last executing test programs: 17.730979768s ago: executing program 0 (id=5889): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x400, 0x4, 0xe61d}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x21, 0x80a, 0x70bd2a, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x6, 0x5, 0x0, 0x0, 0x3, 0x4}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8080) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000280)) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340)=0x10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x18, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x30, &(0x7f0000000400)=""/48, 0x41100, 0x8, '\x00', r5, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x479effb7, 0xc69}, 0x10, r7, r1, 0x6, &(0x7f0000000840)=[r0], &(0x7f0000000880)=[{0x3, 0x5, 0xe, 0x3}, {0x2, 0x4, 0xb, 0x7}, {0x0, 0x3, 0xa, 0xa}, {0x3, 0x5, 0xa, 0xb}, {0x2, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x1, 0xb}], 0x10, 0x3a}, 0x94) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0xb, 0x2, 0x6, 0x81, {0x4e22, 0x0, [0x1000, 0x354, 0x4], [0xd, 0x8, 0x10, 0x8001], 0x0, [0x3]}, 0x6, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "205461a9882e755755fd59af46c5e6152c177311783c5bc6b93e28422b61e3983b8d8bdbae1b4b1dc2874208e4993c39a2009955744c3bbe783e6093a20f1a843ee00eb00cfe7c927f0a3a6dc63572dba9bee2b805b86461ac191f1c61e4415bc32c863d090655"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4021}, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000b40)={"20f3738681274b1c00c84b584e515bbd", 0x0, 0x0, {0x8001, 0x7}, {0x1}, 0x2, [0xdcdb, 0x3, 0x437, 0xd5, 0x6, 0x1, 0x8, 0x180, 0xe, 0x4, 0x7fffffffffffffff, 0x1ff, 0x9, 0xd67d, 0xb0]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000c40)={{r3}, r8, 0x2, @unused=[0x5, 0x7fffffff, 0xbf, 0x23], @name="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"}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000001c40)) connect$can_j1939(r0, &(0x7f0000001d40)={0x1d, r5, 0x3, {0x1, 0x1, 0x3}, 0xfd}, 0x18) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001dc0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001e80)={&(0x7f0000001d80), 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x40, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) r10 = socket(0x8, 0x1, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x48, r11, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x40001) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x2010, r4, 0x4624f000) sendmsg(r0, &(0x7f0000002440)={&(0x7f0000002040)=@llc={0x1a, 0x17, 0x0, 0x80, 0x0, 0x81, @local}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000020c0)="f8b6a49a7c8f49f9a2193ad7fb85930216bb0485a61a4fcf3ed0ea23a4968bacb235664e79e584c73f07b5c1dc4cd9e3cfc506d339f0449c631a4bac6c8b5fae9052d402c984cd4c7fee35843b6157420084a93c11c15d409d9b1e9f6074454bb455a16b64db530bfe5d87eb1688dfe6c5e3c1bff788f046a2d20888a224b5270d215d0d1c410feb6b80840ac9122e22bdf2ee33ba21f511a1c7fed406cc966b4cf3d7188e1e5ea88732585567a95142f1f4788b6963cb7895f16fc907204f48f17b4c060b8df409e21694b6edc38505c24d01d7125edf8ac700b2a76fe21f0aef1e", 0xe2}], 0x1, &(0x7f0000002200)=[{0x90, 0x0, 0xc42, "fdcfc79d420df5a5ab7570d72e5bb6f2540fce8aef4f7bd047157624736e9af94afb86f05c88dd2cba8f67acd2525e14fc0da2f7f48c9116dba5bbd4d69bd9847b960042829987519f2e6cf2296d24977a180c5c33fda0c14f64157a3427ca4e937a49d156c25004095c180af36e80303376a66b2e8ae78fcd7239"}, {0xe8, 0x84, 0x8, "b0594ae26757812b6e2861119340f40d9a21a6c1738761862b5ea490f88a6956e9558f609e5825ab012c6246f8d8d868a070679ec9f541dc6ce14ca5fd34187e75aa09b46c660d69e7b0a92b15fe9f87e90350f59a29894305b38719cac7a2883e31961e8f43aaade3bd6b1b26b4fbaa2231ba4b3a83be4dc9aadb1a7fceec60fe567aeddee49fa94a08ac688f5891027ecdd139e46603ef9297e72d06d05e9bef1ad722f6de21d0f5c481c424ef1017ecb680723209c38cee7d1b19d44d76e0fffe512f9e2dd9d4dca32f444eac388c1c"}, {0xc0, 0x110, 0x8, "d64e32bb59488354e2c53cc909f70ac3053815c5619fbbf21e44331390867196ec37fc4d867d5a2660b796ddb2c74b03d7c829255656789952982934cd0551f726186679e5523785c00c1ff3ede5d9eff765fa53ee2335d57e9623948702442de7ef34ea99c5e10d03bc6855b622b895a2476999f4d280a8673c587c9549cd758cecd4f6277830a622fd23cbaef82dc1a976d7e3e497299d16a39a0dbddc057a5d0a5a6f1ca033d2814a"}], 0x238}, 0x801) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), r1) sendmsg$TIPC_NL_NODE_GET(r12, &(0x7f0000002700)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000026c0)={&(0x7f0000002500)={0x1b0, r13, 0x66363fa6238ea7ec, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaf4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x145}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}]}, 0x1b0}}, 0x4000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r14, &(0x7f0000002d40)={&(0x7f0000002740), 0xc, &(0x7f0000002d00)={&(0x7f0000002b80)={0x164, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaa4c450dccd25b83}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 15.024148886s ago: executing program 0 (id=5906): bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) 14.819361277s ago: executing program 0 (id=5910): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ext_create_conn={{0x2043, 0x49}, {0x3, 0xca, 0xf8, @any, 0x29, "e5983016d991b90198425815dc4f130f0a7bcddb8b8011c9f0b6129cba4fa6d77611a2aa7808e0983e607224ff585099f22abd992a99228e31051496f4d687"}}}, 0x4d) (async) syz_emit_ethernet(0xcd, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@llc={0x4, {@llc={0xdc, 0x7e, 'Z}', "b1a09206cdca9f5d6d7d0c88d9db8ac1002b536676b75822d7551ea435d0b67b55c200ed2876a90a1620f4ca20157b5b5a3756d066b533086893545ab7ac4fb1c5457eb7a58641ae968135a6cc388f8a9433789b695210610e500f3e677381bbb34c36bacd4bb6f0df6b303d3bf8737055b72ec0a8762d9b9f66d265faf063a4b33477900a9a965ea5d480f4830cc99051abf1e4061673254a52f4e73ed9e81c053c93ee247b61f898325645a92aa0c217d8ba4f5cca70d1ad29bc"}}}}}, &(0x7f0000000180)={0x1, 0x2, [0x2fb, 0x2a7, 0x79c, 0x1d0]}) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@dev, 0x0}, &(0x7f0000000200)=0x14) r4 = socket$inet(0x2, 0x4, 0x173) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r1, 0x886eb000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000300)={'sit0\x00', r3, 0x80, 0x1, 0x8, 0xcb, {{0x33, 0x4, 0x1, 0x2, 0xcc, 0x65, 0x0, 0xc, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0xf3, 0x3, 0x6, [{@empty, 0xffffffff}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x68}, {@private=0xa010101, 0xfa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast1, 0xf5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xffffffff}, {@remote, 0x101}]}, @rr={0x7, 0x1b, 0x42, [@rand_addr=0x64010100, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0x1]}, @lsrr={0x83, 0x23, 0x9b, [@private=0xa010102, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp_prespec={0x44, 0x2c, 0x5b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010100, 0x5e}, {@private=0xa010102, 0x8}, {@broadcast}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000500)={0x18, 0x0, {0x7, @remote, 'veth1_to_team\x00'}}, 0x1e) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x408800, 0x0) ioctl$PPPIOCGUNIT(r9, 0x80047456, &(0x7f0000000580)) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r10, 0x24, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xc, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r11, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eac626f5cd22f9b71200a1a4c7"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "9827490621edf6b0e339faba92360388"}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040044}, 0x4000090) r13 = accept$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000980)=@req={0x10000, 0x10001, 0x2, 0xffff}, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r6) (async) r14 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000a00)={0x28, 0x0, 0x2710, @host}, 0x10, 0x1000) ioctl$sock_TIOCINQ(r14, 0x541b, &(0x7f0000000a40)) (async) pread64(r14, &(0x7f0000000a80)=""/143, 0x8f, 0x8000000000000000) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x40084) 14.470611723s ago: executing program 0 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x17, 0x301, 0x70bd2b, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendto(r2, &(0x7f0000000440)="7d321a87ee373382983ba33fa1988e977545c8404c49979d25ab5cf7b634249a920f088ba995c8ba3fdf863f6ca5726eaabae2a6af8dfc87dad46c726d314e5d60a9d7128d3a5a1c214d725e02d84d4e20ed7da2ebce7d13978d41d340438258d4c723f7e975ecda094834a8cfecc07d112cc437dfe173b2b3edc3d9560fad36e8d73f031c57ac90f957e65637788fb27268b6a8929947e1f085b4e8840671ddf8f19dab560f7a1b7663be4054582d89cc6ef63a27f62dfa0e781341c86c72516feb300de021e889355e0b69cc427d761a4ba659af2becea47278c903873157b", 0xe0, 0x0, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffa}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x1}]}}}]}, 0x40}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x68, r6, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1}, 0x4008000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) accept$nfc_llcp(r8, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) write(r8, &(0x7f00000000c0), 0x0) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000400)={0x7, [0x4, 0xa8b], 0x7}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', r10, 0x7, 0x8, 0xac, 0x7, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2, {[@noop, @timestamp_addr={0x44, 0x14, 0xa5, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}}, {@rand_addr=0x64010100, 0x2}]}, @rr={0x7, 0x23, 0x49, [@local, @local, @rand_addr=0x64010102, @broadcast, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x88, 0x10, "53e2fc590cedb33866d853924471"}, @ssrr={0x89, 0x17, 0xf, [@rand_addr=0x64010102, @loopback, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 3.546472399s ago: executing program 2 (id=5982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x20040080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140011001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r8, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r9) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x3c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=@alg={0x128, 0x10, 0x8, 0x70bd28, 0x25dfdbfc, {{'seqiv(gcm_base(fpu(pcbc(aes)),vmac64(compress_null-generic)))\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0xb733}, {0x8, 0x1, 0x4ba1}, {0x8, 0x1, 0x9250}, {0x8, 0x1, 0x10000}, {0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0xfffffffc}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 3.410644988s ago: executing program 3 (id=5984): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x1000}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) 3.122142514s ago: executing program 3 (id=5987): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000c00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 3.119768789s ago: executing program 2 (id=5989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x5, 0x3, r2}, [@IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x4000000) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ff010000000000000000000000000001640101000000000000000000000000004e20071c4e21ff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100030000000000000f000000000000000600400000000000fffbffffffffffff1c25080000000000a637fffffffffffffcffffffffffffff0700000000000000ffffffffffffffff0000000000000000ff01000000000000fefffffffffffffffefffffff9030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600"], 0x140}}, 0x844) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000143b1b87533ce80c"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048084) unshare(0x2c020400) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="67f594b8", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x5, 0x3, r2}, [@IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x4000000) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ff010000000000000000000000000001640101000000000000000000000000004e20071c4e21ff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100030000000000000f000000000000000600400000000000fffbffffffffffff1c25080000000000a637fffffffffffffcffffffffffffff0700000000000000ffffffffffffffff0000000000000000ff01000000000000fefffffffffffffffefffffff9030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600"], 0x140}}, 0x844) (async) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000143b1b87533ce80c"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048084) (async) unshare(0x2c020400) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="67f594b8", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) 2.898250137s ago: executing program 1 (id=5990): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000340)=""/219, 0x41000, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r3, 0x952de000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r6}, 0x14) syz_emit_ethernet(0x34, &(0x7f0000000300)=ANY=[@ANYRES8=r5, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESDEC=r0], 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000100)=')\x00', 0x412080, &(0x7f0000000140)={@_ha_fsid={[0x1264, 0x2]}, {0x8, 0x3, 0x4, 0x5}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r11, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, 0x0, 0x0) bind$l2tp6(r9, &(0x7f00000002c0)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x5, 0x4}, 0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) r13 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x8, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xfe, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0x10, 0x60}}) 2.763508057s ago: executing program 3 (id=5991): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, 0x0, 0x12}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) 2.737565704s ago: executing program 4 (id=5992): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.678353061s ago: executing program 2 (id=5993): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe25}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe25}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000580080002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0xd0, 0x0, 0x358, 0x358, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x358}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0xd0, 0x0, 0x358, 0x358, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x358}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) 2.451078366s ago: executing program 3 (id=5994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0x6, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000029000000370000006466"], 0x18}, 0x922bac8556bdad8e) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r7}, 0x8) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r8, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}], 0x10) close(r4) 2.412557464s ago: executing program 1 (id=5995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500090007"], 0x4a) 2.343569441s ago: executing program 4 (id=5996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b7a1bc060000000095"], &(0x7f0000000980)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.110912329s ago: executing program 4 (id=5997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d"], 0x44}}, 0x0) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}, {{&(0x7f0000000100)=@nl, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/90}, {&(0x7f0000000600)=""/83}, {&(0x7f0000000740)=""/140}, {&(0x7f0000000800)=""/91}, {&(0x7f0000000ac0)=""/68}, {&(0x7f0000000900)=""/40}, {&(0x7f0000000940)=""/107}, {&(0x7f00000009c0)=""/194}, {&(0x7f0000001ec0)=""/183}], 0x0, &(0x7f0000000c80)=""/229}, 0x1}], 0x1ae, 0x10002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.660040007s ago: executing program 2 (id=5998): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33) 1.383769586s ago: executing program 1 (id=5999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000100)='\x00', 0x80400, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x9]}, {0x4, 0x4, 0x8, 0x4}}, 0x7fff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}, {[0x2, 0x82a, 0xe, 0x80000001]}, 0x4, 0x25, &(0x7f0000000200)=""/37}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r2, 0x7f}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 1.222553942s ago: executing program 3 (id=6000): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000081000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 1.15805497s ago: executing program 2 (id=6001): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRES32], 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8000000}, 0x50) (async) socket(0x40000000015, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x568}, 0x8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r4 = socket(0x15, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="64898f9eb5f055f02d6b5ea82fd3f5847269966f7d59f96afe9293e5853bb25cb9e7b072d4ae508f25fc0193a3e15938d4c774f7264383f76cb2d872f4fd84458566f43965f1e517ab8da0791de4c422df9dc70123273391953180bec87e05485c5f778bdb6f7ea5c3c9d677dc9468ed93c8132a71122e3aac14d3bdd905ba2307625d73cc481257fee838cfd1c224a4da6a8fb0093cbb69c448c41a0849f55d9026d93f3349a72f6a53ff872bdeb3d8807f092422d309823d5681b78e43c0b505f026dfee486aad6fd231ed7d78ac1597d9b390bf127c6d9fa68fd1deacdd681a1fc7e3754f41a713caa1c1c44965d4796b30ae1d94", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x300010c0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) getsockopt(r4, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) 1.123461316s ago: executing program 4 (id=6002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26300bc117920cd4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2a, 0x80000007ff, 0x2}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40011) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.029171311s ago: executing program 1 (id=6003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r1, 0x5450b000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES8], 0x0) 922.89604ms ago: executing program 4 (id=6004): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @short={0x2, 0x2}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f00000008c0)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532315ad340ebe5f1a72c", 0x2b}], 0x2}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x7c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8cb}]}}}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "78dc09acf0e8a20a1331f9e6"}]}, 0x7c}}, 0x800) 841.535642ms ago: executing program 1 (id=6005): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 753.548749ms ago: executing program 4 (id=6006): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 699.213266ms ago: executing program 3 (id=6007): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000012"], 0x3c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{}, "f209419af207117d", "874cb52e6eb66ff61c27be6ac30a6b09", "6df24e7a", "6c6f82e9f17379bc"}, 0x28) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r9, 0x40047438, &(0x7f0000000040)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r10, 0x40047438, &(0x7f0000000200)) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r7, 0x0, 0x20000000002) 571.352812ms ago: executing program 0 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$sock_int(r0, 0x1, 0xc81e23be70120dd9, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) (async) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 538.522331ms ago: executing program 1 (id=6008): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f00000000c0), 0x0, 0x403) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x17, 0x7}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) socket(0x1, 0x80000, 0x5) recvfrom$inet6(r3, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 180.949176ms ago: executing program 2 (id=6010): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33) 0s ago: executing program 0 (id=6011): syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "6ff1af", 0xc, 0x2f, 0x0, @private0, @mcast1, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xd0ffffff}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x102}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) kernel console output (not intermixed with test programs): mode [ 643.117503][T22392] macvlan2: entered allmulticast mode [ 643.120994][T22392] bond6: entered promiscuous mode [ 643.133156][T22392] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 643.172680][T22392] bond6: left promiscuous mode [ 643.347661][T22415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4268'. [ 643.608145][T22429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4271'. [ 643.608309][T22429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4271'. [ 643.711141][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4272'. [ 643.719085][T22433] netlink: 'syz.3.4272': attribute type 1 has an invalid length. [ 643.924513][T22433] bridge4: entered promiscuous mode [ 643.952990][T22433] bond7: (slave bridge4): making interface the new active one [ 643.970126][T22433] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 644.000481][T22441] bridge5: entered promiscuous mode [ 644.023198][T22441] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 644.234172][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 644.846824][T22483] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 644.917912][T22487] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 645.245539][T22499] netlink: 'syz.0.4292': attribute type 5 has an invalid length. [ 645.323296][T22501] sit0: entered promiscuous mode [ 645.323416][T22501] netlink: 'syz.3.4293': attribute type 1 has an invalid length. [ 645.323429][T22501] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4293'. [ 645.526267][T22512] xt_policy: output policy not valid in PREROUTING and INPUT [ 645.632424][T22521] FAULT_INJECTION: forcing a failure. [ 645.632424][T22521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.632450][T22521] CPU: 0 UID: 0 PID: 22521 Comm: syz.3.4299 Not tainted syzkaller #0 PREEMPT(full) [ 645.632468][T22521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.632479][T22521] Call Trace: [ 645.632486][T22521] [ 645.632493][T22521] dump_stack_lvl+0xe8/0x150 [ 645.632556][T22521] should_fail_ex+0x410/0x560 [ 645.632587][T22521] _copy_to_user+0x31/0xb0 [ 645.632611][T22521] simple_read_from_buffer+0xe1/0x170 [ 645.632640][T22521] proc_fail_nth_read+0x1bb/0x230 [ 645.632655][T22521] ? common_file_perm+0x20e/0x2b0 [ 645.632678][T22521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.632707][T22521] ? rw_verify_area+0x24a/0x4c0 [ 645.632733][T22521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.632749][T22521] vfs_read+0x213/0xa80 [ 645.632778][T22521] ? __pfx___mutex_lock+0x10/0x10 [ 645.632801][T22521] ? __pfx_vfs_read+0x10/0x10 [ 645.632827][T22521] ? __fget_files+0x2a/0x420 [ 645.632854][T22521] ? __fget_files+0x3a2/0x420 [ 645.632876][T22521] ? __fget_files+0x2a/0x420 [ 645.632906][T22521] ksys_read+0x150/0x270 [ 645.632933][T22521] ? __pfx_ksys_read+0x10/0x10 [ 645.632970][T22521] do_syscall_64+0x166/0x520 [ 645.633010][T22521] ? trace_irq_disable+0x3b/0x140 [ 645.633033][T22521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.633057][T22521] ? clear_bhb_loop+0x70/0xc0 [ 645.633086][T22521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.633108][T22521] RIP: 0033:0x7f27cfd5e98e [ 645.633123][T22521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.633137][T22521] RSP: 002b:00007f27d0c7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.633155][T22521] RAX: ffffffffffffffda RBX: 00007f27d0c7c6c0 RCX: 00007f27cfd5e98e [ 645.633167][T22521] RDX: 000000000000000f RSI: 00007f27d0c7c0a0 RDI: 0000000000000004 [ 645.633178][T22521] RBP: 00007f27d0c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 645.633188][T22521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.633200][T22521] R13: 00007f27d0026218 R14: 00007f27d0026180 R15: 00007ffd777d5838 [ 645.633226][T22521] [ 645.980503][T22525] syzkaller0: entered promiscuous mode [ 645.980526][T22525] syzkaller0: entered allmulticast mode [ 646.012379][T22525] geneve3: entered promiscuous mode [ 646.041723][T22526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4302'. [ 646.161684][T22533] netlink: 'syz.3.4305': attribute type 1 has an invalid length. [ 646.296733][T22533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4305'. [ 646.381075][T22535] bond9: (slave veth7): Enslaving as an active interface with a down link [ 646.428870][T22533] 8021q: adding VLAN 0 to HW filter on device bond9 [ 646.591342][T22554] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4312'. [ 646.591463][T22554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4312'. [ 646.926752][T22572] tipc: Enabled bearer , priority 0 [ 646.927435][T22572] syzkaller0: entered promiscuous mode [ 646.927457][T22572] syzkaller0: entered allmulticast mode [ 649.817256][T22571] tipc: Resetting bearer [ 649.958120][T22571] tipc: Disabling bearer [ 650.037814][T22565] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.099380][T22565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.109367][T22565] veth1_vlan: left promiscuous mode [ 650.114517][T22565] veth0_vlan: left promiscuous mode [ 650.128012][T22565] veth0_vlan: entered promiscuous mode [ 650.139808][T22565] veth1_vlan: entered promiscuous mode [ 650.139832][T22565] veth1_vlan: entered allmulticast mode [ 650.161666][T22565] veth1_macvtap: left promiscuous mode [ 650.162650][T22565] veth0_macvtap: left promiscuous mode [ 650.176603][T22565] veth0_macvtap: entered promiscuous mode [ 650.177793][T22565] veth1_macvtap: entered promiscuous mode [ 650.181171][T22565] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 650.221284][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.221435][T10652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.223592][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.223701][T10652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.352001][ T30] tipc: Node number set to 767448815 [ 650.482459][T22601] tipc: New replicast peer: 255.255.255.255 [ 650.483646][T22601] tipc: Enabled bearer , priority 26 [ 650.783186][T22603] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 650.783213][T22603] __nla_validate_parse: 2 callbacks suppressed [ 650.783227][T22603] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4326'. [ 650.917215][T22621] netlink: 'syz.2.4333': attribute type 1 has an invalid length. [ 650.917240][T22621] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4333'. [ 651.016540][T22632] netlink: 'syz.2.4333': attribute type 1 has an invalid length. [ 651.016566][T22632] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4333'. [ 651.340486][T22645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4338'. [ 651.516627][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4339'. [ 651.516659][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4339'. [ 651.516678][T22650] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4339'. [ 651.643696][T22663] netlink: 'syz.2.4342': attribute type 7 has an invalid length. [ 651.643721][T22663] netlink: 'syz.2.4342': attribute type 8 has an invalid length. [ 651.858321][T22665] bridge_slave_0: left allmulticast mode [ 651.858352][T22665] bridge_slave_0: left promiscuous mode [ 651.858611][T22665] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.207691][T22669] bridge_slave_1: left allmulticast mode [ 652.278394][T22669] bridge_slave_1: left promiscuous mode [ 652.278677][T22669] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.393890][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4345'. [ 652.572008][T22687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.584861][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4345'. [ 652.732866][T22699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.042648][T22711] vlan2: entered promiscuous mode [ 653.042673][T22711] bridge0: entered promiscuous mode [ 653.128091][T22715] erspan0: left allmulticast mode [ 653.128123][T22715] erspan0: left promiscuous mode [ 653.128366][T22715] bridge3: port 1(erspan0) entered disabled state [ 653.190124][T22715] bond2: (slave bond0): Releasing backup interface [ 653.230333][T22720] xt_CT: No such helper "snmp_trap" [ 653.263080][T22715] bond6: (slave veth0_to_bond): Releasing active interface [ 653.310080][T22715] bond0: (slave bond_slave_0): Releasing backup interface [ 653.323677][T22715] bond0: (slave bond_slave_1): Releasing backup interface [ 653.357642][T22715] team0: Port device team_slave_0 removed [ 653.371650][T22715] team0: Port device team_slave_1 removed [ 653.372122][T22715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.651286][T22739] netlink: 'syz.1.4358': attribute type 16 has an invalid length. [ 653.651313][T22739] netlink: 'syz.1.4358': attribute type 3 has an invalid length. [ 653.651329][T22739] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4358'. [ 654.411960][T22761] netlink: 'syz.1.4364': attribute type 16 has an invalid length. [ 654.411986][T22761] netlink: 'syz.1.4364': attribute type 17 has an invalid length. [ 654.563370][T22745] ksmbd: Unknown IPC event: 1, ignore. [ 655.081099][T22775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.462041][T22761] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 655.747959][T22761] vlan2: left promiscuous mode [ 655.747980][T22761] bridge0: left promiscuous mode [ 655.825123][ T1172] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.825165][ T1172] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.846008][ T1172] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.846046][ T1172] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.846128][ T1172] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.846157][ T1172] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.846197][ T1172] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.846226][ T1172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.854607][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 656.033887][T22785] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 656.192695][T19578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.192721][T19578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.219890][ T279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.219954][ T279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.302385][T22806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 656.349519][T22815] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4374'. [ 656.461833][T22806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.590311][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4376'. [ 656.759499][T22836] netlink: 9160 bytes leftover after parsing attributes in process `syz.1.4377'. [ 656.778006][T22836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4377'. [ 656.931469][T22843] netlink: 'syz.3.4380': attribute type 10 has an invalid length. [ 656.951449][T22843] team0: Port device dummy0 added [ 656.953612][T22843] netlink: 'syz.3.4380': attribute type 10 has an invalid length. [ 657.021800][T22843] team0: Port device dummy0 removed [ 657.146534][T22856] netlink: 'syz.0.4383': attribute type 16 has an invalid length. [ 657.146561][T22856] netlink: 'syz.0.4383': attribute type 17 has an invalid length. [ 657.218764][T22856] lo: left promiscuous mode [ 657.388447][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 657.446881][T22869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4384'. [ 657.830392][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4385'. [ 659.125903][T10652] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.125962][T10652] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.126004][T10652] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.126044][T10652] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.292711][T22867] syzkaller1: entered promiscuous mode [ 659.292739][T22867] syzkaller1: entered allmulticast mode [ 659.468317][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'. [ 659.757495][T22912] netlink: 'syz.3.4392': attribute type 3 has an invalid length. [ 659.850637][T22915] netlink: 'syz.3.4394': attribute type 1 has an invalid length. [ 659.893770][T22919] openvswitch: netlink: Flow actions attr not present in new flow. [ 660.126438][T22933] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 660.129214][T22933] bond2 (unregistering): Released all slaves [ 660.172907][T22942] netlink: 'syz.4.4398': attribute type 1 has an invalid length. [ 660.272269][T22942] bond4: entered promiscuous mode [ 660.272695][T22942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.318076][T22928] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.318583][T22928] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 660.318607][T22928] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 660.322423][T22928] bond4: (slave gre3): making interface the new active one [ 660.322449][T22928] gre3: entered promiscuous mode [ 660.331329][T22928] bond4: (slave gre3): Enslaving as an active interface with an up link [ 660.531133][T22948] syzkaller1: entered promiscuous mode [ 660.531161][T22948] syzkaller1: entered allmulticast mode [ 661.033201][T22963] macsec1: entered promiscuous mode [ 661.169019][T22982] __nla_validate_parse: 4 callbacks suppressed [ 661.169042][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'. [ 661.203049][T22981] netlink: 'syz.2.4409': attribute type 1 has an invalid length. [ 661.263822][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 661.313570][T22981] bond4: (slave veth0_to_bond): making interface the new active one [ 661.325890][T22981] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 661.432754][T22981] macvlan2: entered promiscuous mode [ 661.432780][T22981] macvlan2: entered allmulticast mode [ 661.447650][T22981] bond4: entered promiscuous mode [ 661.447677][T22981] veth0_to_bond: entered promiscuous mode [ 661.448731][T22981] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 661.483199][T22981] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 661.509267][T22981] bond4: left promiscuous mode [ 661.509286][T22981] veth0_to_bond: left promiscuous mode [ 661.598465][T10652] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.599236][T10652] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.599278][T10652] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.599317][T10652] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.296777][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'. [ 662.450807][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4423'. [ 662.491340][T23036] netlink: 'syz.0.4424': attribute type 1 has an invalid length. [ 662.491365][T23036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4424'. [ 662.491385][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 662.585661][T23039] syzkaller1: entered promiscuous mode [ 662.585689][T23039] syzkaller1: entered allmulticast mode [ 663.185883][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4432'. [ 663.256600][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 663.385565][T23083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4435'. [ 663.468172][T23084] netlink: 'syz.3.4435': attribute type 4 has an invalid length. [ 663.468198][T23084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4435'. [ 664.890618][T23131] ip_tables: iptables: counters copy to user failed while replacing table [ 664.963079][T23134] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 665.290376][T23152] hsr_slave_0 (unregistering): left promiscuous mode [ 666.436088][T23209] netlink: 'syz.4.4475': attribute type 9 has an invalid length. [ 666.632054][T23214] __nla_validate_parse: 8 callbacks suppressed [ 666.632078][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4477'. [ 666.957543][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 667.052968][T23225] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.176152][T23232] openvswitch: netlink: Multiple metadata blocks provided [ 667.179972][T23232] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4482'. [ 667.288465][T23225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.296839][T23225] veth1_vlan: left promiscuous mode [ 667.318229][T23225] veth0_vlan: left promiscuous mode [ 667.340050][T23225] veth0_vlan: entered promiscuous mode [ 667.378859][T23225] veth1_vlan: entered promiscuous mode [ 667.420144][T23225] veth1_macvtap: left promiscuous mode [ 667.436063][T23225] veth0_macvtap: left promiscuous mode [ 667.457113][T23225] veth0_macvtap: entered promiscuous mode [ 667.470529][T23225] veth1_macvtap: entered promiscuous mode [ 667.499949][T23225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.501168][T23225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.502331][T23225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.512921][T23225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.555785][T23225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.558728][T23225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.630301][T23225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.632236][T23225] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.633820][T23225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 667.777759][T23226] bond3: option updelay: invalid value (18446744073709518847) [ 667.777779][T23226] bond3: option updelay: allowed values 0 - 2147483647 [ 668.103022][T23226] bond3 (unregistering): Released all slaves [ 668.218753][T23242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4486'. [ 668.308699][T23229] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 668.309036][T23229] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 668.313524][ T279] ip6_tunnel: L xmit: Local address not yet configured! [ 668.342954][T13496] openvswitch: cpu_id mismatch with handler threads [ 668.424840][ T279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.489820][ T279] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 668.490153][ T279] bond9: (slave veth7): making interface the new active one [ 668.541088][ T279] bond9: active interface up! [ 668.592923][T23247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.602814][T19578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.611178][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.611306][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.682066][T23249] tipc: Can't bind to reserved service type 2 [ 669.042115][T23259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4493'. [ 669.071982][T23260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4494'. [ 669.275005][ T990] openvswitch: cpu_id mismatch with handler threads [ 669.702359][T23275] bond10: option all_slaves_active: invalid value (255) [ 669.708356][T23275] bond10 (unregistering): Released all slaves [ 669.802762][T23279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4502'. [ 669.940224][T23280] block nbd2: shutting down sockets [ 670.189333][T23292] lo: entered allmulticast mode [ 670.221765][T23291] lo: left allmulticast mode [ 670.370571][T23298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4507'. [ 670.782365][T23308] netlink: 'syz.0.4511': attribute type 1 has an invalid length. [ 670.928745][T23308] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 671.395752][T23330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.562749][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4520'. [ 671.649207][T23341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4522'. [ 671.903143][T23349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4523'. [ 671.903179][T23349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4523'. [ 671.994255][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 672.178868][T23358] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 672.458589][T23364] bond0: (slave bridge0): Releasing backup interface [ 672.476550][T23364] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.477302][T23364] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.531326][T23364] bridge_slave_0: left allmulticast mode [ 672.531357][T23364] bridge_slave_0: left promiscuous mode [ 672.531612][T23364] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.561949][T23364] bridge_slave_1: left allmulticast mode [ 672.561976][T23364] bridge_slave_1: left promiscuous mode [ 672.562188][T23364] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.589946][T23364] bond0: (slave bond_slave_0): Releasing backup interface [ 672.626803][T23364] bond0: (slave bond_slave_1): Releasing backup interface [ 672.663533][T23364] team0: Port device team_slave_0 removed [ 672.680187][T23364] team0: Port device team_slave_1 removed [ 672.712416][T23364] bond4: (slave gre3): Releasing backup interface [ 672.712445][T23364] gre3: left promiscuous mode [ 672.758841][T23368] team0: Mode changed to "activebackup" [ 672.837451][T23376] team0: Unable to change to the same mode the team is in [ 672.906747][T23382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4533'. [ 673.009736][T23386] netlink: 'syz.0.4533': attribute type 1 has an invalid length. [ 674.409162][T23408] netlink: 'syz.4.4539': attribute type 1 has an invalid length. [ 676.048255][T23430] IPv6: sit2: Disabled Multicast RS [ 676.258886][T23439] bond6 (unregistering): Released all slaves [ 677.213723][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4558'. [ 677.864190][T23509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.902237][T23506] bond6: option ad_select: invalid value (34) [ 677.911722][T23506] bond6 (unregistering): Released all slaves [ 678.196678][T23521] ip_tables: iptables: counters copy to user failed while replacing table [ 678.421751][T23529] IPVS: set_ctl: invalid protocol: 131 172.20.20.187:20002 [ 678.485282][T23531] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4579'. [ 678.719850][T23537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4582'. [ 678.754624][T23539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4583'. [ 679.021559][T23556] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 679.045528][T23556] xt_TCPMSS: Only works on TCP SYN packets [ 679.093218][T23557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4587'. [ 679.186780][T23564] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4589'. [ 679.186817][T23564] netlink: 'syz.4.4589': attribute type 3 has an invalid length. [ 679.368694][T23562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4588'. [ 679.403831][T23562] veth1_to_team: entered promiscuous mode [ 679.458975][T23562] veth1_to_team: left promiscuous mode [ 680.040594][T23584] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4595'. [ 680.040628][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'. [ 680.040647][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'. [ 680.074116][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 680.752312][T23599] netlink: 'syz.4.4600': attribute type 1 has an invalid length. [ 680.752336][T23599] netlink: 'syz.4.4600': attribute type 7 has an invalid length. [ 680.752351][T23599] netlink: 'syz.4.4600': attribute type 8 has an invalid length. [ 680.752366][T23599] netlink: 'syz.4.4600': attribute type 1 has an invalid length. [ 682.127279][T23640] netlink: 'syz.0.4611': attribute type 40 has an invalid length. [ 682.130017][T23644] netlink: 'syz.0.4611': attribute type 40 has an invalid length. [ 682.213223][T23639] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 682.228400][T23639] bond6 (unregistering): Released all slaves [ 682.499049][T23661] __nla_validate_parse: 4 callbacks suppressed [ 682.499070][T23661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4615'. [ 682.523084][T23652] bond4: option resend_igmp: invalid value (2878) [ 682.523111][T23652] bond4: option resend_igmp: allowed values 0 - 255 [ 682.538869][T23652] bond4 (unregistering): Released all slaves [ 682.601854][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4615'. [ 683.097254][T23680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4622'. [ 683.161900][T23677] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20000 [ 683.330929][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4628'. [ 683.330965][T23689] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 683.585474][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4632'. [ 683.740218][T23717] tc_dump_action: action bad kind [ 683.740436][T23710] tc_dump_action: action bad kind [ 684.179018][T23733] pimreg: tun_chr_ioctl cmd 1074025681 [ 684.180518][T23733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4634'. [ 684.185137][T23733] netlink: 'syz.2.4634': attribute type 1 has an invalid length. [ 684.185197][T23733] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4634'. [ 684.321213][T23736] tipc: New replicast peer: 255.255.255.255 [ 684.321619][T23736] tipc: Enabled bearer , priority 26 [ 684.388398][T23737] ip_tables: iptables: counters copy to user failed while replacing table [ 685.321856][T23744] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.367237][T23744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.507794][T23744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.507822][T23744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.539676][T23744] veth1_vlan: left promiscuous mode [ 685.550066][T23744] veth0_vlan: left promiscuous mode [ 685.560689][T23744] veth0_vlan: entered promiscuous mode [ 685.570839][T23744] veth1_vlan: entered promiscuous mode [ 685.617443][T23744] veth1_macvtap: left promiscuous mode [ 685.622142][T23744] veth0_macvtap: left promiscuous mode [ 685.636422][T23744] veth0_macvtap: entered promiscuous mode [ 685.639036][T23744] veth1_macvtap: entered promiscuous mode [ 685.693109][T23744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.693821][T23744] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 685.711403][T23744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.729699][T23744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.742253][T23744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.772199][T23744] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 685.812130][T23744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.821518][T23758] netlink: NAT attribute has 1 unknown bytes [ 685.821556][T23758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.841695][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.883071][T23758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.947609][T23744] bridge0: port 1(batadv1) entered blocking state [ 685.947744][T23744] bridge0: port 1(batadv1) entered forwarding state [ 685.968994][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4642'. [ 685.980130][T23744] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 686.308186][T23744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.442914][ T9] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 686.449519][ T25] tipc: Node number set to 188933532 [ 686.546092][ T12] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 686.546372][ T12] bond2: (slave veth0_to_bond): making interface the new active one [ 686.657440][ T12] bond2: active interface up! [ 686.698166][T19578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.728482][T19578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.730595][T19578] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.730840][T19578] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.763023][T19578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.770004][ T990] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.825935][ T990] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.998993][ T1172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.113661][T23791] syzkaller0: entered promiscuous mode [ 687.113686][T23791] syzkaller0: entered allmulticast mode [ 687.185197][T13494] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 687.686584][T23805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4654'. [ 687.758649][T23807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4655'. [ 687.826717][T23810] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 688.094404][T23824] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4660'. [ 688.555639][T23826] bridge0: port 1(batadv1) entered disabled state [ 689.115402][T23862] netlink: 'syz.4.4669': attribute type 1 has an invalid length. [ 689.175519][T23859] tipc: Enabling of bearer rejected, already enabled [ 689.397717][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4672'. [ 689.397746][T23871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4672'. [ 689.496179][T23862] veth5: entered allmulticast mode [ 689.512420][T23862] bond6: (slave veth5): Enslaving as an active interface with a down link [ 689.745207][T23875] SET target dimension over the limit! [ 689.833618][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4673'. [ 689.833649][T23875] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 690.150461][T23892] tipc: New replicast peer: 255.255.255.255 [ 690.150912][T23892] tipc: Enabled bearer , priority 26 [ 690.249258][T23902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4684'. [ 690.261241][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'. [ 690.430074][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'. [ 690.713870][T23927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.714197][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 690.749961][T23910] syzkaller0: entered promiscuous mode [ 690.749990][T23910] syzkaller0: entered allmulticast mode [ 690.805560][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4687'. [ 691.120548][T23947] netlink: 'syz.3.4697': attribute type 1 has an invalid length. [ 693.829228][T23947] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 693.980619][T23956] netlink: 'syz.0.4700': attribute type 11 has an invalid length. [ 694.038405][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 694.061699][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 694.061772][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 694.061811][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 694.087277][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 694.306081][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4701'. [ 694.791659][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 695.276910][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4720'. [ 695.382174][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4721'. [ 695.382213][T24029] netlink: 'syz.2.4721': attribute type 7 has an invalid length. [ 695.382231][T24029] netlink: 'syz.2.4721': attribute type 8 has an invalid length. [ 695.382246][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4721'. [ 695.637239][T24040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4725'. [ 695.716127][T24042] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4728'. [ 695.716164][T24042] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4728'. [ 695.718616][T24042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4728'. [ 696.074712][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 696.760416][T24081] xt_NFQUEUE: number of total queues is 0 [ 698.862656][T24092] ip6erspan0: entered allmulticast mode [ 699.059923][T24103] __nla_validate_parse: 3 callbacks suppressed [ 699.059947][T24103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4740'. [ 699.274872][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 699.570544][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4750'. [ 699.570623][T24128] netlink: 'syz.0.4750': attribute type 1 has an invalid length. [ 699.570639][T24128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4750'. [ 699.643512][T24135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 699.776944][T24138] bond5: entered promiscuous mode [ 699.776969][T24138] bond5: entered allmulticast mode [ 699.821551][T24149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4751'. [ 699.822471][T24149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4751'. [ 699.971421][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4754'. [ 701.525416][T24207] syzkaller0: entered promiscuous mode [ 701.525464][T24207] syzkaller0: entered allmulticast mode [ 701.942871][T24221] netlink: 'syz.4.4772': attribute type 1 has an invalid length. [ 702.102413][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4773'. [ 702.151810][T24228] ipvlan2: entered allmulticast mode [ 702.151837][T24228] syz_tun: entered allmulticast mode [ 702.290029][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4776'. [ 702.393825][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'. [ 703.081180][T24252] syzkaller0: entered promiscuous mode [ 703.081206][T24252] syzkaller0: entered allmulticast mode [ 703.458577][T24266] batadv_slave_1: entered promiscuous mode [ 703.475942][T24266] ipvlan1: entered promiscuous mode [ 703.481257][T24266] team0: Device ipvlan1 failed to register rx_handler [ 703.549627][T24265] batadv_slave_1: left promiscuous mode [ 703.620461][T24282] syzkaller0: entered promiscuous mode [ 703.620504][T24282] syzkaller0: entered allmulticast mode [ 703.889281][T24299] netlink: zone id is out of range [ 703.889300][T24299] netlink: zone id is out of range [ 703.889310][T24299] netlink: zone id is out of range [ 703.889319][T24299] netlink: zone id is out of range [ 703.889328][T24299] netlink: zone id is out of range [ 703.889338][T24299] netlink: zone id is out of range [ 703.889351][T24299] netlink: zone id is out of range [ 703.889361][T24299] netlink: zone id is out of range [ 703.889370][T24299] netlink: zone id is out of range [ 703.889379][T24299] netlink: zone id is out of range [ 704.143019][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.143071][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.143112][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.143150][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.366017][T24316] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 704.946587][T24347] bridge0: port 2(vlan4) entered blocking state [ 704.947115][T24347] bridge0: port 2(vlan4) entered disabled state [ 704.947263][T24347] vlan4: entered allmulticast mode [ 704.947279][T24347] geneve0: entered allmulticast mode [ 704.952022][T24347] vlan4: entered promiscuous mode [ 704.952068][T24347] geneve0: entered promiscuous mode [ 705.407313][T24371] __nla_validate_parse: 6 callbacks suppressed [ 705.407338][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4817'. [ 706.643606][T24415] batman_adv: batadv0: Adding interface: macvlan2 [ 706.643632][T24415] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.643768][T24415] batman_adv: batadv0: Interface activated: macvlan2 [ 707.002391][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.002455][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.077510][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.077574][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.164569][T24443] syzkaller0: Caught tx_queue_len zero misconfig [ 707.217381][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.217445][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.310334][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.310397][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.428188][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 707.826496][T24479] netlink: 'syz.3.4845': attribute type 1 has an invalid length. [ 709.351560][T24565] netlink: 'syz.3.4872': attribute type 1 has an invalid length. [ 709.824442][T24577] FAULT_INJECTION: forcing a failure. [ 709.824442][T24577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.824483][T24577] CPU: 1 UID: 0 PID: 24577 Comm: syz.0.4876 Not tainted syzkaller #0 PREEMPT(full) [ 709.824522][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.824537][T24577] Call Trace: [ 709.824546][T24577] [ 709.824557][T24577] dump_stack_lvl+0xe8/0x150 [ 709.824594][T24577] should_fail_ex+0x410/0x560 [ 709.824627][T24577] _copy_from_iter+0x1d3/0x1660 [ 709.824655][T24577] ? __alloc_skb+0x27a/0x7a0 [ 709.824685][T24577] ? __alloc_skb+0x27a/0x7a0 [ 709.824714][T24577] ? __alloc_skb+0x27a/0x7a0 [ 709.824742][T24577] ? __pfx__copy_from_iter+0x10/0x10 [ 709.824766][T24577] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 709.824802][T24577] ? __alloc_skb+0x27a/0x7a0 [ 709.824826][T24577] ? __alloc_skb+0x27a/0x7a0 [ 709.824860][T24577] ? netlink_sendmsg+0x650/0xb40 [ 709.824882][T24577] ? skb_put+0x112/0x210 [ 709.824931][T24577] netlink_sendmsg+0x6c0/0xb40 [ 709.824971][T24577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.825004][T24577] ? apparmor_socket_sendmsg+0x18b/0x360 [ 709.825034][T24577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.825056][T24577] sock_sendmsg_nosec+0x14e/0x190 [ 709.825083][T24577] ____sys_sendmsg+0x54e/0x850 [ 709.825119][T24577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.825161][T24577] ? import_iovec+0x73/0xa0 [ 709.825194][T24577] ___sys_sendmsg+0x2a5/0x360 [ 709.825223][T24577] ? __lock_acquire+0x747/0x2de0 [ 709.825253][T24577] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.825324][T24577] ? __fget_files+0x2a/0x420 [ 709.825355][T24577] ? __fget_files+0x3a2/0x420 [ 709.825398][T24577] __x64_sys_sendmsg+0x1b1/0x290 [ 709.825433][T24577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.825494][T24577] do_syscall_64+0x166/0x520 [ 709.825522][T24577] ? trace_irq_disable+0x3b/0x140 [ 709.825545][T24577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.825569][T24577] ? clear_bhb_loop+0x70/0xc0 [ 709.825598][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.825620][T24577] RIP: 0033:0x7f319419e159 [ 709.825641][T24577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.825661][T24577] RSP: 002b:00007f3195021028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.825686][T24577] RAX: ffffffffffffffda RBX: 00007f3194425fa0 RCX: 00007f319419e159 [ 709.825703][T24577] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 709.825718][T24577] RBP: 00007f3195021090 R08: 0000000000000000 R09: 0000000000000000 [ 709.825733][T24577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.825747][T24577] R13: 00007f3194426038 R14: 00007f3194425fa0 R15: 00007ffebc90b608 [ 709.825785][T24577] [ 711.252511][T24633] __nla_validate_parse: 8 callbacks suppressed [ 711.252534][T24633] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4892'. [ 711.434163][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 711.468697][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4895'. [ 711.562480][T24640] syzkaller0: entered promiscuous mode [ 711.562508][T24640] syzkaller0: entered allmulticast mode [ 711.976510][T24664] xt_hashlimit: size too large, truncated to 1048576 [ 711.976761][T24664] xt_hashlimit: max too large, truncated to 1048576 [ 712.200457][T24675] FAULT_INJECTION: forcing a failure. [ 712.200457][T24675] name failslab, interval 1, probability 0, space 0, times 0 [ 712.200493][T24675] CPU: 1 UID: 0 PID: 24675 Comm: syz.4.4905 Not tainted syzkaller #0 PREEMPT(full) [ 712.200519][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.200533][T24675] Call Trace: [ 712.200543][T24675] [ 712.200553][T24675] dump_stack_lvl+0xe8/0x150 [ 712.200592][T24675] should_fail_ex+0x410/0x560 [ 712.200623][T24675] ? __alloc_skb+0x1db/0x7a0 [ 712.200651][T24675] should_failslab+0xa8/0x100 [ 712.200681][T24675] ? __alloc_skb+0x1db/0x7a0 [ 712.200712][T24675] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 712.200748][T24675] ? __alloc_skb+0x18d/0x7a0 [ 712.200776][T24675] ? __alloc_skb+0x1db/0x7a0 [ 712.200811][T24675] __alloc_skb+0x1db/0x7a0 [ 712.200844][T24675] netlink_ack+0x136/0xb30 [ 712.200878][T24675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 712.200911][T24675] ? __copy_skb_header+0xa3/0x4a0 [ 712.200956][T24675] netlink_rcv_skb+0x2a4/0x4a0 [ 712.200993][T24675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 712.201024][T24675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 712.201075][T24675] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.201110][T24675] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.201160][T24675] netlink_unicast+0x7bd/0x940 [ 712.201206][T24675] netlink_sendmsg+0x813/0xb40 [ 712.201239][T24675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.201272][T24675] ? apparmor_socket_sendmsg+0x18b/0x360 [ 712.201303][T24675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.201325][T24675] sock_sendmsg_nosec+0x14e/0x190 [ 712.201352][T24675] ____sys_sendmsg+0x54e/0x850 [ 712.201390][T24675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.201432][T24675] ? import_iovec+0x73/0xa0 [ 712.201467][T24675] ___sys_sendmsg+0x2a5/0x360 [ 712.201497][T24675] ? __lock_acquire+0x747/0x2de0 [ 712.201526][T24675] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.201598][T24675] ? __fget_files+0x2a/0x420 [ 712.201630][T24675] ? __fget_files+0x3a2/0x420 [ 712.201674][T24675] __x64_sys_sendmsg+0x1b1/0x290 [ 712.201710][T24675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 712.201766][T24675] do_syscall_64+0x166/0x520 [ 712.201795][T24675] ? trace_irq_disable+0x3b/0x140 [ 712.201819][T24675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.201842][T24675] ? clear_bhb_loop+0x70/0xc0 [ 712.201872][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.201895][T24675] RIP: 0033:0x7f4cc039e159 [ 712.201916][T24675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.201935][T24675] RSP: 002b:00007f4cc12e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.201959][T24675] RAX: ffffffffffffffda RBX: 00007f4cc0625fa0 RCX: 00007f4cc039e159 [ 712.201977][T24675] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 712.201992][T24675] RBP: 00007f4cc12e3090 R08: 0000000000000000 R09: 0000000000000000 [ 712.202008][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.202021][T24675] R13: 00007f4cc0626038 R14: 00007f4cc0625fa0 R15: 00007ffc16923a98 [ 712.202057][T24675] [ 713.194248][T24700] ipvlan2: entered allmulticast mode [ 713.194273][T24700] macvlan1: entered allmulticast mode [ 713.196552][T24700] batman_adv: batadv0: Adding interface: ipvlan2 [ 713.196569][T24700] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.196841][T24700] batman_adv: batadv0: Interface activated: ipvlan2 [ 713.204877][T24700] netlink: 38 bytes leftover after parsing attributes in process `syz.1.4913'. [ 714.221535][T24736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4928'. [ 714.282122][T24738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4928'. [ 714.358908][T24751] netlink: 'syz.4.4930': attribute type 2 has an invalid length. [ 714.358932][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4930'. [ 714.461041][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4931'. [ 714.503526][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'. [ 714.538973][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'. [ 714.611953][T24760] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 714.650137][T24760] bond10 (unregistering): Released all slaves [ 714.925378][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.925434][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.925475][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.925524][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 715.152525][T24784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4934'. [ 715.274158][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 716.256087][T24823] ±ÿ: renamed from lo (while UP) [ 716.554171][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.666862][T24844] __nla_validate_parse: 1 callbacks suppressed [ 716.666886][T24844] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4955'. [ 716.918182][T24855] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 717.452105][T24884] nbd: must specify a size in bytes for the device [ 718.414973][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415016][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415046][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415074][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415106][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415135][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415165][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415193][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415225][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415254][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415282][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415310][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415338][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415365][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415393][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415422][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415451][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415479][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415511][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415539][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415569][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415597][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415635][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415662][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415691][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415726][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415754][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415782][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415810][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415837][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415866][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415892][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.415920][T24942] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20002 [ 718.726182][T24946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'. [ 719.368545][T24975] Unsupported ieee802154 address type: 0 [ 719.826939][T24991] netlink: 'syz.2.4999': attribute type 4 has an invalid length. [ 719.831639][T24991] netlink: 'syz.2.4999': attribute type 4 has an invalid length. [ 721.903004][T24955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.187361][T25014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5004'. [ 722.806823][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 722.978562][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5016'. [ 723.047940][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5016'. [ 723.286404][ T279] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.289519][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.289635][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.289731][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.660354][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 724.037309][T25088] netlink: 'syz.3.5028': attribute type 1 has an invalid length. [ 724.106545][T25088] lo: entered promiscuous mode [ 724.145797][T25088] tunl0: entered promiscuous mode [ 724.162344][T25088] gre0: entered promiscuous mode [ 724.181357][T25088] gretap0: entered promiscuous mode [ 724.190539][T25088] erspan0: entered promiscuous mode [ 724.192012][T25088] ip_vti0: entered promiscuous mode [ 724.193344][T25088] ip6_vti0: entered promiscuous mode [ 724.232304][T25088] ip6tnl0: entered promiscuous mode [ 724.249936][T25088] ip6gre0: entered promiscuous mode [ 724.280766][T25088] syz_tun: entered promiscuous mode [ 724.309170][T25088] ip6gretap0: entered promiscuous mode [ 724.798228][T25121] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5037'. [ 724.798253][T25121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5037'. [ 724.798274][T25121] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5037'. [ 724.889715][T25115] netlink: 'syz.3.5036': attribute type 21 has an invalid length. [ 724.889808][T25115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5036'. [ 725.729068][T25165] net_ratelimit: 497 callbacks suppressed [ 725.729087][T25165] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 725.729107][T25165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.873502][T25169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5051'. [ 726.351852][T25188] ieee802154 phy1 wpan1: encryption failed: -90 [ 726.878383][T25216] dummy0: mtu less than device minimum [ 727.495079][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5072'. [ 727.681979][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5072'. [ 727.855316][T25237] netlink: 'syz.4.5072': attribute type 3 has an invalid length. [ 728.669564][T25235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.714257][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 731.914502][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.732834][T25294] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 732.747791][T25290] syzkaller0: entered promiscuous mode [ 732.747815][T25290] syzkaller0: entered allmulticast mode [ 732.780121][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5088'. [ 732.822809][T25293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 732.823362][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.823492][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.823617][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.823702][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.823796][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.852134][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.870614][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.870897][T25295] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5087'. [ 732.969178][ T31] audit: type=1804 audit(1790729274.125:19): pid=25294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5089" name="/newroot/368/memory.events" dev="tmpfs" ino=1897 res=1 errno=0 [ 733.070584][ T279] pim6reg: left allmulticast mode [ 733.082653][ T279] batman_adv: batadv0: Interface deactivated: gretap1 [ 733.486428][ T279] erspan0 (unregistering): left promiscuous mode [ 733.513473][ T279] batman_adv: batadv0: Removing interface: gretap1 [ 733.542335][ T279] gretap0 (unregistering): left promiscuous mode [ 733.693106][ T279] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 733.693136][ T279] bridge9 (unregistering): left promiscuous mode [ 733.730927][ T279]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.745217][ T279]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.747089][ T279]  (unregistering): Released all slaves [ 733.753163][ T279] bond1 (unregistering): Released all slaves [ 733.782013][ T279] bond2 (unregistering): Released all slaves [ 733.801962][ T279] bond3 (unregistering): Released all slaves [ 733.817907][ T279] bond0 (unregistering): Released all slaves [ 733.850083][ T279] bond4 (unregistering): Released all slaves [ 733.867124][ T279] bond5 (unregistering): (slave veth11): Releasing active interface [ 733.869414][ T279] bond5 (unregistering): (slave veth17): Releasing active interface [ 733.870918][ T279] bond5 (unregistering): Released all slaves [ 733.901222][ T279] bond6 (unregistering): Released all slaves [ 733.928774][ T279] bond7 (unregistering): Released all slaves [ 733.948728][ T279] bond8 (unregistering): (slave veth19): Releasing active interface [ 733.950268][ T279] bond8 (unregistering): Released all slaves [ 733.976932][ T279] bond9 (unregistering): Released all slaves [ 734.002143][ T279] bond10 (unregistering): Released all slaves [ 734.357402][T25324] syzkaller1: entered promiscuous mode [ 734.357428][T25324] syzkaller1: entered allmulticast mode [ 734.377435][ T279] tipc: Left network mode [ 734.511292][ T279] IPVS: stopping backup sync thread 14070 ... [ 734.592772][T25337] netlink: 'syz.2.5098': attribute type 12 has an invalid length. [ 734.592803][T25337] netlink: 'syz.2.5098': attribute type 29 has an invalid length. [ 735.475492][ T31] audit: type=1804 audit(1790729276.635:20): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5101" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2192 res=1 errno=0 [ 735.475647][ T31] audit: type=1800 audit(1790729276.635:21): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5101" name="cgroup.controllers" dev="tmpfs" ino=2192 res=0 errno=0 [ 735.746975][T25361] openvswitch: netlink: IP tunnel dst address not specified [ 735.803646][T25363] netlink: 'syz.2.5106': attribute type 32 has an invalid length. [ 735.822764][T25361] netlink: 'syz.3.5103': attribute type 10 has an invalid length. [ 736.269751][T25385] netlink: 'syz.1.5113': attribute type 2 has an invalid length. [ 736.308288][T25385] ´: entered promiscuous mode [ 736.390618][T25391] netlink: 'syz.0.5115': attribute type 21 has an invalid length. [ 736.851215][T25391] netlink: 'syz.0.5115': attribute type 4 has an invalid length. [ 736.851234][T25391] netlink: 'syz.0.5115': attribute type 3 has an invalid length. [ 737.677743][T25431] xt_hashlimit: size too large, truncated to 1048576 [ 737.777530][T25434] @0Ù: renamed from wg0 (while UP) [ 737.798979][T25436] xt_hashlimit: size too large, truncated to 1048576 [ 739.500453][ T279] hsr_slave_0: left promiscuous mode [ 739.502095][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.502117][ T279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.611059][ T279] veth1_macvtap: left promiscuous mode [ 739.611115][ T279] veth0_macvtap: left promiscuous mode [ 739.611270][ T279] veth1_vlan: left promiscuous mode [ 739.611343][ T279] veth0_vlan: left promiscuous mode [ 740.150497][ T279] team0 (unregistering): Port device team_slave_1 removed [ 740.182642][ T279] team0 (unregistering): Port device team_slave_0 removed [ 740.505286][T25499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.721373][T25518] netlink: 'syz.1.5145': attribute type 34 has an invalid length. [ 740.721398][T25518] __nla_validate_parse: 31 callbacks suppressed [ 740.721413][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5145'. [ 740.966128][ T279] IPVS: stop unused estimator thread 0... [ 741.013167][T25531] bridge0: entered promiscuous mode [ 741.013233][T25531] bridge0: entered allmulticast mode [ 741.167935][T25537] netlink: 'syz.1.5150': attribute type 11 has an invalid length. [ 741.167960][T25537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5150'. [ 741.536426][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5153'. [ 741.859565][T25553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.741522][T25594] syzkaller1: entered promiscuous mode [ 742.741548][T25594] syzkaller1: entered allmulticast mode [ 743.044595][ T279] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 743.552991][T25625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5173'. [ 744.231777][T25633] netlink: 'syz.1.5175': attribute type 4 has an invalid length. [ 745.941040][T25599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.153230][T25655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5184'. [ 746.164148][T25655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5184'. [ 747.275848][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.392319][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.392413][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.409886][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.411099][T25700] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 747.412422][T25700] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 747.412473][T25700] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 747.467770][T25707] xt_CONNSECMARK: invalid mode: 254 [ 747.482196][T25700] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 747.595592][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.601864][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.624720][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.631639][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.642892][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.661286][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.669236][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.677609][T25700] netdevsim0 speed is unknown, defaulting to 1000 [ 747.915046][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.074753][T25728] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 748.074753][T25728] Please contact the netfilter-devel mailing list or update your nftables rules. [ 748.150258][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198015][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198164][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198289][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198425][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198554][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.198681][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.201898][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 748.346932][T25723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 749.093552][T25765] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20000 [ 749.149897][T25767] ip_tables: iptables: counters copy to user failed while replacing table [ 751.535439][T25861] __nla_validate_parse: 34 callbacks suppressed [ 751.535464][T25861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5227'. [ 752.047334][T25877] netlink: 'syz.4.5229': attribute type 2 has an invalid length. [ 753.184265][T25827] batman_adv: batadv0: Interface deactivated: macvlan2 [ 753.215177][T10684] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.215220][T10684] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.215250][T10684] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.216218][T10684] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.216251][T10684] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.216281][T10684] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.216324][T10684] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.216353][T10684] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.216382][T10684] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.216428][T10684] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.216456][T10684] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.216480][T10684] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.419215][T25868] syzkaller0: entered promiscuous mode [ 753.419245][T25868] syzkaller0: entered allmulticast mode [ 753.440993][T25877] ´: entered promiscuous mode [ 753.441806][ T5760] netdevsim0 speed is unknown, defaulting to 1000 [ 753.536634][T25889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5232'. [ 754.568257][T25908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5235'. [ 757.707492][T25929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5238'. [ 757.992981][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.993364][T25929] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.034911][T25951] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 758.042427][T25953] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 758.133502][T25929] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 758.311363][T25946] syzkaller1: entered promiscuous mode [ 758.311391][T25946] syzkaller1: entered allmulticast mode [ 758.460681][T25963] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 758.508904][T25963] netlink: 'syz.2.5245': attribute type 1 has an invalid length. [ 758.582730][T25967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5245'. [ 758.629617][T25963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 759.060122][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5251'. [ 759.060147][T25985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5251'. [ 759.092022][T25982] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 759.704535][T25982] bond6 (unregistering): Released all slaves [ 759.919269][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5252'. [ 759.922609][T25989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5252'. [ 760.001119][T25992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5253'. [ 760.366486][T26002] netlink: 'syz.2.5256': attribute type 30 has an invalid length. [ 760.391750][T26010] openvswitch: netlink: IPv4 tunnel dst address is zero [ 760.391789][T26010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.489728][T26014] netlink: 'syz.3.5258': attribute type 16 has an invalid length. [ 760.621344][T26021] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5262'. [ 761.306224][T26041] vlan4: entered allmulticast mode [ 761.306248][T26041] bridge_slave_0: entered allmulticast mode [ 761.328061][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5267'. [ 761.695719][T26048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5269'. [ 761.836169][T26048] bond7 (unregistering): Released all slaves [ 762.271134][T26062] syzkaller0: entered promiscuous mode [ 762.271161][T26062] syzkaller0: entered allmulticast mode [ 762.362116][T26068] x_tables: unsorted entry at hook 1 [ 762.604608][T26069] netlink: 'syz.1.5273': attribute type 30 has an invalid length. [ 762.920659][T26062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.862325][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5290'. [ 765.075791][T26140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.114883][T26140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.174035][T26140] batadv_slave_1: left promiscuous mode [ 765.179038][T26140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 765.200972][T26140] veth1_vlan: left promiscuous mode [ 765.202316][T26140] veth0_vlan: left promiscuous mode [ 765.215776][T26140] veth0_vlan: entered promiscuous mode [ 765.218915][T26140] veth1_vlan: entered promiscuous mode [ 765.220261][T26140] veth1_vlan: entered allmulticast mode [ 765.242584][T26148] ip_tables: iptables: counters copy to user failed while replacing table [ 765.258624][T26140] veth1_macvtap: left promiscuous mode [ 765.271814][T26140] veth0_macvtap: left promiscuous mode [ 765.273025][T26140] veth0_macvtap: entered promiscuous mode [ 765.286415][T26140] veth1_macvtap: entered promiscuous mode [ 765.293268][T26140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.308657][T26140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.309918][T26140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.311165][T26140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.338251][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 765.367128][T26140] batadv_slave_1: entered promiscuous mode [ 765.371157][T26140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.411955][T26140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 765.420668][T26140] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 765.904359][T10684] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.904584][T10684] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 765.904631][T10684] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.904659][T10684] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 765.904709][T10684] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.904737][T10684] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 765.904777][T10684] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.904805][T10684] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 765.959226][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.001272][ T60] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 766.001505][ T60] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 766.047085][T13496] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 766.095905][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.205845][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.320280][T26169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5303'. [ 766.468445][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.468469][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.549247][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 766.620465][T26181] xt_time: unknown flags 0x4 [ 766.627280][T13502] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 766.662985][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5305'. [ 766.809175][T13502] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 767.350935][T10684] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.351198][T10684] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.925161][T26223] ip6tnl1: entered allmulticast mode [ 768.449016][T26234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5316'. [ 768.604989][T26234] bond8 (unregistering): Released all slaves [ 768.938766][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'. [ 769.513094][T26278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5329'. [ 769.549796][T26278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5329'. [ 770.368354][T26297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 770.515905][T26296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5335'. [ 770.560768][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5334'. [ 770.942194][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5339'. [ 770.989416][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5341'. [ 771.162228][T26328] ieee802154 phy1 wpan1: encryption failed: -90 [ 771.754363][ C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 771.754389][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.083382][T26321] veth1_macvtap: left promiscuous mode [ 772.234891][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.436574][T26355] tipc: Enabling of bearer rejected, already enabled [ 773.598085][T26364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5352'. [ 774.422400][T26376] syzkaller0: entered promiscuous mode [ 774.422428][T26376] syzkaller0: entered allmulticast mode [ 774.551517][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5356'. [ 774.728523][T26398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5357'. [ 774.792111][T26401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5357'. [ 774.923112][T26404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5359'. [ 777.569581][T26390] ip6tnl3: entered allmulticast mode [ 777.776506][T26416] tipc: Started in network mode [ 777.776542][T26416] tipc: Node identity ac14140f, cluster identity 4711 [ 777.776814][T26416] tipc: New replicast peer: 255.255.255.255 [ 777.780987][T26416] tipc: Enabled bearer , priority 26 [ 778.446965][T26438] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x0 [ 778.671846][T26446] IPv6: NLM_F_CREATE should be specified when creating new route [ 778.896591][ T25] tipc: Node number set to 2886997007 [ 779.276164][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 779.633229][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5380'. [ 780.277862][T26497] netlink: 'syz.0.5388': attribute type 3 has an invalid length. [ 780.277888][T26497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5388'. [ 780.278855][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'. [ 780.278877][T26497] IPv6: NLM_F_CREATE should be specified when creating new route [ 780.554135][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.555507][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.859141][T26511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 780.942466][T26515] syzkaller1: entered promiscuous mode [ 780.942493][T26515] syzkaller1: entered allmulticast mode [ 781.128232][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5396'. [ 781.375266][T26523] netdevsim0 speed is unknown, defaulting to 1000 [ 781.413443][T26522] netdevsim0 speed is unknown, defaulting to 1000 [ 781.539547][T26545] x_tables: duplicate underflow at hook 1 [ 782.201197][T26568] vlan4: entered allmulticast mode [ 782.201419][T26568] bridge0: port 1(vlan4) entered blocking state [ 782.201550][T26568] bridge0: port 1(vlan4) entered disabled state [ 782.203297][T26568] vlan4: entered promiscuous mode [ 782.203316][T26568] bridge_slave_0: entered promiscuous mode [ 782.230153][T26568] x_tables: duplicate underflow at hook 3 [ 782.367358][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 782.390815][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 782.397537][T26572] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 782.397794][T26572] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 782.556943][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 782.563171][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 782.853051][T26584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5416'. [ 782.910719][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 782.960631][T26584] vlan5: entered promiscuous mode [ 782.960657][T26584] macvlan0: entered promiscuous mode [ 783.760179][T26628] netlink: 'syz.3.5430': attribute type 1 has an invalid length. [ 784.266890][T26654] syzkaller0: left promiscuous mode [ 784.266916][T26654] syzkaller0: left allmulticast mode [ 784.288661][T26652] netlink: 'syz.4.5437': attribute type 37 has an invalid length. [ 784.304409][T26656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 784.511272][T26666] netlink: 'syz.0.5441': attribute type 1 has an invalid length. [ 784.721135][T26683] netlink: 'syz.2.5449': attribute type 1 has an invalid length. [ 784.723467][T26666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.816544][T26683] bond9: option mode: invalid value (7) [ 784.821664][T26683] bond9 (unregistering): Released all slaves [ 784.856802][T26693] __nla_validate_parse: 1 callbacks suppressed [ 784.856825][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5447'. [ 784.895144][T26695] netlink: 'syz.2.5449': attribute type 10 has an invalid length. [ 784.895168][T26695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5449'. [ 785.019985][T26695] dummy0: entered promiscuous mode [ 785.331449][T26711] can: request_module (can-proto-0) failed. [ 785.980122][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5461'. [ 786.012296][T26745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5463'. [ 786.199137][T26745] netdevsim0 speed is unknown, defaulting to 1000 [ 786.200656][T26749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5465'. [ 786.232955][T26753] openvswitch: netlink: Duplicate or invalid key (type 0). [ 786.277857][T26757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5466'. [ 786.488168][T26763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5467'. [ 786.512369][T26763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5467'. [ 786.782587][T26780] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.5472'. [ 786.841790][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5472'. [ 786.886426][T26781] IPVS: Scheduler module ip_vs_sip not found [ 786.892552][T26781] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 787.253136][T26794] tipc: New replicast peer: 255.255.255.255 [ 787.253603][T26794] tipc: Enabled bearer , priority 26 [ 787.686186][T26807] bond10: entered promiscuous mode [ 787.686212][T26807] bond10: entered allmulticast mode [ 787.686565][T26807] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.761322][T26816] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 788.364335][T13509] tipc: Node number set to 4101584960 [ 788.915743][T26856] netlink: 'syz.1.5496': attribute type 1 has an invalid length. [ 789.222511][T26862] vxcan2: entered allmulticast mode [ 790.182671][T26905] __nla_validate_parse: 8 callbacks suppressed [ 790.182694][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'. [ 791.297943][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5519'. [ 791.362127][T26942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.451918][T26936] netdevsim0 speed is unknown, defaulting to 1000 [ 791.471106][T26946] netlink: 'syz.1.5522': attribute type 2 has an invalid length. [ 791.516930][T26935] netdevsim0 speed is unknown, defaulting to 1000 [ 792.414817][T26960] x_tables: duplicate underflow at hook 3 [ 792.862485][T26973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5530'. [ 792.960064][T26981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5530'. [ 793.946248][T27022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5540'. [ 793.946288][T27022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5540'. [ 793.996396][T26987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.996850][T26994] netlink: 'syz.3.5531': attribute type 1 has an invalid length. [ 793.996871][T26994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5531'. [ 794.680227][T27049] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5545'. [ 794.953033][T27059] netlink: 'syz.3.5547': attribute type 4 has an invalid length. [ 795.186133][ T31] audit: type=1804 audit(1790729336.345:22): pid=27069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5549" name="/newroot/515/cgroup.controllers" dev="tmpfs" ino=2656 res=1 errno=0 [ 795.186190][ T31] audit: type=1800 audit(1790729336.345:23): pid=27069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5549" name="cgroup.controllers" dev="tmpfs" ino=2656 res=0 errno=0 [ 795.291683][T27069] No such timeout policy "syz0" [ 795.345785][T27075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5553'. [ 795.570436][T27083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5556'. [ 796.081971][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 796.149550][T27119] netdevsim0 speed is unknown, defaulting to 1000 [ 796.323049][T27125] netlink: Unknown conntrack attr (type=518, max=9) [ 796.323093][T27125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.416419][T27125] bond0: (slave bridge0): Releasing backup interface [ 796.471478][T27125] bond2: (slave veth0_to_bond): Releasing active interface [ 796.473245][T27125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 796.512140][T27132] netlink: 'syz.1.5570': attribute type 39 has an invalid length. [ 796.564176][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.870127][T27147] ip_tables: iptables: counters copy to user failed while replacing table [ 796.914448][T27152] netlink: 'syz.2.5576': attribute type 1 has an invalid length. [ 796.983740][T27153] gretap2: entered allmulticast mode [ 797.213201][T27188] SET target dimension over the limit! [ 797.785632][T27155] workqueue: Failed to create a rescuer kthread for wq "nfc35_nci_rx_wq": -EINTR [ 797.835262][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 797.835531][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 797.841575][T27287] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 798.474137][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 798.667357][T27310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5595'. [ 799.650390][T27320] pim6reg: entered allmulticast mode [ 799.672390][T27324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5600'. [ 799.673696][T27326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5600'. [ 799.923553][T27338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5604'. [ 799.951620][T27334] ip6t_hbh: Not strict - not implemented [ 800.000651][T27344] netlink: 'syz.3.5604': attribute type 2 has an invalid length. [ 800.051341][T27344] : entered promiscuous mode [ 800.435351][T27319] pim6reg: left allmulticast mode [ 800.906875][T27368] netlink: 'syz.4.5609': attribute type 83 has an invalid length. [ 800.968187][T27374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5611'. [ 801.125987][T27383] ip_tables: iptables: counters copy to user failed while replacing table [ 801.226221][T27387] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5614'. [ 801.226267][T27387] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 801.227364][T27386] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 801.475669][T27393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.545540][T27393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5617'. [ 801.832886][T27407] geneve4: entered promiscuous mode [ 801.832911][T27407] geneve4: entered allmulticast mode [ 801.851257][T27415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5619'. [ 802.020411][T27419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5622'. [ 802.861236][T27434] syzkaller0: entered promiscuous mode [ 802.861254][T27434] syzkaller0: entered allmulticast mode [ 803.255675][T27440] syzkaller0: mtu less than device minimum [ 804.556685][T27396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.556876][T27409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5619'. [ 804.834663][T27454] x_tables: duplicate entry at hook 4 [ 805.299552][T27474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 805.303377][T27474] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5641'. [ 805.370388][T27475] netlink: 'syz.1.5640': attribute type 1 has an invalid length. [ 805.370414][T27475] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5640'. [ 805.796592][T27494] syzkaller0: left promiscuous mode [ 805.796617][T27494] syzkaller0: left allmulticast mode [ 808.669800][T27502] netlink: 'syz.1.5648': attribute type 39 has an invalid length. [ 808.722466][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.323808][T27549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5661'. [ 809.325185][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5661'. [ 809.487634][T27551] bond7: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 809.487667][T27551] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 809.488053][T27551] bond7: entered allmulticast mode [ 809.561818][T27553] syzkaller1: entered promiscuous mode [ 809.561844][T27553] syzkaller1: entered allmulticast mode [ 809.775034][T27563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5663'. [ 811.876555][T27517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.288573][T27580] batman_adv: batadv0: Adding interface: syzkaller0 [ 812.288596][T27580] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.288631][T27580] batman_adv: batadv0: Interface activated: syzkaller0 [ 812.339362][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5670'. [ 812.356534][T27579] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 812.421791][T27579] batman_adv: batadv0: Removing interface: syzkaller0 [ 812.466551][T27584] netlink: 'syz.2.5673': attribute type 14 has an invalid length. [ 812.608813][T27592] syzkaller1: entered promiscuous mode [ 812.608838][T27592] syzkaller1: entered allmulticast mode [ 812.690493][T27589] netdevsim0 speed is unknown, defaulting to 1000 [ 813.233696][T27624] tipc: Enabling of bearer rejected, already enabled [ 813.415292][T27632] siw: device registration error -23 [ 813.512156][T27637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5688'. [ 813.771601][T27657] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5694'. [ 813.868231][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 813.972823][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5694'. [ 814.028220][T27667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.061313][T27669] netdevsim0 speed is unknown, defaulting to 1000 [ 814.188691][T27681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5702'. [ 814.208622][T27676] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 814.210721][T27676] bond8 (unregistering): Released all slaves [ 814.316415][T27681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 814.488643][T27672] netlink: 'syz.0.5698': attribute type 15 has an invalid length. [ 814.488668][T27672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5698'. [ 814.672763][T27696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5706'. [ 815.010385][T27707] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 815.186874][T27716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5710'. [ 815.510996][T27718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5711'. [ 815.511026][T27718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5711'. [ 815.982389][T27748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5720'. [ 816.099321][T27752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5722'. [ 816.376721][T27721] veth1_vlan: left allmulticast mode [ 816.718265][T19578] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.720994][T10680] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.721131][T10680] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.721172][T10680] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.085690][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5726'. [ 817.258420][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5727'. [ 817.640989][T27799] x_tables: unsorted entry at hook 1 [ 817.752319][T27802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5738'. [ 817.759092][T27803] team0: entered promiscuous mode [ 817.759148][T27803] team0: entered allmulticast mode [ 817.778273][T27802] tipc: Enabled bearer , priority 0 [ 817.792631][T27804] tipc: Resetting bearer [ 817.807496][T27801] tipc: Disabling bearer [ 817.957555][T27808] netlink: 'syz.4.5740': attribute type 2 has an invalid length. [ 818.003215][T27810] netlink: zone id is out of range [ 818.003235][T27810] netlink: zone id is out of range [ 818.003244][T27810] netlink: zone id is out of range [ 818.003254][T27810] netlink: zone id is out of range [ 818.003264][T27810] netlink: zone id is out of range [ 818.003273][T27810] netlink: zone id is out of range [ 818.003287][T27810] netlink: zone id is out of range [ 818.003297][T27810] netlink: zone id is out of range [ 818.003312][T27810] netlink: zone id is out of range [ 818.003321][T27810] netlink: zone id is out of range [ 819.427086][T27885] gretap0: entered promiscuous mode [ 819.430403][T27884] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 819.430442][T27884] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 819.430485][T27884] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 819.484500][T27885] netlink: 'syz.0.5758': attribute type 3 has an invalid length. [ 819.503418][T27884] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 819.791197][T27903] Bluetooth: MGMT ver 1.23 [ 820.282480][T27928] __nla_validate_parse: 2 callbacks suppressed [ 820.282505][T27928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5769'. [ 820.300563][T27929] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5769'. [ 820.320124][T27926] netlink: 'syz.3.5769': attribute type 1 has an invalid length. [ 820.407344][T27926] bond11: entered promiscuous mode [ 820.407876][T27926] 8021q: adding VLAN 0 to HW filter on device bond11 [ 820.962624][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.108329][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.206767][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.297080][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.365972][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.406731][T27962] netlink: 'syz.1.5775': attribute type 1 has an invalid length. [ 821.406758][T27962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5775'. [ 821.407813][T27962] sctp: [Deprecated]: syz.1.5775 (pid 27962) Use of int in maxseg socket option. [ 821.407813][T27962] Use struct sctp_assoc_value instead [ 821.456985][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.556469][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 821.677723][T27964] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 822.066120][T27987] ovs-s: entered promiscuous mode [ 822.910140][T28025] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 823.631757][T28035] IPVS: Error connecting to the multicast addr [ 823.636764][ T1172] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.638127][ T1172] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.638245][ T1172] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.638413][ T1172] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.720546][T28040] team0: Port device team_slave_0 removed [ 823.761730][T28043] syzkaller1: entered promiscuous mode [ 823.761755][T28043] syzkaller1: entered allmulticast mode [ 824.725930][T28091] netlink: 'syz.0.5806': attribute type 17 has an invalid length. [ 824.725967][T28091] bond0: option all_slaves_active: invalid value (22) [ 825.195962][T28121] vcan0: entered promiscuous mode [ 825.196132][T28121] bond0: entered promiscuous mode [ 825.196156][T28121] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 825.198358][T28121] team0: entered promiscuous mode [ 825.199746][T28121] nlmon0: entered promiscuous mode [ 825.199909][T28121] vxcan0: entered promiscuous mode [ 825.200157][T28121] vxcan1: entered promiscuous mode [ 825.200319][T28121] veth0: entered promiscuous mode [ 825.200485][T28121] veth1: entered promiscuous mode [ 825.200644][T28121] wg0: entered promiscuous mode [ 825.200812][T28121] wg1: entered promiscuous mode [ 825.200932][T28121] wg2: entered promiscuous mode [ 825.256208][T28121] veth0_to_bridge: entered promiscuous mode [ 825.256823][T28121] veth1_to_bridge: entered promiscuous mode [ 825.257323][T28121] bridge_slave_1: entered promiscuous mode [ 825.257716][T28121] veth0_to_bond: entered promiscuous mode [ 825.260930][T28121] bond_slave_0: entered promiscuous mode [ 825.261387][T28121] veth1_to_bond: entered promiscuous mode [ 825.261731][T28121] bond_slave_1: entered promiscuous mode [ 825.261976][T28121] veth0_to_team: entered promiscuous mode [ 825.276727][T28121] team_slave_0: entered promiscuous mode [ 825.277203][T28121] veth1_to_team: entered promiscuous mode [ 825.277804][T28121] team_slave_1: entered promiscuous mode [ 825.277962][T28121] veth1_to_batadv: entered promiscuous mode [ 825.278124][T28121] batadv_slave_1: entered promiscuous mode [ 825.278290][T28121] xfrm0: entered promiscuous mode [ 825.281221][T28121] veth0_to_hsr: entered promiscuous mode [ 825.283571][T28121] hsr0: entered promiscuous mode [ 825.306135][T28121] vlan0: entered promiscuous mode [ 825.307057][T28121] vlan1: entered promiscuous mode [ 825.331721][T28121] macvlan0: entered promiscuous mode [ 825.341577][T28121] macvlan1: entered promiscuous mode [ 825.341758][T28121] ipvlan0: entered promiscuous mode [ 825.341985][T28121] veth1_macvtap: entered promiscuous mode [ 825.342313][T28121] macvtap0: entered promiscuous mode [ 825.342471][T28121] geneve0: entered promiscuous mode [ 825.342637][T28121] geneve1: entered promiscuous mode [ 825.343034][T28121] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 825.428093][T28121] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 825.428245][T28121] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 825.428384][T28121] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 825.428565][T28121] ipip0: entered promiscuous mode [ 825.428823][T28121] vlan2: entered promiscuous mode [ 825.429161][T28121] vti0: entered promiscuous mode [ 825.429463][T28121] bond1: entered promiscuous mode [ 825.429607][T28121] bond2: entered promiscuous mode [ 825.429743][T28121] bridge1: entered promiscuous mode [ 825.429896][T28121] bond3: entered promiscuous mode [ 825.430029][T28121] geneve2: entered promiscuous mode [ 825.430197][T28121] bond4: entered promiscuous mode [ 825.430212][T28121] gretap1: entered promiscuous mode [ 825.430618][T28121] bridge2: entered promiscuous mode [ 825.430782][T28121] bridge3: entered promiscuous mode [ 825.430922][T28121] vlan3: entered promiscuous mode [ 825.431210][T28121] sit1: entered promiscuous mode [ 825.431372][T28121] mac80211_hwsim hwsim52 wlan2: entered promiscuous mode [ 825.431535][T28121] gtp0: entered promiscuous mode [ 825.431746][T28121] bond5: entered promiscuous mode [ 825.431763][T28121] veth3: entered promiscuous mode [ 825.431960][T28121] veth5: entered promiscuous mode [ 825.432264][T28121] veth2: entered promiscuous mode [ 825.432572][T28121] veth4: entered promiscuous mode [ 825.432891][T28121] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 825.433061][T28121] bond6: entered promiscuous mode [ 825.433193][T28121] bond7: entered promiscuous mode [ 825.433486][T28121] bond8: entered promiscuous mode [ 825.433627][T28121] bond9: entered promiscuous mode [ 825.433643][T28121] veth7: entered promiscuous mode [ 825.498979][T28121] veth6: entered promiscuous mode [ 825.571471][T28121] L: entered promiscuous mode [ 825.571914][T28121] bridge0: entered promiscuous mode [ 825.572282][T28121] bridge6: entered promiscuous mode [ 825.572663][T28121] mac80211_hwsim hwsim66 wlan3: entered promiscuous mode [ 825.618825][T28121] veth8: entered promiscuous mode [ 825.619275][T28121] veth9: entered promiscuous mode [ 825.619794][T28121] vti1: entered promiscuous mode [ 825.620221][T28121] ip6tnl1: entered promiscuous mode [ 825.663207][T28121] gtp1: entered promiscuous mode [ 825.663457][T28121] ip6erspan0: entered promiscuous mode [ 825.663731][T28121] ifb2: entered promiscuous mode [ 825.691929][T28121] macsec0: entered promiscuous mode [ 825.692098][T28121] gre1: entered promiscuous mode [ 826.106530][T28146] netlink: 'syz.0.5816': attribute type 1 has an invalid length. [ 826.106553][T28146] __nla_validate_parse: 12 callbacks suppressed [ 826.106567][T28146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5816'. [ 826.252517][T28145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5817'. [ 826.299347][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5815'. [ 826.320398][T28141] net_ratelimit: 493 callbacks suppressed [ 826.320423][T28141] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 826.400939][T28168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5820'. [ 826.483551][T28172] netlink: 'syz.1.5822': attribute type 3 has an invalid length. [ 826.667355][T28183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5823'. [ 826.707472][T28182] netlink: 'syz.4.5821': attribute type 1 has an invalid length. [ 826.707895][T28182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5821'. [ 827.157278][T28198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5824'. [ 827.290159][T28204] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5827'. [ 827.459513][T28211] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 827.459536][T28211] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5829'. [ 827.904515][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5833'. [ 828.523421][T28255] sctp: [Deprecated]: syz.0.5839 (pid 28255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 828.523421][T28255] Use struct sctp_sack_info instead [ 828.523587][T28255] sctp: [Deprecated]: syz.0.5839 (pid 28255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 828.523587][T28255] Use struct sctp_sack_info instead [ 828.966587][T28280] netlink: 'syz.1.5847': attribute type 11 has an invalid length. [ 829.211384][T28292] netlink: 'syz.3.5850': attribute type 1 has an invalid length. [ 829.523039][T28311] IPv6: addrconf: prefix option has invalid lifetime [ 829.565809][T28292] bond12: entered promiscuous mode [ 829.566239][T28292] 8021q: adding VLAN 0 to HW filter on device bond12 [ 829.790488][T28314] netlink: 'syz.0.5853': attribute type 1 has an invalid length. [ 830.266704][T28326] Set syz1 is full, maxelem 2076 reached [ 831.609688][T28367] __nla_validate_parse: 11 callbacks suppressed [ 831.609714][T28367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5867'. [ 831.657051][T28365] x_tables: duplicate underflow at hook 3 [ 831.771518][T28372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.290052][T28404] netlink: 'syz.2.5880': attribute type 1 has an invalid length. [ 832.464594][T28421] syzkaller1: entered promiscuous mode [ 832.464618][T28421] syzkaller1: entered allmulticast mode [ 832.813305][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5887'. [ 832.827804][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5887'. [ 832.837535][T28434] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 833.034503][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 833.960109][T28464] geneve3: entered promiscuous mode [ 833.974224][ T279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.974690][ T279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.974732][ T279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.974770][ T279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.210950][T28471] tipc: Trying to set illegal importance in message [ 834.757805][T28495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5904'. [ 834.757825][T28495] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5904'. [ 834.929691][T28499] tc_dump_action: action bad kind [ 834.954262][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 835.429626][T28415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.087914][T28533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5915'. [ 836.088105][T28533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5915'. [ 836.088125][T28533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5915'. [ 836.165792][T28535] netdevsim0 speed is unknown, defaulting to 1000 [ 836.317240][T28541] netlink: 'syz.3.5918': attribute type 14 has an invalid length. [ 836.401823][T28544] syzkaller0: entered promiscuous mode [ 836.401850][T28544] syzkaller0: entered allmulticast mode [ 837.157141][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5923'. [ 837.299805][T28567] bridge0: port 2(veth1_to_bridge) entered blocking state [ 837.300004][T28567] bridge0: port 2(veth1_to_bridge) entered disabled state [ 837.300176][T28567] veth1_to_bridge: entered allmulticast mode [ 837.385369][T28584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5926'. [ 837.385399][T28584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5926'. [ 837.385443][T28584] netlink: 'syz.1.5926': attribute type 18 has an invalid length. [ 837.455909][T10684] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 837.455971][T10684] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 837.456010][T10684] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 837.456049][T10684] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 837.671928][T14085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.687557][T14085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.698242][T14085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 837.699265][T14085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 837.700075][T14085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 838.561659][T28591] netdevsim0 speed is unknown, defaulting to 1000 [ 838.645779][T10658] smbdirect: ib_dev[syz2] removed [ 838.941863][T10653] vlan4: left allmulticast mode [ 838.941885][T10653] geneve0: left allmulticast mode [ 838.941904][T10653] vlan4: left promiscuous mode [ 838.942241][T10653] bridge0: port 2(vlan4) entered disabled state [ 838.970993][T10653] batadv1: left allmulticast mode [ 838.971036][T10653] batadv1: left promiscuous mode [ 838.974758][T10653] bridge0: port 1(batadv1) entered disabled state [ 839.219137][T10653] batman_adv: batadv0: Removing interface: macvlan2 [ 839.259039][T10653] bond0 (unregistering): Released all slaves [ 839.275647][T10653] bond1 (unregistering): Released all slaves [ 839.291020][T10658] smbdirect: ib_dev[syz1] removed [ 839.316948][T10653] bond2 (unregistering): Released all slaves [ 839.349560][T10653] bond3 (unregistering): Released all slaves [ 839.502336][T10653] ¿: left promiscuous mode [ 839.529054][T28591] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.529195][T28591] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.529314][T28591] bridge_slave_0: entered allmulticast mode [ 839.530686][T28591] bridge_slave_0: entered promiscuous mode [ 839.539301][T28591] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.539499][T28591] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.539654][T28591] bridge_slave_1: entered allmulticast mode [ 839.543768][T28591] bridge_slave_1: entered promiscuous mode [ 839.619464][T10653] tipc: Disabling bearer [ 839.619960][T10653] tipc: Left network mode [ 839.623533][T28591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.628555][T28591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.696053][T28591] team0: Port device team_slave_0 added [ 839.699288][T28591] team0: Port device team_slave_1 added [ 839.744717][T28591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.744737][T28591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.744762][T28591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.746812][T28591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.746830][T28591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.746860][T28591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.938594][T28591] hsr_slave_0: entered promiscuous mode [ 839.939765][T28591] hsr_slave_1: entered promiscuous mode [ 839.965005][T28567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.329580][T28637] FAULT_INJECTION: forcing a failure. [ 840.329580][T28637] name failslab, interval 1, probability 0, space 0, times 0 [ 840.329617][T28637] CPU: 0 UID: 0 PID: 28637 Comm: syz.4.5934 Not tainted syzkaller #0 PREEMPT(full) [ 840.329643][T28637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.329658][T28637] Call Trace: [ 840.329668][T28637] [ 840.329678][T28637] dump_stack_lvl+0xe8/0x150 [ 840.329716][T28637] should_fail_ex+0x410/0x560 [ 840.329747][T28637] ? __alloc_skb+0x1db/0x7a0 [ 840.329775][T28637] should_failslab+0xa8/0x100 [ 840.329806][T28637] ? __alloc_skb+0x1db/0x7a0 [ 840.329831][T28637] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 840.329868][T28637] ? __alloc_skb+0x18d/0x7a0 [ 840.329896][T28637] ? __alloc_skb+0x1db/0x7a0 [ 840.329930][T28637] __alloc_skb+0x1db/0x7a0 [ 840.329962][T28637] netlink_sendmsg+0x5d4/0xb40 [ 840.329996][T28637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.330027][T28637] ? apparmor_socket_sendmsg+0x98/0x360 [ 840.330057][T28637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.330079][T28637] sock_sendmsg_nosec+0x14e/0x190 [ 840.330108][T28637] ____sys_sendmsg+0x54e/0x850 [ 840.330146][T28637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.330189][T28637] ? import_iovec+0x73/0xa0 [ 840.330224][T28637] ___sys_sendmsg+0x2a5/0x360 [ 840.330255][T28637] ? __lock_acquire+0x747/0x2de0 [ 840.330284][T28637] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.330357][T28637] ? __fget_files+0x2a/0x420 [ 840.330397][T28637] ? __fget_files+0x3a2/0x420 [ 840.330442][T28637] __x64_sys_sendmsg+0x1b1/0x290 [ 840.330477][T28637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.330534][T28637] do_syscall_64+0x166/0x520 [ 840.330564][T28637] ? trace_irq_disable+0x3b/0x140 [ 840.330595][T28637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.330619][T28637] ? clear_bhb_loop+0x70/0xc0 [ 840.330648][T28637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.330671][T28637] RIP: 0033:0x7f4cc039e159 [ 840.330692][T28637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.330712][T28637] RSP: 002b:00007f4cc12e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.330738][T28637] RAX: ffffffffffffffda RBX: 00007f4cc0625fa0 RCX: 00007f4cc039e159 [ 840.330756][T28637] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 840.330771][T28637] RBP: 00007f4cc12e3090 R08: 0000000000000000 R09: 0000000000000000 [ 840.330786][T28637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.330800][T28637] R13: 00007f4cc0626038 R14: 00007f4cc0625fa0 R15: 00007ffc16923a98 [ 840.330838][T28637] [ 840.644668][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5934'. [ 841.341894][T28675] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 841.408312][T28682] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 841.540122][T28675] ip6gretap0: entered promiscuous mode [ 841.638368][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5939'. [ 841.647466][ T5752] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 841.689746][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5943'. [ 841.799344][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 841.963239][T28702] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 842.062938][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.088582][T13502] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.356390][T28707] macsec0: entered promiscuous mode [ 842.471611][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5947'. [ 842.645212][T13502] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.759707][T28716] veth1_macvtap: left promiscuous mode [ 842.779714][T28716] macsec0 (unregistering): left promiscuous mode [ 842.898905][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5948'. [ 842.965689][T10653] hsr_slave_0: left promiscuous mode [ 842.988793][T10653] hsr_slave_1: left promiscuous mode [ 843.018969][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5953'. [ 843.624685][T28730] lo: left promiscuous mode [ 843.624829][T28730] tunl0: left promiscuous mode [ 843.624946][T28730] gre0: left promiscuous mode [ 843.625035][T28730] gretap0: left promiscuous mode [ 843.625122][T28730] erspan0: left promiscuous mode [ 843.625205][T28730] ip_vti0: left promiscuous mode [ 843.625309][T28730] ip6_vti0: left promiscuous mode [ 843.625391][T28730] sit0: left promiscuous mode [ 843.625496][T28730] ip6tnl0: left promiscuous mode [ 843.625579][T28730] ip6gre0: left promiscuous mode [ 843.625664][T28730] syz_tun: left promiscuous mode [ 843.625825][T28730] ip6gretap0: left promiscuous mode [ 843.625914][T28730] vcan0: left promiscuous mode [ 843.626020][T28730] bond0: left promiscuous mode [ 843.627010][T28730] team0: left promiscuous mode [ 843.627137][T28730] nlmon0: left promiscuous mode [ 843.627244][T28730] vxcan0: left promiscuous mode [ 843.627412][T28730] vxcan1: left promiscuous mode [ 843.627525][T28730] veth0: left promiscuous mode [ 843.627632][T28730] veth1: left promiscuous mode [ 843.627739][T28730] wg0: left promiscuous mode [ 843.627845][T28730] wg1: left promiscuous mode [ 843.627944][T28730] wg2: left promiscuous mode [ 843.628100][T28730] veth0_to_bridge: left promiscuous mode [ 843.628386][T28730] bridge_slave_1: left promiscuous mode [ 843.631056][T28730] veth0_to_bond: left promiscuous mode [ 843.631173][T28730] bond_slave_0: left promiscuous mode [ 843.631319][T28730] veth1_to_bond: left promiscuous mode [ 843.631450][T28730] bond_slave_1: left promiscuous mode [ 843.631561][T28730] veth0_to_team: left promiscuous mode [ 843.631664][T28730] team_slave_0: left promiscuous mode [ 843.631770][T28730] veth1_to_team: left promiscuous mode [ 843.631938][T28730] team_slave_1: left promiscuous mode [ 843.632091][T28730] veth1_to_batadv: left promiscuous mode [ 843.632197][T28730] batadv_slave_1: left promiscuous mode [ 843.632304][T28730] xfrm0: left promiscuous mode [ 843.632429][T28730] veth0_to_hsr: left promiscuous mode [ 843.634319][T28730] hsr0: left promiscuous mode [ 843.634765][T28730] macvtap0: left promiscuous mode [ 843.635126][T28730] geneve0: left promiscuous mode [ 843.635557][T28730] geneve1: left promiscuous mode [ 843.642717][T28730] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 843.642778][T28730] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 843.643134][T28730] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 843.643475][T28730] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 843.644115][T28730] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 843.644279][T28730] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 843.644439][T28730] ipip0: left promiscuous mode [ 843.644604][T28730] vlan2: left promiscuous mode [ 843.644620][T28730] veth1_macvtap: left promiscuous mode [ 843.644940][T28730] vti0: left promiscuous mode [ 843.645734][T28730] bond1: left promiscuous mode [ 843.645776][T28730] bond1: left allmulticast mode [ 843.646111][T28730] bond2: left promiscuous mode [ 843.646440][T28730] bridge1: left promiscuous mode [ 843.646810][T28730] bond3: left promiscuous mode [ 843.647126][T28730] geneve2: left promiscuous mode [ 843.647534][T28730] bond4: left promiscuous mode [ 843.648207][T28730] gretap1: left promiscuous mode [ 843.648531][T28730] bridge2: left promiscuous mode [ 843.649148][T28730] vlan3: left promiscuous mode [ 843.649183][T28730] bridge3: left promiscuous mode [ 843.649565][T28730] vlan3: left allmulticast mode [ 843.649605][T28730] bridge3: left allmulticast mode [ 843.649978][T28730] sit1: left promiscuous mode [ 843.650324][T28730] mac80211_hwsim hwsim52 wlan2: left promiscuous mode [ 843.650738][T28730] gtp0: left promiscuous mode [ 843.651129][T28730] bond5: left promiscuous mode [ 843.652314][T28730] veth2: left promiscuous mode [ 843.652736][T28730] veth3: left promiscuous mode [ 843.652771][T28730] veth3: left allmulticast mode [ 843.653158][T28730] veth4: left promiscuous mode [ 843.653560][T28730] veth5: left promiscuous mode [ 843.653602][T28730] veth5: left allmulticast mode [ 843.676788][T28730] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 843.677262][T28730] bond6: left promiscuous mode [ 843.677608][T28730] bond7: left promiscuous mode [ 843.680087][T28730] bond8: left promiscuous mode [ 843.680412][T28730] bridge4: left promiscuous mode [ 843.680772][T28730] bridge5: left promiscuous mode [ 843.696885][T28730] bond9: left promiscuous mode [ 843.697205][T28730] veth6: left promiscuous mode [ 843.697362][T28730] veth7: left promiscuous mode [ 843.697531][T28730] L: left promiscuous mode [ 843.697871][T28730] bridge0: left promiscuous mode [ 843.698234][T28730] bridge6: left promiscuous mode [ 843.703420][T28730] mac80211_hwsim hwsim66 wlan3: left promiscuous mode [ 843.704401][T28730] veth8: left promiscuous mode [ 843.704908][T28730] veth9: left promiscuous mode [ 843.705825][T28730] vti1: left promiscuous mode [ 843.706242][T28730] ip6tnl1: left promiscuous mode [ 843.706286][T28730] ip6tnl1: left allmulticast mode [ 843.713637][T28730] gtp1: left promiscuous mode [ 843.714520][T28730] bond10: left promiscuous mode [ 843.714566][T28730] bond10: left allmulticast mode [ 843.715148][T28730] ip6erspan0: left promiscuous mode [ 843.718918][T28730] ifb2: left promiscuous mode [ 843.719307][T28730] macsec0: left promiscuous mode [ 843.719833][T28730] bond11: left promiscuous mode [ 843.720193][T28730] gre1: left promiscuous mode [ 843.808731][T28730] bond12: left promiscuous mode [ 843.816455][T28730] geneve3: left promiscuous mode [ 843.875026][ T279] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.875208][ T279] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.875313][ T279] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.875409][ T279] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.905953][T10687] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.942093][T10687] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.601694][T28591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 844.618731][T28591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.621357][T28591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 844.661030][T28591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.811192][T28761] bridge0: left promiscuous mode [ 844.845668][T28761] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.957305][T13507] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 845.023975][T28785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5964'. [ 845.225732][T28761] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 845.228188][T28591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.265611][T28591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.371163][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5965'. [ 845.481767][T28591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.514757][T28591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.602941][T28799] bond10: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 845.632491][T28799] bond10 (unregistering): Released all slaves [ 845.709445][T28801] tipc: Enabling of bearer rejected, already enabled [ 845.762308][T10653] IPVS: stop unused estimator thread 0... [ 845.889286][T28823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5969'. [ 846.033351][T14085] block nbd2: Receive control failed (result -107) [ 846.078717][T28829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5970'. [ 846.096667][T28829] x_tables: duplicate underflow at hook 4 [ 846.117710][T28829] Cannot find del_set index 4 as target [ 846.135681][T28591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.189451][T28591] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.222489][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.222603][T10658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.286181][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.286294][T10653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.536436][T28850] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 846.548013][T28850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5977'. [ 846.569848][T28591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.705791][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5978'. [ 847.277457][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5982'. [ 847.606149][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 848.071598][T28591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.270399][T28591] veth0_vlan: entered promiscuous mode [ 848.347088][T28591] veth1_vlan: entered promiscuous mode [ 848.951602][T28591] veth0_macvtap: entered promiscuous mode [ 848.971176][T28591] veth1_macvtap: entered promiscuous mode [ 848.999704][T28591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.068043][T28591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.098782][T10658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.098888][T10658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.098950][T10658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.098991][T10658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.475642][T28960] netlink: 'syz.1.5999': attribute type 8 has an invalid length. [ 849.543184][T10684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.543208][T10684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.621581][T28966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6001'. [ 849.677971][ T31] audit: type=1804 audit(1790729390.835:24): pid=28975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6003" name="/newroot/496/cgroup.controllers" dev="tmpfs" ino=2567 res=1 errno=0 [ 849.678226][ T31] audit: type=1800 audit(1790729390.835:25): pid=28975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6003" name="cgroup.controllers" dev="tmpfs" ino=2567 res=0 errno=0 [ 849.816046][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.816070][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.037724][T28983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6007'. [ 850.039831][T14085] block nbd3: Receive control failed (result -1) [ 850.172070][T28988] xt_policy: output policy not valid in PREROUTING and INPUT [ 850.172660][T28989] xt_policy: output policy not valid in PREROUTING and INPUT [ 850.561843][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 850.573684][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 850.581935][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 850.593103][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 850.607580][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 850.644511][T14085] [ 850.646908][T14085] ====================================================== [ 850.653958][T14085] WARNING: possible circular locking dependency detected [ 850.661021][T14085] syzkaller #0 Not tainted [ 850.665482][T14085] ------------------------------------------------------ [ 850.672536][T14085] kworker/u9:0/14085 is trying to acquire lock: [ 850.678820][T14085] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 850.689330][T14085] [ 850.689330][T14085] but task is already holding lock: [ 850.696720][T14085] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 850.706153][T14085] [ 850.706153][T14085] which lock already depends on the new lock. [ 850.706153][T14085] [ 850.716646][T14085] [ 850.716646][T14085] the existing dependency chain (in reverse order) is: [ 850.725701][T14085] [ 850.725701][T14085] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 850.733838][T14085] down_write+0x96/0x200 [ 850.738658][T14085] kernfs_add_one+0x41/0x6f0 [ 850.743821][T14085] kernfs_create_dir_ns+0x1a1/0x230 [ 850.749592][T14085] internal_create_group+0x440/0x1180 [ 850.755527][T14085] cpuhp_invoke_callback+0x434/0x810 [ 850.761397][T14085] cpuhp_issue_call+0x3f0/0x750 [ 850.766837][T14085] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 850.773482][T14085] __cpuhp_setup_state+0x3f/0x60 [ 850.779008][T14085] do_one_initcall+0x250/0x870 [ 850.784369][T14085] do_initcall_level+0x10a/0x1a0 [ 850.789885][T14085] do_initcalls+0x59/0xa0 [ 850.794795][T14085] kernel_init_freeable+0x29d/0x3e0 [ 850.800566][T14085] kernel_init+0x22/0x1d0 [ 850.805483][T14085] ret_from_fork+0x514/0xb70 [ 850.810666][T14085] ret_from_fork_asm+0x1a/0x30 [ 850.816008][T14085] [ 850.816008][T14085] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 850.823888][T14085] [ 850.823888][T14085] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 850.831685][T14085] cpus_read_lock+0x42/0x160 [ 850.836857][T14085] static_key_slow_inc+0x12/0x30 [ 850.842383][T14085] setup_udp_tunnel_sock+0x2df/0x4f0 [ 850.848412][T14085] l2tp_tunnel_register+0xe77/0x1570 [ 850.854368][T14085] pppol2tp_connect+0x8e3/0x18b0 [ 850.859879][T14085] __sys_connect+0x316/0x450 [ 850.865035][T14085] __x64_sys_connect+0x7a/0x90 [ 850.870368][T14085] do_syscall_64+0x166/0x520 [ 850.875532][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.881987][T14085] [ 850.881987][T14085] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 850.889806][T14085] lock_sock_nested+0x41/0x100 [ 850.895139][T14085] inet_shutdown+0x6a/0x390 [ 850.900207][T14085] nbd_mark_nsock_dead+0x2cb/0x550 [ 850.905880][T14085] recv_work+0x1cee/0x1e10 [ 850.910886][T14085] process_scheduled_works+0xc3d/0x1630 [ 850.917001][T14085] worker_thread+0xa47/0xfb0 [ 850.922158][T14085] kthread+0x38b/0x480 [ 850.926794][T14085] ret_from_fork+0x514/0xb70 [ 850.931943][T14085] ret_from_fork_asm+0x1a/0x30 [ 850.937282][T14085] [ 850.937282][T14085] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 850.945006][T14085] __mutex_lock+0x19d/0x1550 [ 850.950171][T14085] nbd_queue_rq+0x373/0xff0 [ 850.955228][T14085] blk_mq_dispatch_rq_list+0x499/0x1990 [ 850.961334][T14085] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 850.968232][T14085] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 850.974773][T14085] blk_mq_run_work_fn+0x16c/0x300 [ 850.980371][T14085] process_scheduled_works+0xc3d/0x1630 [ 850.986530][T14085] worker_thread+0xa47/0xfb0 [ 850.991685][T14085] kthread+0x38b/0x480 [ 850.996310][T14085] ret_from_fork+0x514/0xb70 [ 851.001453][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.006789][T14085] [ 851.006789][T14085] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 851.014043][T14085] __mutex_lock+0x19d/0x1550 [ 851.019201][T14085] nbd_queue_rq+0xc1/0xff0 [ 851.024174][T14085] blk_mq_dispatch_rq_list+0x499/0x1990 [ 851.030284][T14085] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 851.037170][T14085] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 851.043720][T14085] blk_mq_run_work_fn+0x16c/0x300 [ 851.049309][T14085] process_scheduled_works+0xc3d/0x1630 [ 851.055424][T14085] worker_thread+0xa47/0xfb0 [ 851.060582][T14085] kthread+0x38b/0x480 [ 851.065239][T14085] ret_from_fork+0x514/0xb70 [ 851.070912][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.076253][T14085] [ 851.076253][T14085] -> #4 (set->srcu){.+.+}-{0:0}: [ 851.083418][T14085] __synchronize_srcu+0xc9/0x2f0 [ 851.088927][T14085] elevator_switch+0x1e8/0x7b0 [ 851.094262][T14085] elevator_change+0x2fa/0x480 [ 851.099581][T14085] elevator_set_default+0x375/0x440 [ 851.105345][T14085] blk_register_queue+0x3f3/0x4e0 [ 851.110936][T14085] __add_disk+0x6b8/0xdb0 [ 851.115864][T14085] add_disk_fwnode+0x100/0x3a0 [ 851.121202][T14085] nbd_dev_add+0x733/0xb60 [ 851.126168][T14085] nbd_init+0x168/0x1f0 [ 851.130873][T14085] do_one_initcall+0x250/0x870 [ 851.136275][T14085] do_initcall_level+0x10a/0x1a0 [ 851.141759][T14085] do_initcalls+0x59/0xa0 [ 851.146639][T14085] kernel_init_freeable+0x29d/0x3e0 [ 851.152382][T14085] kernel_init+0x22/0x1d0 [ 851.157267][T14085] ret_from_fork+0x514/0xb70 [ 851.162416][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.167752][T14085] [ 851.167752][T14085] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 851.175607][T14085] __mutex_lock+0x19d/0x1550 [ 851.180745][T14085] elevator_change+0x1af/0x480 [ 851.186060][T14085] elevator_set_none+0xb5/0x140 [ 851.191459][T14085] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 851.197840][T14085] nbd_start_device+0x189/0xb30 [ 851.203238][T14085] nbd_genl_connect+0x167d/0x1cd0 [ 851.208807][T14085] genl_family_rcv_msg_doit+0x233/0x340 [ 851.214907][T14085] genl_rcv_msg+0x614/0x7a0 [ 851.219958][T14085] netlink_rcv_skb+0x226/0x4a0 [ 851.225269][T14085] genl_rcv+0x28/0x40 [ 851.229795][T14085] netlink_unicast+0x7bd/0x940 [ 851.235106][T14085] netlink_sendmsg+0x813/0xb40 [ 851.240439][T14085] sock_sendmsg_nosec+0x14e/0x190 [ 851.246009][T14085] ____sys_sendmsg+0x54e/0x850 [ 851.251317][T14085] ___sys_sendmsg+0x2a5/0x360 [ 851.256533][T14085] __x64_sys_sendmsg+0x1b1/0x290 [ 851.262037][T14085] do_syscall_64+0x166/0x520 [ 851.267172][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.273619][T14085] [ 851.273619][T14085] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 851.282259][T14085] blk_alloc_queue+0x544/0x690 [ 851.287589][T14085] __blk_mq_alloc_disk+0x194/0x390 [ 851.293254][T14085] nbd_dev_add+0x494/0xb60 [ 851.298213][T14085] nbd_init+0x168/0x1f0 [ 851.302920][T14085] do_one_initcall+0x250/0x870 [ 851.308229][T14085] do_initcall_level+0x10a/0x1a0 [ 851.313706][T14085] do_initcalls+0x59/0xa0 [ 851.318575][T14085] kernel_init_freeable+0x29d/0x3e0 [ 851.324319][T14085] kernel_init+0x22/0x1d0 [ 851.329205][T14085] ret_from_fork+0x514/0xb70 [ 851.334335][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.339655][T14085] [ 851.339655][T14085] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 851.346886][T14085] fs_reclaim_acquire+0x71/0x100 [ 851.352364][T14085] kmem_cache_alloc_noprof+0x5f/0x600 [ 851.358281][T14085] __kernfs_iattrs+0xdd/0x380 [ 851.363499][T14085] kernfs_iop_setattr+0xe6/0x3f0 [ 851.368990][T14085] notify_change+0xbba/0xea0 [ 851.374125][T14085] do_truncate+0x1c2/0x250 [ 851.379093][T14085] path_openat+0x15b5/0x1d60 [ 851.384306][T14085] do_file_open+0x23e/0x4a0 [ 851.389360][T14085] do_sys_openat2+0x115/0x200 [ 851.394580][T14085] __x64_sys_openat+0x138/0x170 [ 851.399982][T14085] do_syscall_64+0x166/0x520 [ 851.405114][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.411564][T14085] [ 851.411564][T14085] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 851.420115][T14085] __lock_acquire+0x164c/0x2de0 [ 851.425528][T14085] lock_acquire+0x115/0x350 [ 851.430589][T14085] down_write+0x96/0x200 [ 851.435390][T14085] kernfs_link_sibling+0x4c7/0x5a0 [ 851.441063][T14085] kernfs_add_one+0x2db/0x6f0 [ 851.446294][T14085] kernfs_create_dir_ns+0x1a1/0x230 [ 851.452044][T14085] sysfs_create_dir_ns+0x12f/0x2a0 [ 851.457705][T14085] kobject_add_internal+0x622/0xcd0 [ 851.463543][T14085] kobject_add+0x163/0x240 [ 851.468502][T14085] device_add+0x3fa/0xb80 [ 851.473375][T14085] hci_conn_add_sysfs+0xd5/0x210 [ 851.478916][T14085] hci_conn_complete_evt+0x8a8/0x1350 [ 851.484875][T14085] hci_event_packet+0x6cd/0xf10 [ 851.490269][T14085] hci_rx_work+0x3ee/0x1020 [ 851.495375][T14085] process_scheduled_works+0xc3d/0x1630 [ 851.501479][T14085] worker_thread+0xa47/0xfb0 [ 851.506614][T14085] kthread+0x38b/0x480 [ 851.511225][T14085] ret_from_fork+0x514/0xb70 [ 851.516364][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.521704][T14085] [ 851.521704][T14085] other info that might help us debug this: [ 851.521704][T14085] [ 851.531950][T14085] Chain exists of: [ 851.531950][T14085] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 851.531950][T14085] [ 851.546413][T14085] Possible unsafe locking scenario: [ 851.546413][T14085] [ 851.553889][T14085] CPU0 CPU1 [ 851.559275][T14085] ---- ---- [ 851.564655][T14085] lock(&root->kernfs_rwsem); [ 851.569441][T14085] lock(cpuhp_state_mutex); [ 851.576599][T14085] lock(&root->kernfs_rwsem); [ 851.583915][T14085] lock(&root->kernfs_iattr_rwsem); [ 851.589239][T14085] [ 851.589239][T14085] *** DEADLOCK *** [ 851.589239][T14085] [ 851.597404][T14085] locks held by kworker/u9:0/14085: 4, last CPU#0: [ 851.603992][T14085] #0: ffff888056035940 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 851.615025][T14085] #1: ffffc9000684fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 851.627092][T14085] #2: ffff888056de40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 851.636962][T14085] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 851.646850][T14085] [ 851.646850][T14085] stack backtrace: [ 851.652771][T14085] CPU: 0 UID: 0 PID: 14085 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 851.662330][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.672411][T14085] Workqueue: hci3 hci_rx_work [ 851.677128][T14085] Call Trace: [ 851.680460][T14085] [ 851.683429][T14085] dump_stack_lvl+0xe8/0x150 [ 851.688061][T14085] print_circular_bug+0x2e2/0x300 [ 851.693144][T14085] check_noncircular+0x12f/0x150 [ 851.698119][T14085] __lock_acquire+0x164c/0x2de0 [ 851.702999][T14085] ? __lock_acquire+0x747/0x2de0 [ 851.707961][T14085] lock_acquire+0x115/0x350 [ 851.712494][T14085] ? kernfs_link_sibling+0x4c7/0x5a0 [ 851.717807][T14085] down_write+0x96/0x200 [ 851.722079][T14085] ? kernfs_link_sibling+0x4c7/0x5a0 [ 851.727381][T14085] ? __pfx_down_write+0x10/0x10 [ 851.732264][T14085] ? kernfs_root+0x1c/0x230 [ 851.736799][T14085] ? kernfs_root+0x1c/0x230 [ 851.741429][T14085] ? kernfs_root+0x1c/0x230 [ 851.745975][T14085] ? kernfs_root+0x1ea/0x230 [ 851.750598][T14085] kernfs_link_sibling+0x4c7/0x5a0 [ 851.755762][T14085] kernfs_add_one+0x2db/0x6f0 [ 851.760471][T14085] kernfs_create_dir_ns+0x1a1/0x230 [ 851.765698][T14085] sysfs_create_dir_ns+0x12f/0x2a0 [ 851.770844][T14085] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 851.776507][T14085] ? do_raw_spin_unlock+0xf5/0x200 [ 851.781661][T14085] kobject_add_internal+0x622/0xcd0 [ 851.786909][T14085] kobject_add+0x163/0x240 [ 851.791375][T14085] ? __pfx_kobject_add+0x10/0x10 [ 851.796410][T14085] ? get_device_parent+0x366/0x3a0 [ 851.801557][T14085] device_add+0x3fa/0xb80 [ 851.805912][T14085] hci_conn_add_sysfs+0xd5/0x210 [ 851.810880][T14085] hci_conn_complete_evt+0x8a8/0x1350 [ 851.816292][T14085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 851.822305][T14085] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 851.828133][T14085] ? skb_pull_data+0xf0/0x200 [ 851.832910][T14085] hci_event_packet+0x6cd/0xf10 [ 851.837785][T14085] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 851.843792][T14085] ? __pfx_hci_event_packet+0x10/0x10 [ 851.849189][T14085] ? audit_filter_rules+0x45f0/0x5d10 [ 851.854590][T14085] ? hci_send_to_monitor+0xe2/0x590 [ 851.859874][T14085] hci_rx_work+0x3ee/0x1020 [ 851.864399][T14085] ? process_scheduled_works+0x97a/0x1630 [ 851.870161][T14085] process_scheduled_works+0xc3d/0x1630 [ 851.875751][T14085] ? __pfx_process_scheduled_works+0x10/0x10 [ 851.881788][T14085] ? assign_work+0x3cf/0x5d0 [ 851.886403][T14085] worker_thread+0xa47/0xfb0 [ 851.891042][T14085] kthread+0x38b/0x480 [ 851.895129][T14085] ? __pfx_worker_thread+0x10/0x10 [ 851.900299][T14085] ? __pfx_kthread+0x10/0x10 [ 851.904917][T14085] ret_from_fork+0x514/0xb70 [ 851.909566][T14085] ? __pfx_ret_from_fork+0x10/0x10 [ 851.914726][T14085] ? __switch_to+0xc89/0x1420 [ 851.919469][T14085] ? __pfx_kthread+0x10/0x10 [ 851.924098][T14085] ret_from_fork_asm+0x1a/0x30 [ 851.928928][T14085] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 852.833497][T10650] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.833536][T10650] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.921491][T10650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.921521][T10650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.979007][T10650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.979037][T10650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.052986][T10650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.053015][T10650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.156994][T10650] bridge_slave_1: left allmulticast mode [ 853.157020][T10650] bridge_slave_1: left promiscuous mode [ 853.157176][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.158991][T10650] bridge_slave_0: left allmulticast mode [ 853.159013][T10650] bridge_slave_0: left promiscuous mode [ 853.159152][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.202808][T10650] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 853.252393][T10650] batman_adv: batadv0: Removing interface: ip6gretap1 [ 853.396283][T10650] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 853.443730][T10650] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 853.443758][T10650] bridge5 (unregistering): left promiscuous mode [ 853.481501][T10650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.483126][T10650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.493770][T10650] bond0 (unregistering): Released all slaves [ 853.507683][T10650] bond1 (unregistering): Released all slaves [ 853.519532][T10650] bond2 (unregistering): Released all slaves [ 853.523525][T10650] bond3 (unregistering): Released all slaves [ 853.540253][T10650] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 853.541304][T10650] bond4 (unregistering): Released all slaves [ 853.560688][T10650] bond5 (unregistering): Released all slaves [ 853.567192][T10650] bond6 (unregistering): Released all slaves [ 853.581534][T10650] bond7 (unregistering): Released all slaves [ 853.590608][T10650] bond8 (unregistering): Released all slaves [ 853.597051][T10650] bond9 (unregistering): Released all slaves [ 853.608252][T10650] bond10 (unregistering): Released all slaves [ 853.695865][T10650] : left promiscuous mode [ 853.757975][T10650] tipc: Disabling bearer [ 853.763738][T10650] tipc: Left network mode [ 853.977772][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 854.118467][T10650] hsr_slave_0: left promiscuous mode [ 854.118985][T10650] hsr_slave_1: left promiscuous mode [ 854.119478][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.119495][T10650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.123808][T10650] batadv_slave_1: left promiscuous mode [ 854.136101][T10650] veth0_vlan: left promiscuous mode [ 854.336892][T10650] team0 (unregistering): Port device team_slave_1 removed [ 854.461601][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 854.723207][T10650] IPVS: stop unused estimator thread 0... [ 854.763382][T10650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.799964][T10650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.857524][T10650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.876571][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 854.917670][T10650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.047210][T10650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.047259][T10650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 855.047288][T10650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 855.047316][T10650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 855.118984][T10650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.119024][T10650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 855.119054][T10650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 855.119080][T10650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 855.189161][T10650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.189199][T10650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 855.189238][T10650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 855.189267][T10650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 855.260314][T10650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.260353][T10650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 855.260383][T10650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 855.260412][T10650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 855.371317][T10650] bridge_slave_1: left allmulticast mode [ 855.371344][T10650] bridge_slave_1: left promiscuous mode [ 855.371542][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.392762][T10650] bridge_slave_0: left allmulticast mode [ 855.392788][T10650] bridge_slave_0: left promiscuous mode [ 855.392960][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.522136][T10650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.533497][T10650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.535429][T10650] bond0 (unregistering): Released all slaves [ 855.725706][T10650] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 855.747158][T10650] bond0 (unregistering): Released all slaves [ 855.751041][T10650] bond1 (unregistering): Released all slaves [ 855.766501][T10650] bond2 (unregistering): Released all slaves [ 855.776733][T10650] bond3 (unregistering): Released all slaves [ 855.780603][T10650] bond4 (unregistering): Released all slaves [ 855.788194][T10650] bond5 (unregistering): Released all slaves [ 855.801190][T10650] bond6 (unregistering): Released all slaves [ 855.812678][T10650] bond7 (unregistering): Released all slaves [ 855.827070][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 855.912562][T10650] ´: left promiscuous mode [ 855.936422][T10650] tipc: Disabling bearer [ 855.936598][T10650] tipc: Left network mode [ 856.306245][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 856.388933][T10650] hsr_slave_0: left promiscuous mode [ 856.389398][T10650] hsr_slave_1: left promiscuous mode [ 856.389954][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.389974][T10650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.390515][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.390534][T10650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.400033][T10650] hsr_slave_0: left promiscuous mode [ 856.402667][T10650] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 856.402718][T10650] batman_adv: batadv0: Removing interface: ipvlan2 [ 856.454905][T10650] veth1_macvtap: left promiscuous mode [ 856.454938][T10650] veth0_macvtap: left promiscuous mode [ 856.455008][T10650] veth1_vlan: left promiscuous mode [ 856.455057][T10650] veth0_vlan: left promiscuous mode [ 856.457038][T10650] batadv_slave_1: left promiscuous mode [ 856.457106][T10650] veth0_macvtap: left promiscuous mode [ 856.457172][T10650] veth1_vlan: left allmulticast mode [ 856.457196][T10650] veth1_vlan: left promiscuous mode [ 856.457239][T10650] veth0_vlan: left promiscuous mode [ 856.684910][T10650] team0 (unregistering): Port device team_slave_1 removed [ 856.691941][T10650] team0 (unregistering): Port device team_slave_0 removed [ 856.961383][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 857.287802][T10650] IPVS: stop unused estimator thread 0... [ 857.431062][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 857.711961][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 858.016728][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9 [ 858.293533][ T5284] 8021q: adding VLAN 0 to HW filter on device eth10 [ 858.566547][ T5284] 8021q: adding VLAN 0 to HW filter on device eth11 [ 858.841783][ T5284] 8021q: adding VLAN 0 to HW filter on device eth12