last executing test programs: 32.821996315s ago: executing program 4 (id=5965): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000180)=ANY=[], 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101940, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x7, 0x57f9, 0x8, 0x144, 0x100]}, &(0x7f0000000240)=0x78) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000001b0001000000000000004000fc000000000000000000000000000000ac1414aa000000b9bc4600000000000000000000000000060000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b\x00\x00\x00\x00\x00'], 0xcc}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x5) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$kcm(0x11, 0x3, 0x0) 26.463887638s ago: executing program 4 (id=5970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in=@broadcast, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x1, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x3800000}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "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"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x80000001) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xc8844) 26.111328424s ago: executing program 4 (id=5972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}], 0xfffffffffffffdee}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16], 0x14) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r14) sendmsg$NFC_CMD_ENABLE_SE(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r15, 0x3, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000040000006bc80d1dfdeb000000000200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000001000000010000000f000000000000000000000100000000"], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) 25.51741023s ago: executing program 4 (id=5978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xc8844) (fail_nth: 23) 24.885831674s ago: executing program 4 (id=5980): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @local, @broadcast}}}], 0x20}, 0x24000090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x9, 0x1, 0x3, 0x11, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x1, {0x6, 0x3c, 0x5, 0x10, 0x0, 0x8, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x40, 0xb5, 0x3}, @sadb_ident={0x2, 0xb, 0x779, 0x0, 0x84d}, @sadb_address={0x1, 0x6, 0x6c, 0x80, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x88}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 24.641102571s ago: executing program 4 (id=5983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00', @ANYRES8], 0x38}}], 0x1, 0x40000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x2004c0c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000002000128008000100677470001400028005000500010000f608000300ffff000008000a00987027cbb230e04f0025c785dfe5f7ace1fbc7a784147ad55133b696253cd7d5053b4fb3f0b4053e23b7d0a17c748d51ce2b663ae06bd686735faea22b7bb06c8f0a42d181aa416480e86b02ced02bcee17b2f0178ac6a8ff1e7c694b8793847fc773208dfc43fd29543b7dabb87b6ca79a3a346ce07d78d9c7701b42d4278", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x40) 11.623082632s ago: executing program 1 (id=6048): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c80)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x6c, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1ff, 0x7, 0x3}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x2, 0x1, 0x1, '5'}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x14000}, 0x40010) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 'syz_tun\x00'}}, 0x1e) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect(r3, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) (async) r4 = socket$igmp(0x2, 0x3, 0x2) unshare(0x480) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x80000009, 0x8000009, 0x7ffffffd}, 0xc) 10.832536535s ago: executing program 1 (id=6050): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0x7}, {0xffff, 0x3}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0x8, 0x0, 0x0, 0x1, 0x8, 0x7}}, {0x12, 0x2, [0x9, 0xefa4, 0xffff, 0x3, 0x800, 0xfff1, 0x9]}}, {{0x1c, 0x1, {0x0, 0x5, 0x608, 0xc0000000, 0x1, 0x7, 0x7, 0x3}}, {0xa, 0x2, [0x6, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6d, 0x4, 0x9, 0x1, 0x2, 0x6, 0x3, 0xa}}, {0x18, 0x2, [0xfff, 0x5, 0xfff, 0x5, 0xd, 0x2, 0x2, 0x78a2, 0x3, 0x0]}}, {{0x1c, 0x1, {0x1, 0xf, 0xca, 0x1, 0x1, 0x14000, 0xffffff00, 0x6}}, {0x10, 0x2, [0x8, 0x6, 0x7fc0, 0x9, 0x3, 0x4418]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x240048e4}, 0x85) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r9, &(0x7f0000000680), 0x0}, 0x20) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002000010900000000ffdbdf0500180009fe01000100280002"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4044051) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r8, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000000440)={'wg0\x00', {0x2, 0x4e22, @empty}}) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x85, 0x46}, 0xa) socket(0x840000000002, 0x3, 0x100) 10.145444912s ago: executing program 3 (id=6054): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="082b52075fdc34d834896bebbe55f3b1fcdfcc33a281c1e447339a30daf95b8c0bf2ebbf97b3045e587f6dadf8188103305903e7ae91656f3cd89ee4c7c3203b85", @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000400007012bad700000000000047c00000c00fc80080008"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x4c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x53, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000926ed5ee000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000004520000504"], 0x20) socket(0x14, 0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r7) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r11}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r10, @ANYBLOB="08000200c3"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4.389831147s ago: executing program 1 (id=6057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xe, &(0x7f0000000900)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x95}], &(0x7f0000001180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002240)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) 4.150754501s ago: executing program 3 (id=6059): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close(0x4) 3.929174096s ago: executing program 1 (id=6061): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) unshare(0x8000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0x108, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000600), 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000840), 0x8, 0x36, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x11, "0e8cda3c82b943d7dc4033078279e81ba3"}, &(0x7f0000000380)=0x19) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x7}, &(0x7f0000000400)=0x8) close(r0) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000001, 0x0, 0x1, 0x900, 0x0, 0xfffffffc}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendfile(r6, r6, 0x0, 0x4) 3.708693901s ago: executing program 3 (id=6064): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x7fffffff) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x2444c0, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x9]}, {0x5, 0x7, 0x5, 0x8}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfffff001}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8800) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0xac3040f4, 0x0, {{0x22, 0x4, 0x2, 0x4, 0x88, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @remote, {[@noop, @lsrr={0x83, 0x7, 0x62, [@empty]}, @timestamp_prespec={0x44, 0x44, 0xf6, 0x3, 0x7, [{@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@multicast1, 0xc9}, {@remote, 0x9}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa0}]}, @lsrr={0x83, 0xb, 0xee, [@local, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x89, 0x0, 0xe, [0xfffffff7, 0x4f83, 0xd6e6, 0x3, 0x7]}]}}}}}) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x6, 0xfffffffb, 0xa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x7, 0x1, 0x8001, 0xd9f6}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xf8, 0x4, 0x44, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, 0x3c69e53c4b8b7a73, 0x7800, 0x7fff, 0x2}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000300), 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f0, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x6, 0xa, 0x3}, {0x2, 0x5, 0x3, 0x71}, {0x7, 0xd8, 0x87, 0xd}, {0x101, 0x2, 0x5, 0x7fffffff}]}}}]}}, {{0x8, 0x1, r9}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x800, 0x10, 0x1, 0x7748}, {0x8000, 0x2, 0x54, 0xfff}, {0x81, 0x6, 0x3}, {0x3, 0x6, 0x2, 0x9}, {0x2, 0x7, 0x9, 0x1}, {0x7ff, 0x4, 0x1, 0x1}, {0x7a7c, 0xd5, 0x4, 0x101}, {0x81, 0x6, 0x4, 0x10000}, {0x2, 0x6, 0x10, 0x9}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0xfd, 0x4, 0x200}, {0x7, 0x5, 0x84, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}]}}]}, 0x5f0}}, 0x4000800) (async, rerun: 32) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000f00)={0xf, 0xe1, 0x8, 0x40}, 0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000f40)={0x0, @in6={{0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x5, 0x19d}, &(0x7f0000001000)=0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001040)={r14, 0xa3, "33d6d07da002202a679e5e38487d14d772dfbf5048c7642638029ff775f194dbdaa5ed39efba075159d2fcd456940175ff128c2d18323ddc33668ecc130617bf3178d541014b9b47e0f30d8bb4252a03cad1d0fb1c2f1959268cc6f8563e26883615aa54b073b387286ebf0b412b9e7e0d0ed9a808d8dae3fc800695165493ecd9250d5192fdfc5f55b00ecd1f13d48cb6b4f47c164dc502b49ff05eeb1617a3619f61"}, &(0x7f0000001100)=0xab) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r15) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x48, r16, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x48081) ioctl$FS_IOC_RESVSP(r15, 0x40305828, &(0x7f00000012c0)={0x0, 0x3, 0x2, 0x200}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r15) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r17, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x88, r18, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5, 0x70}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x20004001) (async, rerun: 32) r19 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r19, &(0x7f0000001540)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x2000040}, 0x20000010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001580)={r17}) 3.561162459s ago: executing program 0 (id=6065): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1, 0xffff, 0x805}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40881}, 0x4040040) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ab}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x6, 0x7ff, 0xdc4a, 0x0, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x26, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x614}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300200000000c00018008000500020000000500010006"], 0x68}}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x850) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) 3.432963144s ago: executing program 2 (id=6066): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000019000100aa8e928b000000001d0109004d00118025b57efaa223ab36d044550ad55886726988b473fe7705004a506cf756740574b88d316af9b5963870ef1991f3ac176f88d6e1db9b2bb2c5c90daf56c43f992f68c030e29d63cdebae"], 0x68}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5d8, 0x0, 0x11, 0x148, 0x330, 0x10, 0x540, 0x2a8, 0x2a8, 0x540, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2c8, 0x330, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x1, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80, 0x0, 0x40}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x638) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000009c0)={0x6, &(0x7f0000000640)=[{@fixed}, {@fixed}, {@none}, {@none}, {@fixed}, {@none}]}) 3.340010482s ago: executing program 3 (id=6067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08002d0080000000a84fce29a270699028b98ff1b7820e4444e7e00f6ed086db3bcb3f8a7708005300", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="9a2a8b2305a96e2001f48e082fd0678ed7bb2ff78476dd5aa2390b1b52362a0cad96701fc22b654228bb589d60971e24187449029edfb5a9c461a6ced3e6967465396c030348257a5d2f7fdc3b7769bd34e601480ddc8665c7a169750f8152d006c23c54e270069089118c84f53ace5655a6cc84c16944bb9503c9b9be3f5c68c427fdd45274c8e865742374ccaf093a0cf96e411fed87aa9269981afd1868e7def374fd320800fd00", @ANYRES32=r0, @ANYBLOB="e9003c80fcec4814d6a7323768aad409ec6d863cfb5ede92b2d21c1518ea50196d6a04df22278b3435cfcfa7ab71c3185ad6cc93900bba662301276134d01c9aeed79f616c9e38e6375751bd25c34d1d975a150473c6d67d2a35fd98e90cbd0ffb08000300", @ANYRES32=0x0, @ANYBLOB="040007800400c58004002c800800d8000a010100fa423fa0a7d092b1c58d6d8b92817b3d03b9d8b479c1730998f029cde180d1c1e7b516ca59d3df0711032c0830d231c529bb906d63956e9780f5338b2f0038cf366cdce2e9c2197a8b60392b756e70c04a9ed1f76fba5e7134fdcef90b216be9448f6bc808005d00", @ANYRES32=0x0, @ANYBLOB="00000000004500bd8055108d69330e80923e709e3a0729cd6403b5fe7537892b6b85661a94ccda3cc6b8cb4b718df9211b9a0800a400ac1414aa08005b00", @ANYRES32=0x0, @ANYBLOB="080076800400130000000068aa53524478fb5752ae8ec70b47413b08359a45b6c2de6e77ca09ea958782dceb136d80d4f185e5bcdfc7c64bb03e109252d1e2078b12e966a5b6189a504fea01182e4457fcf4d97ffb71eca28a49a1048e160541e9ee6de18af6e4cc8671518ac2bb5a431983311e5deefe87337abbd296436b9a72c7f1ab925b13abf244ef8e8f43f29b9ac379a3ad5d2f4646d0aa3e834c37c17ab2c63cd4a69a3a3fed27704e8a55c79b05a76452b09f5a9e7ec5e1f69eb23406901369d1009a6ea15639b9eaee3b589b0152d58db7c69ee200ca8467fdaefc3f9c67afad8cd6ef6527b6d15cb6a2c8f7b0c193f4158b02e65be7586470fe35ebe452af4d06b8b6dcbc665195c4195c969c5f555c834da9d8d75964ee14b49bf85ac6569dd0e65ecb242d71b43fa4d8f2379e530cece09acce920f5faf649e0798de0f525337f612ed3657fe18297c78ad6d1cbf7e43f16d4da52858e0400388005005c00000000001f998db8c0c188b058c8ec5c7b69209e934f6639e16dc208d20de01bd25399873a2e3b68cf3243d406d0ba4076ae4e779b9da7679aeeb16039fe46df4ac16e8cde3b08a1b18f04004c80000000389c7429e3103361dc5b164c6767fcf2e9e9fde7210d37e06a5818fd4ec6adc8f72d0cfcf0c6f387e347a71cfa30132b31cfd6587ebe443a3cdeaedb806a4d5d61a7bf2ef77d51b25a354559125c9d9ea75fe259bb430bedab8bc28157e25a7ebc3f78f43f0b164b64ff52c948c2001e70627339d62f4f21f147d80185d677547b339c0c39569b4736fa842bbb59c4a6a8e852a7c1272c97fe8a13e14c59dba1f14e857620af89e155f77c573df0b3f95d7bceb85b8c1962a946a6448f1f8f370cb979b3f065326dc5f35628ae88263d9a9f68739364c30cc3cf78bc5dcac04f5206b2a2e951885c92ea30e31265bc13091012800800e600", @ANYRES32=0xee00, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="04005d8045000300a3a203dee0f2000000003a06a4df6f289197c1b27c3e1c64942c17ff0a0732993c5faa010000000000000032c06b0127c50bb536a17284cac023abed33b3ecfa8b000000000000000000"], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340)='!\xc2*-\\\x00', 0x0, &(0x7f0000000380)={@_ha_fsid={[0x2, 0x4]}, {0x7, 0x646, 0x7}}, 0x9, &(0x7f0000000400), &(0x7f0000000480)=0x8ab}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000140)="c5df1f0bc53d2f5d020d4c7fa445fa1e77a7ab31c016496bcb1c16f1", &(0x7f0000000200)=""/20, &(0x7f00000002c0)="e6c0c7b411fbef8043d7a43aaaf72e8a229b9ae248126a2548a0a71c36c562fa850b17c7095d96af0960a514f2c674c4704936e97f82a257bf80878799ef56", &(0x7f0000000300)="d7e62ed6", 0x80000000, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r4], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x10000}, 0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, 0x0, &(0x7f0000000040)) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1000000000000000010000000100000010"], 0x20}}], 0x1, 0x800) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f00000005c0)={&(0x7f0000000180)=0xffffffff, 0x8, &(0x7f0000000780)=[{}, {}], &(0x7f0000000500)}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 3.20998835s ago: executing program 0 (id=6068): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7069, 0x8, 0x2, 0x1}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r6, 0x4) 3.083602943s ago: executing program 2 (id=6069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a01010000fffffffffffffff5000a14000000110001"], 0x70}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a01010000fffffffffffffff5000a14000000110001"], 0x70}}, 0x40000) (async) 2.861246512s ago: executing program 1 (id=6070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) socket$kcm(0x11, 0x3, 0x0) (rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[], 0x6) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0xffffffff, 0x40000a, 0x6, 0x6, 0x9, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x6, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r12 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000330000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r13], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x0, 0xb, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) (async, rerun: 64) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r14) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.556410751s ago: executing program 2 (id=6071): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000500), &(0x7f0000000540)=0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69b, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x18, 0xff, @l2={'eth', 0x3a, '\x00'}}}}, ["", "", "", ""]}, 0x30}}, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c146db828c3397f15b17b5dfa54a7f7a88b6e0ba81c144a064b936a9f0a2e27dae154e934a613f11445867ff58d036b780d8609155b1caab53c366b5fde5f869", @ANYRES16=r2, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x2, 0x3, 0x2, 0x4}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000440)="dd1b5758762ec4", 0x7}, {&(0x7f0000001cc0)}, {&(0x7f0000002cc0)="0f1a21d6637bc300b5b9b4dfe0e2c1fd75eedceeb3486bc5a1a8fc3d85c8fc5dfe7302a7e935d2de0726bf25f8e4f8cbfdc0c2642402", 0x36}, {&(0x7f0000002d00)="5a496ffebbf29778fa04ddbecd3d47dea42e5dd355117043c069532417d5c508f233e1b942073872fdbb670020dbc0b6faf41f8173f0bcaf08b14e3d55d65da5b460a7e69a8dc3e306d2c9c9406569c81b5e817b919889a3d3dbc15470722007c9007bb26967e3796d3bfd2698337a599ed758462fa5cc1b1d91f467513ac6812b5032af2193ea806b76576aaf2ff488e04d0cb2a6ceabefeffa351cc055b20c20ac98719549f8a162d0dc80570347765032ed07d5b7048e43399bb821ea049c0334c2c90b7b6f264f78467859f306916d373faacede1dc3b6442a168b6c262d413f27f8bbf152c288303bcf9f", 0xed}, {&(0x7f0000002e00)="ffc679bf71d4f5a9b2b4e64f89d35a333dee523ce984dd788de7e6cfae63456c8258e142d1f10b1df98993611d8085c4b6cd761325b14862bcb2ad0480cac1af12f5e85e7d459d41ddd1af46b9ce4a900b478c6f1d5c7fd495fa2b89a0017aba0a6cfe9a8e22079747901f1df75c7c309e508cfbfb7d2bde096d2a959a5714c50f18ac7d9a3eab2a98751fd475485904a2b16361787a4a33a861c4", 0x9b}], 0x5}, 0x20008080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.731926138s ago: executing program 0 (id=6072): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r1, 0x0, 0x29, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) 1.073701167s ago: executing program 0 (id=6073): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close(0x4) 991.293244ms ago: executing program 2 (id=6074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x80000001) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc8844) 978.248237ms ago: executing program 3 (id=6075): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x4c, r2, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x4c}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040)=0x47a, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 927.828225ms ago: executing program 2 (id=6076): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x1, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x160, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x5, {{0x2, 0x4e24, @multicast2}}}, 0x88) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000111009078e0000002000100010000000800000000"], 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 778.082751ms ago: executing program 0 (id=6077): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x80000001) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xc8844) (fail_nth: 33) 344.895938ms ago: executing program 1 (id=6078): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, r0, 0x0, 0x5, 0x7, 0x7f, "e62522197cbb85dee7e5f5d9688789a30428de8b084c59c790c2f08b90c07484db71e31936eb6eba0c24796bf10822ca1896ca1061712dfe5464c3d07e3733", 0x29}, 0x60) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x14}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched_retired(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@delchain={0xc4, 0x65, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x7}, {0xfff2, 0x6}, {0xb, 0x5}}, [@f_rsvp6={{0xa}, {0x94, 0x2, [@TCA_RSVP_POLICE={0x70, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x7, 0x6dc, 0x10000, {0x3, 0x1, 0x9, 0x36, 0x2, 0x1}, {0xe3, 0x1, 0x5, 0x3, 0x5, 0x2}, 0x3, 0x5, 0x1a2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x10001, 0x1e}, {0x6, 0x3f, 0x5}, 0x1, 0xca, 0xd}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8000) (async) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004480)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="b9e1e8a41286bcece2035d64397b7e0a7ea877836a61414ae161aeb00bec9dd34bc381c5cf201837f6402dcc160491a7553047f9cc1e54de722e098e93cc5a7d6d5cb382c1c660b0476516c21b4097eb276a8a983c", 0x55}], 0x1, &(0x7f0000000700)=[@iv={0x20, 0x117, 0x2, 0xb, "85b8e2d660fb3b21022222"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x1068, 0x4000000}, {0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="b87c6d3317ad268596d159a1ca16e291664d4b3bc80247142bc15ab9e8735c252bb96b8326921c1d3846e794e54e5b4efcd581e01c7ee9b924dfb491b69af5ec44ab742d63f84eb8c8fe7976b1c28f720ca69061d685dff22b4318c6a0ca3d41efb63c338c0e", 0x66}, {&(0x7f0000001800)="62c3b9f467d6968a75f45c4504d896288da0f1a2a25edc19b996883d8153a41b1bbaec31d5aff5c8b7112173933add7da8647206aa0b563dd3c042377f8fe656c6dedbc93025ce72c395c903dfd771c82a9e2cb309d5252b1b57df2e7649586767d5ab301d69db5d6dced65a308336db9277bd733279547720ef3c7c6bed59a4a5f55dd6db295246a32208d97c2b2a930e09b753e712688fe55aa23404f46021906075f79fc249163c327109c64eefe4026675904bead4c15f", 0xb9}, {&(0x7f00000018c0)="8e5b3aa529e25b7a0d15d92989bbf1541e006cadafc703558105e329117dd32834810240009c8604dd5a29a81af6dde5cf9f79e82b07c6292b82bf4f704252a082728344", 0x44}, {&(0x7f0000001940)="628ca28123d9f3071e607c433467a68276863a225e87d05c57faeb43c8ae3dedaa8f6bb5ef7a6720832ddf1bf63bbf1a0b39f3c78cac71389764426b83e95770a10ebadc31df45e3af28be293e5bc337712cadf20f914ffa612abb81f8ed5652f2989e671522c76d7741f2e16a1a91140816d250bf5beef56be7", 0x7a}], 0x4, 0x0, 0x0, 0x20040040}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001a00)="2f0af376f8174d53816995f7376bbc894fd1613fa560982a295f1db39a6ff879aeced74ae3f472cdb3dc998493cdbd972cd710fe9f54e93eaad168d3da37c4af1e4ee2090216b64bba98d80da271228eff652e2d2702ada94a0a9037de6e70c1aff1ab80f5b54413a6164e0e8a0c55364a41ccd2dc0bbce80d9bac0a54e8969d459e8b31edbfb2ce3b8e5c1a993a7db48a1cfb8cd1d2d537f7e067ecdb41b30f237d3ff488a07baf6063a7ca19d1e5a81970b270dd9bac006e1d0e47be76576eaf9bb0f83bdf50a9926e13d2f1edf4778c0215b89e47c3376704ee94fe39c1e40e99def8f45175b720acaa05eecae60efd2406c2eab80c9b", 0xf8}, {&(0x7f0000001b00)="6289a5c4ff96ba1231053706a641543f5dc4d97430be0de5bda71de5c017163399d60fdd85b3edfd15487b86c345803f4c29e3c85fe1837a08684ccfcf3b82b2f4b41704992aa495833019a9615f990de43fc791685513abb8e52b68fcefdda1b189ce9bb69d081c81153a6b3d8ea4adc53cd2cf92511066a320b8fe", 0x7c}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)="5f6df87816dd7eee71f74dddca3cc47d739b4d7e0645b13a0eb5e4e1582dc41a17a153cfa937756b2f58c2c20c443bc5e037bcce3209d832ff964fc4998677d2de0ea00482c8c9bcc9306b40a3d2edd7e5a3d000019b6c4e05e36cc96a0aadeefd1b56c0cb90f8b5f038ea75738ede3952c621e24d1ab3d872e788947d857411921d585df2f75dacaeefa6f9a8922e16fd6ba78e672e95f9665bd3fcd071160fc228ceeebd067197dd02b77fdd8618b3e4512212bbc14f67d48809c12845af16ff8af346fc8636947ef8f5f3ffe831451ef31d5cfcff3c3a0011ef991ea735de", 0xe0}, {&(0x7f0000002cc0)="b2889a20b796112afef280254424dd00bc72508023bb4a0b2ab22904a32d581a072f3193f183e47dcb76507d8727b668ab0b37cd94a95923035e1520b156255622a067d894f2e052dc689d9d827854dbdbec94d5f2398cb27319f602161f40caa38b58473afb0c553d6d6816e785cc2287db9a74e8f0f90b76a1b165ede31b504e3d7b9497f860c8c0ab4e69dc73b0a1172e740937477b81c429335faaee8ed93b5531299f8a56cfb83b22af84603792657ab216b30309a43d6bfdf7d06eb563553d09d79f728c1d87a1253b17bc", 0xce}], 0x6, &(0x7f0000002e40)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xa0, 0x117, 0x2, 0x8c, "2a060e4a0738e3f1fbb1f17f79582a12f847a489ccf554d808b4314db0488d3d569c213f9cf7dde219282934065d062647914c2f98c025dbf31ea4e596f7ed5b2f527523dc9c3d75116bf89eeceab0ab254c7d6563959adfcc9156910b84302c457fccf3d79a0e34e5603be4cbd3777f94215e60744a4d48c22495731aaf964341881d438e0d5460986eaf2c"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0xe8, 0x10}, {0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002f40)="424875547d4439645989e5df3ed6d6b2662fd988309a5794eeb5a24cdd4221ed6f69817dc680", 0x26}, {&(0x7f0000002f80)="df39900a3e8d0965f93fe1aa5d0b452d632835d91a683eb2f48e92013b142e436fe0e36f4a481058d4dc733fb665f1a958dd83df5587914f14383213a52f3f7d24bf7998a1051a08406111291b300caf8a646601eda8976d5837a6245347cf6561e03d564136cf85b21faa43864411af218f8fda5ad6975ea10f5766afe3e264b681e74e77cae248065974ffaff83660d3cd27f6abd9f0d5637cf056dc97650226d48a01", 0xa4}, {&(0x7f0000003040)="76c5ebe7f4f60a34229b3bf5ba6d9626c9ffe72143", 0x15}, {&(0x7f0000003080)="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", 0x1000}], 0x4, &(0x7f00000040c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x11}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004140)="1b3665447f6ae6cb6635c27b9e4262ca359930ba604c7a9f82594539d5ca723eced5211d89e167c58ae166d1f63848af7c6f42584ece39163506fd400ea312e8121cebc25180cd9be9d555ea836b291ad7b91972dbaea42769a46e29aa3f254e8d9f92602f65e6fb70887abeaf858d95e02f886cd76aa8858d894c6fed4de04e87787fc7d7b6e4c5d9157f311e35f856354ac47255ca4c96942e5b4c20f042173e5c6ba5421a9e52a3599506071ae88b28f3964feaf8d49e6a617dcd088d27129881e939992f34d9a8a1c170eef31c138607e6defa0c052ad33699ec342263f852", 0xe1}, {&(0x7f0000004240)="71557ec1e84f21a5a4be2a40707b415c94959117b33fa6be", 0x18}], 0x2, &(0x7f00000042c0)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xfff}, @iv={0x78, 0x117, 0x2, 0x62, "cf3dd24bac039d3a31c65f289304a31e5b94a7b1e8add1546a1528182a68f6c307009a2172f8159c6e3b92ab5d80f32c40c0b964d75057fb247ea3341d212334988e8101735f40759a69bdd8f1b01b1d5ee773f9f1587959c0cf73dc1573dcc0306b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x18, 0x117, 0x2, 0x1, "02"}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x48, "6eb147d98dc702e6ed0f9d9aca176035298c4410e4107461aeae7606a9dcd6c0ce3d7ef46445e1426163756d2dddc27b4f8a3074f9858ac8cc29b1938269d43c82aed93a8adc5b8e"}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0xfa}], 0x198, 0x20000080}], 0x5, 0x4000) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000047c0)={'ip6tnl0\x00', &(0x7f0000004740)={'syztnl1\x00', r5, 0x29, 0x3, 0xfb, 0x2, 0x0, @local, @mcast1, 0x7, 0x700, 0x80000001, 0x2}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004900)=@bpf_tracing={0x1a, 0xc, &(0x7f00000045c0)=@raw=[@call={0x85, 0x0, 0x0, 0x77}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], &(0x7f0000004640)='syzkaller\x00', 0xfffffffd, 0xbd, &(0x7f0000004680)=""/189, 0x41000, 0xa, '\x00', r10, 0x18, r4, 0x8, &(0x7f0000004800)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000004840)={0x4, 0xd, 0xc, 0x4}, 0x10, 0x1ac49, 0xffffffffffffffff, 0x4, &(0x7f0000004880)=[r3, r3], &(0x7f00000048c0)=[{0x3, 0x4, 0x3, 0x7}, {0x1, 0x2, 0x9, 0x3}, {0x5, 0x5, 0x4, 0xb}, {0x3, 0x2, 0xb}], 0x10, 0x5}, 0x94) (async) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000049c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000004a00)=0x28) (async) ioctl$sock_netdev_private(r9, 0x89f1, &(0x7f0000004a40)="f7af4e128f46695185a61009215b53210cad46509921b3c3b513bf4797e587361bb389df3ae249b98ba7c0cc5eb96c8d148b152f311677371263b4017021fc2e93e5daf59e450b219aab751d771c7ab043e865f53cf0cf6268e3835c278994d920b1fa8a40465522aa2e4d745d140da8ab8e8a5219f2a37f11be12a375d29dd2523a1d") r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b40), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000004b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000005000)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004bc0)={0x3f8, r12, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x16, 0x9, 0x30, 0x5, 0x1, 0x0, 0x18, 0x46493fb3e3ad9fbf, 0xb, 0x2, 0x9, 0x16, 0x1b, 0x5, 0x5, 0x30, 0x16, 0x24, 0x18, 0x48, 0xc, 0x18, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x9, 0x8, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x17}, {0x3, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x4}, {0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x2, 0x6, 0x3, 0x3, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x7, 0x5, 0x3, 0x2, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x9}, {}, {0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d5e, 0x4, 0x9, 0x2, 0x4, 0x4, 0xfffe, 0xfff9]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x8}, {0x5, 0xa}, {}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x2}, {0x3}, {0x2, 0x3}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x2}, {0x2, 0x8}, {0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x2}, {0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0x9, 0xb72, 0xc, 0x2f33, 0x8001, 0x3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x100, 0x7, 0x6, 0x40, 0x5b07, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {}, {0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x4, 0x8}, {0x3, 0x4}, {0x1}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x400}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x0, 0x40, 0xf6d5, 0x8000, 0x506, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x6c, 0x30, 0x24, 0x48, 0x18, 0x6c, 0x60, 0x36, 0x24, 0x24, 0x32, 0x6]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x7}, {0x6, 0x1}, {0x3, 0x6}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x12, 0xd4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x16, 0x6, 0xd8, 0x24, 0x2, 0x5, 0x36, 0x48, 0x18, 0x6c, 0x30, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x8}, {0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x1b}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6}, {0x0, 0xa}, {0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x16, 0x1, 0x9, 0x24, 0x16, 0x0, 0x60, 0x57, 0x12, 0x30, 0x2, 0x1b, 0x6, 0x5, 0x12, 0x3, 0xc, 0x1b, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x3}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x7}, {0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x3, 0x3, 0xf, 0x40, 0xa98c, 0x800]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x10, 0xfffc, 0x5, 0xc2, 0x7, 0x7afa, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x2}, {0x5}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x6}, {0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x5}, {0x6}, {0x7, 0x9}, {0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x3}, {0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x1b, 0x18, 0x3, 0x5, 0x9, 0x9, 0x60, 0x9, 0x6c, 0x3, 0x3]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x6, 0xb0, 0x1, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x12, 0x0, 0x6c, 0xc, 0x2, 0x4b, 0x60, 0xb, 0x6c, 0x3, 0x48, 0x6c, 0x36, 0x2, 0xf1, 0x2, 0x5, 0x1, 0xb, 0x4, 0x36, 0xc, 0xc, 0x4, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x6, 0x6, 0x1, 0x401, 0x747, 0x9]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0x4, 0x8001, 0x0, 0x5, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x3, 0x1f61, 0x5, 0xf, 0x4ef, 0x401]}}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4811}, 0x45) (async) r14 = syz_genetlink_get_family_id$smc(&(0x7f0000005080), r6) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000005140)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x3c, r14, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x8004) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000005180)=0x10000, 0x4) (async) getsockopt$sock_buf(r9, 0x1, 0x3d, &(0x7f00000051c0)=""/27, &(0x7f0000005200)=0x1b) (async) r15 = accept4(r4, &(0x7f0000005240)=@hci, &(0x7f00000052c0)=0x80, 0x80000) socket$netlink(0x10, 0x3, 0x12) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r15, 0x10f, 0x83, &(0x7f0000005300), &(0x7f0000005340)=0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r15, 0x6, 0xd, &(0x7f0000005380)='westwood', 0x8) 152.430127ms ago: executing program 2 (id=6079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xffa6}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x6020400) (async) unshare(0x6020400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @multicast2}, 0x2, 0x1, 0x4, 0x1}}, 0x26) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x48815, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r11, 0x0, 0x0, 0x48815, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000500)={r9, r9, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), 0x4) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xc, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 141.89933ms ago: executing program 0 (id=6080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x9) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001380)={0x12, 0x3, {0x4, @usage=0x5, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x0, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x80c, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x4, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff8]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x4, 0xe, 0xffff, 0x92, @usage=0xcb, 0x1, 0x800, [0x8000000000000001, 0x6, 0xfffffffffffffffc, 0xecb1, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd70000100001401000000140001"], 0x28}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002380)={{r3}, r9, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r10}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x3ff, 0xc511}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000400)={r14, 0x8}, 0x8) recvfrom$inet(r7, &(0x7f0000000480), 0x0, 0xc9100120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 0s ago: executing program 3 (id=6081): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r2, &(0x7f0000000480)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x80) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a0302000000000000000002000000090002"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r9, 0x0, r9, &(0x7f0000000500), 0xff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x34, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, r0, r0, r10, r6], 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device bond5 [ 788.908028][T26687] FAULT_INJECTION: forcing a failure. [ 788.908028][T26687] name failslab, interval 1, probability 0, space 0, times 0 [ 788.908659][T26687] CPU: 1 UID: 0 PID: 26687 Comm: syz.3.4804 Not tainted syzkaller #0 PREEMPT(full) [ 788.908746][T26687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.908783][T26687] Call Trace: [ 788.908813][T26687] [ 788.908838][T26687] dump_stack_lvl+0xe8/0x150 [ 788.908947][T26687] should_fail_ex+0x410/0x560 [ 788.909058][T26687] ? __alloc_skb+0x1db/0x7a0 [ 788.909148][T26687] should_failslab+0xa8/0x100 [ 788.909210][T26687] ? __alloc_skb+0x1db/0x7a0 [ 788.909297][T26687] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 788.909390][T26687] ? __alloc_skb+0x18d/0x7a0 [ 788.909474][T26687] ? __alloc_skb+0x1db/0x7a0 [ 788.909582][T26687] __alloc_skb+0x1db/0x7a0 [ 788.909704][T26687] netlink_sendmsg+0x5d4/0xb40 [ 788.909920][T26687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.910011][T26687] ? apparmor_socket_sendmsg+0x98/0x360 [ 788.910111][T26687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.910184][T26687] sock_sendmsg_nosec+0x13a/0x180 [ 788.910275][T26687] ____sys_sendmsg+0x54e/0x850 [ 788.910353][T26687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.910442][T26687] ? import_iovec+0x73/0xa0 [ 788.910531][T26687] ___sys_sendmsg+0x2a5/0x360 [ 788.910587][T26687] ? __lock_acquire+0x6df/0x2e50 [ 788.910662][T26687] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.910836][T26687] ? __fget_files+0x2a/0x420 [ 788.910911][T26687] ? __fget_files+0x3a2/0x420 [ 788.911024][T26687] __x64_sys_sendmsg+0x1b1/0x290 [ 788.911113][T26687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.911236][T26687] do_syscall_64+0x166/0x520 [ 788.911322][T26687] ? trace_irq_disable+0x3b/0x140 [ 788.911379][T26687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.911448][T26687] ? clear_bhb_loop+0x70/0xc0 [ 788.911526][T26687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.911584][T26687] RIP: 0033:0x7f502b59e159 [ 788.911645][T26687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.911702][T26687] RSP: 002b:00007f502c4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.911766][T26687] RAX: ffffffffffffffda RBX: 00007f502b825fa0 RCX: 00007f502b59e159 [ 788.911810][T26687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 788.911853][T26687] RBP: 00007f502c4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 788.911887][T26687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.911930][T26687] R13: 00007f502b826038 R14: 00007f502b825fa0 R15: 00007ffdc952d588 [ 788.912018][T26687] [ 789.344447][T26692] pimreg: entered allmulticast mode [ 789.354298][T26692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4805'. [ 789.367331][T26692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4805'. [ 789.435352][T26694] team0: entered promiscuous mode [ 789.443600][T26694] team_slave_0: entered promiscuous mode [ 789.450332][T26694] team_slave_1: entered promiscuous mode [ 789.457691][T26694] team0: entered allmulticast mode [ 789.463453][T26694] team_slave_0: entered allmulticast mode [ 789.472409][T26694] team_slave_1: entered allmulticast mode [ 789.483436][T26695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4805'. [ 789.501878][T26694] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.524859][T26694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4806'. [ 789.637922][T26699] pim6reg99999999: entered allmulticast mode [ 790.073826][T26714] netlink: 'syz.2.4812': attribute type 2 has an invalid length. [ 791.354814][T26749] netlink: Invalid conntrack helper [ 791.355065][T26749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.699349][T26752] macsec2: entered promiscuous mode [ 791.705047][T26752] hsr0: entered promiscuous mode [ 792.051136][T26761] FAULT_INJECTION: forcing a failure. [ 792.051136][T26761] name failslab, interval 1, probability 0, space 0, times 0 [ 792.069358][T26761] CPU: 0 UID: 0 PID: 26761 Comm: syz.1.4827 Not tainted syzkaller #0 PREEMPT(full) [ 792.069393][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.069409][T26761] Call Trace: [ 792.069420][T26761] [ 792.069431][T26761] dump_stack_lvl+0xe8/0x150 [ 792.069473][T26761] should_fail_ex+0x410/0x560 [ 792.069518][T26761] should_failslab+0xa8/0x100 [ 792.069551][T26761] __kmalloc_cache_noprof+0xa3/0x600 [ 792.069591][T26761] ? qdisc_get_rtab+0x105/0x480 [ 792.069746][T26761] ? qdisc_get_rtab+0x105/0x480 [ 792.069787][T26761] qdisc_get_rtab+0x105/0x480 [ 792.069822][T26761] ? htb_change_class+0x5a3/0x2c30 [ 792.069920][T26761] htb_change_class+0x5b5/0x2c30 [ 792.069978][T26761] ? __pfx_htb_change_class+0x10/0x10 [ 792.070007][T26761] ? __lock_acquire+0x6df/0x2e50 [ 792.070064][T26761] ? lockdep_rtnl_is_held+0x26/0x40 [ 792.070127][T26761] ? qdisc_lookup+0x179/0x6c0 [ 792.070171][T26761] tc_ctl_tclass+0xae1/0x1600 [ 792.070206][T26761] ? lock_acquire+0x115/0x350 [ 792.070243][T26761] ? __pfx___mutex_trylock_common+0x10/0x10 [ 792.070275][T26761] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 792.070311][T26761] ? rcu_is_watching+0x16/0xb0 [ 792.070341][T26761] ? trace_contention_end+0x3d/0x140 [ 792.070374][T26761] ? __mutex_lock+0x30b/0x1550 [ 792.070412][T26761] ? __kernel_text_address+0xd/0x30 [ 792.070439][T26761] ? unwind_get_return_address+0x4d/0x90 [ 792.070488][T26761] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 792.070571][T26761] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 792.070607][T26761] rtnetlink_rcv_msg+0x7b9/0xc00 [ 792.070673][T26761] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 792.070717][T26761] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 792.070754][T26761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 792.070794][T26761] ? __lock_acquire+0x6df/0x2e50 [ 792.070844][T26761] netlink_rcv_skb+0x226/0x4a0 [ 792.070877][T26761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 792.070917][T26761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.070963][T26761] ? netlink_deliver_tap+0x2e/0x1b0 [ 792.070993][T26761] ? netlink_deliver_tap+0x2e/0x1b0 [ 792.071030][T26761] netlink_unicast+0x7bd/0x940 [ 792.071070][T26761] netlink_sendmsg+0x813/0xb40 [ 792.071112][T26761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.071153][T26761] ? apparmor_socket_sendmsg+0x98/0x360 [ 792.071194][T26761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.071224][T26761] sock_sendmsg_nosec+0x13a/0x180 [ 792.071261][T26761] ____sys_sendmsg+0x54e/0x850 [ 792.071296][T26761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.071334][T26761] ? import_iovec+0x73/0xa0 [ 792.071365][T26761] ___sys_sendmsg+0x2a5/0x360 [ 792.071391][T26761] ? __lock_acquire+0x6df/0x2e50 [ 792.071421][T26761] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.071497][T26761] ? __fget_files+0x2a/0x420 [ 792.071528][T26761] ? __fget_files+0x3a2/0x420 [ 792.071577][T26761] __x64_sys_sendmsg+0x1b1/0x290 [ 792.071608][T26761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.071660][T26761] do_syscall_64+0x166/0x520 [ 792.071715][T26761] ? trace_irq_disable+0x3b/0x140 [ 792.071739][T26761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.071765][T26761] ? clear_bhb_loop+0x70/0xc0 [ 792.071797][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.071822][T26761] RIP: 0033:0x7f15a019e159 [ 792.071856][T26761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.071879][T26761] RSP: 002b:00007f15a1025028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.071907][T26761] RAX: ffffffffffffffda RBX: 00007f15a0425fa0 RCX: 00007f15a019e159 [ 792.071927][T26761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 792.071943][T26761] RBP: 00007f15a1025090 R08: 0000000000000000 R09: 0000000000000000 [ 792.071960][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.071976][T26761] R13: 00007f15a0426038 R14: 00007f15a0425fa0 R15: 00007ffe59485018 [ 792.072017][T26761] [ 792.292672][T26762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4819'. [ 795.699340][T26797] netlink: Unknown conntrack attr (type=10246, max=9) [ 795.699404][T26797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.740408][T26795] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 796.079662][T26795] ip6gretap0: left promiscuous mode [ 796.123977][T26795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.205711][T26795] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.294176][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4840'. [ 796.331601][T26795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.468159][T26795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.525758][T26795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 796.540769][T26795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 796.609321][T26795] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 797.252440][T26836] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 797.664906][T26847] bridge0: entered promiscuous mode [ 797.673597][T26847] bridge0: entered allmulticast mode [ 797.690117][T26847] team0: Port device bridge0 added [ 797.721208][T26850] bridge2: entered promiscuous mode [ 797.726911][T26850] bridge2: entered allmulticast mode [ 797.738600][T26850] team0: Port device bridge2 added [ 798.638827][T26855] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4852'. [ 799.944859][T26889] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 800.052835][T26906] netlink: 'syz.0.4861': attribute type 2 has an invalid length. [ 800.375401][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 801.048362][T26930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4871'. [ 802.315621][T26983] syzkaller0: entered promiscuous mode [ 802.316391][T26983] syzkaller0: entered allmulticast mode [ 802.435213][T26987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 802.435260][T26987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4879'. [ 803.148068][T27003] syzkaller0: entered promiscuous mode [ 803.148114][T27003] syzkaller0: entered allmulticast mode [ 803.174787][T27005] tipc: Enabled bearer , priority 0 [ 803.211457][T27003] tipc: Resetting bearer [ 803.305165][ T32] audit: type=1804 audit(1788825766.781:10): pid=27013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4885" name="/newroot/305/cgroup.controllers" dev="tmpfs" ino=1597 res=1 errno=0 [ 803.329104][ T32] audit: type=1800 audit(1788825766.811:11): pid=27013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4885" name="cgroup.controllers" dev="tmpfs" ino=1597 res=0 errno=0 [ 803.496864][T27019] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 803.610074][T27025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4889'. [ 803.656085][T27017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4887'. [ 803.663561][T27029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4887'. [ 803.741746][T26997] tipc: Resetting bearer [ 803.869307][T26997] tipc: Disabling bearer [ 804.511381][T27048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4894'. [ 804.567652][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4896'. [ 804.586826][T27056] netlink: 'syz.4.4896': attribute type 7 has an invalid length. [ 804.586916][T27056] netlink: 'syz.4.4896': attribute type 8 has an invalid length. [ 804.586937][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 804.729134][T27052] 8021q: adding VLAN 0 to HW filter on device bond14 [ 804.780968][T27052] bond13: (slave bond14): Enslaving as an active interface with an up link [ 804.826777][T27057] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 804.841141][T27048] 8021q: adding VLAN 0 to HW filter on device bond13 [ 804.863022][T27056] bridge0: entered promiscuous mode [ 804.991331][T27056] bridge0: left promiscuous mode [ 805.124509][T27070] tipc: Enabled bearer , priority 20 [ 805.293487][T27083] netlink: 'syz.1.4902': attribute type 10 has an invalid length. [ 805.312573][T27083] syz_tun: entered promiscuous mode [ 805.336866][T27083] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 805.468223][T27083] netlink: 'syz.1.4902': attribute type 10 has an invalid length. [ 805.813409][T27103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 806.009221][T27107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.177396][T27105] lo speed is unknown, defaulting to 1000 [ 806.202656][T27105] hsr0 speed is unknown, defaulting to 1000 [ 806.272916][T18834] tipc: Node number set to 59 [ 806.314790][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4909'. [ 806.315402][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4909'. [ 806.701364][T27126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4911'. [ 807.319667][ T6256] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.319749][ T6256] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.319811][ T6256] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.319855][ T6256] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.034495][T27212] lo speed is unknown, defaulting to 1000 [ 809.053422][T27212] hsr0 speed is unknown, defaulting to 1000 [ 809.479569][T27238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.479617][T27238] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.549603][ T1113] IPVS: starting estimator thread 0... [ 809.648703][T27244] IPVS: using max 25 ests per chain, 60000 per kthread [ 809.712791][T27253] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.785779][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.798972][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.809174][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.809440][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.809701][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.809950][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 809.810186][T27256] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4946'. [ 810.003323][T27261] SET target dimension over the limit! [ 810.781798][T27250] syzkaller0: entered promiscuous mode [ 810.781858][T27250] syzkaller0: entered allmulticast mode [ 815.600356][T27271] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 815.981428][T27297] __nla_validate_parse: 73 callbacks suppressed [ 815.987928][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4955'. [ 816.101976][T27296] ipip0: entered promiscuous mode [ 816.102896][T27296] ipip0: entered allmulticast mode [ 816.185140][T27307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4958'. [ 816.426649][T27311] tipc: Enabling of bearer rejected, already enabled [ 816.496246][T27305] syzkaller0: mtu less than device minimum [ 816.582848][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4961'. [ 816.926577][T27321] bond0: (slave syz_tun): Releasing backup interface [ 816.934977][T27333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4962'. [ 817.022681][T27321] bond0: (slave bond_slave_0): Releasing backup interface [ 817.098211][T27321] bond0: (slave bond_slave_1): Releasing backup interface [ 817.365518][T27345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4968'. [ 817.375832][T27321] team0: Port device team_slave_0 removed [ 817.394458][T27347] netlink: 'syz.4.4965': attribute type 13 has an invalid length. [ 817.473080][T27321] team0: Port device team_slave_1 removed [ 817.492246][T27321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.502292][T27321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.524140][T27321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 817.632321][T27344] netlink: 'syz.2.4967': attribute type 11 has an invalid length. [ 818.051058][T27348] tipc: Enabling of bearer rejected, media not registered [ 818.059380][ T6412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 818.207957][T27364] IPv6: NLM_F_CREATE should be specified when creating new route [ 818.208073][T27364] IPv6: Can't replace route, no match found [ 818.540919][T27373] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4976'. [ 818.551256][T27373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 818.699895][ T6416] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 818.807527][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4975'. [ 819.016410][T27377] lo speed is unknown, defaulting to 1000 [ 819.026271][T27377] hsr0 speed is unknown, defaulting to 1000 [ 819.449663][T27390] tipc: New replicast peer: 255.255.255.255 [ 819.488833][T27390] tipc: Enabled bearer , priority 10 [ 819.930965][T27407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.459573][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4983'. [ 820.976567][T27448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4989'. [ 821.511431][T27458] netlink: 'syz.3.4991': attribute type 20 has an invalid length. [ 821.511476][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4991'. [ 821.557831][T27458] netlink: 'syz.3.4991': attribute type 20 has an invalid length. [ 821.570903][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4991'. [ 821.633685][T27461] netlink: Conntrack attr has 8 unknown bytes [ 821.641667][T27461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.656333][T27461] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4992'. [ 822.165271][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 822.165327][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4996'. [ 822.279325][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 822.279383][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4996'. [ 822.280039][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 822.303527][ T6268] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.313877][T27185] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.314042][T27185] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.314084][T27185] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.362950][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4996'. [ 823.288178][T27510] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5000'. [ 823.553612][T27517] xt_hl: Unknown TTL match mode: 237 [ 825.343503][T27529] Cannot find del_set index 2 as target [ 825.575000][T27545] netlink: 'syz.0.5007': attribute type 12 has an invalid length. [ 826.301311][T27570] 8021q: VLANs not supported on wg2 [ 826.357454][T27576] netlink: 'syz.3.5015': attribute type 4 has an invalid length. [ 826.360444][T27579] netlink: 'syz.3.5015': attribute type 4 has an invalid length. [ 826.951428][T27592] netlink: 'syz.0.5014': attribute type 4 has an invalid length. [ 827.015712][T27577] __nla_validate_parse: 1 callbacks suppressed [ 827.015759][T27577] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5014'. [ 827.393014][T27580] lo speed is unknown, defaulting to 1000 [ 827.422177][T27580] hsr0 speed is unknown, defaulting to 1000 [ 828.870769][T27644] syzkaller1: entered promiscuous mode [ 828.871651][T27644] syzkaller1: entered allmulticast mode [ 829.021290][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5025'. [ 829.042321][T27648] netlink: 'syz.2.5029': attribute type 1 has an invalid length. [ 829.042364][T27648] netlink: 'syz.2.5029': attribute type 2 has an invalid length. [ 829.068987][T27648] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 829.237125][T27656] netlink: 'syz.2.5030': attribute type 13 has an invalid length. [ 829.337407][T27657] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5028'. [ 829.396744][T27657] unsupported nlmsg_type 40 [ 829.574202][T27656] hsr0: left promiscuous mode [ 830.617927][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5039'. [ 830.791069][T27707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.973544][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 830.974009][T27712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5043'. [ 831.313729][T27730] veth1_to_bond: entered allmulticast mode [ 831.381123][T27735] veth1_to_bond: entered promiscuous mode [ 831.397377][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'. [ 831.565407][T27739] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 831.637786][T27735] veth1_to_bond (unregistering): left promiscuous mode [ 831.649319][T27735] veth1_to_bond (unregistering): left allmulticast mode [ 831.744932][T27735] bond0: (slave bond_slave_1): Releasing backup interface [ 831.756728][T27735] bond_slave_1 (unregistering): left allmulticast mode [ 831.894683][T27739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 831.970522][T27742] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 831.972913][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 831.975237][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 831.977523][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.019870][T27742] __nla_validate_parse: 6 callbacks suppressed [ 832.020104][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.059758][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.102107][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.103164][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.104138][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.105182][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.106225][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.107274][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.149916][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.156012][T27742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 832.403869][T27753] netlink: 'syz.4.5055': attribute type 1 has an invalid length. [ 832.650368][T27760] syzkaller0: entered promiscuous mode [ 832.657744][T27760] syzkaller0: entered allmulticast mode [ 833.239129][T27189] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.239419][T27189] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.239924][T27189] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.240031][T27189] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.355106][T27774] syzkaller0: entered promiscuous mode [ 833.371973][T27774] syzkaller0: entered allmulticast mode [ 833.383998][T27774] tipc: Enabled bearer , priority 0 [ 833.540773][T27779] tipc: Resetting bearer [ 833.610437][T27774] bridge4: entered allmulticast mode [ 833.699991][T27773] tipc: Resetting bearer [ 833.757885][T27773] tipc: Disabling bearer [ 833.794028][T27785] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 834.297420][T27827] xt_nfacct: accounting object `syz0' does not exist [ 834.692109][T27841] siw: device registration error -23 [ 835.379500][T27848] netlink: 'syz.0.5074': attribute type 12 has an invalid length. [ 835.379545][T27848] netlink: 'syz.0.5074': attribute type 29 has an invalid length. [ 835.379586][T27848] netlink: 'syz.0.5074': attribute type 1 has an invalid length. [ 835.379606][T27848] netlink: 'syz.0.5074': attribute type 2 has an invalid length. [ 835.379625][T27848] netlink: 'syz.0.5074': attribute type 3 has an invalid length. [ 835.477645][T27859] ip6gre1: entered promiscuous mode [ 835.480538][T27859] ip6gre1: entered allmulticast mode [ 835.668991][T27866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.643967][T27900] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 836.697639][T27900] bond2 (unregistering): Released all slaves [ 837.886161][T27929] openvswitch: netlink: Unknown key attributes 2 [ 842.897672][T27933] syzkaller0: entered promiscuous mode [ 842.907015][T27933] syzkaller0: entered allmulticast mode [ 843.344286][T27979] __nla_validate_parse: 22 callbacks suppressed [ 843.344340][T27979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5096'. [ 843.594730][T27976] bond11: option min_links: invalid value (18446744073709551612) [ 843.605408][T27976] bond11: option min_links: allowed values 0 - 2147483647 [ 843.763529][T27976] bond11 (unregistering): Released all slaves [ 844.206367][T27979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.326253][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5101'. [ 844.348236][T28001] dummy0: mtu less than device minimum [ 844.515175][T27979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.532279][T28006] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5104'. [ 844.782445][T27979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.113888][T28021] syzkaller0: entered promiscuous mode [ 845.113945][T28021] syzkaller0: entered allmulticast mode [ 845.178042][T28021] sit0: entered promiscuous mode [ 845.183779][T28021] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 845.195293][T28021] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5107'. [ 845.247178][T28021] syzkaller1: entered promiscuous mode [ 845.247223][T28021] syzkaller1: entered allmulticast mode [ 845.906792][T27979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.262269][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5108'. [ 846.271248][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5108'. [ 846.293535][T28027] netlink: zone id is out of range [ 846.293745][T28027] netlink: zone id is out of range [ 846.294548][T28027] netlink: zone id is out of range [ 846.294763][T28027] netlink: zone id is out of range [ 846.294967][T28027] netlink: zone id is out of range [ 846.300681][T28027] netlink: zone id is out of range [ 846.313767][T28027] netlink: zone id is out of range [ 846.313781][T28027] netlink: zone id is out of range [ 846.313790][T28027] netlink: zone id is out of range [ 846.900269][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5110'. [ 847.209454][T28038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5111'. [ 847.262958][T28046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'. [ 847.272974][T28046] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5113'. [ 847.864141][T28058] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 847.872743][T28058] netlink: 'syz.2.5116': attribute type 2 has an invalid length. [ 848.012771][T28063] Bluetooth: MGMT ver 1.23 [ 848.442268][T28067] tipc: Enabled bearer , priority 0 [ 848.540807][T28078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5122'. [ 848.586239][T28073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5121'. [ 848.895495][T28067] syzkaller0: entered promiscuous mode [ 848.895544][T28067] syzkaller0: entered allmulticast mode [ 848.914997][T28067] tipc: Resetting bearer [ 849.079545][T28066] tipc: Resetting bearer [ 849.545662][T27188] tipc: Subscription rejected, illegal request [ 849.909805][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 851.310017][T28119] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 855.876324][T28066] tipc: Disabling bearer [ 856.432998][T28142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5132'. [ 856.444732][T28142] 8021q: VLANs not supported on sit0 [ 856.565270][ T32] audit: type=1800 audit(1788825820.041:12): pid=28146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5129" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1826 res=0 errno=0 [ 856.590178][T28146] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5129'. [ 857.424902][T28164] netlink: 'syz.2.5135': attribute type 10 has an invalid length. [ 857.562447][T28164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.626840][T28164] team0: Port device netdevsim1 added [ 857.813186][T28167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5137'. [ 857.813240][T28167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5137'. [ 857.813279][T28167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5137'. [ 857.885050][T28167] syzkaller0: entered promiscuous mode [ 857.885096][T28167] syzkaller0: entered allmulticast mode [ 858.146661][T28178] net_ratelimit: 497 callbacks suppressed [ 858.146725][T28178] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 858.665469][T28184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5141'. [ 859.255875][T28204] bond11: ARP target 9.0.0.0 is already present [ 859.256352][T28204] bond11: option arp_ip_target: invalid value (9) [ 859.346974][T28204] bond11 (unregistering): Released all slaves [ 859.715194][T28215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5148'. [ 859.802655][T28217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.148767][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 860.410048][T28238] netlink: 'syz.2.5154': attribute type 16 has an invalid length. [ 860.410121][T28238] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5154'. [ 860.435585][T28229] vlan3: entered promiscuous mode [ 860.444669][T28229] macvlan0: entered promiscuous mode [ 860.827231][T28242] : entered allmulticast mode [ 861.022044][T28247] x_tables: duplicate underflow at hook 4 [ 861.202627][T28242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.430149][T28253] syz_tun: entered allmulticast mode [ 861.460982][T28251] syz_tun: left allmulticast mode [ 861.567540][T28242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.632959][T28241] : left allmulticast mode [ 861.945573][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5164'. [ 861.946125][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5164'. [ 862.129558][T28242] .`: (slave netdevsim1): Releasing backup interface [ 862.258909][T28242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.962901][T28242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.995116][T28298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5169'. [ 863.166142][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 863.395432][T28298] netlink: 'syz.2.5169': attribute type 9 has an invalid length. [ 863.417583][T28306] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 863.452061][T28306] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 863.934186][T28314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 864.013905][T28322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5170'. [ 864.120730][T28326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5174'. [ 864.140285][ T6260] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.227602][ T6268] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.345225][ T6268] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.367791][ T6268] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.787686][T28341] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5176'. [ 865.672470][T28371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.124402][T28386] block nbd1: shutting down sockets [ 866.913715][T28398] netlink: 'syz.1.5186': attribute type 1 has an invalid length. [ 866.957460][T28396] netlink: Failed to add GPL helper -22 [ 866.958923][T28396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.462082][T28404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'. [ 867.795372][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 867.850317][T28416] vlan3: entered allmulticast mode [ 867.855593][T28416] bridge4: entered allmulticast mode [ 867.915023][T28419] bridge0: port 3(wlan1) entered blocking state [ 867.941211][T28421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5190'. [ 867.963342][T28419] bridge0: port 3(wlan1) entered disabled state [ 867.976498][T28419] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 868.077020][T28419] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 868.146809][T28416] bridge4: port 1(erspan0) entered blocking state [ 868.155857][T28416] bridge4: port 1(erspan0) entered disabled state [ 868.156071][T28416] erspan0: entered allmulticast mode [ 868.267864][T28428] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5193'. [ 868.722328][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5197'. [ 869.403669][T28455] x9: renamed from bridge_slave_0 (while UP) [ 872.232920][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5202'. [ 872.233452][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5202'. [ 872.233578][T28464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5202'. [ 872.342272][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5204'. [ 872.443971][T28470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 872.477711][T28470] team0: No ports can be present during mode change [ 872.509340][T28470] vlan0: entered promiscuous mode [ 872.515887][T28470] bond6: entered promiscuous mode [ 872.515951][T28470] geneve4: entered promiscuous mode [ 872.546777][T28470] tipc: Started in network mode [ 872.556288][T28470] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 872.556509][T28470] tipc: Enabled bearer , priority 0 [ 872.700905][T28473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.732082][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5210'. [ 872.878121][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5208'. [ 873.075095][T28485] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 873.095654][T28493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5208'. [ 873.133558][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.133931][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.318811][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.318993][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.319136][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.319258][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.319379][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.319536][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.319991][T28506] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5214'. [ 873.482269][T28504] lo speed is unknown, defaulting to 1000 [ 873.527148][T28504] hsr0 speed is unknown, defaulting to 1000 [ 873.562696][T28514] netlink: 'syz.2.5216': attribute type 10 has an invalid length. [ 873.576293][T28497] lo speed is unknown, defaulting to 1000 [ 873.600525][T28497] hsr0 speed is unknown, defaulting to 1000 [ 873.606947][T28507] syzkaller0: entered promiscuous mode [ 873.607728][T28507] syzkaller0: entered allmulticast mode [ 873.639990][T28506] openvswitch: netlink: Flow actions attr not present in new flow. [ 873.747223][T28518] netlink: 'syz.2.5216': attribute type 10 has an invalid length. [ 873.787758][T28522] netlink: 'syz.1.5217': attribute type 10 has an invalid length. [ 873.900056][ T6416] tipc: Node number set to 11578026 [ 874.010616][T28521] netlink: 'syz.1.5217': attribute type 1 has an invalid length. [ 874.270351][T28521] 8021q: adding VLAN 0 to HW filter on device bond11 [ 875.223465][T28556] pim6reg1: entered allmulticast mode [ 876.402447][T28581] sctp: [Deprecated]: syz.4.5228 (pid 28581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.402447][T28581] Use struct sctp_sack_info instead [ 876.405999][T28581] x_tables: duplicate underflow at hook 4 [ 876.536865][T28581] netlink: 'syz.4.5228': attribute type 12 has an invalid length. [ 876.536909][T28581] netlink: 'syz.4.5228': attribute type 29 has an invalid length. [ 876.536952][T28581] netlink: 'syz.4.5228': attribute type 1 has an invalid length. [ 876.536972][T28581] netlink: 'syz.4.5228': attribute type 2 has an invalid length. [ 877.214230][T28605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.215029][T28605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.239270][T28605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.243249][T28605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.229670][T28628] __nla_validate_parse: 101 callbacks suppressed [ 878.230438][T28628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5240'. [ 878.586453][T28628] hsr_slave_1 (unregistering): left promiscuous mode [ 878.749459][T28646] tun0: tun_chr_ioctl cmd 2148553947 [ 878.755398][T28647] tun0: tun_chr_ioctl cmd 2148553947 [ 879.104550][T28665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5248'. [ 879.395800][T28676] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5249'. [ 879.614479][T28688] xt_hashlimit: max too large, truncated to 1048576 [ 879.625987][T28688] xt_hashlimit: overflow, try lower: 0/0 [ 879.634792][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 879.645657][T28688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5251'. [ 879.825104][T28684] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 879.859055][T28684] bond7 (unregistering): Released all slaves [ 879.922515][T28696] openvswitch: netlink: IP tunnel dst address not specified [ 880.034507][T28692] vlan4: entered promiscuous mode [ 880.039965][T28692] bond0: entered promiscuous mode [ 880.039989][T28692] bond_slave_0: entered promiscuous mode [ 880.040237][T28692] bond_slave_1: entered promiscuous mode [ 880.325786][T28701] block nbd1: server does not support multiple connections per device. [ 880.337420][T28701] block nbd1: shutting down sockets [ 880.582008][ T5277] veth0_macvtap: left promiscuous mode [ 881.035947][T28721] openvswitch: netlink: Key type 226 is out of range max 32 [ 881.583026][T28750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5261'. [ 884.128604][T28746] lo speed is unknown, defaulting to 1000 [ 884.128702][T28746] lo speed is unknown, defaulting to 1000 [ 884.145733][T28746] lo speed is unknown, defaulting to 1000 [ 884.155899][T28748] erspan0: left promiscuous mode [ 884.175943][T28746] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 884.176010][T28746] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 884.176077][T28746] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 884.250456][T28748] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 884.265844][T28748] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 884.289292][T18835] lo speed is unknown, defaulting to 1000 [ 884.326655][T28746] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 884.365179][T28746] lo speed is unknown, defaulting to 1000 [ 884.374241][T28746] lo speed is unknown, defaulting to 1000 [ 884.382946][T28746] lo speed is unknown, defaulting to 1000 [ 884.393919][T28746] lo speed is unknown, defaulting to 1000 [ 884.403297][T28746] lo speed is unknown, defaulting to 1000 [ 884.450021][T28746] lo speed is unknown, defaulting to 1000 [ 884.475248][T28746] lo speed is unknown, defaulting to 1000 [ 884.549521][T28746] lo speed is unknown, defaulting to 1000 [ 884.942455][T28768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5262'. [ 884.942508][T28768] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5262'. [ 884.985742][T28777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'. [ 885.013909][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'. [ 885.093464][T28773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 885.107216][T28773] netlink: 'syz.3.5264': attribute type 34 has an invalid length. [ 885.108366][T28773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 885.158790][T28784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5266'. [ 885.235231][T28773] bond2: option lacp_strict: invalid value (71) [ 885.254610][T28773] bond2 (unregistering): Released all slaves [ 885.275142][T28784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.541737][T28784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.973587][T28797] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5269'. [ 886.118895][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5272'. [ 887.173111][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5278'. [ 887.189781][T28850] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 888.681947][T28900] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 889.195902][T28904] tipc: Resetting bearer [ 889.204679][T28904] tipc: Resetting bearer [ 889.621133][T28929] netlink: 'syz.4.5294': attribute type 29 has an invalid length. [ 890.243780][T28948] netlink: 'syz.4.5302': attribute type 34 has an invalid length. [ 890.243826][T28948] __nla_validate_parse: 9 callbacks suppressed [ 890.243857][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 890.295684][T28952] netlink: 'syz.2.5303': attribute type 21 has an invalid length. [ 890.307725][T28952] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5303'. [ 890.763041][T28968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5308'. [ 891.421132][T28963] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5306'. [ 891.445382][T28963] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 891.667823][T28980] syzkaller0: entered promiscuous mode [ 891.676966][T28980] syzkaller0: entered allmulticast mode [ 892.642091][T29012] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 897.889867][T29012] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 898.023822][T29013] gretap1: entered allmulticast mode [ 898.201462][T29023] IPVS: Unknown mcast interface: lo [ 898.240467][T29026] IPVS: Unknown mcast interface: lo [ 898.327277][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'. [ 898.379853][T29029] netlink: 'syz.2.5316': attribute type 4 has an invalid length. [ 898.668114][T29047] xt_MASQUERADE: bad rangesize 20224 [ 898.683316][ T6407] lo speed is unknown, defaulting to 1000 [ 898.683683][ T6407] syz0: Port: 1 Link DOWN [ 898.696064][T29037] netlink: 'syz.4.5317': attribute type 1 has an invalid length. [ 898.696091][T29037] netlink: 'syz.4.5317': attribute type 2 has an invalid length. [ 900.041908][T29083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5326'. [ 900.136221][T29046] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 900.146098][ C0] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 900.537191][T29101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5330'. [ 900.765595][T29109] SET target dimension over the limit! [ 901.554105][T29126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 901.958739][T29136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.705526][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'. [ 902.826145][T29161] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5341'. [ 905.077082][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5340'. [ 905.279884][T29159] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 905.294815][T29161] tap0: tun_chr_ioctl cmd 2148553947 [ 905.371653][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5340'. [ 905.423119][T29171] IPVS: set_ctl: invalid protocol: 2 172.20.20.56:3617 [ 905.648849][ T6260] tipc: Subscription rejected, illegal request [ 905.676200][T29174] netlink: 564 bytes leftover after parsing attributes in process `syz.4.5344'. [ 906.318416][T29191] netlink: 'syz.2.5348': attribute type 1 has an invalid length. [ 906.424632][T29193] netlink: 328 bytes leftover after parsing attributes in process `syz.2.5348'. [ 906.424748][T29193] netlink: 'syz.2.5348': attribute type 9 has an invalid length. [ 906.424794][T29193] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5348'. [ 906.424815][T29193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5348'. [ 906.496139][T29191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 906.607560][T29204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5350'. [ 906.607612][T29204] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5350'. [ 906.607658][T29204] netlink: 'syz.4.5350': attribute type 5 has an invalid length. [ 906.607678][T29204] netlink: 'syz.4.5350': attribute type 6 has an invalid length. [ 906.607697][T29204] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5350'. [ 907.344938][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 907.415274][T29222] lo speed is unknown, defaulting to 1000 [ 907.439431][T29222] hsr0 speed is unknown, defaulting to 1000 [ 907.450729][T29222] lo speed is unknown, defaulting to 1000 [ 907.532137][T29226] geneve3: entered promiscuous mode [ 907.789595][ T6260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.789670][ T6260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.789749][ T6260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.789792][ T6260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.041996][T29222] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 908.317543][T29257] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 908.910472][T29267] ip_tables: iptables: counters copy to user failed while replacing table [ 909.127997][T29270] lo speed is unknown, defaulting to 1000 [ 909.141050][T29270] hsr0 speed is unknown, defaulting to 1000 [ 909.150504][T29270] lo speed is unknown, defaulting to 1000 [ 909.610813][T29287] ipt_ECN: cannot use operation on non-tcp rule [ 909.753565][T29289] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 909.817391][T29270] lo speed is unknown, defaulting to 1000 [ 909.853285][T29270] hsr0 speed is unknown, defaulting to 1000 [ 909.866044][T29270] lo speed is unknown, defaulting to 1000 [ 910.107698][T29296] __nla_validate_parse: 9 callbacks suppressed [ 910.114648][T29296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5375'. [ 910.803595][T29314] netlink: 'syz.3.5380': attribute type 13 has an invalid length. [ 910.896259][T29312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5381'. [ 910.915165][ T4932] block nbd1: Receive control failed (result -1) [ 911.091697][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5382'. [ 911.115124][ T4932] block nbd8: Receive control failed (result -1) [ 911.679801][T29334] netlink: 'syz.1.5387': attribute type 21 has an invalid length. [ 911.679857][T29334] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5387'. [ 911.681011][T29334] netlink: 'syz.1.5387': attribute type 4 has an invalid length. [ 911.681064][T29334] netlink: 'syz.1.5387': attribute type 3 has an invalid length. [ 911.681106][T29334] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5387'. [ 912.027806][T29336] Bluetooth: hci0: unsupported parameter 5135 [ 912.027872][T29336] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 912.243674][T29346] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 912.366207][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5392'. [ 912.726733][T29371] netlink: 'syz.0.5396': attribute type 34 has an invalid length. [ 912.726784][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5396'. [ 912.862489][T29371] bond15: option lacp_strict: invalid value (64) [ 912.879924][T29371] bond15 (unregistering): Released all slaves [ 912.916688][T29379] netlink: 'syz.1.5399': attribute type 5 has an invalid length. [ 913.079124][T29381] syzkaller0: entered promiscuous mode [ 913.079171][T29381] syzkaller0: entered allmulticast mode [ 913.115332][T29381] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.5398'. [ 913.115798][T29381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'. [ 913.115863][T29381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'. [ 915.120575][T29419] __nla_validate_parse: 2 callbacks suppressed [ 915.120813][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 915.593745][T29434] syz.0.5411 (29434) used obsolete PPPIOCDETACH ioctl [ 915.740546][T29440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5413'. [ 915.807699][T29442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5413'. [ 915.822564][T29443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5413'. [ 915.956454][T29448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5414'. [ 916.144270][T29447] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000 [ 916.227378][T29458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5416'. [ 916.327863][T29458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5416'. [ 917.230968][T29483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.232264][T29480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5421'. [ 917.793917][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5424'. [ 918.196760][T29514] lo speed is unknown, defaulting to 1000 [ 918.217208][T29514] hsr0 speed is unknown, defaulting to 1000 [ 918.231338][T29514] lo speed is unknown, defaulting to 1000 [ 918.457832][T29524] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 918.570784][T29523] netlink: 'syz.3.5429': attribute type 15 has an invalid length. [ 918.571030][T29523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5429'. [ 918.879288][T29536] rdma_rxe: rxe_newlink: failed to add bond0 [ 920.464698][T29569] __nla_validate_parse: 3 callbacks suppressed [ 920.465290][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 920.550353][T29580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 920.677036][T29571] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 920.678903][ C1] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 920.878651][T29590] netlink: 'syz.0.5445': attribute type 4 has an invalid length. [ 920.985994][T29591] netlink: 'syz.3.5446': attribute type 83 has an invalid length. [ 920.994876][T29594] netlink: 'syz.3.5446': attribute type 83 has an invalid length. [ 921.632355][T29605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 921.632420][T29605] netlink: 'syz.2.5448': attribute type 30 has an invalid length. [ 921.657079][T29603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 921.657615][T29603] netlink: 'syz.2.5448': attribute type 30 has an invalid length. [ 921.758468][ C1] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 921.762205][ C1] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 921.996468][T29605] vxlan1: entered promiscuous mode [ 922.007268][T29605] vxlan1: entered allmulticast mode [ 922.030098][ T6268] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.043952][ T6268] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.044042][ T6268] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.044090][ T6268] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.536778][T29630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5452'. [ 922.592572][T29630] netlink: 179624 bytes leftover after parsing attributes in process `syz.3.5452'. [ 922.623495][T29635] xt_TPROXY: Can be used only with -p tcp or -p udp [ 922.913890][ T6242] IPVS: starting estimator thread 0... [ 923.011055][T29640] IPVS: using max 24 ests per chain, 57600 per kthread [ 923.077593][T29639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5455'. [ 923.451690][T29658] sit0: left promiscuous mode [ 923.692287][T29670] netlink: 'syz.4.5463': attribute type 1 has an invalid length. [ 923.702343][T29658] bond6: left allmulticast mode [ 923.737205][T29658] bond11: left promiscuous mode [ 923.786814][T29658] bridge4: left allmulticast mode [ 923.819658][T29658] geneve3: left promiscuous mode [ 923.863587][T29678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5466'. [ 923.957089][T29679] netlink: 'syz.1.5467': attribute type 3 has an invalid length. [ 923.957137][T29679] netlink: 'syz.1.5467': attribute type 1 has an invalid length. [ 923.957179][T29679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5467'. [ 923.998913][T29670] 8021q: adding VLAN 0 to HW filter on device bond19 [ 924.014919][ T6242] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.015176][ T6242] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.015417][ T6242] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.015631][ T6242] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.015853][ T6242] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.016071][ T6242] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.029565][T27189] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.029685][T27189] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.361658][T29688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.372944][T29677] bond19: (slave geneve2): making interface the new active one [ 924.508087][T29677] bond19: (slave geneve2): Enslaving as an active interface with an up link [ 925.301355][T29718] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 925.301407][T29718] netlink: 'syz.4.5471': attribute type 2 has an invalid length. [ 925.931607][T29736] tipc: Enabling of bearer rejected, already enabled [ 925.947590][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5477'. [ 926.416896][T29743] lo speed is unknown, defaulting to 1000 [ 926.433142][T29743] hsr0 speed is unknown, defaulting to 1000 [ 926.451551][T29743] lo speed is unknown, defaulting to 1000 [ 927.390519][T29765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5481'. [ 927.391849][T29768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5481'. [ 927.525993][T29771] netlink: 'syz.1.5482': attribute type 13 has an invalid length. [ 927.682774][T29771] tipc: Resetting bearer [ 928.502056][T29799] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.505473][T29799] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.707406][T29804] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 929.155757][T29825] netlink: zone id is out of range [ 929.155793][T29825] netlink: zone id is out of range [ 929.155819][T29825] netlink: zone id is out of range [ 929.155833][T29825] netlink: zone id is out of range [ 929.155847][T29825] netlink: zone id is out of range [ 929.155859][T29825] netlink: zone id is out of range [ 929.155877][T29825] netlink: zone id is out of range [ 929.155890][T29825] netlink: zone id is out of range [ 929.155903][T29825] netlink: zone id is out of range [ 929.155915][T29825] netlink: zone id is out of range [ 929.322050][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5495'. [ 929.404473][T29843] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5497'. [ 929.440367][T29844] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 929.475064][T29847] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5497'. [ 929.499592][T29825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5492'. [ 929.634842][T29844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.026909][T29867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5499'. [ 930.119937][T29873] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5503'. [ 930.264987][T29886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5499'. [ 932.571458][T29860] tipc: Resetting bearer [ 932.798511][T27189] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.798854][T27189] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.798998][T27189] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.799075][T27189] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.799183][T27189] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.799258][T27189] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.799362][T27189] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.799449][T27189] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.301071][T29904] syzkaller0: entered promiscuous mode [ 933.307044][T29904] syzkaller0: entered allmulticast mode [ 933.327083][T29907] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 933.488176][T29915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5506'. [ 934.676000][T29949] sctp: [Deprecated]: syz.0.5513 (pid 29949) Use of int in max_burst socket option. [ 934.676000][T29949] Use struct sctp_assoc_value instead [ 934.696821][T29950] xt_MASQUERADE: bad MAP_IPS. [ 935.125965][T29960] netlink: 'syz.3.5517': attribute type 9 has an invalid length. [ 935.187361][T27189] tipc: Subscription rejected, illegal request [ 935.268827][T29976] veth1_to_bond: entered allmulticast mode [ 935.277479][T29976] veth1_to_bond: entered promiscuous mode [ 935.285422][T29976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 935.304061][T29976] veth1_to_bond (unregistering): left promiscuous mode [ 935.311357][T29976] veth1_to_bond (unregistering): left allmulticast mode [ 935.343586][T29976] bond0: (slave bond_slave_1): Releasing backup interface [ 935.353305][T29976] bond_slave_1 (unregistering): left promiscuous mode [ 936.026548][T29999] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5524'. [ 936.026611][T29999] netlink: 'syz.2.5524': attribute type 2 has an invalid length. [ 936.026647][T29999] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 936.026669][T29999] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5524'. [ 936.253078][T30006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5523'. [ 936.457893][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'. [ 936.504942][T30007] vlan2: entered allmulticast mode [ 936.512725][T30007] bridge0: port 3(vlan2) entered blocking state [ 936.519921][T30007] bridge0: port 3(vlan2) entered disabled state [ 936.534193][T30007] vlan2: entered promiscuous mode [ 936.631696][T30014] syzkaller1: entered promiscuous mode [ 936.637332][T30014] syzkaller1: entered allmulticast mode [ 936.976831][T30018] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5527'. [ 936.977096][T30018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'. [ 937.307774][T30028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5529'. [ 937.575955][T30037] netlink: 'syz.0.5531': attribute type 1 has an invalid length. [ 938.946079][T30059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5536'. [ 939.075031][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5537'. [ 939.459807][T30082] netlink: 'syz.3.5539': attribute type 1 has an invalid length. [ 939.480015][T30076] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5539'. [ 940.135854][T30082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 940.169220][T30083] team0: left promiscuous mode [ 940.169263][T30083] team_slave_0: left promiscuous mode [ 940.169511][T30083] team_slave_1: left promiscuous mode [ 940.169692][T30083] team0: left allmulticast mode [ 940.169711][T30083] team_slave_0: left allmulticast mode [ 940.169730][T30083] team_slave_1: left allmulticast mode [ 940.286302][T30083] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.307158][T30083] bond5: (slave team0): Enslaving as an active interface with a down link [ 940.909661][T30115] net_ratelimit: 1705 callbacks suppressed [ 940.926386][T30115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.378147][T30137] tipc: Enabled bearer , priority 0 [ 941.546123][T30132] tipc: Resetting bearer [ 941.586942][T30132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5551'. [ 941.647812][T30130] tipc: Resetting bearer [ 941.934590][T30130] tipc: Disabling bearer [ 943.444628][T30161] tun0: tun_chr_ioctl cmd 1074025677 [ 943.445375][T30161] tun0: linktype set to 776 [ 943.667407][ T6410] lo speed is unknown, defaulting to 1000 [ 943.667458][ T6410] syz0: Port: 1 Link ACTIVE [ 943.704416][T30190] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5563'. [ 943.846716][T30203] netlink: 170676 bytes leftover after parsing attributes in process `syz.0.5565'. [ 943.859022][T30203] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 943.859077][T30203] openvswitch: netlink: Message has 512 unknown bytes. [ 943.935984][T30203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5565'. [ 944.296134][T30203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5565'. [ 945.123763][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5575'. [ 945.166464][T30242] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5574'. [ 945.231420][T30254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 945.250169][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 946.066145][T30275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5581'. [ 946.179973][ T6260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.181018][ T6260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.181088][ T6260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.181141][ T6260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.189453][T30278] xfrm0: Caught tx_queue_len zero misconfig [ 946.227917][T30278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5583'. [ 946.383323][T30281] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5584'. [ 947.109739][T30299] ip6tnl0: entered promiscuous mode [ 947.237048][T30303] netlink: 'syz.3.5590': attribute type 1 has an invalid length. [ 947.322906][T30311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5591'. [ 947.466493][T30317] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 947.532370][T30319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5589'. [ 947.570349][T30309] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 947.609700][T30312] macvlan4: entered promiscuous mode [ 947.615482][T30312] macvlan4: entered allmulticast mode [ 947.623400][T30312] bond6: entered promiscuous mode [ 947.629526][T30312] bridge6: entered promiscuous mode [ 947.636242][T30312] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 947.647506][T30312] bond6: left promiscuous mode [ 947.647563][T30312] bridge6: left promiscuous mode [ 948.795877][T30360] netlink: 'syz.2.5600': attribute type 11 has an invalid length. [ 949.022922][T30347] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 949.546346][T30379] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 949.571968][T30370] __nla_validate_parse: 46 callbacks suppressed [ 949.572023][T30370] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5602'. [ 949.648588][T30370] erspan0: left allmulticast mode [ 949.649688][T30370] erspan0: left promiscuous mode [ 949.651860][T30370] bridge1: port 1(erspan0) entered disabled state [ 949.773207][T30370] bond12: (slave ): Releasing backup interface [ 949.830921][T30370] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.877773][T30370] bridge_slave_1: left allmulticast mode [ 949.883886][T30370] bridge_slave_1: left promiscuous mode [ 949.890748][T30370] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.987508][T30370] .`: (slave bond_slave_0): Releasing backup interface [ 950.140721][T30370] .`: (slave bond_slave_1): Releasing backup interface [ 950.194370][T30370] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 950.302652][T30397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5607'. [ 950.495472][T30397] ip6gre1: entered promiscuous mode [ 950.497589][T30397] ip6gre1: entered allmulticast mode [ 950.571655][T30402] lo speed is unknown, defaulting to 1000 [ 950.583414][T30402] hsr0 speed is unknown, defaulting to 1000 [ 950.595255][T30402] lo speed is unknown, defaulting to 1000 [ 951.765615][T30455] netlink: 'syz.1.5619': attribute type 9 has an invalid length. [ 951.883329][T30463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5619'. [ 951.976027][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5621'. [ 952.057506][T30469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5621'. [ 952.069253][T30456] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 952.069748][T30456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.719390][T30464] netlink: 'syz.0.5621': attribute type 2 has an invalid length. [ 953.205783][T30506] xt_bpf: check failed: parse error [ 953.251805][T30503] xt_connbytes: Forcing CT accounting to be enabled [ 953.695839][T30504] lo speed is unknown, defaulting to 1000 [ 953.731673][T30504] hsr0 speed is unknown, defaulting to 1000 [ 953.751821][T30504] lo speed is unknown, defaulting to 1000 [ 954.030138][T30522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5630'. [ 954.196615][T30533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5633'. [ 954.217578][T30529] ip6erspan1: entered allmulticast mode [ 954.265398][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 954.276944][T30533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5633'. [ 954.278162][T30533] netlink: 'syz.0.5633': attribute type 12 has an invalid length. [ 954.278187][T30533] netlink: 'syz.0.5633': attribute type 11 has an invalid length. [ 954.312656][T30533] netlink: 'syz.0.5633': attribute type 15 has an invalid length. [ 954.323876][T30533] ip6tnl0: left promiscuous mode [ 954.901481][T30552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5636'. [ 955.234958][T30568] netlink: 'syz.4.5642': attribute type 1 has an invalid length. [ 955.356614][T30568] 8021q: adding VLAN 0 to HW filter on device bond20 [ 955.469419][T30568] netlink: 'syz.4.5642': attribute type 21 has an invalid length. [ 955.507428][T30568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5642'. [ 956.041266][T30589] ip_tables: iptables: counters copy to user failed while replacing table [ 956.068287][T30589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5644'. [ 956.096720][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 956.111464][T30592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5645'. [ 956.313031][T30595] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5646'. [ 956.324570][T30604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5646'. [ 956.360695][T30604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5646'. [ 957.197005][T30618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5652'. [ 957.197532][T30618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 958.107277][T30648] netlink: 'syz.4.5658': attribute type 1 has an invalid length. [ 958.471429][T30653] vlan3: entered promiscuous mode [ 958.476095][T30653] macvlan0: entered promiscuous mode [ 960.935901][T30658] erspan0: left allmulticast mode [ 960.951156][T30658] bridge4: port 1(erspan0) entered disabled state [ 960.981207][T30658] bond5: (slave team0): Releasing active interface [ 961.097253][T30658] bridge_slave_0: left allmulticast mode [ 961.099015][T30658] bridge_slave_0: left promiscuous mode [ 961.101525][T30658] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.155767][T30658] bridge_slave_1: left allmulticast mode [ 961.157044][T30658] bridge_slave_1: left promiscuous mode [ 961.161905][T30658] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.232416][T30658] bond0: (slave bond_slave_0): Releasing backup interface [ 961.254045][T30670] __nla_validate_parse: 4 callbacks suppressed [ 961.254100][T30670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5665'. [ 961.299022][T30658] bond_slave_0: left promiscuous mode [ 961.339235][T30658] team0: Port device team_slave_0 removed [ 961.363465][T30658] team0: Port device team_slave_1 removed [ 961.377534][T30658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 961.571935][T30678] lo speed is unknown, defaulting to 1000 [ 961.583443][T30678] hsr0 speed is unknown, defaulting to 1000 [ 961.592005][T30678] lo speed is unknown, defaulting to 1000 [ 961.924789][T30694] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5667'. [ 962.105624][T30697] netlink: 'syz.3.5671': attribute type 23 has an invalid length. [ 962.357829][T30709] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 962.378943][ C0] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 962.424631][T30705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5670'. [ 962.425110][T30705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5670'. [ 962.459523][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5673'. [ 962.459737][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5673'. [ 962.459949][T30710] netlink: 'syz.1.5673': attribute type 11 has an invalid length. [ 962.460173][T30710] netlink: 'syz.1.5673': attribute type 14 has an invalid length. [ 962.860975][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 962.861486][T30719] netlink: 'syz.0.5676': attribute type 5 has an invalid length. [ 962.861538][T30719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5676'. [ 962.873653][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 962.873753][T30719] netlink: 'syz.0.5676': attribute type 5 has an invalid length. [ 962.873803][T30719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5676'. [ 963.095674][ T6268] IPVS: starting estimator thread 0... [ 963.193280][T30731] IPVS: using max 25 ests per chain, 60000 per kthread [ 963.381103][T30735] tun0: tun_chr_ioctl cmd 1074025675 [ 963.386568][T30735] tun0: persist enabled [ 963.682802][T30746] netlink: 'syz.0.5683': attribute type 1 has an invalid length. [ 963.736202][ T32] audit: type=1804 audit(1788825927.211:13): pid=30757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5686" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2351 res=1 errno=0 [ 963.763129][ T32] audit: type=1800 audit(1788825927.211:14): pid=30757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5686" name="cgroup.controllers" dev="tmpfs" ino=2351 res=0 errno=0 [ 963.833768][T30757] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 963.835551][ C1] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 963.879180][T30746] 8021q: adding VLAN 0 to HW filter on device bond16 [ 964.008865][T30758] bond16: entered promiscuous mode [ 964.008909][T30758] bond16: entered allmulticast mode [ 964.187094][T30763] openvswitch: netlink: Unknown key attributes 2 [ 967.154383][T30780] vlan0: entered promiscuous mode [ 967.363892][T30790] netlink: 'syz.0.5690': attribute type 11 has an invalid length. [ 967.459848][T30792] __nla_validate_parse: 2 callbacks suppressed [ 967.469288][T30792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5691'. [ 967.693218][T30795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5692'. [ 967.947181][T30798] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5695'. [ 968.526863][T30819] netlink: 'syz.0.5700': attribute type 2 has an invalid length. [ 968.979555][T30823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5701'. [ 969.135936][T30837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5703'. [ 970.009222][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 970.086045][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 970.097868][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 970.106476][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 970.115694][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 970.303410][T30863] ip6tnl0: Caught tx_queue_len zero misconfig [ 970.749686][T30874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.567428][T30893] netlink: 'syz.1.5718': attribute type 30 has an invalid length. [ 971.870960][T30907] bridge0: Caught tx_queue_len zero misconfig [ 972.834661][T30944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.815650][T30967] __nla_validate_parse: 32 callbacks suppressed [ 973.823679][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5735'. [ 974.150313][T30974] netlink: 'syz.3.5737': attribute type 2 has an invalid length. [ 974.150359][T30974] netlink: 'syz.3.5737': attribute type 1 has an invalid length. [ 974.205692][T30974] syzkaller1: entered allmulticast mode [ 974.257431][T30974] netlink: 'syz.3.5737': attribute type 1 has an invalid length. [ 974.298443][T30950] netlink: 'syz.2.5730': attribute type 15 has an invalid length. [ 974.406910][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5740'. [ 974.418038][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5740'. [ 974.656780][T30981] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.5740'. [ 974.951611][T30999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5745'. [ 975.124075][T31002] openvswitch: netlink: Message has 8 unknown bytes. [ 975.676763][T31024] mac80211_hwsim hwsim64 syzkaller0: left promiscuous mode [ 975.677727][T31024] mac80211_hwsim hwsim64 syzkaller0: left allmulticast mode [ 975.837111][T31030] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5749'. [ 975.837341][T31030] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5749'. [ 975.938302][T31036] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 976.881194][T31063] Bluetooth: hci0: unsupported parameter 5135 [ 976.881430][T31063] Bluetooth: hci0: unsupported parameter 8192 [ 976.881658][T31063] Bluetooth: hci0: unsupported parameter 5135 [ 976.881860][T31063] Bluetooth: hci0: unsupported parameter 8192 [ 977.005803][T31063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5758'. [ 977.251521][T31063] ip6gre2: entered promiscuous mode [ 977.257097][T31063] ip6gre2: entered allmulticast mode [ 977.275282][T27186] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.275540][T27186] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.300225][ T6410] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.358782][ T6410] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.688104][T31086] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = -1, id = 0 [ 977.813064][T31090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5766'. [ 977.822943][T31090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5766'. [ 977.930035][T31090] lo: entered allmulticast mode [ 977.938071][T31089] lo: left allmulticast mode [ 978.069270][ T6410] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 978.225288][T31097] tipc: Enabling of bearer rejected, already enabled [ 978.254818][T31087] Cannot find map_set index 2 as target [ 978.333413][T31097] syzkaller0: mtu less than device minimum [ 978.819548][T31110] tipc: Invalid UDP bearer configuration [ 978.819817][T31110] tipc: Enabling of bearer rejected, failed to enable media [ 978.923497][T31119] __nla_validate_parse: 1 callbacks suppressed [ 978.932108][T31119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5773'. [ 979.052045][T31119] bond0 (unregistering): Released all slaves [ 979.085242][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5775'. [ 979.086602][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.096750][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.105453][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.113137][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.114118][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.130301][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.132630][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.173852][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 979.359177][T31118] bond17: Removing last arp target with arp_interval on [ 981.299754][T31189] FAULT_INJECTION: forcing a failure. [ 981.299754][T31189] name failslab, interval 1, probability 0, space 0, times 0 [ 981.299813][T31189] CPU: 0 UID: 0 PID: 31189 Comm: syz.1.5788 Not tainted syzkaller #0 PREEMPT(full) [ 981.299840][T31189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 981.299855][T31189] Call Trace: [ 981.299864][T31189] [ 981.299875][T31189] dump_stack_lvl+0xe8/0x150 [ 981.299915][T31189] should_fail_ex+0x410/0x560 [ 981.299959][T31189] should_failslab+0xa8/0x100 [ 981.299991][T31189] __kmalloc_cache_noprof+0xa3/0x600 [ 981.300027][T31189] ? __kmalloc_cache_noprof+0x14d/0x600 [ 981.300062][T31189] ? sctp_add_bind_addr+0x8c/0x370 [ 981.300216][T31189] ? sctp_add_bind_addr+0x8c/0x370 [ 981.300250][T31189] sctp_add_bind_addr+0x8c/0x370 [ 981.300281][T31189] sctp_copy_local_addr_list+0x31a/0x4e0 [ 981.300368][T31189] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 981.300396][T31189] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 981.300425][T31189] ? sctp_v6_is_any+0x64/0x80 [ 981.300503][T31189] ? sctp_copy_one_addr+0x93/0x360 [ 981.300535][T31189] sctp_bind_addr_copy+0xb3/0x3c0 [ 981.300571][T31189] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 981.300603][T31189] sctp_connect_new_asoc+0x2ff/0x6b0 [ 981.300634][T31189] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 981.300667][T31189] ? __local_bh_enable_ip+0xd6/0x140 [ 981.300691][T31189] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 981.300716][T31189] ? security_sctp_bind_connect+0x7e/0x2c0 [ 981.300747][T31189] sctp_sendmsg+0x159b/0x2d00 [ 981.300786][T31189] ? __pfx_sctp_sendmsg+0x10/0x10 [ 981.300817][T31189] ? __lock_acquire+0x6df/0x2e50 [ 981.300848][T31189] ? aa_sock_msg_perm+0xf5/0x210 [ 981.300867][T31189] ? sock_rps_record_flow+0x19/0x350 [ 981.300895][T31189] ? inet_sendmsg+0x298/0x320 [ 981.300920][T31189] ? __pfx_inet_sendmsg+0x10/0x10 [ 981.300943][T31189] sock_sendmsg_nosec+0x10e/0x180 [ 981.300974][T31189] ____sys_sendmsg+0x54e/0x850 [ 981.300998][T31189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.301026][T31189] ? import_iovec+0x73/0xa0 [ 981.301051][T31189] ___sys_sendmsg+0x2a5/0x360 [ 981.301070][T31189] ? __lock_acquire+0x6df/0x2e50 [ 981.301092][T31189] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.301116][T31189] ? kstrtouint+0x6e/0xe0 [ 981.301163][T31189] ? __fget_files+0x2a/0x420 [ 981.301187][T31189] ? __fget_files+0x3a2/0x420 [ 981.301219][T31189] __sys_sendmmsg+0x273/0x4d0 [ 981.301244][T31189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 981.301272][T31189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 981.301314][T31189] ? ksys_write+0x242/0x270 [ 981.301343][T31189] ? __pfx_ksys_write+0x10/0x10 [ 981.301374][T31189] __x64_sys_sendmmsg+0xa0/0xc0 [ 981.301396][T31189] do_syscall_64+0x166/0x520 [ 981.301422][T31189] ? trace_irq_disable+0x3b/0x140 [ 981.301440][T31189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.301459][T31189] ? clear_bhb_loop+0x70/0xc0 [ 981.301482][T31189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.301500][T31189] RIP: 0033:0x7f15a019e159 [ 981.301518][T31189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.301534][T31189] RSP: 002b:00007f15a1025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 981.301567][T31189] RAX: ffffffffffffffda RBX: 00007f15a0425fa0 RCX: 00007f15a019e159 [ 981.301581][T31189] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 981.301593][T31189] RBP: 00007f15a1025090 R08: 0000000000000000 R09: 0000000000000000 [ 981.301604][T31189] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000002 [ 981.301615][T31189] R13: 00007f15a0426038 R14: 00007f15a0425fa0 R15: 00007ffe59485018 [ 981.301644][T31189] [ 981.672828][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 983.096764][T31230] netlink: 'syz.3.5797': attribute type 1 has an invalid length. [ 983.231167][T31237] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 983.274718][T31230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.376210][T31237] 8021q: adding VLAN 0 to HW filter on device bond18 [ 983.935707][T31262] netlink: 'syz.3.5806': attribute type 1 has an invalid length. [ 983.973741][T31265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 984.064653][T31254] __nla_validate_parse: 14 callbacks suppressed [ 984.073274][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5804'. [ 984.102523][T31262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 984.421251][T31280] tipc: Enabled bearer , priority 0 [ 984.439350][T31277] tipc: Disabling bearer [ 984.591848][T31284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5812'. [ 984.758046][T31288] syzkaller0: entered promiscuous mode [ 984.760192][T31288] syzkaller0: entered allmulticast mode [ 984.810991][T31288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5815'. [ 985.146262][T31308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5819'. [ 985.322704][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5821'. [ 985.403107][T31316] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5822'. [ 985.416047][T31316] netlink: 'syz.2.5822': attribute type 10 has an invalid length. [ 985.587105][T31316] team0: Port device netdevsim1 removed [ 985.634244][T31318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5823'. [ 985.644430][T31318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5823'. [ 985.669158][T31316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.695255][T31316] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 986.312312][T31343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5829'. [ 986.492472][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5833'. [ 986.919422][T31372] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 986.933251][T31372] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 987.379494][T31382] netlink: 'syz.3.5842': attribute type 1 has an invalid length. [ 987.504909][T31382] bond8: entered promiscuous mode [ 987.517281][T31382] 8021q: adding VLAN 0 to HW filter on device bond8 [ 987.631471][T31387] macvtap1: entered allmulticast mode [ 987.724226][T31387] openvswitch: netlink: EtherType 300 is less than min 600 [ 987.737968][T31382] bond8: (slave bridge7): making interface the new active one [ 987.752855][T31382] bridge7: entered promiscuous mode [ 987.771486][T31382] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 987.979528][T31403] netlink: 'syz.1.5846': attribute type 13 has an invalid length. [ 988.183257][T31403] tipc: Resetting bearer [ 988.428946][ T6412] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 988.515580][T31408] bond19: Unable to set peer notification delay as MII monitoring is disabled [ 988.530435][T31408] bond19 (unregistering): Released all slaves [ 988.589965][ T6412] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 988.612431][T31407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.668663][T31407] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 988.716531][T31411] tipc: MTU too low for tipc bearer [ 989.004335][T31421] tipc: Enabling of bearer rejected, failed to enable media [ 989.145153][T31426] __nla_validate_parse: 4 callbacks suppressed [ 989.145723][T31426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5852'. [ 989.602884][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5861'. [ 989.900478][T31465] IPVS: sh: FWM 3 0x00000003 - no destination available [ 989.999680][T31469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.273444][T31474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5868'. [ 990.463147][T31478] netlink: Unknown conntrack attr (0) [ 990.633845][T31481] syzkaller0: entered promiscuous mode [ 990.634550][T31481] syzkaller0: entered allmulticast mode [ 990.708402][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 991.227270][T31506] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5878'. [ 991.372150][T31515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5881'. [ 991.372202][T31515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5881'. [ 991.530732][T31520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5884'. [ 991.531521][T31520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5884'. [ 993.085123][T31561] bridge0: port 1(1x9) entered disabled state [ 993.096940][T31561] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.115532][T31561] tipc: Resetting bearer [ 993.122441][T31561] tipc: Resetting bearer [ 993.496758][T31575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5895'. [ 993.513501][T31575] team_slave_1: Caught tx_queue_len zero misconfig [ 993.550131][T31573] syzkaller0: Caught tx_queue_len zero misconfig [ 993.550360][T31573] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 993.766669][T31575] netlink: 'syz.1.5895': attribute type 3 has an invalid length. [ 994.058843][T27186] tipc: Resetting bearer [ 994.061416][T27186] tipc: Resetting bearer [ 994.307492][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5903'. [ 994.351928][T31614] netlink: 'syz.0.5904': attribute type 2 has an invalid length. [ 994.383692][T31614] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 994.518698][T31618] syzkaller0: left promiscuous mode [ 994.524309][T31618] syzkaller0: left allmulticast mode [ 994.826615][T31626] netlink: 'syz.2.5909': attribute type 1 has an invalid length. [ 994.884512][T31629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5909'. [ 995.017163][T31626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 995.586518][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5916'. [ 996.427611][T31670] ip6tnl0: Caught tx_queue_len zero misconfig [ 996.449356][T31670] netlink: 'syz.1.5921': attribute type 1 has an invalid length. [ 996.551802][T31670] 8021q: adding VLAN 0 to HW filter on device bond14 [ 996.654508][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5923'. [ 996.654895][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5923'. [ 997.000208][T31696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5924'. [ 997.616795][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5928'. [ 997.616857][T31707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5928'. [ 997.617641][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5928'. [ 997.617671][T31707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5928'. [ 998.817176][T31754] netlink: 'syz.4.5939': attribute type 1 has an invalid length. [ 998.946848][T31754] 8021q: adding VLAN 0 to HW filter on device bond22 [ 999.294307][T31764] netlink: 'syz.4.5942': attribute type 15 has an invalid length. [ 999.308520][T31764] __nla_validate_parse: 5 callbacks suppressed [ 999.309542][T31764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5942'. [ 999.392754][T31764] netlink: 'syz.4.5942': attribute type 15 has an invalid length. [ 999.394531][T31764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5942'. [ 999.540385][T27188] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 999.550146][ T6268] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 999.550232][ T6268] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 999.550273][ T6268] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 999.884708][T31782] syzkaller0: entered promiscuous mode [ 999.884752][T31782] syzkaller0: entered allmulticast mode [ 999.931020][T31782] syzkaller0: mtu less than device minimum [ 1000.558591][T31806] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 1000.613674][T31802] netlink: 'syz.4.5953': attribute type 21 has an invalid length. [ 1000.613722][T31802] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1000.673440][T31806] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1000.692002][T31812] netlink: 'syz.0.5952': attribute type 10 has an invalid length. [ 1000.729815][T31809] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1000.734236][T31802] netlink: 'syz.4.5953': attribute type 5 has an invalid length. [ 1000.734315][T31802] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1000.794733][T31813] bond9: entered promiscuous mode [ 1000.794784][T31813] bond9: entered allmulticast mode [ 1000.837487][T31817] netlink: 'syz.2.5956': attribute type 1 has an invalid length. [ 1000.875039][T31806] macvlan4: entered promiscuous mode [ 1000.880906][T31806] macvlan4: entered allmulticast mode [ 1000.887890][T31806] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1000.929322][T31816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1001.238121][T31820] macvlan2: entered promiscuous mode [ 1001.245340][T31820] macvlan2: entered allmulticast mode [ 1001.253659][T31820] bond9: entered promiscuous mode [ 1001.260799][T31820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1001.330661][T31820] bond9: left promiscuous mode [ 1001.671290][T31133] udevd[31133]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1002.519127][T31877] FAULT_INJECTION: forcing a failure. [ 1002.519127][T31877] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.541338][T31877] CPU: 0 UID: 0 PID: 31877 Comm: syz.2.5966 Not tainted syzkaller #0 PREEMPT(full) [ 1002.541380][T31877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.541395][T31877] Call Trace: [ 1002.541408][T31877] [ 1002.541420][T31877] dump_stack_lvl+0xe8/0x150 [ 1002.541462][T31877] should_fail_ex+0x410/0x560 [ 1002.541507][T31877] should_failslab+0xa8/0x100 [ 1002.541539][T31877] __kmalloc_cache_noprof+0xa3/0x600 [ 1002.541578][T31877] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1002.541613][T31877] ? sctp_add_bind_addr+0x8c/0x370 [ 1002.541642][T31877] ? sctp_add_bind_addr+0x8c/0x370 [ 1002.541678][T31877] sctp_add_bind_addr+0x8c/0x370 [ 1002.541713][T31877] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1002.541746][T31877] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1002.541778][T31877] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1002.541810][T31877] ? sctp_v6_is_any+0x64/0x80 [ 1002.541843][T31877] ? sctp_copy_one_addr+0x93/0x360 [ 1002.541876][T31877] sctp_bind_addr_copy+0xb3/0x3c0 [ 1002.541906][T31877] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1002.541937][T31877] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1002.542015][T31877] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1002.542059][T31877] ? __local_bh_enable_ip+0xd6/0x140 [ 1002.542090][T31877] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1002.542123][T31877] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1002.542163][T31877] sctp_sendmsg+0x159b/0x2d00 [ 1002.542215][T31877] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1002.542255][T31877] ? __lock_acquire+0x6df/0x2e50 [ 1002.542296][T31877] ? aa_sock_msg_perm+0xf5/0x210 [ 1002.542321][T31877] ? sock_rps_record_flow+0x19/0x350 [ 1002.542364][T31877] ? inet_sendmsg+0x298/0x320 [ 1002.542398][T31877] ? __pfx_inet_sendmsg+0x10/0x10 [ 1002.542426][T31877] sock_sendmsg_nosec+0x10e/0x180 [ 1002.542465][T31877] ____sys_sendmsg+0x54e/0x850 [ 1002.542497][T31877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.542535][T31877] ? import_iovec+0x73/0xa0 [ 1002.542565][T31877] ___sys_sendmsg+0x2a5/0x360 [ 1002.542590][T31877] ? __lock_acquire+0x6df/0x2e50 [ 1002.542619][T31877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.542652][T31877] ? kstrtouint+0x6e/0xe0 [ 1002.542714][T31877] ? __fget_files+0x2a/0x420 [ 1002.542746][T31877] ? __fget_files+0x3a2/0x420 [ 1002.542788][T31877] __sys_sendmmsg+0x273/0x4d0 [ 1002.542822][T31877] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1002.542859][T31877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1002.542913][T31877] ? ksys_write+0x242/0x270 [ 1002.542951][T31877] ? __pfx_ksys_write+0x10/0x10 [ 1002.542992][T31877] __x64_sys_sendmmsg+0xa0/0xc0 [ 1002.543021][T31877] do_syscall_64+0x166/0x520 [ 1002.543055][T31877] ? trace_irq_disable+0x3b/0x140 [ 1002.543079][T31877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.543104][T31877] ? clear_bhb_loop+0x70/0xc0 [ 1002.543134][T31877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.543158][T31877] RIP: 0033:0x7f9190b9e159 [ 1002.543181][T31877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.543202][T31877] RSP: 002b:00007f9191a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1002.543228][T31877] RAX: ffffffffffffffda RBX: 00007f9190e25fa0 RCX: 00007f9190b9e159 [ 1002.543246][T31877] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 1002.543261][T31877] RBP: 00007f9191a18090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.543276][T31877] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000002 [ 1002.543291][T31877] R13: 00007f9190e26038 R14: 00007f9190e25fa0 R15: 00007ffd980008c8 [ 1002.543329][T31877] [ 1003.262825][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1003.321463][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1003.321691][T31883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1003.424315][T31884] netlink: 'syz.2.5968': attribute type 4 has an invalid length. [ 1003.451017][T31884] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1008.387453][T31881] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1008.433518][T31884] .`: renamed from bond0 [ 1008.486281][T31888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1008.629042][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1009.613594][T31925] FAULT_INJECTION: forcing a failure. [ 1009.613594][T31925] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.639075][T31925] CPU: 0 UID: 0 PID: 31925 Comm: syz.4.5978 Not tainted syzkaller #0 PREEMPT(full) [ 1009.639112][T31925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.639127][T31925] Call Trace: [ 1009.639137][T31925] [ 1009.639147][T31925] dump_stack_lvl+0xe8/0x150 [ 1009.639188][T31925] should_fail_ex+0x410/0x560 [ 1009.639229][T31925] should_failslab+0xa8/0x100 [ 1009.639259][T31925] __kmalloc_cache_noprof+0xa3/0x600 [ 1009.639295][T31925] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1009.639328][T31925] ? sctp_add_bind_addr+0x8c/0x370 [ 1009.639355][T31925] ? sctp_add_bind_addr+0x8c/0x370 [ 1009.639398][T31925] sctp_add_bind_addr+0x8c/0x370 [ 1009.639431][T31925] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1009.639464][T31925] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1009.639494][T31925] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1009.639525][T31925] ? sctp_v6_is_any+0x64/0x80 [ 1009.639567][T31925] ? sctp_copy_one_addr+0x93/0x360 [ 1009.639601][T31925] sctp_bind_addr_copy+0xb3/0x3c0 [ 1009.639632][T31925] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1009.639663][T31925] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1009.639702][T31925] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1009.639744][T31925] ? __local_bh_enable_ip+0xd6/0x140 [ 1009.639774][T31925] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1009.639804][T31925] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1009.639843][T31925] sctp_sendmsg+0x159b/0x2d00 [ 1009.639893][T31925] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1009.639931][T31925] ? __lock_acquire+0x6df/0x2e50 [ 1009.639971][T31925] ? aa_sock_msg_perm+0xf5/0x210 [ 1009.639996][T31925] ? sock_rps_record_flow+0x19/0x350 [ 1009.640030][T31925] ? inet_sendmsg+0x298/0x320 [ 1009.640062][T31925] ? __pfx_inet_sendmsg+0x10/0x10 [ 1009.640089][T31925] sock_sendmsg_nosec+0x10e/0x180 [ 1009.640126][T31925] ____sys_sendmsg+0x54e/0x850 [ 1009.640159][T31925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.640197][T31925] ? import_iovec+0x73/0xa0 [ 1009.640227][T31925] ___sys_sendmsg+0x2a5/0x360 [ 1009.640252][T31925] ? __lock_acquire+0x6df/0x2e50 [ 1009.640281][T31925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.640313][T31925] ? kstrtouint+0x6e/0xe0 [ 1009.640374][T31925] ? __fget_files+0x2a/0x420 [ 1009.640404][T31925] ? __fget_files+0x3a2/0x420 [ 1009.640446][T31925] __sys_sendmmsg+0x273/0x4d0 [ 1009.640478][T31925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1009.640514][T31925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1009.640573][T31925] ? ksys_write+0x242/0x270 [ 1009.640609][T31925] ? __pfx_ksys_write+0x10/0x10 [ 1009.640651][T31925] __x64_sys_sendmmsg+0xa0/0xc0 [ 1009.640680][T31925] do_syscall_64+0x166/0x520 [ 1009.640712][T31925] ? trace_irq_disable+0x3b/0x140 [ 1009.640734][T31925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.640758][T31925] ? clear_bhb_loop+0x70/0xc0 [ 1009.640787][T31925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.640811][T31925] RIP: 0033:0x7faf5619e159 [ 1009.640832][T31925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.640852][T31925] RSP: 002b:00007faf56fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1009.640878][T31925] RAX: ffffffffffffffda RBX: 00007faf56425fa0 RCX: 00007faf5619e159 [ 1009.640895][T31925] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 1009.640910][T31925] RBP: 00007faf56fa2090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.640925][T31925] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000002 [ 1009.640940][T31925] R13: 00007faf56426038 R14: 00007faf56425fa0 R15: 00007ffff26dbd58 [ 1009.640978][T31925] [ 1010.295757][T31933] netlink: 'syz.0.5979': attribute type 1 has an invalid length. [ 1010.477964][T31940] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5979'. [ 1010.610121][T31943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1010.854663][T31943] gtp0: entered promiscuous mode [ 1010.855555][T31943] gtp0: entered allmulticast mode [ 1011.363680][T31957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1011.599674][T31971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5991'. [ 1011.613925][T31968] netlink: 'syz.1.5990': attribute type 1 has an invalid length. [ 1011.638844][T31973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5990'. [ 1011.820810][T31973] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1011.901957][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1011.916004][T31967] tipc: Resetting bearer [ 1011.922190][T31967] tipc: Resetting bearer [ 1011.932747][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1011.940829][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1011.943813][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1011.955487][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1012.066863][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1012.080269][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1012.088242][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1012.109176][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1012.122779][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1012.422792][ T31] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1013.060358][T32000] syz_tun: left promiscuous mode [ 1013.092843][T32000] tipc: Resetting bearer [ 1013.119401][ T31] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1013.195769][T32000] veth1_vlan: left promiscuous mode [ 1013.212068][T32000] veth0_vlan: left promiscuous mode [ 1013.225912][T32000] veth0_vlan: entered promiscuous mode [ 1013.241952][T32000] veth1_vlan: entered promiscuous mode [ 1013.294559][T32000] geneve0: entered promiscuous mode [ 1013.459491][T32000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.510121][T32014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1013.528051][T32000] ip6gretap0: entered promiscuous mode [ 1013.542250][T32000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1013.593496][T32000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.687375][T32000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1013.803025][T32000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1013.803353][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1013.867276][T32000] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1013.898328][T27188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.901040][T27188] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.903105][T27188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.905444][T27188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.183243][T32007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1014.238930][ T4932] Bluetooth: hci5: command tx timeout [ 1014.245818][T32009] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1014.370465][T32023] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1014.428522][T32017] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3655622993/3655622995 [ 1014.438658][T32017] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3655622993/3655622994 [ 1014.620959][T27188] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.627539][T27188] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.640581][T29705] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.738315][T32003] lo speed is unknown, defaulting to 1000 [ 1014.799605][T32003] hsr0 speed is unknown, defaulting to 1000 [ 1014.829190][T32003] lo speed is unknown, defaulting to 1000 [ 1015.071913][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1015.161751][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1015.263338][T31979] lo speed is unknown, defaulting to 1000 [ 1015.276843][T31979] hsr0 speed is unknown, defaulting to 1000 [ 1015.292053][T31979] lo speed is unknown, defaulting to 1000 [ 1015.330778][T32042] ip_tables: iptables: counters copy to user failed while replacing table [ 1016.063766][T32064] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1016.064022][T32064] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1016.064310][T32064] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1016.064519][T32064] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1016.064800][T32064] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1016.309172][ T4932] Bluetooth: hci5: command tx timeout [ 1016.361682][T32053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.442239][T31979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.446142][T31979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.447110][T31979] bridge_slave_0: entered allmulticast mode [ 1017.462607][T31979] bridge_slave_0: entered promiscuous mode [ 1017.506106][T31979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.508069][T31979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.515937][T31979] bridge_slave_1: entered allmulticast mode [ 1017.548861][T31979] bridge_slave_1: entered promiscuous mode [ 1017.750187][T32125] FAULT_INJECTION: forcing a failure. [ 1017.750187][T32125] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.750245][T32125] CPU: 0 UID: 0 PID: 32125 Comm: syz.3.6018 Not tainted syzkaller #0 PREEMPT(full) [ 1017.750272][T32125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.750288][T32125] Call Trace: [ 1017.750297][T32125] [ 1017.750308][T32125] dump_stack_lvl+0xe8/0x150 [ 1017.750348][T32125] should_fail_ex+0x410/0x560 [ 1017.750391][T32125] should_failslab+0xa8/0x100 [ 1017.750431][T32125] __kmalloc_cache_noprof+0xa3/0x600 [ 1017.750469][T32125] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1017.750503][T32125] ? sctp_add_bind_addr+0x8c/0x370 [ 1017.750530][T32125] ? sctp_add_bind_addr+0x8c/0x370 [ 1017.750567][T32125] sctp_add_bind_addr+0x8c/0x370 [ 1017.750600][T32125] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1017.750633][T32125] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1017.750672][T32125] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1017.750704][T32125] ? sctp_v6_is_any+0x64/0x80 [ 1017.750736][T32125] ? sctp_copy_one_addr+0x93/0x360 [ 1017.750769][T32125] sctp_bind_addr_copy+0xb3/0x3c0 [ 1017.750800][T32125] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1017.750829][T32125] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1017.750867][T32125] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1017.750905][T32125] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1017.750940][T32125] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1017.750974][T32125] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1017.751010][T32125] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1017.751041][T32125] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1017.751080][T32125] sctp_sendmsg+0x159b/0x2d00 [ 1017.751131][T32125] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1017.751172][T32125] ? __lock_acquire+0x6df/0x2e50 [ 1017.751213][T32125] ? aa_sock_msg_perm+0xf5/0x210 [ 1017.751236][T32125] ? sock_rps_record_flow+0x19/0x350 [ 1017.751271][T32125] ? inet_sendmsg+0x298/0x320 [ 1017.751299][T32125] ? apparmor_socket_sendmsg+0x98/0x360 [ 1017.751337][T32125] ? __pfx_inet_sendmsg+0x10/0x10 [ 1017.751367][T32125] sock_sendmsg_nosec+0x10e/0x180 [ 1017.751410][T32125] ____sys_sendmsg+0x54e/0x850 [ 1017.751441][T32125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.751475][T32125] ? import_iovec+0x73/0xa0 [ 1017.751505][T32125] ___sys_sendmsg+0x2a5/0x360 [ 1017.751527][T32125] ? __lock_acquire+0x6df/0x2e50 [ 1017.751553][T32125] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.751582][T32125] ? kstrtouint+0x6e/0xe0 [ 1017.751637][T32125] ? __fget_files+0x2a/0x420 [ 1017.751666][T32125] ? __fget_files+0x3a2/0x420 [ 1017.751707][T32125] __sys_sendmmsg+0x273/0x4d0 [ 1017.751738][T32125] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1017.751792][T32125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1017.751842][T32125] ? ksys_write+0x242/0x270 [ 1017.751877][T32125] ? __pfx_ksys_write+0x10/0x10 [ 1017.751917][T32125] __x64_sys_sendmmsg+0xa0/0xc0 [ 1017.751943][T32125] do_syscall_64+0x166/0x520 [ 1017.751976][T32125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.751999][T32125] ? clear_bhb_loop+0x70/0xc0 [ 1017.752026][T32125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.752050][T32125] RIP: 0033:0x7f502b59e159 [ 1017.752071][T32125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.752092][T32125] RSP: 002b:00007f502c4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.752117][T32125] RAX: ffffffffffffffda RBX: 00007f502b825fa0 RCX: 00007f502b59e159 [ 1017.752134][T32125] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 1017.752149][T32125] RBP: 00007f502c4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.752163][T32125] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000002 [ 1017.752178][T32125] R13: 00007f502b826038 R14: 00007f502b825fa0 R15: 00007ffdc952d588 [ 1017.752214][T32125] [ 1018.276817][T31979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.287080][T31979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.390111][ T4932] Bluetooth: hci5: command tx timeout [ 1018.486520][T31979] team0: Port device team_slave_0 added [ 1018.505967][T31979] team0: Port device team_slave_1 added [ 1018.558861][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1018.635587][T32141] __nla_validate_parse: 31 callbacks suppressed [ 1018.636131][T32141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1018.669972][T31979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.670450][T31979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.670534][T31979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.759167][T31979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.759617][T31979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.759703][T31979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.196491][T32164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1019.322652][T32157] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1019.377852][T31979] hsr_slave_0: entered promiscuous mode [ 1019.387185][T31979] hsr_slave_1: entered promiscuous mode [ 1019.668438][T32157] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 1019.668485][T32157] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 1019.746726][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1020.345300][T31979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1020.469384][ T4932] Bluetooth: hci5: command tx timeout [ 1020.791559][T31979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1021.144836][T31979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1021.244296][T32216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6034'. [ 1021.655996][T31979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1022.217378][T32249] bond9: (slave veth0_to_bond): Releasing active interface [ 1022.263406][T32249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1022.359517][T32257] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1022.386706][T32258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6042'. [ 1022.436770][T32258] xt_hashlimit: size too large, truncated to 1048576 [ 1022.545787][T31979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.640289][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1022.906176][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 1023.273989][T31979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.286643][T31979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.319845][T31979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.849623][T31979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.866055][T31979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.896306][T31979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.956332][T31979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.392320][T32309] netlink: 'syz.1.6050': attribute type 12 has an invalid length. [ 1024.533289][T32319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1024.854456][T32317] syzkaller0: entered promiscuous mode [ 1024.855475][T32317] syzkaller0: entered allmulticast mode [ 1024.947222][T32325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1025.037430][T32325] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1025.225845][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1025.240807][T32334] netlink: 'syz.3.6054': attribute type 13 has an invalid length. [ 1025.783332][T32339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1025.897705][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1026.558404][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1030.717788][T32358] netlink: 'syz.1.6057': attribute type 4 has an invalid length. [ 1030.869825][T31979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.915560][T31979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.946536][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.946664][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.994098][T27183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.994316][T27183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.665937][T32392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1031.840263][T32398] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 1031.848707][T32398] netlink: 'syz.3.6067': attribute type 2 has an invalid length. [ 1031.969873][T32396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6068'. [ 1032.012605][T32396] netlink: 'syz.0.6068': attribute type 3 has an invalid length. [ 1032.015080][T32396] netlink: 'syz.0.6068': attribute type 3 has an invalid length. [ 1032.085554][T32403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1032.215950][T32408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1032.699721][T32423] netlink: 'syz.2.6071': attribute type 13 has an invalid length. [ 1033.137875][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.147569][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.160632][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.170505][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.186920][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.197200][T32427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1033.612409][T32423] tipc: Resetting bearer [ 1033.934486][T31979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.333915][T32446] FAULT_INJECTION: forcing a failure. [ 1034.333915][T32446] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.333974][T32446] CPU: 0 UID: 0 PID: 32446 Comm: syz.0.6077 Not tainted syzkaller #0 PREEMPT(full) [ 1034.334002][T32446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.334019][T32446] Call Trace: [ 1034.334029][T32446] [ 1034.334047][T32446] dump_stack_lvl+0xe8/0x150 [ 1034.334089][T32446] should_fail_ex+0x410/0x560 [ 1034.334133][T32446] should_failslab+0xa8/0x100 [ 1034.334164][T32446] __kmalloc_cache_noprof+0xa3/0x600 [ 1034.334202][T32446] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1034.334238][T32446] ? sctp_add_bind_addr+0x8c/0x370 [ 1034.334265][T32446] ? sctp_add_bind_addr+0x8c/0x370 [ 1034.334301][T32446] sctp_add_bind_addr+0x8c/0x370 [ 1034.334336][T32446] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1034.334368][T32446] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1034.334399][T32446] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1034.334432][T32446] ? sctp_v6_is_any+0x64/0x80 [ 1034.334465][T32446] ? sctp_copy_one_addr+0x93/0x360 [ 1034.334499][T32446] sctp_bind_addr_copy+0xb3/0x3c0 [ 1034.334529][T32446] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1034.334567][T32446] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1034.334607][T32446] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1034.334649][T32446] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1034.334685][T32446] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1034.334718][T32446] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1034.334754][T32446] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1034.334785][T32446] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1034.334823][T32446] sctp_sendmsg+0x159b/0x2d00 [ 1034.334874][T32446] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1034.334913][T32446] ? __lock_acquire+0x6df/0x2e50 [ 1034.334953][T32446] ? aa_sock_msg_perm+0xf5/0x210 [ 1034.334978][T32446] ? sock_rps_record_flow+0x19/0x350 [ 1034.335012][T32446] ? inet_sendmsg+0x298/0x320 [ 1034.335038][T32446] ? apparmor_socket_sendmsg+0x98/0x360 [ 1034.335077][T32446] ? __pfx_inet_sendmsg+0x10/0x10 [ 1034.335105][T32446] sock_sendmsg_nosec+0x10e/0x180 [ 1034.335141][T32446] ____sys_sendmsg+0x54e/0x850 [ 1034.335173][T32446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1034.335215][T32446] ? import_iovec+0x73/0xa0 [ 1034.335245][T32446] ___sys_sendmsg+0x2a5/0x360 [ 1034.335270][T32446] ? __lock_acquire+0x6df/0x2e50 [ 1034.335303][T32446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.335334][T32446] ? kstrtouint+0x6e/0xe0 [ 1034.335393][T32446] ? __fget_files+0x2a/0x420 [ 1034.335421][T32446] ? __fget_files+0x3a2/0x420 [ 1034.335462][T32446] __sys_sendmmsg+0x273/0x4d0 [ 1034.335494][T32446] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1034.335531][T32446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1034.335592][T32446] ? ksys_write+0x242/0x270 [ 1034.335627][T32446] ? __pfx_ksys_write+0x10/0x10 [ 1034.335669][T32446] __x64_sys_sendmmsg+0xa0/0xc0 [ 1034.335698][T32446] do_syscall_64+0x166/0x520 [ 1034.335731][T32446] ? trace_irq_disable+0x3b/0x140 [ 1034.335753][T32446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.335778][T32446] ? clear_bhb_loop+0x70/0xc0 [ 1034.335807][T32446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.335830][T32446] RIP: 0033:0x7ffa08b9e159 [ 1034.335852][T32446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.335873][T32446] RSP: 002b:00007ffa09acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1034.335899][T32446] RAX: ffffffffffffffda RBX: 00007ffa08e25fa0 RCX: 00007ffa08b9e159 [ 1034.335916][T32446] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 1034.335931][T32446] RBP: 00007ffa09acd090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.335946][T32446] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000002 [ 1034.335961][T32446] R13: 00007ffa08e26038 R14: 00007ffa08e25fa0 R15: 00007fff1003aa98 [ 1034.335999][T32446] [ 1035.246783][T32464] nbd9: detected capacity change from 0 to 127 [ 1035.270322][ T1687] [ 1035.272717][ T1687] ====================================================== [ 1035.279859][ T1687] WARNING: possible circular locking dependency detected [ 1035.286932][ T1687] syzkaller #0 Not tainted [ 1035.291432][ T1687] ------------------------------------------------------ [ 1035.298482][ T1687] kworker/0:1H/1687 is trying to acquire lock: [ 1035.304684][ T1687] ffff88807eebc268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1035.313828][ T1687] [ 1035.313828][ T1687] but task is already holding lock: [ 1035.321231][ T1687] ffff888027f651f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1035.329741][ T1687] [ 1035.329741][ T1687] which lock already depends on the new lock. [ 1035.329741][ T1687] [ 1035.340170][ T1687] [ 1035.340170][ T1687] the existing dependency chain (in reverse order) is: [ 1035.349291][ T1687] [ 1035.349291][ T1687] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1035.356529][ T1687] __mutex_lock+0x19d/0x1550 [ 1035.361705][ T1687] nbd_queue_rq+0xc1/0xff0 [ 1035.366733][ T1687] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1035.373027][ T1687] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1035.379949][ T1687] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1035.386481][ T1687] blk_mq_run_work_fn+0x16c/0x300 [ 1035.392090][ T1687] process_scheduled_works+0xc3d/0x1630 [ 1035.398184][ T1687] worker_thread+0xa47/0xfb0 [ 1035.403335][ T1687] kthread+0x38b/0x480 [ 1035.407945][ T1687] ret_from_fork+0x514/0xb70 [ 1035.413112][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1035.418429][ T1687] [ 1035.418429][ T1687] -> #5 (set->srcu){.+.+}-{0:0}: [ 1035.425572][ T1687] __synchronize_srcu+0xc9/0x2f0 [ 1035.431057][ T1687] elevator_switch+0x1e8/0x7b0 [ 1035.436471][ T1687] elevator_change+0x2fa/0x480 [ 1035.441795][ T1687] elevator_set_default+0x375/0x440 [ 1035.447630][ T1687] blk_register_queue+0x3f3/0x4e0 [ 1035.453337][ T1687] __add_disk+0x6cb/0xe30 [ 1035.458253][ T1687] add_disk_fwnode+0x100/0x3a0 [ 1035.463747][ T1687] nbd_dev_add+0x733/0xb60 [ 1035.468811][ T1687] nbd_init+0x168/0x1f0 [ 1035.473693][ T1687] do_one_initcall+0x250/0x870 [ 1035.479024][ T1687] do_initcall_level+0x10a/0x1a0 [ 1035.484559][ T1687] do_initcalls+0x59/0xa0 [ 1035.489437][ T1687] kernel_init_freeable+0x29d/0x3e0 [ 1035.495185][ T1687] kernel_init+0x22/0x1d0 [ 1035.500056][ T1687] ret_from_fork+0x514/0xb70 [ 1035.505186][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1035.510500][ T1687] [ 1035.510500][ T1687] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1035.518366][ T1687] __mutex_lock+0x19d/0x1550 [ 1035.523514][ T1687] elevator_change+0x1af/0x480 [ 1035.528826][ T1687] elevator_set_none+0xb5/0x140 [ 1035.534229][ T1687] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1035.540630][ T1687] nbd_start_device+0x189/0xb30 [ 1035.546064][ T1687] nbd_genl_connect+0x167d/0x1cd0 [ 1035.551726][ T1687] genl_family_rcv_msg_doit+0x233/0x340 [ 1035.557830][ T1687] genl_rcv_msg+0x614/0x7a0 [ 1035.562883][ T1687] netlink_rcv_skb+0x226/0x4a0 [ 1035.568196][ T1687] genl_rcv+0x28/0x40 [ 1035.572747][ T1687] netlink_unicast+0x7bd/0x940 [ 1035.578078][ T1687] netlink_sendmsg+0x813/0xb40 [ 1035.583388][ T1687] sock_sendmsg_nosec+0x13a/0x180 [ 1035.588996][ T1687] ____sys_sendmsg+0x54e/0x850 [ 1035.594334][ T1687] ___sys_sendmsg+0x2a5/0x360 [ 1035.599556][ T1687] __x64_sys_sendmsg+0x1b1/0x290 [ 1035.606070][ T1687] do_syscall_64+0x166/0x520 [ 1035.611327][ T1687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.617859][ T1687] [ 1035.617859][ T1687] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1035.626709][ T1687] blk_alloc_queue+0x544/0x690 [ 1035.632030][ T1687] __blk_mq_alloc_disk+0x194/0x390 [ 1035.637718][ T1687] nbd_dev_add+0x494/0xb60 [ 1035.642687][ T1687] nbd_init+0x168/0x1f0 [ 1035.647394][ T1687] do_one_initcall+0x250/0x870 [ 1035.652712][ T1687] do_initcall_level+0x10a/0x1a0 [ 1035.658197][ T1687] do_initcalls+0x59/0xa0 [ 1035.663085][ T1687] kernel_init_freeable+0x29d/0x3e0 [ 1035.668825][ T1687] kernel_init+0x22/0x1d0 [ 1035.673703][ T1687] ret_from_fork+0x514/0xb70 [ 1035.678863][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1035.684199][ T1687] [ 1035.684199][ T1687] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1035.691617][ T1687] fs_reclaim_acquire+0x71/0x100 [ 1035.697116][ T1687] __kmalloc_noprof+0xbc/0x720 [ 1035.702437][ T1687] tls_sw_sendmsg+0x59b/0x2b50 [ 1035.707920][ T1687] sock_sendmsg_nosec+0x90/0x180 [ 1035.713439][ T1687] sock_sendmsg+0x1ca/0x2d0 [ 1035.718524][ T1687] splice_to_socket+0xb5e/0x12a0 [ 1035.724019][ T1687] direct_splice_actor+0x101/0x160 [ 1035.729679][ T1687] splice_direct_to_actor+0x57b/0xcb0 [ 1035.735609][ T1687] do_splice_direct+0x195/0x290 [ 1035.741019][ T1687] do_sendfile+0x52e/0x7c0 [ 1035.746083][ T1687] __se_sys_sendfile64+0x144/0x1a0 [ 1035.751827][ T1687] do_syscall_64+0x166/0x520 [ 1035.757007][ T1687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.763440][ T1687] [ 1035.763440][ T1687] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1035.771578][ T1687] lock_sock_nested+0x41/0x100 [ 1035.776989][ T1687] inet_shutdown+0x6a/0x390 [ 1035.782041][ T1687] nbd_mark_nsock_dead+0x2cb/0x550 [ 1035.787718][ T1687] recv_work+0x1cee/0x1e10 [ 1035.792716][ T1687] process_scheduled_works+0xc3d/0x1630 [ 1035.798815][ T1687] worker_thread+0xa47/0xfb0 [ 1035.803991][ T1687] kthread+0x38b/0x480 [ 1035.808605][ T1687] ret_from_fork+0x514/0xb70 [ 1035.813737][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1035.819054][ T1687] [ 1035.819054][ T1687] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1035.826898][ T1687] __lock_acquire+0x15ff/0x2e50 [ 1035.832331][ T1687] lock_acquire+0x115/0x350 [ 1035.837474][ T1687] __mutex_lock+0x19d/0x1550 [ 1035.842728][ T1687] nbd_queue_rq+0x373/0xff0 [ 1035.848227][ T1687] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1035.854335][ T1687] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1035.861202][ T1687] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1035.867721][ T1687] blk_mq_run_work_fn+0x16c/0x300 [ 1035.873290][ T1687] process_scheduled_works+0xc3d/0x1630 [ 1035.879395][ T1687] worker_thread+0xa47/0xfb0 [ 1035.884590][ T1687] kthread+0x38b/0x480 [ 1035.889222][ T1687] ret_from_fork+0x514/0xb70 [ 1035.894536][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1035.899945][ T1687] [ 1035.899945][ T1687] other info that might help us debug this: [ 1035.899945][ T1687] [ 1035.910242][ T1687] Chain exists of: [ 1035.910242][ T1687] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1035.910242][ T1687] [ 1035.922354][ T1687] Possible unsafe locking scenario: [ 1035.922354][ T1687] [ 1035.929856][ T1687] CPU0 CPU1 [ 1035.935376][ T1687] ---- ---- [ 1035.941030][ T1687] lock(&cmd->lock); [ 1035.945173][ T1687] lock(set->srcu); [ 1035.951634][ T1687] lock(&cmd->lock); [ 1035.958173][ T1687] lock(&nsock->tx_lock); [ 1035.962696][ T1687] [ 1035.962696][ T1687] *** DEADLOCK *** [ 1035.962696][ T1687] [ 1035.970887][ T1687] locks held by kworker/0:1H/1687: 4, last CPU#0: [ 1035.977330][ T1687] #0: ffff888020e97540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1035.988433][ T1687] #1: ffffc9000611fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1036.001462][ T1687] #2: ffff88801ff67598 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1036.010903][ T1687] #3: ffff888027f651f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1036.019996][ T1687] [ 1036.019996][ T1687] stack backtrace: [ 1036.025993][ T1687] CPU: 0 UID: 0 PID: 1687 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 1036.035483][ T1687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.046000][ T1687] Workqueue: kblockd blk_mq_run_work_fn [ 1036.051599][ T1687] Call Trace: [ 1036.054903][ T1687] [ 1036.057854][ T1687] dump_stack_lvl+0xe8/0x150 [ 1036.062478][ T1687] print_circular_bug+0x2e2/0x300 [ 1036.067532][ T1687] check_noncircular+0x12f/0x150 [ 1036.072546][ T1687] __lock_acquire+0x15ff/0x2e50 [ 1036.077431][ T1687] ? irqentry_exit+0x218/0x910 [ 1036.082232][ T1687] ? __pfx___schedule+0x10/0x10 [ 1036.087121][ T1687] ? irqentry_exit+0x218/0x910 [ 1036.092017][ T1687] lock_acquire+0x115/0x350 [ 1036.096552][ T1687] ? nbd_queue_rq+0x373/0xff0 [ 1036.101272][ T1687] __mutex_lock+0x19d/0x1550 [ 1036.105895][ T1687] ? nbd_queue_rq+0x373/0xff0 [ 1036.110609][ T1687] ? ret_from_fork_asm+0x1a/0x30 [ 1036.115579][ T1687] ? unwind_next_frame+0x8f/0x2550 [ 1036.120720][ T1687] ? nbd_queue_rq+0x373/0xff0 [ 1036.125427][ T1687] ? __pfx___mutex_lock+0x10/0x10 [ 1036.130480][ T1687] ? ret_from_fork_asm+0x1a/0x30 [ 1036.135449][ T1687] ? stack_trace_save+0xa9/0x100 [ 1036.140669][ T1687] ? __pfx_stack_trace_save+0x10/0x10 [ 1036.146097][ T1687] nbd_queue_rq+0x373/0xff0 [ 1036.150650][ T1687] ? __lock_acquire+0x14b9/0x2e50 [ 1036.155709][ T1687] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1036.160861][ T1687] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1036.166458][ T1687] ? sbitmap_get+0x229/0x390 [ 1036.171155][ T1687] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1036.177172][ T1687] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1036.183024][ T1687] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1036.189483][ T1687] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1036.196276][ T1687] ? lock_acquire+0x115/0x350 [ 1036.200988][ T1687] ? process_scheduled_works+0x97a/0x1630 [ 1036.206908][ T1687] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1036.213006][ T1687] ? blk_mq_run_work_fn+0x144/0x300 [ 1036.218273][ T1687] blk_mq_run_work_fn+0x16c/0x300 [ 1036.223352][ T1687] ? process_scheduled_works+0x97a/0x1630 [ 1036.229097][ T1687] process_scheduled_works+0xc3d/0x1630 [ 1036.234691][ T1687] ? __pfx_process_scheduled_works+0x10/0x10 [ 1036.240720][ T1687] ? assign_work+0x3cf/0x5d0 [ 1036.245345][ T1687] worker_thread+0xa47/0xfb0 [ 1036.249977][ T1687] ? __kthread_parkme+0x71/0x1f0 [ 1036.254951][ T1687] kthread+0x38b/0x480 [ 1036.259054][ T1687] ? __pfx_worker_thread+0x10/0x10 [ 1036.264298][ T1687] ? __pfx_kthread+0x10/0x10 [ 1036.268911][ T1687] ret_from_fork+0x514/0xb70 [ 1036.273703][ T1687] ? __pfx_ret_from_fork+0x10/0x10 [ 1036.278949][ T1687] ? __switch_to+0xc89/0x1420 [ 1036.283842][ T1687] ? __pfx_kthread+0x10/0x10 [ 1036.288539][ T1687] ret_from_fork_asm+0x1a/0x30 [ 1036.293342][ T1687] [ 1036.539243][ T4932] block nbd9: Receive control failed (result -104) [ 1036.583332][T31979] veth0_vlan: entered promiscuous mode [ 1036.611004][T31979] veth1_vlan: entered promiscuous mode [ 1036.658139][T31979] veth0_macvtap: entered promiscuous mode [ 1036.673753][T31979] veth1_macvtap: entered promiscuous mode [ 1036.698880][T31979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.716570][T31979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.739694][T27183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.739756][T27183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.739805][T27183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.739845][T27183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.811293][T31979] ieee80211 phy86: Selected rate control algorithm 'minstrel_ht' [ 1036.854495][T27183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.854533][T27183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.879974][T31979] ieee80211 phy87: Selected rate control algorithm 'minstrel_ht' [ 1036.921717][T27184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.922059][T27184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.588583][T32468] block nbd9: Connection timed out, retrying (0/1 alive) [ 1039.588650][T32468] block nbd9: Connection timed out, retrying (0/1 alive) [ 1039.588729][T32468] block nbd9: Dead connection, failed to find a fallback [ 1039.588750][T32468] block nbd9: shutting down sockets [ 1039.588765][T32468] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1039.588809][T32468] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1039.588832][T32468] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1039.588852][T32468] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1039.588880][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1039.588910][T32468] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1039.589159][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.589191][T32468] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1039.589212][T32468] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1039.589232][T32468] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1039.589251][T32468] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1039.589426][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.589458][T32468] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1039.589478][T32468] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1039.589660][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.589887][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.590130][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.590338][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.590532][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.590603][T32372] ldm_validate_partition_table(): Disk read failed. [ 1039.590755][T32468] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1039.591292][T32372] Dev nbd9: unable to read RDB block 0 [ 1039.592079][T32372] nbd9: unable to read partition table [ 1039.603111][T32372] ldm_validate_partition_table(): Disk read failed. [ 1039.603559][T32372] Dev nbd9: unable to read RDB block 0 [ 1039.618738][T32372] nbd9: unable to read partition table [ 1042.548354][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!