last executing test programs: 7.362570778s ago: executing program 0 (id=1051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac100000907800041312623eebe039a1f617fd02722e3486ebd90000"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 6.948497344s ago: executing program 0 (id=1056): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9c5f}}, [0x7, 0x9, 0x1, 0x8, 0x7, 0xfadd, 0xd7, 0x6, 0x4, 0x7, 0x8e, 0x7, 0x5, 0x1, 0x7]}, &(0x7f0000000000)=0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 6.723911721s ago: executing program 4 (id=1058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e000000850000000500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008600), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000008740)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008640)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xf94, 0x10000, 0x4, 0x1, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x9}, 0x2d) r10 = socket$caif_stream(0x25, 0x1, 0x5) write(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x8, 0x18}, 0xc) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r14, 0x0, 0x487, 0x0, &(0x7f0000000040)) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xf, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffd9f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1d, &(0x7f0000000340)=""/29, 0x40f00, 0x10, '\x00', r7, @fallback=0x2d, r8, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x4, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r0, r9, 0xffffffffffffffff, r11, r3, r12, r14], &(0x7f0000000740)=[{0x4, 0x4, 0xe}, {0x2, 0x3, 0x80, 0x6}, {0x0, 0x3, 0x3, 0xa}], 0x10, 0x7fffffff}, 0x94) 6.683925472s ago: executing program 0 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x53, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3], 0x48) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fafbffff", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf257500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x84}, 0x40c1) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000780)={0xa, 0xffff, 0x61b4409c, @loopback, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x43) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) 6.328767081s ago: executing program 4 (id=1063): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="01f60000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) shutdown(r3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x40010020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4], 0x7c}}, 0x81) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb0000010000000023000013000300050000"], 0x80}}, 0x0) (async, rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300031200008dfdd1002cbd7000fbdbdf253a77d07844a503000900800000001cdc0dca1d9f68846960e560e42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000f2f0d3cc00008d521e88226600000107000000000000000100140700000000d7c54171127e1366c45dbcdafac1320903c21015c5c7e07e2981db9ddf210bcb273abc137c01661366ccc26d1bf117b3"], 0x90}, 0x1, 0x7}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESOCT=r0, @ANYRES16=r10], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0xffffffffffffff6a, r9, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000084) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (rerun: 32) 6.07297647s ago: executing program 4 (id=1066): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) getsockopt$packet_int(r5, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="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", 0x11a}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b30", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134", 0xa8}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e", 0x5b}, {&(0x7f0000000700)="b87d1ee3911b6d31600f5ca74def39749241b1a26e48c06e46bd44ff0e61f27afa45fcc9ed77b63084d41e0c803a2a3f22095694fb59dcc3c932706cb6798b13cb2b5fe99b47a13ac6da6111", 0x4c}], 0x3}}], 0x3, 0x2090) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x60, 0x4) 5.735755568s ago: executing program 0 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0100001900010026bd7800fedbdf25e0000002000000000000000000000000640101000000000000330000000000000000000600000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004004000000000000000000100000000000000000000000000000000000000000000000000000000ffffffffffffff7f10000000000000000600000000f0ffff980c0000100000000008000000000000de020000000000000000000000000000000101020000000044010500ac1414aa000000000000000000000000000004d33300000000000000fe8000000000000000000000000000bb000000000000ff00070000000000000000000000fe8000000000000000000000000000aa00000000320000000000000000000000000000000000000000000000000000000000000000000000ff01000000000000fe880000000000000000000000000101000004d43c00"], 0x1fc}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 5.507893812s ago: executing program 0 (id=1072): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000240)={r1, 0xffffffc0}) (async) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000240)={r1, 0xffffffc0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008080) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x10000}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000300)={0x2, 0x200, @remote}, 0x10) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0x1) (async) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0x1) splice(r9, 0x0, r8, 0x0, 0x8a, 0xa) (async) splice(r9, 0x0, r8, 0x0, 0x8a, 0xa) 5.063975616s ago: executing program 4 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, 0x3) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) splice(r6, 0x0, r7, 0x0, 0xc, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x80, 0x10, 0x33, 0x2be, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x64, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x19, 0x3, [{0x6, 0x8, "dad9721b108e"}, {0x6, 0xb, "b6442cfd125bc6569b"}]}, @noop, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x6, [{@multicast1, 0x4}, {@loopback, 0x5}]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0xe, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300"/20, @ANYRES32, @ANYBLOB="07ef952b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x10001, 0x800, 0x1, 0x1090, 0x1, 0x180, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000b40)={r0, &(0x7f0000000a40)='GPL\x00', 0x2, &(0x7f0000000a80)={@_ha_fsid={[0x10000, 0x81]}, {0x80, 0x525, 0x4, 0x6}}, 0x1808, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6}) 4.768242677s ago: executing program 0 (id=1079): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="9feb01cf18000006000000000c0000000c00000002006d464f7b590b49a2000400e200000000f2c174770003935141371bb2f3ddfa8293199fa0"], 0x0, 0x26}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x0, 0x1, 0x0, 0x8}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, 0x0, 0x10000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) setsockopt$inet_opts(r7, 0x0, 0x5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200c0, 0x80e1}}, 0x20}}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000002100010027bd7800fedbdf2502201400ff00ff0a0006000008000200ac14140d080001007f00000106001d"], 0x44}}, 0x1000) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 3.387214427s ago: executing program 3 (id=1093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0100001900010026bd7800fedbdf25e00000020000000000000000000000006401010000000000006c0000000000000000000600000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 3.227041723s ago: executing program 3 (id=1095): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r0, 0x20, &(0x7f00000008c0)={&(0x7f0000000740)=""/244, 0xf4, 0x0, &(0x7f0000000840)=""/119, 0x77}}, 0x10) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="020000000000000000000000000000000000956245ce1d35e00e4c3cdb276b36279b567f0832646a49f4fb0b44497972c6c087a2efe62d232052cf69d5ab21482b7b7c", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="040000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0x3, &(0x7f0000000040)=@raw=[@exit, @ldst={0x2, 0x0, 0x3, 0x7, 0x6, 0x1c4e7cbda244a853, 0x8}, @call={0x85, 0x0, 0x0, 0xac}], &(0x7f0000000080)='GPL\x00', 0xffff, 0xc6, &(0x7f0000000200)=""/198, 0x40f00, 0x8, '\x00', r2, @fallback=0x38, r0, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x8, 0x3ff, 0xfff}, 0x10, r3, r4, 0x1, &(0x7f0000000a40)=[r0, 0x1, r5, r0], &(0x7f0000000a80)=[{0x2, 0x3, 0xd, 0x8}], 0x10, 0x5}, 0x94) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 3.039876848s ago: executing program 3 (id=1097): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a000a001c0004"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000006b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x4, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) shutdown(r3, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)={0x10000005}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e21, 0x80, @empty, 0x4010}]}, &(0x7f00000001c0)=0x10) 3.017609259s ago: executing program 1 (id=1098): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/176, 0xb0, 0x0, &(0x7f00000002c0)=""/46, 0x2e}, &(0x7f0000000340)=0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="f7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.788721911s ago: executing program 1 (id=1099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0xfffffffd, 0x4) unshare(0x20000400) read(r0, &(0x7f0000000b40)=""/4096, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="fd21e3bd1556410458ac9d062091ef967d1f5b536607846ecbd575f89d34214a68887ccf850bcbeeb3909bae2eece1ab0892f13ad58fe408e008a70d25337c4f4f53d07e2c41b3423ab9612267fbf5b22fd22c4782c545f0111ceac0937fe35977897df32e560290201f19ccae3dbe96ee9b990b70e028c119be2aafa3c7d94b64afaa260a0183fbb50562d5c754256f815cf65ba3c830f3311481c46c88fcc90a95cc930b72d9fd57c23822cf6cf6a26e2f8ff3384c520c9c82915f9f40e97d6b60dda3cd856b0f886be86590749bd2d2b24482cd74a4003a797940", 0xdc}], 0x1, &(0x7f0000000400)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @generic={0x83, 0x5, "d6077f"}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xde, [@multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @end]}}}], 0x40}, 0x4801) 2.609621556s ago: executing program 1 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/176}], 0x0, &(0x7f0000000200)=""/185}, 0x75800000}, {{&(0x7f0000000380)=@isdn, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/201}, {&(0x7f0000000500)=""/189}, {&(0x7f00000005c0)=""/170}, {&(0x7f0000000d00)=""/189}, {&(0x7f0000000740)=""/247}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000940)=""/247}, {&(0x7f0000000a40)=""/141}], 0x0, &(0x7f0000000680)=""/95}, 0x5}], 0x37, 0x40010020, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 1.883593867s ago: executing program 4 (id=1103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x4d5, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd27, 0x70bd28}}]}, 0x154}}, 0x0) 1.695024339s ago: executing program 2 (id=1105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0100001900010026bd7800fedbdf25e0000002000000000000000000000000640101000000000000000000000100000000000600000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 1.645732303s ago: executing program 1 (id=1106): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0xd2, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001980)=""/64, 0x40}], 0x1, &(0x7f0000001f80)=""/65, 0x41}, 0xc0000}], 0x1, 0x40002022, 0x0) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) 1.588074582s ago: executing program 3 (id=1107): r0 = socket(0x1d, 0x3, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0x1002, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffe}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2, 0x30}, &(0x7f00000000c0)=0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) bind$llc(r5, &(0x7f00000000c0)={0x1a, 0x10f, 0xfd, 0x8, 0x1, 0x3, @multicast}, 0x10) 1.514443668s ago: executing program 2 (id=1108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e000000850000000500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008600), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000008740)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008640)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x33c13, 0x2009}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xf94, 0x10000, 0x4, 0x1, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x9}, 0x2d) r10 = socket$caif_stream(0x25, 0x1, 0x5) write(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x8, 0x18}, 0xc) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r14, 0x0, 0x487, 0x0, &(0x7f0000000040)) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xf, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffd9f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1d, &(0x7f0000000340)=""/29, 0x40f00, 0x10, '\x00', r7, @fallback=0x2d, r8, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x4, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r0, r9, 0xffffffffffffffff, r11, r3, r12, r14], &(0x7f0000000740)=[{0x4, 0x4, 0xe}, {0x2, 0x3, 0x80, 0x6}, {0x0, 0x3, 0x3, 0xa}], 0x10, 0x7fffffff}, 0x94) 1.319157251s ago: executing program 1 (id=1109): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xb, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x91d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r7, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000025c0)=""/83, 0x53}], 0x1, &(0x7f0000002680)}, 0x800}], 0x1, 0x40000002, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbf9, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004801) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c002007000000acb208000000000008ec03b234b9de9002d7f4895cf4134e2ee9c2bde097356291f019409c3e0b78f382cb1a6f", @ANYRES32=r10, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.252713929s ago: executing program 3 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 1.156306292s ago: executing program 2 (id=1111): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/8, &(0x7f0000000200)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000009e24ac5b4691b6b00000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x5387a6e8, 0x3, 0x100}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f00000001c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 989.452128ms ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000340), &(0x7f0000000400)=0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff00000ec00000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8f9}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x1c}}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000001dc0)={0x2, 0x16, 0x4, 0x6, 0x238, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bbf, 0x1ff, {0x6, 0xff, 0x7, 0x0, 0x0, 0x3, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_key={0x17, 0x8, 0x570, 0x0, "212e479a455fe859ac66175b4e6be678210bde887f076b0735bcd77aff5d2398939a391ae96f113e4a71481e7fe45e5038c3ef53fb4ad3348e5405528d3698f4685fa291ab3777cf641e3dc329f88756ba0f7a13e65775bad1d842d18bc85a0211b6f39ee11761a5be141d4348f4ad50145b6e0367fa99f997eb3438e55f2cc255b5711408bec020cd86fc00d39f3c3021eee3756540dcbdacb06f361b4ee39508d1258b8b88856c169c0ac14dcc"}, @sadb_key={0xf, 0x8, 0x360, 0x0, "05454451e18994212fda3b6cdf92dd54fc266507150741a0246d8d650add4074a407cf199a9570ae338a4ac4bafb5a1309ff4f025968821ec1fc9d464381dae90de147aba2d8d826a07e2deead814619c070f425de796cf0481e6b1fdcc047765d9958506f869ac7c0c63a0f"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010101, @in6=@local, 0x18, 0x4, 0x4}, @sadb_x_sec_ctx={0x201, 0x18, 0x1, 0x9, 0x1000, "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"}]}, 0x11c0}}, 0x20000801) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x2}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x7}, 0x8) sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f000000c180)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)="ce6d1d368531f4aa", 0x8}], 0x1, &(0x7f0000001d80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008080}], 0x1, 0x8045) recvmmsg(r7, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 847.804905ms ago: executing program 4 (id=1113): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000480)=0x6, &(0x7f00000004c0)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 801.699129ms ago: executing program 2 (id=1114): syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000400000008000500", @ANYRES32, @ANYBLOB="080006"], 0x28}}, 0x0) 632.735499ms ago: executing program 2 (id=1115): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x5, &(0x7f0000000c80)=@raw=[@ldst={0x2, 0x2, 0x1, 0x0, 0x0, 0x30, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc86, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000cc0)='GPL\x00', 0xaa7e, 0xfb, &(0x7f0000000d00)=""/251, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000e40)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x5, 0x2, 0x10, 0xc}, {0x5, 0x2, 0xf, 0x8}, {0x1, 0x5, 0xb, 0x4}, {0x2, 0x5, 0x1, 0x3}, {0x2, 0x2, 0x7, 0x3}, {0x5, 0x5, 0xb, 0x8}, {0x5, 0x2, 0x8, 0x4}, {0x3, 0x2, 0x9, 0x2}, {0x5, 0x1, 0x9, 0xe}], 0x10, 0x9}, 0x94) ioctl$int_in(r1, 0x5421, &(0x7f0000001000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x8a6e1000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000100)=""/3, 0x3}], 0xc}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8bb8}], 0x3, 0x2000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000c40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000340)={0x2f4, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa24}]}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7ff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3c84}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffcaa}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9c2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6692b22b28de2c3a7254e8ef7a263c5460a740674fc46742260c4a"}}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "9c10d8599ca991bf3bce9b9ebd2842b44bbe00e67b85a5c4713010a3551295061c3f15a64df4237b98f2743673559c6902ffe7e77a33d7555c7badcc629f4edb9c60ae645dbd7624f8eef62494d5b88634091c56ae40fec566f2a79032bc33bde52325c8be8a9dea605ed1f4eea440537aeb2bd7d34cfcc3a3f428a1b0bd338ab0170527b04cc105eb6db7d2b94c22465778564c3580426c131c31edf38a2061f00b186e0f17e35029bd4725af13"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b1f6c82935b3d2f36a2643484662b2645ed3c9eaeae5dee922e090127f2383dca3"}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20040041}, 0x8805) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x8000) 307.267778ms ago: executing program 2 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe800000"], 0x70}}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="29271eb78cad7560197b161fdb95a0515dfc33c1169a84c0219e067072da9a3e0e8e1d423cd83cf964e13e1c", &(0x7f0000000000)=@tcp6, 0x3}, 0x20) 0s ago: executing program 1 (id=1117): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r2}, 0x8) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 78.242127][ T5809] cgroup: Unknown subsys name 'net' [ 78.380748][ T5809] cgroup: Unknown subsys name 'cpuset' [ 78.391562][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.063785][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.329567][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.354481][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.366056][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.368092][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.375975][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.387220][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.390888][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.406065][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.406217][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.415322][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.423482][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.438780][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.439044][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.446071][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.456204][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.465681][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.470309][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.474732][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.484260][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.490959][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.507054][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.513543][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.518870][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.522666][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.542540][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.144190][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 83.294343][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 83.400916][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 83.515755][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.577052][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 83.597314][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.606699][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.614733][ T5822] bridge_slave_0: entered allmulticast mode [ 83.622428][ T5822] bridge_slave_0: entered promiscuous mode [ 83.675165][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.682497][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.690316][ T5822] bridge_slave_1: entered allmulticast mode [ 83.698768][ T5822] bridge_slave_1: entered promiscuous mode [ 83.758367][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.766281][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.773630][ T5824] bridge_slave_0: entered allmulticast mode [ 83.781156][ T5824] bridge_slave_0: entered promiscuous mode [ 83.806142][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.813460][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.821015][ T5823] bridge_slave_0: entered allmulticast mode [ 83.829150][ T5823] bridge_slave_0: entered promiscuous mode [ 83.853160][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.860850][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.868624][ T5824] bridge_slave_1: entered allmulticast mode [ 83.876459][ T5824] bridge_slave_1: entered promiscuous mode [ 83.895239][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.902511][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.911068][ T5823] bridge_slave_1: entered allmulticast mode [ 83.918417][ T5823] bridge_slave_1: entered promiscuous mode [ 83.929456][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.974564][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.033970][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.071110][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.084429][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.107423][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.129448][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.138602][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.146128][ T5830] bridge_slave_0: entered allmulticast mode [ 84.153433][ T5830] bridge_slave_0: entered promiscuous mode [ 84.187499][ T5822] team0: Port device team_slave_0 added [ 84.203267][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.210805][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.218414][ T5830] bridge_slave_1: entered allmulticast mode [ 84.226126][ T5830] bridge_slave_1: entered promiscuous mode [ 84.233983][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.241352][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.248984][ T5834] bridge_slave_0: entered allmulticast mode [ 84.256300][ T5834] bridge_slave_0: entered promiscuous mode [ 84.276582][ T5822] team0: Port device team_slave_1 added [ 84.284300][ T5824] team0: Port device team_slave_0 added [ 84.302341][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.310193][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.318387][ T5834] bridge_slave_1: entered allmulticast mode [ 84.325906][ T5834] bridge_slave_1: entered promiscuous mode [ 84.335608][ T5823] team0: Port device team_slave_0 added [ 84.354596][ T5824] team0: Port device team_slave_1 added [ 84.385884][ T5823] team0: Port device team_slave_1 added [ 84.424741][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.447322][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.458880][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.469557][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.476858][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.503141][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.549793][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.565946][ T5832] Bluetooth: hci0: command tx timeout [ 84.566111][ T5835] Bluetooth: hci2: command tx timeout [ 84.577615][ T5840] Bluetooth: hci1: command tx timeout [ 84.577866][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.590922][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.617348][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.630472][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.638182][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.645640][ T5835] Bluetooth: hci4: command tx timeout [ 84.666005][ T5840] Bluetooth: hci3: command tx timeout [ 84.666660][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.689988][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.697109][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.723916][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.769727][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.777026][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.803866][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.815839][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.822895][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.849212][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.862218][ T5830] team0: Port device team_slave_0 added [ 84.870430][ T5834] team0: Port device team_slave_0 added [ 84.906225][ T5830] team0: Port device team_slave_1 added [ 84.914700][ T5834] team0: Port device team_slave_1 added [ 84.940545][ T5822] hsr_slave_0: entered promiscuous mode [ 84.947698][ T5822] hsr_slave_1: entered promiscuous mode [ 85.012485][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.019836][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.046240][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.093864][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.101533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.128729][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.141862][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.150482][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.180723][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.211996][ T5824] hsr_slave_0: entered promiscuous mode [ 85.218667][ T5824] hsr_slave_1: entered promiscuous mode [ 85.224816][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 85.230822][ T5824] Cannot create hsr debugfs directory [ 85.243080][ T5823] hsr_slave_0: entered promiscuous mode [ 85.250131][ T5823] hsr_slave_1: entered promiscuous mode [ 85.256646][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 85.262497][ T5823] Cannot create hsr debugfs directory [ 85.269246][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.276605][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.303193][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.529581][ T5830] hsr_slave_0: entered promiscuous mode [ 85.536572][ T5830] hsr_slave_1: entered promiscuous mode [ 85.542970][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 85.549032][ T5830] Cannot create hsr debugfs directory [ 85.622012][ T5834] hsr_slave_0: entered promiscuous mode [ 85.628636][ T5834] hsr_slave_1: entered promiscuous mode [ 85.635462][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 85.641346][ T5834] Cannot create hsr debugfs directory [ 86.079416][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.096150][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.119263][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.130843][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.193116][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.205832][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.219800][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.231711][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.349948][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.393786][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.428118][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.456313][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.520858][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.540996][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.551791][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.569249][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.589816][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.645983][ T5835] Bluetooth: hci0: command tx timeout [ 86.646173][ T5840] Bluetooth: hci2: command tx timeout [ 86.652362][ T5835] Bluetooth: hci1: command tx timeout [ 86.725610][ T5835] Bluetooth: hci4: command tx timeout [ 86.725665][ T5840] Bluetooth: hci3: command tx timeout [ 86.743083][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.750889][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.762686][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.773096][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.783851][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.800290][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.831875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.839555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.853313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.860899][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.920623][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.971308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.978777][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.009455][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.017038][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.041700][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.112056][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.157572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.164932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.174537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.181842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.284715][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.318533][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.332309][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.460637][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.474527][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.524427][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.541764][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.549249][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.561810][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.569362][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.600138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.607541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.663061][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.670462][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.834724][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.023241][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.078729][ T5822] veth0_vlan: entered promiscuous mode [ 88.147391][ T5822] veth1_vlan: entered promiscuous mode [ 88.198671][ T5824] veth0_vlan: entered promiscuous mode [ 88.243614][ T5824] veth1_vlan: entered promiscuous mode [ 88.362970][ T5822] veth0_macvtap: entered promiscuous mode [ 88.403249][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.422277][ T5824] veth0_macvtap: entered promiscuous mode [ 88.446565][ T5822] veth1_macvtap: entered promiscuous mode [ 88.467309][ T5823] veth0_vlan: entered promiscuous mode [ 88.478490][ T5824] veth1_macvtap: entered promiscuous mode [ 88.520526][ T5823] veth1_vlan: entered promiscuous mode [ 88.553972][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.604415][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.625406][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.645772][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.678268][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.706971][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.731162][ T5840] Bluetooth: hci1: command tx timeout [ 88.731968][ T5835] Bluetooth: hci2: command tx timeout [ 88.744475][ T5835] Bluetooth: hci0: command tx timeout [ 88.763011][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.807732][ T5835] Bluetooth: hci4: command tx timeout [ 88.807753][ T5840] Bluetooth: hci3: command tx timeout [ 88.820550][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831166][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.841869][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.858637][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.868489][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.893339][ T5823] veth0_macvtap: entered promiscuous mode [ 88.905973][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.943360][ T5823] veth1_macvtap: entered promiscuous mode [ 89.043785][ T5830] veth0_vlan: entered promiscuous mode [ 89.104658][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.106435][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.121455][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.130586][ T5830] veth1_vlan: entered promiscuous mode [ 89.189143][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.219987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.234002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.237137][ T5834] veth0_vlan: entered promiscuous mode [ 89.249653][ T1029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.273661][ T192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.288265][ T192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.302086][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.319052][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.328842][ T192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.341102][ T5834] veth1_vlan: entered promiscuous mode [ 89.378200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.415127][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.492057][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.521153][ T5830] veth0_macvtap: entered promiscuous mode [ 89.549941][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.564401][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.567098][ T5834] veth0_macvtap: entered promiscuous mode [ 89.616305][ T5830] veth1_macvtap: entered promiscuous mode [ 89.638567][ T5834] veth1_macvtap: entered promiscuous mode [ 89.727861][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.746228][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.783099][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.794854][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.815901][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.827158][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.872846][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.935150][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944554][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.987316][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.007340][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041388][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.122463][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 90.146540][ T5953] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 90.202037][ T5953] !9: entered promiscuous mode [ 90.212172][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223055][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.227804][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 90.275412][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.299699][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.323909][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617768][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.657783][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.763689][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.774690][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.805890][ T5835] Bluetooth: hci0: command tx timeout [ 90.806708][ T5832] Bluetooth: hci2: command tx timeout [ 90.817701][ T5840] Bluetooth: hci1: command tx timeout [ 90.838895][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.869327][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.885664][ T5840] Bluetooth: hci4: command tx timeout [ 90.892533][ T5840] Bluetooth: hci3: command tx timeout [ 90.998578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.010263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.592177][ T5994] bridge0: port 3(vlan2) entered blocking state [ 91.600596][ T5994] bridge0: port 3(vlan2) entered disabled state [ 91.612241][ T5994] vlan2: entered allmulticast mode [ 91.626346][ T5994] bridge0: entered allmulticast mode [ 91.700256][ T5994] vlan2: left allmulticast mode [ 91.735432][ T5994] bridge0: left allmulticast mode [ 91.836037][ T5998] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.902605][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.956774][ T6005] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 92.030675][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 92.170876][ T6025] Zero length message leads to an empty skb [ 92.332143][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 92.370639][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 92.770119][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 92.786149][ T9] cfg80211: failed to load regulatory.db [ 93.014525][ T6049] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 93.099245][ T6049] xt_policy: too many policy elements [ 93.182456][ T6061] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 93.199269][ T6063] trusted_key: syz.0.29 sent an empty control message without MSG_MORE. [ 93.223666][ T6061] syzkaller1: entered promiscuous mode [ 93.240511][ T6061] syzkaller1: entered allmulticast mode [ 93.664636][ T6073] syzkaller0: entered promiscuous mode [ 94.062334][ T6096] netlink: 'syz.4.37': attribute type 2 has an invalid length. [ 94.108772][ T6096] netlink: 'syz.4.37': attribute type 2 has an invalid length. [ 94.285603][ T6096] macsec1: entered promiscuous mode [ 94.402178][ T6102] syzkaller0: entered promiscuous mode [ 94.427831][ T6102] syzkaller0: entered allmulticast mode [ 95.160324][ T6134] FAULT_INJECTION: forcing a failure. [ 95.160324][ T6134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.195386][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 95.195415][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.195426][ T6134] Call Trace: [ 95.195434][ T6134] [ 95.195441][ T6134] dump_stack_lvl+0xe8/0x150 [ 95.195472][ T6134] should_fail_ex+0x412/0x560 [ 95.195504][ T6134] _copy_from_iter+0x1d3/0x1670 [ 95.195527][ T6134] ? rcu_is_watching+0x15/0xb0 [ 95.195569][ T6134] ? __pfx__copy_from_iter+0x10/0x10 [ 95.195597][ T6134] ? netlink_sendmsg+0x650/0xb40 [ 95.195619][ T6134] ? skb_put+0x11b/0x210 [ 95.195646][ T6134] netlink_sendmsg+0x6c0/0xb40 [ 95.195678][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.195704][ T6134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 95.195735][ T6134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.195761][ T6134] ____sys_sendmsg+0x972/0x9f0 [ 95.195796][ T6134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.195828][ T6134] ? import_iovec+0x73/0xa0 [ 95.195853][ T6134] ___sys_sendmsg+0x2a5/0x360 [ 95.195883][ T6134] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.195941][ T6134] ? __fget_files+0x2a/0x420 [ 95.195958][ T6134] ? __fget_files+0x3a0/0x420 [ 95.195982][ T6134] __x64_sys_sendmsg+0x1bd/0x2a0 [ 95.196009][ T6134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.196041][ T6134] ? __pfx_ksys_write+0x10/0x10 [ 95.196073][ T6134] do_syscall_64+0x14d/0xf80 [ 95.196091][ T6134] ? trace_irq_disable+0x3b/0x150 [ 95.196107][ T6134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.196125][ T6134] ? clear_bhb_loop+0x40/0x90 [ 95.196149][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.196167][ T6134] RIP: 0033:0x7f532c59c819 [ 95.196185][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.196199][ T6134] RSP: 002b:00007f532d51d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.196218][ T6134] RAX: ffffffffffffffda RBX: 00007f532c815fa0 RCX: 00007f532c59c819 [ 95.196231][ T6134] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 95.196242][ T6134] RBP: 00007f532d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.196251][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.196261][ T6134] R13: 00007f532c816038 R14: 00007f532c815fa0 R15: 00007ffed674c5d8 [ 95.196286][ T6134] [ 95.904472][ T6150] bridge1: entered promiscuous mode [ 95.923707][ T6150] bridge1: entered allmulticast mode [ 95.936095][ T6150] team0: Port device bridge1 added [ 95.959518][ T6148] bridge2: entered promiscuous mode [ 95.974750][ T6148] bridge2: entered allmulticast mode [ 96.002540][ T6148] team0: Port device bridge2 added [ 96.031143][ T6164] __nla_validate_parse: 1 callbacks suppressed [ 96.031163][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 96.529024][ T6185] netlink: 240 bytes leftover after parsing attributes in process `syz.1.59'. [ 96.542439][ T6184] FAULT_INJECTION: forcing a failure. [ 96.542439][ T6184] name failslab, interval 1, probability 0, space 0, times 1 [ 96.587637][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT(full) [ 96.587663][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.587674][ T6184] Call Trace: [ 96.587681][ T6184] [ 96.587689][ T6184] dump_stack_lvl+0xe8/0x150 [ 96.587719][ T6184] should_fail_ex+0x412/0x560 [ 96.587754][ T6184] should_failslab+0xa8/0x100 [ 96.587779][ T6184] ? skb_clone+0x212/0x3a0 [ 96.587805][ T6184] kmem_cache_alloc_noprof+0x87/0x650 [ 96.587901][ T6184] ? __netlink_lookup+0xc6/0x8b0 [ 96.587934][ T6184] skb_clone+0x212/0x3a0 [ 96.587966][ T6184] __netlink_deliver_tap+0x404/0x850 [ 96.588002][ T6184] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.588025][ T6184] netlink_deliver_tap+0x19c/0x1b0 [ 96.588049][ T6184] netlink_unicast+0x7e3/0x9b0 [ 96.588079][ T6184] ? __pfx_netlink_unicast+0x10/0x10 [ 96.588102][ T6184] ? netlink_sendmsg+0x650/0xb40 [ 96.588123][ T6184] ? skb_put+0x11b/0x210 [ 96.588151][ T6184] netlink_sendmsg+0x813/0xb40 [ 96.588184][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.588210][ T6184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 96.588241][ T6184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.588269][ T6184] ____sys_sendmsg+0x972/0x9f0 [ 96.588307][ T6184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.588344][ T6184] ? import_iovec+0x73/0xa0 [ 96.588373][ T6184] ___sys_sendmsg+0x2a5/0x360 [ 96.588406][ T6184] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.588470][ T6184] ? __fget_files+0x2a/0x420 [ 96.588489][ T6184] ? __fget_files+0x3a0/0x420 [ 96.588523][ T6184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.588554][ T6184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.588605][ T6184] ? __pfx_ksys_write+0x10/0x10 [ 96.588640][ T6184] do_syscall_64+0x14d/0xf80 [ 96.588659][ T6184] ? trace_irq_disable+0x3b/0x150 [ 96.588676][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.588695][ T6184] ? clear_bhb_loop+0x40/0x90 [ 96.588721][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.588742][ T6184] RIP: 0033:0x7f408399c819 [ 96.588763][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.588778][ T6184] RSP: 002b:00007f40847dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.588799][ T6184] RAX: ffffffffffffffda RBX: 00007f4083c15fa0 RCX: 00007f408399c819 [ 96.588812][ T6184] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 96.588824][ T6184] RBP: 00007f40847dd090 R08: 0000000000000000 R09: 0000000000000000 [ 96.588833][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.588842][ T6184] R13: 00007f4083c16038 R14: 00007f4083c15fa0 R15: 00007ffd64ce90c8 [ 96.588869][ T6184] [ 96.592490][ T6188] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 96.877297][ T6194] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 96.958288][ T6190] bond1: Removing last arp target with arp_interval on [ 97.393598][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.402418][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.619889][ T6223] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 97.711733][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.751653][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.937281][ T6224] netlink: 5 bytes leftover after parsing attributes in process `syz.3.67'. [ 97.967424][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.007514][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.039081][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.070762][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.079653][ T6233] FAULT_INJECTION: forcing a failure. [ 98.079653][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 98.094457][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 98.094486][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.094498][ T6233] Call Trace: [ 98.094507][ T6233] [ 98.094515][ T6233] dump_stack_lvl+0xe8/0x150 [ 98.094550][ T6233] should_fail_ex+0x412/0x560 [ 98.094695][ T6233] should_failslab+0xa8/0x100 [ 98.094727][ T6233] ? skb_clone+0x212/0x3a0 [ 98.094755][ T6233] kmem_cache_alloc_noprof+0x87/0x650 [ 98.094776][ T6233] ? __netlink_lookup+0xc6/0x8b0 [ 98.094810][ T6233] skb_clone+0x212/0x3a0 [ 98.094842][ T6233] __netlink_deliver_tap+0x404/0x850 [ 98.094876][ T6233] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.094902][ T6233] netlink_deliver_tap+0x19c/0x1b0 [ 98.094927][ T6233] netlink_unicast+0x7e3/0x9b0 [ 98.095025][ T6233] ? __pfx_netlink_unicast+0x10/0x10 [ 98.095057][ T6233] ? netlink_sendmsg+0x650/0xb40 [ 98.095087][ T6233] ? skb_put+0x11b/0x210 [ 98.095116][ T6233] netlink_sendmsg+0x813/0xb40 [ 98.095150][ T6233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.095177][ T6233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.095207][ T6233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.095235][ T6233] ____sys_sendmsg+0x972/0x9f0 [ 98.095272][ T6233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.095313][ T6233] ? import_iovec+0x73/0xa0 [ 98.095345][ T6233] ___sys_sendmsg+0x2a5/0x360 [ 98.095376][ T6233] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.095437][ T6233] ? __fget_files+0x2a/0x420 [ 98.095453][ T6233] ? __fget_files+0x3a0/0x420 [ 98.095482][ T6233] __x64_sys_sendmsg+0x1bd/0x2a0 [ 98.095564][ T6233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.095601][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 98.095635][ T6233] do_syscall_64+0x14d/0xf80 [ 98.095654][ T6233] ? trace_irq_disable+0x3b/0x150 [ 98.095670][ T6233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.095689][ T6233] ? clear_bhb_loop+0x40/0x90 [ 98.095711][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.095730][ T6233] RIP: 0033:0x7f532c59c819 [ 98.095749][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.095761][ T6233] RSP: 002b:00007f532d51d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.095780][ T6233] RAX: ffffffffffffffda RBX: 00007f532c815fa0 RCX: 00007f532c59c819 [ 98.095792][ T6233] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 98.095803][ T6233] RBP: 00007f532d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 98.095814][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.095825][ T6233] R13: 00007f532c816038 R14: 00007f532c815fa0 R15: 00007ffed674c5d8 [ 98.095856][ T6233] [ 98.106917][ T6231] netlink: 'syz.4.72': attribute type 9 has an invalid length. [ 98.417439][ T6231] netlink: 'syz.4.72': attribute type 11 has an invalid length. [ 98.426036][ T6231] netlink: 'syz.4.72': attribute type 12 has an invalid length. [ 98.435989][ T6231] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.72'. [ 98.950585][ T6260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.225933][ T6267] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 99.393467][ T6268] syzkaller0: entered promiscuous mode [ 99.404568][ T6268] syzkaller0: entered allmulticast mode [ 99.409409][ T6279] netlink: 820 bytes leftover after parsing attributes in process `syz.3.86'. [ 99.421758][ T6279] netlink: 820 bytes leftover after parsing attributes in process `syz.3.86'. [ 99.450778][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 99.468249][ T6278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'. [ 99.674178][ T6289] netlink: 96 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.703922][ T6284] tipc: Started in network mode [ 99.714043][ T6284] tipc: Node identity 0e9fe848ff72, cluster identity 4711 [ 99.724597][ T6284] tipc: Enabled bearer , priority 0 [ 99.733451][ T6284] veth1_to_hsr: entered promiscuous mode [ 99.739572][ T6284] veth1_to_hsr: entered allmulticast mode [ 100.836409][ T5908] tipc: Node number set to 4058900552 [ 100.851870][ T6295] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 100.858021][ T6295] pim6reg0: persist disabled [ 100.863691][ T6296] tipc: Resetting bearer [ 100.881107][ T6282] tipc: Disabling bearer [ 101.206849][ T6314] netlink: 188 bytes leftover after parsing attributes in process `syz.2.95'. [ 101.248252][ T6314] xt_CONNSECMARK: invalid mode: 254 [ 101.281964][ T6317] netlink: 188 bytes leftover after parsing attributes in process `syz.2.95'. [ 102.035480][ T6364] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 102.107860][ T6364] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.642411][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 102.799538][ T6399] netlink: 'syz.0.109': attribute type 2 has an invalid length. [ 102.810354][ T6399] netlink: 'syz.0.109': attribute type 3 has an invalid length. [ 102.820775][ T6399] Cannot find set identified by id 65534 to match [ 102.857321][ T6403] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 102.865828][ T6403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.111'. [ 103.204258][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.214680][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.256306][ T6413] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.280227][ T6416] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.303859][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.310960][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.318376][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.325464][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.332451][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.340056][ T6414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.372933][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.402560][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.115'. [ 104.086613][ T6448] tipc: Started in network mode [ 104.091829][ T6448] tipc: Node identity 263cdb5a18c, cluster identity 4711 [ 104.101411][ T6448] tipc: Enabled bearer , priority 0 [ 104.124046][ T6446] syzkaller0: entered promiscuous mode [ 104.130012][ T6446] syzkaller0: entered allmulticast mode [ 104.137577][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 104.181460][ T6446] tipc: Resetting bearer [ 104.276394][ T6446] tipc: Disabling bearer [ 104.457755][ T6464] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.487361][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.127'. [ 105.007189][ T6483] net_ratelimit: 314 callbacks suppressed [ 105.007211][ T6483] netlink: Conntrack attr has 3 unknown bytes [ 105.357608][ T6500] tipc: Failed to remove unknown binding: 66,0,0/0:4221562065/4221562067 [ 105.375352][ T6500] tipc: Failed to remove unknown binding: 66,0,0/0:4221562065/4221562066 [ 105.465766][ T6500] tipc: Failed to remove unknown binding: 66,0,0/0:4221562065/4221562067 [ 105.493895][ T6500] tipc: Failed to remove unknown binding: 66,0,0/0:4221562065/4221562066 [ 105.569942][ T6500] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.056777][ T6529] tipc: Started in network mode [ 106.086675][ T6529] tipc: Node identity 861d71d4375, cluster identity 4711 [ 106.163190][ T6529] tipc: Enabled bearer , priority 0 [ 106.198593][ T6525] syzkaller0: entered promiscuous mode [ 106.222226][ T6525] syzkaller0: entered allmulticast mode [ 106.337738][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.745525][ T6525] tipc: Resetting bearer [ 106.801584][ T6525] tipc: Disabling bearer [ 107.016724][ T6573] __nla_validate_parse: 2 callbacks suppressed [ 107.016746][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 107.065013][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 107.074842][ T6573] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 107.194024][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 107.303026][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.819972][ T6606] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 107.845482][ T6606] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 107.906554][ T6606] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 107.914603][ T6606] netlink: 'syz.4.163': attribute type 3 has an invalid length. [ 107.928230][ T6604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.970587][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 108.103544][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.152479][ T6604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.242443][ T6604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.289919][ T6613] netlink: 236 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.331942][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.487817][ T6604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.580818][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 108.864115][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.898981][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.910156][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.3.173'. [ 108.997272][ T6634] netlink: 'syz.3.173': attribute type 24 has an invalid length. [ 109.013587][ T6366] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.053665][ T106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.424175][ T6660] ip6gre1: entered promiscuous mode [ 109.441791][ T6660] ip6gre1: entered allmulticast mode [ 109.543655][ T6667] bridge2: entered promiscuous mode [ 109.586827][ T6667] bridge2: port 1(macsec1) entered blocking state [ 109.607211][ T6667] bridge2: port 1(macsec1) entered disabled state [ 109.614193][ T6667] macsec1: entered allmulticast mode [ 109.660502][ T6667] bridge2: entered allmulticast mode [ 109.670639][ T6667] macsec1: left allmulticast mode [ 109.677288][ T6667] bridge2: left allmulticast mode [ 109.685942][ T6667] bridge2: left promiscuous mode [ 110.167948][ T6690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.814181][ T6719] syz_tun: entered allmulticast mode [ 111.842078][ T6716] syz_tun: left allmulticast mode [ 112.060132][ T6721] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 112.395527][ T6745] __nla_validate_parse: 2 callbacks suppressed [ 112.395552][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 112.553190][ T6748] nbd: socks must be embedded in a SOCK_ITEM attr [ 112.646139][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 112.665622][ T6754] hsr0: entered promiscuous mode [ 112.672082][ T6754] hsr0: entered allmulticast mode [ 112.678144][ T6754] hsr_slave_0: entered allmulticast mode [ 112.684176][ T6754] hsr_slave_1: entered allmulticast mode [ 113.300678][ T6746] syz.1.204 (6746) used greatest stack depth: 17472 bytes left [ 113.401384][ T6778] bridge_slave_0: left allmulticast mode [ 113.441532][ T6778] bridge_slave_0: left promiscuous mode [ 113.459830][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.487885][ T6778] bridge_slave_1: left allmulticast mode [ 113.513384][ T6778] bridge_slave_1: left promiscuous mode [ 113.550834][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.594404][ T6778] bond0: (slave bond_slave_0): Releasing backup interface [ 113.654855][ T6778] bond0: (slave bond_slave_1): Releasing backup interface [ 113.698485][ T6778] team0: Port device team_slave_0 removed [ 113.744404][ T6778] team0: Port device team_slave_1 removed [ 113.780079][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.825553][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.840541][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.849417][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.860120][ T6778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.893571][ T6780] bridge1: entered allmulticast mode [ 114.088950][ T6797] syzkaller0: entered promiscuous mode [ 114.098967][ T6797] syzkaller0: entered allmulticast mode [ 114.382145][ T6815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.594093][ T6824] sctp: [Deprecated]: syz.4.230 (pid 6824) Use of int in maxseg socket option. [ 114.594093][ T6824] Use struct sctp_assoc_value instead [ 114.876837][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 114.926616][ T6842] ip6gretap1: entered promiscuous mode [ 114.932486][ T6842] ip6gretap1: entered allmulticast mode [ 115.304606][ T6849] pim6reg: entered allmulticast mode [ 115.548278][ T6856] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 115.565272][ T6856] netlink: 'syz.3.241': attribute type 2 has an invalid length. [ 115.746412][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 115.770930][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 115.780964][ T6864] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.803147][ T6864] tipc: Enabled bearer , priority 21 [ 116.610066][ T6913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.258'. [ 116.915398][ T5908] tipc: Node number set to 2974642644 [ 119.425652][ T6899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.656806][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 120.706494][ T6962] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 120.896938][ T6964] netlink: 428 bytes leftover after parsing attributes in process `syz.2.272'. [ 120.948630][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 121.197466][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 121.963641][ T7001] macvtap1: entered promiscuous mode [ 121.993927][ T7001] syz_tun: entered promiscuous mode [ 122.068702][ T7001] syz_tun: left promiscuous mode [ 122.201010][ T7009] wg1: Master is either lo or non-ether device [ 122.604170][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.739267][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 123.012750][ T7047] team_slave_0: entered promiscuous mode [ 123.018930][ T7047] team_slave_1: entered promiscuous mode [ 123.030593][ T7047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.039033][ T5919] IPVS: starting estimator thread 0... [ 123.146039][ T7051] IPVS: using max 36 ests per chain, 86400 per kthread [ 123.742062][ T7074] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 124.427934][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.438828][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.456289][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.733082][ T5840] block nbd0: Receive control failed (result -32) [ 124.991425][ T7118] nbd: must specify an index to disconnect [ 125.186699][ T7124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.303'. [ 125.196580][ T7121] netlink: 'syz.2.301': attribute type 17 has an invalid length. [ 125.239027][ T7128] block nbd1: Unsupported socket: should be TCP or UNIX. [ 125.388861][ T7121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.420602][ T7136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 125.658896][ T7146] Bluetooth: MGMT ver 1.23 [ 125.760095][ T7148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.784089][ T7156] __nla_validate_parse: 2 callbacks suppressed [ 125.784112][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'. [ 125.826272][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.839912][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.877027][ T6376] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.911577][ T7157] netlink: 'syz.3.312': attribute type 3 has an invalid length. [ 125.931918][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 125.956837][ T7148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.015012][ T6376] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.046249][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 126.062277][ T7162] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 126.077814][ T7148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.186952][ T7148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.294385][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 126.404017][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.426207][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.451068][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.461051][ T5840] block nbd1: Wrong magic (0xff9cd705) [ 126.461051][ T5832] block nbd1: Wrong magic (0x1f68aa94) [ 126.474826][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.130795][ T7209] netlink: 196 bytes leftover after parsing attributes in process `syz.3.325'. [ 127.801521][ T7238] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 127.957134][ T7241] macvtap1: entered promiscuous mode [ 127.963330][ T7241] macvtap1: entered allmulticast mode [ 127.973937][ T7241] veth1_vlan: entered allmulticast mode [ 128.049691][ T7245] macvtap2: entered promiscuous mode [ 128.065158][ T7245] macvtap2: entered allmulticast mode [ 128.072901][ T7244] xt_connbytes: Forcing CT accounting to be enabled [ 128.174064][ T7238] bond1: (slave bridge2): making interface the new active one [ 128.189207][ T7238] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 128.872516][ T7286] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 128.929509][ T7290] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 129.037120][ T7286] team0: Port device dummy0 added [ 129.108692][ T7290] team0: Port device dummy0 removed [ 129.232008][ T7290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.489645][ T7304] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 129.558972][ T7304] bond1: entered promiscuous mode [ 129.566343][ T7304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.630495][ T7304] bond1: (slave bridge2): making interface the new active one [ 129.638906][ T7304] bridge2: entered promiscuous mode [ 129.649215][ T7304] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 130.840866][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.363'. [ 131.113458][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 131.638679][ T7359] dvmrp0: entered allmulticast mode [ 131.655351][ T7332] bond0: Error: Cannot enslave bond to itself. [ 131.756387][ T7368] netlink: 256 bytes leftover after parsing attributes in process `syz.2.374'. [ 132.127174][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'. [ 132.284369][ T7376] bond1: option arp_all_targets: invalid value (129) [ 132.338209][ T7376] bond1 (unregistering): Released all slaves [ 132.459578][ T7378] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 132.498252][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 132.673664][ T7388] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 132.795273][ T7388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.003170][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.385'. [ 133.533171][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 133.693632][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.705041][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.020813][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 134.066802][ T7448] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 134.774604][ T58] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.787890][ T6370] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.823784][ T6370] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.834320][ T7481] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 134.872807][ T7481] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.411'. [ 134.883545][ T6370] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.933483][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 134.999327][ T7493] ip6erspan0: entered allmulticast mode [ 135.278882][ T7502] netlink: 'syz.1.419': attribute type 9 has an invalid length. [ 135.514568][ T7506] syzkaller1: entered promiscuous mode [ 135.529216][ T7506] syzkaller1: entered allmulticast mode [ 135.986113][ T7527] FAULT_INJECTION: forcing a failure. [ 135.986113][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.065499][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(full) [ 136.065529][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.065539][ T7527] Call Trace: [ 136.065547][ T7527] [ 136.065555][ T7527] dump_stack_lvl+0xe8/0x150 [ 136.065589][ T7527] should_fail_ex+0x412/0x560 [ 136.065624][ T7527] _copy_from_user+0x2d/0xb0 [ 136.065648][ T7527] ___sys_sendmsg+0x1c6/0x360 [ 136.065679][ T7527] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.065706][ T7527] ? kstrtouint+0x6e/0xe0 [ 136.065755][ T7527] ? __fget_files+0x2a/0x420 [ 136.065772][ T7527] ? __fget_files+0x3a0/0x420 [ 136.065797][ T7527] __sys_sendmmsg+0x27c/0x4e0 [ 136.065825][ T7527] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.065848][ T7527] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 136.065893][ T7527] ? ksys_write+0x242/0x270 [ 136.065914][ T7527] ? __pfx_ksys_write+0x10/0x10 [ 136.065943][ T7527] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.065972][ T7527] do_syscall_64+0x14d/0xf80 [ 136.065989][ T7527] ? trace_irq_disable+0x3b/0x150 [ 136.066006][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.066025][ T7527] ? clear_bhb_loop+0x40/0x90 [ 136.066049][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.066068][ T7527] RIP: 0033:0x7f854a19c819 [ 136.066087][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.066108][ T7527] RSP: 002b:00007f854b065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.066129][ T7527] RAX: ffffffffffffffda RBX: 00007f854a415fa0 RCX: 00007f854a19c819 [ 136.066142][ T7527] RDX: 0000000000000005 RSI: 000020000000a480 RDI: 0000000000000003 [ 136.066154][ T7527] RBP: 00007f854b065090 R08: 0000000000000000 R09: 0000000000000000 [ 136.066164][ T7527] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 136.066175][ T7527] R13: 00007f854a416038 R14: 00007f854a415fa0 R15: 00007ffc19f62558 [ 136.066220][ T7527] [ 136.588101][ T7543] bond2: option lacp_active: invalid value (8) [ 136.596606][ T7546] __nla_validate_parse: 2 callbacks suppressed [ 136.596626][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 136.617074][ T7543] bond2 (unregistering): Released all slaves [ 136.889337][ T7539] tipc: Enabled bearer , priority 0 [ 137.094565][ T7549] syzkaller0: entered promiscuous mode [ 137.100893][ T7549] syzkaller0: entered allmulticast mode [ 137.108443][ T7549] tipc: Resetting bearer [ 137.126059][ T7546] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.128494][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 137.154043][ T7547] netem: incorrect ge model size [ 137.161465][ T7547] netem: change failed [ 137.330273][ T6372] tipc: Resetting bearer [ 137.396410][ T7533] tipc: Resetting bearer [ 137.507411][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 137.528315][ T7579] can: request_module (can-proto-5) failed. [ 137.767095][ T7589] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'. [ 137.784314][ T7589] unsupported nlmsg_type 40 [ 139.224550][ T7533] tipc: Disabling bearer [ 139.259905][ T7582] bridge3: entered promiscuous mode [ 139.268793][ T7582] bridge3: entered allmulticast mode [ 139.636940][ T7608] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 139.659032][ T7610] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 139.904098][ T7608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.954866][ T7617] bond4: (slave geneve2): making interface the new active one [ 139.973562][ T7617] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 140.249140][ T7641] ip6erspan0: entered allmulticast mode [ 140.263775][ T7643] netlink: 120 bytes leftover after parsing attributes in process `syz.0.450'. [ 140.283590][ T7643] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 140.323349][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.450'. [ 140.343269][ T7643] netlink: 120 bytes leftover after parsing attributes in process `syz.0.450'. [ 140.364684][ T7643] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 140.411970][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.450'. [ 140.540800][ T7656] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 140.578414][ T7658] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 140.658708][ T7665] netlink: 'syz.4.455': attribute type 11 has an invalid length. [ 140.694913][ T7662] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 140.724566][ T7665] netlink: 'syz.4.455': attribute type 11 has an invalid length. [ 141.066944][ T7683] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 141.259846][ T7683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.392546][ T7695] vlan2: entered allmulticast mode [ 141.422856][ T7695] bond1: entered allmulticast mode [ 141.570904][ T7697] bond1: (slave geneve2): making interface the new active one [ 141.585955][ T7697] geneve2: entered allmulticast mode [ 141.623412][ T7697] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.656515][ T7705] dummy0: mtu less than device minimum [ 141.918952][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.471'. [ 141.965571][ T7718] netlink: 260 bytes leftover after parsing attributes in process `syz.1.471'. [ 141.976660][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 143.030132][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 143.084219][ T7781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.490'. [ 143.101162][ T7783] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 143.467649][ T7800] FAULT_INJECTION: forcing a failure. [ 143.467649][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 143.536092][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 143.536122][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.536133][ T7800] Call Trace: [ 143.536141][ T7800] [ 143.536149][ T7800] dump_stack_lvl+0xe8/0x150 [ 143.536184][ T7800] should_fail_ex+0x412/0x560 [ 143.536220][ T7800] should_failslab+0xa8/0x100 [ 143.536248][ T7800] __kmalloc_cache_noprof+0x88/0x660 [ 143.536270][ T7800] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 143.536300][ T7800] ? sctp_association_new+0x89/0x25e0 [ 143.536322][ T7800] ? __asan_memcpy+0x40/0x70 [ 143.536345][ T7800] sctp_association_new+0x89/0x25e0 [ 143.536379][ T7800] ? sctp_do_bind+0x661/0x9d0 [ 143.536408][ T7800] ? __ipv6_addr_type+0x10c/0x2f0 [ 143.536438][ T7800] sctp_connect_new_asoc+0x2e4/0x6b0 [ 143.536465][ T7800] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 143.536495][ T7800] ? __local_bh_enable_ip+0xd0/0x130 [ 143.536519][ T7800] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 143.536543][ T7800] ? security_sctp_bind_connect+0x7e/0x2c0 [ 143.536573][ T7800] sctp_sendmsg+0x1528/0x2c10 [ 143.536612][ T7800] ? __pfx_sctp_sendmsg+0x10/0x10 [ 143.536638][ T7800] ? aa_sk_perm+0x6d5/0x900 [ 143.536676][ T7800] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.536707][ T7800] ? sock_rps_record_flow+0x19/0x350 [ 143.536737][ T7800] ? inet_sendmsg+0x2f4/0x370 [ 143.536766][ T7800] ____sys_sendmsg+0x80a/0x9f0 [ 143.536804][ T7800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.536841][ T7800] ? import_iovec+0x73/0xa0 [ 143.536869][ T7800] ___sys_sendmsg+0x2a5/0x360 [ 143.536902][ T7800] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.536935][ T7800] ? kstrtouint+0x6e/0xe0 [ 143.536994][ T7800] ? __fget_files+0x2a/0x420 [ 143.537011][ T7800] ? __fget_files+0x3a0/0x420 [ 143.537041][ T7800] __sys_sendmmsg+0x27c/0x4e0 [ 143.537074][ T7800] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.537098][ T7800] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 143.537146][ T7800] ? ksys_write+0x242/0x270 [ 143.537171][ T7800] ? __pfx_ksys_write+0x10/0x10 [ 143.537201][ T7800] __x64_sys_sendmmsg+0xa0/0xc0 [ 143.537231][ T7800] do_syscall_64+0x14d/0xf80 [ 143.537248][ T7800] ? trace_irq_disable+0x3b/0x150 [ 143.537265][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.537285][ T7800] ? clear_bhb_loop+0x40/0x90 [ 143.537309][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.537328][ T7800] RIP: 0033:0x7f854a19c819 [ 143.537347][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.537370][ T7800] RSP: 002b:00007f854b065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.537391][ T7800] RAX: ffffffffffffffda RBX: 00007f854a415fa0 RCX: 00007f854a19c819 [ 143.537404][ T7800] RDX: 0000000000000005 RSI: 000020000000a480 RDI: 0000000000000003 [ 143.537416][ T7800] RBP: 00007f854b065090 R08: 0000000000000000 R09: 0000000000000000 [ 143.537427][ T7800] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 143.537439][ T7800] R13: 00007f854a416038 R14: 00007f854a415fa0 R15: 00007ffc19f62558 [ 143.537472][ T7800] [ 143.958585][ T7793] veth0: entered promiscuous mode [ 144.037401][ T7793] veth0: left promiscuous mode [ 144.303464][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 144.417049][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 144.525873][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.821825][ T7850] openvswitch: netlink: IPv4 tun info is not correct [ 144.860495][ T7853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.509'. [ 144.881846][ T7855] x_tables: duplicate underflow at hook 1 [ 145.094128][ T7859] bond_slave_0: entered promiscuous mode [ 145.100245][ T7859] bond_slave_1: entered promiscuous mode [ 145.147487][ T7859] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 145.157053][ T7859] bond_slave_0: left promiscuous mode [ 145.162671][ T7859] bond_slave_1: left promiscuous mode [ 145.346604][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.363955][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.555264][ T7880] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 145.726753][ T7880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.747192][ T7896] x_tables: duplicate underflow at hook 1 [ 145.802444][ T7899] openvswitch: netlink: Message has 2 unknown bytes. [ 145.996300][ T7903] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 146.052668][ T7909] x_tables: duplicate underflow at hook 1 [ 146.167411][ T7920] block nbd2: Unsupported socket: should be TCP or UNIX. [ 146.234014][ T7914] bond2: (slave geneve2): making interface the new active one [ 146.316551][ T7914] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 146.378703][ T7903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.428355][ T58] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.583329][ T192] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.625139][ T192] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.657836][ T192] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.846911][ T7937] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 147.028074][ T7945] __nla_validate_parse: 9 callbacks suppressed [ 147.028102][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 147.068116][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 147.195201][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 147.215687][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 147.273067][ T7941] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 147.307195][ T7941] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 147.422053][ T7945] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 147.433430][ T7947] bridge_slave_1: left allmulticast mode [ 147.439828][ T7947] bridge_slave_1: left promiscuous mode [ 147.450560][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.477781][ T7947] bridge_slave_0: left allmulticast mode [ 147.490302][ T7947] bridge_slave_0: left promiscuous mode [ 147.497760][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.673908][ T7937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.711259][ T7951] macvlan3: entered promiscuous mode [ 147.725775][ T7951] macvlan3: entered allmulticast mode [ 147.738134][ T7951] bond3: entered promiscuous mode [ 147.751281][ T7951] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 147.770054][ T7951] bond3: left promiscuous mode [ 148.115281][ T7983] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 148.146175][ T7984] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 148.188681][ T7982] wg1: entered allmulticast mode [ 148.284657][ T7983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.350658][ T7988] bond2: (slave geneve2): making interface the new active one [ 148.356508][ T8003] netlink: 128 bytes leftover after parsing attributes in process `syz.4.545'. [ 148.368292][ T7988] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 148.388909][ T7996] gretap0: entered promiscuous mode [ 148.614626][ T8009] lo speed is unknown, defaulting to 1000 [ 148.650487][ T8009] lo speed is unknown, defaulting to 1000 [ 148.705010][ T8016] pimreg: tun_chr_ioctl cmd 1074025677 [ 148.712320][ T8016] pimreg: linktype set to 774 [ 148.736527][ T8009] lo speed is unknown, defaulting to 1000 [ 148.753271][ T8009] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.798583][ T8009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.839583][ T8026] tipc: Enabling of bearer rejected, failed to enable media [ 148.887509][ T8009] lo speed is unknown, defaulting to 1000 [ 148.909936][ T8009] lo speed is unknown, defaulting to 1000 [ 148.921900][ T8009] lo speed is unknown, defaulting to 1000 [ 148.943697][ T8009] lo speed is unknown, defaulting to 1000 [ 148.996413][ T8009] lo speed is unknown, defaulting to 1000 [ 149.268730][ T8036] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 149.392243][ T8045] syzkaller1: entered promiscuous mode [ 149.434221][ T8045] syzkaller1: entered allmulticast mode [ 149.523599][ T8037] xt_hashlimit: max too large, truncated to 1048576 [ 149.549111][ T8051] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.560'. [ 149.566617][ T8039] lo speed is unknown, defaulting to 1000 [ 150.313555][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 150.913985][ T8108] lo speed is unknown, defaulting to 1000 [ 150.978119][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 151.441528][ T8132] wg1: entered promiscuous mode [ 151.561300][ T8146] 8021q: VLANs not supported on lo [ 151.704462][ T8148] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.736085][ T8148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.802563][ T8148] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.814430][ T8148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.855927][ T8159] netlink: 'syz.2.584': attribute type 7 has an invalid length. [ 151.874689][ T8159] netlink: 'syz.2.584': attribute type 8 has an invalid length. [ 151.928877][ T8148] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.951523][ T8148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.080105][ T8148] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.100219][ T8148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.204827][ T30] audit: type=1800 audit(1775225145.749:2): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.588" name="e" dev="tmpfs" ino=686 res=0 errno=0 [ 152.241419][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.362287][ T8183] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 152.449828][ T192] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.521230][ T192] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.609576][ T34] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.623239][ T34] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.636081][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 152.702534][ T8191] ipvlan1: entered promiscuous mode [ 152.728970][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 152.752705][ T8191] ipvlan1: left promiscuous mode [ 152.773967][ T8203] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.594'. [ 152.841877][ T192] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.852319][ T192] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.930438][ T34] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.954385][ T34] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.192601][ T8215] lo speed is unknown, defaulting to 1000 [ 153.283190][ T8224] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.601'. [ 153.889823][ T8279] geneve3: entered promiscuous mode [ 153.958798][ T8253] lo speed is unknown, defaulting to 1000 [ 154.024775][ T8284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.609'. [ 154.153326][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 154.460990][ T8298] batadv_slave_1: entered promiscuous mode [ 154.944358][ T8322] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 155.231317][ T8297] batadv_slave_1: left promiscuous mode [ 155.620860][ T8360] netlink: 148 bytes leftover after parsing attributes in process `syz.1.625'. [ 156.077431][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 156.108937][ T8269] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.121160][ T8269] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.135030][ T8269] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.153638][ T8269] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.981166][ T8324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.306438][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 158.320757][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 158.324127][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.376988][ T8384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.397058][ T8384] bond3: (slave batadv1): Opening slave failed [ 158.421187][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 158.689149][ T8393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.769930][ T8408] netlink: 72 bytes leftover after parsing attributes in process `syz.3.637'. [ 159.166617][ T8420] ieee802154 phy0 wpan0: encryption failed: -90 [ 159.246255][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 161.379126][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.650'. [ 161.397528][ T8451] lo speed is unknown, defaulting to 1000 [ 161.731601][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.654'. [ 161.763032][ T8473] openvswitch: netlink: Flow key attr not present in new flow. [ 161.843144][ T8477] ip6gretap0: entered promiscuous mode [ 161.853590][ T8473] No such timeout policy "syz0" [ 161.914571][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 161.935232][ T8473] vlan2: entered allmulticast mode [ 161.940693][ T8473] gretap0: entered allmulticast mode [ 162.204608][ T8487] bond2: invalid ARP target 0.0.0.0 specified for addition [ 162.212586][ T8487] bond2: option arp_ip_target: invalid value (0) [ 162.221264][ T8487] bond2 (unregistering): Released all slaves [ 162.417368][ T8491] lo speed is unknown, defaulting to 1000 [ 162.575155][ T8499] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 162.578022][ T8496] lo speed is unknown, defaulting to 1000 [ 163.113199][ T8511] vlan2: entered allmulticast mode [ 163.118750][ T8511] macvtap0: entered allmulticast mode [ 163.132125][ T8512] tipc: Enabled bearer , priority 0 [ 163.154087][ T8509] tipc: Disabling bearer [ 163.450707][ T8524] __nla_validate_parse: 4 callbacks suppressed [ 163.450730][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.670'. [ 163.590742][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 163.599183][ T8524] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 163.625419][ T8529] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 163.811763][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 163.877717][ T8536] hsr_slave_1 (unregistering): left promiscuous mode [ 163.982445][ T8539] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 164.002864][ T8539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.675'. [ 164.182474][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.192115][ T8546] pim6reg0: linktype set to 773 [ 164.205972][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.212213][ T8546] pim6reg0: linktype set to 773 [ 164.241334][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.242927][ T8542] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 164.250806][ T8546] pim6reg0: linktype set to 773 [ 164.274560][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.275023][ T8542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.675'. [ 164.313309][ T8546] pim6reg0: linktype set to 773 [ 164.342767][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.377648][ T8546] pim6reg0: linktype set to 773 [ 164.419010][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.424888][ T8546] pim6reg0: linktype set to 773 [ 164.455254][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.461237][ T8546] pim6reg0: linktype set to 773 [ 164.485858][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.491753][ T8546] pim6reg0: linktype set to 773 [ 164.500119][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.510055][ T8546] pim6reg0: linktype set to 773 [ 164.527398][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.542553][ T8546] pim6reg0: linktype set to 773 [ 164.582455][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.611289][ T8546] pim6reg0: linktype set to 773 [ 164.627463][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.633858][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.679'. [ 164.664637][ T8546] pim6reg0: linktype set to 773 [ 164.686611][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.705759][ T8546] pim6reg0: linktype set to 773 [ 164.742863][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.750134][ T8546] pim6reg0: linktype set to 773 [ 164.756275][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.778474][ T8546] pim6reg0: linktype set to 773 [ 164.824542][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.830763][ T8546] pim6reg0: linktype set to 773 [ 164.836463][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.842933][ T8546] pim6reg0: linktype set to 773 [ 164.871313][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.889659][ T8546] pim6reg0: linktype set to 773 [ 164.907136][ T8546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 164.924629][ T8546] pim6reg0: linktype set to 773 [ 164.978909][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.684'. [ 165.040181][ T8574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.224171][ T8578] sctp: [Deprecated]: syz.4.687 (pid 8578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.224171][ T8578] Use struct sctp_sack_info instead [ 165.552057][ T8595] netlink: 'syz.0.691': attribute type 62 has an invalid length. [ 166.190999][ T8614] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 166.331721][ T8595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.489624][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 166.563876][ T8624] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 166.585373][ T8624] netlink: 224 bytes leftover after parsing attributes in process `syz.3.699'. [ 166.901404][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 166.923245][ T8644] bond2: option resend_igmp: invalid value (2878) [ 166.930743][ T8644] bond2: option resend_igmp: allowed values 0 - 255 [ 166.948935][ T8644] bond2 (unregistering): Released all slaves [ 167.337722][ T8667] Bluetooth: MGMT ver 1.23 [ 167.435554][ T8668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.703488][ T8719] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 168.792430][ T8719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.833403][ T8695] lec:lec_atm_close: lec0: Shut down! [ 168.989069][ T8735] __nla_validate_parse: 4 callbacks suppressed [ 168.989094][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 169.244586][ T8734] delete_channel: no stack [ 169.512650][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 169.557685][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 169.700026][ T8765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.733'. [ 169.717070][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.733'. [ 169.931443][ T8776] tipc: Enabling of bearer rejected, failed to enable media [ 170.250051][ T8787] block nbd2: not configured, cannot reconfigure [ 170.573691][ T5919] lec:lec_start_xmit: lec0:No lecd attached [ 170.596501][ T8802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.746065][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 170.765384][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 170.872881][ T8811] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 170.903035][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 170.959766][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 171.332450][ T8833] netlink: 380 bytes leftover after parsing attributes in process `syz.4.754'. [ 171.675147][ T8812] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 171.874587][ T8848] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 171.940403][ T8851] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 171.974814][ T8847] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 172.258342][ T8857] tipc: Started in network mode [ 172.272947][ T8857] tipc: Node identity 080211000001, cluster identity 4711 [ 172.291310][ T8857] tipc: Enabled bearer , priority 0 [ 172.307570][ T8857] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 172.335532][ T8857] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 172.679812][ T8872] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 172.886132][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 172.894694][ T8886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.939626][ T8882] netlink: 'syz.4.767': attribute type 3 has an invalid length. [ 173.321198][ T8902] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 173.438658][ T8905] bond5: entered promiscuous mode [ 173.444325][ T8905] bond5: entered allmulticast mode [ 173.452975][ T8905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.518410][ T8902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.589015][ T8913] bond2: (slave veth3): Enslaving as an active interface with a down link [ 173.623339][ T24] tipc: Node number set to 134418688 [ 174.090045][ T8943] __nla_validate_parse: 6 callbacks suppressed [ 174.090066][ T8943] netlink: 72 bytes leftover after parsing attributes in process `syz.3.782'. [ 174.381282][ T8955] lo speed is unknown, defaulting to 1000 [ 174.408157][ T8964] netlink: 'syz.2.788': attribute type 11 has an invalid length. [ 174.416714][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 174.474395][ T8956] lo speed is unknown, defaulting to 1000 [ 174.639620][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 175.263509][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 175.264413][ T24] IPVS: starting estimator thread 0... [ 175.402700][ T8999] IPVS: using max 35 ests per chain, 84000 per kthread [ 175.461299][ T8996] syzkaller0: entered promiscuous mode [ 175.505419][ T8996] syzkaller0: entered allmulticast mode [ 175.924956][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 175.933458][ C1] lec:lec_tx_timeout: lec0 [ 175.938687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 175.962512][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 177.655423][ T9032] netlink: 'syz.4.802': attribute type 4 has an invalid length. [ 177.675828][ T9046] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 178.089803][ T9076] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 178.290415][ T9076] bond6: entered promiscuous mode [ 178.297709][ T9076] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.322732][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 178.360406][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 178.534781][ T9085] bond6: (slave bridge3): making interface the new active one [ 178.611383][ T9085] bridge3: entered promiscuous mode [ 178.642875][ T9085] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 178.663803][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 178.695031][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.136881][ T9122] nbd: nbd0 already in use [ 179.144052][ T9122] block nbd0: NBD_DISCONNECT [ 179.238598][ T9122] block nbd0: Send disconnect failed -32 [ 179.272690][ T9127] xt_hashlimit: size too large, truncated to 1048576 [ 179.303771][ T9122] block nbd0: shutting down sockets [ 179.550661][ T9136] lo speed is unknown, defaulting to 1000 [ 179.632396][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 179.674772][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 180.022557][ T9165] netlink: 'syz.2.829': attribute type 35 has an invalid length. [ 180.193882][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 180.335006][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 180.354821][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 180.620977][ T9191] erspan0: entered promiscuous mode [ 180.689123][ T9189] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.834'. [ 180.715690][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.835'. [ 180.768535][ T9195] tipc: Invalid UDP bearer configuration [ 180.768612][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 180.913395][ T9209] caif0: entered promiscuous mode [ 181.405458][ T9237] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 181.439156][ T9237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.517153][ T9237] dummy0: entered promiscuous mode [ 181.608988][ T9236] dummy0: left promiscuous mode [ 181.644998][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 181.684953][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 181.693369][ C1] lec:lec_tx_timeout: lec0 [ 181.698276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.740466][ T9240] netlink: 'syz.4.843': attribute type 2 has an invalid length. [ 181.756134][ T9240] !9: entered promiscuous mode [ 181.786848][ T9240] netlink: 'syz.4.843': attribute type 2 has an invalid length. [ 181.825087][ T9240] !9: left promiscuous mode [ 183.055255][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 183.538425][ T9304] netlink: 68 bytes leftover after parsing attributes in process `syz.4.858'. [ 183.554362][ T9305] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 183.648275][ T9312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.860'. [ 183.843754][ T9319] ip6tnl1: entered promiscuous mode [ 183.873379][ T9319] ip6tnl1: entered allmulticast mode [ 183.899550][ T9323] netlink: 'syz.1.862': attribute type 49 has an invalid length. [ 184.124394][ T9328] lo speed is unknown, defaulting to 1000 [ 184.284324][ T9351] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.307144][ T9351] Cannot find add_set index 2 as target [ 184.840869][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.547004][ T9391] __nla_validate_parse: 5 callbacks suppressed [ 185.547025][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 185.585684][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 185.859819][ T9404] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.880'. [ 186.170824][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 186.416997][ T9419] netlink: 'syz.3.884': attribute type 62 has an invalid length. [ 186.725051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 186.733788][ C1] lec:lec_tx_timeout: lec0 [ 186.739024][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.745383][ T9432] IPVS: set_ctl: invalid protocol: 43 172.20.20.54:20002 [ 186.766691][ T9432] x_tables: duplicate underflow at hook 3 [ 187.298899][ T9462] : renamed from veth0_to_bond [ 188.122297][ T9493] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 188.445058][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.461101][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.538571][ T9504] netlink: 112 bytes leftover after parsing attributes in process `syz.0.904'. [ 188.855528][ T9522] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 188.890780][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 188.940344][ T9522] netlink: 1 bytes leftover after parsing attributes in process `syz.1.908'. [ 188.991058][ T9524] netlink: 'syz.1.908': attribute type 2 has an invalid length. [ 189.007042][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 190.241107][ T9590] xt_TCPMSS: Only works on TCP SYN packets [ 190.241327][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.284276][ T9588] bridge_slave_0 (unregistering): left allmulticast mode [ 190.295299][ T9590] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 190.323747][ T9588] bridge_slave_0 (unregistering): left promiscuous mode [ 190.354247][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.714145][ T9590] : entered promiscuous mode [ 190.733913][ T9592] __nla_validate_parse: 1 callbacks suppressed [ 190.733935][ T9592] netlink: 65173 bytes leftover after parsing attributes in process `syz.3.925'. [ 190.847725][ T9601] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 190.902701][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'. [ 190.916138][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'. [ 190.949165][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.994306][ T9619] netlink: 'syz.3.930': attribute type 11 has an invalid length. [ 191.011397][ T9619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.930'. [ 191.226139][ T9630] netlink: 380 bytes leftover after parsing attributes in process `syz.1.932'. [ 191.312920][ T9630] netlink: 'syz.1.932': attribute type 2 has an invalid length. [ 191.735275][ T9651] block nbd0: not configured, cannot reconfigure [ 191.755374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 191.763710][ C1] lec:lec_tx_timeout: lec0 [ 191.769445][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 191.908344][ T9655] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 191.928590][ T9663] netlink: 'syz.1.942': attribute type 4 has an invalid length. [ 191.937477][ T9662] netlink: 'syz.2.941': attribute type 5 has an invalid length. [ 191.959740][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 191.964103][ T9663] netlink: 240 bytes leftover after parsing attributes in process `syz.1.942'. [ 192.352720][ T9680] bond3: entered promiscuous mode [ 192.574396][ T9695] netlink: 'syz.2.947': attribute type 5 has an invalid length. [ 192.616391][ T9695] netlink: 4880 bytes leftover after parsing attributes in process `syz.2.947'. [ 192.652022][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'. [ 192.761291][ T9708] netlink: 27 bytes leftover after parsing attributes in process `syz.1.950'. [ 193.059624][ T9718] tipc: Enabled bearer , priority 0 [ 193.107543][ T9721] tipc: Enabling of bearer rejected, already enabled [ 193.119939][ T9716] syzkaller0: entered promiscuous mode [ 193.176034][ T9716] syzkaller0: entered allmulticast mode [ 193.320323][ T9716] tipc: Resetting bearer [ 193.369781][ T9716] tipc: Disabling bearer [ 193.396230][ T9738] netlink: 'syz.1.958': attribute type 4 has an invalid length. [ 193.404125][ T9738] netlink: 'syz.1.958': attribute type 8 has an invalid length. [ 193.730614][ T9750] netlink: 'syz.4.961': attribute type 39 has an invalid length. [ 194.035362][ T9768] bond6: option lp_interval: invalid value (0) [ 194.051959][ T9768] bond6: option lp_interval: allowed values 1 - 2147483647 [ 194.080240][ T9768] bond6 (unregistering): Released all slaves [ 194.313944][ T9773] bond7: entered allmulticast mode [ 194.320607][ T9773] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.368602][ T9780] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 194.497609][ T9780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.876354][ T9786] bridge1: left promiscuous mode [ 195.888216][ T9786] bridge1: left allmulticast mode [ 195.903171][ T9786] bridge2: left promiscuous mode [ 195.910925][ T9786] bridge2: left allmulticast mode [ 195.921123][ T9786] veth1_vlan: left allmulticast mode [ 195.929730][ T9786] macvtap1: left promiscuous mode [ 195.935639][ T9786] macvtap1: left allmulticast mode [ 196.041643][ T9786] bond5: left promiscuous mode [ 196.047755][ T9786] bond5: left allmulticast mode [ 196.118234][ T9780] bond6: (slave geneve4): making interface the new active one [ 196.137061][ T9780] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 196.279826][ T9818] syzkaller0: entered promiscuous mode [ 196.286444][ T9844] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 196.294683][ T9818] syzkaller0: entered allmulticast mode [ 196.362594][ T9844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.371644][ T9836] __nla_validate_parse: 3 callbacks suppressed [ 196.371675][ T9836] netlink: 116 bytes leftover after parsing attributes in process `syz.1.974'. [ 196.388975][ T58] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.413797][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.425651][ T58] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.434798][ T58] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.444133][ T58] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.453099][ T58] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.462471][ T58] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.583185][ T9844] bond4: (slave ip6gretap2): making interface the new active one [ 196.592744][ T9844] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 196.606627][ T58] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.655394][ T58] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.678734][ T58] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.711183][ T58] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.751674][ T58] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.760769][ T58] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.771464][ T9803] lo speed is unknown, defaulting to 1000 [ 196.785374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 196.793508][ C1] lec:lec_tx_timeout: lec0 [ 196.798761][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.062136][ T9887] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 199.109457][ T9898] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 199.169433][ T9898] bond4: entered promiscuous mode [ 199.175584][ T9898] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.190485][ T9902] xfrm0: entered allmulticast mode [ 199.439106][ T9908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.478778][ T9908] bond4: (slave bond5): making interface the new active one [ 199.496880][ T9908] bond5: entered promiscuous mode [ 199.504082][ T9908] bond4: (slave bond5): Enslaving as an active interface with an up link [ 199.843357][ T9923] syzkaller1: entered promiscuous mode [ 199.849158][ T9923] syzkaller1: entered allmulticast mode [ 199.920652][ T9931] batadv_slave_1: entered promiscuous mode [ 200.370398][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 200.399114][ T9943] lo speed is unknown, defaulting to 1000 [ 200.526111][ T9951] bond4: entered promiscuous mode [ 200.532433][ T9951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.669103][ T9930] batadv_slave_1: left promiscuous mode [ 201.096347][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 201.218758][ T9982] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1003'. [ 201.589452][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 201.805887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 201.814509][ C1] lec:lec_tx_timeout: lec0 [ 201.819797][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.946245][T10017] netlink: 'syz.0.1009': attribute type 39 has an invalid length. [ 203.033869][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 203.161464][T10064] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 203.171159][T10064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 203.442883][T10079] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 203.536739][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 203.585769][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 203.771495][T10106] netlink: 'syz.4.1036': attribute type 13 has an invalid length. [ 203.781141][T10106] netlink: 'syz.4.1036': attribute type 17 has an invalid length. [ 203.789468][T10108] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1035'. [ 203.816440][ T6376] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.980893][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.036062][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.070746][T10106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.102602][ T6376] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.152366][ T6376] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.178537][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.401479][T10144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1046'. [ 204.548792][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 204.599233][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 204.743302][T10150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.770452][T10154] macsec1: entered promiscuous mode [ 204.775903][T10154] bond7: entered promiscuous mode [ 204.782587][T10154] bond7: left promiscuous mode [ 204.845638][T10158] nbd4: detected capacity change from 0 to 63 [ 204.859438][T10161] block nbd4: NBD_DISCONNECT [ 204.877309][T10161] block nbd4: Disconnected due to user request. [ 204.906319][T10161] block nbd4: shutting down sockets [ 204.929175][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.939238][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 204.950582][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.960286][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 204.969582][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.979200][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 204.987525][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.997229][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 205.024009][ T5874] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.067026][T10166] IPVS: Error connecting to the multicast addr [ 205.068504][ T5874] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.093260][T10169] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1056'. [ 205.157091][ T5874] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.195654][ T5874] Buffer I/O error on dev nbd4, logical block 1, async page read [ 205.224644][ T5874] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.249605][ T5874] Buffer I/O error on dev nbd4, logical block 2, async page read [ 205.271623][ T5874] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.323851][ T5874] Buffer I/O error on dev nbd4, logical block 3, async page read [ 205.353734][ T5874] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.375417][ T5874] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.416932][ T5874] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.439635][ T5874] Buffer I/O error on dev nbd4, logical block 1, async page read [ 205.457375][ T5874] ldm_validate_partition_table(): Disk read failed. [ 205.478599][ T5874] Dev nbd4: unable to read RDB block 0 [ 205.479732][T10180] lo speed is unknown, defaulting to 1000 [ 205.510690][ T5874] nbd4: unable to read partition table [ 205.564653][ T5874] ldm_validate_partition_table(): Disk read failed. [ 205.595195][ T5874] Dev nbd4: unable to read RDB block 0 [ 205.621207][ T5874] nbd4: unable to read partition table [ 206.303151][T10229] raw_sendmsg: syz.3.1070 forgot to set AF_INET. Fix it! [ 206.692369][T10234] lo speed is unknown, defaulting to 1000 [ 206.731778][T10241] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 206.835390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 206.843631][ C1] lec:lec_tx_timeout: lec0 [ 206.848840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.154269][T10257] __nla_validate_parse: 4 callbacks suppressed [ 207.154290][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'. [ 207.309083][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1079'. [ 207.446983][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 207.453516][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 207.460266][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 207.461822][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 208.042999][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 208.280539][T10297] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.289922][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 208.329567][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 208.577154][T10305] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1094'. [ 209.636400][T10330] vti0: entered promiscuous mode [ 209.818018][ T30] audit: type=1800 audit(1775225203.369:3): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1102" name="e" dev="tmpfs" ino=1082 res=0 errno=0 [ 209.850586][ T30] audit: type=1800 audit(1775225203.399:4): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1102" name="e" dev="tmpfs" ino=1082 res=0 errno=0 [ 211.121112][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 211.216649][ T5143] block nbd0: Receive control failed (result -1) [ 211.292357][T10372] lo speed is unknown, defaulting to 1000 [ 211.398355][T10368] sctp: [Deprecated]: syz.3.1112 (pid 10368) Use of int in max_burst socket option. [ 211.398355][T10368] Use struct sctp_assoc_value instead [ 211.819700][T10386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 211.865392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.873716][ C1] lec:lec_tx_timeout: lec0 [ 211.879033][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.911789][T10387] [ 211.914311][T10387] ====================================================== [ 211.921489][T10387] WARNING: possible circular locking dependency detected [ 211.928702][T10387] syzkaller #0 Not tainted [ 211.933119][T10387] ------------------------------------------------------ [ 211.940315][T10387] syz.2.1116/10387 is trying to acquire lock: [ 211.946641][T10387] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 211.956573][T10387] [ 211.956573][T10387] but task is already holding lock: [ 211.963936][T10387] ffff88806b1b1d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 211.973776][T10387] [ 211.973776][T10387] which lock already depends on the new lock. [ 211.973776][T10387] [ 211.984181][T10387] [ 211.984181][T10387] the existing dependency chain (in reverse order) is: [ 211.993311][T10387] [ 211.993311][T10387] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 212.001226][T10387] lock_sock_nested+0x41/0x100 [ 212.006624][T10387] __inet6_bind+0x30c/0xf60 [ 212.011778][T10387] mptcp_bind+0x110/0x1d0 [ 212.016733][T10387] __sys_bind+0x2e3/0x410 [ 212.021653][T10387] __x64_sys_bind+0x7a/0x90 [ 212.027155][T10387] do_syscall_64+0x14d/0xf80 [ 212.032301][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.038748][T10387] [ 212.038748][T10387] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 212.046657][T10387] lock_sock_nested+0x41/0x100 [ 212.052298][T10387] inet_shutdown+0x6a/0x390 [ 212.057802][T10387] nbd_mark_nsock_dead+0x2e9/0x560 [ 212.063622][T10387] recv_work+0x1c7f/0x1d90 [ 212.068735][T10387] process_scheduled_works+0xb6e/0x18c0 [ 212.075023][T10387] worker_thread+0xa53/0xfc0 [ 212.080427][T10387] kthread+0x388/0x470 [ 212.085159][T10387] ret_from_fork+0x51e/0xb90 [ 212.090662][T10387] ret_from_fork_asm+0x1a/0x30 [ 212.096111][T10387] [ 212.096111][T10387] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 212.104509][T10387] __mutex_lock+0x19f/0x1300 [ 212.109883][T10387] nbd_queue_rq+0x37b/0x1100 [ 212.115048][T10387] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 212.121496][T10387] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 212.128399][T10387] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 212.135390][T10387] blk_mq_run_hw_queue+0x348/0x4f0 [ 212.141397][T10387] blk_mq_dispatch_list+0xd16/0xe10 [ 212.147451][T10387] blk_mq_flush_plug_list+0x48d/0x570 [ 212.154003][T10387] __blk_flush_plug+0x3ed/0x4d0 [ 212.159672][T10387] __submit_bio+0x28d/0x580 [ 212.164864][T10387] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 212.171145][T10387] block_read_full_folio+0x599/0x830 [ 212.177058][T10387] filemap_read_folio+0x137/0x3b0 [ 212.182681][T10387] do_read_cache_folio+0x358/0x590 [ 212.188322][T10387] read_part_sector+0xb6/0x2b0 [ 212.193616][T10387] adfspart_check_ICS+0xa5/0xa40 [ 212.199175][T10387] bdev_disk_changed+0x7ba/0x1550 [ 212.204818][T10387] blkdev_get_whole+0x380/0x510 [ 212.210213][T10387] bdev_open+0x31e/0xd30 [ 212.215005][T10387] blkdev_open+0x470/0x610 [ 212.220200][T10387] do_dentry_open+0x785/0x14e0 [ 212.225609][T10387] vfs_open+0x3b/0x340 [ 212.230388][T10387] path_openat+0x2e08/0x3860 [ 212.235698][T10387] do_file_open+0x23e/0x4a0 [ 212.240744][T10387] do_sys_openat2+0x113/0x200 [ 212.246079][T10387] __x64_sys_openat+0x138/0x170 [ 212.251493][T10387] do_syscall_64+0x14d/0xf80 [ 212.256688][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.263303][T10387] [ 212.263303][T10387] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 212.270523][T10387] __mutex_lock+0x19f/0x1300 [ 212.275705][T10387] nbd_queue_rq+0xc6/0x1100 [ 212.281193][T10387] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 212.287475][T10387] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 212.294748][T10387] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 212.301542][T10387] blk_mq_run_hw_queue+0x348/0x4f0 [ 212.307210][T10387] blk_mq_dispatch_list+0xd16/0xe10 [ 212.313032][T10387] blk_mq_flush_plug_list+0x48d/0x570 [ 212.319021][T10387] __blk_flush_plug+0x3ed/0x4d0 [ 212.324696][T10387] __submit_bio+0x28d/0x580 [ 212.329756][T10387] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 212.336031][T10387] block_read_full_folio+0x599/0x830 [ 212.341913][T10387] filemap_read_folio+0x137/0x3b0 [ 212.347754][T10387] do_read_cache_folio+0x358/0x590 [ 212.353416][T10387] read_part_sector+0xb6/0x2b0 [ 212.358939][T10387] adfspart_check_ICS+0xa5/0xa40 [ 212.364518][T10387] bdev_disk_changed+0x7ba/0x1550 [ 212.370189][T10387] blkdev_get_whole+0x380/0x510 [ 212.375573][T10387] bdev_open+0x31e/0xd30 [ 212.380346][T10387] blkdev_open+0x470/0x610 [ 212.385566][T10387] do_dentry_open+0x785/0x14e0 [ 212.390882][T10387] vfs_open+0x3b/0x340 [ 212.395684][T10387] path_openat+0x2e08/0x3860 [ 212.400840][T10387] do_file_open+0x23e/0x4a0 [ 212.405966][T10387] do_sys_openat2+0x113/0x200 [ 212.411450][T10387] __x64_sys_openat+0x138/0x170 [ 212.417048][T10387] do_syscall_64+0x14d/0xf80 [ 212.422221][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.429017][T10387] [ 212.429017][T10387] -> #3 (set->srcu){.+.+}-{0:0}: [ 212.436183][T10387] __synchronize_srcu+0xca/0x300 [ 212.441762][T10387] elevator_switch+0x1e8/0x7a0 [ 212.447078][T10387] elevator_change+0x2cc/0x450 [ 212.452412][T10387] elevator_set_default+0x36c/0x430 [ 212.458165][T10387] blk_register_queue+0x366/0x430 [ 212.463732][T10387] __add_disk+0x677/0xd50 [ 212.468603][T10387] add_disk_fwnode+0xfb/0x480 [ 212.473927][T10387] nbd_dev_add+0x72c/0xb50 [ 212.478888][T10387] nbd_init+0x168/0x1f0 [ 212.484112][T10387] do_one_initcall+0x250/0x8d0 [ 212.489429][T10387] do_initcall_level+0x104/0x190 [ 212.495375][T10387] do_initcalls+0x59/0xa0 [ 212.500298][T10387] kernel_init_freeable+0x2a6/0x3e0 [ 212.506062][T10387] kernel_init+0x1d/0x1d0 [ 212.510946][T10387] ret_from_fork+0x51e/0xb90 [ 212.516165][T10387] ret_from_fork_asm+0x1a/0x30 [ 212.521588][T10387] [ 212.521588][T10387] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 212.529549][T10387] __mutex_lock+0x19f/0x1300 [ 212.534961][T10387] elevator_change+0x1b3/0x450 [ 212.540620][T10387] elevator_set_none+0xb5/0x140 [ 212.546101][T10387] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 212.552559][T10387] nbd_start_device+0x17f/0xb10 [ 212.558055][T10387] nbd_genl_connect+0x165b/0x1cf0 [ 212.564055][T10387] genl_family_rcv_msg_doit+0x22a/0x330 [ 212.570169][T10387] genl_rcv_msg+0x61c/0x7a0 [ 212.575338][T10387] netlink_rcv_skb+0x232/0x4b0 [ 212.580747][T10387] genl_rcv+0x28/0x40 [ 212.585281][T10387] netlink_unicast+0x80f/0x9b0 [ 212.590765][T10387] netlink_sendmsg+0x813/0xb40 [ 212.596224][T10387] ____sys_sendmsg+0x972/0x9f0 [ 212.601636][T10387] ___sys_sendmsg+0x2a5/0x360 [ 212.606966][T10387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 212.612468][T10387] do_syscall_64+0x14d/0xf80 [ 212.617611][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.624054][T10387] [ 212.624054][T10387] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 212.632870][T10387] blk_alloc_queue+0x546/0x680 [ 212.638369][T10387] __blk_mq_alloc_disk+0x197/0x390 [ 212.644122][T10387] nbd_dev_add+0x499/0xb50 [ 212.649197][T10387] nbd_init+0x168/0x1f0 [ 212.654264][T10387] do_one_initcall+0x250/0x8d0 [ 212.659719][T10387] do_initcall_level+0x104/0x190 [ 212.665723][T10387] do_initcalls+0x59/0xa0 [ 212.670792][T10387] kernel_init_freeable+0x2a6/0x3e0 [ 212.677035][T10387] kernel_init+0x1d/0x1d0 [ 212.682113][T10387] ret_from_fork+0x51e/0xb90 [ 212.687246][T10387] ret_from_fork_asm+0x1a/0x30 [ 212.692580][T10387] [ 212.692580][T10387] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 212.700264][T10387] __lock_acquire+0x15a5/0x2cf0 [ 212.705722][T10387] lock_acquire+0xf0/0x2e0 [ 212.710860][T10387] fs_reclaim_acquire+0x71/0x100 [ 212.716449][T10387] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.722964][T10387] __alloc_skb+0x1d0/0x7d0 [ 212.728094][T10387] tcp_stream_alloc_skb+0x3f/0x580 [ 212.734034][T10387] tcp_connect+0x1567/0x5410 [ 212.739359][T10387] tcp_v4_connect+0x10f7/0x19b0 [ 212.744771][T10387] tcp_v6_connect+0xbbb/0x1b10 [ 212.750416][T10387] __inet_stream_connect+0x25a/0xdd0 [ 212.756462][T10387] inet_stream_connect+0x66/0xa0 [ 212.761951][T10387] kernel_connect+0x141/0x1c0 [ 212.767226][T10387] smc_connect+0x7a5/0xd90 [ 212.772430][T10387] __sys_connect+0x312/0x450 [ 212.777820][T10387] __x64_sys_connect+0x7a/0x90 [ 212.783407][T10387] do_syscall_64+0x14d/0xf80 [ 212.788831][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.795471][T10387] [ 212.795471][T10387] other info that might help us debug this: [ 212.795471][T10387] [ 212.806344][T10387] Chain exists of: [ 212.806344][T10387] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 212.806344][T10387] [ 212.819550][T10387] Possible unsafe locking scenario: [ 212.819550][T10387] [ 212.827290][T10387] CPU0 CPU1 [ 212.832659][T10387] ---- ---- [ 212.838113][T10387] lock(k-sk_lock-AF_INET6); [ 212.842882][T10387] lock(sk_lock-AF_INET6); [ 212.849919][T10387] lock(k-sk_lock-AF_INET6); [ 212.857214][T10387] lock(fs_reclaim); [ 212.861291][T10387] [ 212.861291][T10387] *** DEADLOCK *** [ 212.861291][T10387] [ 212.869749][T10387] 2 locks held by syz.2.1116/10387: [ 212.874959][T10387] #0: ffff888079944d60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 212.884134][T10387] #1: ffff88806b1b1d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 212.894508][T10387] [ 212.894508][T10387] stack backtrace: [ 212.900433][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.2.1116 Not tainted syzkaller #0 PREEMPT(full) [ 212.900455][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.900464][T10387] Call Trace: [ 212.900474][T10387] [ 212.900482][T10387] dump_stack_lvl+0xe8/0x150 [ 212.900509][T10387] print_circular_bug+0x2e1/0x300 [ 212.900533][T10387] check_noncircular+0x12e/0x150 [ 212.900556][T10387] __lock_acquire+0x15a5/0x2cf0 [ 212.900576][T10387] ? inet_sk_rebuild_header+0x93/0x1da0 [ 212.900598][T10387] ? __lock_acquire+0x6b5/0x2cf0 [ 212.900618][T10387] lock_acquire+0xf0/0x2e0 [ 212.900635][T10387] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.900654][T10387] fs_reclaim_acquire+0x71/0x100 [ 212.900671][T10387] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.900686][T10387] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.900702][T10387] ? __alloc_skb+0x1d0/0x7d0 [ 212.900727][T10387] ? ipv4_default_advmss+0x20/0x340 [ 212.900748][T10387] __alloc_skb+0x1d0/0x7d0 [ 212.900767][T10387] tcp_stream_alloc_skb+0x3f/0x580 [ 212.900787][T10387] ? __asan_memset+0x22/0x50 [ 212.900802][T10387] tcp_connect+0x1567/0x5410 [ 212.900830][T10387] ? __pfx_tcp_connect+0x10/0x10 [ 212.900852][T10387] ? __asan_memset+0x22/0x50 [ 212.900867][T10387] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 212.900881][T10387] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 212.900902][T10387] ? sk_setup_caps+0x9ef/0xc40 [ 212.900921][T10387] ? sk_setup_caps+0x29/0xc40 [ 212.900940][T10387] tcp_v4_connect+0x10f7/0x19b0 [ 212.900960][T10387] ? sched_clock+0x3f/0x60 [ 212.900982][T10387] ? __pfx_tcp_v4_connect+0x10/0x10 [ 212.901001][T10387] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.901024][T10387] ? tcp_v6_connect+0x62d/0x1b10 [ 212.901046][T10387] tcp_v6_connect+0xbbb/0x1b10 [ 212.901070][T10387] ? __pfx_tcp_v6_connect+0x10/0x10 [ 212.901092][T10387] ? __pfx___resched_curr+0x10/0x10 [ 212.901113][T10387] __inet_stream_connect+0x25a/0xdd0 [ 212.901134][T10387] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.901149][T10387] ? __pfx___inet_stream_connect+0x10/0x10 [ 212.901168][T10387] ? inet_stream_connect+0x51/0xa0 [ 212.901186][T10387] ? __local_bh_enable_ip+0xd0/0x130 [ 212.901206][T10387] inet_stream_connect+0x66/0xa0 [ 212.901225][T10387] kernel_connect+0x141/0x1c0 [ 212.901248][T10387] ? __pfx_kernel_connect+0x10/0x10 [ 212.901267][T10387] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.901284][T10387] ? smc_connect+0xbd/0xd90 [ 212.901304][T10387] ? __local_bh_enable_ip+0xd0/0x130 [ 212.901322][T10387] smc_connect+0x7a5/0xd90 [ 212.901342][T10387] __sys_connect+0x312/0x450 [ 212.901360][T10387] ? __pfx___sys_connect+0x10/0x10 [ 212.901379][T10387] ? rcu_is_watching+0x15/0xb0 [ 212.901401][T10387] __x64_sys_connect+0x7a/0x90 [ 212.901419][T10387] do_syscall_64+0x14d/0xf80 [ 212.901432][T10387] ? trace_irq_disable+0x3b/0x150 [ 212.901444][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.901459][T10387] ? clear_bhb_loop+0x40/0x90 [ 212.901475][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.901490][T10387] RIP: 0033:0x7f6d7db9c819 [ 212.901505][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.901517][T10387] RSP: 002b:00007f6d7e992028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 212.901535][T10387] RAX: ffffffffffffffda RBX: 00007f6d7de16090 RCX: 00007f6d7db9c819 [ 212.901546][T10387] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000007 [ 212.901555][T10387] RBP: 00007f6d7dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 212.901564][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.901573][T10387] R13: 00007f6d7de16128 R14: 00007f6d7de16090 R15: 00007fffd38c0508 [ 212.901588][T10387] [ 213.036369][T10389] sctp: [Deprecated]: syz.1.1117 (pid 10389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.036369][T10389] Use struct sctp_sack_info instead [ 215.608488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.895416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.903655][ C1] lec:lec_tx_timeout: lec0 [ 216.908372][ C1] lec:lec_start_xmit: lec0:No lecd attached