last executing test programs: 7.781227126s ago: executing program 4 (id=4651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xb}}, {0xfffffffffffffc52, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) 7.583005063s ago: executing program 1 (id=4653): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'pim6reg0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00`\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x20049000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f00000002c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2081}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 7.393132169s ago: executing program 4 (id=4654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1ac0400ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d2d5f2c28"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e17000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x400000000010, 0x3, 0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000001140)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20004804) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r7, &(0x7f0000001180)=ANY=[@ANYBLOB="71050108010080670805080b0f020027b19414b242ab24c108c70653d3994a1f03fc2243e2f273c24bd8bf1d936c335d8f9b98f5cd756d99779c16fe8a61b504fe22796ac46a40d82d99c4290a82e58e30c8c6bd7ffd4312078c60ba342f07755ace20302fa8caad2f3abe6f91018ebf07d4d6d0ba463f49797f9f1bbd74890494f2eea59ee16c02594a32de93994010d67891f20267974a0eaaf82a7dd8e3f24ff8a92398421f905634c951e298263b97d4bef407c43197d9"], 0xf) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 6.089316499s ago: executing program 4 (id=4660): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x4000}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x28, 0x8, 0x3f, 0x800}, {0x16, 0x4, 0x2, 0xfffffffe}]}) listen(r0, 0x372) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4048041) unshare(0x24020400) r2 = socket$tipc(0x1e, 0x5, 0x0) pwrite64(r2, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x4000010, r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x5e10c2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0xa0000004}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0xfffffffffffffe74) r7 = socket(0x6, 0x3, 0x3) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000380)="550000001100290404850698fae99e0002000000000000", 0x17) setsockopt(r7, 0x107, 0xf, &(0x7f00000003c0)="00008634", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtclass={0x4c, 0x28, 0x302, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x801d}, {0x0, 0xa}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xc, 0x76}}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}, @tclass_kind_options=@c_netem={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 6.009563423s ago: executing program 2 (id=4661): r0 = socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="b40800000000000073113b00000000008510000002000000b7000000000000009500c20000000000950000120000000055a35c09e24b42142db43410e374fe5e63b42bac31b7f45b8affbd6ff9ff0ba5276b"], 0x0, 0x4}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 5.909247916s ago: executing program 1 (id=4663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c800}, 0x4040) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080)=0x80000001, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x4d) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$netlink(0x10, 0x3, 0x0) getuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)={0x8c, 0x40, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="66f58aa008461ed25d10146136987f7a9056f771339d036a01500ea6836b914d9bba6a1091eb02c5cf29de338bd28aaa7ea4d70ac5f4f30e3a62b8b692ecf39a2c28eabe9d4e86806e20bce78bb1f61547fea9b3d28f3c79be9baa8a8af61b54e7fc3c8730a3a433a4f3d4d66c33864584be", @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@remote}, @generic]}, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x34040005}, 0x48024) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000480)={'wlan0\x00'}) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000100)=0x80000000, 0x4) sendmmsg$inet(r2, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x20000004) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r4, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f00000004c0)=0x8, 0x12) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, &(0x7f0000000540)=0x87ffffe, 0x6, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) 5.754984555s ago: executing program 2 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7ffffffe, @remote}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 5.693273858s ago: executing program 0 (id=4665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x12}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_ZONE={0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2c4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000300)=0x3, 0x4) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) 5.550032092s ago: executing program 2 (id=4666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000001c40)=[{&(0x7f0000001c80)="92", 0x1}], 0x1) pipe(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x6) write$bt_hci(r7, &(0x7f0000001d00)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc9}}}, 0x6) pselect6(0x40, &(0x7f0000001d40)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000001d80)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r5, 0x0, 0x0) bind$inet(r2, &(0x7f0000000a40)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$key(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0x10}}, 0x0) sendmsg$rds(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/4092, 0xffc}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getlink={0x34, 0x12, 0x10, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x642, 0x8521}, [@IFLA_PHYS_SWITCH_ID={0xb, 0x24, "2c0f8c70983c32"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2d}]}, 0x34}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000206010300000000080000000000000605000100070000000900020073797a3000000000140007800800134000040060080012400000000a0500050002000001050004000000002016000300686173683a6e65742c706f72742c6e6574000000dd0f09179c3123"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4673}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x88}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xb}]}}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc7}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x59}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb51b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0xf0}}, 0x20000040) close(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 5.489759123s ago: executing program 1 (id=4667): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xb019, &(0x7f0000000380)=""/234}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000002000010c00000000000000000a1400000000000000000000140003006c6f000000000000000000000000000014000200fe8000000000000000000000000000aa1400020020010000000000000000000000000000140001"], 0x94}}, 0x0) 5.225058675s ago: executing program 3 (id=4669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x4, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x8, 0x6, "649d29", 0x28, 0x6, 0x1, @loopback, @empty, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4e24, 0x4e22, 0x4, 0x2}}}}}}}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x24008080) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}}}}}, 0x32) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6], 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b40), r1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b80)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000a800800010001000000090002"], 0x4c}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r7, 0x10a, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 5.212892657s ago: executing program 1 (id=4670): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000980)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000700)={@remote, r2}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000180)=0x40000006, 0x4) mmap(&(0x7f00002e0000/0x2000)=nil, 0x2000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0xa, 0xde, &(0x7f0000000580)=""/222, 0x0, 0x8, '\x00', r2}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x500, 0x0, &(0x7f0000000740)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3e426abdd928ed986124570fec3b0cc024da9664fbdd9382d2073c3feff9662b101eb944e05c36bda0895563e9c51ad4e82e9dc0e3d12f20b049623682bc1541b9b8b3344684be59daa8bae26e68eaf3edf3451b19fa04dd1964a6ad0e277bb73a7dab3dc093e19370af5be94ae045de69b80a3bf483edd500f959f6f9f9d607ed638553e483be9b81a0b9add33a304c349078c9ba9680232bdb689ac9c1f0213ad533fdd6ce63ea7d7a6a9c66d839aa2dec1b9a039dae199954d33ef03bb4c4c713269854613281f51435a27edd49f2cf43588c4eaa9efb4cda171fcbad", @ANYRESHEX=r4, @ANYRESDEC=r6, @ANYRESHEX=r5], 0x18}, 0x19}, 0x804) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000240)=0x10000005, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000480)=0x9e, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000280)={0xa, 0x4e20, 0x7, @mcast1}, 0x1c) 5.104899058s ago: executing program 3 (id=4671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa2e7d6d7da8ffd50}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000000400000004000000fd"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.969301718s ago: executing program 3 (id=4672): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x10005}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0xce03b2}, 0x9c) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000000500)=""/102396, &(0x7f0000019500)=0x18ffc) (async) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async, rerun: 64) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="b518691ecbab43219bfd7d7d4946527eb45715c66adfc6d17c35a58f3b05209044", 0x21, 0x800, &(0x7f00000195c0)={0x11, 0x9, r6, 0x1, 0x83, 0x6, @random="fb2e20b069c5"}, 0x14) (rerun: 64) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000c384c4119f4473819e8b942c00000018110400", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x40, 0x4) 4.739137769s ago: executing program 0 (id=4673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0418bb00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf2500000000080009000000000008000800040000000800050000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4040800) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000080)=0xd, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000080)=0xd, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000001680)='wg1\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000016c0)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001700)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, r4}, 0xc) (async) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001700)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, r4}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000200000d"], &(0x7f0000000680)=""/4089, 0x4a, 0xff9, 0x1, 0x32e}, 0x28) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000380)={r7, r8/1000+10000}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f00000003c0)=0x100000) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="ffbc", 0x2}], 0x1}, 0xc001) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932da564405cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r10, @ANYBLOB="14005500f7f8e05e18006b5c49298e65e77661361400fe0037cc97692e0df5a9fba57a9d46d363311400fe005bd32b92e3fc8703ccaf7bbc84e71a7e"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.692532215s ago: executing program 4 (id=4674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28008002) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x30}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x80) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xa, 0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x80, 0x9}, {0xf7, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x9, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x22, 0x2}, {0x4, 0x5}, {0x8, 0x1}, {0x6, 0x1}], "abe7555730cddaf3"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {0x1, 0x3}, {0x5, 0x6}], "966f6e0216c98ed4"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xff, 0x2}, {0x40, 0x3}], "5c9e99402bdee5e5"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x9, 0x3}, {0x5, 0x4}, {0x5}, {0x1, 0x4}, {0x9, 0x7}, {0x0, 0x7}, {0x8a, 0x4}, {0x20, 0x5}, {0x10, 0x6}, {0x0, 0x2}, {0x40, 0x4}, {0x61, 0x3}, {0x8, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x4}, {0x6, 0x2}], "bf141940a09d263f"}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x20001004) socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x0) sendmmsg(r7, &(0x7f0000001940)=[{{&(0x7f0000000800)=@l2={0x1f, 0x6, @none, 0x4, 0x2}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f00000018c0)=[{0x68, 0x10b, 0x728, "b858093d8768f2a5ce6e681643252bee285113ba02f54380b49befa113dd8f7be369bd27dea6f0a8b9fa1ab46e983942a42a7f689ac6d0e7b9716489a57a30477072ae90330441a64ba91fac8df304ded4dbf277"}], 0x68}}], 0x1, 0x8040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x48, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x20040800) syz_genetlink_get_family_id$l2tp(&(0x7f0000001b00), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000002b00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001b80)={0xefc, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x44c, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xae, 0xf, [@mesh_chsw={0x76, 0x6, {0x5, 0x48, 0x41, 0x4}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xb, 0x7f, @device_a, 0x2, 0x8001, 0x9}}, @random_vendor={0xdd, 0x89, "df3486be4f76a2bcf0c3db76ec04b1525fc81b6d1cf8b227c0a341078d1cd177ad065222ad30855f027e6d1643efd297b9a066c7dc7f3cbc1f4a0000a2712098d69f6f2a50042591707decbfafb315277c4f24ecbf583a36c090bc3c386325d8e927546534f5066684c378064bbc601e7374bbf14776391643f68ba0df82fbd51e35738a417c88a867"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1d, 0x80, [@ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6c, 0xa0, 0x40}}, @mesh_chsw={0x76, 0x6, {0xdd, 0x81, 0x32, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x185, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0xb10}, @device_a, @broadcast, @initial, {0x4, 0x6}}, 0x1, @default, 0x4405, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x78}}, @void, @val={0x3c, 0x4, {0x0, 0x2, 0x3c, 0x8a}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x9, 0x1a, 0xffff}}, [{0xdd, 0x6c, "c9b3b900c77e059af952bb4a6ab4377d535c274a3c3fc44b1aa99fab941c57ed2489237b7c5a04810d7c45ddc80f74fa9d9cd84dcd9ee427fbd7a3bc8b2971f9e7ce37cc1c9ac98e7e74b060acab875c5281d6e8d86c988a0838736bbe955e34ee628a44c6d6b19c22e95824"}, {0xdd, 0xcf, "1074b5f1f8592d8f76f4522624e1c5fe4d9b878312a408b4a5ec970e6362d4530ba718ac117c84a66f0ed81155d19aca1ae34b52b500817e3c76c462164b20deecbdaf74cc5890cf12d139160c3c392c8fb641a19707bbae62d9885206aa688947a65641a884f61d1b1a07b78b95cf0aa7975c33c7c1a6afe3279a21b16d27094bc32eb38cc86e15cca580852e3c458844430f503f559b7c209a15b90ff74598235c85d30401c72176ba92295ab995053ba3e5cca436fbee77604225efd080dbb0285b4ab438b99367a6e6666d322d"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1c, 0x7f, [@ssid={0x0, 0x16, @random="87194b18777d70e832fe122d57bd794b895492e6d337"}]}, @NL80211_ATTR_PROBE_RESP={0x4d5, 0x91, "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"}, @NL80211_ATTR_IE={0x216, 0x2a, [@perr={0x84, 0xe2, {0x2, 0xe, [{{0x0, 0x1}, @device_a, 0x44, @value=@device_b, 0x19}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x42}, {{0x0, 0x1}, @broadcast, 0x100, @value, 0x2c}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x42}, {{}, @device_a, 0x0, @void, 0xf}, {{}, @device_b, 0x8, @void, 0x3a}, {{}, @broadcast, 0x3}, {{}, @broadcast, 0x3, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x2a}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x37}, {{}, @broadcast, 0x7, @void, 0xff1}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x3a}, {{}, @device_a, 0x8, @void, 0x3f}, {{}, @device_b, 0x5, @void, 0x25}]}}, @preq={0x82, 0x30, {{0x1, 0x1}, 0xe, 0x0, 0x1000, @device_a, 0x1014, @void, 0x9a, 0xffffffff, 0x2, [{{}, @device_a, 0x4d2}, {{}, @device_a, 0x2de}]}}, @tim={0x5, 0xd3, {0x40, 0x73, 0x8, "1467374f644cd495fceebc3393cf753f1c1b76da127e6846ca63f1764f15243b3525156a1caad2ddc25d6873b99f7e9d39863fb29e71d39c829718ed60fea1a0d100fab79a4744c5a6c87416af96954478802a2fea2cd383da311489ccc7505ca225044f23c25ec33a7bc7cad6ffdec004fee7907b6ee9a12e169d41e90e1911c82d763fa47f446c8dec1ed94bcf14590ba78cfc5ea2a23424cb16a164cab07ed9df543b948c0f0b5c88121c34bd003efb3f5e87e6618825791ac7671d5085cbe4eaffb3aceb18c9cbbeee651d5fb510"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x40}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4b, 0xc, 0x8}}, @ibss={0x6, 0x2, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "40f0b6bc1fb040d9"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5fed735a65499be6"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0xefc}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000002b80)={0x8, &(0x7f0000002b40)=[{0x7, 0x0, 0x2, 0x7fffffff}, {0x2, 0x0, 0x8, 0x6d93}, {0x66a1, 0xa, 0x7, 0x5}, {0x9, 0x14, 0x0, 0x6}, {0x7ba, 0x7, 0xa6, 0x7}, {0x3, 0x9, 0x3, 0x6}, {0x6, 0x9, 0x0, 0x1}, {0x9, 0x9, 0x5, 0x68b3e5df}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002bc0)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r5, &(0x7f0000002d40)={&(0x7f0000002c00)={0x1d, r10, 0x2, {0x2, 0xf0, 0x1}, 0x1}, 0x18, &(0x7f0000002d00)={&(0x7f0000002c40)="7bd28a5c298f6f4166c1f0308d7ab4196665c22120c66e1a33e7f4fcaef736d07bb924f6ddbdf5c35c12a8af67a1d8b8eba3dd1d86de06c016d520f43d28bad88f83f977b4f81370d575f23f02aaa09a2fe744a8b2003f624d78ac0b04ef9fb002861a7ce3b8056ed9cc17453e48e5b7415bb8195b3ce3a55cc2e95fe7983ab69ddaf457fef47bf20e345892c374cdb331561a9cc8b792cf51", 0x99}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, r11, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000002f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x308, 0x0, 0x0, 0x0, 0x308, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000002ec0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1ff, 0x2, 0x1, [0x81, 0x4, 0x5, 0xfff9, 0x1, 0x87e7, 0x8, 0xa01a, 0x40, 0x7, 0x1, 0x6, 0x6, 0x3, 0x5], 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x8}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x19, 0x0, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xfffff001, 0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@private1, 0x37, 0x1b, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @ipv6=@loopback, 0x37, 0x27, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000035c0), 0x141001, 0x0) ioctl$TUNSETNOCSUM(r13, 0x400454c8, 0x1) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000003600)) 4.488355458s ago: executing program 4 (id=4675): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000004b00)=ANY=[@ANYRESDEC=r0, @ANYBLOB="80691059a07698a9530f1f3ac9b4839a6ffd24f3f770adef4f41c5afa265c07c1fa10e93c6440eee3c683299b770f61ed13cfdd4f479718f1d9aab8d80c312a5f5b838fcdf95f13617cbd609b050dd0c2c4ee1333c56e182cdb4bbd2b257a5bd1aae40364217fb74ca7ff840196f4fdbf9075e11d837411c0fbd5b39a83d82eb49e3a58bb4766f8faad0795f6a6e3a07e83c1284265dd7", @ANYRESHEX=r0], 0x0, 0x1a}, 0x28) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000480)={0x3, &(0x7f0000000000)=[{0x4680, 0x0, 0x0, 0x6}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0xe, 0x0, &(0x7f00000006c0)="259a53f271a76d2600004c65c849", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000800)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$rds(r5, &(0x7f0000000840)={&(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/70, 0x46}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000039c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x48000}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000004ac0)={'vcan0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) bind$can_j1939(r9, &(0x7f0000000180)={0x1d, r8, 0x100001, {0x0, 0xf0, 0x3}}, 0x18) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000049c0)={0x0, r3, r4, 0x3, 0x7ff, '\x00', {0x3, 0xad08, 0x1ff, 0xe, 0x8, 0x9, 0x0, 0x8001, {0x10, 0x6}, {0x3, 0x5}, {0x6, 0xc4}, 0x7, 0xa, 0x1, 0x0, 0x8, 0x0, 0x3be, 0xf4, 0x929, 0x6, '\x00', 0x153, 0xd28, 0x17, 0x4}}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="010426bd7000f8dbdf2502000000080001006f01c3eaffa49db8687351b4f82db2ffa9f90c94e3dcad8b6ec7f882fb36806046f8a35c61eff25762d726f360feb7938c90e11398cd6408796554193f43e43156688f8b963c2a878553382f238a169396d85e073c70a7301e10eaa8a8a62fe9c290dd882032d695365078b0f95695d15e4d65fd5f9442195fe60aa4080c17d64da93a0f", @ANYRES32=r11], 0x1c}}, 0x4008054) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004a80)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) 4.459964601s ago: executing program 0 (id=4676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x5011, r1, 0x1000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x40) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000940)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080900000000000000000c0004000000"], 0x58}}, 0x0) (async) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x40) 4.438746895s ago: executing program 2 (id=4677): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018e1bb00000084a7e1b1315d0c00000000000000000000000000008405000000006d5f5f00"], 0x0, 0x29, 0x0, 0x1, 0xc}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x9, 0x2}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xe, 0x4}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000d80)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000dc0)={&(0x7f0000000e00)=@xdp={0x2c, 0x7, r6, 0x3d}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="5b9d6d112901364495", 0x9}], 0x1}, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x3eb}, [], {0x14, 0x3ea, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000e79f47d535cb498220dae96600000021493e00", @ANYRESOCT=r5, @ANYBLOB="00012dbd7000fedbdf258f000000080003000f00000005000a00010000000500190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4005) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="000100001600010000000000000000000a010101000000000000000000000000fc000000000000000000000000000001fffe00004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800fffd32000000ffffffff0000000000000000000000000000000200000000fcffffffffffffff00000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000800000000000000000000002ebd7000000000000a00000200000000000000000000000000000000050021000200"/184], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fda552250700000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f00000008c0)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000900)=""/222, 0x0, 0x8}, 0x78) socket$kcm(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) 4.328850936s ago: executing program 0 (id=4678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001700", @ANYRES32=0xee01], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x6, 0x10}, 0xc) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', 0x0, r4}, 0x50) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x230, 0x39, 0x2, 0x70bd2a, 0x25dfdbff, {0xc}, [@nested={0x153, 0x41, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @nested={0x4, 0x142}, @typed={0x8, 0x75, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x100}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x4}, @generic="03ca55609bff28e7bcf42cc8ae4226fd5eb1bcfedf0dcbc13d7e89ca03a5b1c13b4cc58c072196beb83ec13af39e94a6ba7c048c76e1d66a3deacab3df10dba3049ac0d5a548dd1c9e8d9276f2958a882e30e5c3045f4a91f55d86f253fc01791b76834a34b7103e74a7e28ef7344fe0", @generic="6ad0eb497b8d5f6b9c8aecbd74791fe23a03f864a80d9ae4dcd452de50dcd8c523d403f7940735f318049ebd6700f0965d7ec32a7f6c7874b97f6d20d4b7e1d37921cdf83e8de19fa6e1ab699a84adb917a71772c6d92ba292a8def9affd37b97cd376e14e7ff38ea564aad1917884b3a82b5e959bd6ad3bf0d0eddb6bd0c2e57a2ef8f28df0bf34a8b8f7dcb881ca1427d2e63fd2a3d70abf2a7777c58076680250f7d5899b779b6a385125d89106", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x3e}, @nested={0x4, 0x104}]}, @generic="4a7b47fb7670696eed2535ce5d60854b380c45409aac6fc4df89592cb2370182bb1c7865d4100bada1c1ea5aa3c1ddeba075a750e72509795ccbdd733b603dabaf1c0eb7343b6b6bb618464ddf55031213856f36addad25939d8a98bfc8dc80cc344b3749bd54a44c776bc69a2c16107780eca073f88e5a00c08cdc5a2fe27de45bcfee1ab93e8de335f7b4e814d3ae8be13a10cac2aaca9bfa8c1ec571a28299c41ae4f4172d8f358018d860e56e170cd0de9ff4d81b2"]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 4.16015866s ago: executing program 0 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 4.015593219s ago: executing program 3 (id=4680): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x100, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x5, r3}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 3.785114899s ago: executing program 1 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000040)={0xfffffffffffffe43, 0x0}) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000040)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff40) (async) read(r1, 0x0, 0xff40) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x10000, 0x1ff) (async) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x10000, 0x1ff) write$ppp(r1, &(0x7f0000000280)="8fe8", 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000001880)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x445487fe285ab466) 288.935614ms ago: executing program 0 (id=4682): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {0xff}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xffffffff}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@hl={{0x28}, {0x0, 0x15}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd, 0x2c, "e016c3e591de7472ff050d72c9c2d406b39b1b6d463aaa174fdfac6da101"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {0xff}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xffffffff}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@hl={{0x28}, {0x0, 0x15}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd, 0x2c, "e016c3e591de7472ff050d72c9c2d406b39b1b6d463aaa174fdfac6da101"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000ac0)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000ac0)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xa, &(0x7f0000000c00)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61}, @initr0, @exit]}, &(0x7f0000000c80)='GPL\x00', 0x4}, 0x94) bind$inet6(r2, &(0x7f0000000cc0)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x335, &(0x7f0000000d00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "436f13", 0x2ff, 0x2f, 0x0, @remote, @private1, {[@routing={0x89, 0x8, 0x0, 0x10, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x2, 0x66}, @routing={0x87, 0xa, 0x0, 0x2, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x3c, 0x6, 0x0, 0xfa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2]}, @srh={0x84, 0xe, 0x4, 0x7, 0x6, 0x50, 0xfff9, [@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0xc, 0x0, 0x5, 0x1, 0x0, 0x2, 0x62}, @srh={0x3c, 0x6, 0x4, 0x3, 0x5, 0x78, 0x82, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x32, 0x3, [0x5, 0x2], "a31dc7436627729e333d39e567d431ad65f42ac4541fc22a8fa8b6b25413323654f7a8ded46fba10999ae1597d13923aeb38"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "f95e7f000016871ab9bba71c42c83d878f74f9d3be00000000000000000000000000099b670c3f4a9810243ff66e168418f6809b7a7cc6ef660fbf2b15fc61c900958e2a6f2cb97aad4e8b96dd6c6c257ad2e2a248f3fb2545744dc3253f6462468271fd668d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0x9], "b87bd9827433d2ba60d9fbcccf42ac5f73305081ea14f31267de67ffd38edcc011db4d1f4c5c51ce686699bd5a5bb8e744957a7f9e7fda0c172e231a1cdf44d6701d8b7c2ee0a662364bb5aceda11ad1232b5a261316c62e76231934e408d5084256de7b9c876d1fb390b469def78d8d8e60b3"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x5, 0x3, 0x1, 0x3, 0x4, 0x81}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0xf, 0x0, 0x0, 0x1, 0x7}, 0x2, {0x33a, 0x1, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e44842f4b207e4ea08c556bdf472b126"}}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000001040), &(0x7f0000001080)=0x4) (async) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r7) (async) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r7) socket$inet6(0xa, 0x2, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000001100)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x44}}}, 0x108) getsockopt$inet6_buf(r10, 0x29, 0x30, &(0x7f0000001240)=""/214, &(0x7f0000001340)=0xd6) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x34, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001440)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 288.170216ms ago: executing program 3 (id=4683): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x14, 0x7}, @timestamp, @sack_perm, @mss={0x2, 0x2}], 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @empty}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010000100257a7000e9dbdf250000e900", @ANYRES32=0x0, @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40880) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESDEC=r7, @ANYRESOCT=r1], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r3], 0x140}}, 0x20000844) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="06000000000000000a004e21ffffffdaff020000000000000000000000000001720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e23000000ff20010000000000000000000000000000fe0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000008000fc02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000001fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe880000000000000000000000000101d600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abcb368f57dae29e95431b122ab37be065f2710d4dae"], 0x290) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000000000000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r0, &(0x7f0000002980)=[{{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x1, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000540)="7f4461bdc2e07d3daa04fe915adefa567edef1efaf5142bfeeda005defa41c7ddf78647504c188bdc225bc737175de5a01e430bc656e4f84b2f9d41c", 0x3c}, {&(0x7f0000000580)="40627bf1ce2c8b955312d85dd5e387bdb1ab4ca228e88b02801e236ed75e4e886203256aba51024af32105cf2c7c69d64169055aeac6095b713c33ed1701fe29b5f3bf04eed2416d0e035aaa4e37d67ad245a5b3c22a9d53f081cbb60f171eb5bcf674e0b008872599f5de88576f16378dfec749a5c55f45c4591826cca42545c190ad2623d8051a67fb8e22f83c7f7bb4e30260e2f3b5bb956f054268e1e65ea2a5624fa5d83923d9a2776fbcd11eed7bf542f4d3ea215f6b646c795e87265f20232ee85a26b5a3793daccf11c515a57bdffb0a143841bbdf9b68e6953a2e0b5fa5f565e0f5a713", 0xe8}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="f01a896b33a24a89f74056d2378af07427f055336805eb657935c93dd5ccd68cd6256ab50b00188b86e0fc63ca40cc4cc3c977c6fec2e8276b17239e237dcefd461480252adc77335c4939c0f6a010526b470daddbb6989924a21dcebf6a502681e36604416d04286526c1149876bdf2bb6b60385147cb411c13289d5cdf", 0x7e}, {&(0x7f0000001ec0)="eadf2724a0661b3ce31579b5654d3ef37e5c7d1874a7b8c1d308941e2358444899d9a77915e1b2a5f0a264c155ebc0f6f29afa5a2dfe7b14d8e9ee456edd4122e9e80e3379fa8668ef72a78f1d88ae274f8de27974ce411c41332f9d3677696f8bb656f64baaf8bc828d18bff12967ab67c5f542b320d960d4e6916cc43a07b7be01466d76c4f9e2e55e3c019008f7ae2e76887d12808736f7cec16b3875503ac680329a54e1ad97490877e6aef4fac1631741345ed19c8a59bc2f587ede325421f72b1c2ed77eb6050468c4313f24dd7b71cd3f87d73c1e9ba29ecd0bef8e4bcf32856096e3772ada08c04069e15aa6544682c54691e9e8bc", 0xf9}, {&(0x7f0000001fc0)="5352bf9f94bb0a8fdc81f6c32e7f98313c35df035546e112a3675f6c4c9d5d6521a1aa4354c0f57921dd2253f411356b87d1cf7397f40619ed085ed96056181e3a6eaa801f24b09c54113b20", 0x4c}, {&(0x7f0000002040)="cc944c03c3c608d4604b76ed20f0ed8340611d9a4fde44ef1eaf5beed776ac1907363f688d2e4c3935f01762ca7afb30c72072619aa6e9a8a181456cba4880ac20e728330ab5bbd528010cf99e9e994d76f80a6de1084b987db73fa0704692a94f743d5d0791052c12b22218dcd605cb65229f1a9334c41e21c38cab72e2c0c55db16c4576aea5d6dbe0802268751b58c858b0303f66e7a4708a11cf7c756ed928be7f16", 0xa4}], 0x7}}, {{&(0x7f0000002180)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(seqiv(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002200)="f5b880100a5283ddd117cae4209f2b189f1588175bba", 0x16}, {&(0x7f0000002240)="ec0ee6", 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000022c0)="847a71be89d6c3a8a50c93fd76730cf250029bac12ba02c470c2d1a0bbae53b3d99b35731d166e859b74ef8fdc2c2a16e05776f768952e4e485c7584b5dd45eda3ee2d75c766b2d13669a2e88d9f1118ac5c5c64c5681cc2df0bcb3c607b870266d5c64e16a3bd536ddebd86b2e1695434a144d69ffd5a44a336c51bfd284b1df3c4ee4f238774e81046296bfea631bd6eeac50c4bf85be2a4762fdfc6deade8bde7fc77bcabdf9b6aeec4bc8f894a81592a06d2419ced8058742c8a98b9230377f4134c9fd96307c7b21de9d04f5e5fb5ef64b7f11148c64b36da119e0ebadcffd39df06cfa93a6b56afe8d8210b71c97523e", 0xf3}, {&(0x7f00000023c0)="5b718613781d0a4bf437804377e9a4f6b9f1134e90d4552416f76552baf896c5f55e4b43da9eec04bedb25d663328f89e5dccd31033b821655a8f95c607b0407fe2a5a86c043e19bccbfd1ebe652795f595ccde18db1ba95e19b348501d0dc26d3fe6e93cfc48938e366d8a2d67e41e7bb11d41576530e2fee1f", 0x7a}, {&(0x7f0000002440)="b357757d1da985fdf7f45d618879e43d99e8db1d195d4703596801ec1225c8243ac611a765d693868a8998f610015d0875673acfd28fbd7d661e2f6bdb35f61cec8f1f7559979ab5e52ff123f16b01cb8817ad563600059413b3cbc4d9be4d1d1458997702a1152815f33e3067ab4e6c1cf692818e58f4864f4ffc164ce22be54f1385d769ab80d0202d9ca4ebe1b673013d00ec3e314c712a8a4fc1a2dc561e5869c75f2f0d6b17e88586637ddf09c3440a66426bcc246c981e03825fdec061b02eec36d8f4acbe19303a9666b24cdf3e4c1cd1e34af9b2d8e3f724e31a8cb85e56656d3f2870f78dea36896516a5", 0xef}, {&(0x7f0000002540)="9fcf790b02914537962a3368744ee83843ac2bd4a6b6320261e2c8bb2be00dc9c5fa18919914da241f7342e0efdca62e16296676d3ccb937aeef8f01533eeca178e2dece787b142a9ab1a36d5ec2cdde84fdafdd5afadee2a631d2b1fb4533904d72e338552068c699455892afd86b8572f1f96dc521923cfee8b89dac9c409ccd828848ca8027bb25fb9e51715ab8145174260588d44c2dfce4d333dea3a2fbf22141586f3d5f", 0xa7}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1d0900000000000014010000060000005ed609e3ad533997f0a3be32cde12a54e838e4e5196c44c0b455522c8da1a6360ba7d9e081337cb0ceaac293eb43f23ae30000000000000034b9a88d5d551057818eb9444db1012eeeb8d09eda509dfe1bbde5a17e4af6714f09cca6de721d20795cd7e138485809dc25d24525cdc8ef549f52dcf675f1df452dc74256058873f7470484864e1849231502231a13747751719d3d054c0d018a4543dc04b49996d1c554ae080000000000000000000000000000000000c384aea972bde0facbe91f6ce19066b6eb9b"], 0xc8}}, {{&(0x7f0000002740)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f0000002940)=[{&(0x7f00000027c0)="1c68364c15c62822be3dd048c046a38b4f41701f899429110e81c2e762514432581bcf5409c0b236fcfc59e6c1f2e42403e482eff37c99d819ca50cb33c2714cb9dc0d546c50ce6988ffe1709f62f461814b48728ad5a7871186b405fb57aacf6f3b0a404826684b9167", 0x6a}, {&(0x7f0000002840)="47d7e0858228f58507bd25c2ad18ccc453822c3e6c131367dccdd337e42cf23b35a5e7bfa568eda10de57b0bfa45ebde24b53f65eca5a2c9d4157e0ef77c14a8419208ca3f297dc082cc5650106b7cd5cba8f614261bf01273dfbebb29045bf402e6ab3a4e522bbfed99d4f9d1e62699bb73c79c683f916fbdd77e5fc9598dcbbae3ee825303e3749b774169fe942b154860c56a777b87b069f099815320ae7861a226fcb57d107135396a02ad1a7677d7700902220d", 0xb6}, {&(0x7f0000002900)="83b91262bfaf88db332201d197e37fa47155a35bbf27c446ef93025ede61d199ad6c8a140f835c803454850efc761b069526fc38d74cf6", 0x37}], 0x3}}], 0x4, 0xfc) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 269.988639ms ago: executing program 2 (id=4684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f36}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 257.208556ms ago: executing program 4 (id=4685): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000440)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000006c0)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000100)=0x80000005, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xfffffff7, @remote, 0x5}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000200)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) r8 = socket(0xa, 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000280)="3995f6e068", 0x5) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018808000100", @ANYRES32=r8, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) syz_emit_ethernet(0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000a00)="05000000010001", 0x7) write(r4, &(0x7f0000000a80)="07000000010000", 0x7) 154.366841ms ago: executing program 1 (id=4686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$kcm(0x1e, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x5000, @loopback}, 0x10) setsockopt(r2, 0x1e, 0x5, &(0x7f0000001540)="8c004b077a5a5d8d7562113f97c2eb71cce16105a4d2eb66e82840876d71f5f3f071931e96419312a403b86eb2355502e9833218b72af4338ac92c77920f263f6ba25478adadc8e5793bce380a3dea4fd09143945462f953bea658aca2203065cc9fc8809e447f07cd25731833f929699117e32c70b5f34b9a5cbfcfcaaef7ace095768ce1fa483b", 0x88) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000100", @ANYRES16=r5, @ANYBLOB="00082dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004085}, 0xd364de0c7e6774f6) listen(r4, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0xc1bd5000) connect$inet(r6, &(0x7f0000000200)={0x2, 0x5000, @loopback}, 0x10) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) write(r7, &(0x7f0000000540)="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", 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000001600)=0x118b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) close(r4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 443.75µs ago: executing program 2 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote, @in=@private}}, {{@in6=@initdev}}}, &(0x7f0000000340)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) gettid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003880)={0xe0, 0x12, 0x825, 0x70bd35, 0x25dfdbfa, {0xb}, [@nested={0xc9, 0x5, 0x0, 0x1, [@generic="cb5eeb9644210a4598862de4cf8831aed66144cd1fdc078a045dd0b99dc4bcaa86f11c6b3aacb51dc07111de2dd694b00750a095d1e28623bd88648dff624225e2d228bb4f19b8909aa8a6703feef903c66c22df94b5fa46c6844e27f9fd1c485df8a632bccbf6e3c9ee4acb3bcc9cd90ce391b5066d9ef077b43cfb2fa33040535b5e77ae755ddef14879193f6f13c43b5b5b67c7c89b99cfb093a2c7321f4205918bee416e5c694353e68d97acde03893fcd5fadbb58d8565bbc514a04c477f07f89eae6"]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='&[\x00', 0x30000, &(0x7f0000000100)={@_ha_fsid={[0xfffffff8, 0x3]}, {0x28, 0xb428, 0xbf01, 0xb4f1}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x5}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xec, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x0, 0x80, 0x7, 0x67, 0x1, 0xf]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x6}, {0x3, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x6, 0x8}, {0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x1d}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0xb, 0x6, 0x16, 0x24, 0xc, 0x6, 0x60, 0x2, 0x6c, 0x18, 0x12, 0x5, 0x1b, 0x1b, 0x36, 0x36, 0x24966758afa73e76, 0x9, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x9, 0xfeab, 0x7, 0x80, 0x24c, 0x8, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x5, 0x6c, 0x2, 0x6, 0x48, 0x2, 0x48, 0x2, 0x24, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0x6, 0x7, 0x6, 0x9, 0xfffc, 0xb]}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a2c"], 0x10c}}, 0x0) 0s ago: executing program 3 (id=4688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0xae92, 0xc, 0x31, 0x3, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): 0076] virt_wifi0: entered promiscuous mode [ 630.566696][T20076] virt_wifi0: entered allmulticast mode [ 630.577951][T20076] veth1_vlan: entered allmulticast mode [ 630.583774][T20076] veth0_vlan: entered allmulticast mode [ 630.592965][T20076] vlan0: entered promiscuous mode [ 630.593134][T20076] vlan0: entered allmulticast mode [ 630.599268][T20076] vlan1: entered promiscuous mode [ 630.599435][T20076] vlan1: entered allmulticast mode [ 630.603854][T20076] macvlan0: entered promiscuous mode [ 630.604015][T20076] macvlan0: entered allmulticast mode [ 630.611136][T20076] macvlan1: entered promiscuous mode [ 630.611338][T20076] macvlan1: entered allmulticast mode [ 630.615076][T20076] ipvlan0: entered promiscuous mode [ 630.615093][T20076] ipvlan0: entered allmulticast mode [ 630.625859][T20076] ipvlan1: entered promiscuous mode [ 630.625876][T20076] ipvlan1: entered allmulticast mode [ 630.636715][T20076] veth1_macvtap: entered allmulticast mode [ 630.645122][T20076] veth0_macvtap: entered allmulticast mode [ 630.648604][T20076] macvtap0: entered promiscuous mode [ 630.649632][T20076] macvtap0: entered allmulticast mode [ 630.652330][T20076] macsec0: entered promiscuous mode [ 630.652598][T20076] macsec0: entered allmulticast mode [ 630.655242][T20076] geneve0: entered promiscuous mode [ 630.655257][T20076] geneve0: entered allmulticast mode [ 630.658457][T20076] geneve1: entered promiscuous mode [ 630.658472][T20076] geneve1: entered allmulticast mode [ 630.659524][T20076] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 630.659544][T20076] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 630.663180][T20076] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 630.663200][T20076] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 630.665580][T20076] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 630.665599][T20076] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 630.669177][T20076] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 630.669197][T20076] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 630.671672][T20076] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 630.671736][T20076] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 630.674805][T20076] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 630.674840][T20076] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 630.843013][T20094] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.843678][T20094] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.881898][T20098] x_tables: duplicate underflow at hook 1 [ 631.304696][T20126] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 631.304736][T20126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.304746][T20126] IPv6: NLM_F_CREATE should be set when creating new route [ 631.360226][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 631.437525][T16823] Bluetooth: hci1: command 0x0405 tx timeout [ 631.561893][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 631.662006][T20129] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 631.710541][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 631.734013][T20143] macvtap1: entered allmulticast mode [ 631.754738][T20131] macvtap2: entered allmulticast mode [ 634.475691][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 634.538214][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 634.544541][T20180] ip6gretap0: entered promiscuous mode [ 634.544661][T20180] macsec1: entered allmulticast mode [ 634.544673][T20180] ip6gretap0: entered allmulticast mode [ 634.746644][T20190] tap0: tun_chr_ioctl cmd 1074025677 [ 634.746743][T20190] tap0: linktype set to 6 [ 634.800821][T20201] tipc: Started in network mode [ 634.800850][T20201] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 634.800911][T20201] tipc: Enabling of bearer rejected, failed to enable media [ 635.163243][T20219] net_ratelimit: 1 callbacks suppressed [ 635.163262][T20219] ip_tables: iptables: counters copy to user failed while replacing table [ 635.406482][T20231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3361'. [ 635.537153][T20227] udevd[20227]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 635.540923][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3362'. [ 635.809024][T20248] netlink: 'syz.2.3368': attribute type 9 has an invalid length. [ 635.832992][T20248] bridge2: entered promiscuous mode [ 635.833712][T20244] macvlan1: entered promiscuous mode [ 635.833896][T20244] macvlan1: entered allmulticast mode [ 635.833911][T20244] veth1_vlan: entered allmulticast mode [ 635.869256][T20257] netlink: 'syz.2.3368': attribute type 9 has an invalid length. [ 635.890312][T20257] bridge3: entered promiscuous mode [ 635.905331][T20259] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3370'. [ 635.940464][T10772] IPVS: starting estimator thread 0... [ 636.025469][T20267] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 636.025496][T20267] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 636.027614][T20264] IPVS: using max 29 ests per chain, 69600 per kthread [ 636.091506][T20275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3376'. [ 636.131868][T20263] IPVS: sh: FWM 3 0x00000003 - no destination available [ 638.788460][T16823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 638.788506][T16823] Bluetooth: hci2: Injecting HCI hardware error event [ 638.790051][T16823] Bluetooth: hci2: hardware error 0x00 [ 640.867962][T16823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 685.669747][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.855860][T20302] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 696.884492][T20307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3383'. [ 697.193303][T20328] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20002 [ 697.270668][T20333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.441339][T20341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 697.669962][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 697.670729][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3396'. [ 698.550729][T20371] scsi_nl_rcv_msg: discarding partial skb [ 698.760698][T20405] netlink: 'syz.3.3410': attribute type 1 has an invalid length. [ 698.835071][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 699.019699][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 699.144063][T20419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.330766][T20434] lo: entered promiscuous mode [ 699.331041][T20434] tunl0: entered promiscuous mode [ 699.352652][T20434] gre0: entered promiscuous mode [ 699.382989][T20434] gretap0: entered promiscuous mode [ 699.401882][T20434] erspan0: entered promiscuous mode [ 699.415643][T20434] ip_vti0: entered promiscuous mode [ 699.425152][T20434] ip6_vti0: entered promiscuous mode [ 699.438492][T20434] sit0: entered promiscuous mode [ 699.452653][T20434] ip6tnl0: entered promiscuous mode [ 699.455124][T20434] ip6gre0: entered promiscuous mode [ 699.465034][T20434] syz_tun: entered promiscuous mode [ 699.480222][T20434] ip6gretap0: entered promiscuous mode [ 699.482968][T20434] bridge0: entered promiscuous mode [ 699.483138][T20434] vcan0: entered promiscuous mode [ 699.500377][T20434] team0: entered promiscuous mode [ 699.500394][T20434] team_slave_0: entered promiscuous mode [ 699.500576][T20434] team_slave_1: entered promiscuous mode [ 699.515355][T20434] dummy0: entered promiscuous mode [ 699.530411][T20434] nlmon0: entered promiscuous mode [ 699.531815][T20434] batadv0: entered promiscuous mode [ 699.535725][T20434] vxcan0: entered promiscuous mode [ 699.536459][T20434] vxcan1: entered promiscuous mode [ 699.564909][T20434] veth0: entered promiscuous mode [ 699.580856][T20434] veth1: entered promiscuous mode [ 699.585799][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3421'. [ 699.758486][T20434] wg0: entered promiscuous mode [ 699.808192][T20434] wg1: entered promiscuous mode [ 699.818424][T20434] wg2: entered promiscuous mode [ 699.820829][T20434] veth0_to_bridge: entered promiscuous mode [ 699.831299][T20434] veth1_to_bridge: entered promiscuous mode [ 699.853783][T20434] veth0_to_bond: entered promiscuous mode [ 699.864173][T20434] veth1_to_bond: entered promiscuous mode [ 699.874631][T20434] veth0_to_team: entered promiscuous mode [ 699.886624][T20434] veth1_to_team: entered promiscuous mode [ 699.898191][T20434] veth0_to_batadv: entered promiscuous mode [ 699.900355][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.900399][T20434] batadv_slave_0: entered promiscuous mode [ 699.903768][T20434] veth1_to_batadv: entered promiscuous mode [ 699.905976][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.906020][T20434] batadv_slave_1: entered promiscuous mode [ 699.950974][T20434] xfrm0: entered promiscuous mode [ 699.955042][T20434] veth0_to_hsr: entered promiscuous mode [ 699.972360][T20434] veth1_to_hsr: entered promiscuous mode [ 699.978674][T20434] hsr0: entered promiscuous mode [ 699.981079][T20434] veth1_virt_wifi: entered promiscuous mode [ 699.983445][T20434] veth0_virt_wifi: entered promiscuous mode [ 699.985955][T20434] virt_wifi0: entered promiscuous mode [ 699.994229][T20434] vlan0: entered promiscuous mode [ 699.998250][T20434] vlan1: entered promiscuous mode [ 700.000826][T20434] macvlan0: entered promiscuous mode [ 700.005911][T20434] macvlan1: entered promiscuous mode [ 700.013827][T20434] ipvlan0: entered promiscuous mode [ 700.014047][T20434] ipvlan1: entered promiscuous mode [ 700.028610][T20434] macvtap0: entered promiscuous mode [ 700.031121][T20434] macsec0: entered promiscuous mode [ 700.033616][T20434] geneve0: entered promiscuous mode [ 700.036535][T20434] geneve1: entered promiscuous mode [ 700.055475][T20434] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 700.081771][T20434] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 700.096933][T20434] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 700.120671][T20434] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 700.142671][T20434] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 700.144884][T20434] ip6tnl1: entered promiscuous mode [ 700.153122][T20434] vxcan2: entered promiscuous mode [ 700.153274][T20434] vxcan3: entered promiscuous mode [ 700.153469][T20434] gtp0: entered promiscuous mode [ 700.154952][T20434] vxlan0: entered promiscuous mode [ 700.156471][T20434] bond1: entered promiscuous mode [ 700.156486][T20434] bond2: entered promiscuous mode [ 700.166935][T20434] macvlan2: entered promiscuous mode [ 700.168470][T20434] macvlan3: entered promiscuous mode [ 700.168621][T20434] macvlan4: entered promiscuous mode [ 700.207340][T16903] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.207441][T16903] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.207480][T16903] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.207502][T16903] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.207534][T16903] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.207556][T16903] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.207587][T16903] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.207608][T16903] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.217178][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3421'. [ 700.267543][T20466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.495904][T20475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3425'. [ 700.774573][T20492] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.3429'. [ 700.774590][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3429'. [ 702.204589][T20427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.433961][T20503] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 702.433982][T20503] __nla_validate_parse: 2 callbacks suppressed [ 702.433993][T20503] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3431'. [ 702.462504][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3431'. [ 702.510866][T20506] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 702.820788][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 702.873232][T20528] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 702.924730][T20518] team0: Port device team_slave_0 removed [ 703.272105][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 703.272311][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 703.511666][T20552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.514152][T20552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 703.550455][T20552] netlink: 'syz.0.3444': attribute type 83 has an invalid length. [ 703.550900][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3444'. [ 703.595272][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 703.611368][T20555] ip6gre1: entered promiscuous mode [ 703.611387][T20555] ip6gre1: entered allmulticast mode [ 703.615530][T16903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.619751][T16903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.638633][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.659958][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 703.804156][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 703.804276][T20577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.831712][T20577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.080125][T20592] syzkaller0: entered promiscuous mode [ 704.080147][T20592] syzkaller0: entered allmulticast mode [ 704.151015][T20570] scsi_nl_rcv_msg: discarding partial skb [ 704.389737][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 704.389930][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 704.909914][T20610] netlink: 'syz.3.3463': attribute type 4 has an invalid length. [ 704.909933][T20610] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.3463'. [ 705.374635][T20639] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 707.115697][T20654] ip_tables: iptables: counters copy to user failed while replacing table [ 707.121119][T20652] syzkaller0: entered promiscuous mode [ 707.121138][T20652] syzkaller0: entered allmulticast mode [ 707.438392][T20672] netlink: 'syz.3.3476': attribute type 3 has an invalid length. [ 707.438412][T20672] __nla_validate_parse: 2 callbacks suppressed [ 707.438421][T20672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3476'. [ 707.479645][T20675] ip_tables: iptables: counters copy to user failed while replacing table [ 707.590805][T20662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3473'. [ 707.682213][T20685] syzkaller0: entered promiscuous mode [ 707.682235][T20685] syzkaller0: entered allmulticast mode [ 707.907255][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.983149][T20694] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 708.313030][T20716] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 708.421295][T20718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 709.379783][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 709.384992][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 709.385014][T20758] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 709.438217][T20760] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 709.752310][T20768] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 709.839281][T20768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 710.044395][T20771] tun0: tun_chr_ioctl cmd 1074025677 [ 710.044460][T20771] tun0: linktype set to 0 [ 710.213385][T20782] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3504'. [ 710.479501][T20813] x_tables: duplicate underflow at hook 3 [ 710.481905][T20813] x_tables: duplicate underflow at hook 3 [ 710.607637][T20821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 710.674814][T20825] sctp: [Deprecated]: syz.4.3512 (pid 20825) Use of int in max_burst socket option. [ 710.674814][T20825] Use struct sctp_assoc_value instead [ 710.803534][T20836] netlink: 'syz.0.3514': attribute type 10 has an invalid length. [ 710.819417][T20836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.826109][T20836] team0: Port device bond0 added [ 710.889415][T20838] netlink: 'syz.0.3514': attribute type 10 has an invalid length. [ 711.162923][T20856] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.176131][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3519'. [ 711.215248][T20860] syzkaller0: entered promiscuous mode [ 711.215269][T20860] syzkaller0: entered allmulticast mode [ 711.246819][T20860] syzkaller0: left promiscuous mode [ 711.246839][T20860] syzkaller0: left allmulticast mode [ 711.307908][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 711.826552][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 711.878797][T20892] ip_tables: iptables: counters copy to user failed while replacing table [ 712.085221][T20906] netlink: 'syz.1.3536': attribute type 5 has an invalid length. [ 712.100523][T20907] netlink: 'syz.0.3537': attribute type 1 has an invalid length. [ 712.159508][T20907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.160027][T20911] veth0_to_bond: left promiscuous mode [ 712.190845][T20911] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 712.238419][T20907] bridge1: entered promiscuous mode [ 712.242567][T20907] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 712.443052][T20918] macvtap1: entered promiscuous mode [ 712.545584][T20914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.609714][T20929] syzkaller0: create flow: hash 3093920836 index 0 [ 712.675753][T10772] syzkaller0: tun_net_xmit 76 [ 712.675871][T10772] syzkaller0: tun_net_xmit 48 [ 712.697455][ T5749] syzkaller0: tun_net_xmit 76 [ 713.617821][T20972] __nla_validate_parse: 1 callbacks suppressed [ 713.617843][T20972] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3553'. [ 713.618466][T20972] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3553'. [ 713.795277][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 713.873641][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'. [ 713.873714][T20978] netlink: 'syz.3.3554': attribute type 1 has an invalid length. [ 713.873726][T20978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 715.629238][T20970] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3552'. [ 715.671686][T20924] syzkaller0 (unregistered): delete flow: hash 3093920836 index 0 [ 715.810672][T20997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.828906][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 715.846899][T21004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.864924][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 715.952538][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 715.978013][T21012] sit0: entered promiscuous mode [ 715.981844][T21012] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 715.981859][T21012] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3561'. [ 716.277717][T21041] Bluetooth: MGMT ver 1.23 [ 716.390251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.485642][T21051] ip_tables: iptables: counters copy to user failed while replacing table [ 716.694111][T21071] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 716.780311][T21059] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.781357][T21059] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.052738][T21059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.068573][T21059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.289110][ T727] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.289945][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.290021][ T727] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.290056][ T727] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.438680][T21078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.471210][T21078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.886835][T21106] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 718.435722][T21130] batadv_slave_1: entered promiscuous mode [ 718.436028][T21130] batadv_slave_1: left promiscuous mode [ 718.530638][T21134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.531513][T21132] netlink: 'syz.3.3594': attribute type 2 has an invalid length. [ 718.531535][T21132] netlink: 'syz.3.3594': attribute type 2 has an invalid length. [ 718.552854][T21132] TC_ACT_REPEAT abuse ? [ 718.611814][T21136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.794189][T21148] batadv_slave_1: entered promiscuous mode [ 718.796334][T21148] __nla_validate_parse: 6 callbacks suppressed [ 718.796350][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 718.809641][T21147] batadv_slave_1: left promiscuous mode [ 719.159696][T21166] geneve2: entered allmulticast mode [ 719.408776][T21180] ip6gre1: entered allmulticast mode [ 719.502185][T21186] sctp: [Deprecated]: syz.0.3610 (pid 21186) Use of int in max_burst socket option. [ 719.502185][T21186] Use struct sctp_assoc_value instead [ 719.502373][T21189] sctp: [Deprecated]: syz.0.3610 (pid 21189) Use of int in max_burst socket option. [ 719.502373][T21189] Use struct sctp_assoc_value instead [ 719.567162][T21180] netlink: Failed to add helper -22 [ 719.567215][T21180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.263086][T21170] kthread_run failed with err -4 [ 720.353383][T21205] xt_IDLETIMER: label is empty or not nul-terminated [ 720.538344][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 720.538368][T21226] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 720.599662][T21226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.603207][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 720.603225][T21226] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3619'. [ 720.604106][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3620'. [ 720.659762][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3620'. [ 720.736062][T21239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 720.864905][T21242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3622'. [ 720.866482][T21242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3622'. [ 720.926152][T21252] netlink: 'syz.3.3624': attribute type 32 has an invalid length. [ 720.941169][T21242] syzkaller0: entered promiscuous mode [ 720.941189][T21242] syzkaller0: entered allmulticast mode [ 720.945222][T21242] tipc: Started in network mode [ 720.945247][T21242] tipc: Node identity f6e32fe45863, cluster identity 4711 [ 720.959739][T21242] tipc: Enabled bearer , priority 0 [ 721.119466][T21242] tipc: Resetting bearer [ 721.173545][T21242] tipc: Disabling bearer [ 721.173800][T21262] netlink: 'syz.2.3625': attribute type 13 has an invalid length. [ 721.173812][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 721.205614][T21262] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 724.065764][T21262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.329251][T21310] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.329260][T21312] Bluetooth: hci0: unsupported parameter 5161 [ 724.329274][T21312] Bluetooth: hci0: unsupported parameter 8192 [ 724.329285][T21312] Bluetooth: hci0: unsupported parameter 5161 [ 724.329296][T21312] Bluetooth: hci0: unsupported parameter 8192 [ 724.329536][T21313] Bluetooth: hci0: unsupported parameter 5161 [ 724.329548][T21313] Bluetooth: hci0: unsupported parameter 8192 [ 724.329558][T21313] Bluetooth: hci0: unsupported parameter 5161 [ 724.329569][T21313] Bluetooth: hci0: unsupported parameter 8192 [ 724.433558][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3640'. [ 724.656771][T21326] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 724.671785][T21328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.749573][T21331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.795226][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3640'. [ 725.698907][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 725.704964][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 725.856784][T21379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3654'. [ 725.898172][T21381] syzkaller1: entered promiscuous mode [ 725.898194][T21381] syzkaller1: entered allmulticast mode [ 726.256755][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 726.256776][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 726.284641][T21395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 726.326011][T21411] netlink: 'syz.0.3663': attribute type 4 has an invalid length. [ 726.326032][T21411] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3663'. [ 726.352096][T21411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 726.373174][T21404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.389331][T21404] bond6: (slave bond0): making interface the new active one [ 726.410198][T21404] bond6: (slave bond0): Enslaving as an active interface with an up link [ 726.519377][T21395] bond6 (unregistering): (slave bond0): Releasing active interface [ 726.538180][T21395] bond6 (unregistering): Released all slaves [ 726.578819][T21421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3668'. [ 726.578850][T21421] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 726.783647][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'. [ 726.831152][T21426] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 726.836899][T21426] bond1 (unregistering): Released all slaves [ 726.859471][T21440] netlink: 'syz.0.3672': attribute type 11 has an invalid length. [ 726.897016][T21428] ovs-dp0: entered promiscuous mode [ 727.195360][T21456] Cannot find set identified by id 65534 to match [ 727.224389][T21455] SET target dimension over the limit! [ 727.312005][ T5613] Bluetooth: hci1: link tx timeout [ 727.312023][ T5613] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 727.498487][T21473] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 727.539373][T21473] bond6 (unregistering): Released all slaves [ 727.582989][T21468] 0·: renamed from hsr0 (while UP) [ 727.598924][T21468] 0·: left promiscuous mode [ 727.599322][T21468] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 727.785866][T21485] netlink: 'syz.4.3686': attribute type 10 has an invalid length. [ 727.786159][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.786909][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.820056][T21485] bridge0: left promiscuous mode [ 727.820078][T21485] bridge0: left allmulticast mode [ 727.832567][T21485] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.832693][T21485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.832967][T21485] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.833083][T21485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.852555][T21485] bridge0: entered promiscuous mode [ 727.852719][T21485] bridge0: entered allmulticast mode [ 727.871552][T21485] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 727.890925][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.903843][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.936704][T21485] bond0: (slave bridge0): Releasing backup interface [ 727.939781][T21485] bridge0 (unregistering): left promiscuous mode [ 727.939815][T21485] bridge0 (unregistering): left allmulticast mode [ 727.971239][T21493] netlink: 'syz.1.3689': attribute type 1 has an invalid length. [ 729.349132][ T5613] Bluetooth: hci1: command 0x0405 tx timeout [ 730.897965][T21492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.012758][T21523] __nla_validate_parse: 11 callbacks suppressed [ 731.012777][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 731.014063][T21523] ip_tables: iptables: counters copy to user failed while replacing table [ 731.140670][T21526] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 731.140690][T21526] sctp: [Deprecated]: syz.0.3695 (pid 21526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.140690][T21526] Use struct sctp_sack_info instead [ 731.250149][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.314359][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.314586][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.314809][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.315003][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.315199][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.315389][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.315599][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.320803][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 731.522993][T21556] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 731.528043][T21561] ip_tables: iptables: counters copy to user failed while replacing table [ 732.263713][T21612] Cannot find add_set index 2 as target [ 732.263896][T21613] Cannot find add_set index 2 as target [ 732.473934][T21623] TC_ACT_REPEAT abuse ? [ 732.532016][T21628] žÿ: renamed from team_slave_1 [ 732.850763][T21649] netlink: 'syz.0.3722': attribute type 21 has an invalid length. [ 732.894885][T21647] syzkaller0: entered promiscuous mode [ 732.894910][T21647] syzkaller0: entered allmulticast mode [ 733.040170][T21657] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 733.072031][T21657] bond1: entered promiscuous mode [ 733.072497][T21657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.099546][T21658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.099883][T21658] bond1: (slave wireguard2): The slave device specified does not support setting the MAC address [ 733.099899][T21658] bond1: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 733.105387][T21658] bond1: (slave wireguard2): making interface the new active one [ 733.105407][T21658] wireguard2: entered promiscuous mode [ 733.106631][T21658] bond1: (slave wireguard2): Enslaving as an active interface with an up link [ 733.173795][T21658] bond1: (slave wireguard3): The slave device specified does not support setting the MAC address [ 733.204047][T21658] bond1: (slave wireguard3): Enslaving as a backup interface with an up link [ 733.234196][T21658] bond1: (slave wireguard4): The slave device specified does not support setting the MAC address [ 733.265521][T21658] bond1: (slave wireguard4): Enslaving as a backup interface with an up link [ 733.286999][T21658] bond1: (slave wireguard5): The slave device specified does not support setting the MAC address [ 733.303208][T21658] bond1: (slave wireguard5): Enslaving as a backup interface with an up link [ 733.341944][T21658] bond1: (slave wireguard6): The slave device specified does not support setting the MAC address [ 733.363613][T21658] bond1: (slave wireguard6): Enslaving as a backup interface with an up link [ 733.396443][T21658] bond1: (slave wireguard7): The slave device specified does not support setting the MAC address [ 733.433373][T21658] bond1: (slave wireguard7): Enslaving as a backup interface with an up link [ 733.483193][T21658] bond1: (slave wireguard8): The slave device specified does not support setting the MAC address [ 733.532843][T21658] bond1: (slave wireguard8): Enslaving as a backup interface with an up link [ 733.558827][T21658] bond1: (slave wireguard9): The slave device specified does not support setting the MAC address [ 733.597882][T21658] bond1: (slave wireguard9): Enslaving as a backup interface with an up link [ 733.632485][T21658] bond1: (slave wireguard10): The slave device specified does not support setting the MAC address [ 733.650732][T21658] bond1: (slave wireguard10): Enslaving as a backup interface with an up link [ 733.661167][T21676] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 733.705974][T21658] bond1: (slave wireguard11): The slave device specified does not support setting the MAC address [ 733.735092][T21658] bond1: (slave wireguard11): Enslaving as a backup interface with an up link [ 733.772321][T21658] bond1: (slave wireguard12): The slave device specified does not support setting the MAC address [ 733.795237][T21658] bond1: (slave wireguard12): Enslaving as a backup interface with an up link [ 733.824572][T21658] bond1: (slave wireguard13): The slave device specified does not support setting the MAC address [ 733.843481][T21658] bond1: (slave wireguard13): Enslaving as a backup interface with an up link [ 733.854737][T21658] bond1: (slave wireguard14): The slave device specified does not support setting the MAC address [ 733.872847][T21658] bond1: (slave wireguard14): Enslaving as a backup interface with an up link [ 733.975511][T21695] netlink: 'syz.1.3732': attribute type 11 has an invalid length. [ 734.038740][T21699] netlink: 'syz.1.3732': attribute type 7 has an invalid length. [ 734.038774][T21699] netlink: 'syz.1.3732': attribute type 5 has an invalid length. [ 734.039078][T21695] rxe_eth0 speed is unknown, defaulting to 1000 [ 734.112298][T21698] IPVS: Scheduler module ip_vs_sip not found [ 734.256886][T21710] netlink: 'syz.0.3736': attribute type 4 has an invalid length. [ 734.307281][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 734.351726][T21714] netlink: 'syz.0.3736': attribute type 5 has an invalid length. [ 734.569949][T21720] openvswitch: netlink: Flow actions attr not present in new flow. [ 734.611036][T21717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 735.165034][T21754] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 735.168610][T21754] x_tables: duplicate underflow at hook 2 [ 735.276972][T21760] netlink: 'syz.0.3750': attribute type 1 has an invalid length. [ 735.360170][T21760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.397829][T21766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.398281][T21766] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 735.398921][T21766] bond4: (slave gre1): Error -95 calling set_mac_address [ 735.450464][T21760] gretap1: entered promiscuous mode [ 735.455765][T21760] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 735.456246][T21760] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 735.493130][T21760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 735.504597][T21760] bond4: (slave bond5): Enslaving as an active interface with a down link [ 735.523025][T21760] bond4 (unregistering): (slave bond5): Releasing active interface [ 735.528118][T21760] bond4 (unregistering): Released all slaves [ 736.141727][T21791] __nla_validate_parse: 50 callbacks suppressed [ 736.141747][T21791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3755'. [ 736.868747][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 738.153503][T21790] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 738.184129][T21816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3761'. [ 738.874670][T21783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.120773][T21847] netlink: 'syz.4.3770': attribute type 1 has an invalid length. [ 739.221382][T21849] IPv6: sit1: Disabled Multicast RS [ 739.226051][T21849] xt_l2tp: invalid flags combination: 0 [ 739.385878][T21855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.401339][T21866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3775'. [ 739.403290][T21861] x_tables: unsorted entry at hook 3 [ 739.414549][T21861] tipc: Started in network mode [ 739.414576][T21861] tipc: Node identity ac1414aa, cluster identity 4711 [ 739.414811][T21861] tipc: New replicast peer: 172.20.20.187 [ 739.415222][T21861] tipc: Enabled bearer , priority 10 [ 740.005308][T21851] netlink: 'syz.0.3771': attribute type 17 has an invalid length. [ 740.005328][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'. [ 740.015380][T21851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.264498][T21899] syzkaller0: entered promiscuous mode [ 740.264519][T21899] syzkaller0: entered allmulticast mode [ 740.452324][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 740.535919][ T9] tipc: Node number set to 2886997162 [ 740.552972][T21915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3784'. [ 740.964167][T21949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3795'. [ 741.106774][T21955] FAULT_INJECTION: forcing a failure. [ 741.106774][T21955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.106806][T21955] CPU: 1 UID: 0 PID: 21955 Comm: syz.3.3797 Not tainted syzkaller #0 PREEMPT(full) [ 741.106857][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 741.106868][T21955] Call Trace: [ 741.106874][T21955] [ 741.106883][T21955] dump_stack_lvl+0xe8/0x150 [ 741.106916][T21955] should_fail_ex+0x410/0x560 [ 741.106945][T21955] _copy_from_iter+0x1d3/0x1660 [ 741.106976][T21955] ? _copy_from_iter+0x21b/0x1660 [ 741.106999][T21955] ? sock_alloc_send_pskb+0xb87/0xc90 [ 741.107027][T21955] ? __pfx__copy_from_iter+0x10/0x10 [ 741.107058][T21955] ? __pfx__copy_from_iter+0x10/0x10 [ 741.107087][T21955] copy_page_from_iter+0x219/0x2d0 [ 741.107116][T21955] skb_copy_datagram_from_iter+0x2f4/0x720 [ 741.107223][T21955] tun_get_user+0x14fd/0x4450 [ 741.107325][T21955] ? aa_file_perm+0x18b/0x15f0 [ 741.107349][T21955] ? aa_file_perm+0x4ed/0x15f0 [ 741.107365][T21955] ? __pfx_tun_get_user+0x10/0x10 [ 741.107391][T21955] ? __lock_acquire+0x747/0x2de0 [ 741.107416][T21955] ? kstrtoull+0x137/0x1d0 [ 741.107476][T21955] ? ref_tracker_alloc+0x172/0x530 [ 741.107528][T21955] ? lock_acquire+0x115/0x350 [ 741.107549][T21955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 741.107578][T21955] ? lock_acquire+0x115/0x350 [ 741.107597][T21955] ? tun_get+0x1c/0x2f0 [ 741.107624][T21955] ? tun_get+0x1c/0x2f0 [ 741.107646][T21955] ? tun_get+0x1c/0x2f0 [ 741.107678][T21955] tun_chr_write_iter+0x113/0x200 [ 741.107704][T21955] vfs_write+0x612/0xba0 [ 741.107734][T21955] ? __pfx_vfs_write+0x10/0x10 [ 741.107763][T21955] ? __fget_files+0x2a/0x420 [ 741.107800][T21955] ksys_write+0x150/0x270 [ 741.107828][T21955] ? __pfx_ksys_write+0x10/0x10 [ 741.107857][T21955] do_syscall_64+0x166/0x520 [ 741.107882][T21955] ? trace_irq_disable+0x3b/0x140 [ 741.107901][T21955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.107921][T21955] ? clear_bhb_loop+0x70/0xc0 [ 741.107943][T21955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.107962][T21955] RIP: 0033:0x7fcb9b99e559 [ 741.107979][T21955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.107995][T21955] RSP: 002b:00007fcb9c923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 741.108015][T21955] RAX: ffffffffffffffda RBX: 00007fcb9bc25fa0 RCX: 00007fcb9b99e559 [ 741.108028][T21955] RDX: 000000000000ff04 RSI: 00002000000003c0 RDI: 0000000000000003 [ 741.108040][T21955] RBP: 00007fcb9c923090 R08: 0000000000000000 R09: 0000000000000000 [ 741.108051][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.108062][T21955] R13: 00007fcb9bc26038 R14: 00007fcb9bc25fa0 R15: 00007fffbe2a3728 [ 741.108093][T21955] [ 741.538262][T21968] Cannot find set identified by id 0 to match [ 741.620715][T21979] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3803'. [ 741.824556][T21985] syzkaller0: entered promiscuous mode [ 741.824580][T21985] syzkaller0: entered allmulticast mode [ 741.984175][T22003] netlink: 'syz.3.3810': attribute type 61 has an invalid length. [ 741.984199][T22003] netlink: 'syz.3.3810': attribute type 268 has an invalid length. [ 742.057681][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'. [ 742.341698][T22023] FAULT_INJECTION: forcing a failure. [ 742.341698][T22023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.341730][T22023] CPU: 1 UID: 0 PID: 22023 Comm: syz.4.3813 Not tainted syzkaller #0 PREEMPT(full) [ 742.341750][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 742.341761][T22023] Call Trace: [ 742.341768][T22023] [ 742.341776][T22023] dump_stack_lvl+0xe8/0x150 [ 742.341808][T22023] should_fail_ex+0x410/0x560 [ 742.341836][T22023] _copy_from_iter+0x1d3/0x1660 [ 742.341867][T22023] ? _copy_from_iter+0x21b/0x1660 [ 742.341889][T22023] ? sock_alloc_send_pskb+0xb87/0xc90 [ 742.341912][T22023] ? __pfx__copy_from_iter+0x10/0x10 [ 742.341936][T22023] ? __pfx__copy_from_iter+0x10/0x10 [ 742.341962][T22023] copy_page_from_iter+0x219/0x2d0 [ 742.341986][T22023] skb_copy_datagram_from_iter+0x2f4/0x720 [ 742.342019][T22023] tun_get_user+0x14fd/0x4450 [ 742.342055][T22023] ? aa_file_perm+0x18b/0x15f0 [ 742.342075][T22023] ? aa_file_perm+0x4ed/0x15f0 [ 742.342090][T22023] ? __pfx_tun_get_user+0x10/0x10 [ 742.342115][T22023] ? __lock_acquire+0x747/0x2de0 [ 742.342136][T22023] ? kstrtoull+0x137/0x1d0 [ 742.342162][T22023] ? ref_tracker_alloc+0x172/0x530 [ 742.342182][T22023] ? lock_acquire+0x115/0x350 [ 742.342199][T22023] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 742.342225][T22023] ? lock_acquire+0x115/0x350 [ 742.342242][T22023] ? tun_get+0x1c/0x2f0 [ 742.342268][T22023] ? tun_get+0x1c/0x2f0 [ 742.342288][T22023] ? tun_get+0x1c/0x2f0 [ 742.342313][T22023] tun_chr_write_iter+0x113/0x200 [ 742.342338][T22023] vfs_write+0x612/0xba0 [ 742.342371][T22023] ? __pfx_vfs_write+0x10/0x10 [ 742.342399][T22023] ? __fget_files+0x2a/0x420 [ 742.342432][T22023] ksys_write+0x150/0x270 [ 742.342452][T22023] ? __pfx_ksys_write+0x10/0x10 [ 742.342480][T22023] do_syscall_64+0x166/0x520 [ 742.342502][T22023] ? trace_irq_disable+0x3b/0x140 [ 742.342519][T22023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.342538][T22023] ? clear_bhb_loop+0x70/0xc0 [ 742.342558][T22023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.342577][T22023] RIP: 0033:0x7f9beb39e559 [ 742.342594][T22023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.342608][T22023] RSP: 002b:00007f9bec1eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 742.342627][T22023] RAX: ffffffffffffffda RBX: 00007f9beb625fa0 RCX: 00007f9beb39e559 [ 742.342639][T22023] RDX: 000000000000ff04 RSI: 00002000000003c0 RDI: 0000000000000003 [ 742.342651][T22023] RBP: 00007f9bec1eb090 R08: 0000000000000000 R09: 0000000000000000 [ 742.342663][T22023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 742.342674][T22023] R13: 00007f9beb626038 R14: 00007f9beb625fa0 R15: 00007ffe8843f188 [ 742.342703][T22023] [ 742.354012][T22028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3814'. [ 742.703614][T22035] netpci0: tun_chr_ioctl cmd 1074025678 [ 742.703636][T22035] netpci0: group set to 0 [ 743.047708][T22050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3824'. [ 743.086480][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3822'. [ 743.237594][T22065] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 743.306172][T22065] bond6: entered promiscuous mode [ 743.310065][T22065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.328687][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 743.349265][ T5613] Bluetooth: hci1: command 0x0405 tx timeout [ 743.370506][T22066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.370837][T22066] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 743.370855][T22066] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 743.407871][T22066] bond6: (slave gre1): making interface the new active one [ 743.407892][T22066] gre1: entered promiscuous mode [ 743.409495][T22066] bond6: (slave gre1): Enslaving as an active interface with an up link [ 743.416815][T22075] bridge3: entered promiscuous mode [ 743.575245][T22082] FAULT_INJECTION: forcing a failure. [ 743.575245][T22082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.575276][T22082] CPU: 0 UID: 0 PID: 22082 Comm: syz.2.3830 Not tainted syzkaller #0 PREEMPT(full) [ 743.575296][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 743.575306][T22082] Call Trace: [ 743.575313][T22082] [ 743.575321][T22082] dump_stack_lvl+0xe8/0x150 [ 743.575353][T22082] should_fail_ex+0x410/0x560 [ 743.575383][T22082] _copy_from_iter+0x1d3/0x1660 [ 743.575415][T22082] ? _copy_from_iter+0x21b/0x1660 [ 743.575439][T22082] ? sock_alloc_send_pskb+0xb87/0xc90 [ 743.575466][T22082] ? __pfx__copy_from_iter+0x10/0x10 [ 743.575498][T22082] ? __pfx__copy_from_iter+0x10/0x10 [ 743.575529][T22082] copy_page_from_iter+0x219/0x2d0 [ 743.575559][T22082] skb_copy_datagram_from_iter+0x2f4/0x720 [ 743.575598][T22082] tun_get_user+0x14fd/0x4450 [ 743.575638][T22082] ? aa_file_perm+0x18b/0x15f0 [ 743.575661][T22082] ? aa_file_perm+0x4ed/0x15f0 [ 743.575686][T22082] ? __pfx_tun_get_user+0x10/0x10 [ 743.575712][T22082] ? __lock_acquire+0x747/0x2de0 [ 743.575735][T22082] ? kstrtoull+0x137/0x1d0 [ 743.575765][T22082] ? ref_tracker_alloc+0x172/0x530 [ 743.575790][T22082] ? lock_acquire+0x115/0x350 [ 743.575810][T22082] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 743.575838][T22082] ? lock_acquire+0x115/0x350 [ 743.575856][T22082] ? tun_get+0x1c/0x2f0 [ 743.575882][T22082] ? tun_get+0x1c/0x2f0 [ 743.575903][T22082] ? tun_get+0x1c/0x2f0 [ 743.575929][T22082] tun_chr_write_iter+0x113/0x200 [ 743.575955][T22082] vfs_write+0x612/0xba0 [ 743.575982][T22082] ? __pfx_vfs_write+0x10/0x10 [ 743.576011][T22082] ? __fget_files+0x2a/0x420 [ 743.576047][T22082] ksys_write+0x150/0x270 [ 743.576068][T22082] ? __pfx_ksys_write+0x10/0x10 [ 743.576096][T22082] do_syscall_64+0x166/0x520 [ 743.576119][T22082] ? trace_irq_disable+0x3b/0x140 [ 743.576137][T22082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.576156][T22082] ? clear_bhb_loop+0x70/0xc0 [ 743.576178][T22082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.576197][T22082] RIP: 0033:0x7f298ed9e559 [ 743.576214][T22082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.576229][T22082] RSP: 002b:00007f298fb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.576249][T22082] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e559 [ 743.576263][T22082] RDX: 000000000000ff04 RSI: 00002000000003c0 RDI: 0000000000000003 [ 743.576277][T22082] RBP: 00007f298fb97090 R08: 0000000000000000 R09: 0000000000000000 [ 743.576289][T22082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.576300][T22082] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd2fc4be68 [ 743.576332][T22082] [ 743.965619][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 744.007784][T16823] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 744.032248][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3832'. [ 744.035555][T16823] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 744.035857][T16823] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 744.035879][T16823] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 744.399036][T22121] netlink: 'syz.4.3837': attribute type 11 has an invalid length. [ 744.415434][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 744.786616][T22144] netlink: 'syz.4.3844': attribute type 4 has an invalid length. [ 744.830171][T22144] netlink: 'syz.4.3844': attribute type 4 has an invalid length. [ 744.916610][T22150] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3847'. [ 745.051563][T22152] FAULT_INJECTION: forcing a failure. [ 745.051563][T22152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.051594][T22152] CPU: 0 UID: 0 PID: 22152 Comm: syz.4.3849 Not tainted syzkaller #0 PREEMPT(full) [ 745.051613][T22152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 745.051623][T22152] Call Trace: [ 745.051630][T22152] [ 745.051638][T22152] dump_stack_lvl+0xe8/0x150 [ 745.051669][T22152] should_fail_ex+0x410/0x560 [ 745.051699][T22152] _copy_from_iter+0x1d3/0x1660 [ 745.051729][T22152] ? _copy_from_iter+0x21b/0x1660 [ 745.051751][T22152] ? sock_alloc_send_pskb+0xb87/0xc90 [ 745.051777][T22152] ? __pfx__copy_from_iter+0x10/0x10 [ 745.051806][T22152] ? __pfx__copy_from_iter+0x10/0x10 [ 745.051838][T22152] copy_page_from_iter+0x219/0x2d0 [ 745.051867][T22152] skb_copy_datagram_from_iter+0x2f4/0x720 [ 745.051905][T22152] tun_get_user+0x14fd/0x4450 [ 745.051945][T22152] ? aa_file_perm+0x18b/0x15f0 [ 745.051966][T22152] ? aa_file_perm+0x4ed/0x15f0 [ 745.051982][T22152] ? __pfx_tun_get_user+0x10/0x10 [ 745.052007][T22152] ? __lock_acquire+0x747/0x2de0 [ 745.052029][T22152] ? kstrtoull+0x137/0x1d0 [ 745.052055][T22152] ? ref_tracker_alloc+0x172/0x530 [ 745.052079][T22152] ? lock_acquire+0x115/0x350 [ 745.052097][T22152] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 745.052125][T22152] ? lock_acquire+0x115/0x350 [ 745.052143][T22152] ? tun_get+0x1c/0x2f0 [ 745.052171][T22152] ? tun_get+0x1c/0x2f0 [ 745.052192][T22152] ? tun_get+0x1c/0x2f0 [ 745.052218][T22152] tun_chr_write_iter+0x113/0x200 [ 745.052243][T22152] vfs_write+0x612/0xba0 [ 745.052271][T22152] ? __pfx_vfs_write+0x10/0x10 [ 745.052300][T22152] ? __fget_files+0x2a/0x420 [ 745.052336][T22152] ksys_write+0x150/0x270 [ 745.052357][T22152] ? __pfx_ksys_write+0x10/0x10 [ 745.052386][T22152] do_syscall_64+0x166/0x520 [ 745.052409][T22152] ? trace_irq_disable+0x3b/0x140 [ 745.052428][T22152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.052447][T22152] ? clear_bhb_loop+0x70/0xc0 [ 745.052470][T22152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.052488][T22152] RIP: 0033:0x7f9beb39e559 [ 745.052505][T22152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.052528][T22152] RSP: 002b:00007f9bec1eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.052548][T22152] RAX: ffffffffffffffda RBX: 00007f9beb625fa0 RCX: 00007f9beb39e559 [ 745.052561][T22152] RDX: 000000000000ff04 RSI: 00002000000003c0 RDI: 0000000000000003 [ 745.052573][T22152] RBP: 00007f9bec1eb090 R08: 0000000000000000 R09: 0000000000000000 [ 745.052584][T22152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.052595][T22152] R13: 00007f9beb626038 R14: 00007f9beb625fa0 R15: 00007ffe8843f188 [ 745.052628][T22152] [ 745.681389][T22173] ip_tables: iptables: counters copy to user failed while replacing table [ 745.714921][T22173] syzkaller1: entered promiscuous mode [ 745.714943][T22173] syzkaller1: entered allmulticast mode [ 745.888811][T22175] IPv6: NLM_F_REPLACE set, but no existing node found! [ 746.043203][T22181] syzkaller1: entered promiscuous mode [ 746.043243][T22181] syzkaller1: entered allmulticast mode [ 746.323132][T22190] ipvlan2: entered allmulticast mode [ 746.394903][T22194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.764751][T22213] __nla_validate_parse: 1 callbacks suppressed [ 746.764805][T22213] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3870'. [ 746.765186][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 746.876580][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 746.876601][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 747.026385][T22224] Cannot find add_set index 0 as target [ 747.110293][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.451463][T22249] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20002 [ 748.035476][T22258] rxe_eth0 speed is unknown, defaulting to 1000 [ 748.552790][T22279] syzkaller0: entered promiscuous mode [ 748.552812][T22279] syzkaller0: entered allmulticast mode [ 748.610215][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'. [ 748.700332][T22286] geneve1: entered promiscuous mode [ 748.700354][T22286] geneve1: entered allmulticast mode [ 749.022031][T22301] veth0: entered promiscuous mode [ 749.893812][T22300] veth0: left promiscuous mode [ 749.951164][T22335] netlink: 'syz.3.3897': attribute type 21 has an invalid length. [ 749.951202][T22335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3897'. [ 749.951340][T22335] netlink: 'syz.3.3897': attribute type 5 has an invalid length. [ 749.951368][T22335] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3897'. [ 749.965520][T22332] netlink: 'syz.3.3897': attribute type 21 has an invalid length. [ 749.965558][T22332] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3897'. [ 749.965661][T22332] netlink: 'syz.3.3897': attribute type 5 has an invalid length. [ 749.965689][T22332] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3897'. [ 750.082963][T22330] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 750.083004][T22330] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3898'. [ 750.106788][T22330] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 750.675114][T22370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.815975][T22378] netlink: 'syz.1.3905': attribute type 1 has an invalid length. [ 751.051040][T22359] syzkaller1: entered promiscuous mode [ 751.051095][T22359] syzkaller1: entered allmulticast mode [ 751.615447][T22406] SET target dimension over the limit! [ 752.015744][T22426] netlink: 'syz.0.3917': attribute type 7 has an invalid length. [ 752.317658][T10772] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.317706][T10772] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.317739][T10772] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.317770][T10772] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.433097][T22451] netlink: 'syz.2.3924': attribute type 1 has an invalid length. [ 752.556066][T22453] __nla_validate_parse: 9 callbacks suppressed [ 752.556088][T22453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3925'. [ 752.583643][T22451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3924'. [ 752.791764][T22466] netlink: 'syz.3.3927': attribute type 6 has an invalid length. [ 753.012219][T22473] netlink: 'syz.3.3931': attribute type 1 has an invalid length. [ 753.077351][T22473] bond7: entered promiscuous mode [ 753.084508][T22473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 753.118726][T16904] IPVS: starting estimator thread 0... [ 753.208947][T22480] IPVS: using max 55 ests per chain, 132000 per kthread [ 753.315263][T22473] bond7: (slave bridge3): making interface the new active one [ 753.315306][T22473] bridge3: entered promiscuous mode [ 753.324963][T22473] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 753.368070][T22490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 753.368097][T22490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 753.580246][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 753.580271][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 753.583561][T22483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.085274][T22517] rdma_op ffff88807b56f238 conn xmit_rdma 0000000000000000 [ 754.312475][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 754.378439][T22529] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 754.383211][T22522] bond4: Invalid ad_actor_system MAC address. [ 754.383231][T22522] bond4: option ad_actor_system: invalid value (7) [ 754.439178][T22522] bond4 (unregistering): Released all slaves [ 754.516872][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 755.193752][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3951'. [ 755.238912][T22571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3950'. [ 755.319860][T22578] ip_tables: iptables: counters copy to user failed while replacing table [ 755.824358][T22143] udevd[22143]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 756.167152][T22613] ip6tnl0: entered promiscuous mode [ 756.496279][T22624] team0: Port device bond0 removed [ 756.504969][T22624] bridge_slave_0: left allmulticast mode [ 756.505391][T22624] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.602954][T22624] bridge_slave_1: left allmulticast mode [ 756.603381][T22624] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.721894][T22624] bond3: (slave veth0_to_bond): Releasing backup interface [ 756.721934][T22624] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 756.782162][T22624] bond0: (slave bond_slave_0): Releasing backup interface [ 756.820080][T22624] bond0: (slave bond_slave_1): Releasing backup interface [ 756.853661][T22624] team0: Port device team_slave_1 removed [ 756.856062][T22624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.865459][T22624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.872870][T22624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 756.880565][T22625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 756.895612][T22626] team0: Mode changed to "broadcast" [ 756.912123][T22627] tipc: Enabled bearer , priority 0 [ 757.090722][ T30] audit: type=1804 audit(1792294907.513:15): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3966" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1174 res=1 errno=0 [ 757.090819][ T30] audit: type=1800 audit(1792294907.513:16): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3966" name="cgroup.controllers" dev="tmpfs" ino=1174 res=0 errno=0 [ 757.098491][ T30] audit: type=1804 audit(1792294907.513:17): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3966" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1174 res=1 errno=0 [ 757.282975][T22602] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.039581][ T8093] tipc: Node number set to 2927636452 [ 758.056747][T22653] syzkaller0: entered promiscuous mode [ 758.056785][T22653] syzkaller0: entered allmulticast mode [ 758.244288][T22660] syzkaller0: entered promiscuous mode [ 758.244343][T22660] syzkaller0: entered allmulticast mode [ 758.515754][T22666] __nla_validate_parse: 9 callbacks suppressed [ 758.515773][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'. [ 758.801619][T22670] IPVS: stopping backup sync thread 20506 ... [ 758.907451][T22678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.912453][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'. [ 758.912539][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 758.975273][T22678] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 758.975325][T22678] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3978'. [ 758.986340][T22678] .`: renamed from bond0 [ 759.195837][T22690] netlink: 'syz.2.3981': attribute type 13 has an invalid length. [ 759.195888][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 759.240238][T22691] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 759.240260][T22691] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3979'. [ 759.320236][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'. [ 759.389752][T22693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 759.612383][T22709] syzkaller0: entered promiscuous mode [ 759.612423][T22709] syzkaller0: entered allmulticast mode [ 759.625927][T22709] tc mirred to Houston: device batadv_slave_0 is down [ 759.920338][T22717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3990'. [ 759.920423][T22717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3990'. [ 759.990931][T22718] netlink: 'syz.1.3989': attribute type 1 has an invalid length. [ 760.074243][T22706] netlink: 'syz.2.3985': attribute type 4 has an invalid length. [ 760.132716][T22727] bond0: (slave geneve2): making interface the new active one [ 760.133696][T22727] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 760.177722][T16904] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.199094][T16908] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.199158][T16908] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.199223][T16908] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.384964][T22718] bond0: entered promiscuous mode [ 760.384987][T22718] geneve2: entered promiscuous mode [ 760.402610][T22718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.529251][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.614755][T22741] xt_nfacct: accounting object `syz' does not exist [ 760.631857][T22740] xt_nfacct: accounting object `syz' does not exist [ 760.813504][T22748] tipc: New replicast peer: 255.255.255.255 [ 760.814145][T22748] tipc: Enabled bearer , priority 10 [ 760.831924][T22748] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 760.932783][T22748] bond2: entered promiscuous mode [ 760.933675][T22748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.973875][T22756] Cannot find del_set index 17 as target [ 760.990375][T22748] bond2: entered allmulticast mode [ 761.021494][T22748] bond2: (slave bridge5): making interface the new active one [ 761.021520][T22748] bridge5: entered promiscuous mode [ 761.021690][T22748] bridge5: entered allmulticast mode [ 761.024316][T22748] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 761.168464][T12410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.642766][T22783] sctp: [Deprecated]: syz.0.4008 (pid 22783) Use of int in max_burst socket option. [ 761.642766][T22783] Use struct sctp_assoc_value instead [ 761.805090][T22793] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 762.163215][T22811] dvmrp0: entered allmulticast mode [ 762.298740][T22799] ipvlan0: left promiscuous mode [ 762.298764][T22799] ipvlan0: left allmulticast mode [ 762.469884][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 763.447348][T22886] netlink: 'syz.0.4029': attribute type 11 has an invalid length. [ 763.602181][T22898] netlink: 'syz.3.4031': attribute type 12 has an invalid length. [ 763.617209][T22898] netlink: 'syz.3.4031': attribute type 29 has an invalid length. [ 763.617230][T22898] __nla_validate_parse: 7 callbacks suppressed [ 763.617242][T22898] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4031'. [ 763.617276][T22898] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4031'. [ 766.108179][T22854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.477022][T22908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4036'. [ 766.517860][T22913] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4035'. [ 766.693524][T22923] xt_l2tp: missing protocol rule (udp|l2tpip) [ 766.976803][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4043'. [ 767.319172][T22955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.474885][T22960] TC_ACT_REPEAT abuse ? [ 767.490438][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 767.946537][T22978] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4056'. [ 768.224851][T22985] veth4: entered allmulticast mode [ 768.920162][T23023] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 769.249933][T23029] netlink: 'syz.2.4070': attribute type 153 has an invalid length. [ 769.251492][T23027] syzkaller0: entered promiscuous mode [ 769.251531][T23027] syzkaller0: entered allmulticast mode [ 769.272354][T23029] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4070'. [ 769.291629][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4071'. [ 769.291666][T23031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4071'. [ 769.470415][T23034] netlink: 'syz.2.4070': attribute type 1 has an invalid length. [ 769.470454][T23034] netlink: 'syz.2.4070': attribute type 12 has an invalid length. [ 769.470484][T23034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4070'. [ 769.536880][T23035] veth0: entered promiscuous mode [ 769.546188][T23033] veth0: left promiscuous mode [ 769.869399][T23039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4073'. [ 769.869427][T23039] openvswitch: netlink: Flow actions attr not present in new flow. [ 769.994008][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4076'. [ 770.013369][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'. [ 770.013567][T23050] openvswitch: netlink: Missing valid actions attribute. [ 770.038199][T23055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4078'. [ 770.136654][T23058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4078'. [ 770.160589][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 771.016147][T23092] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 771.242042][T23092] bond2 (unregistering): Released all slaves [ 771.430203][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 771.941731][T23130] bond2: option updelay: invalid value (18446744073709518847) [ 771.941791][T23130] bond2: option updelay: allowed values 0 - 2147483647 [ 771.954940][T23130] bond2 (unregistering): Released all slaves [ 771.963315][T23146] netlink: 'syz.0.4097': attribute type 1 has an invalid length. [ 771.985451][T23147] netlink: NAT attribute has 8 unknown bytes [ 771.985511][T23147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.014641][T23133] veth1_to_bond: entered promiscuous mode [ 772.058611][T16908] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.058690][T16908] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.058752][T16908] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.058814][T16908] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.524217][T23170] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 772.541436][T23172] ip_tables: iptables: counters copy to user failed while replacing table [ 772.542588][T23172] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 772.569273][T23168] bond4: Removing last arp target with arp_interval on [ 772.572173][T23173] syzkaller0: entered promiscuous mode [ 772.572192][T23173] syzkaller0: entered allmulticast mode [ 772.668576][T23132] veth1_to_bond: left promiscuous mode [ 772.675215][T23164] tipc: Enabled bearer , priority 0 [ 772.704840][T23163] tipc: Resetting bearer [ 772.784838][T23163] tipc: Disabling bearer [ 772.972208][T23188] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 773.100271][T23192] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 774.259305][T23221] xt_hashlimit: size too large, truncated to 1048576 [ 774.343966][T23230] block nbd4: not configured, cannot reconfigure [ 774.514015][T23225] __nla_validate_parse: 14 callbacks suppressed [ 774.514035][T23225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4123'. [ 774.562302][T23211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4118'. [ 774.871813][T23218] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.889552][T23218] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.138772][T23218] macvlan1: left promiscuous mode [ 775.171123][T23218] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 775.174816][T23218] macvlan2: left promiscuous mode [ 775.174833][T23218] bond3: left promiscuous mode [ 775.196390][T23218] syzkaller0: left promiscuous mode [ 775.205067][T23218] bond6: left promiscuous mode [ 775.205089][T23218] gre1: left promiscuous mode [ 775.216694][T23218] bond7: left promiscuous mode [ 775.216731][T23218] bridge3: left promiscuous mode [ 775.385413][T23257] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 776.128980][T23299] netlink: 'syz.2.4132': attribute type 1 has an invalid length. [ 776.233282][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 776.271990][T23299] bond3: entered promiscuous mode [ 776.272902][T23299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.413814][T23302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.414465][T23302] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 776.414500][T23302] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 776.494415][T23302] bond3: (slave wireguard0): making interface the new active one [ 776.494458][T23302] wireguard0: entered promiscuous mode [ 776.512149][T23302] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 776.646734][T23331] nbd: couldn't find a device at index 0 [ 776.793506][T23338] xt_l2tp: missing protocol rule (udp|l2tpip) [ 776.922846][T23348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4140'. [ 776.963768][T23342] bond4: option all_slaves_active: invalid value (255) [ 776.982013][T23342] bond4 (unregistering): Released all slaves [ 777.098355][T23340] bond2: ARP target 9.0.0.0 is already present [ 777.098382][T23340] bond2: option arp_ip_target: invalid value (9) [ 777.195364][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 777.339050][T23358] netlink: 'syz.0.4142': attribute type 16 has an invalid length. [ 777.339072][T23358] netlink: 'syz.0.4142': attribute type 17 has an invalid length. [ 777.880329][T23340] bond2 (unregistering): Released all slaves [ 777.973906][T23348] ip6tnl3: entered promiscuous mode [ 777.974173][T23358] lo: left promiscuous mode [ 778.008228][T23358] tunl0: left promiscuous mode [ 778.038532][T23358] gre0: left promiscuous mode [ 778.090609][T23358] gretap0: left promiscuous mode [ 778.122723][T23358] erspan0: left promiscuous mode [ 778.152300][T23358] ip_vti0: left promiscuous mode [ 778.171151][T23358] ip6_vti0: left promiscuous mode [ 778.181929][T23358] sit0: left promiscuous mode [ 778.262278][T23358] ip6tnl0: left promiscuous mode [ 778.275350][T23358] ip6gre0: left promiscuous mode [ 778.294268][T23358] syz_tun: left promiscuous mode [ 778.311722][T23358] ip6gretap0: left promiscuous mode [ 778.355635][T23358] vcan0: left promiscuous mode [ 778.376941][T23358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.405151][T23358] team0: left promiscuous mode [ 778.409840][T23358] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.410713][T23358] tipc: Resetting bearer [ 778.411172][T23358] tipc: Resetting bearer [ 778.412593][T23358] dummy0: left promiscuous mode [ 778.424556][T23358] nlmon0: left promiscuous mode [ 778.441371][T23358] batadv0: left promiscuous mode [ 778.442918][T23358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.444012][T23358] veth0: left promiscuous mode [ 778.445206][T23358] veth1: left promiscuous mode [ 778.449653][T23358] wg0: left promiscuous mode [ 778.496085][T23358] wg1: left promiscuous mode [ 778.507433][T23358] wg2: left promiscuous mode [ 778.510112][T23358] veth0_to_bridge: left promiscuous mode [ 778.511168][T23358] bridge_slave_0: left promiscuous mode [ 778.513757][T23358] veth1_to_bridge: left promiscuous mode [ 778.516366][T23358] bridge_slave_1: left promiscuous mode [ 778.553188][T23358] bond_slave_0: left promiscuous mode [ 778.553929][T23358] veth1_to_bond: left promiscuous mode [ 778.555196][T23358] bond_slave_1: left promiscuous mode [ 778.555933][T23358] veth1_to_team: left promiscuous mode [ 778.573895][T23358] team_slave_1: left promiscuous mode [ 778.585731][T23358] veth0_to_batadv: left promiscuous mode [ 778.586974][T23358] batadv_slave_0: left promiscuous mode [ 778.601211][T23358] veth1_to_batadv: left promiscuous mode [ 778.605335][T23358] batadv_slave_1: left promiscuous mode [ 778.609799][T23358] xfrm0: left promiscuous mode [ 778.613529][T23358] veth0_to_hsr: left promiscuous mode [ 778.620388][T23358] veth1_to_hsr: left promiscuous mode [ 778.624433][T23358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.624469][T23358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.624644][T23358] hsr0: left promiscuous mode [ 778.633511][T23358] veth1_virt_wifi: left promiscuous mode [ 778.636198][T23358] veth0_virt_wifi: left promiscuous mode [ 778.641214][T23358] virt_wifi0: left promiscuous mode [ 778.644854][T23358] veth1_vlan: left promiscuous mode [ 778.659697][T23358] vlan0: left promiscuous mode [ 778.666644][T23358] vlan1: left promiscuous mode [ 778.672516][T23358] veth1_vlan: entered promiscuous mode [ 778.672970][T23358] macvlan0: left promiscuous mode [ 778.684664][T23358] macvlan1: left promiscuous mode [ 778.702569][T23358] ipvlan0: left promiscuous mode [ 778.716032][T23358] ipvlan1: left promiscuous mode [ 778.722717][T23358] veth1_macvtap: left promiscuous mode [ 778.723925][T23358] veth0_macvtap: left promiscuous mode [ 778.725088][T23358] veth0_macvtap: entered promiscuous mode [ 778.725281][T23358] macvtap0: left promiscuous mode [ 778.726491][T23358] veth1_macvtap: entered promiscuous mode [ 778.726734][T23358] macsec0: left promiscuous mode [ 778.733822][T23358] geneve0: left promiscuous mode [ 778.766381][T23358] geneve1: left promiscuous mode [ 778.773836][T23358] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 778.773860][T23358] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 778.775947][T23358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.776766][T23358] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 778.791921][T23358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.792665][T23358] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 778.793009][T23358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.823741][T23358] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 778.833965][T23358] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 778.841626][T23358] ip6tnl1: left promiscuous mode [ 778.841660][T23358] ip6tnl1: left allmulticast mode [ 778.854090][T23358] vlan2: left promiscuous mode [ 778.854150][T23358] bond0: left promiscuous mode [ 778.854185][T23358] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 778.864812][T23358] vxcan2: left promiscuous mode [ 778.866175][T23358] vxcan3: left promiscuous mode [ 778.873640][T23358] gtp0: left promiscuous mode [ 778.891927][T23358] vxlan0: left promiscuous mode [ 778.910093][T23358] bond1: left promiscuous mode [ 778.913194][T23358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.921559][T23358] bond2: left promiscuous mode [ 778.922505][T23358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.925490][T23358] bridge1: left promiscuous mode [ 778.926763][T23358] macvtap1: left promiscuous mode [ 778.954955][T23358] gretap1: left promiscuous mode [ 778.956722][T23358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.172258][T23387] nbd: couldn't find a device at index 0 [ 779.269733][T23324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.269825][T23324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.269895][T23324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.269960][T23324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.271733][T23393] syzkaller1: entered promiscuous mode [ 779.271752][T23393] syzkaller1: entered allmulticast mode [ 779.374616][T23396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4150'. [ 779.434948][T23396] syzkaller0: left allmulticast mode [ 779.445351][T23400] bridge0: port 3(syz_tun) entered disabled state [ 779.461695][T23400] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.472025][T23400] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.491831][T23403] netlink: 'syz.1.4153': attribute type 16 has an invalid length. [ 779.491867][T23403] netlink: 'syz.1.4153': attribute type 17 has an invalid length. [ 779.639139][T23396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4150'. [ 779.672626][T23403] ip6tnl0: left promiscuous mode [ 779.679835][T23403] bridge0: port 3(syz_tun) entered blocking state [ 779.680051][T23403] bridge0: port 3(syz_tun) entered forwarding state [ 779.695164][T23403] 8021q: adding VLAN 0 to HW filter on device .` [ 779.733705][T23403] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.733928][T23403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.741172][T23403] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.741371][T23403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.911834][T23403] geneve1: left promiscuous mode [ 779.911876][T23403] geneve1: left allmulticast mode [ 779.945987][T23403] vlan2: left promiscuous mode [ 779.956160][T23403] macsec1: left allmulticast mode [ 779.956179][T23403] ip6gretap0: left allmulticast mode [ 779.970088][T23403] ip6gre1: left promiscuous mode [ 779.970108][T23403] ip6gre1: left allmulticast mode [ 779.982253][T23403] bond1: left promiscuous mode [ 779.982288][T23403] wireguard2: left promiscuous mode [ 779.998416][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.046033][T23403] bridge3: left promiscuous mode [ 780.064240][T23403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 780.090859][T23403] bond0: left promiscuous mode [ 780.090913][T23403] geneve2: left promiscuous mode [ 780.144977][T23403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.156893][T23403] ip6tnl3: left promiscuous mode [ 780.163734][T23403] erspan0: entered promiscuous mode [ 780.174155][T23407] bridge0: port 1(syz_tun) entered blocking state [ 780.174264][T23407] bridge0: port 1(syz_tun) entered disabled state [ 780.174400][T23407] syz_tun: entered allmulticast mode [ 780.176470][T23407] syz_tun: entered promiscuous mode [ 780.202548][T23407] bridge0: port 1(syz_tun) entered blocking state [ 780.202657][T23407] bridge0: port 1(syz_tun) entered forwarding state [ 780.226395][T12405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.441692][T23325] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 780.441892][T23325] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 780.449281][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4155'. [ 780.489496][T12411] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 780.717479][T12405] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 780.718639][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4156'. [ 780.910869][T23426] syzkaller0: entered promiscuous mode [ 780.910924][T23426] syzkaller0: entered allmulticast mode [ 781.007921][T12411] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 781.391622][T23447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.464524][T23452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4165'. [ 781.466499][T23450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.535303][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4165'. [ 781.535765][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4165'. [ 781.646625][T23444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.935065][T12405] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 782.285854][T23477] fido_id[23477]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 782.324462][T23325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.324514][T23325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.471332][T23484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.692874][T23498] nbd: couldn't find a device at index 2 [ 783.109777][T23513] netlink: 'syz.2.4176': attribute type 2 has an invalid length. [ 783.266014][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4180'. [ 783.266073][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4180'. [ 783.304505][T23524] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 783.304542][T23524] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4180'. [ 783.366773][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4182'. [ 783.511720][T23538] nbd: must specify a device to reconfigure [ 783.591605][ T5613] Bluetooth: hci1: command 0x0405 tx timeout [ 783.674638][T23540] syzkaller1: entered promiscuous mode [ 783.674660][T23540] syzkaller1: entered allmulticast mode [ 783.746612][T23557] xt_hashlimit: invalid rate [ 783.755456][T23557] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 783.775116][T23557] 0ªX¹¦Dö»: entered allmulticast mode [ 784.307309][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 784.594398][T23595] syzkaller0: entered promiscuous mode [ 784.594420][T23595] syzkaller0: entered allmulticast mode [ 785.031413][T23602] bond4 (unregistering): Released all slaves [ 785.168938][T23606] bond4 (unregistering): Released all slaves [ 785.218372][T23619] __nla_validate_parse: 6 callbacks suppressed [ 785.218390][T23619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4200'. [ 785.220613][T23619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4200'. [ 785.322582][T23614] macsec1: entered promiscuous mode [ 785.545452][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4203'. [ 785.548665][T23628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4203'. [ 785.549819][T23628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4203'. [ 785.780398][T23635] vxcan2: entered allmulticast mode [ 785.796134][T23633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 785.836735][T23633] syzkaller0: entered promiscuous mode [ 785.836756][T23633] syzkaller0: entered allmulticast mode [ 785.879742][T23638] 8021q: VLANs not supported on syzkaller0 [ 786.122868][T23644] bond1: entered allmulticast mode [ 786.122891][T23644] wireguard2: entered allmulticast mode [ 786.330102][T23655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4213'. [ 786.339403][T23657] x_tables: duplicate underflow at hook 1 [ 786.646950][T23669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4217'. [ 786.646975][T23669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 786.856303][T23681] sctp: [Deprecated]: syz.2.4220 (pid 23681) Use of int in max_burst socket option. [ 786.856303][T23681] Use struct sctp_assoc_value instead [ 786.856347][T23679] netlink: 'syz.4.4219': attribute type 4 has an invalid length. [ 786.888049][T23679] netlink: 'syz.4.4219': attribute type 4 has an invalid length. [ 787.195485][T23700] netlink: 'syz.1.4226': attribute type 21 has an invalid length. [ 787.291631][T23698] block nbd4: not configured, cannot reconfigure [ 787.582832][T23728] ip_tables: iptables: counters copy to user failed while replacing table [ 788.093637][T23747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4237'. [ 788.094873][T23747] openvswitch: netlink: IPv4 tun info is not correct [ 788.211830][T23750] ip6t_srh: unknown srh match flags 4000 [ 788.242268][T23750] netlink: 'syz.4.4238': attribute type 1 has an invalid length. [ 788.259135][T23754] block nbd3: not configured, cannot reconfigure [ 788.422702][T23750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.423418][T23762] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.446782][T23757] veth0_to_bond: left promiscuous mode [ 788.446816][T23757] veth0_to_bond: left allmulticast mode [ 788.506563][T23757] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 788.544066][T23761] bridge0: entered promiscuous mode [ 788.546036][T23750] netlink: 'syz.4.4238': attribute type 1 has an invalid length. [ 788.562524][T23761] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 788.724887][T23766] bridge0: port 1(syz_tun) entered disabled state [ 788.803940][T23766] tipc: Resetting bearer [ 789.782704][T23781] tc_dump_action: action bad kind [ 789.834798][T23325] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.834832][T23325] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.888187][T23315] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.888218][T23315] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.888289][T23315] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.888313][T23315] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.888343][T23315] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.888365][T23315] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.999131][T23803] sctp: [Deprecated]: syz.4.4250 (pid 23803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.999131][T23803] Use struct sctp_sack_info instead [ 790.435335][T23834] __nla_validate_parse: 5 callbacks suppressed [ 790.435355][T23834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4257'. [ 790.435369][T23834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4257'. [ 790.608755][T23847] bridge0: port 3(bond0) entered blocking state [ 790.608916][T23847] bridge0: port 3(bond0) entered disabled state [ 790.609084][T23847] bond0: entered allmulticast mode [ 790.609099][T23847] bond_slave_0: entered allmulticast mode [ 790.609114][T23847] bond_slave_1: entered allmulticast mode [ 790.623510][T23847] bond0: entered promiscuous mode [ 790.623531][T23847] bond_slave_0: entered promiscuous mode [ 790.623707][T23847] bond_slave_1: entered promiscuous mode [ 791.899361][T23918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4280'. [ 791.904510][T23918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4280'. [ 791.935838][T23916] tap0: tun_chr_ioctl cmd 35108 [ 792.124453][T23924] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 792.236887][T23924] bond5: entered promiscuous mode [ 792.240266][T23924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 792.485779][T23940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4286'. [ 792.485811][T23940] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 792.486182][T23940] block nbd3: not configured, cannot reconfigure [ 792.794320][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 792.863047][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'. [ 792.863079][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4294'. [ 792.890231][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'. [ 792.890262][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4294'. [ 792.908931][T23315] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.908972][T23315] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.909003][T23315] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.909032][T23315] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.050715][T23982] ebt_limit: overflow, try lower: 4294901760/65535 [ 793.061458][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.061515][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.062255][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.065779][T23982] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 793.065808][T23982] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 793.065843][T23982] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 793.119172][T23315] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.119216][T23315] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.119246][T23315] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.119275][T23315] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.136482][T23992] ebt_limit: overflow, try lower: 4294901760/65535 [ 793.191200][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.211622][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.211721][T23996] FAULT_INJECTION: forcing a failure. [ 793.211721][T23996] name failslab, interval 1, probability 0, space 0, times 0 [ 793.211749][T23996] CPU: 1 UID: 0 PID: 23996 Comm: syz.4.4299 Not tainted syzkaller #0 PREEMPT(full) [ 793.211795][T23996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 793.211818][T23996] Call Trace: [ 793.211825][T23996] [ 793.211834][T23996] dump_stack_lvl+0xe8/0x150 [ 793.211866][T23996] should_fail_ex+0x410/0x560 [ 793.211898][T23996] should_failslab+0xa8/0x100 [ 793.211926][T23996] __kmalloc_noprof+0xfe/0x720 [ 793.211948][T23996] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 793.212010][T23996] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 793.212044][T23996] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 793.212079][T23996] genl_family_rcv_msg_doit+0xda/0x340 [ 793.212110][T23996] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 793.212140][T23996] ? __pfx_genl_get_cmd+0x10/0x10 [ 793.212162][T23996] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 793.212286][T23996] ? __lock_acquire+0x747/0x2de0 [ 793.212319][T23996] genl_rcv_msg+0x614/0x7a0 [ 793.212351][T23996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.212375][T23996] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 793.212414][T23996] netlink_rcv_skb+0x226/0x4a0 [ 793.212436][T23996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.212461][T23996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.212502][T23996] ? down_read+0x2be/0x330 [ 793.212549][T23996] genl_rcv+0x28/0x40 [ 793.212571][T23996] netlink_unicast+0x8ef/0xa80 [ 793.212658][T23996] netlink_sendmsg+0x813/0xb40 [ 793.212688][T23996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.212715][T23996] ? apparmor_socket_sendmsg+0x98/0x360 [ 793.212743][T23996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.212762][T23996] sock_sendmsg_nosec+0x14e/0x190 [ 793.212786][T23996] ____sys_sendmsg+0x54e/0x850 [ 793.212817][T23996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.212852][T23996] ? import_iovec+0x73/0xa0 [ 793.212883][T23996] ___sys_sendmsg+0x2a5/0x360 [ 793.212907][T23996] ? __lock_acquire+0x747/0x2de0 [ 793.212930][T23996] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.212995][T23996] ? __fget_files+0x2a/0x420 [ 793.213021][T23996] ? __fget_files+0x3a2/0x420 [ 793.213059][T23996] __x64_sys_sendmsg+0x1b1/0x290 [ 793.213086][T23996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.213135][T23996] do_syscall_64+0x166/0x520 [ 793.213159][T23996] ? trace_irq_disable+0x3b/0x140 [ 793.213179][T23996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.213198][T23996] ? clear_bhb_loop+0x70/0xc0 [ 793.213222][T23996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.213241][T23996] RIP: 0033:0x7f9beb39e559 [ 793.213259][T23996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.213274][T23996] RSP: 002b:00007f9bec1eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.213294][T23996] RAX: ffffffffffffffda RBX: 00007f9beb625fa0 RCX: 00007f9beb39e559 [ 793.213308][T23996] RDX: 0000000000004000 RSI: 0000200000000540 RDI: 0000000000000004 [ 793.213320][T23996] RBP: 00007f9bec1eb090 R08: 0000000000000000 R09: 0000000000000000 [ 793.213332][T23996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.213343][T23996] R13: 00007f9beb626038 R14: 00007f9beb625fa0 R15: 00007ffe8843f188 [ 793.213376][T23996] [ 793.214496][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.225856][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.235512][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.241396][T23982] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.385824][T24001] syzkaller0: entered promiscuous mode [ 793.385844][T24001] syzkaller0: entered allmulticast mode [ 793.910646][T24017] bond4: entered allmulticast mode [ 793.940843][T24021] macvlan2: entered promiscuous mode [ 793.940865][T24021] macvlan2: entered allmulticast mode [ 793.946031][T24021] bond4: entered promiscuous mode [ 793.965061][T24021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 793.974726][T24021] bond4: left promiscuous mode [ 794.151481][T24031] FAULT_INJECTION: forcing a failure. [ 794.151481][T24031] name failslab, interval 1, probability 0, space 0, times 0 [ 794.151512][T24031] CPU: 0 UID: 0 PID: 24031 Comm: syz.2.4310 Not tainted syzkaller #0 PREEMPT(full) [ 794.151534][T24031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.151554][T24031] Call Trace: [ 794.151561][T24031] [ 794.151571][T24031] dump_stack_lvl+0xe8/0x150 [ 794.151603][T24031] should_fail_ex+0x410/0x560 [ 794.151634][T24031] should_failslab+0xa8/0x100 [ 794.151662][T24031] __kmalloc_noprof+0xfe/0x720 [ 794.151687][T24031] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 794.151713][T24031] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 794.151747][T24031] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 794.151781][T24031] genl_family_rcv_msg_doit+0xda/0x340 [ 794.151814][T24031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 794.151843][T24031] ? __pfx_genl_get_cmd+0x10/0x10 [ 794.151865][T24031] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 794.151892][T24031] ? __lock_acquire+0x747/0x2de0 [ 794.151923][T24031] genl_rcv_msg+0x614/0x7a0 [ 794.151954][T24031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.151978][T24031] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 794.152017][T24031] netlink_rcv_skb+0x226/0x4a0 [ 794.152039][T24031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.152064][T24031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.152099][T24031] ? down_read+0x2be/0x330 [ 794.152130][T24031] genl_rcv+0x28/0x40 [ 794.152151][T24031] netlink_unicast+0x8ef/0xa80 [ 794.152198][T24031] netlink_sendmsg+0x813/0xb40 [ 794.152228][T24031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.152258][T24031] ? apparmor_socket_sendmsg+0x98/0x360 [ 794.152286][T24031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.152304][T24031] sock_sendmsg_nosec+0x14e/0x190 [ 794.152328][T24031] ____sys_sendmsg+0x54e/0x850 [ 794.152360][T24031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.152395][T24031] ? import_iovec+0x73/0xa0 [ 794.152425][T24031] ___sys_sendmsg+0x2a5/0x360 [ 794.152447][T24031] ? __lock_acquire+0x747/0x2de0 [ 794.152472][T24031] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.152534][T24031] ? __fget_files+0x2a/0x420 [ 794.152567][T24031] ? __fget_files+0x3a2/0x420 [ 794.152604][T24031] __x64_sys_sendmsg+0x1b1/0x290 [ 794.152633][T24031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.152681][T24031] do_syscall_64+0x166/0x520 [ 794.152703][T24031] ? trace_irq_disable+0x3b/0x140 [ 794.152723][T24031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.152742][T24031] ? clear_bhb_loop+0x70/0xc0 [ 794.152764][T24031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.152783][T24031] RIP: 0033:0x7f298ed9e559 [ 794.152801][T24031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.152816][T24031] RSP: 002b:00007f298fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.152837][T24031] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e559 [ 794.152851][T24031] RDX: 0000000000004000 RSI: 0000200000000540 RDI: 0000000000000004 [ 794.152863][T24031] RBP: 00007f298fb97090 R08: 0000000000000000 R09: 0000000000000000 [ 794.152875][T24031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.152886][T24031] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd2fc4be68 [ 794.152919][T24031] [ 794.690695][T24057] syzkaller0: entered promiscuous mode [ 794.690716][T24057] syzkaller0: entered allmulticast mode [ 794.754066][T24051] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 794.754193][T24051] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 794.754349][T24051] veth0_virt_wifi: entered allmulticast mode [ 794.764594][T24051] veth0_virt_wifi: entered promiscuous mode [ 794.895758][T24062] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 794.941027][T24064] xt_TCPMSS: Only works on TCP SYN packets [ 795.041633][T24069] siw: device registration error -23 [ 795.301594][T24084] sctp: [Deprecated]: syz.0.4325 (pid 24084) Use of int in max_burst socket option deprecated. [ 795.301594][T24084] Use struct sctp_assoc_value instead [ 795.328491][T24081] syzkaller0: entered promiscuous mode [ 795.328512][T24081] syzkaller0: entered allmulticast mode [ 795.726347][T24106] __nla_validate_parse: 6 callbacks suppressed [ 795.726368][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4330'. [ 795.805110][T24106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 795.970855][T24115] syzkaller0: entered promiscuous mode [ 795.970877][T24115] syzkaller0: entered allmulticast mode [ 795.995233][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 796.069631][T24125] netlink: 'syz.2.4334': attribute type 1 has an invalid length. [ 796.069651][T24125] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4334'. [ 796.426055][T24147] netlink: 'syz.1.4341': attribute type 83 has an invalid length. [ 796.510496][T24146] netlink: 'syz.0.4342': attribute type 4 has an invalid length. [ 796.516444][T24147] syzkaller1: entered allmulticast mode [ 796.785100][T24170] syzkaller0: entered promiscuous mode [ 796.785123][T24170] syzkaller0: entered allmulticast mode [ 796.876473][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4345'. [ 797.239739][T24148] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 797.239763][T24148] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 797.273973][T24148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.273993][T24148] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 797.346611][T24148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.346632][T24148] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 797.478063][T24207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4355'. [ 797.568297][T24216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4359'. [ 797.570115][T24217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4359'. [ 797.574997][T24212] batman_adv: batadv0: Adding interface: veth0 [ 797.575010][T24212] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.575199][T24212] batman_adv: batadv0: Interface activated: veth0 [ 797.736536][T24227] batman_adv: batadv0: Interface deactivated: veth0 [ 797.736559][T24227] batman_adv: batadv0: Removing interface: veth0 [ 797.926614][T24231] netlink: 'syz.3.4362': attribute type 1 has an invalid length. [ 798.114427][T24240] tipc: Enabled bearer , priority 0 [ 798.116336][T24240] syzkaller0: entered promiscuous mode [ 798.116355][T24240] syzkaller0: entered allmulticast mode [ 798.138202][T24240] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 798.212411][T24240] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 798.226715][T24240] tipc: Resetting bearer [ 798.261161][T24238] tipc: Resetting bearer [ 798.353381][T24238] tipc: Disabling bearer [ 798.479537][T24254] syzkaller0: entered promiscuous mode [ 798.479558][T24254] syzkaller0: entered allmulticast mode [ 798.675483][T24267] bridge0: entered allmulticast mode [ 798.704174][T10772] IPVS: starting estimator thread 0... [ 798.773145][T24270] pim6reg: entered allmulticast mode [ 798.773474][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 798.790150][T24271] IPVS: using max 37 ests per chain, 88800 per kthread [ 798.934497][T24279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4373'. [ 799.014606][T24279] bridge0: port 4(vlan2) entered blocking state [ 799.016008][T24279] bridge0: port 4(vlan2) entered disabled state [ 799.016176][T24279] vlan2: entered allmulticast mode [ 799.016193][T24279] geneve0: entered allmulticast mode [ 799.029024][T24279] vlan2: entered promiscuous mode [ 799.029042][T24279] geneve0: entered promiscuous mode [ 799.192336][T24293] netlink: 'syz.4.4376': attribute type 8 has an invalid length. [ 799.830466][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 799.863464][T24275] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 800.458621][T24415] netlink: 'syz.2.4386': attribute type 1 has an invalid length. [ 800.653046][T24425] netlink: 'syz.1.4388': attribute type 1 has an invalid length. [ 800.653088][T24425] NCSI netlink: No device for ifindex 0 [ 800.796773][T24431] __nla_validate_parse: 1 callbacks suppressed [ 800.796791][T24431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4389'. [ 800.878963][T24436] Bluetooth: MGMT ver 1.23 [ 800.881623][T24427] lo: left promiscuous mode [ 800.881643][T24427] lo: left allmulticast mode [ 800.882320][T24427] netlink: 'syz.4.4389': attribute type 2 has an invalid length. [ 800.882682][T24427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.024104][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 801.774892][T24474] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.092804][T24482] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.263594][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4405'. [ 802.435162][T24474] virt_wifi0 speed is unknown, defaulting to 1000 [ 802.463523][T24492] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 802.686267][T24508] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 803.413963][T24529] sctp: [Deprecated]: syz.4.4413 (pid 24529) Use of int in maxseg socket option. [ 803.413963][T24529] Use struct sctp_assoc_value instead [ 803.633843][T24539] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 803.721340][T24546] netlink: 'syz.0.4419': attribute type 1 has an invalid length. [ 803.759425][T24549] syzkaller1: entered promiscuous mode [ 803.759445][T24549] syzkaller1: entered allmulticast mode [ 804.350697][T24566] siw: device registration error -23 [ 804.354037][T24566] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20002 [ 804.462535][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.480966][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.480995][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.498827][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.498857][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.616582][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 804.616613][T24559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 805.076866][T24559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.204161][T24559] veth1_vlan: left allmulticast mode [ 805.440519][T24559] ip6gretap1: left promiscuous mode [ 805.446293][T24559] bond3: left allmulticast mode [ 805.446306][T24559] ip6gretap1: left allmulticast mode [ 805.731008][T24575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.754429][T23321] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.754462][T23321] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.755627][T16904] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.755654][T16904] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.755694][T16904] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.755726][T16904] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.755756][T16904] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.755776][T16904] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.883093][T24588] syzkaller0: entered promiscuous mode [ 805.883114][T24588] syzkaller0: entered allmulticast mode [ 808.549372][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.962308][T24589] syzkaller0: entered promiscuous mode [ 808.962328][T24589] syzkaller0: entered allmulticast mode [ 808.966148][T24596] syzkaller0: left promiscuous mode [ 808.966166][T24596] syzkaller0: left allmulticast mode [ 809.131269][T24620] ip_tables: iptables: counters copy to user failed while replacing table [ 809.292038][T24631] __nla_validate_parse: 193 callbacks suppressed [ 809.292058][T24631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4439'. [ 809.356835][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.373411][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.378137][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.378679][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.406108][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.406826][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.412924][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.413408][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.447179][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 809.518175][T24644] veth1_to_team: entered promiscuous mode [ 809.533560][T24644] veth1_to_team: left promiscuous mode [ 809.574593][T24651] macsec1: left promiscuous mode [ 809.589886][T23321] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.590945][T16908] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.590987][T16908] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.591024][T16908] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.711536][T24653] netlink: 'syz.1.4444': attribute type 1 has an invalid length. [ 809.795260][T24658] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 810.481195][T24671] syzkaller0: entered promiscuous mode [ 810.481217][T24671] syzkaller0: entered allmulticast mode [ 811.470073][T24719] gtp0: entered promiscuous mode [ 811.470095][T24719] gtp0: entered allmulticast mode [ 811.773103][T24737] vlan3: entered allmulticast mode [ 811.773126][T24737] dummy0: entered allmulticast mode [ 812.296100][T24775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 812.994583][T24811] bridge3: entered allmulticast mode [ 813.078676][T24815] bridge4: entered allmulticast mode [ 813.621230][T24842] ip_tables: iptables: counters copy to user failed while replacing table [ 813.623006][T24842] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.370650][T24899] ip_tables: iptables: counters copy to user failed while replacing table [ 814.671058][T24905] xt_IDLETIMER: timeout value is zero [ 815.098352][T24913] __nla_validate_parse: 35 callbacks suppressed [ 815.098373][T24913] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4491'. [ 815.131332][T24916] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4491'. [ 815.136515][T24920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 815.349165][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 815.349199][T24926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4494'. [ 815.356429][T24926] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.579926][T24930] netlink: 'syz.2.4495': attribute type 8 has an invalid length. [ 815.581128][T24930] x_tables: duplicate underflow at hook 2 [ 815.835326][T24936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4497'. [ 815.835951][T24936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4497'. [ 815.836848][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 815.924080][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4498'. [ 815.924114][T24939] netlink: 'syz.2.4498': attribute type 5 has an invalid length. [ 815.924849][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4498'. [ 815.924873][T24939] netlink: 'syz.2.4498': attribute type 5 has an invalid length. [ 816.062180][T24924] bond0: (slave netdevsim1): Releasing backup interface [ 816.102423][T24944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 816.511421][T24947] netlink: 'syz.3.4500': attribute type 6 has an invalid length. [ 816.511449][T24947] netlink: 'syz.3.4500': attribute type 6 has an invalid length. [ 816.674738][T24951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4502'. [ 819.595451][T24975] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 820.172535][T24992] __nla_validate_parse: 6 callbacks suppressed [ 820.172553][T24992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4515'. [ 820.295932][ T727] smbdirect: ib_dev[ÿ] removed [ 820.343141][T24997] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4516'. [ 820.771128][T25008] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4518'. [ 820.776930][T25008] netlink: 'syz.1.4518': attribute type 1 has an invalid length. [ 820.811078][T25008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4518'. [ 821.281592][T25032] batadv_slave_1: entered promiscuous mode [ 821.285321][T25032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4522'. [ 821.285437][T25032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.324203][T25033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4522'. [ 821.364344][T25032] batadv_slave_1 (unregistering): left promiscuous mode [ 821.364415][T25032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.374140][T25041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4522'. [ 821.411797][T25040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.810809][T25062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 821.838598][T25063] batadv_slave_1: entered promiscuous mode [ 821.839269][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4530'. [ 821.842966][T25063] batadv_slave_1 (unregistering): left promiscuous mode [ 821.843051][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.403988][T25095] syzkaller0: entered promiscuous mode [ 822.404009][T25095] syzkaller0: entered allmulticast mode [ 822.737881][T25119] netlink: 'syz.3.4543': attribute type 4 has an invalid length. [ 822.737902][T25119] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.4543'. [ 822.745370][T25119] netlink: NAT attribute has 1 unknown bytes [ 822.745403][T25119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.112234][T25135] veth1_to_bond: entered promiscuous mode [ 823.180082][T25136] veth1_to_bond (unregistering): left promiscuous mode [ 823.712399][T25150] syzkaller1: entered promiscuous mode [ 823.712431][T25150] syzkaller1: entered allmulticast mode [ 824.139803][T25170] netlink: 'syz.4.4557': attribute type 1 has an invalid length. [ 824.240282][T25176] netlink: 'syz.1.4556': attribute type 1 has an invalid length. [ 824.422438][T25176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.451141][T25188] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 824.766443][T25197] netlink: 'syz.3.4560': attribute type 30 has an invalid length. [ 824.869460][T25205] openvswitch: ovs-dp0: Dropping previously announced user features [ 824.871946][T25194] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 825.286280][T25226] nbd3: detected capacity change from 0 to 63 [ 825.345081][T16823] block nbd3: Receive control failed (result -104) [ 825.531389][T25237] syzkaller0: entered promiscuous mode [ 825.531414][T25237] syzkaller0: entered allmulticast mode [ 825.752483][T25259] __nla_validate_parse: 11 callbacks suppressed [ 825.752504][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4571'. [ 825.752518][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 825.909788][T25267] sock: sock_timestamping_bind_phc: sock not bind to device [ 826.210427][T25272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4574'. [ 828.113735][T25259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4571'. [ 828.409169][T25284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4577'. [ 828.449434][T25282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4578'. [ 828.842487][T25296] netlink: 296 bytes leftover after parsing attributes in process `syz.4.4583'. [ 828.908177][T25301] netlink: 'syz.0.4580': attribute type 6 has an invalid length. [ 829.151754][T25317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4588'. [ 829.154357][T25317] openvswitch: ovs-dp0: Dropping previously announced user features [ 829.159119][T25317] netlink: 'syz.0.4588': attribute type 11 has an invalid length. [ 829.184503][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4587'. [ 829.214830][T25321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 829.231861][T25318] lo: Caught tx_queue_len zero misconfig [ 829.231905][T25318] netlink: 'syz.4.4587': attribute type 15 has an invalid length. [ 829.345381][T25321] veth5: entered allmulticast mode [ 830.325198][T25364] sctp: [Deprecated]: syz.0.4597 (pid 25364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 830.325198][T25364] Use struct sctp_sack_info instead [ 830.454685][T25369] ip_tables: iptables: counters copy to user failed while replacing table [ 830.456594][T25372] nbd4: detected capacity change from 0 to 63 [ 830.640269][T16823] block nbd4: Receive control failed (result -32) [ 830.731478][T25379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 831.134963][T25399] __nla_validate_parse: 3 callbacks suppressed [ 831.134983][T25399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4603'. [ 831.226374][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 831.226420][T25404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4603'. [ 831.226434][T25404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4603'. [ 831.363811][T25408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 831.506829][T25398] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 831.519115][T25398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4605'. [ 832.129510][T25436] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4610'. [ 832.129535][T25436] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4610'. [ 832.444281][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 832.444302][T25450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 832.474624][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 832.508237][T16904] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.509149][T16904] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.509184][T16904] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.509215][T16904] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.769917][T25458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.080778][T25465] smc: removing ib device rxe0 [ 833.151576][T25468] netlink: 'syz.2.4618': attribute type 1 has an invalid length. [ 833.330248][T25476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 833.374740][T25482] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 833.594803][T25489] xt_policy: too many policy elements [ 833.869216][T25465] smbdirect: ib_dev[rxe0] removed [ 834.038779][T25489] syzkaller0: Caught tx_queue_len zero misconfig [ 834.364259][T25507] ip_tables: iptables: counters copy to user failed while replacing table [ 835.905403][T25544] Bluetooth: MGMT ver 1.23 [ 836.099643][T25550] macvtap0: entered promiscuous mode [ 836.853440][T25576] __nla_validate_parse: 7 callbacks suppressed [ 836.853460][T25576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4643'. [ 836.853541][T25576] bridge_slave_1: Caught tx_queue_len zero misconfig [ 837.196503][T25584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4645'. [ 837.511448][T25593] tipc: Enabled bearer , priority 10 [ 837.531713][T25588] SET target dimension over the limit! [ 837.943460][T25611] netlink: 'syz.0.4649': attribute type 1 has an invalid length. [ 838.091313][T25620] netlink: 'syz.0.4649': attribute type 4 has an invalid length. [ 838.332284][T25628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4651'. [ 838.337106][T25611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 838.367874][T25620] bond4: entered allmulticast mode [ 838.773585][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'. [ 838.829780][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4655'. [ 838.886237][T25648] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4654'. [ 840.411740][T25696] netlink: 'syz.0.4665': attribute type 8 has an invalid length. [ 840.650368][T25700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4667'. [ 840.799137][T25715] netlink: 'syz.3.4669': attribute type 2 has an invalid length. [ 840.920524][T25721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.150861][T25731] lo: Caught tx_queue_len zero misconfig [ 841.346519][T25742] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4674'. [ 841.546930][T25747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4676'. [ 841.730469][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 841.860926][T25759] syzkaller0: entered promiscuous mode [ 841.860951][T25759] syzkaller0: entered allmulticast mode [ 842.145774][T25776] pimreg0: tun_chr_ioctl cmd 1074025677 [ 842.146043][T25776] pimreg0: linktype set to 778 [ 842.209837][T25777] __nla_validate_parse: 1 callbacks suppressed [ 842.209852][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 845.550903][T25777] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 845.859621][T25806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 846.074578][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'. [ 846.082845][T25817] nbd: socks must be embedded in a SOCK_ITEM attr [ 846.123602][T19106] [ 846.125979][T19106] ====================================================== [ 846.133005][T19106] WARNING: possible circular locking dependency detected [ 846.140031][T19106] syzkaller #0 Not tainted [ 846.144446][T19106] ------------------------------------------------------ [ 846.151464][T19106] kworker/0:13/19106 is trying to acquire lock: [ 846.157703][T19106] ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 846.167548][T19106] [ 846.167548][T19106] but task is already holding lock: [ 846.167836][T25817] block nbd5: shutting down sockets [ 846.180097][T19106] ffffffff8fbf9140 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 846.189451][T19106] [ 846.189451][T19106] which lock already depends on the new lock. [ 846.189451][T19106] [ 846.199854][T19106] [ 846.199854][T19106] the existing dependency chain (in reverse order) is: [ 846.208866][T19106] [ 846.208866][T19106] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 846.216334][T19106] __mutex_lock+0x19d/0x1550 [ 846.221465][T19106] __alloc_workqueue+0xa4f/0x1fe0 [ 846.227019][T19106] alloc_workqueue_noprof+0xe3/0x210 [ 846.232825][T19106] padata_alloc+0xbe/0x360 [ 846.237786][T19106] pcrypt_init_padata+0x27/0x100 [ 846.243303][T19106] pcrypt_init+0x60/0xc0 [ 846.248127][T19106] do_one_initcall+0x250/0x870 [ 846.253406][T19106] do_initcall_level+0x10a/0x1a0 [ 846.258876][T19106] do_initcalls+0x59/0xa0 [ 846.263718][T19106] kernel_init_freeable+0x29d/0x3e0 [ 846.269424][T19106] kernel_init+0x22/0x1d0 [ 846.274265][T19106] ret_from_fork+0x514/0xb70 [ 846.279389][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.284670][T19106] [ 846.284670][T19106] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 846.292386][T19106] cpus_read_lock+0x42/0x160 [ 846.297488][T19106] static_key_slow_inc+0x12/0x30 [ 846.302934][T19106] setup_udp_tunnel_sock+0x2df/0x4f0 [ 846.308802][T19106] l2tp_tunnel_register+0xe77/0x1570 [ 846.314650][T19106] pppol2tp_connect+0x8e3/0x18b0 [ 846.320119][T19106] __sys_connect+0x316/0x450 [ 846.325217][T19106] __x64_sys_connect+0x7a/0x90 [ 846.330486][T19106] do_syscall_64+0x166/0x520 [ 846.335591][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.341988][T19106] [ 846.341988][T19106] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 846.349703][T19106] lock_sock_nested+0x41/0x100 [ 846.354978][T19106] inet_shutdown+0x6a/0x390 [ 846.360052][T19106] nbd_mark_nsock_dead+0x2cb/0x550 [ 846.365676][T19106] sock_shutdown+0x15e/0x260 [ 846.370774][T19106] nbd_clear_sock+0x24/0x170 [ 846.375871][T19106] nbd_config_put+0x477/0x7e0 [ 846.381056][T19106] nbd_genl_connect+0x19b8/0x1cd0 [ 846.386589][T19106] genl_family_rcv_msg_doit+0x233/0x340 [ 846.392670][T19106] genl_rcv_msg+0x614/0x7a0 [ 846.397681][T19106] netlink_rcv_skb+0x226/0x4a0 [ 846.402955][T19106] genl_rcv+0x28/0x40 [ 846.407449][T19106] netlink_unicast+0x8ef/0xa80 [ 846.412728][T19106] netlink_sendmsg+0x813/0xb40 [ 846.417996][T19106] sock_sendmsg_nosec+0x14e/0x190 [ 846.423528][T19106] ____sys_sendmsg+0x54e/0x850 [ 846.428800][T19106] ___sys_sendmsg+0x2a5/0x360 [ 846.433988][T19106] __x64_sys_sendmsg+0x1b1/0x290 [ 846.439434][T19106] do_syscall_64+0x166/0x520 [ 846.444537][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.450942][T19106] [ 846.450942][T19106] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 846.458575][T19106] __mutex_lock+0x19d/0x1550 [ 846.463677][T19106] nbd_queue_rq+0x373/0xff0 [ 846.468689][T19106] blk_mq_dispatch_rq_list+0x499/0x1990 [ 846.474844][T19106] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 846.481718][T19106] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 846.488209][T19106] blk_mq_run_work_fn+0x16c/0x300 [ 846.493740][T19106] process_scheduled_works+0xc3d/0x1630 [ 846.499794][T19106] worker_thread+0xa47/0xfb0 [ 846.504897][T19106] kthread+0x38b/0x480 [ 846.509476][T19106] ret_from_fork+0x514/0xb70 [ 846.514580][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.519855][T19106] [ 846.519855][T19106] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 846.527050][T19106] __mutex_lock+0x19d/0x1550 [ 846.532161][T19106] nbd_queue_rq+0xc1/0xff0 [ 846.537265][T19106] blk_mq_dispatch_rq_list+0x499/0x1990 [ 846.543322][T19106] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 846.550160][T19106] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 846.556653][T19106] blk_mq_run_work_fn+0x16c/0x300 [ 846.562181][T19106] process_scheduled_works+0xc3d/0x1630 [ 846.568237][T19106] worker_thread+0xa47/0xfb0 [ 846.573337][T19106] kthread+0x38b/0x480 [ 846.577909][T19106] ret_from_fork+0x514/0xb70 [ 846.583018][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.588292][T19106] [ 846.588292][T19106] -> #3 (set->srcu){.+.+}-{0:0}: [ 846.595397][T19106] __synchronize_srcu+0xc9/0x2f0 [ 846.600869][T19106] elevator_switch+0x1e8/0x7b0 [ 846.606224][T19106] elevator_change+0x2fa/0x480 [ 846.611496][T19106] elevator_set_default+0x375/0x440 [ 846.617205][T19106] blk_register_queue+0x3f3/0x4e0 [ 846.622782][T19106] __add_disk+0x6b8/0xdb0 [ 846.627622][T19106] add_disk_fwnode+0x100/0x3a0 [ 846.632900][T19106] nbd_dev_add+0x733/0xb60 [ 846.637834][T19106] nbd_init+0x168/0x1f0 [ 846.642576][T19106] do_one_initcall+0x250/0x870 [ 846.647851][T19106] do_initcall_level+0x10a/0x1a0 [ 846.653298][T19106] do_initcalls+0x59/0xa0 [ 846.658137][T19106] kernel_init_freeable+0x29d/0x3e0 [ 846.663843][T19106] kernel_init+0x22/0x1d0 [ 846.668676][T19106] ret_from_fork+0x514/0xb70 [ 846.673784][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.679062][T19106] [ 846.679062][T19106] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 846.686864][T19106] __mutex_lock+0x19d/0x1550 [ 846.691966][T19106] elevator_change+0x1af/0x480 [ 846.697239][T19106] elevator_set_none+0xb5/0x140 [ 846.702600][T19106] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 846.708921][T19106] nbd_start_device+0x189/0xb30 [ 846.714281][T19106] nbd_genl_connect+0x167d/0x1cd0 [ 846.719813][T19106] genl_family_rcv_msg_doit+0x233/0x340 [ 846.725870][T19106] genl_rcv_msg+0x614/0x7a0 [ 846.730884][T19106] netlink_rcv_skb+0x226/0x4a0 [ 846.736166][T19106] genl_rcv+0x28/0x40 [ 846.740673][T19106] netlink_unicast+0x8ef/0xa80 [ 846.745959][T19106] netlink_sendmsg+0x813/0xb40 [ 846.751238][T19106] sock_sendmsg_nosec+0x14e/0x190 [ 846.756783][T19106] ____sys_sendmsg+0x54e/0x850 [ 846.762065][T19106] ___sys_sendmsg+0x2a5/0x360 [ 846.767258][T19106] __x64_sys_sendmsg+0x1b1/0x290 [ 846.772713][T19106] do_syscall_64+0x166/0x520 [ 846.777815][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.784218][T19106] [ 846.784218][T19106] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 846.792806][T19106] blk_alloc_queue+0x544/0x690 [ 846.798081][T19106] __blk_mq_alloc_disk+0x194/0x390 [ 846.803713][T19106] nbd_dev_add+0x494/0xb60 [ 846.808640][T19106] nbd_init+0x168/0x1f0 [ 846.813305][T19106] do_one_initcall+0x250/0x870 [ 846.818585][T19106] do_initcall_level+0x10a/0x1a0 [ 846.824033][T19106] do_initcalls+0x59/0xa0 [ 846.828875][T19106] kernel_init_freeable+0x29d/0x3e0 [ 846.834585][T19106] kernel_init+0x22/0x1d0 [ 846.839420][T19106] ret_from_fork+0x514/0xb70 [ 846.844524][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.849802][T19106] [ 846.849802][T19106] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 846.857004][T19106] __lock_acquire+0x164c/0x2de0 [ 846.862362][T19106] lock_acquire+0x115/0x350 [ 846.867374][T19106] fs_reclaim_acquire+0x71/0x100 [ 846.872852][T19106] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 846.879165][T19106] __alloc_workqueue+0xc6e/0x1fe0 [ 846.884695][T19106] alloc_workqueue_noprof+0xe3/0x210 [ 846.890483][T19106] smc_conn_create+0x1589/0x3810 [ 846.896012][T19106] smc_listen_find_device+0x10c0/0x27f0 [ 846.902096][T19106] smc_listen_work+0xa7e/0x1410 [ 846.907454][T19106] process_scheduled_works+0xc3d/0x1630 [ 846.913508][T19106] worker_thread+0xa47/0xfb0 [ 846.918610][T19106] kthread+0x38b/0x480 [ 846.923183][T19106] ret_from_fork+0x514/0xb70 [ 846.928290][T19106] ret_from_fork_asm+0x1a/0x30 [ 846.933568][T19106] [ 846.933568][T19106] other info that might help us debug this: [ 846.933568][T19106] [ 846.943779][T19106] Chain exists of: [ 846.943779][T19106] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 846.943779][T19106] [ 846.956280][T19106] Possible unsafe locking scenario: [ 846.956280][T19106] [ 846.963710][T19106] CPU0 CPU1 [ 846.969059][T19106] ---- ---- [ 846.974405][T19106] lock(wq_pool_mutex); [ 846.978636][T19106] lock(cpu_hotplug_lock); [ 846.985645][T19106] lock(wq_pool_mutex); [ 846.992390][T19106] lock(fs_reclaim); [ 846.996359][T19106] [ 846.996359][T19106] *** DEADLOCK *** [ 846.996359][T19106] [ 847.004484][T19106] locks held by kworker/0:13/19106: 5, last CPU#0: [ 847.010969][T19106] #0: ffff888033eeb940 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.022181][T19106] #1: ffffc90004bbfc40 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.035122][T19106] #2: ffff88803471c0e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_listen_work+0x5e/0x1410 [ 847.044684][T19106] #3: ffffffff915598e0 (smc_server_lgr_pending){+.+.}-{4:4}, at: smc_listen_work+0xa5a/0x1410 [ 847.055021][T19106] #4: ffffffff8fbf9140 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 847.064746][T19106] [ 847.064746][T19106] stack backtrace: [ 847.070620][T19106] CPU: 0 UID: 0 PID: 19106 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) [ 847.080145][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 847.090187][T19106] Workqueue: smc_hs_wq smc_listen_work [ 847.095640][T19106] Call Trace: [ 847.098904][T19106] [ 847.101826][T19106] dump_stack_lvl+0xe8/0x150 [ 847.106407][T19106] print_circular_bug+0x2e2/0x300 [ 847.111423][T19106] check_noncircular+0x12f/0x150 [ 847.116354][T19106] __lock_acquire+0x164c/0x2de0 [ 847.121199][T19106] ? pcpu_alloc_noprof+0xde2/0x1900 [ 847.126413][T19106] ? __mutex_unlock_slowpath+0x731/0x900 [ 847.132041][T19106] lock_acquire+0x115/0x350 [ 847.136533][T19106] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 847.142506][T19106] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 847.148298][T19106] ? pcpu_alloc_noprof+0x100f/0x1900 [ 847.153570][T19106] ? __alloc_workqueue+0xc6e/0x1fe0 [ 847.158753][T19106] fs_reclaim_acquire+0x71/0x100 [ 847.163678][T19106] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 847.169643][T19106] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 847.175437][T19106] ? __alloc_workqueue+0xc6e/0x1fe0 [ 847.180624][T19106] __alloc_workqueue+0xc6e/0x1fe0 [ 847.185643][T19106] alloc_workqueue_noprof+0xe3/0x210 [ 847.190913][T19106] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 847.196281][T19106] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 847.202160][T19106] ? trace_kmalloc+0x2a/0xf0 [ 847.206753][T19106] smc_conn_create+0x1589/0x3810 [ 847.211690][T19106] ? smc_clc_match_eid+0x1ce/0x250 [ 847.216788][T19106] smc_listen_find_device+0x10c0/0x27f0 [ 847.222418][T19106] ? __pfx_smc_listen_find_device+0x10/0x10 [ 847.228306][T19106] ? smc_ism_is_v2_capable+0x9/0x20 [ 847.233574][T19106] ? smc_listen_v2_check+0x5ef/0x9e0 [ 847.238851][T19106] ? smc_clc_srv_v2x_features_validate+0x2b0/0x5c0 [ 847.245345][T19106] smc_listen_work+0xa7e/0x1410 [ 847.250184][T19106] ? rcu_is_watching+0x16/0xb0 [ 847.254940][T19106] ? process_scheduled_works+0x97a/0x1630 [ 847.260648][T19106] process_scheduled_works+0xc3d/0x1630 [ 847.266194][T19106] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.272164][T19106] ? assign_work+0x3cf/0x5d0 [ 847.276744][T19106] worker_thread+0xa47/0xfb0 [ 847.281336][T19106] kthread+0x38b/0x480 [ 847.285393][T19106] ? __pfx_worker_thread+0x10/0x10 [ 847.290493][T19106] ? __pfx_kthread+0x10/0x10 [ 847.295070][T19106] ret_from_fork+0x514/0xb70 [ 847.299654][T19106] ? __pfx_ret_from_fork+0x10/0x10 [ 847.304759][T19106] ? __switch_to+0xc89/0x1420 [ 847.309426][T19106] ? __pfx_kthread+0x10/0x10 [ 847.314001][T19106] ret_from_fork_asm+0x1a/0x30 [ 847.318766][T19106] [ 849.507721][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.909085][ T2017] block nbd3: Possible stuck request ffff888028477000: control (read@0,4096B). Runtime 30 seconds