20651] netlink: 'syz.3.3808': attribute type 1 has an invalid length. [ 625.306392][T20651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3808'. [ 625.335004][T20649] tipc: Resetting bearer [ 625.392436][T20649] tipc: Disabling bearer [ 625.418166][T20674] syzkaller0: entered promiscuous mode [ 625.431253][T20674] syzkaller0: entered allmulticast mode [ 625.578553][T20683] netlink: 'syz.4.3816': attribute type 13 has an invalid length. [ 625.611685][T20683] netlink: 'syz.4.3816': attribute type 11 has an invalid length. [ 625.866374][T20704] netlink: 'syz.1.3818': attribute type 15 has an invalid length. [ 626.020721][T20713] ªªªªªª speed is unknown, defaulting to 1000 [ 626.514074][T20713] wg1 speed is unknown, defaulting to 1000 [ 626.852833][T20752] netlink: 'syz.4.3833': attribute type 3 has an invalid length. [ 626.870299][T20752] nbd: nbd4 already in use [ 626.875816][T20752] block nbd4: NBD_DISCONNECT [ 626.880613][T20752] block nbd4: Send disconnect failed -32 [ 626.888559][T20752] block nbd4: Send disconnect failed -32 [ 626.895254][T20752] block nbd4: shutting down sockets [ 626.920641][T20752] blk_print_req_error: 138 callbacks suppressed [ 626.920660][T20752] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.940237][T20752] buffer_io_error: 138 callbacks suppressed [ 626.940252][T20752] Buffer I/O error on dev nbd4, logical block 0, async page read [ 626.966730][T20752] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.036303][T20752] Buffer I/O error on dev nbd4, logical block 1, async page read [ 627.051630][T20752] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.071345][T20752] Buffer I/O error on dev nbd4, logical block 2, async page read [ 627.093635][T20752] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.102709][T20752] Buffer I/O error on dev nbd4, logical block 3, async page read [ 627.126728][T20330] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.141292][T20330] Buffer I/O error on dev nbd4, logical block 0, async page read [ 627.149303][T20330] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.161816][T20330] Buffer I/O error on dev nbd4, logical block 1, async page read [ 627.169722][T20330] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.178800][T20330] Buffer I/O error on dev nbd4, logical block 2, async page read [ 627.267920][T20330] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.276995][T20330] Buffer I/O error on dev nbd4, logical block 3, async page read [ 627.284899][T20330] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.325310][T20330] Buffer I/O error on dev nbd4, logical block 0, async page read [ 627.333227][T20330] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.342269][T20330] Buffer I/O error on dev nbd4, logical block 1, async page read [ 627.370605][T20330] ldm_validate_partition_table(): Disk read failed. [ 627.393015][T20330] Dev nbd4: unable to read RDB block 0 [ 627.423262][T20330] nbd4: unable to read partition table [ 627.557879][T20330] ldm_validate_partition_table(): Disk read failed. [ 627.583670][T20330] Dev nbd4: unable to read RDB block 0 [ 627.626101][T20330] nbd4: unable to read partition table [ 630.195613][T20752] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.208684][T20752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.302577][T11337] bond1: (slave bond0): link status up again after 0 ms [ 630.318331][T20752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.339391][T20752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.347130][T20801] __nla_validate_parse: 7 callbacks suppressed [ 630.347147][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 630.363334][ T7111] bond1: (slave bond0): link status up again after 0 ms [ 630.378452][T20752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.389119][T11337] bond1: (slave bond0): link status up again after 0 ms [ 630.399693][T20752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.415141][T20752] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 630.417381][T11337] bond1: (slave bond0): link status up again after 0 ms [ 630.460583][T20805] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 630.503799][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.511014][T11332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.530152][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3836'. [ 630.543722][ T7111] bond1: (slave bond0): link status up again after 0 ms [ 630.543976][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.558040][T11332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.640911][ T7115] bond1: (slave bond0): link status up again after 0 ms [ 630.695614][ T13] bond1: (slave bond0): link status up again after 0 ms [ 630.730353][ T13] bond1: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 630.768263][ T13] bond1: active interface up! [ 630.827703][T20815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3841'. [ 630.871284][T20815] bond1: (slave bond0): Removing an active aggregator [ 630.878581][T20815] bond1: (slave bond0): Releasing backup interface [ 630.889416][T20815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.898603][T20818] netlink: 'syz.1.3843': attribute type 3 has an invalid length. [ 630.907634][T20815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.924880][T20815] bond0 (unregistering): Released all slaves [ 631.165955][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3844'. [ 631.368534][T20834] bridge0: port 3(syz_tun) entered blocking state [ 631.373083][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'. [ 631.376579][T20834] bridge0: port 3(syz_tun) entered disabled state [ 631.391766][T20834] syz_tun: entered allmulticast mode [ 631.399043][T20834] syz_tun: entered promiscuous mode [ 631.409734][T20837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3848'. [ 631.436521][T20834] bridge0: port 3(syz_tun) entered blocking state [ 631.443148][T20834] bridge0: port 3(syz_tun) entered forwarding state [ 631.456811][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'. [ 631.465837][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'. [ 631.480119][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'. [ 631.490851][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'. [ 631.648521][T20848] netlink: 'syz.1.3851': attribute type 1 has an invalid length. [ 631.707758][T20848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 631.764373][T20848] bond4: (slave geneve2): making interface the new active one [ 631.776479][T20848] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 631.979662][T20856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 632.554247][T20876] syzkaller0: entered promiscuous mode [ 632.564142][T20876] syzkaller0: entered allmulticast mode [ 633.059224][T20885] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 633.164331][T20887] syzkaller1: entered promiscuous mode [ 633.171802][T20887] syzkaller1: entered allmulticast mode [ 633.424006][T20899] dvmrp0: entered allmulticast mode [ 634.088148][T20926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.119267][T20926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.831447][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.861248][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.878386][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.948872][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.099164][T20985] nbd: must specify a size in bytes for the device [ 635.593620][T21016] __nla_validate_parse: 14 callbacks suppressed [ 635.593640][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 635.616364][T21019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.632549][T21019] batadv_slave_0: entered promiscuous mode [ 635.648684][T21019] batadv_slave_0: entered allmulticast mode [ 635.664302][T21016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3899'. [ 635.669353][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 635.694444][T21022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.724174][T21022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.742331][T21022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.782234][T21028] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3903'. [ 635.885197][T21034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3907'. [ 636.142495][T21048] netlink: 548 bytes leftover after parsing attributes in process `syz.3.3908'. [ 636.163513][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'. [ 636.442556][T21062] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3916'. [ 636.797426][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.804683][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.212700][T21063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.230510][T21063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.465503][T21077] syzkaller0: entered promiscuous mode [ 637.471009][T21077] syzkaller0: entered allmulticast mode [ 637.630701][T21115] FAULT_INJECTION: forcing a failure. [ 637.630701][T21115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.646754][T21115] CPU: 1 UID: 0 PID: 21115 Comm: syz.0.3927 Not tainted syzkaller #0 PREEMPT(full) [ 637.646790][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.646802][T21115] Call Trace: [ 637.646809][T21115] [ 637.646817][T21115] dump_stack_lvl+0xe8/0x150 [ 637.646843][T21115] should_fail_ex+0x412/0x560 [ 637.646871][T21115] _copy_from_user+0x2d/0xb0 [ 637.646897][T21115] copy_from_sockptr+0x5e/0x90 [ 637.646926][T21115] do_ipv6_setsockopt+0x2132/0x3150 [ 637.646951][T21115] ? get_pid_task+0x20/0x1f0 [ 637.646982][T21115] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 637.647008][T21115] ? get_pid_task+0x20/0x1f0 [ 637.647028][T21115] ? get_pid_task+0x20/0x1f0 [ 637.647046][T21115] ? get_pid_task+0x20/0x1f0 [ 637.647092][T21115] ? aa_sk_perm+0x6d5/0x900 [ 637.647112][T21115] ? __fget_files+0x2a/0x420 [ 637.647135][T21115] ? __pfx_aa_sk_perm+0x10/0x10 [ 637.647155][T21115] ? __fget_files+0x2a/0x420 [ 637.647172][T21115] ? aa_sock_opt_perm+0xff/0x1a0 [ 637.647195][T21115] ipv6_setsockopt+0x59/0x170 [ 637.647210][T21115] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 637.647232][T21115] do_sock_setsockopt+0x17c/0x1b0 [ 637.647258][T21115] __x64_sys_setsockopt+0x13d/0x1b0 [ 637.647282][T21115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.647300][T21115] do_syscall_64+0x15f/0xf80 [ 637.647316][T21115] ? trace_irq_disable+0x3b/0x140 [ 637.647339][T21115] ? clear_bhb_loop+0x40/0x90 [ 637.647358][T21115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.647374][T21115] RIP: 0033:0x7f087639ce59 [ 637.647390][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.647402][T21115] RSP: 002b:00007f0877286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 637.647420][T21115] RAX: ffffffffffffffda RBX: 00007f0876615fa0 RCX: 00007f087639ce59 [ 637.647431][T21115] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 637.647441][T21115] RBP: 00007f0877286090 R08: 0000000000000088 R09: 0000000000000000 [ 637.647451][T21115] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.647460][T21115] R13: 00007f0876616038 R14: 00007f0876615fa0 R15: 00007fff92654d78 [ 637.647491][T21115] [ 638.101250][T21120] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3929'. [ 640.177628][T21119] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3929'. [ 640.256200][T21136] netlink: 'syz.0.3932': attribute type 1 has an invalid length. [ 640.696821][T21151] __nla_validate_parse: 1 callbacks suppressed [ 640.696839][T21151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3938'. [ 640.731912][T21155] FAULT_INJECTION: forcing a failure. [ 640.731912][T21155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.761915][T21155] CPU: 1 UID: 0 PID: 21155 Comm: syz.1.3939 Not tainted syzkaller #0 PREEMPT(full) [ 640.761943][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.761954][T21155] Call Trace: [ 640.761961][T21155] [ 640.761969][T21155] dump_stack_lvl+0xe8/0x150 [ 640.761995][T21155] should_fail_ex+0x412/0x560 [ 640.762024][T21155] _copy_to_user+0x31/0xb0 [ 640.762052][T21155] simple_read_from_buffer+0xe1/0x170 [ 640.762080][T21155] proc_fail_nth_read+0x1bb/0x230 [ 640.762108][T21155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.762134][T21155] ? rw_verify_area+0x2a6/0x4d0 [ 640.762157][T21155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.762182][T21155] vfs_read+0x20c/0xa70 [ 640.762211][T21155] ? __pfx___mutex_lock+0x10/0x10 [ 640.762230][T21155] ? __pfx_vfs_read+0x10/0x10 [ 640.762256][T21155] ? __fget_files+0x2a/0x420 [ 640.762286][T21155] ? __fget_files+0x3a0/0x420 [ 640.762306][T21155] ? __fget_files+0x2a/0x420 [ 640.762334][T21155] ksys_read+0x150/0x270 [ 640.762360][T21155] ? __pfx_ksys_read+0x10/0x10 [ 640.762397][T21155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.762424][T21155] do_syscall_64+0x15f/0xf80 [ 640.762451][T21155] ? trace_irq_disable+0x3b/0x140 [ 640.762480][T21155] ? clear_bhb_loop+0x40/0x90 [ 640.762503][T21155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.762522][T21155] RIP: 0033:0x7fd609d5d68e [ 640.762539][T21155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 640.762555][T21155] RSP: 002b:00007fd60ad1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.762575][T21155] RAX: ffffffffffffffda RBX: 00007fd60ad206c0 RCX: 00007fd609d5d68e [ 640.762588][T21155] RDX: 000000000000000f RSI: 00007fd60ad200a0 RDI: 0000000000000004 [ 640.762600][T21155] RBP: 00007fd60ad20090 R08: 0000000000000000 R09: 0000000000000000 [ 640.762619][T21155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.762630][T21155] R13: 00007fd60a016038 R14: 00007fd60a015fa0 R15: 00007ffd2cea5f08 [ 640.762660][T21155] [ 641.340662][T21174] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3942'. [ 641.424823][T21142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.771193][T21169] tipc: Enabled bearer , priority 0 [ 641.869193][T21175] syzkaller0: entered promiscuous mode [ 641.877015][T21175] syzkaller0: entered allmulticast mode [ 641.942573][T21142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.961016][T21156] tipc: Resetting bearer [ 644.314463][ T11] block nbd3: Connection timed out, retrying (0/2 alive) [ 644.384754][ T11] block nbd3: Connection timed out, retrying (0/2 alive) [ 644.410684][ T11] block nbd3: Connection timed out, retrying (0/2 alive) [ 644.420174][ T1710] block nbd3: Dead connection, failed to find a fallback [ 644.459333][ T11] block nbd3: Connection timed out, retrying (0/2 alive) [ 644.467931][ T1710] block nbd3: shutting down sockets [ 644.481290][ T1710] blk_print_req_error: 138 callbacks suppressed [ 644.481323][ T1710] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.519793][ T1710] buffer_io_error: 138 callbacks suppressed [ 644.519828][ T1710] Buffer I/O error on dev nbd3, logical block 0, async page read [ 644.536110][ T1710] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.547009][ T1710] Buffer I/O error on dev nbd3, logical block 3, async page read [ 644.554814][ T1710] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.563867][ T1710] Buffer I/O error on dev nbd3, logical block 2, async page read [ 644.571670][ T1710] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.580732][ T1710] Buffer I/O error on dev nbd3, logical block 1, async page read [ 644.591066][T19898] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.603434][T19898] Buffer I/O error on dev nbd3, logical block 0, async page read [ 644.611430][T19898] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.620489][T19898] Buffer I/O error on dev nbd3, logical block 1, async page read [ 644.628376][T19898] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.637439][T19898] Buffer I/O error on dev nbd3, logical block 2, async page read [ 644.645334][T19898] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.646087][T21156] tipc: Disabling bearer [ 644.664308][T19898] Buffer I/O error on dev nbd3, logical block 3, async page read [ 644.672226][T19898] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.681284][T19898] Buffer I/O error on dev nbd3, logical block 0, async page read [ 644.689177][T19898] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.698223][T19898] Buffer I/O error on dev nbd3, logical block 1, async page read [ 644.708537][T19898] ldm_validate_partition_table(): Disk read failed. [ 644.733379][T19898] Dev nbd3: unable to read RDB block 0 [ 644.760096][T19898] nbd3: unable to read partition table [ 644.798193][T21208] netlink: 'syz.0.3949': attribute type 1 has an invalid length. [ 644.800248][T19898] ldm_validate_partition_table(): Disk read failed. [ 644.817389][T21142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.831964][T19898] Dev nbd3: unable to read RDB block 0 [ 644.847866][T19898] nbd3: unable to read partition table [ 644.893221][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 644.934934][T21206] syzkaller0: entered allmulticast mode [ 645.028450][T21221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3950'. [ 645.064547][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 645.076218][T21223] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3952'. [ 645.106614][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 645.158786][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 645.421652][T21142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.527426][T21236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.596495][T21236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.606366][T21236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.631779][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.639007][T11337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.682885][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.690028][T11337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.715791][T21237] tipc: Enabled bearer , priority 0 [ 645.723196][T21237] syzkaller0: entered promiscuous mode [ 645.728677][T21237] syzkaller0: entered allmulticast mode [ 645.738265][ T993] syz1: Port: 1 Link ACTIVE [ 645.769166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.807459][T21237] tipc: Resetting bearer [ 645.849154][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 645.955683][ T7120] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.037171][T21258] dvmrp0: entered allmulticast mode [ 646.046167][ C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 646.058549][T11326] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.078907][ T7120] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.120887][ T7115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.129251][T21234] tipc: Resetting bearer [ 646.158544][T21234] tipc: Disabling bearer [ 646.162344][T21260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3965'. [ 646.310184][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 646.327930][T21263] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 646.416648][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 646.481604][T21274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3970'. [ 646.780237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.803030][T21291] ªªªªªª speed is unknown, defaulting to 1000 [ 646.897677][T21295] netlink: 'syz.2.3976': attribute type 12 has an invalid length. [ 647.017784][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 647.026681][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 647.036332][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 647.045462][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 647.258567][T21319] netlink: 'syz.3.3984': attribute type 8 has an invalid length. [ 647.333774][T21291] wg1 speed is unknown, defaulting to 1000 [ 647.522387][T21326] ªªªªªª speed is unknown, defaulting to 1000 [ 647.678750][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3984'. [ 647.700640][T21335] syzkaller1: entered allmulticast mode [ 647.759520][T11326] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.767829][T11326] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.812667][T11326] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.822549][T11326] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.920917][T21326] wg1 speed is unknown, defaulting to 1000 [ 648.074231][T21347] nbd: must specify a size in bytes for the device [ 648.907338][T21378] ip6gre1: entered promiscuous mode [ 648.912851][T21378] ip6gre1: entered allmulticast mode [ 649.221419][T11326] bond1: (slave gretap0): link status up again after 0 ms [ 649.274949][T11326] bond1: (slave gretap0): failed to get link speed/duplex [ 649.411235][T11326] bond1: (slave gretap0): failed to get link speed/duplex [ 649.541368][ T7120] bond1: (slave gretap0): failed to get link speed/duplex [ 649.638152][T21423] xt_hashlimit: invalid rate [ 649.924367][T21424] bridge0: port 3(syz_tun) entered disabled state [ 649.951692][T21424] bridge0: port 1(1¾x9ÿ) entered disabled state [ 650.166112][T21447] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 650.453768][T20962] wg1 speed is unknown, defaulting to 1000 [ 650.473440][T20962] syz0: Port: 1 Link DOWN [ 650.504612][T11337] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.518087][T11337] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.527523][T11337] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.589561][T11337] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.608542][T21458] gtp0: entered promiscuous mode [ 650.622014][T21458] gtp0: entered allmulticast mode [ 650.684097][ T13] bond1: (slave gretap0): failed to get link speed/duplex [ 650.882361][T11337] bond1: (slave gretap0): failed to get link speed/duplex [ 650.992790][ T1175] bond1: (slave gretap0): failed to get link speed/duplex [ 651.214152][ T13] bond1: (slave gretap0): failed to get link speed/duplex [ 651.333957][T21495] siw: device registration error -23 [ 651.371816][ T1175] bond1: (slave gretap0): failed to get link speed/duplex [ 651.476973][T21502] syzkaller0: entered promiscuous mode [ 651.482482][T21502] syzkaller0: entered allmulticast mode [ 651.495075][T21502] tc action pedit offset must be on 32 bit boundaries [ 651.657209][ T13] bond1: (slave gretap0): failed to get link speed/duplex [ 651.781672][ T7120] bond1: (slave gretap0): failed to get link speed/duplex [ 651.809850][T21514] __nla_validate_parse: 12 callbacks suppressed [ 651.809867][T21514] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4040'. [ 651.842387][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 651.845300][T21524] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4040'. [ 651.881016][T21522] ªªªªªª speed is unknown, defaulting to 1000 [ 651.901959][ T1175] bond1: (slave gretap0): failed to get link speed/duplex [ 652.021254][ T7120] bond1: (slave gretap0): failed to get link speed/duplex [ 652.141441][ T7120] bond1: (slave gretap0): failed to get link speed/duplex [ 652.253988][ T7120] bond1: (slave gretap0): failed to get link speed/duplex [ 652.291665][T21550] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.359280][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.368391][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.377403][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.385801][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 652.399146][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.408124][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 652.689993][T21550] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.697626][T21550] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.233877][T21550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.288967][T21550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.602359][T21552] bond0: Unable to set down delay as MII monitoring is disabled [ 653.610268][T21522] wg1 speed is unknown, defaulting to 1000 [ 653.650800][ T7120] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.685937][ T7120] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.727363][ T7120] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.768079][ T7120] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.260337][T21608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 654.286560][T21608] gretap2: entered allmulticast mode [ 655.233424][T21653] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.752165][T21674] syz_tun: entered allmulticast mode [ 656.500738][T21719] netlink: 'syz.0.4082': attribute type 10 has an invalid length. [ 656.523462][T21719] veth0_vlan: left promiscuous mode [ 656.537006][T21719] veth0_vlan: entered promiscuous mode [ 656.545427][T21719] team0: Device veth0_vlan failed to register rx_handler [ 657.218307][T21766] __nla_validate_parse: 155 callbacks suppressed [ 657.218343][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4090'. [ 657.323180][T20330] block nbd5: NBD_DISCONNECT [ 657.341817][T20330] block nbd5: Disconnected due to user request. [ 657.354396][T20330] block nbd5: shutting down sockets [ 657.724267][T20330] udevd[20330]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 657.915017][T21798] x_tables: duplicate underflow at hook 3 [ 657.937195][T21798] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 658.006180][T21804] siw: device registration error -23 [ 658.074084][T21805] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4097'. [ 658.467066][T21808] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 658.496140][T21808] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 658.761498][T21825] IPVS: ip_vs_edit_dest(): server weight less than zero [ 659.143349][T21845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4108'. [ 659.172595][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 659.245503][T21850] netlink: 'syz.2.4110': attribute type 58 has an invalid length. [ 659.264882][T21850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4110'. [ 659.313622][T21854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4112'. [ 659.384291][T21857] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4113'. [ 659.388786][T21859] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4114'. [ 659.393911][T21857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4113'. [ 659.533890][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 659.708826][T21876] syzkaller0: entered promiscuous mode [ 659.714964][T21876] syzkaller0: entered allmulticast mode [ 660.027259][T21883] netlink: 'syz.3.4123': attribute type 2 has an invalid length. [ 660.482557][T21912] FAULT_INJECTION: forcing a failure. [ 660.482557][T21912] name failslab, interval 1, probability 0, space 0, times 0 [ 660.495193][T21912] CPU: 0 UID: 0 PID: 21912 Comm: syz.3.4133 Not tainted syzkaller #0 PREEMPT(full) [ 660.495219][T21912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.495230][T21912] Call Trace: [ 660.495238][T21912] [ 660.495245][T21912] dump_stack_lvl+0xe8/0x150 [ 660.495271][T21912] should_fail_ex+0x412/0x560 [ 660.495299][T21912] should_failslab+0xa8/0x100 [ 660.495326][T21912] __kmalloc_cache_noprof+0x88/0x660 [ 660.495351][T21912] ? ip_set_pernet+0x23/0x240 [ 660.495370][T21912] ? ip_set_create+0x391/0x1a40 [ 660.495394][T21912] ip_set_create+0x391/0x1a40 [ 660.495421][T21912] ? trace_contention_end+0x3d/0x140 [ 660.495451][T21912] ? __pfx_ip_set_create+0x10/0x10 [ 660.495515][T21912] nfnetlink_rcv_msg+0xc03/0x12c0 [ 660.495537][T21912] ? unwind_get_return_address+0x4d/0x90 [ 660.495559][T21912] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 660.495600][T21912] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.495663][T21912] netlink_rcv_skb+0x232/0x4b0 [ 660.495688][T21912] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.495711][T21912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.495746][T21912] ? bpf_lsm_capable+0x9/0x20 [ 660.495762][T21912] ? security_capable+0x7e/0x2c0 [ 660.495791][T21912] nfnetlink_rcv+0x2c0/0x27b0 [ 660.495822][T21912] ? __local_bh_enable_ip+0xd0/0x130 [ 660.495841][T21912] ? lockdep_hardirqs_on+0x7a/0x110 [ 660.495866][T21912] ? __dev_queue_xmit+0x2b6/0x3950 [ 660.495882][T21912] ? __local_bh_enable_ip+0xd0/0x130 [ 660.495899][T21912] ? __dev_queue_xmit+0x2b6/0x3950 [ 660.495916][T21912] ? __dev_queue_xmit+0x1fe5/0x3950 [ 660.495932][T21912] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.495964][T21912] ? __dev_queue_xmit+0x2b6/0x3950 [ 660.495988][T21912] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 660.496016][T21912] ? __pfx___dev_queue_xmit+0x10/0x10 [ 660.496042][T21912] ? ref_tracker_free+0x693/0x840 [ 660.496067][T21912] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.496107][T21912] ? skb_clone+0x246/0x3a0 [ 660.496126][T21912] ? __netlink_deliver_tap+0x807/0x850 [ 660.496149][T21912] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.496175][T21912] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.496197][T21912] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.496224][T21912] netlink_unicast+0x75c/0x8e0 [ 660.496257][T21912] netlink_sendmsg+0x813/0xb40 [ 660.496290][T21912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.496318][T21912] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.496342][T21912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.496368][T21912] ____sys_sendmsg+0x972/0x9f0 [ 660.496393][T21912] ? __might_fault+0xaf/0x130 [ 660.496420][T21912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.496454][T21912] ? import_iovec+0x73/0xa0 [ 660.496489][T21912] ___sys_sendmsg+0x2a5/0x360 [ 660.496515][T21912] ? __lock_acquire+0x6b5/0x2cf0 [ 660.496538][T21912] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.496598][T21912] ? __fget_files+0x2a/0x420 [ 660.496618][T21912] ? __fget_files+0x3a0/0x420 [ 660.496649][T21912] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.496678][T21912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.496713][T21912] ? __pfx_ksys_write+0x10/0x10 [ 660.496745][T21912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.496765][T21912] do_syscall_64+0x15f/0xf80 [ 660.496782][T21912] ? trace_irq_disable+0x3b/0x140 [ 660.496806][T21912] ? clear_bhb_loop+0x40/0x90 [ 660.496829][T21912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.496846][T21912] RIP: 0033:0x7fc8d659ce59 [ 660.496864][T21912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.496878][T21912] RSP: 002b:00007fc8d7418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.496897][T21912] RAX: ffffffffffffffda RBX: 00007fc8d6815fa0 RCX: 00007fc8d659ce59 [ 660.496910][T21912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 660.496920][T21912] RBP: 00007fc8d7418090 R08: 0000000000000000 R09: 0000000000000000 [ 660.496931][T21912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.496942][T21912] R13: 00007fc8d6816038 R14: 00007fc8d6815fa0 R15: 00007ffcba762cf8 [ 660.496970][T21912] [ 661.638699][T21950] netlink: 'syz.2.4141': attribute type 1 has an invalid length. [ 661.665002][T21950] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 662.274341][T21967] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 664.108865][T21920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.605030][T21999] __nla_validate_parse: 8 callbacks suppressed [ 664.605045][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 664.652351][T21999] netem: incorrect ge model size [ 664.673430][T21985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 664.682877][T21985] netem: incorrect ge model size [ 664.716270][T22011] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4154'. [ 664.873218][T22019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4156'. [ 665.315593][T22033] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4160'. [ 665.352165][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 665.425763][T22033] team0: Port device team_slave_0 removed [ 666.073541][T22074] pim6reg99999991: entered allmulticast mode [ 666.344227][T22096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4181'. [ 666.433350][T22101] netlink: 'syz.0.4184': attribute type 32 has an invalid length. [ 666.444953][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 666.461290][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4183'. [ 666.511868][T22101] bond4: option coupled_control: invalid value (110) [ 666.522736][T22101] bond4 (unregistering): Released all slaves [ 667.133557][T22131] Cannot find map_set index 2 as target [ 667.260320][T22138] netlink: 'syz.3.4196': attribute type 4 has an invalid length. [ 667.276958][T22138] netlink: 'syz.3.4196': attribute type 4 has an invalid length. [ 667.349628][T22141] bond_slave_1: Caught tx_queue_len zero misconfig [ 667.493945][T22141] netlink: 'syz.0.4197': attribute type 21 has an invalid length. [ 667.506284][T22141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4197'. [ 667.527215][T22141] netlink: 'syz.0.4197': attribute type 4 has an invalid length. [ 667.674965][T22164] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004 [ 668.127780][T22195] netlink: 'syz.1.4206': attribute type 13 has an invalid length. [ 668.166659][T22195] netlink: 'syz.1.4206': attribute type 17 has an invalid length. [ 668.189011][T22195] netlink: 'syz.1.4206': attribute type 27 has an invalid length. [ 668.206705][T22192] ªªªªªª speed is unknown, defaulting to 1000 [ 668.588639][T22192] wg1 speed is unknown, defaulting to 1000 [ 672.204717][T22279] __nla_validate_parse: 5 callbacks suppressed [ 672.204735][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 672.253936][T22279] tipc: Started in network mode [ 672.274899][T22279] tipc: Node identity ac14140f, cluster identity 4711 [ 672.297500][T22279] tipc: New replicast peer: 255.255.255.255 [ 672.309984][T22279] tipc: Enabled bearer , priority 5 [ 672.323304][T22284] bridge4: entered promiscuous mode [ 672.339035][T22284] bridge5: entered promiscuous mode [ 672.353597][T22284] bridge6: entered promiscuous mode [ 672.374355][T22284] bridge7: entered promiscuous mode [ 672.410863][T22289] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.4228'. [ 672.488534][T22284] bridge8: entered promiscuous mode [ 672.496754][T22292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.598560][T22284] bridge9: entered promiscuous mode [ 672.615997][T22284] bridge10: entered promiscuous mode [ 672.640963][T22284] bridge11: entered promiscuous mode [ 672.650071][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4231'. [ 672.690963][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4231'. [ 672.736664][T22284] bridge12: entered promiscuous mode [ 672.804402][T22284] bridge13: entered promiscuous mode [ 672.919514][T22284] bridge14: entered promiscuous mode [ 672.962875][T22284] bridge15: entered promiscuous mode [ 673.010813][T22284] bridge16: entered promiscuous mode [ 673.026789][T22284] bridge17: entered promiscuous mode [ 673.108373][T22284] bridge18: entered promiscuous mode [ 673.164452][T22284] bridge19: entered promiscuous mode [ 673.387643][ T9] tipc: Node number set to 2886997007 [ 673.431450][T22340] netlink: 'syz.2.4242': attribute type 5 has an invalid length. [ 673.532882][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4243'. [ 673.550499][T22347] netlink: 'syz.2.4244': attribute type 1 has an invalid length. [ 673.570854][T22347] bond3: entered promiscuous mode [ 673.577070][T22347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 673.615931][T22347] bond3: (slave veth5): making interface the new active one [ 673.623466][T22347] veth5: entered promiscuous mode [ 673.629928][T22347] bond3: (slave veth5): Enslaving as an active interface with an up link [ 673.678119][T22351] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4245'. [ 673.687158][T22351] netlink: 'syz.2.4245': attribute type 2 has an invalid length. [ 673.735443][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4246'. [ 673.747987][T22355] netlink: 'syz.2.4246': attribute type 2 has an invalid length. [ 674.209813][T22377] veth7: entered allmulticast mode [ 674.477065][T22379] bond5 (unregistering): Released all slaves [ 674.815963][T22416] syzkaller0: entered promiscuous mode [ 674.826315][T22416] syzkaller0: entered allmulticast mode [ 674.865408][T22420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4263'. [ 674.883155][T22420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4263'. [ 674.892199][T22420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4263'. [ 674.969386][T22425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.309901][T22432] netlink: 'syz.4.4267': attribute type 13 has an invalid length. [ 675.320169][T22432] netlink: 'syz.4.4267': attribute type 17 has an invalid length. [ 675.477644][T22432] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.494063][T22432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.560039][T22432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.584381][T22432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.599902][T22432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.618268][T22432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.646873][T22432] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 675.671054][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.678313][T11335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.698126][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.705268][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.194437][T22492] netlink: 'syz.3.4286': attribute type 3 has an invalid length. [ 676.255211][T22489] ªªªªªª speed is unknown, defaulting to 1000 [ 676.526178][T22502] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 676.605171][T22489] wg1 speed is unknown, defaulting to 1000 [ 677.293680][T22518] ªªªªªª speed is unknown, defaulting to 1000 [ 677.383973][T22538] __nla_validate_parse: 3 callbacks suppressed [ 677.383992][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 677.430464][T22538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4298'. [ 677.796451][T22518] wg1 speed is unknown, defaulting to 1000 [ 677.821489][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 678.070477][T22551] netlink: 'syz.4.4300': attribute type 3 has an invalid length. [ 678.809618][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'. [ 678.819686][T22571] IPv6: NLM_F_CREATE should be specified when creating new route [ 679.282824][T22593] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4308'. [ 679.471027][T22605] macsec1: entered promiscuous mode [ 679.476275][T22605] bridge0: entered promiscuous mode [ 679.502388][T22605] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 679.508796][T22605] syzkaller1: linktype set to 270 [ 679.515913][T22612] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 679.544563][T22610] gretap1: entered promiscuous mode [ 679.596490][T22615] xfrm1: entered allmulticast mode [ 679.617848][T22615] syzkaller0: entered promiscuous mode [ 679.623359][T22615] syzkaller0: entered allmulticast mode [ 680.230313][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 680.319458][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4329'. [ 680.344527][T22659] netlink: 'syz.3.4331': attribute type 1 has an invalid length. [ 680.354736][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4329'. [ 680.375660][T22656] netlink: 'syz.1.4329': attribute type 14 has an invalid length. [ 680.395918][T22656] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 680.418327][T22652] ªªªªªª speed is unknown, defaulting to 1000 [ 680.742091][T22652] wg1 speed is unknown, defaulting to 1000 [ 681.027807][ T50] block nbd6: Receive control failed (result -32) [ 681.027868][ T4942] block nbd6: Receive control failed (result -32) [ 681.271243][T22690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4338'. [ 681.540373][T22697] ªªªªªª speed is unknown, defaulting to 1000 [ 681.709797][T22714] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 681.721771][T22714] ipt_ECN: cannot use operation on non-tcp rule [ 681.779941][T22716] bridge0: left promiscuous mode [ 681.849251][T22697] wg1 speed is unknown, defaulting to 1000 [ 681.893476][T22722] syzkaller1: tun_chr_ioctl cmd 35108 [ 682.272166][T22730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4351'. [ 682.556404][T22737] bond5: Removing last ns target with arp_interval on [ 682.591331][T22733] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 683.136371][T22772] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 683.193799][T22778] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4365'. [ 683.516536][T22791] IPVS: Error connecting to the multicast addr [ 683.617335][T22791] IPVS: set_ctl: invalid protocol: 136 172.30.0.5:20005 [ 683.668101][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4370'. [ 683.794875][T22799] netlink: 'syz.3.4371': attribute type 2 has an invalid length. [ 684.426602][T22820] syz_tun: left allmulticast mode [ 684.730265][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4381'. [ 685.193227][T22858] netlink: 'syz.2.4387': attribute type 30 has an invalid length. [ 685.215585][T22858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4387'. [ 685.271860][T22859] bond4: entered promiscuous mode [ 685.280778][T22859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 685.406900][T22858] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 685.429359][T22858] bond4 (unregistering): Released all slaves [ 685.449748][T22876] netlink: 'syz.0.4393': attribute type 1 has an invalid length. [ 685.503234][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4393'. [ 685.551773][T22876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.676593][T22879] syzkaller1: entered promiscuous mode [ 685.683191][T22879] syzkaller1: entered allmulticast mode [ 685.764334][T22877] netlink: 'syz.0.4393': attribute type 1 has an invalid length. [ 685.886937][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.985521][T22854] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 686.002696][T22874] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.010042][T22874] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.209583][T22900] netlink: 876 bytes leftover after parsing attributes in process `syz.2.4398'. [ 686.220507][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 686.292506][T22874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.316842][T22874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.395971][T22874] bond2: left promiscuous mode [ 686.400784][T22874] team_slave_1: left promiscuous mode [ 686.406354][T22874] bond2: left allmulticast mode [ 686.411223][T22874] team_slave_1: left allmulticast mode [ 686.430908][T22874] gretap1: left promiscuous mode [ 686.444674][T22874] syzkaller1: left promiscuous mode [ 686.450186][T22874] syzkaller1: left allmulticast mode [ 686.474044][T22879] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 686.507720][T22890] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 686.518961][T22890] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 686.676351][T22906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4400'. [ 686.740137][T22908] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4399'. [ 686.800544][T22913] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4403'. [ 686.836917][T22915] netlink: 'syz.2.4404': attribute type 1 has an invalid length. [ 687.559340][T22947] bridge0: entered promiscuous mode [ 687.790902][T22957] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 688.412666][T22988] block nbd7: server does not support multiple connections per device. [ 688.445288][T22988] block nbd7: shutting down sockets [ 688.530186][T22998] openvswitch: netlink: Tunnel attr 16139 out of range max 16 [ 688.846519][T23011] __nla_validate_parse: 5 callbacks suppressed [ 688.846536][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'. [ 688.861948][T23012] netlink: 'syz.0.4431': attribute type 16 has an invalid length. [ 689.019110][T11335] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 689.044212][T23023] ªªªªªª speed is unknown, defaulting to 1000 [ 689.160221][T11337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.171226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.184299][T11337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.192524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.213546][T11335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.221860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.234965][T11335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.243179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.388062][T23023] wg1 speed is unknown, defaulting to 1000 [ 689.497744][T11328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.671428][T23040] batman_adv: batadv0: Adding interface: macvtap1 [ 689.678155][T23040] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1552 would solve the problem. [ 689.712153][T23040] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 689.736295][T23016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.221668][ T993] IPVS: starting estimator thread 0... [ 690.249069][T23054] netlink: 'syz.0.4442': attribute type 29 has an invalid length. [ 690.262439][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4442'. [ 690.274356][T23055] syzkaller1: entered promiscuous mode [ 690.282714][T23055] syzkaller1: entered allmulticast mode [ 690.318826][T23055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4441'. [ 690.341351][T23057] IPVS: using max 32 ests per chain, 76800 per kthread [ 690.541758][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 690.711826][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 690.713041][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 690.870530][T23082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 690.877871][T23082] IPv6: NLM_F_CREATE should be set when creating new route [ 690.885181][T23082] IPv6: NLM_F_CREATE should be set when creating new route [ 690.930979][T23084] netlink: 'syz.1.4451': attribute type 5 has an invalid length. [ 690.961560][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'. [ 691.061762][T23079] tipc: Failed to remove unknown binding: 66,0,0/0:2905202963/2905202965 [ 691.108824][T23079] tipc: Failed to remove unknown binding: 66,0,0/0:2905202963/2905202964 [ 691.782368][T23088] wg1: entered promiscuous mode [ 691.787540][T23088] wg1: entered allmulticast mode [ 691.854452][T23093] geneve2: entered promiscuous mode [ 691.860484][T23093] geneve2: entered allmulticast mode [ 691.873641][T12760] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.892797][T12760] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.901243][T11328] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.955894][T11328] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.985781][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'. [ 692.029610][T23112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.070975][T23113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.201853][T23128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4459'. [ 692.263215][T23130] bridge0: port 3(syz_tun) entered blocking state [ 692.276529][T23130] bridge0: port 3(syz_tun) entered disabled state [ 692.283216][T23130] syz_tun: entered allmulticast mode [ 692.294926][T23130] syz_tun: entered promiscuous mode [ 692.422800][T23134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 692.521532][ T4942] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 692.530360][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 692.541712][T23143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4464'. [ 692.988963][T23155] [ 692.991326][T23155] ====================================================== [ 692.998350][T23155] WARNING: possible circular locking dependency detected [ 693.005385][T23155] syzkaller #0 Not tainted [ 693.009804][T23155] ------------------------------------------------------ [ 693.016826][T23155] syz.3.4471/23155 is trying to acquire lock: [ 693.022890][T23155] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 693.032232][T23155] [ 693.032232][T23155] but task is already holding lock: [ 693.039613][T23155] ffff888055136e60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 693.050347][T23155] [ 693.050347][T23155] which lock already depends on the new lock. [ 693.050347][T23155] [ 693.060747][T23155] [ 693.060747][T23155] the existing dependency chain (in reverse order) is: [ 693.069771][T23155] [ 693.069771][T23155] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 693.077882][T23155] lock_sock_nested+0x41/0x100 [ 693.083173][T23155] mptcp_subflow_create_socket+0x142/0x800 [ 693.089492][T23155] __mptcp_nmpc_sk+0x155/0x790 [ 693.094775][T23155] mptcp_bind+0xab/0x1d0 [ 693.099539][T23155] __sys_bind+0x2e3/0x410 [ 693.104389][T23155] __x64_sys_bind+0x7a/0x90 [ 693.109409][T23155] do_syscall_64+0x15f/0xf80 [ 693.114510][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.120914][T23155] [ 693.120914][T23155] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 693.128640][T23155] lock_sock_nested+0x41/0x100 [ 693.133921][T23155] inet_shutdown+0x6a/0x390 [ 693.138938][T23155] nbd_mark_nsock_dead+0x2e9/0x560 [ 693.144564][T23155] sock_shutdown+0x15e/0x260 [ 693.149672][T23155] nbd_clear_sock+0x24/0x170 [ 693.154776][T23155] nbd_config_put+0x2dd/0x580 [ 693.159963][T23155] nbd_genl_connect+0x19d5/0x1cf0 [ 693.165504][T23155] genl_family_rcv_msg_doit+0x22a/0x330 [ 693.171571][T23155] genl_rcv_msg+0x61c/0x7a0 [ 693.176586][T23155] netlink_rcv_skb+0x232/0x4b0 [ 693.181869][T23155] genl_rcv+0x28/0x40 [ 693.186362][T23155] netlink_unicast+0x75c/0x8e0 [ 693.191645][T23155] netlink_sendmsg+0x813/0xb40 [ 693.196940][T23155] ____sys_sendmsg+0x972/0x9f0 [ 693.202239][T23155] ___sys_sendmsg+0x2a5/0x360 [ 693.207444][T23155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.212910][T23155] do_syscall_64+0x15f/0xf80 [ 693.218026][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.224439][T23155] [ 693.224439][T23155] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 693.232092][T23155] __mutex_lock+0x1a3/0x1550 [ 693.237206][T23155] nbd_queue_rq+0x37b/0x1100 [ 693.242314][T23155] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 693.248385][T23155] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 693.255235][T23155] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 693.261736][T23155] blk_mq_run_hw_queue+0x348/0x4f0 [ 693.267368][T23155] blk_mq_dispatch_list+0xd16/0xe10 [ 693.273085][T23155] blk_mq_flush_plug_list+0x48d/0x570 [ 693.278979][T23155] __blk_flush_plug+0x3ed/0x4d0 [ 693.284355][T23155] __submit_bio+0x28d/0x580 [ 693.289372][T23155] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 693.295533][T23155] block_read_full_folio+0x599/0x830 [ 693.301336][T23155] filemap_read_folio+0x137/0x3b0 [ 693.306885][T23155] do_read_cache_folio+0x358/0x590 [ 693.312517][T23155] read_part_sector+0xb6/0x2b0 [ 693.317811][T23155] adfspart_check_ICS+0xb1/0x960 [ 693.323285][T23155] bdev_disk_changed+0x817/0x1770 [ 693.328844][T23155] blkdev_get_whole+0x380/0x510 [ 693.334223][T23155] bdev_open+0x31e/0xd30 [ 693.339086][T23155] blkdev_open+0x470/0x610 [ 693.344027][T23155] do_dentry_open+0x785/0x14e0 [ 693.349313][T23155] vfs_open+0x3b/0x340 [ 693.353903][T23155] path_openat+0x2e08/0x3860 [ 693.359015][T23155] do_file_open+0x23e/0x4a0 [ 693.364042][T23155] do_sys_openat2+0x113/0x200 [ 693.369240][T23155] __x64_sys_openat+0x138/0x170 [ 693.374618][T23155] do_syscall_64+0x15f/0xf80 [ 693.379728][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.386137][T23155] [ 693.386137][T23155] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 693.393353][T23155] __mutex_lock+0x1a3/0x1550 [ 693.398463][T23155] nbd_queue_rq+0xc6/0x1100 [ 693.403482][T23155] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 693.409547][T23155] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 693.416404][T23155] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 693.422905][T23155] blk_mq_run_hw_queue+0x348/0x4f0 [ 693.428535][T23155] blk_mq_dispatch_list+0xd16/0xe10 [ 693.434255][T23155] blk_mq_flush_plug_list+0x48d/0x570 [ 693.440147][T23155] __blk_flush_plug+0x3ed/0x4d0 [ 693.445548][T23155] __submit_bio+0x28d/0x580 [ 693.450579][T23155] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 693.456753][T23155] block_read_full_folio+0x599/0x830 [ 693.462567][T23155] filemap_read_folio+0x137/0x3b0 [ 693.468119][T23155] do_read_cache_folio+0x358/0x590 [ 693.473753][T23155] read_part_sector+0xb6/0x2b0 [ 693.479046][T23155] adfspart_check_ICS+0xb1/0x960 [ 693.484503][T23155] bdev_disk_changed+0x817/0x1770 [ 693.490048][T23155] blkdev_get_whole+0x380/0x510 [ 693.495422][T23155] bdev_open+0x31e/0xd30 [ 693.500188][T23155] blkdev_open+0x470/0x610 [ 693.505118][T23155] do_dentry_open+0x785/0x14e0 [ 693.510398][T23155] vfs_open+0x3b/0x340 [ 693.514981][T23155] path_openat+0x2e08/0x3860 [ 693.520090][T23155] do_file_open+0x23e/0x4a0 [ 693.525109][T23155] do_sys_openat2+0x113/0x200 [ 693.530300][T23155] __x64_sys_openat+0x138/0x170 [ 693.535662][T23155] do_syscall_64+0x15f/0xf80 [ 693.540773][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.547181][T23155] [ 693.547181][T23155] -> #3 (set->srcu){.+.+}-{0:0}: [ 693.554305][T23155] __synchronize_srcu+0xca/0x300 [ 693.559754][T23155] elevator_switch+0x1e8/0x7a0 [ 693.565039][T23155] elevator_change+0x2cc/0x450 [ 693.570322][T23155] elevator_set_default+0x36c/0x430 [ 693.576040][T23155] blk_register_queue+0x3e9/0x4e0 [ 693.581578][T23155] __add_disk+0x677/0xd50 [ 693.586423][T23155] add_disk_fwnode+0xfb/0x480 [ 693.591614][T23155] nbd_dev_add+0x72c/0xb50 [ 693.596548][T23155] nbd_init+0x168/0x1f0 [ 693.601219][T23155] do_one_initcall+0x250/0x870 [ 693.606495][T23155] do_initcall_level+0x104/0x190 [ 693.611950][T23155] do_initcalls+0x59/0xa0 [ 693.616803][T23155] kernel_init_freeable+0x2a6/0x3e0 [ 693.622522][T23155] kernel_init+0x1d/0x1d0 [ 693.627367][T23155] ret_from_fork+0x514/0xb70 [ 693.632466][T23155] ret_from_fork_asm+0x1a/0x30 [ 693.637744][T23155] [ 693.637744][T23155] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 693.645566][T23155] __mutex_lock+0x1a3/0x1550 [ 693.650673][T23155] elevator_change+0x1b3/0x450 [ 693.655954][T23155] elevator_set_none+0xb5/0x140 [ 693.661329][T23155] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 693.667648][T23155] nbd_start_device+0x17f/0xb10 [ 693.673007][T23155] nbd_genl_connect+0x165b/0x1cf0 [ 693.678542][T23155] genl_family_rcv_msg_doit+0x22a/0x330 [ 693.684610][T23155] genl_rcv_msg+0x61c/0x7a0 [ 693.689623][T23155] netlink_rcv_skb+0x232/0x4b0 [ 693.694906][T23155] genl_rcv+0x28/0x40 [ 693.699398][T23155] netlink_unicast+0x75c/0x8e0 [ 693.704675][T23155] netlink_sendmsg+0x813/0xb40 [ 693.709959][T23155] ____sys_sendmsg+0x972/0x9f0 [ 693.715239][T23155] ___sys_sendmsg+0x2a5/0x360 [ 693.720434][T23155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.725896][T23155] do_syscall_64+0x15f/0xf80 [ 693.731000][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.737407][T23155] [ 693.737407][T23155] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 693.746009][T23155] blk_alloc_queue+0x546/0x680 [ 693.751292][T23155] __blk_mq_alloc_disk+0x197/0x390 [ 693.756921][T23155] nbd_dev_add+0x499/0xb50 [ 693.761846][T23155] nbd_init+0x168/0x1f0 [ 693.766513][T23155] do_one_initcall+0x250/0x870 [ 693.771795][T23155] do_initcall_level+0x104/0x190 [ 693.777269][T23155] do_initcalls+0x59/0xa0 [ 693.782132][T23155] kernel_init_freeable+0x2a6/0x3e0 [ 693.787849][T23155] kernel_init+0x1d/0x1d0 [ 693.792691][T23155] ret_from_fork+0x514/0xb70 [ 693.797789][T23155] ret_from_fork_asm+0x1a/0x30 [ 693.803071][T23155] [ 693.803071][T23155] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 693.810279][T23155] __lock_acquire+0x15a5/0x2cf0 [ 693.815646][T23155] lock_acquire+0x106/0x350 [ 693.820659][T23155] fs_reclaim_acquire+0x71/0x100 [ 693.826117][T23155] __kmalloc_cache_noprof+0x40/0x660 [ 693.831922][T23155] ref_tracker_alloc+0x15a/0x4c0 [ 693.837374][T23155] get_net_track+0x16e/0x230 [ 693.842483][T23155] sk_net_refcnt_upgrade+0xb2/0x130 [ 693.848202][T23155] mptcp_subflow_create_socket+0x32b/0x800 [ 693.854526][T23155] __mptcp_nmpc_sk+0x155/0x790 [ 693.859801][T23155] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 693.866044][T23155] genl_family_rcv_msg_doit+0x22a/0x330 [ 693.872103][T23155] genl_rcv_msg+0x61c/0x7a0 [ 693.877120][T23155] netlink_rcv_skb+0x232/0x4b0 [ 693.882401][T23155] genl_rcv+0x28/0x40 [ 693.886895][T23155] netlink_unicast+0x75c/0x8e0 [ 693.892176][T23155] netlink_sendmsg+0x813/0xb40 [ 693.897484][T23155] ____sys_sendmsg+0x972/0x9f0 [ 693.902767][T23155] ___sys_sendmsg+0x2a5/0x360 [ 693.907959][T23155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.913417][T23155] do_syscall_64+0x15f/0xf80 [ 693.918526][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.924936][T23155] [ 693.924936][T23155] other info that might help us debug this: [ 693.924936][T23155] [ 693.935154][T23155] Chain exists of: [ 693.935154][T23155] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 693.935154][T23155] [ 693.948280][T23155] Possible unsafe locking scenario: [ 693.948280][T23155] [ 693.955712][T23155] CPU0 CPU1 [ 693.961064][T23155] ---- ---- [ 693.966415][T23155] lock(k-sk_lock-AF_INET6/1); [ 693.971262][T23155] lock(sk_lock-AF_INET6); [ 693.978271][T23155] lock(k-sk_lock-AF_INET6/1); [ 693.985649][T23155] lock(fs_reclaim); [ 693.989623][T23155] [ 693.989623][T23155] *** DEADLOCK *** [ 693.989623][T23155] [ 693.997757][T23155] 4 locks held by syz.3.4471/23155: [ 694.002941][T23155] #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 694.011123][T23155] #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 694.020084][T23155] #2: ffff888028b10260 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 694.030874][T23155] #3: ffff888055136e60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 694.042012][T23155] [ 694.042012][T23155] stack backtrace: [ 694.047890][T23155] CPU: 1 UID: 0 PID: 23155 Comm: syz.3.4471 Not tainted syzkaller #0 PREEMPT(full) [ 694.047909][T23155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.047920][T23155] Call Trace: [ 694.047928][T23155] [ 694.047934][T23155] dump_stack_lvl+0xe8/0x150 [ 694.047956][T23155] print_circular_bug+0x2e1/0x300 [ 694.047981][T23155] check_noncircular+0x12e/0x150 [ 694.048006][T23155] __lock_acquire+0x15a5/0x2cf0 [ 694.048026][T23155] ? check_noncircular+0xda/0x150 [ 694.048049][T23155] ? lockdep_unlock+0x5d/0xd0 [ 694.048065][T23155] ? __lock_acquire+0x146e/0x2cf0 [ 694.048085][T23155] ? __kmalloc_cache_noprof+0x40/0x660 [ 694.048108][T23155] lock_acquire+0x106/0x350 [ 694.048126][T23155] ? __kmalloc_cache_noprof+0x40/0x660 [ 694.048155][T23155] fs_reclaim_acquire+0x71/0x100 [ 694.048177][T23155] ? __kmalloc_cache_noprof+0x40/0x660 [ 694.048201][T23155] __kmalloc_cache_noprof+0x40/0x660 [ 694.048225][T23155] ? ref_tracker_alloc+0x15a/0x4c0 [ 694.048246][T23155] ? rcu_is_watching+0x15/0xb0 [ 694.048267][T23155] ref_tracker_alloc+0x15a/0x4c0 [ 694.048292][T23155] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 694.048314][T23155] ? ref_tracker_free+0x522/0x840 [ 694.048336][T23155] ? __pfx_ref_tracker_free+0x10/0x10 [ 694.048359][T23155] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 694.048386][T23155] ? mptcp_subflow_create_socket+0x32b/0x800 [ 694.048404][T23155] ? __mptcp_nmpc_sk+0x155/0x790 [ 694.048423][T23155] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 694.048449][T23155] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 694.048469][T23155] ? net_passive_dec+0x177/0x250 [ 694.048491][T23155] ? __pfx_net_passive_dec+0x10/0x10 [ 694.048514][T23155] get_net_track+0x16e/0x230 [ 694.048538][T23155] sk_net_refcnt_upgrade+0xb2/0x130 [ 694.048565][T23155] mptcp_subflow_create_socket+0x32b/0x800 [ 694.048585][T23155] ? irqentry_exit+0x218/0x730 [ 694.048601][T23155] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 694.048623][T23155] ? do_raw_spin_lock+0x12b/0x2f0 [ 694.048649][T23155] __mptcp_nmpc_sk+0x155/0x790 [ 694.048667][T23155] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 694.048686][T23155] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 694.048712][T23155] ? __local_bh_enable_ip+0xd0/0x130 [ 694.048731][T23155] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 694.048767][T23155] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 694.048805][T23155] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 694.048825][T23155] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 694.048849][T23155] genl_family_rcv_msg_doit+0x22a/0x330 [ 694.048867][T23155] ? __asan_memcpy+0x40/0x70 [ 694.048889][T23155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 694.048914][T23155] ? bpf_lsm_capable+0x9/0x20 [ 694.048930][T23155] ? security_capable+0x7e/0x2c0 [ 694.048953][T23155] genl_rcv_msg+0x61c/0x7a0 [ 694.048975][T23155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.048992][T23155] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 694.049017][T23155] ? __pfx_ref_tracker_free+0x10/0x10 [ 694.049045][T23155] netlink_rcv_skb+0x232/0x4b0 [ 694.049068][T23155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.049087][T23155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 694.049117][T23155] ? down_read+0x270/0x2e0 [ 694.049134][T23155] ? genl_rcv+0xd/0x40 [ 694.049151][T23155] genl_rcv+0x28/0x40 [ 694.049167][T23155] netlink_unicast+0x75c/0x8e0 [ 694.049192][T23155] netlink_sendmsg+0x813/0xb40 [ 694.049220][T23155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.049246][T23155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.049269][T23155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.049292][T23155] ____sys_sendmsg+0x972/0x9f0 [ 694.049317][T23155] ? __might_fault+0xaf/0x130 [ 694.049341][T23155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.049369][T23155] ? import_iovec+0x73/0xa0 [ 694.049394][T23155] ___sys_sendmsg+0x2a5/0x360 [ 694.049418][T23155] ? __lock_acquire+0x6b5/0x2cf0 [ 694.049438][T23155] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.049466][T23155] ? futex_wait+0x2a2/0x390 [ 694.049499][T23155] ? __fget_files+0x2a/0x420 [ 694.049518][T23155] ? __fget_files+0x3a0/0x420 [ 694.049542][T23155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.049568][T23155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.049597][T23155] ? rcu_is_watching+0x15/0xb0 [ 694.049619][T23155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.049638][T23155] do_syscall_64+0x15f/0xf80 [ 694.049652][T23155] ? trace_irq_disable+0x3b/0x140 [ 694.049677][T23155] ? clear_bhb_loop+0x40/0x90 [ 694.049698][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.049713][T23155] RIP: 0033:0x7fc8d659ce59 [ 694.049730][T23155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.049750][T23155] RSP: 002b:00007fc8d7418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.049770][T23155] RAX: ffffffffffffffda RBX: 00007fc8d6815fa0 RCX: 00007fc8d659ce59 [ 694.049782][T23155] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 694.049795][T23155] RBP: 00007fc8d6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 694.049805][T23155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.049815][T23155] R13: 00007fc8d6816038 R14: 00007fc8d6815fa0 R15: 00007ffcba762cf8 [ 694.049835][T23155] [ 694.626388][T23165] __nla_validate_parse: 1 callbacks suppressed [ 694.626406][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'. [ 694.728145][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4475'.