last executing test programs: 2.373670679s ago: executing program 0 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000080)="f6eb09454648deb6ddcf632c44815a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="57010000000000000000000000000800080000000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="82e4f0b294bfad83657d341ef6dd2845f47b0dc38721ea910fb6af657f20904fb79b19ac8ef7dc90871355e70973def5394eaf7f19149776bf27d95d6e9150f6fbef6b296770507ade428aa8e62c1df03533fcbc7d4a1c7928c2005e0992e9a007204608365eff4bcec72e287cede3b5eac3d317b9e4d47dfe954b0733ca2c24658981426b9c62f9b83ddefec72f465290e6e20a94541a08abefa7b0bc1b3db6f0ecc6ce58f3092c7c1afaf322d15beb5dde6cd592ead1c260e818e9cafd848b6264e20edb743b7a09f15d010000000000000008dca3b9c838c18028b3ac82a149"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="33042abd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00030002edffffff000000080005007f0062745e8ba71f", @ANYRES32, @ANYBLOB="14000c0020010000000000000000000000000001"], 0x4c}}, 0x8800) 2.345905784s ago: executing program 3 (id=2612): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='!\x00', 0x410742, &(0x7f0000000080)={@_ha_fsid={[0x3, 0xaa22]}, {0x8001, 0x8, 0x4, 0x10}}, 0x10000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x6}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c5000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.103324397s ago: executing program 3 (id=2614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000810) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYBLOB="020025bd7000fcdbdf250700000008000300030000004800068014000400fc010000000000000000000000000001060005004e220000060005004e200000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e22000006000100d22a00000800020000000c000900080002000300000008000400080000004c000680c8046c05000200400000000600010002000000050002000100000005000200f900000014000400fc0200000000000000000000000000011400040000000000000000000000ffffff00"/132], 0xd8}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 1.879022756s ago: executing program 1 (id=2618): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x4, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.82206722s ago: executing program 0 (id=2619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'ip6erspan0\x00', 0x2000}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.801150559s ago: executing program 3 (id=2620): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0x400}]}, &(0x7f0000000240)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0x400}]}, &(0x7f0000000240)=0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) 1.622223037s ago: executing program 2 (id=2622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1.534183521s ago: executing program 1 (id=2623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xc4}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$kcm(0x29, 0x8, 0x0) recvmsg$kcm(r3, &(0x7f0000002540)={&(0x7f0000000400)=@x25, 0x80, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/225, 0xe1}], 0x2, &(0x7f0000002440)=""/211, 0xd3}, 0x2) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x5411, &(0x7f0000000100)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0xb, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="9b0f2abd7000ffdbdf25010000000400028004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@deltaction={0x0, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB]}, 0x55}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0xffffffffffffff9e, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x7, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x3c}}, 0x80) (rerun: 32) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2], 0x1c) (async) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x257) 1.522805147s ago: executing program 0 (id=2624): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 1.405746416s ago: executing program 2 (id=2625): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/135, &(0x7f00000001c0)=0x87) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e4, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x86a5}, {0x6, 0x11, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x194}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, r3, 0xe00, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "28d76da4e995a9c65f29cbaab41c58378b85b60efe3474c9a92c3a4c884030f0ed"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "5b8ccd74beba5d450382921d95e66f5f831654c023aef8e915e36343d8c165e5c4eb8889c65db90a2c5b6790ba886b0940302749772f515660717ffbbb1268eeb6e894beb0cef8468de356d74673edd6b95221ec2fceeef2c1af25a6897059b3d429b32ddc03b5e674c55e6a4d91b87552813b9fbd2cd92efcbd89647842de5d3c166f2b4dfbfd3c38b2c1d1157b5523d7060d33afb5f002d68e5c16f92d62487f14de8f0e0e02c5227d76182a22148bc8dd01af9f2e73796e50d3adeeb615506ef7b4cd73ea9060fffcef993fefc608fc91eee1bfab9cea017a4e8905aed2d25f8360b08cbe782cdfe841223737"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "71f5b726f9e70216e255faf085b2c6282f6f587f6be0782d05"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000d5) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000800)) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x8400}, 0x4040800) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0xffff, 0x6, 0x201, 0xfffffff8, 0x8, 0x9, 0x3, 0x985a, 0x0}, &(0x7f0000000ac0)=0x20) (async, rerun: 32) r6 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000b00)) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1a0, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x514e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x649}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4008000}, 0x80941) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000f40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/61, 0x3d, 0x0, &(0x7f0000000e40)=""/193, 0xc1}, &(0x7f0000000f80)=0x40) (async) write(0xffffffffffffffff, &(0x7f0000000fc0)="da1ee8fe3721eff99d6a9c3dde2868c2042ec0", 0x13) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001040), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001100)={&(0x7f0000001000), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x91) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001140)=[@sack_perm, @sack_perm], 0x2) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001180)=@assoc_id=r5, &(0x7f00000011c0)=0x4) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f0000001200)) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001340)={'syztnl1\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x11, 0x7800, 0x5, 0xf, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x24, 0xc5, 0x0, 0x4, [0x8f7, 0x7, 0x10, 0x83f4, 0x1, 0x5, 0x401, 0x8]}, @generic={0x8d, 0xa, "84d5c8b266475234"}, @noop, @rr={0x7, 0x7, 0xc9, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@multicast2, 0x9}, {@rand_addr=0x64010102, 0x1ff}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x9}, {@loopback, 0x41d9}]}, @end]}}}}}) r12 = socket(0x28, 0x4, 0x28000000) bind$xdp(r10, &(0x7f0000001380)={0x2c, 0xa, r11, 0x11, r12}, 0x10) (async) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000013c0)={0x2261, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @remote}}}, 0x108) 1.220107893s ago: executing program 0 (id=2627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) (async, rerun: 32) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) (async) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast2}, &(0x7f0000000040)=0x8) (async) socketpair(0x2a, 0x2, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)="fc63e48195b08a3d141f9a30b7a92886161a64808f1692b7b6f336c62fb94b58bed07eef63ac1dc97ea0ee8d87f98f989c0a1384238336228aed9985801005a9efea5afc2970b5847aa49495fa43d1", 0x4f}], 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3ff}) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 1.219699693s ago: executing program 3 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x67}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8, 0x1, 0x80, 0xff, 0x3, 0x6]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0xc787a5e888e96c0e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b70400008000000085000000aa00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.116481853s ago: executing program 2 (id=2629): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x51, 0xfe, 0xfff, 0x44, @local, @mcast2, 0x8000, 0x8, 0x6, 0x800}}) 1.050668432s ago: executing program 4 (id=2630): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="0215000000000000050200000aa5263227e88bfc1c51f41e2eae93ae821466a35757c14ec51e227a30aa71be1af982399079b6c1864e3bbc34bf124351447cb273ad0e7c2d9355531f36e73b697d4538d1b7a13e4ffc0493925f7e33b7e6d7dab612b2ba99a00ff6f666cd8287ab6c71064b78787c8cbbff71c2f58a9193df37a7d55f794858f5a8cb11fe1f9698f35ae97e6eba474bbc4f53b33de82032ef22eab457b321a7e444ec1b4e018c729f64d0b3caddc388ed41"], 0xb8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x81b21000) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x2}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r12, &(0x7f0000000240)={@void, @val={0x6, 0x0, 0x6488, 0x8, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xc}]}}}}, 0x22) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 1.041912937s ago: executing program 3 (id=2631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x23, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000008c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8247912a473773c109d0bc7aa2a396b232ee01dcf5e01c7969575dd31fd01d07cd9cd44ca6d6ccf4818766bee39333151b9ada1f74abad7dd1eb3fe57b220714d6d147ef234e2805ec0582f74876b46d18290dd0577b30624431ed20b0b103174498ffeb19857ecf601d40fbe75a1f3c57d592d6fbb35743cab9c876ebd1665e543cf0", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000900)={0x0, 0x1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.016941384s ago: executing program 2 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2034, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"/4096}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2034}}, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r8, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e24, 0xfffff001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd6}}}, &(0x7f0000000240)=0x84) 935.534314ms ago: executing program 4 (id=2633): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 814.724724ms ago: executing program 4 (id=2634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @local}, &(0x7f0000000380)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x2, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x360, 0x7, 0xc82a, 0xe, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x10e8, 0x5, 0x3, 0xa}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1bebacd0}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff80}}, @generic={0x40, 0x9, 0x9, 0x8, 0xe7}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x44, &(0x7f00000002c0)=""/68, 0x40f00, 0x2c, '\x00', r1, @fallback=0xb, r2, 0x8, &(0x7f00000003c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x6, 0x6}, 0x10, r3, r4, 0x6, &(0x7f0000000640)=[r0, r0, r6, r7, r0, r8], &(0x7f0000000680)=[{0x1, 0x2, 0x4, 0x1}, {0x4, 0x2, 0xe, 0xb}, {0x2, 0x5, 0xa, 0x4}, {0x3, 0x1, 0x5, 0x3}, {0x1, 0x4, 0xb}, {0x4, 0x1, 0x9}], 0x10, 0xc19a}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 747.673094ms ago: executing program 1 (id=2635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 746.811013ms ago: executing program 4 (id=2636): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x20044840) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) r8 = socket$inet6(0xa, 0x8, 0x800) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = syz_open_procfs$namespace(r12, &(0x7f0000001780)='ns/ipc\x00') r16 = getpid() sendmmsg$unix(r11, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r16, r13}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x18, 0x19, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x41, 0x0, 0x0, @fd}]}, 0x18}, {&(0x7f0000000100)={0x18, 0x1d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="939ed05254"]}, 0x18}], 0x2, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [r4, r5, r6, r0, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r14}}}], 0x48, 0x4000000}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r17, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r17, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 670.517794ms ago: executing program 2 (id=2637): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x122) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 666.079305ms ago: executing program 1 (id=2638): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0xfe, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_lifetime={0x4, 0x3, 0x9675, 0x6, 0x4, 0xffffffffffffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x78}, 0x1, 0x7}, 0x0) 550.703655ms ago: executing program 1 (id=2639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xa, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x6, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r6, 0x29, 0x17, 0x0, &(0x7f0000000540)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0)="57f343f43038e38420b8ac5ff649303b645f6e2a6eb254b8f177e1b4547e0a00a5cab6d9840adef0fb17cef9339b4a46b7b18bf073a6c1d3d76fe35c82d40afc421e1b858e313427ae3053623fe932baf3242007d7cdb8f7935dc0c7fb98c2743feaa9e953dbade2e34b54e3fa", &(0x7f0000000240)=@udp6=r6, 0x2}, 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r0, 0x4, r1}, 0x10) 497.124919ms ago: executing program 2 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000ec080018000cac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r2 = socket$inet(0x2, 0xa, 0xfffff7fd) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES8, @ANYRESOCT=r4, @ANYRES32=r6], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$phonet(0x23, 0x2, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="d5e45d692d9566144781c00e680078ab2a4f4de21dbe780ac9ea37ffb1f556e090c5c07a16f96674a331e79e9a738e432bc35080aa3bfad9dc5921bb5d2d51cf2c876e3642d5151197fa2633570655b707b44a545f9a9e228c8fbe768c06ec35bd675af4ae76b23863a66cb47584b0dca82cdb8c42"], 0x28}}, 0x0) ioctl$SIOCPNDELRESOURCE(r8, 0x89ee, &(0x7f0000000300)=0x9) (async) close(0x4) 434.358615ms ago: executing program 1 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair(0xa, 0xa, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x35}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) (async) r10 = gettid() (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f00000004c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x170, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0x170}}, 0x8040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x37, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000e00000095000000fb51a2a4ebce0b2384c9baea449788100000000095000000000000008500000025000000181b0000", @ANYRES32, @ANYBLOB="000000000000000018380000030000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000001855"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) 238.722386ms ago: executing program 4 (id=2642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a", @ANYRESOCT=r0], 0x70}}, 0x20000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 238.378892ms ago: executing program 0 (id=2643): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x600000, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', r2}, 0x50) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="24200400858d00002c0012800e00010069703665727370616e000000180002800500160002000000060018000100000004001200"], 0x4c}}, 0x0) 56.804188ms ago: executing program 3 (id=2644): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004900000095000000000000004dd90abee6d40aeae03868e3e455a41e85d7b094c58586700988fd470a80a0e2449b82e96a95564fe0dbe0bc7ca6a783fe2d44ac274f0fb8994f79a9cc3c547f99dca5fb70d107492692c0ec3df87abd3ee5bc62416bb6bba0a8a3ea0476024b50f86c110da6cbae7f8e0ffa7565cf9165eeede9bc577f06ce"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = accept(r0, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000140)={0x7, 0x0, 0x8000, 0xa585, 0x19ce5f67}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0xfffffffe}}, 0x10) bind$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@local, @private2, @mcast1, 0x7fff, 0x2, 0x2, 0x500, 0x4, 0x400000, r3}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 11.754556ms ago: executing program 4 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000980)={{r1, &(0x7f0000000000)='-\x00', 0x2040, &(0x7f0000000080)={@align, {0xfff, 0x8, 0x3, 0x1}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x923}, 0x6, &(0x7f00000008c0)=[{0x2, 0x1, &(0x7f0000000140)='*{\x00', &(0x7f0000000180)="b22c176988347a54eab18b1fa6a4386f611d86df7e4d11a596210196c1a2bfe1b951c881aa535bb3cc78b620a227986d3f17dd9e93631e731da9f02fe813f61016f281d8d8de8c5d9291145d16a95230bf16bddaa33b877971e37b3134721f5d4685f51192272d4787ea27c9e79a023fb1598be11bb038f7d7c19c9bafa26ca31fcc544e2fa18fce01ada58f6fffe99b87a120b6a0e23b0d43a3e55376790a0d7c8f8f1bd2ed6ccdede9b4c56019ccfd6af3f906c064efc6a928eabfabcc3d482f7a831baca1bd20fcade9a08fca3395315010c9147a48", 0xd7, 0x38}, {0x1, 0x7, &(0x7f00000003c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000440)="39e541b123d017ead192278afcb67c9d6d1daf12b3fd47df236348624ed27bfca25af79061092f340d1d0863710f2f0f300023a14eea4838de7d37315cd67fd8e2e39160c1ccb574138c7f1669a1d2f3b347243bf9d4688e4f4290f5674f", 0x5e}, {0x1, 0x2, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="3baf5caf7299f08ee82cd11cd517dbe5ea90946b9f4eacff6c678d138ac3d9fcf25a9a", 0x23, 0x8}, {0x3, 0x3a78, &(0x7f0000000540)='-^\x00', &(0x7f0000000580)="b8ccc83bdf298f4bf142724c66da4c8890c9e0fd5912736cd987cd9be63a9103e1b6775597d0ecc716bf", 0x2a, 0x2}, {0x1, 0xf, &(0x7f00000005c0)='\x00', &(0x7f00000006c0)="ceb56afb77860f644b7dc619392a6debf55b87bbcaea9541f9daeb31db62d1561783c6f0c19f3b84849a41f0699341acf72a8f67bfc005d0eabdca638eb6f26cfa27b20ea6bf3a16e374a70695a2d6afeb82218ac526e52106f888bfb5e9bdc619eaed61e0964eb2c5390248c562f4cdbbc97cde084ad926f4bd0cd0d7aed21c1e8ea971d7fee234e71395b2f4714d55f2d17330b131a70e8a6e9d998539464360e3556e4e2705d5cc2a67626c6011ceb736b0cc0d6e6139eb30974bb45278aef85e5f63272b4925eeab29c4f7d4306d4298a6e9003a5b3c6f144002d49a79ad6236af59b17bff99c4cdf8bba27dd3dd1252a07d6619c23a", 0xf8, 0x2a}, {0x1, 0x10000, &(0x7f00000007c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000800)="0b5162a8a4142ff68af39a023bce947809ff528e7d6e1c4cf722dd0fc23ac3e81e463e192e973851e342a0f1cb66e81deeceff773cbb054cb128763dc2ef7fe6327fa4df6ec6c4be2cae2289438f87cd7a08c9ac8098d9a6e51beb985823c4c1257170f641bcbc6890aedf3fe7451d72681cd8a421af0be362b384eb36cc39551fa8350ab10b185a5db0f22e527f11a37c8655cc4a8fb90eecb13f33c0", 0x9d}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@deltclass={0x5c, 0x29, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x7, 0xf}, {0xf, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x2}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x20, 0x9}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x20048050) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000b40)=ANY=[@ANYBLOB="010001000009000000014db2b4d8c8a6fa06302e35c291838fa1321579bdee7f919b4aed63ff879014633484a4af3b2356c07698a5e475bb66b8f0219853c87316bd4dfc23b1520b3b65793a96e7af20755e34a88fc7a31f31d6cbeed53d8ae91355bfcbd0984c7a856949c9da2fe7af48e2c8eff3742946e7458fd0a24c0ecce63795652bb3691a72c15a6b490ebaf8f840171f60b58c363c5e5dff9d6d4f82662eada85dcbc403edb6a11c00"/186]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 0s ago: executing program 0 (id=2646): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @alu={0x7, 0x1, 0x6, 0x2, 0x6, 0x4}, @generic={0x1, 0xa, 0x5, 0x7e, 0xfff}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc6c69ad1}}]}, &(0x7f00000000c0)='GPL\x00', 0x7f, 0x39, &(0x7f0000000100)=""/57, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x0, 0x3, 0x9a03}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r4, r5, r7, r8], &(0x7f0000000380)=[{0x5, 0x1, 0x2, 0x4}, {0x2, 0x1, 0x0, 0xa}], 0x10, 0xd2f}, 0x94) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x2) kernel console output (not intermixed with test programs): 47.103898][ T8356] _copy_from_user+0x2d/0xb0 [ 147.103921][ T8356] __copy_msghdr+0x390/0x590 [ 147.103949][ T8356] ___sys_sendmsg+0x213/0x360 [ 147.103971][ T8356] ? __lock_acquire+0x6df/0x2e50 [ 147.103997][ T8356] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.104056][ T8356] ? __fget_files+0x2a/0x420 [ 147.104082][ T8356] ? __fget_files+0x3a2/0x420 [ 147.104119][ T8356] __x64_sys_sendmsg+0x1b1/0x290 [ 147.104144][ T8356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.104188][ T8356] do_syscall_64+0x166/0x520 [ 147.104217][ T8356] ? trace_irq_disable+0x3b/0x140 [ 147.104236][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.104256][ T8356] ? clear_bhb_loop+0x70/0xc0 [ 147.104281][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.104301][ T8356] RIP: 0033:0x7f11a5f9e159 [ 147.104329][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.104346][ T8356] RSP: 002b:00007f11a6e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.104369][ T8356] RAX: ffffffffffffffda RBX: 00007f11a6225fa0 RCX: 00007f11a5f9e159 [ 147.104384][ T8356] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 147.104397][ T8356] RBP: 00007f11a6e46090 R08: 0000000000000000 R09: 0000000000000000 [ 147.104410][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.104423][ T8356] R13: 00007f11a6226038 R14: 00007f11a6225fa0 R15: 00007ffd48c9bdf8 [ 147.104453][ T8356] [ 147.813564][ T8388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 147.914706][ T8394] x_tables: duplicate underflow at hook 3 [ 148.177037][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 148.338845][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.366951][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.399505][ T8423] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 148.421017][ T8423] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 148.430428][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.431529][ T5991] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.431563][ T5991] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.431593][ T5991] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.986915][ T1151] bond0: (slave erspan1): interface is now down [ 148.994252][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 149.007711][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.014628][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.277876][ T8473] ip_tables: iptables: counters copy to user failed while replacing table [ 149.372448][ T8475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.372500][ T8479] xt_l2tp: v2 doesn't support IP mode [ 149.418166][ T8475] netlink: 44 bytes leftover after parsing attributes in process `syz.1.684'. [ 149.421632][ T8475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.684'. [ 149.452642][ T8475] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 149.452684][ T8475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.684'. [ 149.458830][ T8475] .`: renamed from bond0 [ 149.780333][ T8499] gretap0: mtu less than device minimum [ 150.160626][ T8509] pimreg: entered allmulticast mode [ 150.277803][ T8520] netlink: 4732 bytes leftover after parsing attributes in process `syz.2.697'. [ 150.326512][ T8515] netlink: Failed to add batadv0 helper -22 [ 150.326593][ T8515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.347674][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 150.500711][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 150.736682][ T8540] xt_recent: Unsupported userspace flags (000000b1) [ 150.906392][ T8546] bridge0: port 3(vlan2) entered blocking state [ 150.906525][ T8546] bridge0: port 3(vlan2) entered disabled state [ 150.906658][ T8546] vlan2: entered allmulticast mode [ 150.906673][ T8546] geneve0: entered allmulticast mode [ 150.916326][ T8546] vlan2: entered promiscuous mode [ 150.916343][ T8546] geneve0: entered promiscuous mode [ 150.943946][ T8551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.215216][ T8555] syzkaller1: entered promiscuous mode [ 151.215298][ T8555] syzkaller1: entered allmulticast mode [ 151.334799][ T8568] __nla_validate_parse: 14 callbacks suppressed [ 151.341505][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 151.563326][ T8578] sctp: [Deprecated]: syz.3.715 (pid 8578) Use of int in max_burst socket option. [ 151.563326][ T8578] Use struct sctp_assoc_value instead [ 151.660879][ T8579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.668095][ T8566] syzkaller1: entered promiscuous mode [ 151.668114][ T8566] syzkaller1: entered allmulticast mode [ 152.047866][ T8602] netlink: 'syz.3.720': attribute type 12 has an invalid length. [ 152.178907][ T8602] bond5: option primary_reselect: invalid value (255) [ 152.189837][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 152.189875][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 152.208840][ T8602] bond5 (unregistering): Released all slaves [ 152.297206][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 152.525370][ T8614] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.890825][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 152.935610][ T8631] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 152.935651][ T8631] netlink: 'syz.1.729': attribute type 2 has an invalid length. [ 152.954890][ T8631] nbd1: detected capacity change from 0 to 63 [ 152.962622][ T4932] block nbd1: Receive control failed (result -32) [ 152.978250][ T1975] block nbd1: Dead connection, failed to find a fallback [ 152.978294][ T1975] block nbd1: shutting down sockets [ 152.978327][ T1975] blk_print_req_error: 45 callbacks suppressed [ 152.978340][ T1975] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.978364][ T1975] buffer_io_error: 138 callbacks suppressed [ 152.978374][ T1975] Buffer I/O error on dev nbd1, logical block 0, async page read [ 152.983009][ T1975] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 152.983037][ T1975] Buffer I/O error on dev nbd1, logical block 1, async page read [ 152.983052][ T1975] Buffer I/O error on dev nbd1, logical block 2, async page read [ 152.983066][ T1975] Buffer I/O error on dev nbd1, logical block 3, async page read [ 152.983188][ T1975] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.983212][ T1975] Buffer I/O error on dev nbd1, logical block 0, async page read [ 152.983306][ T1975] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.983329][ T1975] Buffer I/O error on dev nbd1, logical block 1, async page read [ 152.983618][ T1975] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.983642][ T1975] Buffer I/O error on dev nbd1, logical block 2, async page read [ 152.983737][ T1975] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.983759][ T1975] Buffer I/O error on dev nbd1, logical block 3, async page read [ 152.983883][ T1975] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.983906][ T1975] Buffer I/O error on dev nbd1, logical block 0, async page read [ 152.985632][ T1975] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.985661][ T1975] Buffer I/O error on dev nbd1, logical block 1, async page read [ 152.987946][ T1975] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.988133][ T1975] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.997557][ T5635] ldm_validate_partition_table(): Disk read failed. [ 153.004418][ T5635] Dev nbd1: unable to read RDB block 0 [ 153.008987][ T5635] nbd1: unable to read partition table [ 153.053514][ T5635] ldm_validate_partition_table(): Disk read failed. [ 153.056649][ T5635] Dev nbd1: unable to read RDB block 0 [ 153.060040][ T5635] nbd1: unable to read partition table [ 153.264862][ T8646] netlink: 'syz.0.735': attribute type 21 has an invalid length. [ 153.366571][ T8654] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 153.376604][ T8655] xt_recent: Unsupported userspace flags (000000b1) [ 153.422831][ T8646] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 153.442819][ T8646] bond6 (unregistering): Released all slaves [ 153.617836][ T8656] tipc: Bearer : already 2 bearers with priority 10 [ 153.617875][ T8656] tipc: Bearer : trying with adjusted priority [ 153.618991][ T8656] tipc: Enabling of bearer rejected, failed to enable media [ 153.695506][ T8667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.004824][ T8682] openvswitch: netlink: Invalid VLAN frame [ 154.432299][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.435040][ T8715] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 154.454742][ T8715] netlink: 420 bytes leftover after parsing attributes in process `syz.2.745'. [ 154.785870][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 154.928412][ T8734] veth0_macvtap: entered allmulticast mode [ 154.934747][ T8734] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 155.174449][ T8740] netlink: 9 bytes leftover after parsing attributes in process `syz.4.754'. [ 155.186395][ T8740] netlink: 9 bytes leftover after parsing attributes in process `syz.4.754'. [ 155.670611][ T8773] syzkaller0: entered promiscuous mode [ 155.676389][ T8773] syzkaller0: entered allmulticast mode [ 156.017381][ T8794] ipt_rpfilter: unknown options [ 156.085086][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.763'. [ 156.295815][ T8803] xt_hashlimit: size too large, truncated to 1048576 [ 156.306557][ T8803] xt_hashlimit: max too large, truncated to 1048576 [ 156.306662][ T8803] xt_hashlimit: overflow, rate too high: 0 [ 156.329593][ T8803] tipc: Started in network mode [ 156.334595][ T8803] tipc: Node identity , cluster identity 4711 [ 156.334640][ T8803] tipc: Failed to obtain node identity [ 156.334677][ T8803] tipc: Enabling of bearer rejected, failed to enable media [ 156.393491][ T8805] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 156.512047][ T8808] __nla_validate_parse: 1 callbacks suppressed [ 156.518464][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.770'. [ 156.851835][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.852098][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.852357][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.852595][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.852815][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.853046][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.912508][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.924956][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 156.925224][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 157.087578][ T8840] syzkaller0: entered promiscuous mode [ 157.087605][ T8840] syzkaller0: entered allmulticast mode [ 157.487977][ T8843] Cannot find add_set index 4 as target [ 159.632882][ T8816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.017232][ T8865] netlink: 'syz.3.780': attribute type 5 has an invalid length. [ 160.182145][ T8873] syz_tun: entered allmulticast mode [ 160.331451][ T8870] syz_tun: left allmulticast mode [ 160.657911][ T8898] netlink: 'syz.1.788': attribute type 15 has an invalid length. [ 161.491310][ T8931] xt_hashlimit: size too large, truncated to 1048576 [ 162.209397][ T8960] __nla_validate_parse: 29 callbacks suppressed [ 162.219801][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 162.259661][ T8962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.805'. [ 162.259703][ T8962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.805'. [ 162.662384][ T8983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.808'. [ 162.775232][ T8988] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.952672][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 163.378876][ T9015] bridge_slave_0: invalid flags given to default FDB implementation [ 163.561418][ T9023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.604573][ T9019] 8021q: adding VLAN 0 to HW filter on device .` [ 164.015019][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 164.026502][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.827'. [ 164.321521][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 164.355977][ T9061] xt_hashlimit: overflow, try lower: 3/0 [ 164.440804][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 164.893959][ T9074] bond6: entered allmulticast mode [ 164.897764][ T9074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.938806][ T9079] geneve2: entered promiscuous mode [ 164.944546][ T9079] geneve2: entered allmulticast mode [ 165.247615][ T9104] tc_dump_action: action bad kind [ 165.356908][ T9109] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 165.461858][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 165.989661][ T9140] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 166.598189][ T9172] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 166.637752][ T9177] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 166.959925][ T9193] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 167.047719][ T9196] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 167.122364][ T9193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.166086][ T9201] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 167.508622][ T9217] __nla_validate_parse: 5 callbacks suppressed [ 167.508688][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.881'. [ 167.533683][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.881'. [ 167.536963][ T9217] netlink: 'syz.4.881': attribute type 32 has an invalid length. [ 167.536981][ T9217] netlink: 500 bytes leftover after parsing attributes in process `syz.4.881'. [ 167.825483][ T9228] team0 (unregistering): Port device team_slave_0 removed [ 167.843489][ T9228] team0 (unregistering): Port device team_slave_1 removed [ 167.883998][ T9228] team0 (unregistering): Port device vlan0 removed [ 168.547064][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 168.944880][ T9274] batadv_slave_0: entered promiscuous mode [ 168.957608][ T9273] tls_set_device_offload_rx: netdev not found [ 168.975831][ T9272] batadv_slave_0: left promiscuous mode [ 169.243695][ T9281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.895'. [ 169.471799][ T9266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.639793][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 169.658214][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 169.658474][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 169.658737][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 169.659027][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 169.893792][ T9320] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 170.029129][ T9334] x_tables: duplicate underflow at hook 2 [ 171.267845][ T9364] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 171.293414][ T9350] netlink: 'syz.0.908': attribute type 12 has an invalid length. [ 171.869402][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.846110][ T9427] syzkaller1: entered promiscuous mode [ 172.846159][ T9427] syzkaller1: entered allmulticast mode [ 172.905070][ T9435] __nla_validate_parse: 69 callbacks suppressed [ 172.911791][ T9435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.931'. [ 173.879135][ T9483] Bluetooth: MGMT ver 1.23 [ 174.328029][ T9500] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 174.486702][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.944'. [ 174.513416][ T9512] bond5: (slave gretap2): making interface the new active one [ 174.513964][ T9512] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 174.514535][ T9515] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 174.514561][ T9515] netlink: 224 bytes leftover after parsing attributes in process `syz.2.948'. [ 174.576023][ T9504] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.585111][ T9504] bond5: (slave bond6): Enslaving as a backup interface with an up link [ 174.616152][ T9500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.645405][ T9522] netlink: 'syz.2.950': attribute type 21 has an invalid length. [ 174.655712][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.950'. [ 174.782482][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.952'. [ 174.786283][ T9522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.950'. [ 175.020509][ T9541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.409359][ T9557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.960'. [ 175.727257][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 175.737821][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 175.757284][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 175.980382][ T9584] netlink: 'syz.4.968': attribute type 9 has an invalid length. [ 176.451937][ T9594] bond3: (slave vlan2): Opening slave failed [ 177.876708][ T9612] lo speed is unknown, defaulting to 1000 [ 177.986955][ T9743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.125857][ T9735] syz.2.985 (9735) used greatest stack depth: 18312 bytes left [ 178.273686][ T9739] syz.2.985 (9739) used greatest stack depth: 17392 bytes left [ 178.608465][ T9759] vlan3: entered promiscuous mode [ 178.634287][ T9759] bridge0: entered promiscuous mode [ 178.815448][ T9775] __nla_validate_parse: 3 callbacks suppressed [ 178.822035][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.998'. [ 179.030490][ T9767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 179.514688][ T9803] ip_tables: iptables: counters copy to user failed while replacing table [ 179.559906][ T9804] syzkaller0: entered promiscuous mode [ 179.563061][ T9805] IPv6: Can't replace route, no match found [ 179.573487][ T9804] syzkaller0: entered allmulticast mode [ 179.586698][ T9804] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 179.594742][ T9804] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1006'. [ 179.615423][ T9803] netlink: 'syz.4.1004': attribute type 16 has an invalid length. [ 179.615496][ T9803] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1004'. [ 179.718739][ T9808] netlink: 'syz.3.1007': attribute type 83 has an invalid length. [ 180.274859][ T9798] lo speed is unknown, defaulting to 1000 [ 180.437646][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 180.994941][ T9836] team0: Port device team_slave_0 removed [ 181.312735][ T9830] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 181.717459][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.724837][ T9859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.815807][ T9867] netlink: 'syz.2.1026': attribute type 11 has an invalid length. [ 181.828930][ T9867] SET target dimension over the limit! [ 181.836178][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 182.182937][ T9886] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1028'. [ 184.982947][ T9879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.226912][ T9917] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1039'. [ 185.317377][ T9916] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1037'. [ 185.322682][ T9916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.933994][ T9952] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1046'. [ 185.967900][ T9954] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 186.029804][ T9956] IPv6: addrconf: prefix option has invalid lifetime [ 186.034241][ T9956] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 186.034259][ T9956] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1049'. [ 186.037481][ T9956] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.141147][ T9958] erspan0: entered promiscuous mode [ 186.189138][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.191120][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.360810][ T9973] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1056'. [ 186.360853][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 186.417515][ T9975] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1055'. [ 186.431984][ T9975] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1055'. [ 186.658255][ T9987] syzkaller0: entered promiscuous mode [ 186.658301][ T9987] syzkaller0: entered allmulticast mode [ 186.662765][ T9977] syzkaller1: entered promiscuous mode [ 186.662784][ T9977] syzkaller1: entered allmulticast mode [ 186.982334][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 186.982387][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1060'. [ 187.377341][T10012] netlink: 'syz.2.1067': attribute type 21 has an invalid length. [ 187.628065][T10019] bond4: (slave vlan4): Opening slave failed [ 187.743628][T10029] sctp: [Deprecated]: syz.0.1072 (pid 10029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.743628][T10029] Use struct sctp_sack_info instead [ 188.105368][T10043] tipc: Enabled bearer , priority 10 [ 188.545785][T10008] lo speed is unknown, defaulting to 1000 [ 189.065307][T10087] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 189.065355][T10087] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 189.316405][T10093] bridge2: entered promiscuous mode [ 189.323819][T10093] bridge2: entered allmulticast mode [ 189.499003][T10104] veth9: entered promiscuous mode [ 189.503359][T10101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.997811][T10122] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 192.048392][T10087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.272287][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.272371][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.597150][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 206.597238][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 206.597284][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 206.601384][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 216.691997][T10136] __nla_validate_parse: 13 callbacks suppressed [ 216.692350][T10136] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1093'. [ 216.746949][T10136] bond7 (unregistering): Released all slaves [ 216.793222][T10143] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.972183][T10150] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1096'. [ 217.113568][T10154] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.376690][T10163] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 217.396003][T10163] bond4 (unregistering): Released all slaves [ 217.778086][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 217.811154][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 218.025689][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 218.078019][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 218.293892][T10219] ip6gretap0: mtu less than device minimum [ 218.628307][T10239] x_tables: duplicate underflow at hook 2 [ 218.655663][T10241] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 218.664356][T10241] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 218.689403][T10239] macvlan0: entered promiscuous mode [ 218.706486][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1122'. [ 218.830610][ T8459] wlan1: Trigger new scan to find an IBSS to join [ 218.834021][T10245] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1125'. [ 218.838759][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 218.858756][T10245] netlink: 'syz.1.1125': attribute type 4 has an invalid length. [ 218.858776][T10245] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1125'. [ 218.941151][T10243] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.953481][T10243] bond0: (slave bond7): Enslaving as an active interface with an up link [ 218.972579][T10252] netlink: 'syz.4.1127': attribute type 2 has an invalid length. [ 218.972615][T10252] netlink: 'syz.4.1127': attribute type 2 has an invalid length. [ 218.972644][T10252] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 218.992901][ T31] audit: type=1804 audit(1788903082.062:7): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1123" name="/newroot/219/cgroup.controllers" dev="tmpfs" ino=1136 res=1 errno=0 [ 218.993186][ T31] audit: type=1800 audit(1788903082.062:8): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1123" name="cgroup.controllers" dev="tmpfs" ino=1136 res=0 errno=0 [ 219.089523][T10255] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 219.874304][ T52] Bluetooth: hci4: command tx timeout [ 220.203487][T10315] sctp: [Deprecated]: syz.1.1148 (pid 10315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.203487][T10315] Use struct sctp_sack_info instead [ 220.222580][T10315] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 220.378456][T10328] netlink: 'syz.3.1150': attribute type 4 has an invalid length. [ 220.378494][T10328] netlink: 'syz.3.1150': attribute type 7 has an invalid length. [ 220.413693][T10315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.736915][T10337] bond8: invalid ARP target 0.0.0.0 specified for addition [ 220.746004][T10337] bond8: option arp_ip_target: invalid value (0) [ 220.791602][T10337] bond8 (unregistering): Released all slaves [ 221.030789][T10317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.085955][T10353] netlink: 'syz.0.1157': attribute type 5 has an invalid length. [ 221.721941][T10391] __nla_validate_parse: 23 callbacks suppressed [ 221.728467][T10391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1168'. [ 221.756890][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 221.791052][T10387] bond7: option fail_over_mac: invalid value (16) [ 221.810434][T10387] bond7 (unregistering): Released all slaves [ 221.858965][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 221.872981][ T6877] wlan1: Trigger new scan to find an IBSS to join [ 221.896908][T10393] bond7: option fail_over_mac: invalid value (16) [ 221.916990][T10393] bond7 (unregistering): Released all slaves [ 221.949404][ T52] Bluetooth: hci4: command tx timeout [ 221.953206][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 222.466998][T10408] syzkaller1: entered promiscuous mode [ 222.467039][T10408] syzkaller1: entered allmulticast mode [ 222.475959][T10434] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 222.504578][T10433] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 222.993370][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 223.092616][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 223.114671][T10463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.164915][T10463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.203924][T10463] bond0 (unregistering): Released all slaves [ 223.413397][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.464288][T10472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1181'. [ 223.464333][T10472] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1181'. [ 223.648449][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.793424][T10489] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1187'. [ 223.828228][T10479] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 223.880360][ T8458] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.880411][ T8458] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.880497][ T8458] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.880527][ T8458] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.880655][ T8458] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.880685][ T8458] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.880776][ T8458] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.880807][ T8458] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.899116][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 224.201577][T10516] validate_nla: 2 callbacks suppressed [ 224.201627][T10516] netlink: 'syz.4.1191': attribute type 2 has an invalid length. [ 224.283188][T10527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.286626][T10527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.829633][ T8458] wlan1: Trigger new scan to find an IBSS to join [ 225.749539][ T5992] wlan1: Creating new IBSS network, BSSID 0a:23:ae:3f:20:aa [ 227.002367][T10499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.020410][T10545] __nla_validate_parse: 1 callbacks suppressed [ 227.027246][T10545] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1196'. [ 227.207703][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 227.336221][T10564] GUP no longer grows the stack in syz.3.1202 (10564): 200000003000-20000000a000 (200000001000) [ 227.336280][T10564] CPU: 1 UID: 0 PID: 10564 Comm: syz.3.1202 Not tainted syzkaller #0 PREEMPT(full) [ 227.336305][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.336316][T10564] Call Trace: [ 227.336325][T10564] [ 227.336334][T10564] dump_stack_lvl+0xe8/0x150 [ 227.336371][T10564] __get_user_pages+0x23b6/0x2750 [ 227.336404][T10564] ? lock_acquire+0x115/0x350 [ 227.336444][T10564] ? __gup_longterm_locked+0xc3b/0x15c0 [ 227.336481][T10564] __gup_longterm_locked+0xd52/0x15c0 [ 227.336512][T10564] ? lock_acquire+0x115/0x350 [ 227.336553][T10564] gup_fast_fallback+0x1d92/0x20e0 [ 227.336617][T10564] ? __pfx_gup_fast_fallback+0x10/0x10 [ 227.336647][T10564] ? lock_acquire+0x115/0x350 [ 227.336666][T10564] ? is_valid_gup_args+0x11f/0x200 [ 227.336695][T10564] ? get_user_pages_fast+0x4d/0xb0 [ 227.336725][T10564] __iov_iter_get_pages_alloc+0x378/0xa40 [ 227.336765][T10564] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 227.336804][T10564] iov_iter_get_pages2+0x5e/0xa0 [ 227.336831][T10564] __se_sys_vmsplice+0x7b5/0x1660 [ 227.336884][T10564] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 227.336916][T10564] ? __pfx_futex_wait+0x10/0x10 [ 227.337027][T10564] do_syscall_64+0x166/0x520 [ 227.337059][T10564] ? trace_irq_disable+0x3b/0x140 [ 227.337079][T10564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.337101][T10564] ? clear_bhb_loop+0x70/0xc0 [ 227.337128][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.337150][T10564] RIP: 0033:0x7f0e4e99e159 [ 227.337170][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.337188][T10564] RSP: 002b:00007f0e4f8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 227.337212][T10564] RAX: ffffffffffffffda RBX: 00007f0e4ec25fa0 RCX: 00007f0e4e99e159 [ 227.337228][T10564] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 227.337242][T10564] RBP: 00007f0e4ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 227.337254][T10564] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 227.337267][T10564] R13: 00007f0e4ec26038 R14: 00007f0e4ec25fa0 R15: 00007fffd417f198 [ 227.337302][T10564] [ 227.717190][T10564] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1202'. [ 227.768920][T10577] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1205'. [ 227.770302][T10577] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1205'. [ 227.908700][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 228.666769][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 228.787120][T10625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1223'. [ 228.807314][T10626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1223'. [ 228.826197][T10625] tipc: Enabled bearer , priority 0 [ 228.826874][T10626] tipc: Enabling of bearer rejected, already enabled [ 228.857541][T10624] tipc: Disabling bearer [ 228.924245][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 228.984537][T10630] 8021q: adding VLAN 0 to HW filter on device .` [ 229.116471][T10630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.141448][T10630] bridge0: port 3(vlan2) entered blocking state [ 229.141600][T10630] bridge0: port 3(vlan2) entered forwarding state [ 229.158034][T10630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.168214][T10630] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.207845][ T5994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 229.249529][ T8459] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20004 - 0 [ 229.249630][ T8459] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 229.249686][ T8459] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 229.283004][ T6174] syz0: Port: 1 Link ACTIVE [ 229.413586][T10643] Bluetooth: hci0: unsupported parameter 5135 [ 229.420542][T10643] Bluetooth: hci0: unsupported parameter 8192 [ 229.426787][T10643] Bluetooth: hci0: unsupported parameter 5135 [ 229.434640][T10643] Bluetooth: hci0: unsupported parameter 8192 [ 229.540493][T10643] netlink: NAT attribute has 8 unknown bytes [ 229.540568][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.656740][T10654] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 229.706885][T10654] netlink: 'syz.3.1233': attribute type 3 has an invalid length. [ 230.423598][T10689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.463070][T10691] netlink: 'syz.3.1242': attribute type 83 has an invalid length. [ 230.492996][T10693] bridge2: entered promiscuous mode [ 230.493097][T10693] bridge2: entered allmulticast mode [ 230.703784][T10706] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 231.624898][T10758] netlink: 'syz.2.1263': attribute type 4 has an invalid length. [ 231.967029][T10768] openvswitch: netlink: IP tunnel dst address not specified [ 231.967079][T10768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.024157][T10770] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 232.438866][T10794] __nla_validate_parse: 23 callbacks suppressed [ 232.438921][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1275'. [ 232.445848][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1275'. [ 232.596379][T10791] xt_CT: No such helper "pptp" [ 232.607853][T10794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 232.654674][T10798] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.989744][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.168263][T10830] syzkaller1: entered allmulticast mode [ 233.193803][T10828] TC_ACT_REPEAT abuse ? [ 233.675629][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 234.136152][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 234.148195][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 234.259669][ T5277] veth0_vlan: left promiscuous mode [ 234.317090][ T6164] veth0_vlan: entered promiscuous mode [ 234.424979][T10891] IPVS: stopping master sync thread 10893 ... [ 234.425159][T10893] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 234.486847][T10889] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 234.585669][T10889] netlink: 'syz.0.1298': attribute type 3 has an invalid length. [ 234.715938][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1303'. [ 234.972339][ T8459] tipc: Subscription rejected, illegal request [ 235.058873][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1307'. [ 235.077506][T10919] pim6reg: entered allmulticast mode [ 235.084119][T10927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.217609][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 235.305967][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 235.351432][T10936] vlan4: entered allmulticast mode [ 235.351474][T10936] veth1_virt_wifi: entered allmulticast mode [ 235.948253][T10972] tipc: Enabling of bearer rejected, failed to enable media [ 235.965643][T10971] ªªªªª»: renamed from bond_slave_0 [ 236.282147][T10997] openvswitch: netlink: Missing valid actions attribute. [ 236.282212][T10997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.321699][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.325212][T10998] netlink: 'syz.1.1320': attribute type 1 has an invalid length. [ 236.387377][T10992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.496026][T11032] netlink: 'syz.1.1320': attribute type 1 has an invalid length. [ 236.556141][T10992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.577248][ T6164] lo speed is unknown, defaulting to 1000 [ 236.593621][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.593788][T10994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.633472][T11006] erspan2: entered allmulticast mode [ 236.673435][T11035] erspan2: entered allmulticast mode [ 236.748593][ T5725] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 236.809620][T11047] tipc: Started in network mode [ 236.809673][T11047] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 236.809850][T11047] tipc: Enabled bearer , priority 0 [ 236.858352][T11047] xt_cgroup: path and classid specified [ 236.882465][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 237.219440][T11063] netlink: 'syz.3.1331': attribute type 2 has an invalid length. [ 237.707048][T11083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 237.872866][T11090] __nla_validate_parse: 8 callbacks suppressed [ 237.879415][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 237.927905][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1342'. [ 237.931254][ T10] tipc: Node number set to 12429994 [ 238.041775][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 238.052138][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 239.154094][T11136] rdma_op ffff888054cafa38 conn xmit_rdma 0000000000000000 [ 239.192195][T11134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1354'. [ 239.209996][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1354'. [ 239.421118][T11146] syzkaller0: entered promiscuous mode [ 239.421171][T11146] syzkaller0: entered allmulticast mode [ 239.822027][T11170] x_tables: duplicate underflow at hook 1 [ 239.875960][T11169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.876325][T11169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.876613][T11169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.876902][T11169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.877190][T11169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.974709][T11179] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1366'. [ 240.079948][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1368'. [ 240.273974][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1372'. [ 240.440192][T11201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1374'. [ 240.556474][T11199] tipc: Enabling of bearer rejected, failed to enable media [ 240.663214][T11215] sctp: [Deprecated]: syz.2.1378 (pid 11215) Use of int in max_burst socket option. [ 240.663214][T11215] Use struct sctp_assoc_value instead [ 240.990073][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.317026][T11248] tipc: Can't bind to reserved service type 1 [ 241.324821][T11247] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 241.343312][T11251] net_ratelimit: 6 callbacks suppressed [ 241.349321][T11251] syzkaller0: mtu less than device minimum [ 241.350948][T11251] syzkaller0: mtu less than device minimum [ 241.351029][T11251] syzkaller0: mtu less than device minimum [ 241.351106][T11251] syzkaller0: mtu less than device minimum [ 241.362755][T11251] syzkaller0: mtu less than device minimum [ 241.362847][T11251] syzkaller0: mtu less than device minimum [ 241.362923][T11251] syzkaller0: mtu less than device minimum [ 241.362998][T11251] syzkaller0: mtu less than device minimum [ 241.363075][T11251] syzkaller0: mtu less than device minimum [ 241.363173][T11251] syzkaller0: mtu less than device minimum [ 241.950428][T11272] netlink: 'syz.3.1392': attribute type 83 has an invalid length. [ 242.031617][T11272] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.050770][T11273] macvlan0: entered promiscuous mode [ 242.057259][T11273] macvlan0: entered allmulticast mode [ 242.063575][T11273] bond8: entered allmulticast mode [ 242.069091][T11273] bond8: entered promiscuous mode [ 242.077091][T11273] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 242.087990][T11273] team0: Port device macvlan0 added [ 242.334185][T11280] xt_cgroup: path and classid specified [ 242.486055][ T31] audit: type=1107 audit(1788903105.562:9): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='TS®«ÆëóηyM|:oý…ú"!Àé!˜ŸXÌG„ö¹ÿ*JYY†Ø®8ÿŽ™SÞLÍ”` ¾w‚P8' [ 242.626233][T11288] bridge18: left allmulticast mode [ 242.627779][T11288] veth3: left allmulticast mode [ 242.646831][T11288] syzkaller0: left allmulticast mode [ 243.088140][T11320] __nla_validate_parse: 8 callbacks suppressed [ 243.104974][T11320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1402'. [ 243.135167][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 243.141335][ T52] block nbd3: Receive control failed (result -107) [ 243.221035][T11311] syzkaller1: entered promiscuous mode [ 243.221080][T11311] syzkaller1: entered allmulticast mode [ 243.298266][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1402'. [ 243.509108][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 243.561896][T11330] bond0 (unregistering): (slave erspan1): Releasing backup interface [ 243.573757][T11333] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1406'. [ 243.578938][T11330] bond0 (unregistering): Released all slaves [ 244.490953][T11362] syzkaller0: entered promiscuous mode [ 244.491000][T11362] syzkaller0: entered allmulticast mode [ 244.768062][T11378] tipc: Enabled bearer , priority 0 [ 244.795099][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 244.908849][T11378] syzkaller0: entered promiscuous mode [ 244.908893][T11378] syzkaller0: entered allmulticast mode [ 244.911112][T11378] tipc: Resetting bearer [ 244.930685][T11377] tipc: Resetting bearer [ 244.956217][T11393] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1422'. [ 245.085722][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1423'. [ 245.103180][T11401] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 245.103217][T11401] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 245.103702][T11401] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1424'. [ 245.104484][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'. [ 246.748023][T11377] tipc: Disabling bearer [ 247.114192][T11423] bond0: option miimon: invalid value (18446744071829782528) [ 247.114238][T11423] bond0: option miimon: allowed values 0 - 2147483647 [ 247.304223][T11446] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 247.412202][T11446] bond0: entered promiscuous mode [ 247.412710][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.518946][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.526557][T11446] bond0: (slave ipip1): The slave device specified does not support setting the MAC address [ 247.538059][T11446] bond0: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 247.567779][T11446] bond0: (slave ipip1): making interface the new active one [ 247.575468][T11446] ipip1: entered promiscuous mode [ 247.583457][T11446] bond0: (slave ipip1): Enslaving as an active interface with an up link [ 248.245929][T11489] __nla_validate_parse: 4 callbacks suppressed [ 248.245978][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 248.347742][T11490] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 248.356372][T11490] gretap3: entered promiscuous mode [ 248.364653][T11490] gretap3: entered allmulticast mode [ 248.828009][T11535] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 249.581565][T11569] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1460'. [ 249.593671][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 249.638316][T11569] syzkaller0: left promiscuous mode [ 249.871202][T11586] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 249.871250][T11586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1465'. [ 250.019797][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 250.257209][T11603] tunl0: entered promiscuous mode [ 250.267508][T11603] netlink: 'syz.2.1469': attribute type 4 has an invalid length. [ 250.267552][T11603] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1469'. [ 250.375540][T11609] : renamed from bond0 (while UP) [ 250.471775][T11618] vlan0: entered allmulticast mode [ 250.477199][T11618] bond0: entered allmulticast mode [ 250.482670][T11618] bond_slave_0: entered allmulticast mode [ 250.488672][T11618] syz_tun: entered allmulticast mode [ 250.494228][T11618] bond3: entered allmulticast mode [ 250.499902][T11618] bond7: entered allmulticast mode [ 250.549118][T11618] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.684700][T11634] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1476'. [ 250.812968][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 250.825573][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 251.048861][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1481'. [ 251.289083][T11657] smc: removing ib device syz0 [ 251.430367][T11657] smbdirect: ib_dev[syz0] removed [ 252.194144][T11678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 252.208190][T11678] Cannot find map_set index 2 as target [ 252.582513][T11689] lo: Caught tx_queue_len zero misconfig [ 252.972703][T11716] netlink: 'syz.0.1495': attribute type 3 has an invalid length. [ 252.998628][T11709] ªªªªª»: entered promiscuous mode [ 253.004163][T11709] ªªªªª»: entered allmulticast mode [ 253.445176][T11729] __nla_validate_parse: 10 callbacks suppressed [ 253.445233][T11729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1503'. [ 253.818591][T11747] netlink: 'syz.0.1508': attribute type 10 has an invalid length. [ 253.827161][T11747] syz_tun: entered promiscuous mode [ 253.982305][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1510'. [ 254.479590][T11762] netlink: 'syz.1.1512': attribute type 64 has an invalid length. [ 254.479636][T11762] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1512'. [ 254.483609][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 254.508813][T11739] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 254.522782][T11762] vlan2: left allmulticast mode [ 254.522831][T11762] geneve0: left allmulticast mode [ 254.532099][T11762] vlan2: left promiscuous mode [ 254.532117][T11762] geneve0: left promiscuous mode [ 254.532630][T11762] bridge0: port 3(vlan2) entered disabled state [ 254.583960][T11782] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 254.595932][T11762] bridge_slave_1: left allmulticast mode [ 254.595984][T11762] bridge_slave_1: left promiscuous mode [ 254.603355][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.658990][T11762] bridge_slave_0: left allmulticast mode [ 254.659045][T11762] bridge_slave_0: left promiscuous mode [ 254.667139][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.678664][T11783] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 254.721754][T11788] netlink: 'syz.4.1518': attribute type 3 has an invalid length. [ 254.729866][T11788] netlink: 'syz.4.1518': attribute type 3 has an invalid length. [ 255.126494][T11799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1520'. [ 255.238083][T11807] netlink: 'syz.2.1521': attribute type 64 has an invalid length. [ 255.238136][T11807] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1521'. [ 255.238376][T11807] netlink: 'syz.2.1521': attribute type 64 has an invalid length. [ 255.238395][T11807] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1521'. [ 255.238615][T11807] netlink: 'syz.2.1521': attribute type 64 has an invalid length. [ 255.238634][T11807] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1521'. [ 255.238845][T11807] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1521'. [ 255.239058][T11807] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1521'. [ 255.686297][T11824] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 255.713392][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713479][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058137][T11817] syzkaller0: entered promiscuous mode [ 256.065635][T11817] syzkaller0: entered allmulticast mode [ 256.763734][T11861] IPVS: length: 212 != 24 [ 257.463747][T11918] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 257.483503][T11915] ip6tnl0: Caught tx_queue_len zero misconfig [ 257.629390][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.836213][T11936] veth0: Caught tx_queue_len zero misconfig [ 257.860573][T11026] net_ratelimit: 23 callbacks suppressed [ 257.860630][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.036572][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.218992][T11017] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 258.271493][T11026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.432084][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.479906][T11981] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.526957][T11985] 8021q: VLANs not supported on ip6gre0 [ 258.959520][T11031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.069608][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.637399][T11995] validate_nla: 62 callbacks suppressed [ 259.637466][T11995] netlink: 'syz.1.1570': attribute type 30 has an invalid length. [ 259.964218][T11993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.972143][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.977654][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.026662][T11994] bridge2: left allmulticast mode [ 260.040518][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.043498][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.428897][T12013] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 260.458346][T12013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.470464][T12013] vlan3: entered promiscuous mode [ 260.470491][T12013] bond0: entered promiscuous mode [ 260.470675][T12013] vlan3: entered allmulticast mode [ 260.470696][T12013] bond0: entered allmulticast mode [ 261.086935][T11953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.091986][T11974] netlink: 'syz.4.1565': attribute type 2 has an invalid length. [ 261.092014][T11974] __nla_validate_parse: 82 callbacks suppressed [ 261.092027][T11974] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1565'. [ 261.112791][T11978] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 261.112812][T11978] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 261.112825][T11978] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1565'. [ 261.112841][T11978] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 261.442769][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 261.568642][T12041] IPVS: Error connecting to the multicast addr [ 261.666696][T12032] bridge21: entered promiscuous mode [ 261.666785][T12032] bridge21: entered allmulticast mode [ 261.710027][T12047] xt_hashlimit: size too large, truncated to 1048576 [ 261.716186][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 261.725949][T12047] xt_hashlimit: max too large, truncated to 1048576 [ 261.725967][T12047] xt_hashlimit: overflow, rate too high: 0 [ 261.848561][T12048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.889080][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 261.897107][T12055] macvlan2: entered promiscuous mode [ 261.897136][T12055] macvlan2: entered allmulticast mode [ 261.937907][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 262.015798][T12065] netlink: 'syz.2.1587': attribute type 7 has an invalid length. [ 262.176562][T12074] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1590'. [ 262.459605][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 262.494480][T12093] netlink: 'syz.0.1593': attribute type 2 has an invalid length. [ 262.494533][T12093] netlink: 'syz.0.1593': attribute type 11 has an invalid length. [ 262.494888][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1593'. [ 262.579734][T12096] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 262.644307][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 262.644364][T12097] netlink: 'syz.1.1594': attribute type 12 has an invalid length. [ 263.243299][ T6167] net_ratelimit: 18 callbacks suppressed [ 263.243355][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.411132][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.652716][T12139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.985968][ T52] block nbd4: Receive control failed (result -107) [ 264.270745][ T6170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.381451][T12169] tipc: Enabling of bearer rejected, failed to enable media [ 264.682512][ T31] audit: type=1107 audit(1788903127.762:10): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 264.694567][T12186] xt_bpf: check failed: parse error [ 264.711467][T12191] syzkaller0: entered promiscuous mode [ 264.718892][T12181] x_tables: duplicate underflow at hook 3 [ 264.718931][T12191] syzkaller0: entered allmulticast mode [ 265.362250][T12235] validate_nla: 4 callbacks suppressed [ 265.362305][T12235] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 265.607673][T12235] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 266.097899][T12266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.277403][T12270] syzkaller0: entered promiscuous mode [ 266.277443][T12270] syzkaller0: entered allmulticast mode [ 266.293122][T12270] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 266.658763][T12289] __nla_validate_parse: 6 callbacks suppressed [ 266.662149][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'. [ 266.988808][T12302] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 267.045832][T12305] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 267.054925][T12305] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 267.388654][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.425761][T12322] bridge_slave_0 (unregistering): left allmulticast mode [ 267.425806][T12322] bridge_slave_0 (unregistering): left promiscuous mode [ 267.428386][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.539691][T12324] tipc: Enabled bearer , priority 0 [ 267.558037][T12323] tipc: Disabling bearer [ 267.747162][T12343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 268.023027][T12358] Cannot find add_set index 4 as target [ 268.031157][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 268.046778][T12359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1657'. [ 268.056485][T12359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1657'. [ 268.057984][T12350] bond6: option fail_over_mac: invalid value (16) [ 268.073019][T12359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1657'. [ 268.078190][T12350] bond6 (unregistering): Released all slaves [ 268.096742][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 268.208688][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.574381][T12380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.666776][T12389] openvswitch: netlink: Message has 8 unknown bytes. [ 268.666842][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.734194][T12380] netlink: 'syz.1.1665': attribute type 2 has an invalid length. [ 268.879073][T12401] bridge0: port 1(vlan5) entered blocking state [ 268.889612][T12401] bridge0: port 1(vlan5) entered disabled state [ 268.896906][T12401] vlan5: entered allmulticast mode [ 268.896955][T12401] geneve0: entered allmulticast mode [ 268.928682][T12401] vlan5: entered promiscuous mode [ 268.928729][T12401] geneve0: entered promiscuous mode [ 269.623783][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 269.781850][T12440] Bluetooth: hci0: unsupported parameter 5135 [ 269.781904][T12440] Bluetooth: hci0: unsupported parameter 8192 [ 269.781935][T12440] Bluetooth: hci0: unsupported parameter 5135 [ 269.781948][T12440] Bluetooth: hci0: unsupported parameter 8192 [ 270.157813][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 270.187665][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 270.295587][T12455] syzkaller0: entered promiscuous mode [ 270.301647][T12455] syzkaller0: entered allmulticast mode [ 270.835868][T12485] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 270.878160][T12485] bond9: entered promiscuous mode [ 270.878902][T12485] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.880084][T12489] veth0: entered promiscuous mode [ 270.883571][T12488] veth0: left promiscuous mode [ 271.172865][T12485] 8021q: adding VLAN 0 to HW filter on device bond9 [ 271.173316][T12485] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 271.173356][T12485] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 271.204589][T12485] bond9: (slave ip6gre2): making interface the new active one [ 271.204628][T12485] ip6gre2: entered promiscuous mode [ 271.220024][T12485] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 271.234982][T12502] batman_adv: batadv0: Adding interface: veth0 [ 271.242961][T12502] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.259362][T12502] batman_adv: batadv0: Interface activated: veth0 [ 271.285273][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.285337][T12507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.295712][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.295732][T12507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.304670][T12507] batman_adv: batadv0: Interface deactivated: veth0 [ 271.304689][T12507] batman_adv: batadv0: Removing interface: veth0 [ 271.648343][T12521] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 271.663804][T12519] __nla_validate_parse: 10 callbacks suppressed [ 271.667528][T12528] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1709'. [ 271.683779][T12519] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1709'. [ 271.776761][T12531] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1714'. [ 271.935227][T12537] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 272.351181][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.510258][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 272.531050][T12539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1715'. [ 272.531102][T12539] block nbd0: Unsupported socket: should be TCP or UNIX. [ 272.767156][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 272.777700][T12551] syzkaller0: Caught tx_queue_len zero misconfig [ 272.795057][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 273.103857][T12571] lo: Caught tx_queue_len zero misconfig [ 273.262677][T12580] tipc: Enabling of bearer rejected, failed to enable media [ 273.288315][T12589] Unsupported ieee802154 address type: 0 [ 273.550250][T12607] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 273.594536][T12604] netlink: zone id is out of range [ 273.595600][T12604] netlink: zone id is out of range [ 273.595612][T12604] netlink: zone id is out of range [ 273.595621][T12604] netlink: zone id is out of range [ 273.595629][T12604] netlink: zone id is out of range [ 273.595635][T12604] netlink: zone id is out of range [ 273.595889][T12604] netlink: zone id is out of range [ 273.595900][T12604] netlink: zone id is out of range [ 273.595907][T12604] netlink: zone id is out of range [ 273.595914][T12604] netlink: zone id is out of range [ 273.616848][T12604] netlink: 'syz.4.1735': attribute type 29 has an invalid length. [ 273.616867][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 273.975827][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 274.099787][T12629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1741'. [ 274.186446][ T52] Bluetooth: hci2: ACL packet too small [ 274.587158][T12643] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 274.822534][T12653] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:73 [ 274.844406][T12653] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20002 [ 275.114105][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114151][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114165][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114177][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114379][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114392][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114402][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114413][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114615][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114627][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114638][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114648][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114845][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114857][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.114884][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.114895][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.115089][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.115100][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.115111][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.115122][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.115313][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.115325][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.115335][T12666] Bluetooth: hci0: unsupported parameter 5135 [ 275.115346][T12666] Bluetooth: hci0: unsupported parameter 8192 [ 275.470169][T12685] netlink: 'syz.2.1757': attribute type 39 has an invalid length. [ 275.482782][T12688] netlink: 'syz.2.1757': attribute type 39 has an invalid length. [ 275.848072][T12705] netlink: 'syz.2.1761': attribute type 21 has an invalid length. [ 275.877811][T12705] netlink: 'syz.2.1761': attribute type 5 has an invalid length. [ 275.877853][T12705] netlink: 'syz.2.1761': attribute type 6 has an invalid length. [ 275.886586][T12707] netlink: 'syz.3.1762': attribute type 5 has an invalid length. [ 276.698832][T12756] syzkaller1: entered promiscuous mode [ 276.698873][T12756] syzkaller1: entered allmulticast mode [ 277.204233][T12775] __nla_validate_parse: 7 callbacks suppressed [ 277.212959][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'. [ 277.265292][T12775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1777'. [ 278.333593][T12814] lo speed is unknown, defaulting to 1000 [ 278.517954][T12823] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1790'. [ 279.108299][T12839] bridge_slave_0 (unregistering): left allmulticast mode [ 279.108351][T12839] bridge_slave_0 (unregistering): left promiscuous mode [ 279.108444][T12839] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.220105][T12861] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 279.318633][T12855] netlink: 'syz.4.1800': attribute type 10 has an invalid length. [ 279.490784][T12864] syzkaller0: entered promiscuous mode [ 279.490823][T12864] syzkaller0: entered allmulticast mode [ 279.636241][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 279.871947][T12870] hsr_slave_1 (unregistering): left promiscuous mode [ 279.915414][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 279.957279][T12897] netlink: 'syz.3.1808': attribute type 2 has an invalid length. [ 279.957324][T12897] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1808'. [ 279.958785][T12889] lo speed is unknown, defaulting to 1000 [ 280.325904][T12907] net_ratelimit: 498 callbacks suppressed [ 280.327176][T12907] netlink: zone id is out of range [ 280.327190][T12907] netlink: zone id is out of range [ 280.327198][T12907] netlink: zone id is out of range [ 280.327205][T12907] netlink: zone id is out of range [ 280.327212][T12907] netlink: zone id is out of range [ 280.327219][T12907] netlink: zone id is out of range [ 280.327230][T12907] netlink: zone id is out of range [ 280.327237][T12907] netlink: zone id is out of range [ 280.327245][T12907] netlink: zone id is out of range [ 280.327252][T12907] netlink: zone id is out of range [ 280.458559][T12909] bond3: option mode: unable to set because the bond device is up [ 280.467152][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1812'. [ 280.649043][T12915] netlink: 'syz.2.1817': attribute type 6 has an invalid length. [ 280.727051][T12919] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1815'. [ 281.160252][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 281.160314][T12951] netlink: 'syz.1.1824': attribute type 7 has an invalid length. [ 281.160329][T12951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1824'. [ 284.411463][T13033] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 285.111339][T13062] nbd: must specify a size in bytes for the device [ 285.266290][T13070] __nla_validate_parse: 1 callbacks suppressed [ 285.266342][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 285.304765][T13066] bond10 (unregistering): Released all slaves [ 285.541300][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 285.648296][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 285.653185][T13080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.653201][T13080] IPv6: NLM_F_CREATE should be set when creating new route [ 285.674777][T13089] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 285.682930][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 285.692368][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 285.703902][T13089] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 285.712299][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 285.926123][T13099] xt_hashlimit: size too large, truncated to 1048576 [ 285.963437][T13105] FAULT_INJECTION: forcing a failure. [ 285.963437][T13105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.963494][T13105] CPU: 0 UID: 0 PID: 13105 Comm: syz.2.1866 Not tainted syzkaller #0 PREEMPT(full) [ 285.963518][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.963528][T13105] Call Trace: [ 285.963535][T13105] [ 285.963543][T13105] dump_stack_lvl+0xe8/0x150 [ 285.963576][T13105] should_fail_ex+0x410/0x560 [ 285.963608][T13105] _copy_from_user+0x2d/0xb0 [ 285.963629][T13105] do_sock_getsockopt+0x462/0x7e0 [ 285.963654][T13105] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 285.963690][T13105] ? __fget_files+0x3a2/0x420 [ 285.963712][T13105] ? __fget_files+0x2a/0x420 [ 285.963742][T13105] __x64_sys_getsockopt+0x1a4/0x240 [ 285.963771][T13105] do_syscall_64+0x166/0x520 [ 285.963796][T13105] ? trace_irq_disable+0x3b/0x140 [ 285.963813][T13105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.963832][T13105] ? clear_bhb_loop+0x70/0xc0 [ 285.963854][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.963872][T13105] RIP: 0033:0x7f77ea99e159 [ 285.963890][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.963905][T13105] RSP: 002b:00007f77eb7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 285.963927][T13105] RAX: ffffffffffffffda RBX: 00007f77eac25fa0 RCX: 00007f77ea99e159 [ 285.963940][T13105] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 285.963952][T13105] RBP: 00007f77eb7a3090 R08: 0000200000000240 R09: 0000000000000000 [ 285.963964][T13105] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 285.963976][T13105] R13: 00007f77eac26038 R14: 00007f77eac25fa0 R15: 00007ffc3608f5f8 [ 285.964006][T13105] [ 286.207138][T13109] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 286.294115][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'. [ 286.336924][T13124] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 286.473755][T13127] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 286.473796][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 286.627901][T13137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1873'. [ 286.977151][T13151] FAULT_INJECTION: forcing a failure. [ 286.977151][T13151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.995852][T13151] CPU: 1 UID: 0 PID: 13151 Comm: syz.2.1879 Not tainted syzkaller #0 PREEMPT(full) [ 286.995882][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.995894][T13151] Call Trace: [ 286.995903][T13151] [ 286.995912][T13151] dump_stack_lvl+0xe8/0x150 [ 286.995947][T13151] should_fail_ex+0x410/0x560 [ 286.995985][T13151] _copy_to_iter+0x1e4/0x1810 [ 286.996017][T13151] ? __lock_acquire+0x6df/0x2e50 [ 286.996053][T13151] ? __pfx__copy_to_iter+0x10/0x10 [ 286.996088][T13151] ? iso_sock_getsockopt+0xf1/0x6c0 [ 286.996120][T13151] ? __local_bh_enable_ip+0xd6/0x140 [ 286.996153][T13151] iso_sock_getsockopt+0x378/0x6c0 [ 286.996185][T13151] ? __pfx_iso_sock_getsockopt+0x10/0x10 [ 286.996229][T13151] do_sock_getsockopt+0x6ae/0x7e0 [ 286.996258][T13151] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 286.996298][T13151] ? __fget_files+0x3a2/0x420 [ 286.996323][T13151] ? __fget_files+0x2a/0x420 [ 286.996356][T13151] __x64_sys_getsockopt+0x1a4/0x240 [ 286.996390][T13151] do_syscall_64+0x166/0x520 [ 286.996419][T13151] ? trace_irq_disable+0x3b/0x140 [ 286.996438][T13151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.996459][T13151] ? clear_bhb_loop+0x70/0xc0 [ 286.996484][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.996504][T13151] RIP: 0033:0x7f77ea99e159 [ 286.996524][T13151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.996538][T13151] RSP: 002b:00007f77eb7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 286.996556][T13151] RAX: ffffffffffffffda RBX: 00007f77eac25fa0 RCX: 00007f77ea99e159 [ 286.996569][T13151] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 286.996579][T13151] RBP: 00007f77eb7a3090 R08: 0000200000000240 R09: 0000000000000000 [ 286.996590][T13151] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 286.996600][T13151] R13: 00007f77eac26038 R14: 00007f77eac25fa0 R15: 00007ffc3608f5f8 [ 286.996627][T13151] [ 287.241875][T13153] net_ratelimit: 500 callbacks suppressed [ 287.241935][T13153] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 287.245886][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 287.275116][T13153] bond0: (slave syz_tun): Releasing backup interface [ 287.297006][T13153] syz_tun (unregistering): left allmulticast mode [ 287.297205][T13153] tipc: Resetting bearer [ 287.306343][T13153] tipc: Disabling bearer [ 287.365242][T13161] netlink: 'syz.2.1881': attribute type 26 has an invalid length. [ 287.383865][T13161] netlink: 'syz.2.1881': attribute type 26 has an invalid length. [ 287.411962][T13163] netlink: 'syz.2.1881': attribute type 26 has an invalid length. [ 287.414317][T13163] netlink: 'syz.2.1881': attribute type 26 has an invalid length. [ 288.131568][T13202] FAULT_INJECTION: forcing a failure. [ 288.131568][T13202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.131629][T13202] CPU: 0 UID: 0 PID: 13202 Comm: syz.3.1892 Not tainted syzkaller #0 PREEMPT(full) [ 288.131653][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.131663][T13202] Call Trace: [ 288.131670][T13202] [ 288.131677][T13202] dump_stack_lvl+0xe8/0x150 [ 288.131707][T13202] should_fail_ex+0x410/0x560 [ 288.131740][T13202] _copy_to_user+0x31/0xb0 [ 288.131764][T13202] do_sock_getsockopt+0x6ea/0x7e0 [ 288.131789][T13202] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 288.131824][T13202] ? __fget_files+0x3a2/0x420 [ 288.131847][T13202] ? __fget_files+0x2a/0x420 [ 288.131877][T13202] __x64_sys_getsockopt+0x1a4/0x240 [ 288.131905][T13202] do_syscall_64+0x166/0x520 [ 288.131930][T13202] ? trace_irq_disable+0x3b/0x140 [ 288.131947][T13202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.131966][T13202] ? clear_bhb_loop+0x70/0xc0 [ 288.131988][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.132006][T13202] RIP: 0033:0x7f0e4e99e159 [ 288.132025][T13202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.132041][T13202] RSP: 002b:00007f0e4f8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.132062][T13202] RAX: ffffffffffffffda RBX: 00007f0e4ec25fa0 RCX: 00007f0e4e99e159 [ 288.132075][T13202] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 288.132086][T13202] RBP: 00007f0e4f8f5090 R08: 0000200000000240 R09: 0000000000000000 [ 288.132099][T13202] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 288.132111][T13202] R13: 00007f0e4ec26038 R14: 00007f0e4ec25fa0 R15: 00007fffd417f198 [ 288.132140][T13202] [ 288.215669][T13205] Cannot find add_set index 0 as target [ 288.495495][T13215] xt_limit: Overflow, try lower: 536871034/0 [ 288.989583][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.145230][T13257] FAULT_INJECTION: forcing a failure. [ 289.145230][T13257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.164474][T13257] CPU: 1 UID: 0 PID: 13257 Comm: syz.3.1906 Not tainted syzkaller #0 PREEMPT(full) [ 289.164504][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.164517][T13257] Call Trace: [ 289.164525][T13257] [ 289.164534][T13257] dump_stack_lvl+0xe8/0x150 [ 289.164570][T13257] should_fail_ex+0x410/0x560 [ 289.164606][T13257] _copy_to_user+0x31/0xb0 [ 289.164632][T13257] simple_read_from_buffer+0xe1/0x170 [ 289.164665][T13257] proc_fail_nth_read+0x1bb/0x230 [ 289.164691][T13257] ? common_file_perm+0x20e/0x2b0 [ 289.164716][T13257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.164749][T13257] ? rw_verify_area+0x24a/0x4c0 [ 289.164779][T13257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.164807][T13257] vfs_read+0x213/0xa80 [ 289.164852][T13257] ? __pfx___mutex_lock+0x10/0x10 [ 289.164883][T13257] ? __pfx_vfs_read+0x10/0x10 [ 289.164913][T13257] ? __fget_files+0x2a/0x420 [ 289.164944][T13257] ? __fget_files+0x3a2/0x420 [ 289.164968][T13257] ? __fget_files+0x2a/0x420 [ 289.165003][T13257] ksys_read+0x150/0x270 [ 289.165034][T13257] ? __pfx_ksys_read+0x10/0x10 [ 289.165059][T13257] ? fput+0xa0/0xd0 [ 289.165095][T13257] do_syscall_64+0x166/0x520 [ 289.165124][T13257] ? trace_irq_disable+0x3b/0x140 [ 289.165144][T13257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.165166][T13257] ? clear_bhb_loop+0x70/0xc0 [ 289.165191][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.165212][T13257] RIP: 0033:0x7f0e4e95e98e [ 289.165231][T13257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.165249][T13257] RSP: 002b:00007f0e4f8f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.165272][T13257] RAX: ffffffffffffffda RBX: 00007f0e4f8f56c0 RCX: 00007f0e4e95e98e [ 289.165286][T13257] RDX: 000000000000000f RSI: 00007f0e4f8f50a0 RDI: 0000000000000003 [ 289.165299][T13257] RBP: 00007f0e4f8f5090 R08: 0000000000000000 R09: 0000000000000000 [ 289.165312][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.165324][T13257] R13: 00007f0e4ec26038 R14: 00007f0e4ec25fa0 R15: 00007fffd417f198 [ 289.165359][T13257] [ 289.602860][T13277] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 289.669917][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.670073][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.676832][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.676940][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677049][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677151][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677254][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677365][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677467][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.677570][T13280] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.713670][T13253] syzkaller0: entered promiscuous mode [ 289.713690][T13253] syzkaller0: entered allmulticast mode [ 290.280352][T11038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.868214][T13332] netlink: 'syz.1.1919': attribute type 5 has an invalid length. [ 291.056258][T13338] __nla_validate_parse: 17 callbacks suppressed [ 291.056307][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 291.056327][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'. [ 291.113654][T13340] netlink: 'syz.4.1921': attribute type 3 has an invalid length. [ 291.795245][T13377] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 291.881097][T13386] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 292.245155][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 292.245202][T13396] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1936'. [ 292.310570][T13399] lo speed is unknown, defaulting to 1000 [ 292.504342][T13396] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1936'. [ 292.866828][T13422] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1942'. [ 293.021940][T10183] udevd[10183]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 293.278084][T13447] team_slave_1: Caught tx_queue_len zero misconfig [ 293.524762][T13454] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 294.057386][T13458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.292520][T13461] bridge21: left allmulticast mode [ 294.452899][T13476] syzkaller0: entered promiscuous mode [ 294.452949][T13476] syzkaller0: entered allmulticast mode [ 294.669620][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 294.767837][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'. [ 294.802753][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.875916][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 294.888928][T13496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.918988][T13499] ip6_vti0: entered promiscuous mode [ 294.927017][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 296.173249][T13574] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 296.276223][T13574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.336903][T13585] __nla_validate_parse: 4 callbacks suppressed [ 296.337449][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1972'. [ 296.339710][T13575] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 296.340060][T13575] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 296.340464][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 296.340481][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1972'. [ 296.835590][T13608] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 296.895970][T13622] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.923975][T13626] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 296.974454][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 296.984625][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1980'. [ 296.994887][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1980'. [ 297.360033][T13638] xt_addrtype: ipv6 does not support BROADCAST matching [ 297.411710][T13639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1983'. [ 297.437105][T13644] netlink: 'syz.2.1986': attribute type 11 has an invalid length. [ 297.446066][T13644] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1986'. [ 297.518492][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 297.798014][T13663] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1992'. [ 298.113304][T13672] openvswitch: netlink: Duplicate or invalid key (type 0). [ 298.429912][ T5725] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec [ 298.430974][T13691] syzkaller0: Caught tx_queue_len zero misconfig [ 298.435429][T13691] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 299.868061][T13748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.341566][T13770] Unsupported ieee802154 address type: 0 [ 301.452411][T13822] __nla_validate_parse: 4 callbacks suppressed [ 301.452467][T13822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 302.200125][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 302.208249][T13855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.208758][T13855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2034'. [ 302.332218][T13862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2035'. [ 302.349830][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 302.665203][T13871] IPv6: NLM_F_REPLACE set, but no existing node found! [ 302.716331][T13877] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2039'. [ 302.737827][T13880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 302.934831][T13890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2043'. [ 303.141445][T13901] netlink: 'syz.3.2047': attribute type 3 has an invalid length. [ 303.157799][T13898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2046'. [ 303.199608][T13902] netlink: 396 bytes leftover after parsing attributes in process `syz.2.2048'. [ 303.586774][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 303.631784][T13923] macsec2: entered promiscuous mode [ 303.631832][T13923] bridge0: entered promiscuous mode [ 303.632004][T13923] macsec2: entered allmulticast mode [ 303.632018][T13923] bridge0: entered allmulticast mode [ 303.637189][ T52] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 303.637227][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 304.181271][T13951] netlink: 'syz.1.2058': attribute type 2 has an invalid length. [ 304.412230][T13956] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 304.774989][T11023] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.775467][T11023] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.802355][ T6170] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.900580][ T6167] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.962312][ T6167] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 305.245687][T14011] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 305.393613][T14009] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 305.648630][T14024] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 306.111819][T14050] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 306.233796][T14055] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 306.252710][T14055] bond9 (unregistering): Released all slaves [ 306.287929][T14062] batadv_slave_0: entered promiscuous mode [ 306.356413][T14058] batadv_slave_0 (unregistering): left promiscuous mode [ 306.408071][T14065] lo: Caught tx_queue_len zero misconfig [ 306.440982][T14064] netlink: 'syz.2.2088': attribute type 39 has an invalid length. [ 306.553012][T14076] ±ÿª¨úrBº“€: entered promiscuous mode [ 306.558895][T14076] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 306.558946][T14076] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 306.580155][T14079] __nla_validate_parse: 11 callbacks suppressed [ 306.581082][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2090'. [ 306.701177][T14083] bond3: option mode: unable to set because the bond device is up [ 306.715879][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 306.715922][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 306.725003][T14083] bond0: left promiscuous mode [ 306.725022][T14083] ipip1: left promiscuous mode [ 306.754114][T14083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.767159][T14084] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 306.767278][T14084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2092'. [ 306.791968][T14083] bond3: (slave bond0): making interface the new active one [ 306.803686][T14083] bond3: (slave bond0): Enslaving as an active interface with an up link [ 306.958053][T14092] openvswitch: netlink: VLAN attribute unexpected. [ 307.152645][T14103] Bluetooth: hci0: unsupported parameter 5134 [ 307.152685][T14103] Bluetooth: hci0: unsupported parameter 8192 [ 307.152739][T14103] Bluetooth: hci0: unsupported parameter 5134 [ 307.152759][T14103] Bluetooth: hci0: unsupported parameter 8192 [ 307.207500][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 307.240097][T14103] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 307.689684][T14146] Cannot find set identified by id 1 to match [ 307.832818][T14152] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 307.844661][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 307.844716][T14152] netlink: 'syz.3.2111': attribute type 5 has an invalid length. [ 307.844751][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 307.921054][T14157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2113'. [ 308.233633][T14172] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96 [ 308.242714][T14173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'. [ 308.261778][T14173] ip6tnl1: entered promiscuous mode [ 309.054753][T14215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 309.069786][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 309.510695][T14216] netlink: 'syz.0.2133': attribute type 11 has an invalid length. [ 310.048994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029390400: rx timeout, send abort [ 310.050507][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b6ed400: rx timeout, send abort [ 310.050843][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029390400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.051630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b6ed400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.291087][T14259] bridge6: entered allmulticast mode [ 310.651758][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 310.662211][T14280] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 310.982243][T14297] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.153066][T14309] lo: entered promiscuous mode [ 311.158898][T14309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.800169][T14250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.007206][T14315] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 313.013934][T14315] syzkaller1: group set to 0 [ 313.123093][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2158'. [ 313.325942][T14341] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2165'. [ 313.555100][T14354] netlink: 'syz.3.2169': attribute type 3 has an invalid length. [ 313.755432][T14363] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2172'. [ 316.243647][T14333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.502265][T14372] netlink: 'syz.0.2176': attribute type 33 has an invalid length. [ 316.534824][T14375] nbd5: detected capacity change from 0 to 63 [ 316.583901][ T52] block nbd5: Receive control failed (result -32) [ 316.681595][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2179'. [ 316.731257][ T1975] block nbd5: Dead connection, failed to find a fallback [ 316.735502][ T1975] block nbd5: shutting down sockets [ 316.735519][ T1975] blk_print_req_error: 49 callbacks suppressed [ 316.735531][ T1975] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.735557][ T1975] buffer_io_error: 138 callbacks suppressed [ 316.735567][ T1975] Buffer I/O error on dev nbd5, logical block 0, async page read [ 316.737736][ T1975] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 316.737763][ T1975] Buffer I/O error on dev nbd5, logical block 1, async page read [ 316.737778][ T1975] Buffer I/O error on dev nbd5, logical block 2, async page read [ 316.737792][ T1975] Buffer I/O error on dev nbd5, logical block 3, async page read [ 316.737912][ T1975] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.737937][ T1975] Buffer I/O error on dev nbd5, logical block 0, async page read [ 316.738029][ T1975] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.738052][ T1975] Buffer I/O error on dev nbd5, logical block 1, async page read [ 316.738151][ T1975] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.738174][ T1975] Buffer I/O error on dev nbd5, logical block 2, async page read [ 316.739627][ T1975] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.739653][ T1975] Buffer I/O error on dev nbd5, logical block 3, async page read [ 316.739778][ T1975] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.739801][ T1975] Buffer I/O error on dev nbd5, logical block 0, async page read [ 316.739975][ T1975] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.739998][ T1975] Buffer I/O error on dev nbd5, logical block 1, async page read [ 316.740088][ T1975] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.740208][ T1975] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.744909][T10183] ldm_validate_partition_table(): Disk read failed. [ 316.768134][T10183] Dev nbd5: unable to read RDB block 0 [ 316.775798][T10183] nbd5: unable to read partition table [ 316.835210][T10183] ldm_validate_partition_table(): Disk read failed. [ 316.835838][T10183] Dev nbd5: unable to read RDB block 0 [ 316.840025][T10183] nbd5: unable to read partition table [ 316.930052][T14401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2182'. [ 316.965064][T14401] SET target dimension over the limit! [ 317.067962][T14395] vlan1: entered promiscuous mode [ 317.073928][T14395] bridge0: entered promiscuous mode [ 317.151830][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.151921][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.181032][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2184'. [ 317.547569][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 317.784945][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 317.784996][T14447] netlink: 'syz.4.2193': attribute type 30 has an invalid length. [ 317.785031][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2193'. [ 317.794543][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 317.857908][T14453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2194'. [ 317.978864][T14449] syzkaller0: entered promiscuous mode [ 317.978915][T14449] syzkaller0: entered allmulticast mode [ 318.168668][T14443] syzkaller1: entered promiscuous mode [ 318.168710][T14443] syzkaller1: entered allmulticast mode [ 318.412468][ T52] Bluetooth: hci4: link tx timeout [ 318.414554][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.427750][ T52] Bluetooth: hci4: link tx timeout [ 318.427768][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.487413][ T52] Bluetooth: hci4: link tx timeout [ 318.487444][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.510665][ T52] Bluetooth: hci4: link tx timeout [ 318.510694][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.904692][T14488] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2199'. [ 318.959278][T14489] netlink: 'syz.1.2199': attribute type 12 has an invalid length. [ 318.959308][T14489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2199'. [ 319.089581][ T52] Bluetooth: hci4: link tx timeout [ 319.089609][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.480831][ T52] Bluetooth: hci4: link tx timeout [ 319.487429][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.439265][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 320.661462][T14437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.693157][T14477] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 320.693204][T14477] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2197'. [ 320.693792][T14477] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 320.811482][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 320.860935][T14496] netlink: 'syz.3.2202': attribute type 2 has an invalid length. [ 321.134295][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'. [ 321.168450][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 321.435511][T14534] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2206'. [ 321.625321][T14541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2210'. [ 321.642438][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2211'. [ 321.680503][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2211'. [ 321.929431][T11020] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.938138][T11008] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.938183][T11008] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.938218][T11008] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.241254][T14573] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 322.278362][T11009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.472437][ T5630] Bluetooth: hci3: ACL packet too small [ 322.481888][ T5630] Bluetooth: hci3: ACL packet too small [ 323.160751][T14618] hsr_slave_1 (unregistering): left promiscuous mode [ 323.721540][T14647] netlink: 'syz.1.2231': attribute type 10 has an invalid length. [ 323.805628][T14647] syzkaller0: entered promiscuous mode [ 323.805681][T14647] syzkaller0: entered allmulticast mode [ 324.268578][T14680] __nla_validate_parse: 8 callbacks suppressed [ 324.277366][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 324.409728][T14687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2239'. [ 324.420057][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2239'. [ 324.517855][T14693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.786499][T14700] vlan1: entered allmulticast mode [ 324.786540][T14700] veth1_virt_wifi: entered allmulticast mode [ 324.821822][T14700] netlink: 'syz.1.2242': attribute type 7 has an invalid length. [ 325.093724][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'. [ 325.103810][T14715] netlink: 'syz.0.2248': attribute type 34 has an invalid length. [ 325.103830][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 325.107244][T14712] debugfs: '1ùà^!' already exists in 'ieee80211' [ 325.158077][T14711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2246'. [ 325.281836][T14716] sctp: [Deprecated]: syz.1.2246 (pid 14716) Use of int in maxseg socket option. [ 325.281836][T14716] Use struct sctp_assoc_value instead [ 325.525970][T14734] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 325.526020][T14734] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2253'. [ 325.526038][T14734] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 325.547764][T14734] veth7: entered promiscuous mode [ 325.547784][T14734] veth7: entered allmulticast mode [ 325.567449][T14735] x_tables: duplicate underflow at hook 3 [ 325.606052][T14735] netlink: Invalid conntrack timeout [ 325.606113][T14735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.717657][T14739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.733508][T14742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.884365][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 325.884420][T14752] netlink: 'syz.4.2255': attribute type 5 has an invalid length. [ 325.884438][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2255'. [ 325.976247][T14752] geneve3: entered promiscuous mode [ 325.982676][T14752] geneve3: entered allmulticast mode [ 325.990798][T11008] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 325.991000][T11008] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 325.991034][T11008] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 325.991715][T11008] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 326.224438][T14772] tc action pedit offset must be on 32 bit boundaries [ 326.243275][T14763] digital: digital_start_poll: Unknown protocol [ 326.513635][T14781] tipc: Failed to remove unknown binding: 66,1,1/12429994:2704741402/2704741404 [ 326.525121][T14781] tipc: Failed to remove unknown binding: 66,1,1/12429994:2704741402/2704741404 [ 326.530051][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2265'. [ 326.530083][T14784] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 326.530096][T14784] netlink: 'syz.0.2265': attribute type 2 has an invalid length. [ 326.703977][T14793] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 326.728212][T14796] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 326.903118][T14810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.302422][T14825] tun0: tun_chr_ioctl cmd 1074025675 [ 327.302469][T14825] tun0: persist enabled [ 327.302984][T14825] netlink: 'syz.3.2278': attribute type 1 has an invalid length. [ 327.392881][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 327.570331][T14835] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 327.632197][ T31] audit: type=1804 audit(1788903190.712:11): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2281" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2408 res=1 errno=0 [ 327.632283][ T31] audit: type=1800 audit(1788903190.712:12): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2281" name="cgroup.controllers" dev="tmpfs" ino=2408 res=0 errno=0 [ 327.756767][T14838] x_tables: unsorted underflow at hook 4 [ 328.114000][T14850] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 328.412975][T14866] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.435887][T14854] 8021q: VLANs not supported on ip_vti0 [ 328.437466][T14853] 8021q: VLANs not supported on ip_vti0 [ 328.466461][T14866] bond9: (slave geneve4): making interface the new active one [ 328.474890][T14866] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 328.566054][T14872] IPVS: set_ctl: invalid protocol: 9602 224.0.0.2:20000 [ 328.794051][T14884] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.798025][T14884] validate_nla: 2 callbacks suppressed [ 328.798041][T14884] netlink: 'syz.0.2297': attribute type 29 has an invalid length. [ 329.118117][T14898] netlink: 'syz.0.2302': attribute type 97 has an invalid length. [ 329.118168][T14898] netlink: 'syz.0.2302': attribute type 97 has an invalid length. [ 329.346871][T14914] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 329.570800][T14923] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 329.616574][T14927] __nla_validate_parse: 15 callbacks suppressed [ 329.616698][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 329.616750][T14927] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 329.630579][T14923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.654812][T14923] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 329.667054][T14923] bond10: entered allmulticast mode [ 329.686685][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 329.686726][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 329.816678][T14933] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 330.305988][T14962] veth0: entered promiscuous mode [ 330.356668][T14960] veth0: left promiscuous mode [ 330.522482][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2322'. [ 330.574291][T14975] h: entered promiscuous mode [ 330.613371][T14979] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 330.674065][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 330.684774][T14982] openvswitch: netlink: Tunnel attr 0 has unexpected len 32 expected 8 [ 330.702299][T14971] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 330.834605][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2323'. [ 330.941879][T14992] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2327'. [ 331.093015][T15001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2329'. [ 331.201574][T15006] netlink: 'syz.2.2328': attribute type 7 has an invalid length. [ 331.560715][T15022] netlink: 'syz.1.2332': attribute type 4 has an invalid length. [ 331.576310][T15024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2334'. [ 331.576352][T15024] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2334'. [ 331.578382][T15023] netlink: 'syz.1.2332': attribute type 4 has an invalid length. [ 331.579678][T15022] netlink: 'syz.1.2332': attribute type 4 has an invalid length. [ 331.995220][T15044] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 333.120016][T10993] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.120192][T10993] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 333.121199][T10993] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.121234][T10993] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 333.121276][T10993] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.121306][T10993] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 333.379047][T15076] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 333.400819][T15076] bond11 (unregistering): Released all slaves [ 333.610181][T15091] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 333.649936][T15091] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.789338][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 335.265617][T15059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.604949][T15136] __nla_validate_parse: 6 callbacks suppressed [ 335.605871][T15136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2354'. [ 335.620733][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 335.757275][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 335.771220][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 336.402942][T15180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 336.403070][T15180] syzkaller1: linktype set to 823 [ 336.801423][T15206] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2368'. [ 336.813602][T15207] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2368'. [ 337.118738][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2371'. [ 337.118794][T15229] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 337.171547][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 337.218539][T15232] bridge0: port 1(batadv1) entered blocking state [ 337.218706][T15232] bridge0: port 1(batadv1) entered disabled state [ 337.218849][T15232] batadv1: entered allmulticast mode [ 337.242303][T15232] batadv1: entered promiscuous mode [ 337.494183][T15248] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2376'. [ 337.682849][T11030] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 337.682893][T11030] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 337.925479][T15266] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 339.748425][T15202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.994303][T15290] openvswitch: netlink: Duplicate key (type 6). [ 340.006215][T15294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2385'. [ 340.098733][T15306] openvswitch: netlink: IP tunnel dst address not specified [ 340.398688][T15321] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.271018][T11008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.429350][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.090313][T15358] __nla_validate_parse: 5 callbacks suppressed [ 367.090393][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2391'. [ 367.126653][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 367.141886][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.408337][T15382] netlink: 'syz.1.2398': attribute type 2 has an invalid length. [ 367.484852][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.510225][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.510487][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.510691][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.510900][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.511101][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.511305][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.541454][T15368] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 367.646395][T15390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.032901][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2403'. [ 368.609673][T15443] ipt_REJECT: TCP_RESET invalid for non-tcp [ 368.863519][T15455] Bluetooth: hci0: unsupported parameter 5135 [ 368.863564][T15455] Bluetooth: hci0: unsupported parameter 8192 [ 368.863616][T15455] Bluetooth: hci0: unsupported parameter 5135 [ 368.863636][T15455] Bluetooth: hci0: unsupported parameter 8192 [ 368.893709][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2417'. [ 368.893764][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2417'. [ 368.974045][T15464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.171586][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 369.645214][T15499] ip6tnl0: Caught tx_queue_len zero misconfig [ 369.815700][ T5630] block nbd6: Receive control failed (result -32) [ 370.840513][T15562] tipc: Started in network mode [ 370.840559][T15562] tipc: Node identity 2003, cluster identity 4711 [ 370.840574][T15562] tipc: Node number set to 8195 [ 371.022412][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2442'. [ 371.022461][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2442'. [ 371.087410][T15571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2441'. [ 371.365981][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2445'. [ 371.410962][T11030] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.413776][T11030] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.435800][T11030] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.452487][T11030] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.576148][T15651] __nla_validate_parse: 9 callbacks suppressed [ 372.576202][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2457'. [ 372.951720][T15660] syzkaller1: entered promiscuous mode [ 372.951772][T15660] syzkaller1: entered allmulticast mode [ 373.034467][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 373.232704][T15681] validate_nla: 60 callbacks suppressed [ 373.238663][T15681] netlink: 'syz.0.2465': attribute type 12 has an invalid length. [ 373.282645][T15682] netlink: 'syz.4.2464': attribute type 2 has an invalid length. [ 373.291707][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2464'. [ 373.425998][T15690] tunl0: Caught tx_queue_len zero misconfig [ 373.461889][T15689] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2466'. [ 373.461995][T15689] bond0: Caught tx_queue_len zero misconfig [ 373.487911][T15686] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2466'. [ 373.804765][T15707] openvswitch: netlink: Duplicate or invalid key (type 0). [ 374.095344][T15723] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 374.564826][T15747] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2487'. [ 374.722346][T15749] netlink: 'syz.2.2488': attribute type 12 has an invalid length. [ 374.731292][T15749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2488'. [ 374.748243][T15749] block nbd0: reconnected socket [ 374.764156][T15749] block nbd0: Unsupported socket: should be TCP or UNIX. [ 374.771704][ T5630] block nbd0: Receive control failed (result -32) [ 374.947123][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 374.947226][T15763] bridge_slave_1: left allmulticast mode [ 374.947248][T15763] bridge_slave_1: left promiscuous mode [ 374.947511][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.986409][T15763] bridge_slave_0: left allmulticast mode [ 374.986459][T15763] bridge_slave_0: left promiscuous mode [ 374.986708][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.166351][T15766] lo speed is unknown, defaulting to 1000 [ 375.337311][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 375.374616][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 375.870044][T15807] netlink: Unknown conntrack attr (type=1286, max=9) [ 375.870103][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.714184][T15890] __nla_validate_parse: 2 callbacks suppressed [ 377.714243][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 377.816779][T15893] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2521'. [ 377.816831][T15893] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2521'. [ 377.817179][T15893] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 378.557509][T15933] netlink: 'syz.3.2531': attribute type 9 has an invalid length. [ 378.591723][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.598240][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878301][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2534'. [ 379.059934][T15957] netlink: 'syz.3.2537': attribute type 2 has an invalid length. [ 379.059974][T15957] netlink: 'syz.3.2537': attribute type 2 has an invalid length. [ 379.123542][T15955] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 379.165271][T15955] veth0_to_bond: entered allmulticast mode [ 379.193058][T15955] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 379.216542][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2538'. [ 379.272133][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2541'. [ 379.298626][T15974] xfrm1: entered promiscuous mode [ 379.305759][T15974] xfrm1: entered allmulticast mode [ 379.537171][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'. [ 379.898992][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.075736][T11023] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.080452][T11020] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 380.096292][T16018] veth0_to_bond: entered allmulticast mode [ 380.130119][T11030] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.365682][T16036] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.646691][T16055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2564'. [ 380.756729][T16058] netlink: 'syz.0.2566': attribute type 1 has an invalid length. [ 380.845542][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 380.856038][T16058] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.977213][T16070] netlink: 'syz.3.2569': attribute type 32 has an invalid length. [ 381.224898][T16081] ksmbd: Unknown IPC event: 1, ignore. [ 381.778266][T16111] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 382.993551][T16158] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 383.214447][T16168] syzkaller0: entered promiscuous mode [ 383.214490][T16168] syzkaller0: entered allmulticast mode [ 383.462817][T16173] bridge0: port 2(bridge_slave_1) entered listening state [ 383.470269][T16173] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.698318][T16199] __nla_validate_parse: 1 callbacks suppressed [ 383.698372][T16199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2600'. [ 383.746590][ T5630] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 384.167217][T16229] netlink: 'syz.4.2610': attribute type 39 has an invalid length. [ 384.293184][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2611'. [ 384.628791][ T5630] Bluetooth: hci4: link tx timeout [ 384.628827][ T5630] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 384.813855][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 385.475325][T16316] sctp: [Deprecated]: syz.3.2631 (pid 16316) Use of int in maxseg socket option. [ 385.475325][T16316] Use struct sctp_assoc_value instead [ 385.502365][T16320] netlink: 'syz.2.2632': attribute type 30 has an invalid length. [ 385.568002][T16320] bond6: option arp_missed_max: invalid value (0) [ 385.568049][T16320] bond6: option arp_missed_max: allowed values 1 - 255 [ 385.577478][T16320] bond6 (unregistering): Released all slaves [ 385.650740][T16326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.673944][T16291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.740579][T16328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2635'. [ 385.953754][T16340] netlink: 'syz.1.2639': attribute type 3 has an invalid length. [ 386.270580][T11030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.594609][T16366] team0 (unregistering): Port device team_slave_0 removed [ 386.606210][T16366] team0 (unregistering): Port device team_slave_1 removed [ 386.622896][T16366] bond8: left allmulticast mode [ 386.627980][T16366] bond8: left promiscuous mode [ 386.641096][T16366] team0 (unregistering): Port device macvlan0 removed [ 386.660313][T16370] syzkaller0: entered promiscuous mode [ 386.660361][T16370] syzkaller0: entered allmulticast mode [ 386.672242][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 386.706034][ T5630] [ 386.708389][ T5630] ====================================================== [ 386.715428][ T5630] WARNING: possible circular locking dependency detected [ 386.722509][ T5630] syzkaller #0 Not tainted [ 386.726937][ T5630] ------------------------------------------------------ [ 386.733972][ T5630] kworker/u9:6/5630 is trying to acquire lock: [ 386.740127][ T5630] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 386.749044][ T5630] [ 386.749044][ T5630] but task is already holding lock: [ 386.756418][ T5630] ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 386.765062][ T5630] [ 386.765062][ T5630] which lock already depends on the new lock. [ 386.765062][ T5630] [ 386.775478][ T5630] [ 386.775478][ T5630] the existing dependency chain (in reverse order) is: [ 386.784498][ T5630] [ 386.784498][ T5630] -> #8 (dpm_list_mtx){+.+.}-{4:4}: [ 386.791947][ T5630] __mutex_lock+0x19d/0x1550 [ 386.797181][ T5630] device_pm_add+0x7d/0x350 [ 386.802230][ T5630] device_add+0x4eb/0xb80 [ 386.807104][ T5630] device_create+0x269/0x300 [ 386.812225][ T5630] msr_device_create+0x33/0x50 [ 386.817565][ T5630] cpuhp_invoke_callback+0x434/0x810 [ 386.823386][ T5630] cpuhp_thread_fun+0x362/0x780 [ 386.828762][ T5630] smpboot_thread_fn+0x565/0xa70 [ 386.834225][ T5630] kthread+0x38b/0x480 [ 386.838812][ T5630] ret_from_fork+0x514/0xb70 [ 386.843942][ T5630] ret_from_fork_asm+0x1a/0x30 [ 386.849247][ T5630] [ 386.849247][ T5630] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 386.856803][ T5630] cpuhp_thread_fun+0x127/0x780 [ 386.862179][ T5630] smpboot_thread_fn+0x565/0xa70 [ 386.867641][ T5630] kthread+0x38b/0x480 [ 386.872236][ T5630] ret_from_fork+0x514/0xb70 [ 386.877348][ T5630] ret_from_fork_asm+0x1a/0x30 [ 386.882638][ T5630] [ 386.882638][ T5630] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 386.890375][ T5630] cpus_read_lock+0x42/0x160 [ 386.895490][ T5630] static_key_slow_inc+0x12/0x30 [ 386.900976][ T5630] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 386.907254][ T5630] nbd_genl_foreach_sock+0x265/0x450 [ 386.913088][ T5630] nbd_genl_reconfigure+0xbbb/0x1040 [ 386.918901][ T5630] genl_family_rcv_msg_doit+0x233/0x340 [ 386.925035][ T5630] genl_rcv_msg+0x614/0x7a0 [ 386.930069][ T5630] netlink_rcv_skb+0x226/0x4a0 [ 386.935355][ T5630] genl_rcv+0x28/0x40 [ 386.939862][ T5630] netlink_unicast+0x7bd/0x940 [ 386.945146][ T5630] netlink_sendmsg+0x813/0xb40 [ 386.950435][ T5630] sock_sendmsg_nosec+0x13a/0x180 [ 386.956045][ T5630] ____sys_sendmsg+0x54e/0x850 [ 386.961326][ T5630] ___sys_sendmsg+0x2a5/0x360 [ 386.966524][ T5630] __x64_sys_sendmsg+0x1b1/0x290 [ 386.971989][ T5630] do_syscall_64+0x166/0x520 [ 386.977192][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.983629][ T5630] [ 386.983629][ T5630] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 386.991283][ T5630] __mutex_lock+0x19d/0x1550 [ 386.996399][ T5630] nbd_queue_rq+0x373/0xff0 [ 387.001425][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 387.007570][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 387.014441][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 387.020947][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 387.026495][ T5630] process_scheduled_works+0xc3d/0x1630 [ 387.032567][ T5630] worker_thread+0xa47/0xfb0 [ 387.037686][ T5630] kthread+0x38b/0x480 [ 387.042276][ T5630] ret_from_fork+0x514/0xb70 [ 387.047385][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.052674][ T5630] [ 387.052674][ T5630] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 387.059883][ T5630] __mutex_lock+0x19d/0x1550 [ 387.065001][ T5630] nbd_queue_rq+0xc1/0xff0 [ 387.069943][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 387.076015][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 387.082865][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 387.089368][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 387.094914][ T5630] process_scheduled_works+0xc3d/0x1630 [ 387.100985][ T5630] worker_thread+0xa47/0xfb0 [ 387.106098][ T5630] kthread+0x38b/0x480 [ 387.110689][ T5630] ret_from_fork+0x514/0xb70 [ 387.115800][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.121093][ T5630] [ 387.121093][ T5630] -> #3 (set->srcu){.+.+}-{0:0}: [ 387.128219][ T5630] __synchronize_srcu+0xc9/0x2f0 [ 387.133698][ T5630] elevator_switch+0x1e8/0x7b0 [ 387.139049][ T5630] elevator_change+0x2fa/0x480 [ 387.144340][ T5630] elevator_set_default+0x375/0x440 [ 387.150075][ T5630] blk_register_queue+0x3f3/0x4e0 [ 387.155682][ T5630] __add_disk+0x6cb/0xe30 [ 387.160536][ T5630] add_disk_fwnode+0x100/0x3a0 [ 387.165820][ T5630] nbd_dev_add+0x733/0xb60 [ 387.170764][ T5630] nbd_init+0x168/0x1f0 [ 387.175522][ T5630] do_one_initcall+0x250/0x870 [ 387.180814][ T5630] do_initcall_level+0x10a/0x1a0 [ 387.186395][ T5630] do_initcalls+0x59/0xa0 [ 387.191246][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 387.196966][ T5630] kernel_init+0x22/0x1d0 [ 387.201816][ T5630] ret_from_fork+0x514/0xb70 [ 387.206924][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.212307][ T5630] [ 387.212307][ T5630] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 387.220273][ T5630] __mutex_lock+0x19d/0x1550 [ 387.225407][ T5630] elevator_change+0x1af/0x480 [ 387.230701][ T5630] elevator_set_none+0xb5/0x140 [ 387.236077][ T5630] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 387.242408][ T5630] nbd_start_device+0x189/0xb30 [ 387.247797][ T5630] nbd_genl_connect+0x167d/0x1cd0 [ 387.253347][ T5630] genl_family_rcv_msg_doit+0x233/0x340 [ 387.259424][ T5630] genl_rcv_msg+0x614/0x7a0 [ 387.264456][ T5630] netlink_rcv_skb+0x226/0x4a0 [ 387.269740][ T5630] genl_rcv+0x28/0x40 [ 387.274247][ T5630] netlink_unicast+0x7bd/0x940 [ 387.279533][ T5630] netlink_sendmsg+0x813/0xb40 [ 387.284823][ T5630] sock_sendmsg_nosec+0x13a/0x180 [ 387.290388][ T5630] ____sys_sendmsg+0x54e/0x850 [ 387.295677][ T5630] ___sys_sendmsg+0x2a5/0x360 [ 387.300874][ T5630] __x64_sys_sendmsg+0x1b1/0x290 [ 387.306332][ T5630] do_syscall_64+0x166/0x520 [ 387.311449][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.317864][ T5630] [ 387.317864][ T5630] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 387.326526][ T5630] blk_alloc_queue+0x544/0x690 [ 387.331816][ T5630] __blk_mq_alloc_disk+0x194/0x390 [ 387.337446][ T5630] nbd_dev_add+0x494/0xb60 [ 387.342384][ T5630] nbd_init+0x168/0x1f0 [ 387.347060][ T5630] do_one_initcall+0x250/0x870 [ 387.352356][ T5630] do_initcall_level+0x10a/0x1a0 [ 387.357819][ T5630] do_initcalls+0x59/0xa0 [ 387.362670][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 387.368389][ T5630] kernel_init+0x22/0x1d0 [ 387.373238][ T5630] ret_from_fork+0x514/0xb70 [ 387.378346][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.383635][ T5630] [ 387.383635][ T5630] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 387.390844][ T5630] __lock_acquire+0x15ff/0x2e50 [ 387.396235][ T5630] lock_acquire+0x115/0x350 [ 387.401266][ T5630] fs_reclaim_acquire+0x71/0x100 [ 387.406743][ T5630] __kmalloc_noprof+0xbc/0x720 [ 387.412031][ T5630] kobject_get_path+0xc5/0x2f0 [ 387.417388][ T5630] kobject_move+0x2fa/0x720 [ 387.422412][ T5630] device_move+0xe0/0x720 [ 387.427260][ T5630] hci_conn_del_sysfs+0xb8/0x1a0 [ 387.432766][ T5630] hci_conn_del+0xc3d/0x1200 [ 387.437898][ T5630] hci_abort_conn_sync+0xdd0/0x1190 [ 387.443647][ T5630] hci_cmd_sync_work+0x20b/0x3f0 [ 387.449133][ T5630] process_scheduled_works+0xc3d/0x1630 [ 387.455205][ T5630] worker_thread+0xa47/0xfb0 [ 387.460316][ T5630] kthread+0x38b/0x480 [ 387.464902][ T5630] ret_from_fork+0x514/0xb70 [ 387.470008][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.475302][ T5630] [ 387.475302][ T5630] other info that might help us debug this: [ 387.475302][ T5630] [ 387.485526][ T5630] Chain exists of: [ 387.485526][ T5630] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 387.485526][ T5630] [ 387.497798][ T5630] Possible unsafe locking scenario: [ 387.497798][ T5630] [ 387.505254][ T5630] CPU0 CPU1 [ 387.510615][ T5630] ---- ---- [ 387.516012][ T5630] lock(dpm_list_mtx); [ 387.520169][ T5630] lock(cpuhp_state-up); [ 387.527016][ T5630] lock(dpm_list_mtx); [ 387.533691][ T5630] lock(fs_reclaim); [ 387.537677][ T5630] [ 387.537677][ T5630] *** DEADLOCK *** [ 387.537677][ T5630] [ 387.545846][ T5630] locks held by kworker/u9:6/5630: 5, last CPU#0: [ 387.552308][ T5630] #0: ffff888077624140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.563108][ T5630] #1: ffffc900041d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.575638][ T5630] #2: ffff88802f578ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 387.585473][ T5630] #3: ffff88802f5780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 387.595218][ T5630] #4: ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 387.604189][ T5630] [ 387.604189][ T5630] stack backtrace: [ 387.610074][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 387.619530][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.629586][ T5630] Workqueue: hci4 hci_cmd_sync_work [ 387.634804][ T5630] Call Trace: [ 387.638079][ T5630] [ 387.641042][ T5630] dump_stack_lvl+0xe8/0x150 [ 387.645679][ T5630] print_circular_bug+0x2e2/0x300 [ 387.650712][ T5630] check_noncircular+0x12f/0x150 [ 387.655653][ T5630] __lock_acquire+0x15ff/0x2e50 [ 387.660508][ T5630] ? __bfs+0x153/0x290 [ 387.664606][ T5630] ? __pfx_hlock_conflict+0x10/0x10 [ 387.669811][ T5630] lock_acquire+0x115/0x350 [ 387.674314][ T5630] ? __kmalloc_noprof+0xbc/0x720 [ 387.679256][ T5630] ? __lock_acquire+0x14b9/0x2e50 [ 387.684285][ T5630] ? kobject_get_path+0xc5/0x2f0 [ 387.689223][ T5630] fs_reclaim_acquire+0x71/0x100 [ 387.694169][ T5630] ? __kmalloc_noprof+0xbc/0x720 [ 387.699116][ T5630] __kmalloc_noprof+0xbc/0x720 [ 387.703897][ T5630] ? get_device_parent+0x20d/0x3a0 [ 387.709011][ T5630] ? kobject_get_path+0xc5/0x2f0 [ 387.713945][ T5630] ? kobject_get_path+0xc5/0x2f0 [ 387.718884][ T5630] kobject_get_path+0xc5/0x2f0 [ 387.723647][ T5630] kobject_move+0x2fa/0x720 [ 387.728154][ T5630] ? __pfx_kobject_move+0x10/0x10 [ 387.733178][ T5630] ? do_raw_spin_unlock+0xf5/0x200 [ 387.738302][ T5630] ? get_device_parent+0x366/0x3a0 [ 387.743439][ T5630] device_move+0xe0/0x720 [ 387.747774][ T5630] hci_conn_del_sysfs+0xb8/0x1a0 [ 387.752716][ T5630] hci_conn_del+0xc3d/0x1200 [ 387.757305][ T5630] ? hci_abort_conn_sync+0xa7b/0x1190 [ 387.762678][ T5630] hci_abort_conn_sync+0xdd0/0x1190 [ 387.767878][ T5630] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 387.773510][ T5630] ? abort_conn_sync+0x26/0x210 [ 387.778367][ T5630] ? abort_conn_sync+0x26/0x210 [ 387.783216][ T5630] ? abort_conn_sync+0x19c/0x210 [ 387.788152][ T5630] ? __pfx_abort_conn_sync+0x10/0x10 [ 387.793438][ T5630] hci_cmd_sync_work+0x20b/0x3f0 [ 387.798381][ T5630] ? process_scheduled_works+0x97a/0x1630 [ 387.804103][ T5630] process_scheduled_works+0xc3d/0x1630 [ 387.809671][ T5630] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.815658][ T5630] ? assign_work+0x3cf/0x5d0 [ 387.820250][ T5630] worker_thread+0xa47/0xfb0 [ 387.824852][ T5630] kthread+0x38b/0x480 [ 387.828922][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 387.834041][ T5630] ? __pfx_kthread+0x10/0x10 [ 387.838635][ T5630] ret_from_fork+0x514/0xb70 [ 387.843223][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 387.848340][ T5630] ? __switch_to+0xc89/0x1420 [ 387.853022][ T5630] ? __pfx_kthread+0x10/0x10 [ 387.857614][ T5630] ret_from_fork_asm+0x1a/0x30 [ 387.862391][ T5630] [ 387.871591][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 387.871640][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 387.915652][ T52] Bluetooth: hci4: hardware error 0x00 [ 389.949201][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110