last executing test programs: 5.942539039s ago: executing program 0 (id=4253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}, 0x0, 0x3e}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001002000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 5.751854741s ago: executing program 0 (id=4254): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getpeername(r1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003004000851000000600000018000000", @ANYRES32, @ANYBLOB="00000001000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001181af8ff00000800bfa100000000230007010000f8ffffffb7022000abcd00700a09b8060001020085000000260000009500000000009834"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000000c0)=0x6, 0x4) 5.425950622s ago: executing program 0 (id=4257): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000140), 0x0, 0x400c010, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1000}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) 4.173434331s ago: executing program 4 (id=4266): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x48}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b000100697036677265000034000280080001", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 4.102269405s ago: executing program 0 (id=4267): socketpair(0x29, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff1, 0x66}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7fff}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24004041) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000002c0)=r7) bind(r1, &(0x7f0000000300)=@phonet={0x23, 0x1, 0x81, 0x1b}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000380)={0x7, 'geneve0\x00', {0xc7bc}, 0x8}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6) shutdown(r6, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000440), 0x4) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x7, 0x204, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c005}, 0xdaec03da5fd0765b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000005c0)={@multicast1, @initdev, 0x0}, &(0x7f0000000600)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e20, 0x1b, 0x4e20, 0x6, 0xa, 0x0, 0x20, 0x32, r9, r10}, {0x6, 0x0, 0x8, 0x2, 0xea9, 0x5, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x2}, 0x6, 0x6e6bb1, 0x1, 0x0, 0x6, 0x2}, {{@in6=@local, 0x4d6, 0x33}, 0x8, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x1, 0x7, 0x6, 0x6, 0x6}}, 0xe8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x4002, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000007c0)={'pim6reg\x00', 0x1000}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000800)={0x1, 0x2, 0x0, 0x101, 0x0}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000880)={r12, @in6={{0xa, 0x4e21, 0x3, @local, 0x3ff}}}, &(0x7f0000000940)=0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000a80)={'geneve0\x00', &(0x7f0000000980)=@ethtool_eeprom={0x43, 0x4, 0xb, 0xe1, "a6cf7de71cd07b1526be1f650590994f7b4951a9f395b3161cf5ef29cb5db46386e3bea1166c892dd050ac59007fced7a561caf067ef86301f420280f2b8b5b502fd729efba20d8543d49aa33a5cc8c42fd7a824664a419251bd24cbdc3780852ba7531e6e0f1f50757e0302d99efb2cff15f48c788af69c906c0c8e892d22bad3e2b8e47639ed0d7567d4746f02dd4ac606bb97a6a925325ef9130a28992787e008289ad7ed9ce61faabbc1af4ff0ba71dca9b85972142c2f066d8b25eb7a094e8d45ff13d10842b74ef10ad2ee61bf103fb6f8e8ac0e5fa79eda5d22deedb334"}}) r14 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r14, 0x8983, &(0x7f0000000ac0)={0x0, 'veth0_to_bond\x00', {0x1}, 0x5}) ioctl$NILFS_IOCTL_GET_CPINFO(r14, 0x80186e82, &(0x7f0000000bc0)={&(0x7f0000000b00)=[{0x0, 0x0, 0x7, 0x3, 0x2, 0x8, 0x3ff, 0x4}, {0x3, 0x0, 0xa28d, 0x5, 0x7, 0x6, 0x5, 0x7483}, {0x0, 0x0, 0x2, 0x100, 0x5, 0x776, 0x8010, 0x2}], 0x3, 0x38, 0x1, 0x3}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000c00)={r13, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x48a8}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 3.491779712s ago: executing program 2 (id=4272): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000c96ed7a78469480401000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000102030000000000000000000200000a2c00018014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x2142fb0720c7976d}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f0000000780)="da654f499dba994319177244d2a627bf4f31aded3c182c81402e76593e2b233bf5a9874a662a5938be30fbf5a91dbd02118cbae608e25f6c60f79ebd39af86e363faa82d5a597c35b2c6290e4e04f343261e2d35a0def722d82814dd064591b7ad9909caae5e5987dc901cc542c4fec778e7c28e3e8ef5c85931dd13bdd2429d4cf3493299f4b8b0661ba868fd9d30f3aee0bbf991b9b583cf5cf1b6a99684d87b4c23c30aa1f5daa02e3778f53474954157a90199b891d898704f58bcf156f94f9379", &(0x7f0000000880)=""/63}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="7e930edd0629d2fa52d31c173dd14d18df66c1edb559414dc6201a9317ab89b3508e73b524df8aac4e83319f9a82b65dc564185064aa32c4ed3ff45728fc9f37dca2d95000a6ca86d0749b529b26458e382455e2b4c3e2df4375bff7f18087bdf6660f785056c25caad9957acfe47d3ec288d7c6c98669171b5cfce799f24f470baba139e1f8837a58968c967158cfba652c4e3a3ffcea8d491500"], 0x3c}}, 0x8000) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.343805722s ago: executing program 0 (id=4273): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r7, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}}, 0x1) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r7, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}}, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.338981804s ago: executing program 4 (id=4274): pipe(&(0x7f0000000680)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x2}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000240), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9a1c}}]}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x3, 0xd}, {}, {0xb, 0xfff1}}}, 0x24}}, 0x40004) 2.906581517s ago: executing program 3 (id=4275): bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.71231377s ago: executing program 2 (id=4276): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000180)=0xffffffffffffffff, r0, 0x0, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xfffffffffffffd8a, 0x1, [0xb, 0x9, 0x30, 0xc, 0x9, 0x1b, 0xc, 0x3, 0xc, 0x3, 0x18, 0x3, 0x0, 0x1, 0x30, 0xb, 0x36, 0x5, 0x48, 0x48, 0x16, 0xb, 0x24, 0x36, 0x1b, 0x0]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r6, &(0x7f0000000380)="fad33075218151db00316f3a277f", 0xe, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xda, 0x6, @remote}, 0x14) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r17) 2.711891069s ago: executing program 0 (id=4277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x401}, 0x14}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=' \x00\x00\x00A\x00\x00\x00', @ANYRES32, @ANYBLOB="2ef24e9f0b45cd67c207d68d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f00000000c0)=0x61c) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481d2bad7", 0x5}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20}, 0x2004085) write$cgroup_pid(r4, &(0x7f0000000840)=r6, 0x12) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) r10 = socket$inet(0x2, 0x800, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000080000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3bf45c42995560a99952bed40cf5a804000000db7e2378d5afd35f4c16827f55b3af494e39ecfb33020000030090c332b6a99a8d872b8e88a94cb519f5c17631af956a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xffffffff, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) listen(r0, 0x1) 2.698190895s ago: executing program 3 (id=4278): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1) accept4(r0, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000280)=0x80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000004000000000000000000000000000000000000001b0c5672f6013ddd464301d16de489e5c589d4229ce23afe02f8eb05b4224b72fadbfb2c3bbc386b53ca0bb81cfa4a9dc53c089a6586ab264d05ca541205bbca801d2607bc2e549ddb97c01b0905d74465429b9a728b59e7f6206114b63bcb19072140564d8728d2820f35f06665c0b9cfe3f0737c5c70324cb0e6b6268f7669407d147a27c6ca1d475f9e9f03ea7bf81f759d0bfe5a6cfe91f519e721ecd33ab11916be359b19e90c98cb656396e596bba81b3dfc0a10766bbc1136296a1759930842d6472b1fbe7789eb35630abbcc9846ed4453e1"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xffe0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.515507392s ago: executing program 4 (id=4280): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2b, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2b, 'freezer'}]}, 0x3f) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x463a718d7a52801b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000200)={0x1, 0x47, "e1246930208acfb6d9da32f8b0c77bfbebf19424d5bcc8aaddcb1c55094e0941eba56e036647db98f6ec03b8917f7093ede9b3d87962b6f9444094d11fd1f9fd01dccb77f48a22"}) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000003c0)={&(0x7f0000000280)=[{0x2, 0x0, 0x6, 0x1, 0x3, 0x6, 0x80000001, 0x7}, {0x1, 0x0, 0xe579, 0x6, 0x6, 0xfffffffffffffffe, 0x4f5, 0x2}, {0x0, 0x0, 0xf22, 0x6, 0x8000000000, 0x72, 0x2, 0x5a7f}, {0x1, 0x0, 0x6, 0x400, 0x81, 0x5040, 0x8, 0xf3}, {0x2, 0x0, 0xa, 0x4, 0x7, 0x7ff, 0x3ae8, 0x1}], 0x5, 0x38, 0x1, 0x4}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c080}, 0x4008001) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}}}, &(0x7f0000000640)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000680)={r7, 0x8}, 0x8) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, &(0x7f00000007c0)={r1, &(0x7f00000006c0)='freezer', 0x1013c0, &(0x7f0000000700)={@align=0x1, {0x6, 0xffff, 0x7, 0x2}}, 0x1, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x1}) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000800)=[{0xc, 0x2, 0x5, 0xb}]}, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x88, r8, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000c00)={0x5, 0xa2d, 0x44, 0x3000}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000c40)={0x0, 0x2, 0x3, 0x400, 0x1708, 0xffff}) (async) ioctl(0xffffffffffffffff, 0xffffffc0, &(0x7f0000000c80)="f8ac827528647b2a065f60a85fafdbe042b5ef2161976bbffc1c124882fec43f8d4e5c150cb2fb0d00fbc2f2b7a939793d679c6ce4ce2442c710d4a5a3982ece601829f22c54e00d81799675d9dc3b515c41d67094b23527b320f9786550adde0dcd55038a498a2d084d2350528338ba7f2d5fc36f95ee2153f6391389edcacf0b24b23f457bf5074183aea26ffedb24c577d389c4482426cb423ab7b766ba02") (async) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f0000000d40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000d80)="06a0fcb770402e428c116da468dcb14efd52351d", 0x14}, {&(0x7f0000000dc0)="0bc5bf3f289904b1e7a4dee9291d9294774102350258cbf104c794e852d0ebe2c8b3909bdd215ec575853439741c389ceb425a47f0", 0x35}, {&(0x7f0000000e00)="a223a825d8b01dd39eb5ef1b2c978cf0d5f5ba2a510f979f5e59bac0c569cb51d53b1e0a1d21fef491152f29cbd2f890490cc06df0e6629dd2c4e84ba6049b6902398ecac70e1d47e44697d598c502f56132671d5b3e723fa5908ab427c170e058aef11e661d578620db2b3ffc753e0e399230fb0f4faf8ce789d200986c59b50a70a18aefa2ae907154", 0x8a}], 0x3}, 0x20000000) (async) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000f40)="619a8a163dfb306ce1fa86d5351a492579f032d458f3b20147", 0x19) 2.256650962s ago: executing program 1 (id=4281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) 2.220170221s ago: executing program 2 (id=4282): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008037000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff850000000600000018110000", @ANYRES32=r1, @ANYBLOB="00000000fffffffdb7020000000000008500000086000000bf91000000000000b702000003000000850000002a000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.207036847s ago: executing program 3 (id=4283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000000001010100422ee414000000020000000800074000000000080007400000040008000740000000004c0010800800024000000004080003400000000408000140000005ff0800024000000f620800014000000009080003400000000908000240000000010800034000000e8c0800014000000025"], 0x78}}, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r3, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000f3"], 0x10}, 0x40) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000042010200280012800b0001006970000300800000000600020000400000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x4) connect$can_j1939(r8, &(0x7f00000001c0)={0x1d, r5, 0x3, {0x2, 0xf0, 0x1}, 0x2}, 0x18) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000000000000000a0000000005000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000108001240000117ff0c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.063911029s ago: executing program 4 (id=4284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000080)=""/17}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.918670246s ago: executing program 3 (id=4285): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x38}}, 0x400c804) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x9, 0x14000001, 0x0, @mcast2, @loopback={0x0, 0xffff888101827518}, 0x10, 0x20, 0x1, 0x100}}) 1.904137831s ago: executing program 2 (id=4286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x0) 1.803329945s ago: executing program 1 (id=4287): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r1, 0x4, r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r4, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="be6f88e90400", 0x6}, {0x0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r7], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x8, 0x4, 0x101, 0x25, 0x80000000, 0x3b}, 0x9c) getsockopt$sock_cred(r0, 0x1, 0x2f, &(0x7f0000caaffb), &(0x7f0000cab000)=0x5) 1.643795763s ago: executing program 2 (id=4288): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) 1.585996977s ago: executing program 3 (id=4289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000001b00)=ANY=[], 0x0) 1.463519215s ago: executing program 1 (id=4290): pipe(&(0x7f0000000680)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x2}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000240), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9a1c}}]}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x3, 0xd}, {}, {0xb, 0xfff1}}}, 0x24}}, 0x40004) 1.462521088s ago: executing program 2 (id=4291): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0={0xfc, 0x0, '\x00', 0xff}, 0x200003}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="7976bd3c706c1e208ff8a6b3dc9b1dc5e0016e2fd896f414f0802358d35c806090739532b27b8b13d225454616960aee7e73cf8b590d6803ac", 0x39}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x20000891) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x3}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bdf001ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0000020000000000613887e4000000000000000000000001"], 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095e859d184303f6f72faae1fc97e22176ccf9628d9c018957bfa0f69b2f73bcadb307011ef8474e61911801d455079c81ce4fb82814b4404c1b380ee208087361c39ab8c267aadf05fb354fedc872a5e9b413e49026c5220555e8dd8e2bf04b2195eae27fa50574ced04733191e84195e550b95376ce14709aee2c9133be56e6d43477035c04122aad"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000002c0)=0xfffffffa, 0x4) listen(r1, 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5d}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000944) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0xc, @remote, 0xfff}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601080000000000000000000000000900020073797a31000000000900020073797a31000000000a0007800500150020000000080012400000009b050005000a000000050001000600000014000300686173683a69702c706f72742c697000"], 0x64}}, 0x0) 1.287892318s ago: executing program 3 (id=4292): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) unshare(0x40000) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) (async) unshare(0x40000) (async) close(0x3) (async) 1.087274944s ago: executing program 4 (id=4293): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000002980)={&(0x7f0000000000)={0x2a, 0xfffffffffffffffd, 0x2}, 0xc, &(0x7f0000001400)=[{&(0x7f0000000040)="9629571aa8489b64ab07833a8e61b4bb77ccf0cac513ef6e463380f016eccccb5b98de36545ee878355ef4ffa4ab010190ca82aaa01f94eb6fe1816c082870c27ff6cb290039a6921a38d714538ca598fd910c1f7d19e473f9a45173f7408e554aeb640b759c18ba9580b77ff28e627a302ffe0d5fd6182cd494404ee5cab38de47f0660ca0248ad1c53b8f106c46b0b965817902287c020a16f1490ccf75770bcb710", 0xa3}, {&(0x7f0000000100)="ed2487ab1eff61e474a3bc45aef08db7d03fa71e2dd54df504266cc6e1dd93126b7a7828088817c24a09b743022a11fabf723e3f4265a0", 0x37}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="fb4f31e58f7405bf69e3ebe90e5eac8dce6caa072cee9219372b5b0c5791dee6242c1973d56e5c6aa81ebf644dd3152a26682afacfccf2952b5dec2b66b6204aa30332e82a3ccb60edb0eb9d7af05d78dae1a733ee7204464532fd2a4fa247411d0980", 0x63}, {&(0x7f00000011c0)="c8343642e2153f69d0fa98faaa1e5df1edfce68641be4827dfcf09c3d879f564d8dbda9d62cb82d97301e9504ab07216b04d5ce705bfd65992f12c89b4527cbc8052c4c77f3c3378e83bb933acc45281449139028928042cdff6f26d447541c2566b794d82be6f760a31bd81a5a0f19e9adedb6ee8c35c7b1162fd4329586ade38d218b4c342b244351f423abb915b9a3b0d9aa8fcf936dafb3720402d5a15ba", 0xa0}, {&(0x7f0000001280)="c449ac5de9bbf89743171c4f89d0fb711381c76318e5d0a996c380bae07058e0bcd6e19e10d1420ef7d01d8bccb5666e23cfc4ce09be2cd5b10d1ec183254b949b54175ba41dfcff786ae0dd3a01a6c0ee024a479393ac2fde64d37a46b99d4fc2856630c1b96ba3f9c06f8398069d780aec8fc83d2bf87b16421e68d22de2ecc708cf19147ae510dbc259c7f202978899f67536d0e9786e16f01e0d7970c7ca0a19b7632245cb2e150d66", 0xab}, {&(0x7f0000001340)="e86f40b85ca918c35137aa7373fdc141f00d71d928498ebf03f3c5d5b4c6314e848198b3caeacbf6b38bd3831c8ffa690434c851f6705f501fe94a95e6861b603981994829c462e37df1241f8301c9a189089191504ab29948b5ce4d21eba3b9aad8b07fa264e2a030b178516cfbd203042d3b3e7cc8111a7b53", 0x7a}, {&(0x7f00000013c0)="007a70ce4b306d77acc55ee7bb8a61b4a27fca", 0x13}], 0x8, &(0x7f0000001480)=[{0x48, 0x110, 0x4, "79baf242156ba5e8eef107194c305ef954e3f96b89acd810a8f4216118dae591c10d5ff0c9abceddf80fa7de98bc6c95dddf03aebb"}, {0x100, 0x114, 0x55, "5b67593fd9f26f863a5f1ee942c4ec959252f047733670659348c4591549df9111c0b6f9c7356959aa6463d4ae717c07dc83b02b5156f8c579125c4ce2c9d164eabd28764e30214f285ec9c7cc3eca199f0d2921e46335a35dcddf03d583f6334048c6eb3988275003507ca89d9c11a3066e250001d57ca1ad9d9db19ee97205465ada8b91b9957c2aa98bb5fa438ee3420f33f75b6fee186f135db25619420b96b1de7315ff9af7da7317bf7c3709f2394c89820e7220bbe1e4a122761cbc4edd8c65a8b4d7ff43982efbfdaaf6d5f055bb9d075f1703d2a9ea9f5d634dad8225df6b7f0b733c288dc4cb"}, {0xa0, 0xa76e85dca7064969, 0x7, "6deeca51b6d569daf862924571d18afc3d43200a3e036ec3d39510a6fcf493f04e13a3365e975323a226973913df4abe7d03f94078a2bee8c4254aaf0f787f2e662a1316075c951ef4150d79fcbb17e01e35f0728d738e0032a392ccaaef7f1e4936ca0e6ea58a2505bc1b3696c217599a068cd63bf6f4f4906fa30712d105f0eb4995ce7e91b504b0611def"}, {0x58, 0xff, 0x1, "2411e7344636684b65b902233c2d9d508aaf0ac032c690cbab255aba0f229f313572a93d749be5a7c40c6ffa47f95d615463bd255372cd22cb3836829f5fd5c642fa1d86ef6695"}, {0x60, 0x101, 0x0, "cbe178aaff944e86027ce572d99b17aecf4980862a0ca7bd873c4d430917a997f05b1ae200b0701a1738324cb20d41361d7c772c93fd4f9af499351ede87dac3a43d8e8853bc67997cde"}, {0xd8, 0x1, 0x8001, "bfb75a6671255b5952884faad1853b79ba465d2775d2f1aec4c92bfbd318bc34332a5143fc9e42d43284a1ec8d0aeb0c83e2eea48395e9f7b16976bb980f0c7e0af888bf2e4f5030513fd385a22f5901da066f4a95aef9a32d03320b8ce5ce1a2ebcb123f8a7c14ab711f676d1f26fadb77b87092b8105f5698f55c8a9ce5be7742fe1c9b888ef2674b42ba6e9853b861f2feb5c724ac4a2fbfe6606c4937973cff748d9e3203c1073afb4ff64e0c9f227b0ce814c5b6896de0ed9af2388ddf7f0bd74"}, {0x1010, 0x1, 0xb181, "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"}, {0x48, 0xff, 0x0, "852d0ba55087b20358bec0ab70d7a3479b13b6f4ec563241552d5c1ad1fcf7277bc34e2e5f424f10da9a7db21ec10868e4b686cac4"}, {0x88, 0x10e, 0x1, "c6f843a4cf19107ccfe5e2c0ea8cd45c61b578a5e769436bb1d9bfe722e82d114fe5db4989eda66f878337fb323064d6c41e3065c4e5b771ff63b5b010da5f924df8f5729987624153326cd559451c48d24ba4bd46db526b1d20c8b4357fb74cc078f68de93ff0837b239052b5b93c4ee8bd0bf99b907e"}, {0x98, 0x107, 0x587, "d74e09bfa4ed08370533e36d9b1b2ee7266a3fda6ba2d23596a22dbab5abcb34f4b24e3ae26e390b26c44a332efde20a879da11d2cd184e734a30ee8463df0bee1fb9d60c3b62d0dd30ea258ca39c8e7599dd1dedc7baadabfa79ae342349a31a1351d93b50543a6f5f3793ead9c5dd6c9d24247068eb1e470f983d1c5fe1af67d1694c0b9a05506"}], 0x14f0, 0x4000}, 0x38) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f00000029c0)=""/4096, &(0x7f00000039c0)=0x1000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000003a00)=""/108, &(0x7f0000003a80)=0x6c) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000003ac0)={0x1, 0x0, 0x10}) r2 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r2, &(0x7f0000003b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003b40)=0x14) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000003b80)="fb8eac74312a05ee742a9c44944a369666ed192a2772873541016c07f081ae9c391ddfcab09e50890365fa9e2b4bd55ced9ac7baa349acaa1b1d9d2456b8fcd233e6971579cd4cea006dbe493b89e6a31149d38dc79db640b18dfdf0a3dee5e409cdb797bd70ca") r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000003c00)={0x1, 0x4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000004280)={&(0x7f0000003c40)=@nl, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003cc0)=""/115, 0x73}, {&(0x7f0000003d40)=""/233, 0xe9}, {&(0x7f0000003e40)=""/67, 0x43}, {&(0x7f0000003ec0)=""/240, 0xf0}, {&(0x7f0000003fc0)=""/186, 0xba}, {&(0x7f0000004080)=""/43, 0x2b}, {&(0x7f00000040c0)=""/77, 0x4d}, {&(0x7f0000004140)=""/8, 0x8}, {&(0x7f0000004180)}], 0x9}, 0x0) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f00000042c0)={0xa, 0x4e20, 0x3, @empty, 0x8000}, 0x1c, &(0x7f0000004640)=[{&(0x7f0000004300)="265030054434cd56af4cd4546538884ed16196e2563ea752847fa1ffec88575d5dc2fcf1f2d349eeb1052a639e568cd89ee5074c5918f547da236b62b0847c53e3b9ae3deaa65b011b586967fc2ad2d19b27d53ce551dccb993e7aa30ed3a5410b03d1bd5f5cab16e7fe967a1933751925c069745f509d55701631f25f1d268898f4f1dc3db527fb982447f19dadd9517250cb23a4dd61228775d3136de11bc156615ed3e2e4e44c2ee212e0c4548b2f", 0xb0}, {&(0x7f00000043c0)="34180f4157c0a91f5ef1c5c3b70bba54d28e156a9886e08015e4fa15f4079f76c7620e94e4a501c754e9affcea88acbf9519cf08cfbfd282b1f4", 0x3a}, {&(0x7f0000004400)="f5ba26", 0x3}, {&(0x7f0000004440)="0be7d74c69486d2760fdc27263644e47ee781d0ec4e925c06cd7f82ddfe2eab52e5127754bef4ae24f1d0f8a02ece953ffbab5633a4be07cb4ffa2b4f1b5cd0e3a3601dad5615576e1a9a318dae87a3b81f65865cad7971e5cbca94f802fec7f4d3ff1b937d72c050976479e671bc3275e9475568533e15bb499591a35ba7a79b14e8bd2f7059daf65a847b2335f81781971dbf87d2d810b9157b29ee36507dafabb45cebaaddeb7d801c4f9860d", 0xae}, {&(0x7f0000004500)="52a335110c314cabcb5fa6eb6138dc831097033f007a8b0f2e78a3e65652b5339710bd7b524589db3c8457a454404d5fa6226c84925eb788dc91bedf285560fe37c38ae5d122a147b95b52579f46828f50c670afafd2e43dbd9b579d9fe719b5ff5a69093959d6f838e35cf5520b9d99a0fb50e7386078a9df7d3ca8b8d3c072e9db8ba019f0980a38267796fee615ba07039e6f029a129391aa41cae0191903446aaf165c8d35a59e08c5c02be37a1ae11ee3b4c1722dcf830dda55c464bad5fc8cc60d9d0fb554dbd7dd81be596a7ae213175572bc39b8125b550c288dc3676254b635", 0xe4}, {&(0x7f0000004600)="87038e4ffe8c7776c0f494465a2eb2fe5e751061dbce0b63db1514ae36b7d7b188732999366c5e01dc", 0x29}], 0x6, &(0x7f00000046c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x38, 0x29, 0x37, {0x87, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x10, 0x3, [0x8, 0x4]}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x8, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0xa0}}], 0x1, 0x4044000) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000004980)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004940)={&(0x7f0000004840)={0xec, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bd2}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x11}, 0x44000) sendmsg$NFT_BATCH(r6, &(0x7f0000004f00)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "15c406be35ac0c73ee87d71b2e"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWSET={0x22c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xa5, 0xd, 0x1, 0x0, "92c7e21a55f58223552e93dce9961711bcfead934f0e640e9fa9692a890ef434a6cc3dde2d78a22cd28735729b8e44909b263be6b0b9107eb5f62cf85a21304677d425ede3e79f971a363efc3cefed628b62662a1fc90870689a4495df82a72e15d9f2a851da42097249943fca0cbba3477c6ff025d3ce76876ec4e3003c79944e8a898f7997d71bbee7c2ea294dfb8bb57f5b50e12210ed4a4cfd402328408dae"}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x13c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xee}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_FLAGS={0x8}]}}}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc8e8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2400000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6efa716a}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}]}]}, @NFT_MSG_DELOBJ={0x114, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb6, 0x8, "8aca8dd1f4dd94ad3551836a2a703a79adaffda325c6acb1bf76179b7cb571bc7ce209e65a28ac5477fbe90d2e6bbae22051976fc11dbfbe6905955ada453563be3d2166cc52cf1a05d556d07e2cfb7b4057408f45d79bf6a86b1df1ffc625fdbf6c001374af839a1209c037cc57c7e375036029b5bb4c0607d1c4544807b89db4eb39be3a4189b272933bc880297d3a7657765b05184b2fa70567cfb08b34c5765c7642fcd650607fafec572fa39111ff0b"}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4b8}, 0x1, 0x0, 0x0, 0x48090}, 0x4044010) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000004f40)=0x78bf, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000005040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)=@delnexthop={0x20, 0x69, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$xdp(r6, &(0x7f0000005080)={0x2c, 0x4, r3, 0x34, r6}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000050c0)={0x7fffffff, 0x3, 0x80000001, 0x1, 0x3ff, 0xffff}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000005100)={0x59, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r9 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000005980)) getsockopt$bt_hci(r9, 0x0, 0x2, &(0x7f00000059c0)=""/194, &(0x7f0000005ac0)=0xc2) sendmsg$nl_route(r8, &(0x7f0000005c00)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005bc0)={&(0x7f0000005b40)=@bridge_delneigh={0x68, 0x1d, 0x800, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, r3, 0x80, 0x16, 0x1}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_CACHEINFO={0x14, 0x3, {0x0, 0xc, 0xae4, 0x1d}}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40002) r10 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r10, &(0x7f0000006ec0)={&(0x7f0000005c40)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005cc0)=""/11, 0xb}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/150, 0x96}, {&(0x7f0000006dc0)=""/11, 0xb}], 0x4, &(0x7f0000006e40)=""/79, 0x4f}, 0x40010003) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000006f00)={@empty, @rand_addr=0x64010101, @remote}, 0xc) 558.172166ms ago: executing program 1 (id=4294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_newvlan={0x4c, 0x70, 0x100, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x18, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x4c}}, 0x8000) 349.471109ms ago: executing program 1 (id=4295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x800) 147.262975ms ago: executing program 1 (id=4296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x800) 0s ago: executing program 4 (id=4297): syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) kernel console output (not intermixed with test programs): 7] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.911358][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.244483][T18310] FAULT_INJECTION: forcing a failure. [ 538.244483][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 538.334474][T18310] CPU: 1 UID: 0 PID: 18310 Comm: syz.4.3111 Not tainted syzkaller #0 PREEMPT(full) [ 538.334505][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 538.334519][T18310] Call Trace: [ 538.334528][T18310] [ 538.334537][T18310] dump_stack_lvl+0xe8/0x150 [ 538.334578][T18310] should_fail_ex+0x412/0x560 [ 538.334615][T18310] should_failslab+0xa8/0x100 [ 538.334657][T18310] __kmalloc_cache_noprof+0x88/0x660 [ 538.334690][T18310] ? nfnetlink_rcv+0xfdf/0x27b0 [ 538.334727][T18310] nfnetlink_rcv+0xfdf/0x27b0 [ 538.334797][T18310] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 538.334881][T18310] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.334926][T18310] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.334958][T18310] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.334996][T18310] netlink_unicast+0x75c/0x8e0 [ 538.335037][T18310] netlink_sendmsg+0x813/0xb40 [ 538.335081][T18310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.335119][T18310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.335151][T18310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.335186][T18310] ____sys_sendmsg+0x972/0x9f0 [ 538.335219][T18310] ? __might_fault+0xaf/0x130 [ 538.335255][T18310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.335299][T18310] ? import_iovec+0x73/0xa0 [ 538.335337][T18310] ___sys_sendmsg+0x2a5/0x360 [ 538.335368][T18310] ? __lock_acquire+0x6b5/0x2cf0 [ 538.335398][T18310] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.335472][T18310] ? __fget_files+0x2a/0x420 [ 538.335499][T18310] ? __fget_files+0x3a0/0x420 [ 538.335538][T18310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 538.335587][T18310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.335632][T18310] ? __pfx_ksys_write+0x10/0x10 [ 538.335674][T18310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.335699][T18310] do_syscall_64+0x15f/0xf80 [ 538.335718][T18310] ? trace_irq_disable+0x3b/0x140 [ 538.335752][T18310] ? clear_bhb_loop+0x40/0x90 [ 538.335780][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.335802][T18310] RIP: 0033:0x7fb6eb79cdd9 [ 538.335823][T18310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.335843][T18310] RSP: 002b:00007fb6ec679028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.335867][T18310] RAX: ffffffffffffffda RBX: 00007fb6eba15fa0 RCX: 00007fb6eb79cdd9 [ 538.335883][T18310] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 538.335896][T18310] RBP: 00007fb6ec679090 R08: 0000000000000000 R09: 0000000000000000 [ 538.335910][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.335922][T18310] R13: 00007fb6eba16038 R14: 00007fb6eba15fa0 R15: 00007ffc5be434f8 [ 538.335958][T18310] [ 538.791453][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.825295][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.966715][T18324] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 538.977259][T18324] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 539.081108][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.104224][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.179339][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 539.319623][ T30] audit: type=1800 audit(1778201490.278:7): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3115" name="memory.events" dev="tmpfs" ino=3121 res=0 errno=0 [ 540.098478][ T4944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.111959][ T4944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.123291][ T4944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.133700][ T4944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.145097][ T4944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 540.764917][T18386] tipc: Enabling of bearer rejected, failed to enable media [ 540.992905][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 541.058687][T18386] syzkaller0: entered promiscuous mode [ 541.079747][T18386] syzkaller0: entered allmulticast mode [ 541.437615][T18412] __nla_validate_parse: 1 callbacks suppressed [ 541.437638][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3130'. [ 541.522284][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 541.632066][T18412] team0 (unregistering): Port device team_slave_0 removed [ 541.705828][T18412] team0 (unregistering): Port device team_slave_1 removed [ 541.851598][T18356] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.041867][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3135'. [ 542.081733][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3135'. [ 542.115504][T18435] veth1_macvtap: left promiscuous mode [ 542.154286][T18435] macsec0: entered promiscuous mode [ 542.181229][T18435] macsec0: entered allmulticast mode [ 542.192646][ T4944] Bluetooth: hci0: command tx timeout [ 542.456624][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 544.272756][ T4944] Bluetooth: hci0: command tx timeout [ 545.065680][T18448] veth0_macvtap: left promiscuous mode [ 545.194886][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 545.256593][ T5760] IPVS: starting estimator thread 0... [ 545.363630][T18463] IPVS: using max 28 ests per chain, 67200 per kthread [ 545.493335][T18465] batadv0: entered promiscuous mode [ 545.501134][T18465] veth0_to_batadv: entered promiscuous mode [ 545.515280][T18465] hsr1: entered allmulticast mode [ 545.520432][T18465] batadv0: entered allmulticast mode [ 545.526959][T18465] veth0_to_batadv: entered allmulticast mode [ 545.548341][T18471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3145'. [ 545.630901][T18472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3143'. [ 545.956803][T18494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3146'. [ 546.166876][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 546.356097][ T4944] Bluetooth: hci0: command tx timeout [ 546.629534][T18507] ipvlan2: entered promiscuous mode [ 546.647792][T18507] bridge0: port 3(ipvlan2) entered blocking state [ 546.675648][T18507] bridge0: port 3(ipvlan2) entered disabled state [ 546.694486][T18507] ipvlan2: entered allmulticast mode [ 546.700073][T18507] bridge0: entered allmulticast mode [ 546.709263][T18507] ipvlan2: left allmulticast mode [ 546.714823][T18507] bridge0: left allmulticast mode [ 546.752035][T18517] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 546.761722][T18517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 546.883601][T18356] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.891168][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.900883][T18356] bridge_slave_0: entered allmulticast mode [ 546.909621][T18356] bridge_slave_0: entered promiscuous mode [ 546.919919][T18356] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.928030][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.936282][T18356] bridge_slave_1: entered allmulticast mode [ 546.944747][T18356] bridge_slave_1: entered promiscuous mode [ 547.045402][T18356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.063819][T18356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.148673][T18356] team0: Port device team_slave_0 added [ 547.159779][T18356] team0: Port device team_slave_1 added [ 547.201443][T18356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.209288][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.236186][T18356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.249243][T18356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.256580][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.284493][T18356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.336470][T18356] hsr_slave_0: entered promiscuous mode [ 547.343879][T18356] hsr_slave_1: entered promiscuous mode [ 547.350279][T18356] debugfs: 'hsr0' already exists in 'hsr' [ 547.356691][T18356] Cannot create hsr debugfs directory [ 547.482163][T18356] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.494315][T18356] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 547.505218][T18356] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.588563][T18356] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.599207][T18356] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 547.609569][T18356] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.661619][T18356] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.674108][T18356] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 547.684650][T18356] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.740242][T18356] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.750179][T18356] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 547.760217][T18356] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.917047][T18356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.927677][T18356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.937337][T18356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.949900][T18356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.958757][T18356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.970098][T18356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.978929][T18356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.989590][T18356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.077676][T18356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.102369][T18356] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.116954][T10020] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.124349][T10020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.140400][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.147601][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.432962][ T4944] Bluetooth: hci0: command tx timeout [ 548.554882][T18356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.608185][T18356] veth0_vlan: entered promiscuous mode [ 548.622181][T18356] veth1_vlan: entered promiscuous mode [ 548.657816][T18356] veth0_macvtap: entered promiscuous mode [ 548.668297][T18356] veth1_macvtap: entered promiscuous mode [ 548.690670][T18356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.707393][T18356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.725603][T10020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.734510][T10020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.750792][T10020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.760248][T10020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.882317][T10020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.890666][T10020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.934582][T10020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.943329][T10020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.070686][T18543] __nla_validate_parse: 1 callbacks suppressed [ 549.070701][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 549.089001][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 549.099478][T18543] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3120'. [ 558.913606][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 594.113187][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 606.432843][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 614.594072][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.160402][T18566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3159'. [ 615.357479][T18563] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.468631][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.484081][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.496948][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.505329][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.516339][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.723963][T18584] dvmrp0: entered allmulticast mode [ 616.113460][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.141053][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.177145][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 616.199177][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 616.237405][T18599] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3164'. [ 616.476150][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.495916][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.523550][T18584] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.657665][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.694985][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.082838][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.093610][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.172343][T18613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3168'. [ 617.209515][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'. [ 617.288372][T18624] syzkaller0: entered promiscuous mode [ 617.294701][T18624] syzkaller0: entered allmulticast mode [ 617.305585][T18574] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.558284][ T50] Bluetooth: hci2: command tx timeout [ 619.636751][ T50] Bluetooth: hci2: command tx timeout [ 621.111411][T10023] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.188037][T10014] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.216211][T18635] tipc: Enabled bearer , priority 0 [ 621.243199][T18635] syzkaller0: entered promiscuous mode [ 621.251062][T18635] syzkaller0: entered allmulticast mode [ 621.283437][T18636] tipc: Enabled bearer , priority 0 [ 621.308159][T10028] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.336355][T18640] syzkaller0: entered promiscuous mode [ 621.342116][T18640] syzkaller0: entered allmulticast mode [ 621.490037][T18638] tipc: Resetting bearer [ 621.500469][ T57] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.573375][T18634] tipc: Resetting bearer [ 621.615144][T18634] tipc: Disabling bearer [ 621.653313][T18636] tipc: Resetting bearer [ 621.715353][ T50] Bluetooth: hci2: command tx timeout [ 621.762574][ T36] pimreg: left allmulticast mode [ 621.773616][ T36] dvmrp8: left allmulticast mode [ 621.798446][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 622.145940][ T36] bond6 (unregistering): (slave erspan2): Releasing active interface [ 622.154430][ T36] erspan2 (unregistering): left promiscuous mode [ 622.251520][ T36] bond3 (unregistering): (slave geneve2): Releasing active interface [ 622.358912][ T36] bond1 (unregistering): (slave bridge1): Releasing active interface [ 622.899097][ T36] bond1 (unregistering): Released all slaves [ 622.918924][ T36] bond2 (unregistering): Released all slaves [ 622.941947][ T36] bond3 (unregistering): Released all slaves [ 622.964227][ T36] bond4 (unregistering): Released all slaves [ 622.981358][ T36] bond5 (unregistering): Released all slaves [ 623.006768][ T36] bond6 (unregistering): Released all slaves [ 623.210655][ T36] bond0 (unregistering): Released all slaves [ 623.235377][ T36] bond7 (unregistering): Released all slaves [ 623.242172][T10014] smbdirect: ib_dev[syz1] removed [ 623.278497][ T36] bond8 (unregistering): Released all slaves [ 623.310305][ T36] bond9 (unregistering): Released all slaves [ 623.331744][ T36] bond10 (unregistering): Released all slaves [ 623.360327][T18633] tipc: Resetting bearer [ 623.385116][T18633] tipc: Disabling bearer [ 623.750361][ T36] 5nè‹Ò: left promiscuous mode [ 623.804918][ T50] Bluetooth: hci2: command tx timeout [ 623.903356][ T36] tipc: Left network mode [ 624.653332][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 624.780202][T18574] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.822790][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.868446][T18574] bridge_slave_0: entered allmulticast mode [ 624.923517][T18574] bridge_slave_0: entered promiscuous mode [ 625.034276][T18720] netlink: 210640 bytes leftover after parsing attributes in process `syz.3.3190'. [ 625.119855][T18710] bond1: (slave bond_slave_1): Device is not our slave [ 625.145723][T18710] bond1: option active_slave: invalid value (bond_slave_1) [ 625.180267][T18710] bond1 (unregistering): Released all slaves [ 625.256673][T18574] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.271257][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.286032][T18574] bridge_slave_1: entered allmulticast mode [ 625.297770][T18574] bridge_slave_1: entered promiscuous mode [ 625.361032][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 625.450888][T18736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3196'. [ 625.524135][T18574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.539971][T18574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.768385][T18735] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.878361][T18574] team0: Port device team_slave_0 added [ 625.890753][T18574] team0: Port device team_slave_1 added [ 626.086769][T18574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.110444][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.153609][T18574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.174857][T18574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.184871][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.213503][T18574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.736363][T18755] syzkaller0: entered promiscuous mode [ 626.745814][T18755] syzkaller0: entered allmulticast mode [ 626.906809][T18779] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 626.923100][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 627.155061][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 630.410709][T18574] hsr_slave_0: entered promiscuous mode [ 630.434011][T18574] hsr_slave_1: entered promiscuous mode [ 630.441991][T18574] debugfs: 'hsr0' already exists in 'hsr' [ 630.452187][T18574] Cannot create hsr debugfs directory [ 630.491780][T18779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.507585][T18785] macsec1: entered promiscuous mode [ 630.513745][T18785] macsec1: entered allmulticast mode [ 630.530302][T18787] bond1: (slave gretap1): making interface the new active one [ 630.542228][T18787] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 630.585705][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'. [ 630.595262][T18791] bond1 (unregistering): (slave gretap1): Releasing active interface [ 630.605810][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'. [ 630.616215][T18798] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3206'. [ 630.654326][T18791] bond1 (unregistering): Released all slaves [ 630.685836][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 631.194190][T18810] netem: incorrect gi model size [ 631.223470][T18810] netem: change failed [ 631.744988][ T36] batadv0: left promiscuous mode [ 631.751161][ T36] veth0_to_batadv: left promiscuous mode [ 631.787538][ T36] batman_adv: batadv0: Removing interface: ipvlan2 [ 631.825707][ T36] hsr0: left allmulticast mode [ 632.643262][T18832] batadv0: entered promiscuous mode [ 632.659225][T18832] vlan2: entered promiscuous mode [ 632.837287][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 633.063701][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3220'. [ 633.249804][T18574] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.440068][T18862] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.485232][ T36] IPVS: stop unused estimator thread 0... [ 633.781071][T18889] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3221'. [ 633.809905][T18574] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.911480][T18892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3221'. [ 633.936308][T18887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3222'. [ 633.986785][T18887] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3222'. [ 634.011409][T18887] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3222'. [ 634.228327][T18574] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.304251][T18897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3223'. [ 634.369886][T18892] bridge0: left promiscuous mode [ 634.412634][T18892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3221'. [ 634.815747][T18574] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.923330][T18574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 635.974488][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.000661][T18574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 636.043900][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.077877][T18574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 636.129538][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.159414][T18574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 636.178192][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 636.203618][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.215735][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 636.650755][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.717752][T18574] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.765949][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.773218][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.459121][T18970] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.466950][T18970] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.483659][T18987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.556026][T18987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.587585][T18987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.816301][T18970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.856600][T18970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.098944][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.106301][T10023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.121772][T18954] bridge_slave_0 (unregistering): left allmulticast mode [ 638.136602][T18954] bridge_slave_0 (unregistering): left promiscuous mode [ 638.144777][T18954] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.187839][T18996] ip6gre1: entered promiscuous mode [ 638.201954][T18996] ip6gre1: entered allmulticast mode [ 638.216779][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.247133][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.341264][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.376087][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.865870][T19045] syzkaller0: entered promiscuous mode [ 638.880765][T19045] syzkaller0: entered allmulticast mode [ 639.227128][T19062] __nla_validate_parse: 4 callbacks suppressed [ 639.227150][T19062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3248'. [ 639.297580][T19064] xt_hashlimit: invalid rate [ 639.422049][T19069] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 639.445473][T19073] x_tables: unsorted underflow at hook 2 [ 639.546466][T19069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 639.675052][T19086] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3249'. [ 639.807221][T19078] bond8: (slave veth13): Enslaving as an active interface with a down link [ 640.095575][T19105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 640.130451][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.190494][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 640.308149][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 640.319283][T19111] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3257'. [ 640.373858][T19105] tipc: Enabled bearer , priority 0 [ 640.397730][T19105] syzkaller0: entered promiscuous mode [ 640.409652][T19105] syzkaller0: entered allmulticast mode [ 640.446141][T19101] tipc: Resetting bearer [ 640.540043][T19101] tipc: Disabling bearer [ 640.714946][T18574] veth0_vlan: entered promiscuous mode [ 640.779280][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3261'. [ 640.788099][T18574] veth1_vlan: entered promiscuous mode [ 640.830000][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3261'. [ 640.906364][T19126] ip6gre1: entered promiscuous mode [ 640.930279][T19126] ip6gre1: entered allmulticast mode [ 641.036646][T18574] veth0_macvtap: entered promiscuous mode [ 641.092058][T18574] veth1_macvtap: entered promiscuous mode [ 641.253018][T18574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.377052][T18574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.424067][T10028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.472170][T10028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.500479][T10028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.621357][T10028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.734859][T19161] syzkaller0: entered promiscuous mode [ 641.753173][T19161] syzkaller0: entered allmulticast mode [ 641.870236][T19161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.927067][T19166] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 641.969653][T19167] netlink: 'syz.2.3272': attribute type 62 has an invalid length. [ 642.143825][T19170] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.164937][T19170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.172290][T19170] IPv6: NLM_F_CREATE should be set when creating new route [ 642.179788][T19170] IPv6: NLM_F_CREATE should be set when creating new route [ 642.187105][T19170] IPv6: NLM_F_CREATE should be set when creating new route [ 642.199918][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.222268][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.238138][T19170] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3273'. [ 642.321596][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.339128][T19180] netlink: 'syz.3.3277': attribute type 10 has an invalid length. [ 642.347872][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.386754][T19180] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3277'. [ 642.457829][T19181] netlink: 'syz.3.3277': attribute type 10 has an invalid length. [ 642.970678][T19202] ip6_vti0 speed is unknown, defaulting to 1000 [ 643.128282][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.147995][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.168880][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.185037][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.194632][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.080278][T19242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.165257][T10028] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.546855][T10028] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.810716][T10028] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.081040][T10028] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.203397][T19210] ip6_vti0 speed is unknown, defaulting to 1000 [ 645.312711][ T4944] Bluetooth: hci1: command tx timeout [ 645.328233][T19283] tipc: Started in network mode [ 645.335840][T19283] tipc: Node identity a625323d7eac, cluster identity 4711 [ 645.344756][T19283] tipc: Enabled bearer , priority 0 [ 645.353542][T19289] netlink: 'syz.0.3301': attribute type 1 has an invalid length. [ 645.410369][T19285] syzkaller0: entered promiscuous mode [ 645.419965][T19285] syzkaller0: entered allmulticast mode [ 645.511808][T19288] erspan1: entered allmulticast mode [ 645.618106][T19283] tipc: Resetting bearer [ 645.655849][T19282] tipc: Resetting bearer [ 645.736411][T19282] tipc: Disabling bearer [ 645.965587][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.248440][T10012] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.565955][T10012] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.716046][ T36] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.840284][T10028] bridge_slave_0: left allmulticast mode [ 646.863333][T10028] bridge_slave_0: left promiscuous mode [ 646.874344][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.983813][T10028] pimreg: left allmulticast mode [ 647.395858][ T4944] Bluetooth: hci1: command tx timeout [ 647.610195][T10028] bond5 (unregistering): (slave erspan1): Releasing active interface [ 647.619313][T10028] erspan1 (unregistering): left promiscuous mode [ 647.724860][T10028] bond4 (unregistering): (slave geneve2): Releasing active interface [ 648.158807][T10028] bond1 (unregistering): Released all slaves [ 648.175755][T10028] bond2 (unregistering): Released all slaves [ 648.197314][T10028] bond3 (unregistering): Released all slaves [ 648.224502][T10028] bond4 (unregistering): Released all slaves [ 648.241405][T10028] bond5 (unregistering): Released all slaves [ 648.260809][T10028] bond0 (unregistering): left promiscuous mode [ 648.278270][T10028] bond0 (unregistering): Released all slaves [ 648.296649][T10028] bond6 (unregistering): (slave veth7): Releasing backup interface [ 648.305288][T10028] veth7: left promiscuous mode [ 648.311258][T10028] bond6 (unregistering): Released all slaves [ 648.329475][T10028] bond7 (unregistering): Released all slaves [ 648.358754][T10028] bond8 (unregistering): (slave veth13): Releasing active interface [ 648.368837][T10028] bond8 (unregistering): Released all slaves [ 648.399934][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 648.541614][T19356] FAULT_INJECTION: forcing a failure. [ 648.541614][T19356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.598073][T19358] __nla_validate_parse: 3 callbacks suppressed [ 648.598104][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'. [ 648.603340][T19356] CPU: 0 UID: 0 PID: 19356 Comm: syz.3.3320 Not tainted syzkaller #0 PREEMPT(full) [ 648.603424][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.603460][T19356] Call Trace: [ 648.603490][T19356] [ 648.603513][T19356] dump_stack_lvl+0xe8/0x150 [ 648.603601][T19356] should_fail_ex+0x412/0x560 [ 648.603693][T19356] _copy_from_user+0x2d/0xb0 [ 648.603782][T19356] generic_map_update_batch+0x648/0x990 [ 648.603907][T19356] ? __pfx_generic_map_update_batch+0x10/0x10 [ 648.603987][T19356] ? __fget_files+0x2a/0x420 [ 648.604079][T19356] ? __pfx_generic_map_update_batch+0x10/0x10 [ 648.604149][T19356] bpf_map_do_batch+0x39b/0x630 [ 648.604219][T19356] __sys_bpf+0x7c1/0x950 [ 648.604318][T19356] ? __pfx___sys_bpf+0x10/0x10 [ 648.604378][T19356] ? ksys_write+0x242/0x270 [ 648.604412][T19356] ? __pfx_ksys_write+0x10/0x10 [ 648.604447][T19356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.604470][T19356] __x64_sys_bpf+0x7c/0x90 [ 648.604501][T19356] do_syscall_64+0x15f/0xf80 [ 648.604520][T19356] ? trace_irq_disable+0x3b/0x140 [ 648.604552][T19356] ? clear_bhb_loop+0x40/0x90 [ 648.604578][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.604600][T19356] RIP: 0033:0x7f2ea5f9cdd9 [ 648.604619][T19356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.604662][T19356] RSP: 002b:00007f2ea6e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.604686][T19356] RAX: ffffffffffffffda RBX: 00007f2ea6215fa0 RCX: 00007f2ea5f9cdd9 [ 648.604702][T19356] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 648.604715][T19356] RBP: 00007f2ea6e49090 R08: 0000000000000000 R09: 0000000000000000 [ 648.604729][T19356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.604741][T19356] R13: 00007f2ea6216038 R14: 00007f2ea6215fa0 R15: 00007ffc7a5b21e8 [ 648.604775][T19356] [ 649.117933][T19361] bond1 (unregistering): Released all slaves [ 649.365547][T19358] bond1: entered promiscuous mode [ 649.372900][T19358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.397688][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 649.426701][T10028] tipc: Disabling bearer [ 649.457279][T10028] tipc: Left network mode [ 649.476192][ T4944] Bluetooth: hci1: command tx timeout [ 650.038909][T19405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3330'. [ 650.050021][T10028] IPVS: stopping backup sync thread 7168 ... [ 650.067607][T19408] gretap0: entered promiscuous mode [ 650.096077][T19408] vlan2: entered promiscuous mode [ 650.392336][T19405] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 650.394733][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 650.467483][T19210] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.498775][T19210] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.520026][T19210] bridge_slave_0: entered allmulticast mode [ 650.531655][T19210] bridge_slave_0: entered promiscuous mode [ 650.549785][T19397] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.560821][T19210] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.569414][T19210] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.576837][T19210] bridge_slave_1: entered allmulticast mode [ 650.586323][T19210] bridge_slave_1: entered promiscuous mode [ 650.845800][T19210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.911046][T19210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.247729][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 651.251940][T19210] team0: Port device team_slave_0 added [ 651.263906][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 651.278286][T19210] team0: Port device team_slave_1 added [ 651.470058][T19210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.487422][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.527056][T19210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.543522][T19210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.550821][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.584420][ T4944] Bluetooth: hci1: command tx timeout [ 651.590151][T19210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.906766][T19452] veth1_macvtap: entered promiscuous mode [ 651.924834][T19452] veth1_macvtap: entered allmulticast mode [ 651.932110][T19452] macsec0: left promiscuous mode [ 651.940857][T19452] macsec0: left allmulticast mode [ 651.948057][T19452] veth1_macvtap: left allmulticast mode [ 651.960661][T19452] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 651.992826][T19452] virt_wifi0: entered promiscuous mode [ 652.014162][T19452] virt_wifi0: entered allmulticast mode [ 652.043957][T19452] macsec1: left promiscuous mode [ 652.069542][T19452] macsec1: left allmulticast mode [ 652.090748][T19452] virt_wifi0: left allmulticast mode [ 652.125107][T19452] ip6gre1: left promiscuous mode [ 652.141410][T19452] ip6gre1: left allmulticast mode [ 652.697935][T19210] hsr_slave_0: entered promiscuous mode [ 652.716321][T19210] hsr_slave_1: entered promiscuous mode [ 652.775894][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 652.859833][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 653.381567][T10028] batadv0: left promiscuous mode [ 653.390480][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3346'. [ 653.408376][T10028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.421364][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.432261][T10028] batman_adv: batadv0: Removing interface: ipvlan2 [ 653.440790][T10028] batman_adv: batadv0: Removing interface: ipvlan0 [ 653.442837][T19496] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 653.463501][T19498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3346'. [ 656.931885][T19488] ip6_vti0 speed is unknown, defaulting to 1000 [ 656.934316][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3346'. [ 656.941673][T19496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 656.979748][T19498] ip6gre2: entered promiscuous mode [ 657.024650][T19498] ip6gre2: entered allmulticast mode [ 657.083699][T19494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3346'. [ 657.744113][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 657.778038][T19210] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.800534][T19527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 657.839143][T10028] IPVS: stop unused estimator thread 0... [ 657.868230][T19531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.188880][T19210] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.667856][T19210] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.983013][T19210] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.299130][T19571] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 659.390089][T19576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3358'. [ 659.443252][T19581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3358'. [ 659.489027][T19584] openvswitch: netlink: Flow key attr not present in new flow. [ 659.610029][T19571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.706615][T19573] bond2: (slave veth3): Enslaving as an active interface with a down link [ 659.739280][T19576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3358'. [ 659.781312][T19577] bond2: (slave veth5): Enslaving as an active interface with a down link [ 659.819499][T19594] netlink: 'syz.3.3360': attribute type 13 has an invalid length. [ 659.980251][T19576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3358'. [ 660.240316][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 660.265208][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 660.328797][T19614] veth1_macvtap: left promiscuous mode [ 660.431027][T19210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 660.463709][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.483566][T19210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 660.522038][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.666512][T19628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.711466][T19628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.830930][T19628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.853106][T19628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.878700][T19628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.889880][T19628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.911628][T19628] veth1_vlan: left promiscuous mode [ 660.927759][T19628] veth0_vlan: left promiscuous mode [ 660.935125][T19628] veth0_vlan: entered promiscuous mode [ 660.950223][T19628] veth1_vlan: entered promiscuous mode [ 660.967516][T19628] veth1_macvtap: left promiscuous mode [ 660.976167][T19628] veth0_macvtap: left promiscuous mode [ 660.985441][T19628] veth0_macvtap: entered promiscuous mode [ 661.001019][T19628] veth1_macvtap: entered promiscuous mode [ 661.041001][T19628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.086387][T19628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.123837][T19628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.135868][T19628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.204215][T19628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 661.220517][T19210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 661.240566][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.253902][T19210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 661.269126][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.279696][T19634] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 661.296917][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.304177][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.315624][T19634] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 661.420641][T10028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.435008][T10028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.501115][T10028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.520107][T10028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.860270][T10028] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 661.916881][T10028] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 661.949942][T10028] bond2: (slave veth3): making interface the new active one [ 661.969272][T10028] bond2: active interface up! [ 662.010136][T19671] __nla_validate_parse: 3 callbacks suppressed [ 662.010157][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 662.235690][T19690] openvswitch: netlink: IPv4 tun info is not correct [ 662.284064][T19690] openvswitch: netlink: IPv4 tun info is not correct [ 662.300781][T19690] openvswitch: netlink: IPv4 tun info is not correct [ 662.329385][T19684] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.338874][T19210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.636475][T19210] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.716805][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.724068][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.758999][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 662.838783][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.846049][T10023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.270673][T19716] netlink: 'syz.2.3379': attribute type 5 has an invalid length. [ 663.576623][T19726] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 664.437127][T19759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3384'. [ 664.475329][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.514488][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.521482][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.528415][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.535320][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.542153][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.549079][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.556022][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.562941][T19758] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 664.599255][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.688841][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.759540][T19765] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.793958][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.845562][T19765] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.857410][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 664.945409][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3387'. [ 665.276409][T19210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.038166][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 666.615524][T19816] bond4: entered promiscuous mode [ 666.644149][T19816] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.800650][T19819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.830415][T19819] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 666.889130][T19819] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 667.021515][T19210] veth0_vlan: entered promiscuous mode [ 667.057163][T19210] veth1_vlan: entered promiscuous mode [ 667.221325][T19210] veth0_macvtap: entered promiscuous mode [ 667.260552][T19210] veth1_macvtap: entered promiscuous mode [ 667.330381][T19210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.368419][T19210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.469305][T19837] __nla_validate_parse: 2 callbacks suppressed [ 667.469333][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3397'. [ 667.480578][T10014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.523362][T10014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.590049][T10014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.630524][T10014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.129270][T10028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.172234][T10028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.292055][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 668.308034][T19869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3404'. [ 668.325653][T19864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3402'. [ 668.349817][T19869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3404'. [ 668.362575][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.370481][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.444326][T19869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3404'. [ 668.605650][T19879] net_ratelimit: 1208 callbacks suppressed [ 668.605676][T19879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.709626][T19882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'. [ 668.750317][T19879] ip6tnl1: entered allmulticast mode [ 668.786927][T19888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.816062][T10028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 669.017794][T19897] syzkaller0: entered promiscuous mode [ 669.044054][T19897] syzkaller0: entered allmulticast mode [ 669.446030][T19917] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 669.568468][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3411'. [ 669.703121][T19917] bond2: entered promiscuous mode [ 669.736835][T19917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.762523][T19922] bond2: entered allmulticast mode [ 670.104083][T19942] netlink: 'syz.2.3417': attribute type 2 has an invalid length. [ 670.227394][T19939] : entered promiscuous mode [ 670.259186][T19949] netlink: 724 bytes leftover after parsing attributes in process `syz.4.3419'. [ 670.262887][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3420'. [ 670.330870][T19949] netlink: 'syz.4.3419': attribute type 13 has an invalid length. [ 670.373417][T19949] gretap0: refused to change device tx_queue_len [ 670.408366][T19949] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 670.661723][T19918] syzkaller0: entered promiscuous mode [ 670.708297][T19918] syzkaller0: entered allmulticast mode [ 670.838734][T19965] ip6_vti0 speed is unknown, defaulting to 1000 [ 671.578746][T19981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.180091][T19981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.540097][T19981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.672743][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 672.918106][T19981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.981284][T20037] __nla_validate_parse: 9 callbacks suppressed [ 672.981304][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 673.015290][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 673.198882][T20044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3435'. [ 673.222790][T20044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3435'. [ 673.244257][T20044] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3435'. [ 673.409120][T20053] x_tables: duplicate underflow at hook 2 [ 673.721665][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 673.936951][T20076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3442'. [ 674.027805][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 674.171959][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 674.336657][T20090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 674.567735][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 674.631766][T20100] 0ªX¹¦À: renamed from batadv0 (while UP) [ 674.656491][T20100] 0ªX¹¦À: entered allmulticast mode [ 674.671050][T20100] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 674.937318][T20123] FAULT_INJECTION: forcing a failure. [ 674.937318][T20123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.971518][T20123] CPU: 1 UID: 0 PID: 20123 Comm: syz.4.3452 Not tainted syzkaller #0 PREEMPT(full) [ 674.971549][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.971567][T20123] Call Trace: [ 674.971576][T20123] [ 674.971586][T20123] dump_stack_lvl+0xe8/0x150 [ 674.971618][T20123] should_fail_ex+0x412/0x560 [ 674.971652][T20123] _copy_from_user+0x2d/0xb0 [ 674.971686][T20123] generic_map_update_batch+0x648/0x990 [ 674.971725][T20123] ? __pfx_generic_map_update_batch+0x10/0x10 [ 674.971753][T20123] ? __fget_files+0x2a/0x420 [ 674.971784][T20123] ? __pfx_generic_map_update_batch+0x10/0x10 [ 674.971812][T20123] bpf_map_do_batch+0x39b/0x630 [ 674.971841][T20123] __sys_bpf+0x7c1/0x950 [ 674.971875][T20123] ? __pfx___sys_bpf+0x10/0x10 [ 674.971924][T20123] ? ksys_write+0x242/0x270 [ 674.971957][T20123] ? __pfx_ksys_write+0x10/0x10 [ 674.971995][T20123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.972017][T20123] __x64_sys_bpf+0x7c/0x90 [ 674.972047][T20123] do_syscall_64+0x15f/0xf80 [ 674.972066][T20123] ? trace_irq_disable+0x3b/0x140 [ 674.972099][T20123] ? clear_bhb_loop+0x40/0x90 [ 674.972124][T20123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.972146][T20123] RIP: 0033:0x7fc04c59cdd9 [ 674.972167][T20123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.972185][T20123] RSP: 002b:00007fc04d529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.972217][T20123] RAX: ffffffffffffffda RBX: 00007fc04c815fa0 RCX: 00007fc04c59cdd9 [ 674.972233][T20123] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 674.972247][T20123] RBP: 00007fc04d529090 R08: 0000000000000000 R09: 0000000000000000 [ 674.972260][T20123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 674.972272][T20123] R13: 00007fc04c816038 R14: 00007fc04c815fa0 R15: 00007ffd0328ffc8 [ 674.972307][T20123] [ 676.801157][T20195] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 677.068071][T10020] team0: Port device ip6gre2 removed [ 677.259029][T10012] smc: removing ib device syz2 [ 677.406788][T10012] smbdirect: ib_dev[syz2] removed [ 677.934823][T10020] bond7 (unregistering): (slave geneve4): Releasing active interface [ 678.282006][T10020] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 678.291556][T10020] bridge3 (unregistering): left promiscuous mode [ 678.554130][T10020] bond0 (unregistering): (slave team0): Releasing backup interface [ 678.566461][T10020] bond0 (unregistering): Released all slaves [ 678.590131][T10020] bond1 (unregistering): Released all slaves [ 678.695035][T10020] bond2 (unregistering): Released all slaves [ 678.731380][T10020] bond3 (unregistering): Released all slaves [ 678.820002][T10020] bond4 (unregistering): Released all slaves [ 678.907633][T10020] bond5 (unregistering): Released all slaves [ 678.960794][T10020] bond6 (unregistering): (slave vlan2): Releasing active interface [ 678.977734][T10020] bond6 (unregistering): Released all slaves [ 679.011855][T10020] bond7 (unregistering): Released all slaves [ 679.077432][T10020] bond8 (unregistering): Released all slaves [ 679.175188][T10020] bond9 (unregistering): (slave batadv0): Releasing active interface [ 679.184245][T10020] batadv0: left promiscuous mode [ 679.189522][T10020] batadv0: left allmulticast mode [ 679.212980][T10020] bond9 (unregistering): Released all slaves [ 679.269730][T20153] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 679.306629][ T5838] ip6_vti0 speed is unknown, defaulting to 1000 [ 679.323675][ T5838] syz2: Port: 1 Link DOWN [ 679.473333][T20231] __nla_validate_parse: 9 callbacks suppressed [ 679.473355][T20231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3471'. [ 679.548049][T20232] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3471'. [ 679.751711][T20231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3471'. [ 679.765367][T20231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3471'. [ 680.211330][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3475'. [ 680.397057][T20272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3477'. [ 680.512962][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 681.236150][T10020] : left promiscuous mode [ 681.314953][T20294] syzkaller1: entered promiscuous mode [ 681.354161][T20294] syzkaller1: entered allmulticast mode [ 681.372197][T20292] netlink: 'syz.2.3483': attribute type 1 has an invalid length. [ 681.395812][T10020] tipc: Disabling bearer [ 681.419151][T10020] tipc: Disabling bearer [ 681.447372][T10020] tipc: Left network mode [ 681.461274][T20299] hsr0: entered promiscuous mode [ 681.666645][T10020] IPVS: stopping master sync thread 11243 ... [ 682.011982][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3490'. [ 682.451780][T20329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 682.740351][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3496'. [ 682.792330][T20352] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 682.889096][T20357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3497'. [ 682.921263][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 682.956977][T20357] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 683.017279][T20351] bond1: entered promiscuous mode [ 683.042051][T20351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.355958][T20377] x_tables: unsorted underflow at hook 3 [ 683.366722][T20379] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 683.394172][T20352] vlan2: entered allmulticast mode [ 683.399573][T20352] veth0_to_bond: entered allmulticast mode [ 684.197466][T10020] veth1_to_team: left promiscuous mode [ 684.307134][T10020] veth1_macvtap: left promiscuous mode [ 684.337203][T10020] veth0_macvtap: left promiscuous mode [ 684.345138][T10020] veth1_vlan: left promiscuous mode [ 684.351356][T10020] veth0_vlan: left promiscuous mode [ 684.461887][T10020] pim6reg (unregistering): left allmulticast mode [ 684.901673][T20415] __nla_validate_parse: 2 callbacks suppressed [ 684.901691][T20415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3514'. [ 684.931875][T20419] vlan0: entered promiscuous mode [ 684.946747][T20419] bridge0: entered promiscuous mode [ 684.960938][T20421] netlink: 'syz.1.3515': attribute type 4 has an invalid length. [ 684.986506][T20415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3514'. [ 685.619953][T20453] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3526'. [ 685.760577][T20446] Bluetooth: MGMT ver 1.23 [ 685.877590][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 686.082524][T20477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3531'. [ 686.105158][T20477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3531'. [ 686.172708][T20477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3531'. [ 686.310327][T10020] IPVS: stop unused estimator thread 0... [ 686.367373][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3532'. [ 686.414323][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 686.450018][T20487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3532'. [ 686.517832][T20487] ip6gre1: entered promiscuous mode [ 686.542651][T20487] ip6gre1: entered allmulticast mode [ 687.180848][T20514] netlink: 'syz.1.3544': attribute type 5 has an invalid length. [ 687.813045][T20540] netlink: 'syz.1.3550': attribute type 3 has an invalid length. [ 688.175302][T20566] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 688.370812][T20566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.410481][T20580] FAULT_INJECTION: forcing a failure. [ 688.410481][T20580] name failslab, interval 1, probability 0, space 0, times 0 [ 688.424161][T20580] CPU: 0 UID: 0 PID: 20580 Comm: syz.1.3561 Not tainted syzkaller #0 PREEMPT(full) [ 688.424184][T20580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.424196][T20580] Call Trace: [ 688.424203][T20580] [ 688.424210][T20580] dump_stack_lvl+0xe8/0x150 [ 688.424237][T20580] should_fail_ex+0x412/0x560 [ 688.424266][T20580] should_failslab+0xa8/0x100 [ 688.424296][T20580] ? skb_clone+0x212/0x3a0 [ 688.424312][T20580] kmem_cache_alloc_noprof+0x87/0x650 [ 688.424337][T20580] ? __netlink_lookup+0xc6/0x8b0 [ 688.424368][T20580] skb_clone+0x212/0x3a0 [ 688.424387][T20580] __netlink_deliver_tap+0x404/0x850 [ 688.424422][T20580] ? netlink_deliver_tap+0x2e/0x1b0 [ 688.424449][T20580] netlink_deliver_tap+0x19c/0x1b0 [ 688.424475][T20580] netlink_unicast+0x730/0x8e0 [ 688.424508][T20580] netlink_sendmsg+0x813/0xb40 [ 688.424543][T20580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.424573][T20580] ? aa_sock_msg_perm+0xf1/0x1b0 [ 688.424602][T20580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.424632][T20580] ____sys_sendmsg+0x972/0x9f0 [ 688.424663][T20580] ? __might_fault+0xaf/0x130 [ 688.424691][T20580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.424727][T20580] ? import_iovec+0x73/0xa0 [ 688.424763][T20580] ___sys_sendmsg+0x2a5/0x360 [ 688.424789][T20580] ? __lock_acquire+0x6b5/0x2cf0 [ 688.424813][T20580] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.424847][T20580] ? __lock_acquire+0x6b5/0x2cf0 [ 688.424891][T20580] ? __fget_files+0x2a/0x420 [ 688.424912][T20580] ? __fget_files+0x3a0/0x420 [ 688.424942][T20580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 688.424968][T20580] ? ktime_get+0x1f5/0x220 [ 688.424999][T20580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.425043][T20580] ? clockevents_program_event+0x491/0x630 [ 688.425088][T20580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.425108][T20580] do_syscall_64+0x15f/0xf80 [ 688.425129][T20580] ? clear_bhb_loop+0x40/0x90 [ 688.425153][T20580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.425171][T20580] RIP: 0033:0x7fc50d59cdd9 [ 688.425189][T20580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.425205][T20580] RSP: 002b:00007fc50e4c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.425225][T20580] RAX: ffffffffffffffda RBX: 00007fc50d815fa0 RCX: 00007fc50d59cdd9 [ 688.425239][T20580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 688.425250][T20580] RBP: 00007fc50e4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 688.425262][T20580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.425274][T20580] R13: 00007fc50d816038 R14: 00007fc50d815fa0 R15: 00007ffeddc5d5c8 [ 688.425303][T20580] [ 688.718483][T20568] ip6gre2: entered promiscuous mode [ 688.723838][T20568] ip6gre2: entered allmulticast mode [ 688.747334][T20574] bond4: (slave geneve2): making interface the new active one [ 688.757394][T20574] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 688.949183][T20585] netlink: 'syz.0.3564': attribute type 5 has an invalid length. [ 689.184943][T20598] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 689.655262][T20617] netlink: 'syz.1.3574': attribute type 5 has an invalid length. [ 690.130632][T20639] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 690.486617][T20623] __nla_validate_parse: 13 callbacks suppressed [ 690.486643][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 690.529970][T20626] ip6gre1: entered promiscuous mode [ 690.536528][T20626] ip6gre1: entered allmulticast mode [ 690.690408][T20623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3577'. [ 691.086419][T20659] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 691.113754][T20658] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 691.152131][T20659] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 691.159736][T20658] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 692.209315][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 692.305308][T20696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3596'. [ 692.316496][T20697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3594'. [ 692.380630][T20699] netlink: 'syz.4.3596': attribute type 10 has an invalid length. [ 692.418546][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 692.540300][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3594'. [ 693.249435][T20723] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 693.446659][T20723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 693.593291][T20728] bond5: (slave batadv0): Opening slave failed [ 694.006609][T20740] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20002 [ 694.039511][T20738] syzkaller0: entered promiscuous mode [ 694.067008][T20738] syzkaller0: entered allmulticast mode [ 694.107613][T20742] tipc: Started in network mode [ 694.115609][T20742] tipc: Node identity ac14140f, cluster identity 4711 [ 694.124524][T20742] tipc: New replicast peer: 255.255.255.255 [ 694.131318][T20742] tipc: Enabled bearer , priority 10 [ 694.470471][T20745] sock: sock_timestamping_bind_phc: sock not bind to device [ 694.592643][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.623298][T20752] FAULT_INJECTION: forcing a failure. [ 694.623298][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 694.649026][T20754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3612'. [ 694.665461][T20754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3612'. [ 694.681450][T20752] CPU: 0 UID: 0 PID: 20752 Comm: syz.3.3611 Not tainted syzkaller #0 PREEMPT(full) [ 694.681481][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.681494][T20752] Call Trace: [ 694.681502][T20752] [ 694.681511][T20752] dump_stack_lvl+0xe8/0x150 [ 694.681542][T20752] should_fail_ex+0x412/0x560 [ 694.681583][T20752] should_failslab+0xa8/0x100 [ 694.681620][T20752] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 694.681650][T20752] ? __alloc_skb+0x186/0x7d0 [ 694.681678][T20752] ? __alloc_skb+0x1d0/0x7d0 [ 694.681704][T20752] ? __local_bh_enable_ip+0xd0/0x130 [ 694.681731][T20752] __alloc_skb+0x1d0/0x7d0 [ 694.681759][T20752] ? netlink_ack_tlv_len+0x6c/0x210 [ 694.681791][T20752] netlink_ack+0x146/0xa50 [ 694.681839][T20752] netlink_rcv_skb+0x2b6/0x4b0 [ 694.681869][T20752] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 694.681901][T20752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 694.681942][T20752] ? bpf_lsm_capable+0x9/0x20 [ 694.681962][T20752] ? security_capable+0x7e/0x2c0 [ 694.681997][T20752] nfnetlink_rcv+0x2c0/0x27b0 [ 694.682034][T20752] ? __local_bh_enable_ip+0xd0/0x130 [ 694.682057][T20752] ? lockdep_hardirqs_on+0x7a/0x110 [ 694.682091][T20752] ? __dev_queue_xmit+0x2b6/0x3950 [ 694.682112][T20752] ? __local_bh_enable_ip+0xd0/0x130 [ 694.682131][T20752] ? __dev_queue_xmit+0x2b6/0x3950 [ 694.682151][T20752] ? __dev_queue_xmit+0x1fe5/0x3950 [ 694.682171][T20752] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.682211][T20752] ? __dev_queue_xmit+0x2b6/0x3950 [ 694.682239][T20752] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 694.682275][T20752] ? __pfx___dev_queue_xmit+0x10/0x10 [ 694.682306][T20752] ? ref_tracker_free+0x693/0x840 [ 694.682340][T20752] ? __pfx_ref_tracker_free+0x10/0x10 [ 694.682392][T20752] ? skb_clone+0x246/0x3a0 [ 694.682416][T20752] ? __netlink_deliver_tap+0x807/0x850 [ 694.682447][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.682486][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.682517][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.682554][T20752] netlink_unicast+0x75c/0x8e0 [ 694.682603][T20752] netlink_sendmsg+0x813/0xb40 [ 694.682645][T20752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.682680][T20752] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.682712][T20752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.682746][T20752] ____sys_sendmsg+0x972/0x9f0 [ 694.682778][T20752] ? __might_fault+0xaf/0x130 [ 694.682813][T20752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.682858][T20752] ? import_iovec+0x73/0xa0 [ 694.682894][T20752] ___sys_sendmsg+0x2a5/0x360 [ 694.682926][T20752] ? __lock_acquire+0x6b5/0x2cf0 [ 694.682954][T20752] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.683027][T20752] ? __fget_files+0x2a/0x420 [ 694.683053][T20752] ? __fget_files+0x3a0/0x420 [ 694.683091][T20752] __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.683127][T20752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.683170][T20752] ? __pfx_ksys_write+0x10/0x10 [ 694.683211][T20752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.683234][T20752] do_syscall_64+0x15f/0xf80 [ 694.683254][T20752] ? trace_irq_disable+0x3b/0x140 [ 694.683294][T20752] ? clear_bhb_loop+0x40/0x90 [ 694.683321][T20752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.683342][T20752] RIP: 0033:0x7f2ea5f9cdd9 [ 694.683362][T20752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.683380][T20752] RSP: 002b:00007f2ea6e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.683404][T20752] RAX: ffffffffffffffda RBX: 00007f2ea6215fa0 RCX: 00007f2ea5f9cdd9 [ 694.683420][T20752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 694.683433][T20752] RBP: 00007f2ea6e49090 R08: 0000000000000000 R09: 0000000000000000 [ 694.683447][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.683459][T20752] R13: 00007f2ea6216038 R14: 00007f2ea6215fa0 R15: 00007ffc7a5b21e8 [ 694.683494][T20752] [ 694.726085][T20754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3612'. [ 695.153313][ T5361] tipc: Node number set to 2886997007 [ 695.198920][T20758] syzkaller0: entered promiscuous mode [ 695.214029][T20758] syzkaller0: entered allmulticast mode [ 695.233967][T20758] tcf_pedit_act: 22 callbacks suppressed [ 695.233987][T20758] tc action pedit 'at' offset -2147483648 out of bounds [ 695.850302][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.928097][T20712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.470938][T20814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3629'. [ 696.895544][ T30] audit: type=1804 audit(1778201647.838:8): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3634" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=619 res=1 errno=0 [ 696.977886][ T30] audit: type=1800 audit(1778201647.878:9): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3634" name="cgroup.controllers" dev="tmpfs" ino=619 res=0 errno=0 [ 697.078499][T20836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3636'. [ 697.300554][T20846] openvswitch: netlink: Flow actions attr not present in new flow. [ 697.426802][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 697.896811][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 697.963949][T20867] ip6gre1: entered promiscuous mode [ 697.985794][T20867] ip6gre1: entered allmulticast mode [ 698.035324][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 698.277002][T20877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3648'. [ 698.307052][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3648'. [ 698.322538][T20877] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 699.078201][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 699.189352][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3660'. [ 699.420358][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3665'. [ 699.885734][ T5361] IPVS: starting estimator thread 0... [ 699.941189][T20956] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 699.983203][T20954] IPVS: using max 27 ests per chain, 64800 per kthread [ 700.093948][T20933] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.101636][T20933] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.629316][T20933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.684323][T20933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.211393][T20933] ip6gre1: left promiscuous mode [ 701.222473][T20933] ip6gre1: left allmulticast mode [ 701.240111][T20935] veth1_macvtap: left promiscuous mode [ 701.327610][T20956] bond6: entered promiscuous mode [ 701.333432][T20956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 701.389843][T20961] bond6: (slave bridge4): making interface the new active one [ 701.402112][ T50] Bluetooth: hci1: command 0x0405 tx timeout [ 701.414619][T20961] bridge4: entered promiscuous mode [ 701.421994][T20961] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 702.474783][T21001] nicvf0: tun_chr_ioctl cmd 1074812117 [ 702.933748][T21026] __nla_validate_parse: 3 callbacks suppressed [ 702.933771][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 703.059593][T21036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3687'. [ 703.212008][T21032] ip6gre3: entered promiscuous mode [ 703.217666][T21032] ip6gre3: entered allmulticast mode [ 703.236893][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 703.356227][T21043] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3688'. [ 703.409534][T21047] netlink: 'syz.1.3689': attribute type 7 has an invalid length. [ 703.422215][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 703.476379][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3689'. [ 703.487085][T21049] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3689'. [ 703.497114][T21047] netlink: 'syz.1.3689': attribute type 7 has an invalid length. [ 703.497141][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 703.526547][T10028] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.555380][T10028] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.594942][T10028] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.618005][T10028] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.718410][T21053] netlink: 488 bytes leftover after parsing attributes in process `syz.4.3691'. [ 703.728398][T21053] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3691'. [ 703.798038][T21057] x_tables: unsorted entry at hook 2 [ 704.287789][T21080] netlink: 'syz.2.3696': attribute type 61 has an invalid length. [ 704.720129][T21095] netlink: 'syz.1.3700': attribute type 1 has an invalid length. [ 704.731591][T21098] netlink: 'syz.4.3697': attribute type 9 has an invalid length. [ 705.128073][T21095] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 706.487069][T21145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.573835][T21185] netlink: 'syz.0.3718': attribute type 1 has an invalid length. [ 706.613114][T21145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.613167][T21185] netlink: 'syz.0.3718': attribute type 2 has an invalid length. [ 706.678592][T21170] syzkaller1: entered promiscuous mode [ 706.686638][T21170] syzkaller1: entered allmulticast mode [ 706.791450][T21192] netlink: 'syz.0.3721': attribute type 30 has an invalid length. [ 707.016745][T21145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.028824][T21145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.352186][T21145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.382500][T21145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.425699][T21216] 0ªX¹¦À: left allmulticast mode [ 707.582088][T21216] bond1: left promiscuous mode [ 707.604278][T21216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 707.616662][T21216] ip6tnl1: left allmulticast mode [ 707.626834][T21216] vlan0: left promiscuous mode [ 707.631895][T21216] bridge0: left promiscuous mode [ 707.652876][T21216] ip6gre1: left promiscuous mode [ 707.663910][T21216] ip6gre1: left allmulticast mode [ 707.682683][T21216] bond6: left promiscuous mode [ 707.694421][T21216] bridge4: left promiscuous mode [ 707.789592][T21145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.811466][T21145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.039041][T21237] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 708.064216][T21237] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 708.084811][T21245] __nla_validate_parse: 9 callbacks suppressed [ 708.084835][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.085650][T21237] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 708.111880][T10028] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.121903][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.141915][T10028] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.159993][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.187814][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.213821][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.230678][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.250236][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.285013][T10014] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.297552][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.311796][T10014] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.324913][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.348901][T21245] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3733'. [ 708.420281][T10023] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.444483][T10023] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.464508][T10014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.480588][T10014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.492739][ T9983] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.570521][T10012] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.589530][T10012] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.976210][T21269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.033845][ T9983] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 709.107600][T21275] bridge_slave_1: left allmulticast mode [ 709.127960][T21275] bridge_slave_1: left promiscuous mode [ 709.148739][T21275] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.180047][T21275] bridge_slave_0: left allmulticast mode [ 709.204095][T21275] bridge_slave_0: left promiscuous mode [ 709.221081][T21275] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.232653][ T9983] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 709.277551][T21292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.466713][T21285] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 709.597575][T21293] syzkaller0: entered promiscuous mode [ 709.604189][T21293] syzkaller0: entered allmulticast mode [ 712.834434][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.748902][T21327] __nla_validate_parse: 27 callbacks suppressed [ 713.748924][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 713.773125][T21327] tc_dump_action: action bad kind [ 713.806719][T10014] bridge_slave_1: left allmulticast mode [ 713.824532][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.910920][T10014] dvmrp0: left allmulticast mode [ 713.935965][T10014] pimreg: left allmulticast mode [ 713.957061][T10014] dvmrp6: left allmulticast mode [ 714.047350][T21341] openvswitch: netlink: Duplicate or invalid key (type 0). [ 714.077372][T21341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.236297][T10014] bond9 (unregistering): (slave ip6gre3): Releasing backup interface [ 714.338205][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 714.539563][T10014] bond11 (unregistering): (slave erspan0): Releasing active interface [ 714.808999][T10014] bond1 (unregistering): (slave geneve2): Releasing active interface [ 715.181538][T10014] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 715.336703][T10014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.352329][T10014] bond0 (unregistering): Released all slaves [ 715.368422][T10014] bond1 (unregistering): Released all slaves [ 715.391621][T10014] bond2 (unregistering): Released all slaves [ 715.412286][T10014] bond3 (unregistering): Released all slaves [ 715.434052][T10014] bond4 (unregistering): Released all slaves [ 715.450340][T10014] bond5 (unregistering): Released all slaves [ 715.475615][T10014] bond6 (unregistering): Released all slaves [ 715.507542][T10014] bond7 (unregistering): Released all slaves [ 715.527296][T10014] bond8 (unregistering): (slave veth5): Releasing active interface [ 715.536623][T10014] bond8 (unregistering): Released all slaves [ 715.558315][T10014] bond9 (unregistering): Released all slaves [ 715.577910][T10014] bond10 (unregistering): (slave wireguard0): Releasing backup interface [ 715.593322][T10014] bond10 (unregistering): Released all slaves [ 715.610943][T10014] bond11 (unregistering): Released all slaves [ 715.628689][T10014] bond12 (unregistering): Released all slaves [ 715.646546][T10014] bond13 (unregistering): Released all slaves [ 715.663444][T10014] bond14 (unregistering): Released all slaves [ 715.693681][T10014] bond15 (unregistering): Released all slaves [ 715.720817][T10014] bond16 (unregistering): Released all slaves [ 715.739618][T10014] bond17 (unregistering): Released all slaves [ 715.766503][T21384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3759'. [ 716.030141][T21392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3761'. [ 716.120701][T21391] netlink: 'syz.3.3760': attribute type 2 has an invalid length. [ 716.134497][T10014] : left promiscuous mode [ 716.297752][T21391] netem: change failed [ 716.311600][T10014] tipc: Left network mode [ 716.353967][T10014] IPVS: stopping backup sync thread 6970 ... [ 716.488248][T21400] netlink: 8130 bytes leftover after parsing attributes in process `syz.1.3765'. [ 716.525191][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3768'. [ 716.541449][T21400] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 716.544079][T21407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3767'. [ 716.568484][T21407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3767'. [ 716.605789][T21407] ip6gre2: entered promiscuous mode [ 716.611092][T21407] ip6gre2: entered allmulticast mode [ 716.616788][T21400] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 716.658531][T10027] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 716.666881][T10027] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 716.676677][T21409] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 716.687783][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 716.700213][T21400] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 716.804152][T21400] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 717.380148][T21426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3773'. [ 717.397771][T21426] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3773'. [ 717.637162][ T5629] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 717.712898][ T5629] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 718.465960][T21466] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 718.735649][T21470] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 718.765738][T21470] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 718.792051][T21484] __nla_validate_parse: 7 callbacks suppressed [ 718.792073][T21484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3790'. [ 718.864237][T21474] bond7: (slave bridge5): Enslaving as an active interface with a down link [ 718.884338][T21466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 718.901253][T21483] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3791'. [ 718.938431][T21485] macvlan2: entered promiscuous mode [ 718.954085][T21485] macvlan2: entered allmulticast mode [ 718.972923][T21485] bond7: entered promiscuous mode [ 718.991811][T21485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 719.024365][T21485] bond7: left promiscuous mode [ 719.053569][T21484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3790'. [ 719.456817][T21498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3796'. [ 720.198051][T10014] hsr_slave_0: left promiscuous mode [ 720.214491][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.248171][T10014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.290557][T10014] batman_adv: batadv0: Interface deactivated: veth9 [ 720.319179][T10014] batman_adv: batadv0: Removing interface: veth9 [ 720.833493][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 720.894756][T10014] team0 (unregistering): Port device team_slave_1 removed [ 720.922335][T10014] team0 (unregistering): Port device team_slave_0 removed [ 721.108251][T21522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'. [ 721.495226][T21581] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3820'. [ 721.514122][T21581] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3820'. [ 721.549965][T21581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3820'. [ 721.916224][T10014] IPVS: stop unused estimator thread 0... [ 722.113506][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.158330][T21602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3828'. [ 722.178782][T21609] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 722.384175][T21617] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 722.405683][T21609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.443224][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3829'. [ 722.905503][T21639] syz.0.3838: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 722.926818][T21639] CPU: 1 UID: 0 PID: 21639 Comm: syz.0.3838 Not tainted syzkaller #0 PREEMPT(full) [ 722.926850][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.926865][T21639] Call Trace: [ 722.926874][T21639] [ 722.926883][T21639] dump_stack_lvl+0xe8/0x150 [ 722.926918][T21639] warn_alloc+0x249/0x340 [ 722.926953][T21639] ? stack_trace_save+0xa9/0x100 [ 722.926992][T21639] ? __pfx_warn_alloc+0x10/0x10 [ 722.927032][T21639] ? kasan_save_track+0x4f/0x80 [ 722.927060][T21639] ? kasan_save_track+0x3e/0x80 [ 722.927087][T21639] ? __kasan_kmalloc+0x93/0xb0 [ 722.927117][T21639] ? __kmalloc_cache_noprof+0x31c/0x660 [ 722.927147][T21639] ? xskq_create+0x56/0x170 [ 722.927177][T21639] ? xsk_setsockopt+0x54c/0x990 [ 722.927203][T21639] ? do_sock_setsockopt+0x17c/0x1b0 [ 722.927234][T21639] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 722.927265][T21639] ? do_syscall_64+0x15f/0xf80 [ 722.927289][T21639] __vmalloc_node_range_noprof+0x132/0x1750 [ 722.927361][T21639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 722.927401][T21639] ? __kasan_kmalloc+0x93/0xb0 [ 722.927439][T21639] vmalloc_user_noprof+0xad/0xe0 [ 722.927470][T21639] ? xskq_create+0xbf/0x170 [ 722.927503][T21639] xskq_create+0xbf/0x170 [ 722.927537][T21639] xsk_init_queue+0x8a/0xe0 [ 722.927571][T21639] xsk_setsockopt+0x54c/0x990 [ 722.927610][T21639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 722.927640][T21639] ? __pfx_aa_sk_perm+0x10/0x10 [ 722.927672][T21639] ? aa_sock_opt_perm+0xff/0x1a0 [ 722.927706][T21639] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 722.927738][T21639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 722.927769][T21639] do_sock_setsockopt+0x17c/0x1b0 [ 722.927807][T21639] __x64_sys_setsockopt+0x13d/0x1b0 [ 722.927844][T21639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.927868][T21639] do_syscall_64+0x15f/0xf80 [ 722.927891][T21639] ? clear_bhb_loop+0x40/0x90 [ 722.927919][T21639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.927942][T21639] RIP: 0033:0x7f670019cdd9 [ 722.927963][T21639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.927983][T21639] RSP: 002b:00007f6701088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 722.928007][T21639] RAX: ffffffffffffffda RBX: 00007f6700416090 RCX: 00007f670019cdd9 [ 722.928025][T21639] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 722.928039][T21639] RBP: 00007f6700232d69 R08: 0000000000000004 R09: 0000000000000000 [ 722.928053][T21639] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.928068][T21639] R13: 00007f6700416128 R14: 00007f6700416090 R15: 00007ffe732d6048 [ 722.928103][T21639] [ 722.928141][T21639] Mem-Info: [ 723.232797][T21639] active_anon:5904 inactive_anon:0 isolated_anon:0 [ 723.232797][T21639] active_file:2906 inactive_file:40842 isolated_file:0 [ 723.232797][T21639] unevictable:768 dirty:305 writeback:0 [ 723.232797][T21639] slab_reclaimable:11906 slab_unreclaimable:103076 [ 723.232797][T21639] mapped:30817 shmem:1298 pagetables:1515 [ 723.232797][T21639] sec_pagetables:0 bounce:0 [ 723.232797][T21639] kernel_misc_reclaimable:0 [ 723.232797][T21639] free:1305925 free_pcp:25149 free_cma:0 [ 723.283209][T21639] Node 0 active_anon:23616kB inactive_anon:0kB active_file:11624kB inactive_file:163160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:70020kB dirty:1220kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12704kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 723.354444][T21639] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53248kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 723.388456][T21639] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 723.441666][T21639] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 723.448742][T21639] Node 0 DMA32 free:1464372kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23384kB inactive_anon:0kB active_file:11624kB inactive_file:163160kB unevictable:1536kB writepending:1244kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:42504kB local_pcp:21288kB free_cma:0kB [ 723.483485][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 723.488399][T21639] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 723.543082][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 723.548056][T21639] Node 1 Normal free:3748616kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58424kB local_pcp:27500kB free_cma:0kB [ 723.582126][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 723.618930][T21652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.644682][T21639] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 723.672045][T21651] Cannot find add_set index 2 as target [ 723.683849][ T50] block nbd0: Receive control failed (result -32) [ 723.688035][ T4944] block nbd0: Receive control failed (result -32) [ 723.758049][T21639] Node 0 DMA32: 7457*4kB (UME) 5803*8kB (UME) 3475*16kB (UME) 1580*32kB (UME) 853*64kB (UME) 949*128kB (UME) 806*256kB (UME) 504*512kB (UM) 294*1024kB (UE) 127*2048kB (UM) 20*4096kB (UM) = 1465932kB [ 723.816968][T21660] __nla_validate_parse: 5 callbacks suppressed [ 723.816989][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'. [ 723.844335][T21639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 723.857741][T21639] Node 1 Normal: 5*4kB (U) 9*8kB (UM) 8*16kB (UM) 5*32kB (UM) 9*64kB (UM) 7*128kB (UM) 6*256kB (UM) 9*512kB (UM) 7*1024kB (UM) 7*2048kB (U) 908*4096kB (UM) = 3748668kB [ 723.860772][ T5760] dummy0: entered promiscuous mode [ 723.891783][T21666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3844'. [ 723.903674][T21639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.922107][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 723.943794][ T5760] dummy0: left promiscuous mode [ 723.964599][T21639] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 723.974394][T21639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.989270][T21639] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 724.004963][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'. [ 724.017542][T21639] 45042 total pagecache pages [ 724.030540][T21639] 0 pages in swap cache [ 724.050454][T21639] Free swap = 124996kB [ 724.070805][T21639] Total swap = 124996kB [ 724.085072][T21639] 2097051 pages RAM [ 724.109040][T21639] 0 pages HighMem/MovableOnly [ 724.114633][T21672] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3847'. [ 724.134800][T21639] 427133 pages reserved [ 724.149276][T21639] 0 pages cma reserved [ 724.156369][T21660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3844'. [ 724.188738][T21672] pimreg0: tun_chr_ioctl cmd 1074025681 [ 724.626329][T21695] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 724.705823][T21706] xt_TCPMSS: Only works on TCP SYN packets [ 724.713286][T21709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3857'. [ 724.756534][T21695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.779775][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3860'. [ 724.876725][T21716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3860'. [ 724.919950][T21711] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 724.933767][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3860'. [ 725.038960][T21726] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 725.714198][T21746] 5nè: entered promiscuous mode [ 726.181293][T21769] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 726.606287][T21780] SET target dimension over the limit! [ 728.224529][T21832] netlink: 'syz.0.3899': attribute type 1 has an invalid length. [ 728.289469][T21836] xt_hashlimit: invalid rate [ 728.322042][T21832] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 728.489109][T21832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.502311][T10023] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 728.692721][T10014] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 728.798552][T21864] syzkaller0: entered promiscuous mode [ 728.820004][T21864] syzkaller0: entered allmulticast mode [ 729.119741][T21872] syzkaller1: entered promiscuous mode [ 729.142527][T21872] syzkaller1: entered allmulticast mode [ 729.157469][T21878] lo speed is unknown, defaulting to 1000 [ 729.168034][T21878] lo speed is unknown, defaulting to 1000 [ 729.199459][T21878] lo speed is unknown, defaulting to 1000 [ 729.237576][T21880] __nla_validate_parse: 13 callbacks suppressed [ 729.237598][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3912'. [ 729.295425][T21878] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 729.346858][T21884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3914'. [ 729.376206][T21878] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 729.410457][T21878] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 729.488670][T21878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 729.552738][T21878] lo speed is unknown, defaulting to 1000 [ 729.563091][T21878] lo speed is unknown, defaulting to 1000 [ 729.570966][T21878] lo speed is unknown, defaulting to 1000 [ 729.579521][T21878] lo speed is unknown, defaulting to 1000 [ 729.589650][T21878] lo speed is unknown, defaulting to 1000 [ 729.647119][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3914'. [ 729.696572][T21388] block nbd64: NBD_DISCONNECT [ 729.792669][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 730.028206][T21906] tipc: Enabled bearer , priority 0 [ 730.050872][T21906] syzkaller0: entered promiscuous mode [ 730.069024][T21906] syzkaller0: entered allmulticast mode [ 730.099338][T21388] udevd[21388]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 730.146397][T21912] tipc: Resetting bearer [ 730.169704][T21872] wg2: entered allmulticast mode [ 730.247043][T21906] pim6reg1: entered promiscuous mode [ 730.255661][T21906] pim6reg1: entered allmulticast mode [ 730.308588][T21914] pim6reg: entered allmulticast mode [ 730.327643][T21902] tipc: Resetting bearer [ 730.417532][T21902] tipc: Disabling bearer [ 730.805849][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3933'. [ 730.825755][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 730.846598][T21945] team0: Port device team_slave_0 removed [ 730.889357][T21950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3932'. [ 731.263977][T21924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.459865][T21965] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3938'. [ 731.817371][T21987] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 732.045666][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 732.192902][T22005] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3948'. [ 732.222046][T22005] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3948'. [ 732.311880][T22012] macvtap0: entered promiscuous mode [ 732.813888][T22034] netlink: zone id is out of range [ 732.831020][T22034] netlink: zone id is out of range [ 732.855939][T22034] netlink: zone id is out of range [ 732.870832][T22034] netlink: zone id is out of range [ 732.877437][T22034] netlink: zone id is out of range [ 732.888761][T22034] netlink: zone id is out of range [ 732.904689][T22034] netlink: zone id is out of range [ 732.924876][T22034] netlink: zone id is out of range [ 733.381349][T22064] tipc: Enabling of bearer rejected, failed to enable media [ 733.467458][T22071] tap0: tun_chr_ioctl cmd 1074025677 [ 733.486965][T22071] tap0: linktype set to 773 [ 733.709391][T22085] syzkaller0: entered promiscuous mode [ 733.750141][T22085] syzkaller0: entered allmulticast mode [ 733.788425][T22064] pim6reg99999991: entered allmulticast mode [ 733.862631][T22096] netlink: 'syz.2.3977': attribute type 5 has an invalid length. [ 733.896233][T22092] syzkaller0: entered promiscuous mode [ 733.912115][T22092] syzkaller0: entered allmulticast mode [ 734.558329][T22124] syzkaller0: entered promiscuous mode [ 734.573802][T22124] syzkaller0: entered allmulticast mode [ 734.731141][T22139] __nla_validate_parse: 4 callbacks suppressed [ 734.731162][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 734.877418][T22130] lo speed is unknown, defaulting to 1000 [ 735.055504][T22147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3996'. [ 735.083808][T22150] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3995'. [ 735.253010][T22156] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 735.267988][T22156] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3997'. [ 735.757232][T22165] x_tables: duplicate underflow at hook 3 [ 735.884765][T22165] can: request_module (can-proto-4) failed. [ 736.029462][T22173] syzkaller0: entered promiscuous mode [ 736.036868][T22173] syzkaller0: entered allmulticast mode [ 736.135084][T22181] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4003'. [ 736.136304][T22180] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4003'. [ 736.158053][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4006'. [ 736.185300][T22184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4007'. [ 736.247789][T22185] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4007'. [ 736.783749][T22201] xt_TCPMSS: Only works on TCP SYN packets [ 736.803354][T22201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4011'. [ 737.121097][T22206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.156248][T22207] bond1: entered promiscuous mode [ 737.177585][T22207] bond1: entered allmulticast mode [ 737.338416][T22216] netlink: 'syz.0.4017': attribute type 10 has an invalid length. [ 737.380129][T22219] lo speed is unknown, defaulting to 1000 [ 737.879435][T22244] net_ratelimit: 47 callbacks suppressed [ 737.879458][T22244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.199740][T22259] tipc: Enabled bearer , priority 0 [ 738.223041][T22259] syzkaller0: entered promiscuous mode [ 738.236366][T22259] syzkaller0: entered allmulticast mode [ 738.363400][T22259] tipc: Resetting bearer [ 738.545472][T22256] tipc: Resetting bearer [ 738.633095][T22256] tipc: Disabling bearer [ 738.764759][T22278] IPVS: ip_vs_add_dest(): server weight less than zero [ 738.855793][T22275] lo speed is unknown, defaulting to 1000 [ 739.023881][T22292] netlink: 'syz.4.4042': attribute type 3 has an invalid length. [ 739.063475][T22292] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 739.562320][ T4944] Bluetooth: hci2: command 0x0406 tx timeout [ 739.611611][T22318] netlink: 'syz.0.4048': attribute type 1 has an invalid length. [ 739.764567][T22318] bond5: Removing last ns target with arp_interval on [ 740.032656][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 740.359167][T22345] lo speed is unknown, defaulting to 1000 [ 740.463819][T22362] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 740.545223][T22362] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 740.751176][T22383] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 740.767968][T22383] __nla_validate_parse: 13 callbacks suppressed [ 740.767988][T22383] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4066'. [ 741.243886][T22345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4054'. [ 741.632578][T22410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4074'. [ 741.656414][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4074'. [ 741.786010][T22414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4074'. [ 742.039604][T22425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4078'. [ 742.072169][T22425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4078'. [ 742.125558][T22429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4078'. [ 742.145678][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 742.407347][T22435] pimreg: entered allmulticast mode [ 742.483292][T22435] pimreg: left allmulticast mode [ 742.639543][T22442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.652032][T22442] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.668459][T22442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.754966][T22442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.780089][T22442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.819082][T22442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 742.842702][T22442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.899483][T22442] veth1_vlan: left promiscuous mode [ 742.923549][T22442] veth0_vlan: left promiscuous mode [ 742.936523][T22442] veth0_vlan: entered promiscuous mode [ 742.957691][T22442] veth1_vlan: entered promiscuous mode [ 742.993645][T22442] veth1_macvtap: left promiscuous mode [ 743.006325][T22442] veth0_macvtap: left promiscuous mode [ 743.015171][T22442] veth0_macvtap: entered promiscuous mode [ 743.024470][T22442] veth1_macvtap: entered promiscuous mode [ 743.070362][T22442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.083444][T22442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.104669][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 743.112651][T10012] bond4: (slave ip6gretap1): link status up again after 0 ms [ 743.166562][T10014] bond4: (slave ip6gretap1): link status up again after 0 ms [ 743.202456][T10014] bond4: (slave ip6gretap1): link status up again after 0 ms [ 743.249576][T10014] bond4: (slave ip6gretap1): link status up again after 0 ms [ 743.282579][T10027] bond4: (slave ip6gretap1): link status up again after 0 ms [ 743.306230][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 743.353260][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 743.427355][T22479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4094'. [ 743.453172][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 743.487654][T22484] x_tables: duplicate underflow at hook 3 [ 743.587629][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 743.732971][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 743.838499][T22497] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 743.863933][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 743.957541][T22497] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 744.003299][T22505] netlink: 'syz.0.4103': attribute type 5 has an invalid length. [ 744.036141][T22505] geneve2: entered promiscuous mode [ 744.041598][T22505] geneve2: entered allmulticast mode [ 744.532611][T22526] smc: net device team0 applied user defined pnetid SYZ2 [ 744.560128][T22527] smc: net device team0 erased user defined pnetid SYZ2 [ 744.766016][T22531] syzkaller0: entered promiscuous mode [ 744.781963][T22531] syzkaller0: entered allmulticast mode [ 746.439420][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 747.250405][T22568] __nla_validate_parse: 6 callbacks suppressed [ 747.250425][T22568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4121'. [ 747.326247][T22569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4121'. [ 749.086480][T22544] lo speed is unknown, defaulting to 1000 [ 749.095163][T22549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4115'. [ 749.363773][T22568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4121'. [ 749.390451][T22549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4115'. [ 749.425015][T22568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4121'. [ 749.673073][ T57] net_ratelimit: 7 callbacks suppressed [ 749.673094][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 749.753923][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4126'. [ 749.862486][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 749.893360][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 749.910591][T22591] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 749.982577][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.126024][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4129'. [ 750.142464][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.175825][T22604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4129'. [ 750.240486][T22606] tipc: Enabled bearer , priority 0 [ 750.262814][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.393531][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.475649][T22615] ip6gre2: entered promiscuous mode [ 750.490888][T22615] ip6gre2: entered allmulticast mode [ 750.499179][T10027] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 750.507769][T10027] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 750.522788][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 750.543443][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.673418][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.812562][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 750.943867][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 751.132734][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 751.233350][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 751.354674][ T994] tipc: Node number set to 2712923487 [ 751.659436][T22661] nbd: device at index 64 is going down [ 751.683377][T22666] nbd: device at index 64 is going down [ 751.899123][T22678] udevd[22678]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 751.976141][T22678] udevd[22678]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 752.018888][T22689] lo speed is unknown, defaulting to 1000 [ 752.364923][T22695] tipc: Enabling of bearer rejected, failed to enable media [ 752.428163][T22709] netlink: 'syz.1.4162': attribute type 1 has an invalid length. [ 752.596989][T22713] bond8: entered promiscuous mode [ 752.603992][T22713] bond8: entered allmulticast mode [ 752.610256][T22713] 8021q: adding VLAN 0 to HW filter on device bond8 [ 752.658938][T22722] __nla_validate_parse: 13 callbacks suppressed [ 752.658955][T22722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4165'. [ 752.740779][T22722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4165'. [ 752.838860][T22724] ip6gre3: entered promiscuous mode [ 752.876146][T22724] ip6gre3: entered allmulticast mode [ 752.986915][T22713] bridge6: entered promiscuous mode [ 753.000315][T22713] bridge6: entered allmulticast mode [ 753.016769][T22713] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 753.089027][T22719] bridge7: entered promiscuous mode [ 753.101599][T22719] bridge7: entered allmulticast mode [ 753.127049][T22719] bond8: (slave bridge7): Enslaving as a backup interface with a down link [ 753.239522][T22736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4167'. [ 753.353770][T22736] syzkaller0: entered promiscuous mode [ 753.359602][T22736] syzkaller0: entered allmulticast mode [ 753.663789][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 753.718508][T22769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4176'. [ 754.276247][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 755.432599][T22709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.582503][ T30] audit: type=1804 audit(1778201706.538:10): pid=22771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4178" name="/newroot/160/memory.events" dev="tmpfs" ino=830 res=1 errno=0 [ 757.436314][T22752] pim6reg1: entered promiscuous mode [ 757.441903][T22752] pim6reg1: entered allmulticast mode [ 757.455460][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 757.466246][T22767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4176'. [ 757.475781][T10027] net_ratelimit: 17 callbacks suppressed [ 757.475803][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 757.565695][T22793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4181'. [ 757.584249][T22793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4181'. [ 757.617264][T22793] ip6gre4: entered promiscuous mode [ 757.633459][T22793] ip6gre4: entered allmulticast mode [ 757.713521][T22796] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0026 with DS=0x7 [ 757.824231][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 757.942691][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.074269][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.204592][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.322574][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.443889][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.596656][ T1028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.722768][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.951242][T22832] lo speed is unknown, defaulting to 1000 [ 758.973017][T22831] lo speed is unknown, defaulting to 1000 [ 759.046230][T22837] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4196'. [ 759.702058][T22860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4203'. [ 759.727627][T22860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4203'. [ 760.093502][T22872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4206'. [ 760.671394][T22893] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 760.688146][T22893] netlink: 'syz.2.4213': attribute type 3 has an invalid length. [ 760.707386][T22893] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4213'. [ 761.175926][T22906] veth3: entered promiscuous mode [ 761.336306][T22915] lo speed is unknown, defaulting to 1000 [ 761.663874][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 761.726847][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 761.792568][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 761.910772][T22940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4230'. [ 761.973724][T22943] netlink: 'syz.1.4230': attribute type 8 has an invalid length. [ 762.043153][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 762.096812][T22940] 8021q: adding VLAN 0 to HW filter on device bond9 [ 762.226754][T22943] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 762.296796][T22950] bond9 (unregistering): (slave geneve2): Releasing backup interface [ 762.345917][T22950] bond9 (unregistering): Released all slaves [ 762.650402][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 762.662816][T10027] net_ratelimit: 20 callbacks suppressed [ 762.662839][T10027] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 762.838265][ T5838] IPVS: starting estimator thread 0... [ 762.932670][T22977] IPVS: using max 28 ests per chain, 67200 per kthread [ 763.102498][T10023] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.313406][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.780610][T22991] bond0: entered promiscuous mode [ 763.801577][T22991] bond_slave_0: entered promiscuous mode [ 763.823188][T22991] bond_slave_1: entered promiscuous mode [ 763.848310][T22991] batadv0: entered promiscuous mode [ 763.874411][T22991] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 763.917618][T22991] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 764.002560][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.154289][T10023] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.214964][T23009] Bluetooth: MGMT ver 1.23 [ 764.238480][T23013] __nla_validate_parse: 1 callbacks suppressed [ 764.238502][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 764.282826][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.404491][T23016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4252'. [ 764.492510][T10023] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.613509][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.802591][T10023] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.850595][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 764.943110][T10012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.958596][ T50] block nbd1: Receive control failed (result -1) [ 765.684066][T23063] netlink: 'syz.4.4262': attribute type 2 has an invalid length. [ 765.763991][T23063] netlink: 'syz.4.4262': attribute type 1 has an invalid length. [ 765.880095][T23069] syzkaller1: entered promiscuous mode [ 765.890544][T23071] netlink: 'syz.3.4265': attribute type 21 has an invalid length. [ 765.898790][T23069] syzkaller1: entered allmulticast mode [ 765.907102][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 765.930124][T23071] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 766.128880][T23075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4266'. [ 766.186632][T23077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4266'. [ 766.411086][T23075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4266'. [ 766.629036][T23075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4266'. [ 766.780830][T23092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4272'. [ 766.803737][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 766.838722][T23092] netlink: 'syz.2.4272': attribute type 1 has an invalid length. [ 767.070124][T23092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.180233][T23094] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 767.775004][T10014] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.820005][T10014] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.878616][T10014] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.935374][T10014] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.992514][ T57] net_ratelimit: 12 callbacks suppressed [ 767.992535][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.165687][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.294600][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.435512][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.577175][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.722557][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.863575][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.052519][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.112884][T23172] lo speed is unknown, defaulting to 1000 [ 769.472648][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 769.532493][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.695080][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 770.247026][T23201] [ 770.249440][T23201] ====================================================== [ 770.256498][T23201] WARNING: possible circular locking dependency detected [ 770.263585][T23201] syzkaller #0 Not tainted [ 770.268048][T23201] ------------------------------------------------------ [ 770.275107][T23201] syz.4.4297/23201 is trying to acquire lock: [ 770.281216][T23201] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 770.291126][T23201] [ 770.291126][T23201] but task is already holding lock: [ 770.298554][T23201] ffff8880468faae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 770.308295][T23201] [ 770.308295][T23201] which lock already depends on the new lock. [ 770.308295][T23201] [ 770.318820][T23201] [ 770.318820][T23201] the existing dependency chain (in reverse order) is: [ 770.327864][T23201] [ 770.327864][T23201] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 770.335803][T23201] lock_sock_nested+0x41/0x100 [ 770.341129][T23201] __inet6_bind+0x30c/0xf60 [ 770.346187][T23201] mptcp_bind+0x110/0x1d0 [ 770.351070][T23201] __sys_bind+0x2e3/0x410 [ 770.356007][T23201] __x64_sys_bind+0x7a/0x90 [ 770.361069][T23201] do_syscall_64+0x15f/0xf80 [ 770.366219][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.372760][T23201] [ 770.372760][T23201] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 770.380543][T23201] lock_sock_nested+0x41/0x100 [ 770.385871][T23201] inet_shutdown+0x6a/0x390 [ 770.390926][T23201] nbd_mark_nsock_dead+0x2e9/0x560 [ 770.396590][T23201] recv_work+0x1c2e/0x1d40 [ 770.401555][T23201] process_scheduled_works+0xb5d/0x1860 [ 770.407654][T23201] worker_thread+0xa53/0xfc0 [ 770.412807][T23201] kthread+0x388/0x470 [ 770.417432][T23201] ret_from_fork+0x514/0xb70 [ 770.422574][T23201] ret_from_fork_asm+0x1a/0x30 [ 770.427897][T23201] [ 770.427897][T23201] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 770.435700][T23201] __mutex_lock+0x1a3/0x1550 [ 770.440877][T23201] nbd_queue_rq+0x37b/0x1100 [ 770.446048][T23201] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 770.452158][T23201] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 770.459048][T23201] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.465608][T23201] blk_mq_run_hw_queue+0x348/0x4f0 [ 770.471305][T23201] blk_mq_dispatch_list+0xd16/0xe10 [ 770.477062][T23201] blk_mq_flush_plug_list+0x48d/0x570 [ 770.483002][T23201] __blk_flush_plug+0x3ed/0x4d0 [ 770.488439][T23201] __submit_bio+0x28d/0x580 [ 770.493527][T23201] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 770.499727][T23201] block_read_full_folio+0x599/0x830 [ 770.505584][T23201] filemap_read_folio+0x137/0x3b0 [ 770.511187][T23201] do_read_cache_folio+0x358/0x590 [ 770.516860][T23201] read_part_sector+0xb6/0x2b0 [ 770.522204][T23201] adfspart_check_ICS+0xb1/0x960 [ 770.527724][T23201] bdev_disk_changed+0x817/0x1770 [ 770.533328][T23201] blkdev_get_whole+0x380/0x510 [ 770.538745][T23201] bdev_open+0x31e/0xd30 [ 770.544947][T23201] blkdev_open+0x470/0x610 [ 770.549950][T23201] do_dentry_open+0x785/0x14e0 [ 770.555292][T23201] vfs_open+0x3b/0x340 [ 770.560023][T23201] path_openat+0x2e08/0x3860 [ 770.565173][T23201] do_file_open+0x23e/0x4a0 [ 770.570356][T23201] do_sys_openat2+0x113/0x200 [ 770.575644][T23201] __x64_sys_openat+0x138/0x170 [ 770.581087][T23201] do_syscall_64+0x15f/0xf80 [ 770.586232][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.592688][T23201] [ 770.592688][T23201] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 770.599965][T23201] __mutex_lock+0x1a3/0x1550 [ 770.605213][T23201] nbd_queue_rq+0xc6/0x1100 [ 770.610274][T23201] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 770.616404][T23201] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 770.623316][T23201] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.630062][T23201] blk_mq_run_hw_queue+0x348/0x4f0 [ 770.635763][T23201] blk_mq_dispatch_list+0xd16/0xe10 [ 770.641601][T23201] blk_mq_flush_plug_list+0x48d/0x570 [ 770.647580][T23201] __blk_flush_plug+0x3ed/0x4d0 [ 770.653002][T23201] __submit_bio+0x28d/0x580 [ 770.658078][T23201] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 770.664288][T23201] block_read_full_folio+0x599/0x830 [ 770.670145][T23201] filemap_read_folio+0x137/0x3b0 [ 770.675748][T23201] do_read_cache_folio+0x358/0x590 [ 770.681424][T23201] read_part_sector+0xb6/0x2b0 [ 770.686754][T23201] adfspart_check_ICS+0xb1/0x960 [ 770.692244][T23201] bdev_disk_changed+0x817/0x1770 [ 770.697834][T23201] blkdev_get_whole+0x380/0x510 [ 770.703263][T23201] bdev_open+0x31e/0xd30 [ 770.708596][T23201] blkdev_open+0x470/0x610 [ 770.713567][T23201] do_dentry_open+0x785/0x14e0 [ 770.718877][T23201] vfs_open+0x3b/0x340 [ 770.723497][T23201] path_openat+0x2e08/0x3860 [ 770.728740][T23201] do_file_open+0x23e/0x4a0 [ 770.733803][T23201] do_sys_openat2+0x113/0x200 [ 770.739039][T23201] __x64_sys_openat+0x138/0x170 [ 770.744444][T23201] do_syscall_64+0x15f/0xf80 [ 770.749611][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.756103][T23201] [ 770.756103][T23201] -> #3 (set->srcu){.+.+}-{0:0}: [ 770.763277][T23201] __synchronize_srcu+0xca/0x300 [ 770.768777][T23201] elevator_switch+0x1e8/0x7a0 [ 770.774358][T23201] elevator_change+0x2cc/0x450 [ 770.779685][T23201] elevator_set_default+0x36c/0x430 [ 770.785614][T23201] blk_register_queue+0x3e9/0x4e0 [ 770.791316][T23201] __add_disk+0x677/0xd50 [ 770.796209][T23201] add_disk_fwnode+0xfb/0x480 [ 770.801464][T23201] nbd_dev_add+0x72c/0xb50 [ 770.806442][T23201] nbd_init+0x168/0x1f0 [ 770.811222][T23201] do_one_initcall+0x250/0x870 [ 770.816548][T23201] do_initcall_level+0x104/0x190 [ 770.822122][T23201] do_initcalls+0x59/0xa0 [ 770.827006][T23201] kernel_init_freeable+0x2a6/0x3e0 [ 770.832860][T23201] kernel_init+0x1d/0x1d0 [ 770.837743][T23201] ret_from_fork+0x514/0xb70 [ 770.842879][T23201] ret_from_fork_asm+0x1a/0x30 [ 770.848296][T23201] [ 770.848296][T23201] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 770.856302][T23201] __mutex_lock+0x1a3/0x1550 [ 770.861467][T23201] elevator_change+0x1b3/0x450 [ 770.866799][T23201] elevator_set_none+0xb5/0x140 [ 770.872211][T23201] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 770.878602][T23201] nbd_start_device+0x17f/0xb10 [ 770.884011][T23201] nbd_genl_connect+0x165b/0x1cf0 [ 770.889588][T23201] genl_family_rcv_msg_doit+0x22a/0x330 [ 770.895703][T23201] genl_rcv_msg+0x61c/0x7a0 [ 770.900787][T23201] netlink_rcv_skb+0x232/0x4b0 [ 770.906148][T23201] genl_rcv+0x28/0x40 [ 770.910704][T23201] netlink_unicast+0x75c/0x8e0 [ 770.916179][T23201] netlink_sendmsg+0x813/0xb40 [ 770.921874][T23201] ____sys_sendmsg+0x972/0x9f0 [ 770.927194][T23201] ___sys_sendmsg+0x2a5/0x360 [ 770.932444][T23201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 770.937941][T23201] do_syscall_64+0x15f/0xf80 [ 770.943072][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.949599][T23201] [ 770.949599][T23201] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 770.958254][T23201] blk_alloc_queue+0x546/0x680 [ 770.963574][T23201] __blk_mq_alloc_disk+0x197/0x390 [ 770.969235][T23201] nbd_dev_add+0x499/0xb50 [ 770.974212][T23201] nbd_init+0x168/0x1f0 [ 770.978919][T23201] do_one_initcall+0x250/0x870 [ 770.984228][T23201] do_initcall_level+0x104/0x190 [ 770.989730][T23201] do_initcalls+0x59/0xa0 [ 770.994612][T23201] kernel_init_freeable+0x2a6/0x3e0 [ 771.000367][T23201] kernel_init+0x1d/0x1d0 [ 771.005431][T23201] ret_from_fork+0x514/0xb70 [ 771.010741][T23201] ret_from_fork_asm+0x1a/0x30 [ 771.016057][T23201] [ 771.016057][T23201] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 771.023307][T23201] __lock_acquire+0x15a5/0x2cf0 [ 771.028704][T23201] lock_acquire+0x106/0x350 [ 771.033751][T23201] fs_reclaim_acquire+0x71/0x100 [ 771.039249][T23201] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 771.045604][T23201] __alloc_skb+0x1d0/0x7d0 [ 771.050571][T23201] tcp_stream_alloc_skb+0x3f/0x580 [ 771.056244][T23201] tcp_connect+0x1570/0x5400 [ 771.061394][T23201] tcp_v4_connect+0x10f7/0x19b0 [ 771.066809][T23201] tcp_v6_connect+0xbbb/0x1b10 [ 771.072226][T23201] __inet_stream_connect+0x25a/0xdd0 [ 771.078086][T23201] inet_stream_connect+0x66/0xa0 [ 771.083594][T23201] kernel_connect+0x141/0x1c0 [ 771.088843][T23201] smc_connect+0x7a5/0xd90 [ 771.093831][T23201] __sys_connect+0x312/0x450 [ 771.098993][T23201] __x64_sys_connect+0x7a/0x90 [ 771.104324][T23201] do_syscall_64+0x15f/0xf80 [ 771.109472][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.115921][T23201] [ 771.115921][T23201] other info that might help us debug this: [ 771.115921][T23201] [ 771.126177][T23201] Chain exists of: [ 771.126177][T23201] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 771.126177][T23201] [ 771.139328][T23201] Possible unsafe locking scenario: [ 771.139328][T23201] [ 771.146897][T23201] CPU0 CPU1 [ 771.152293][T23201] ---- ---- [ 771.157678][T23201] lock(k-sk_lock-AF_INET6); [ 771.162384][T23201] lock(sk_lock-AF_INET6); [ 771.169528][T23201] lock(k-sk_lock-AF_INET6); [ 771.176752][T23201] lock(fs_reclaim); [ 771.180764][T23201] [ 771.180764][T23201] *** DEADLOCK *** [ 771.180764][T23201] [ 771.188929][T23201] 2 locks held by syz.4.4297/23201: [ 771.194149][T23201] #0: ffff88807d4df2e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 771.203427][T23201] #1: ffff8880468faae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 771.214108][T23201] [ 771.214108][T23201] stack backtrace: [ 771.220558][T23201] CPU: 1 UID: 0 PID: 23201 Comm: syz.4.4297 Not tainted syzkaller #0 PREEMPT(full) [ 771.220582][T23201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.220595][T23201] Call Trace: [ 771.220605][T23201] [ 771.220613][T23201] dump_stack_lvl+0xe8/0x150 [ 771.220640][T23201] print_circular_bug+0x2e1/0x300 [ 771.220668][T23201] check_noncircular+0x12e/0x150 [ 771.220695][T23201] __lock_acquire+0x15a5/0x2cf0 [ 771.220722][T23201] ? __lock_acquire+0x6b5/0x2cf0 [ 771.220744][T23201] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 771.220770][T23201] lock_acquire+0x106/0x350 [ 771.220789][T23201] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 771.220815][T23201] ? fib4_rule_action+0x8f/0x330 [ 771.220841][T23201] fs_reclaim_acquire+0x71/0x100 [ 771.220868][T23201] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 771.220893][T23201] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 771.220920][T23201] ? __alloc_skb+0x1d0/0x7d0 [ 771.220944][T23201] ? ipv4_default_advmss+0x20/0x340 [ 771.220967][T23201] __alloc_skb+0x1d0/0x7d0 [ 771.220995][T23201] tcp_stream_alloc_skb+0x3f/0x580 [ 771.221017][T23201] ? __asan_memset+0x22/0x50 [ 771.221040][T23201] tcp_connect+0x1570/0x5400 [ 771.221070][T23201] ? get_random_u16+0x139/0x910 [ 771.221092][T23201] ? __pfx_tcp_connect+0x10/0x10 [ 771.221117][T23201] ? __asan_memset+0x22/0x50 [ 771.221142][T23201] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 771.221167][T23201] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 771.221199][T23201] ? sk_setup_caps+0x9ef/0xc40 [ 771.221230][T23201] ? sk_setup_caps+0x29/0xc40 [ 771.221258][T23201] tcp_v4_connect+0x10f7/0x19b0 [ 771.221281][T23201] ? trace_hrtimer_start+0x82/0x200 [ 771.221318][T23201] ? __pfx_tcp_v4_connect+0x10/0x10 [ 771.221341][T23201] ? rcu_is_watching+0x15/0xb0 [ 771.221363][T23201] ? tcp_v6_connect+0x62d/0x1b10 [ 771.221386][T23201] tcp_v6_connect+0xbbb/0x1b10 [ 771.221412][T23201] ? __lock_acquire+0x6b5/0x2cf0 [ 771.221432][T23201] ? __pfx_tcp_v6_connect+0x10/0x10 [ 771.221458][T23201] __inet_stream_connect+0x25a/0xdd0 [ 771.221488][T23201] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.221514][T23201] ? lock_sock_nested+0x6a/0x100 [ 771.221537][T23201] ? __pfx___inet_stream_connect+0x10/0x10 [ 771.221558][T23201] ? inet_stream_connect+0x51/0xa0 [ 771.221577][T23201] ? __local_bh_enable_ip+0xd0/0x130 [ 771.221598][T23201] inet_stream_connect+0x66/0xa0 [ 771.221618][T23201] kernel_connect+0x141/0x1c0 [ 771.221638][T23201] ? __pfx_kernel_connect+0x10/0x10 [ 771.221655][T23201] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.221686][T23201] ? smc_connect+0xbd/0xd90 [ 771.221713][T23201] ? __local_bh_enable_ip+0xd0/0x130 [ 771.221734][T23201] smc_connect+0x7a5/0xd90 [ 771.221763][T23201] __sys_connect+0x312/0x450 [ 771.221789][T23201] ? __pfx___sys_connect+0x10/0x10 [ 771.221819][T23201] ? rcu_is_watching+0x15/0xb0 [ 771.221843][T23201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.221862][T23201] __x64_sys_connect+0x7a/0x90 [ 771.221887][T23201] do_syscall_64+0x15f/0xf80 [ 771.221903][T23201] ? trace_irq_disable+0x3b/0x140 [ 771.221932][T23201] ? clear_bhb_loop+0x40/0x90 [ 771.221953][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.221971][T23201] RIP: 0033:0x7fc04c59cdd9 [ 771.221989][T23201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.222006][T23201] RSP: 002b:00007fc04d529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 771.222026][T23201] RAX: ffffffffffffffda RBX: 00007fc04c815fa0 RCX: 00007fc04c59cdd9 [ 771.222040][T23201] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000004 [ 771.222053][T23201] RBP: 00007fc04c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 771.222065][T23201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.222077][T23201] R13: 00007fc04c816038 R14: 00007fc04c815fa0 R15: 00007ffd0328ffc8 [ 771.222099][T23201] [ 773.032607][T10014] net_ratelimit: 13 callbacks suppressed [ 773.032631][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.153358][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.262650][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.312937][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.382595][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.502537][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.612572][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.732592][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.842487][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.953499][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 774.062509][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 776.512550][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 778.143021][ T36] net_ratelimit: 36 callbacks suppressed [ 778.143047][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.262603][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.382521][T10028] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.492497][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.602489][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.712543][ T57] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.822512][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.932524][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 779.042528][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 779.152773][T10014] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 779.712765][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!