last executing test programs: 3.125407573s ago: executing program 0 (id=1019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0xfffffffd) close(r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000001000), 0xc) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000280)=0x6, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x1, 0xf}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) 3.028162493s ago: executing program 0 (id=1021): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x34) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2.995252073s ago: executing program 0 (id=1022): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7f}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7f}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) (async) 2.737535971s ago: executing program 0 (id=1026): r0 = socket(0x1e, 0x1, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd70000000000001000000000000000741000000030018"], 0x30}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) (async, rerun: 32) recvmmsg(r4, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) (async, rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r4], 0x48}}, 0x2404c054) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r7 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYBLOB="90e858fc8bb71ffeb4bc55430012a1a77efabd7f5b98692f129d61692bb7e28a9760c40382b03fe427792647883ea3364728b7ab71dcff990001c8d2f2cc3e1944176dd4bbec35fb4705eb2b902dd39992d9c8e55e77921835834f1a1ba5668a46468c4b36eec9a1e894a2960195fa7f8386334d9124f6ef37bf7c0e3cd5410d663f90507a807284a1f0b56a0fea5055542ee10ef04f08edd796cfb88fd972addeb4d7def23b2e31c3f5209831b340c55f91a5d8a3", @ANYBLOB="080028bd7000fcdbdf25060000000800030007000000080002000400000024000180080006000800000008000300000000000800030064010100060001000a000000"], 0x48}, 0x1, 0x0, 0x0, 0x40008000}, 0xa0) 2.137201461s ago: executing program 2 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x8, 0x0, 0x4, 0x81, 0x4, 0x0, [{0xfffffffffffffffc, 0xfffffffffffffffc, 0xc, '\x00', 0xa8a}, {0x8, 0x5, 0x5, '\x00', 0x200}, {0x1, 0x1, 0xffffffff, '\x00', 0x100}, {0x7, 0x800, 0x9, '\x00', 0x3c08}]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x88, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x8, 0x3, 0x9, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff5, 0x0, 0x10000000, 0x8001, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000020601080004002a00078008000640000000000500040000000000050001000700000005000500000000000900020073797a31000000000d000300686173683a6d616300000000"], 0x54}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x5}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x206c, 0x1}, {0x6}]}, 0x10) 2.037177908s ago: executing program 3 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000012c0), 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x14, r1, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) 1.987511192s ago: executing program 3 (id=1038): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000073112200000000000600000000000000ff0074000000780000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x7, 0x6, &(0x7f0000000000)="00fdb48976aa", 0x7, 0x8, 0x7, 0xf, 0x80, 0x0, 0x7, 'syz0\x00'}) 1.839344705s ago: executing program 3 (id=1041): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r1, 0x0, r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r0, 0x58, &(0x7f0000001180)}, 0x10) r4 = epoll_create(0x10000e9) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r5, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/60, 0x3c}], 0x1, &(0x7f0000000540)=""/127, 0x7f}, 0x94}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/234, 0xea}, {&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/232, 0xe8}, {&(0x7f0000000cc0)=""/242, 0xf2}, {&(0x7f0000000dc0)=""/9, 0x9}], 0xa, &(0x7f0000000ec0)=""/140, 0x8c}, 0x2}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/147, 0x93}], 0x1, &(0x7f0000001080)=""/33, 0x21}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000010c0)=""/190, 0xbe}, {&(0x7f0000001340)=""/233, 0xe9}, {&(0x7f0000001440)=""/11, 0xb}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000001540)=""/3, 0x3}, {&(0x7f0000001580)=""/3, 0x3}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/239, 0xef}], 0x8, &(0x7f00000017c0)=""/246, 0xf6}, 0x2}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001940)=""/123, 0x7b}, {&(0x7f00000019c0)=""/116, 0x74}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/138, 0x8a}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/223, 0xdf}], 0x7, &(0x7f0000001e40)=""/255, 0xff}, 0x10001}], 0x5, 0x100, &(0x7f0000002080)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000ce97fa34fec9f036eb32ccf5a1c1df40392acd0400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000000001193e4afd52117d966875ea3453e1f00"/35], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.780694759s ago: executing program 2 (id=1042): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0xbd8, 0xa88, 0x9b8, 0xfeffffff, 0x8a8, 0x8a8, 0xb40, 0xb40, 0xffffffff, 0xb40, 0xb40, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x880, 0x8a8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x401, 0x2}, {0x1, 0x2}, {0xfffffffc, 0x2}, {0xfffffff8, 0x2}, {0x7}, {0x3ff, 0x1}, {0x0, 0x3}, {0x9, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0xd3c, 0x3}], [{0x5, 0x6}, {0x6, 0x8}, {0xfffffff7, 0x3}, {0x800}, {0x5, 0x5}, {0x2, 0x3e000000}, {0xa7, 0x7}, {0x7fffffff, 0x4}, {0x8ce, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x1}], 0x3, 0xb}, {[{0x54, 0x1}, {0x9, 0x1}, {0xffffffff}, {0x4}, {0x5}, {0x4, 0x3}, {0xffffffff, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xb57, 0x2}, {0x7f, 0x3}], [{0xffffffcf, 0xffffffc0}, {0xeb, 0xf}, {0xffff, 0x3}, {0x11, 0x2}, {0x71c6, 0x9179}, {0x7, 0xffffffff}, {0x36a7}, {0x3, 0x1}, {0x3, 0x1}, {0x5b4e, 0xffff}, {0x8, 0xd2}], 0x3, 0x9}, {[{0x2}, {0x4, 0x2}, {0x8, 0x1}, {0x10000, 0x1}, {0x1000, 0x3}, {0x7ff, 0x3}, {0x2, 0x75225b3121634f84}, {0xf9, 0x2}, {0x6, 0x2}, {0x10001, 0x2}, {0xac4a}], [{0x9, 0x3}, {0x90}, {0xed, 0xd}, {0xfffffffb, 0x8}, {0x1ff, 0x3}, {0x4, 0x96b1}, {0x400}, {0x4, 0x5}, {0x5, 0x3}, {0x8, 0x9}, {0x81}], 0x8, 0xb}, {[{0x122, 0x3}, {0x4, 0x1b062c0051d36a6c}, {0x4cf7}, {0x4, 0x3}, {0x3, 0x2}, {0xfffffe61, 0x2}, {0x10}, {0xac72}, {0xfffffffd, 0x1}, {0x9, 0x1}, {0x9691, 0x2}], [{0x3, 0x1}, {0x7, 0x4}, {0x6, 0x1}, {0x8, 0x10000}, {0x6, 0xfffffff8}, {0x401, 0x4}, {0x2, 0x9}, {}, {0x9, 0x5}, {0x1, 0x7fff}, {0x463c, 0x2}], 0x0, 0x1b}, {[{0xd9a2, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x101}, {0xe, 0x3}, {0xfc77}, {0x5, 0x1}, {0x10001, 0x1}, {0x0, 0x3}, {0x3915e000, 0x3}, {0x80000001, 0x1}], [{0x7, 0x30}, {0x8d3f, 0x5}, {0x2, 0xd}, {0x400, 0x3}, {0x101, 0x4}, {0x10, 0xff}, {0x3}, {0xc, 0x4}, {0x1, 0x8a}, {0x76, 0x6}, {0xffff, 0x4e0b}], 0xb, 0x6}, {[{0x3, 0x3}, {0x9, 0x3}, {0x4, 0x1}, {0x4, 0x2}, {0xfffffff8, 0x3}, {0x80000000}, {0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x2}], [{0x2, 0x1}, {0xffffff5a, 0xfffffbff}, {0x8, 0x4}, {0x1000, 0xc}, {0xeda, 0xfffffff5}, {0x600, 0x5}, {0x6, 0x1}, {0x5, 0x3f8}, {0xc, 0x6}, {0xfffffffe}, {0x9fc, 0x7}], 0x6, 0x5}, {[{0x1, 0x3}, {0xf7, 0x3}, {0x3, 0x2}, {0x27, 0x3}, {0xf, 0x2}, {0x1ff}, {0x5, 0x2}, {0x8, 0x3}, {0xffff}, {0xfffffffd, 0x1}, {0x4000}], [{0x9, 0xa}, {0x7, 0xffffffff}, {0x9, 0x6}, {0x0, 0x9}, {0x100, 0x8}, {0x8ec, 0x5}, {0x1, 0x5}, {0x6, 0xffff0000}, {0xc3, 0x6}, {0xffffffff, 0x4}, {0x0, 0x43ea5619}], 0x6, 0x9}, {[{0x80000000, 0x1}, {0x2, 0x3}, {0x4}, {0x9, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x9}, {0x3}, {0x2, 0x2}, {0x1ff, 0x1}, {0x8}], [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x4}, {0x3, 0xffffffff}, {0x18, 0xfffffffb}, {0x6, 0x5}, {0xfffffffe, 0x7f}, {0x7, 0x10000}, {0x7, 0x2}, {0x1}, {0x7, 0x6}], 0x3, 0xa}, {[{0x41, 0x1}, {0x1f, 0x1}, {0x8, 0x2}, {}, {0x6}, {0x3, 0x3}, {0x8, 0x3}, {0x80}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x1}], [{0x5b544e03, 0x3}, {0xa760, 0x9}, {0xffff, 0x3}, {0x830b, 0x8}, {0xc39, 0x42b}, {0x80000000}, {0x0, 0x3ff}, {0x2, 0x2}, {0xa, 0x400}, {0x9, 0x4}, {0x8}], 0x8, 0x8}, {[{0x12de8f85, 0x1}, {0x23e737f0, 0x1}, {0xfffffffb}, {0x3, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x7fffffff, 0x2}, {0x5, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x1, 0x2}], [{0xb, 0x9}, {0x3, 0x695a}, {0x800, 0x1}, {0x7}, {0xfffffffa, 0x30}, {0x6bac, 0x101}, {0x6, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x2}, {0x9, 0x7}], 0x7, 0x6}, {[{0x0, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x9, 0x2}], [{0x200, 0x3}, {0x3, 0x2}, {0x7, 0x7f2}, {0x581, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x9, 0x5}, {0xfff, 0x4}, {0x10, 0xffffee4f}, {0xe, 0x1}], 0x7, 0x6}], 0xb}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0xd, 'uP'}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2e, @ipv4=@rand_addr=0x64010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}, @gre_key=0xfff9, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc38) 1.718211936s ago: executing program 2 (id=1043): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xa, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x55, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x5a, 0x9}, @float={0x7, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x0, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000240)=""/216, 0x4e, 0xd8, 0x0, 0x2}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%+9llu \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000008000000feff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffff42eae0a305d639965bd3a84600fcffffff0000000000000000"], 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x52}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0xe6de, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r5, r6], 0x0, 0x10, 0x7fffffff}, 0x94) 1.649132279s ago: executing program 3 (id=1044): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(0x3) r2 = socket$rxrpc(0x21, 0x2, 0x2) close(r2) 1.620300825s ago: executing program 3 (id=1045): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003280)=[{{&(0x7f0000000580)=@can, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000640)="f8bd29e1ab8535e6c0c052dec6f89372f862aa76d019834533f8e55c1953ffe0f680316e8acbea7c73157b1ca4708f353d727dfbdcd37ee1c3838a7592abe0394e355f5a0c9c1f4edc0fe5290739280e9eba1d09a176e24ea26b9cb14f3b8e91b8aabb78caf9671c66fa4c87f846bbf8b498197ec85eb5782080d479b6d5d85bf9ea168865ba0542fe47a33e4b46acb1bfb128ce2921458366aafa55383427fad80630a5a21f248cae9def34bcc66bed7a0b2572cb57c27e761ea37db3c36ff2434967e5", 0xc4}, {&(0x7f0000000740)}, {&(0x7f0000001240)="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", 0x11b}, {&(0x7f0000000840)="6b595c3b0d0d078529865b9f4e67fc5b1de622368b3876dda86cb3893147ba2355128c367150672134a2c653a917098d0250d0aa29a9762e9ccf1cb0349191a3b707b68352ee7212845d3d149b6d28bdc3222aab5cc2a3fe768384e9e478f83806c943db4d4ce209cc84b193eafb4ecc3695a525b0e740818c1f58fdc2a0af5eca770a2cddf829618734018dd2d68207742851115592768ab9512d5e26bb0fb696e12a55ed952f77ee82fa3c77", 0xad}, {&(0x7f0000000900)="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", 0x455}], 0x5}}], 0x1, 0x4) 1.280178852s ago: executing program 2 (id=1047): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)='\x00', 0x1}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044880) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f00000005c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8010743f, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xcd}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7b, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001008400"/56], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r10, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40010) r12 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r12, &(0x7f0000001500)='0', 0x1) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r6, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, &(0x7f0000000280)=@raw=[@generic={0x7, 0x6, 0x1, 0x6b, 0x2}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000340)=""/64, 0x41100, 0x1d, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r4, r13], &(0x7f00000007c0)=[{0x5, 0x1, 0xa, 0x3}, {0x80, 0x3, 0x1}, {0x5, 0x4, 0x4, 0x5}, {0x0, 0x1, 0xb, 0x3}, {0x0, 0x5, 0x3, 0xb}, {0x2, 0x4, 0x7, 0x7}, {0x3, 0x2, 0x2, 0xb}, {0x1, 0x2, 0x8, 0x5}], 0x10, 0x9d2}, 0x94) 1.015344821s ago: executing program 1 (id=1050): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x3, 0x8) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x30}, 0x4e1f, 0x3, 'rr\x00', 0x2c, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e22, 0x2, 0xcf, 0x12d5c, 0xfffffffe}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'veth1_macvtap\x00', {0x4}, 0x1}) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000200)={0x6, 0xffffffff80000001, 0x4, 0x4, 0x6}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 845.072529ms ago: executing program 4 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="0800e2ff46000000", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) 844.769666ms ago: executing program 1 (id=1052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'pim6reg0\x00', 0x2}) 746.958641ms ago: executing program 4 (id=1053): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0xc, [@typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @struct={0x10, 0x6, 0x0, 0x4, 0x0, 0xcdc805a, [{0x7, 0x1, 0x8}, {0x3, 0x2, 0x10000}, {0x0, 0x1, 0x2}, {0x4, 0x2, 0xffff}, {0x1, 0x4, 0x4}, {0x5, 0x2, 0x8}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0xf, 0x4}, {0xe, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x7, 0x2}]}, @fwd={0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @struct={0xf, 0xa, 0x0, 0x4, 0x1, 0x38a, [{0x0, 0x2, 0x7}, {0x1, 0x1, 0xc00000}, {0xf, 0x3, 0x14}, {0x1, 0x4, 0x163}, {0x0, 0x0, 0x1000}, {0x4, 0x2, 0x2}, {0x9, 0x0, 0xfffffe00}, {0x2, 0x0, 0x9}, {0xa, 0x0, 0xabec}, {0xe, 0x3, 0x8000}]}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x2e, 0x30, 0x2e, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000500)=""/69, 0x168, 0x45, 0x1, 0x8, 0x10000, @value=r1}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 673.629394ms ago: executing program 1 (id=1054): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map=0x1, 0x32, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 590.995889ms ago: executing program 0 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4013}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d510c8c95024873}, 0x12000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="219817fead00000056ee6690da92a6856360f629a311a950e5b5d4175b146f0663a02350c2d5e857bf3577418546e6df1393489ea31bf082fa1d27a0dc0b0183a6ef43b6fabc6881b439cba5aa9817f5c87ac039a6c6", @ANYRES16=r4, @ANYBLOB="13000000000000000000080000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) 563.8423ms ago: executing program 1 (id=1056): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 552.944797ms ago: executing program 4 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5, 0xfffffffc}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000003c0)=0x1) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000003c0)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000797196a9e34d46e8bec882b01d18534b4bace78f50614fa69b0ed370483595fb3c2049ab6571a61b3019f6c4349c0e", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000797196a9e34d46e8bec882b01d18534b4bace78f50614fa69b0ed370483595fb3c2049ab6571a61b3019f6c4349c0e", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) 416.362132ms ago: executing program 0 (id=1058): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x4, 0x9, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x68, 0x0, 0xfd, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0xb, [{@multicast1}, {@rand_addr=0x64010102, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@empty, 0x37}, {@remote, 0x7f}, {@multicast1}]}, @lsrr={0x83, 0x2b, 0x52, [@loopback, @private=0xa010100, @remote, @remote, @local, @rand_addr=0x64010102, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @noop, @rr={0x7, 0x2b, 0x4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @multicast1, @multicast2, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @lsrr={0x83, 0x27, 0x17, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @private=0xa010101, @multicast1, @local, @private=0xa010102]}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff6) writev(r2, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)="8535aa78be0d185056a82d52a216abd1c10d81b1efda42d3e52b3c11c01139af25cfb524aa81c13ae79d74b2392b743a2e9be9a7f09a081da7f2a0d78bb72b770e1f337998bc03ef84626a799e", 0x4d}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x9) 389.383234ms ago: executing program 4 (id=1059): r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000a40)={&(0x7f0000000340)=0x5, 0x3, &(0x7f0000000700)=[{}, {}, {}, {}], &(0x7f0000000a00)}) r2 = accept(r0, &(0x7f00000004c0)=@ieee802154={0x24, @long}, &(0x7f0000000540)=0x80) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000ac0)={0x0, 0xbe}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000b40)={r3, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x9, 0x9eb, 0xc, 0xffffffc0, 0x1751}, &(0x7f0000000c00)=0x98) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000006090001545b6e1430000000000c00034000000000000000010900010073797a30000000000c00064000000000000001ff0000001e00000000000000"], 0x44}}, 0x80) r4 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(r1, 0x0, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 338.748041ms ago: executing program 1 (id=1060): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 256.027035ms ago: executing program 3 (id=1061): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0xcc, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r12 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 201.20029ms ago: executing program 2 (id=1062): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2c0040c3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1c, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {}, {0xffe0, 0x8}}}, 0x24}}, 0x20000001) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 164.888055ms ago: executing program 1 (id=1063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="020500090e000000ffffffff005c2bd8fa526471d46f89716b11000000050019000000000002004e22ac1e000100a7d3000000000002004e24ac1414350000000000000000070019000000217f00000100000000000000000a004e2100000009fe8800000000000000000000000000010180000000000000"], 0x70}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@setlink={0x30, 0x13, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3c00, 0x2004}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_WEIGHT={0x8, 0xf, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000057f00000000050000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001000180c20000010000"], 0x48}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000580)={r0, r6, 0xfe0a, 0x5f, &(0x7f00000004c0)="cff3870992409329216b2cca3333958ce10e240c6ee2cad8ee81f01ac0d0ba3b18dafd2731c7466aa6c3a26b6942254229f4542c8137e4d2975e8a1965d0027cc556115d41ee1e3f1227ab4302d6ef198600d6ac8555530c4da8effb67959e", 0x2, 0x5, 0x4f7d, 0x800, 0x5, 0x2, 0x5, 'syz1\x00'}) 159.816793ms ago: executing program 4 (id=1064): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x1800, 0x8, 0x10002, 0x0, 0x1}, 0x48) 678.805µs ago: executing program 2 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="18880000000000000000000000000000851000000500000085000000bb0000006d0000000000000018000000ffff0000000000000000000091000000000000009500000000000000477ce7509ee6e78e00cddc30f9cc2c2c44edafc1cbaae424fe48d4c89e78a26295dde7e2b88285ba51fa7c8f52105af7e1dd6d2dc2e6caf696915ab4d1ebfb3d279c02626ab1edb706f95a08060c45fd41653a04b7cd4666495c7726496227dd9f13b7f20745863236223f8a971c3064be03"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x3ff, 0x6, 0x1}) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000fb0013800b00010065727370616e0000180002800800140000000000050016001c00000004001200"], 0x48}}, 0x0) 0s ago: executing program 4 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x27) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0), 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffffff, 0x200a, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4004050) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 71.210919][ T5616] cgroup: Unknown subsys name 'net' [ 71.278742][ T5616] cgroup: Unknown subsys name 'cpuset' [ 71.289134][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.677933][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.685231][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.681815][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.737023][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.747559][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.757100][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.766254][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.789421][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.843299][ T4948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.853086][ T4948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.861730][ T4948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.878914][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.888306][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.897245][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.908702][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.938495][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.947504][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.947802][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.962656][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.974116][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.975847][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.993017][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.011679][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.042422][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.053967][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.064752][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.080669][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.093494][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.636811][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.644068][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.651379][ T5628] bridge_slave_0: entered allmulticast mode [ 76.658571][ T5628] bridge_slave_0: entered promiscuous mode [ 76.705829][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.713158][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.720719][ T5628] bridge_slave_1: entered allmulticast mode [ 76.728102][ T5628] bridge_slave_1: entered promiscuous mode [ 76.783667][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.790979][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.798625][ T5634] bridge_slave_0: entered allmulticast mode [ 76.805883][ T5634] bridge_slave_0: entered promiscuous mode [ 76.847136][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.854322][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.861600][ T5632] bridge_slave_0: entered allmulticast mode [ 76.868583][ T5632] bridge_slave_0: entered promiscuous mode [ 76.875605][ T5629] Bluetooth: hci0: command tx timeout [ 76.878899][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.888282][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.896008][ T5634] bridge_slave_1: entered allmulticast mode [ 76.903169][ T5634] bridge_slave_1: entered promiscuous mode [ 76.918147][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.937650][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.944881][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.952164][ T5632] bridge_slave_1: entered allmulticast mode [ 76.959522][ T5632] bridge_slave_1: entered promiscuous mode [ 76.964775][ T5629] Bluetooth: hci1: command tx timeout [ 76.995612][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.004985][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.012101][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.019584][ T5644] bridge_slave_0: entered allmulticast mode [ 77.026713][ T5644] bridge_slave_0: entered promiscuous mode [ 77.035308][ T5629] Bluetooth: hci3: command tx timeout [ 77.036307][ T5641] Bluetooth: hci2: command tx timeout [ 77.079919][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.087652][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.095040][ T5644] bridge_slave_1: entered allmulticast mode [ 77.102037][ T5644] bridge_slave_1: entered promiscuous mode [ 77.111191][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.123050][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.132392][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.139648][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.146973][ T5639] bridge_slave_0: entered allmulticast mode [ 77.153906][ T5639] bridge_slave_0: entered promiscuous mode [ 77.182930][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.193978][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.203483][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210938][ T5641] Bluetooth: hci4: command tx timeout [ 77.216732][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.224030][ T5639] bridge_slave_1: entered allmulticast mode [ 77.231158][ T5639] bridge_slave_1: entered promiscuous mode [ 77.240065][ T5628] team0: Port device team_slave_0 added [ 77.284220][ T5628] team0: Port device team_slave_1 added [ 77.292535][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.342949][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.353945][ T5632] team0: Port device team_slave_0 added [ 77.362241][ T5632] team0: Port device team_slave_1 added [ 77.369457][ T5634] team0: Port device team_slave_0 added [ 77.377820][ T5634] team0: Port device team_slave_1 added [ 77.385672][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.406258][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.413237][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.441580][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.482518][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.492294][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.499506][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.526599][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.597668][ T5639] team0: Port device team_slave_0 added [ 77.605322][ T5644] team0: Port device team_slave_0 added [ 77.611715][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.619036][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.645097][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.656886][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.663953][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.690386][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.702797][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.710059][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.736162][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.748911][ T5639] team0: Port device team_slave_1 added [ 77.757076][ T5644] team0: Port device team_slave_1 added [ 77.763359][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.770492][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.797087][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.864436][ T5628] hsr_slave_0: entered promiscuous mode [ 77.871336][ T5628] hsr_slave_1: entered promiscuous mode [ 77.900274][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.907812][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.934169][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.948212][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.955310][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.981276][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.001556][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.009053][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.035608][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.055683][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.062854][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.088933][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.157506][ T5634] hsr_slave_0: entered promiscuous mode [ 78.164120][ T5634] hsr_slave_1: entered promiscuous mode [ 78.170924][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 78.177229][ T5634] Cannot create hsr debugfs directory [ 78.217125][ T5632] hsr_slave_0: entered promiscuous mode [ 78.223786][ T5632] hsr_slave_1: entered promiscuous mode [ 78.230272][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 78.236315][ T5632] Cannot create hsr debugfs directory [ 78.285600][ T5644] hsr_slave_0: entered promiscuous mode [ 78.291958][ T5644] hsr_slave_1: entered promiscuous mode [ 78.298244][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 78.304064][ T5644] Cannot create hsr debugfs directory [ 78.392083][ T5639] hsr_slave_0: entered promiscuous mode [ 78.398407][ T5639] hsr_slave_1: entered promiscuous mode [ 78.404924][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 78.410663][ T5639] Cannot create hsr debugfs directory [ 78.828979][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.841471][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.849538][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.860402][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.877776][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.888019][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.904488][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.916043][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.955805][ T5641] Bluetooth: hci0: command tx timeout [ 78.975546][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.986416][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.994440][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.007664][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.016022][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.027244][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.034819][ T5641] Bluetooth: hci1: command tx timeout [ 79.059079][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.069250][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.115195][ T5641] Bluetooth: hci2: command tx timeout [ 79.121323][ T5629] Bluetooth: hci3: command tx timeout [ 79.156331][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.168484][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.176810][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.187850][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.199758][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.209279][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.229636][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.239607][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.274982][ T5629] Bluetooth: hci4: command tx timeout [ 79.360736][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.370934][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.380063][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.392312][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.410751][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.420974][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.429502][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.439832][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.548186][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.557876][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.567942][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.577664][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.589146][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.608666][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.618717][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.639168][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.648504][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.673097][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.698724][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.733403][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.741253][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.770122][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.785042][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.792387][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.817906][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.829215][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.836415][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.846387][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.854072][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.918404][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.962800][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.970059][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.011640][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.019081][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.058844][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.199397][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.228952][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.236253][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.253321][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.260651][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.322457][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.437624][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.471858][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.479380][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.521708][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.529010][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.037234][ T5629] Bluetooth: hci0: command tx timeout [ 81.063199][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.116534][ T5629] Bluetooth: hci1: command tx timeout [ 81.148510][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.194819][ T5629] Bluetooth: hci3: command tx timeout [ 81.195173][ T5641] Bluetooth: hci2: command tx timeout [ 81.333542][ T5628] veth0_vlan: entered promiscuous mode [ 81.358858][ T5641] Bluetooth: hci4: command tx timeout [ 81.381936][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.413209][ T5628] veth1_vlan: entered promiscuous mode [ 81.426621][ T5634] veth0_vlan: entered promiscuous mode [ 81.488031][ T5634] veth1_vlan: entered promiscuous mode [ 81.593506][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.603956][ T5628] veth0_macvtap: entered promiscuous mode [ 81.647858][ T5632] veth0_vlan: entered promiscuous mode [ 81.672517][ T5628] veth1_macvtap: entered promiscuous mode [ 81.712040][ T5632] veth1_vlan: entered promiscuous mode [ 81.742569][ T5634] veth0_macvtap: entered promiscuous mode [ 81.756573][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.771432][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.791980][ T5634] veth1_macvtap: entered promiscuous mode [ 81.803669][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.852043][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.864284][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.875576][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.898108][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.914379][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.942403][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.968160][ T5632] veth0_macvtap: entered promiscuous mode [ 82.009671][ T5632] veth1_macvtap: entered promiscuous mode [ 82.018115][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.027856][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.046753][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056358][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.108018][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.114412][ T5639] veth0_vlan: entered promiscuous mode [ 82.131541][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.139105][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.143506][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.200920][ T5639] veth1_vlan: entered promiscuous mode [ 82.209705][ T139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.218866][ T139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.250015][ T139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.259980][ T139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270683][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.281366][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.282768][ T5644] veth0_vlan: entered promiscuous mode [ 82.377707][ T5644] veth1_vlan: entered promiscuous mode [ 82.385636][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.422493][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.433251][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.460127][ T5639] veth0_macvtap: entered promiscuous mode [ 82.532239][ T5639] veth1_macvtap: entered promiscuous mode [ 82.557311][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.569060][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.589247][ T5817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.671878][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.688224][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.708165][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.727983][ T5644] veth0_macvtap: entered promiscuous mode [ 82.771772][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.780390][ T5644] veth1_macvtap: entered promiscuous mode [ 82.789868][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.802705][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.833522][ T5819] tipc: Started in network mode [ 82.839922][ T5819] tipc: Node identity 5a0e5d32db32, cluster identity 4711 [ 82.848775][ T5819] tipc: Enabled bearer , priority 0 [ 82.874272][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.950760][ T5819] syzkaller0: entered promiscuous mode [ 82.957057][ T5819] syzkaller0: entered allmulticast mode [ 82.963283][ T5819] tipc: Resetting bearer [ 82.970255][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.979617][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010048][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.065996][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.118494][ T5641] Bluetooth: hci0: command tx timeout [ 83.121476][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.183723][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.195707][ T5641] Bluetooth: hci1: command tx timeout [ 83.207190][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.227248][ T5818] tipc: Resetting bearer [ 83.274834][ T5641] Bluetooth: hci3: command tx timeout [ 83.286574][ T5641] Bluetooth: hci2: command tx timeout [ 83.448600][ T5641] Bluetooth: hci4: command tx timeout [ 84.404017][ T5818] tipc: Disabling bearer [ 84.416143][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.431069][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.467256][ T5741] tipc: Node number set to 2168216882 [ 84.587351][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.619076][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.780264][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.803652][ T5854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.814136][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.846815][ T5854] Zero length message leads to an empty skb [ 84.867580][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 84.910152][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.939922][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.062297][ T5857] netlink: 576 bytes leftover after parsing attributes in process `syz.3.15'. [ 85.073111][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.103650][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.211169][ T5867] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 85.500041][ T5878] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 85.587459][ T5883] netlink: 27 bytes leftover after parsing attributes in process `syz.3.22'. [ 85.932767][ T5890] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.24'. [ 85.956311][ T5890] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 85.982917][ T5897] tipc: Started in network mode [ 85.993496][ T5897] tipc: Node identity 4, cluster identity 4711 [ 86.018191][ T5897] tipc: Node number set to 4 [ 86.372748][ T5912] netlink: 'syz.3.29': attribute type 8 has an invalid length. [ 86.881841][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.940136][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.986841][ T5935] netlink: 'syz.0.35': attribute type 30 has an invalid length. [ 87.014564][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 87.027564][ T5937] netlink: 'syz.0.35': attribute type 30 has an invalid length. [ 87.094133][ T5940] netlink: 'syz.0.35': attribute type 30 has an invalid length. [ 87.227125][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.300406][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.349832][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.438926][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.758022][ T5973] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.805067][ T5974] tipc: Enabling of bearer rejected, failed to enable media [ 87.851339][ T5977] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 87.881531][ T5973] batadv_slave_1: entered promiscuous mode [ 87.903789][ T5973] batadv_slave_1: entered allmulticast mode [ 87.947803][ T5973] netlink: 'syz.3.48': attribute type 5 has an invalid length. [ 87.989209][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 88.358246][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.600818][ T6005] FAULT_INJECTION: forcing a failure. [ 88.600818][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 88.652030][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 88.652053][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.652070][ T6005] Call Trace: [ 88.652077][ T6005] [ 88.652087][ T6005] dump_stack_lvl+0xe8/0x150 [ 88.652118][ T6005] should_fail_ex+0x412/0x560 [ 88.652141][ T6005] should_failslab+0xa8/0x100 [ 88.652157][ T6005] ? skb_clone+0x212/0x3a0 [ 88.652174][ T6005] kmem_cache_alloc_noprof+0x87/0x650 [ 88.652203][ T6005] skb_clone+0x212/0x3a0 [ 88.652222][ T6005] __netlink_deliver_tap+0x404/0x850 [ 88.652257][ T6005] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.652280][ T6005] netlink_deliver_tap+0x19c/0x1b0 [ 88.652302][ T6005] netlink_sendskb+0x68/0x140 [ 88.652323][ T6005] netlink_rcv_skb+0x2b6/0x4b0 [ 88.652344][ T6005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.652362][ T6005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.652396][ T6005] ? down_read+0x270/0x2e0 [ 88.652412][ T6005] ? genl_rcv+0xd/0x40 [ 88.652430][ T6005] genl_rcv+0x28/0x40 [ 88.652446][ T6005] netlink_unicast+0x75c/0x8e0 [ 88.652474][ T6005] netlink_sendmsg+0x813/0xb40 [ 88.652504][ T6005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.652528][ T6005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 88.652549][ T6005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.652569][ T6005] ____sys_sendmsg+0x972/0x9f0 [ 88.652585][ T6005] ? __might_fault+0xaf/0x130 [ 88.652608][ T6005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.652630][ T6005] ? import_iovec+0x73/0xa0 [ 88.652652][ T6005] ___sys_sendmsg+0x2a5/0x360 [ 88.652666][ T6005] ? __lock_acquire+0x6b5/0x2cf0 [ 88.652687][ T6005] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.652735][ T6005] ? __fget_files+0x2a/0x420 [ 88.652752][ T6005] ? __fget_files+0x3a0/0x420 [ 88.652777][ T6005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 88.652795][ T6005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.652820][ T6005] ? __pfx_ksys_write+0x10/0x10 [ 88.652850][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.652866][ T6005] do_syscall_64+0x174/0x580 [ 88.652880][ T6005] ? trace_irq_disable+0x3b/0x140 [ 88.652900][ T6005] ? clear_bhb_loop+0x40/0x90 [ 88.652918][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.652931][ T6005] RIP: 0033:0x7f22aeb9ce59 [ 88.652959][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.652971][ T6005] RSP: 002b:00007f22afa11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.652987][ T6005] RAX: ffffffffffffffda RBX: 00007f22aee15fa0 RCX: 00007f22aeb9ce59 [ 88.652997][ T6005] RDX: 0000000000008044 RSI: 0000200000000380 RDI: 0000000000000003 [ 88.653013][ T6005] RBP: 00007f22afa11090 R08: 0000000000000000 R09: 0000000000000000 [ 88.653023][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.653032][ T6005] R13: 00007f22aee16038 R14: 00007f22aee15fa0 R15: 00007ffde51ad038 [ 88.653056][ T6005] [ 89.564117][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 89.697154][ T6034] syzkaller0: entered promiscuous mode [ 89.716142][ T6034] syzkaller0: entered allmulticast mode [ 89.820438][ T6034] tipc: Enabled bearer , priority 0 [ 89.877200][ T6031] tipc: Resetting bearer [ 89.906916][ T6037] sctp: [Deprecated]: syz.4.67 (pid 6037) Use of int in max_burst socket option. [ 89.906916][ T6037] Use struct sctp_assoc_value instead [ 89.909598][ T6031] tipc: Disabling bearer [ 90.079122][ T6056] gretap0: entered promiscuous mode [ 90.112235][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 90.158459][ T6060] gretap0: left promiscuous mode [ 90.332890][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'. [ 90.499097][ T6074] netlink: 'syz.1.77': attribute type 21 has an invalid length. [ 90.524562][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 90.593692][ T6083] ip6t_srh: unknown srh invflags 4000 [ 90.609260][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.609547][ T6074] netlink: 'syz.1.77': attribute type 21 has an invalid length. [ 90.644417][ T6083] veth0: entered promiscuous mode [ 90.659403][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.667389][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 90.679783][ T6083] veth0: left promiscuous mode [ 90.695192][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.724561][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.897969][ T6091] tipc: Enabled bearer , priority 0 [ 91.026105][ T6091] syzkaller0: entered promiscuous mode [ 91.078596][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 91.085968][ T6091] syzkaller0: entered allmulticast mode [ 91.111508][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 91.112050][ T6091] tipc: Resetting bearer [ 91.298611][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 91.325045][ T1167] tipc: Resetting bearer [ 91.338097][ T6090] tipc: Resetting bearer [ 91.543607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806babc800: rx timeout, send abort [ 91.554195][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806babc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.579358][ T6120] netlink: 'syz.0.92': attribute type 3 has an invalid length. [ 91.615114][ T6122] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 91.645064][ T6122] netlink: 'syz.1.93': attribute type 3 has an invalid length. [ 92.172566][ T9] cfg80211: failed to load regulatory.db [ 93.246193][ T6090] tipc: Disabling bearer [ 93.261083][ T6107] xfrm1: entered promiscuous mode [ 93.266197][ T6107] xfrm1: entered allmulticast mode [ 93.272696][ T6125] __nla_validate_parse: 4 callbacks suppressed [ 93.272707][ T6125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.94'. [ 93.288540][ T6125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.94'. [ 93.768030][ T6156] syzkaller0: entered promiscuous mode [ 93.773579][ T6156] syzkaller0: entered allmulticast mode [ 93.784913][ T6175] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 93.813777][ T6175] bond1: entered promiscuous mode [ 93.819312][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.830371][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 93.834319][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 93.851940][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 93.975925][ T6185] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:21 [ 94.660311][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d37c00: rx timeout, send abort [ 94.668771][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057d37c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.235486][ T6179] bond1: (slave bridge1): making interface the new active one [ 95.243136][ T6179] bridge1: entered promiscuous mode [ 95.250901][ T6179] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.335386][ T6201] netlink: 294 bytes leftover after parsing attributes in process `syz.3.113'. [ 95.345961][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.392266][ T6195] bridge1: entered allmulticast mode [ 95.843960][ T6233] netlink: 56 bytes leftover after parsing attributes in process `syz.0.121'. [ 95.969866][ T6238] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.125'. [ 95.976985][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.126'. [ 96.006697][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.126'. [ 96.112335][ T6245] sctp: [Deprecated]: syz.1.129 (pid 6245) Use of int in maxseg socket option. [ 96.112335][ T6245] Use struct sctp_assoc_value instead [ 96.144143][ T6247] erspan0: entered promiscuous mode [ 96.360989][ T6254] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 96.379946][ T6254] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 97.020694][ T6280] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 97.049702][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880795bb000: rx timeout, send abort [ 97.049743][ T6280] bond1: entered promiscuous mode [ 97.059156][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880795bb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.063648][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.111434][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.139537][ T6282] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 97.152589][ T6282] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 97.189789][ T6282] bond1: (slave ip6gre1): making interface the new active one [ 97.201082][ T6282] ip6gre1: entered promiscuous mode [ 97.210836][ T6282] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 97.545385][ T24] IPVS: starting estimator thread 0... [ 97.553060][ T6306] IPVS: dh: FWM 3 0x00000003 - no destination available [ 97.570327][ T6306] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 97.600562][ T6304] bond0: option miimon: invalid value (18446744071829782528) [ 97.609258][ T6304] bond0: option miimon: allowed values 0 - 2147483647 [ 97.645700][ T6309] IPVS: using max 36 ests per chain, 86400 per kthread [ 97.665497][ T6308] syzkaller0: entered promiscuous mode [ 97.671187][ T6308] syzkaller0: entered allmulticast mode [ 97.783618][ T6316] vlan0: entered promiscuous mode [ 97.970410][ T6324] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 98.029102][ T6327] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 98.247034][ T6342] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 98.397028][ T6342] bond2: entered promiscuous mode [ 98.402894][ T6342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.440741][ T6351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.448678][ T6351] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 98.456337][ T6360] __nla_validate_parse: 8 callbacks suppressed [ 98.456353][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 98.460633][ T6351] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 98.492571][ T6351] bond2: (slave vti0): making interface the new active one [ 98.500099][ T6351] vti0: entered promiscuous mode [ 98.506771][ T6351] bond2: (slave vti0): Enslaving as an active interface with an up link [ 98.518327][ T6361] nftables ruleset with unbound set [ 98.760249][ T6367] netlink: 'syz.3.168': attribute type 9 has an invalid length. [ 98.803706][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 98.833806][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 99.551111][ T6411] netlink: 1 bytes leftover after parsing attributes in process `syz.0.185'. [ 99.892811][ T6429] Bluetooth: MGMT ver 1.23 [ 100.124356][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 100.644576][ T6491] netlink: 72 bytes leftover after parsing attributes in process `syz.2.205'. [ 100.678838][ T6492] netlink: 76 bytes leftover after parsing attributes in process `syz.1.206'. [ 100.692015][ T6496] netlink: 216 bytes leftover after parsing attributes in process `syz.3.208'. [ 100.705626][ T6496] netlink: 'syz.3.208': attribute type 2 has an invalid length. [ 100.818725][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.210'. [ 100.843397][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.853021][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.924509][ T6497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.945279][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 101.132472][ T6518] syzkaller0: entered promiscuous mode [ 101.142208][ T6518] syzkaller0: entered allmulticast mode [ 101.168065][ T6518] tipc: Started in network mode [ 101.181433][ T6518] tipc: Node identity b67f0387bd69, cluster identity 4711 [ 101.203730][ T6518] tipc: Enabled bearer , priority 0 [ 101.228057][ T6517] tipc: Resetting bearer [ 101.296395][ T6517] tipc: Disabling bearer [ 102.098612][ T6580] netlink: 'syz.4.223': attribute type 11 has an invalid length. [ 102.130318][ T6585] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 102.368360][ T6594] syzkaller0: entered promiscuous mode [ 102.377860][ T6594] syzkaller0: entered allmulticast mode [ 102.758720][ T6617] tunl0: entered promiscuous mode [ 102.781236][ T6617] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 102.846024][ T6621] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 102.881638][ T6607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.901152][ T6607] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 103.022577][ T6607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.045640][ T6607] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 103.189511][ T6607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.214253][ T6607] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 103.227368][ T6640] team0: No ports can be present during mode change [ 103.302214][ T6607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.332217][ T6607] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 103.532063][ T6655] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 103.581662][ T6655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.590025][ T6655] IPv6: NLM_F_CREATE should be set when creating new route [ 103.618615][ T6660] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 103.635067][ T6660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.660620][ T6655] netlink: 'syz.4.242': attribute type 8 has an invalid length. [ 104.034375][ T6607] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.178527][ T6607] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 104.362889][ T6670] netlink: 'syz.3.245': attribute type 39 has an invalid length. [ 104.824416][ T6672] bond1: option resend_igmp: invalid value (32767) [ 104.850540][ T6672] bond1: option resend_igmp: allowed values 0 - 255 [ 104.873075][ T6672] bond1 (unregistering): Released all slaves [ 105.213429][ T6720] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 105.225991][ T6713] sch_fq: defrate 0 ignored. [ 105.836044][ T6746] netlink: 'syz.1.260': attribute type 39 has an invalid length. [ 107.101176][ T6755] __nla_validate_parse: 45 callbacks suppressed [ 107.101194][ T6755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.260'. [ 107.133128][ T6755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.260'. [ 107.415808][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 107.569409][ T6791] veth0_to_bridge: entered promiscuous mode [ 107.590699][ T6791] veth0_to_bridge: left promiscuous mode [ 107.673771][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 107.723041][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 107.949472][ T5740] IPVS: starting estimator thread 0... [ 108.054695][ T6820] IPVS: using max 38 ests per chain, 91200 per kthread [ 108.091877][ T6830] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 108.105137][ T6827] netlink: 'syz.0.274': attribute type 27 has an invalid length. [ 108.124897][ T6827] netlink: 124 bytes leftover after parsing attributes in process `syz.0.274'. [ 108.351719][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 108.798963][ C0] Illegal XDP return value 16128 on prog (id 25) dev team0, expect packet loss! [ 108.812914][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 108.854694][ T6859] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 108.901912][ T6859] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 108.932206][ T6839] netlink: 'syz.0.276': attribute type 29 has an invalid length. [ 108.947251][ T6859] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 108.966318][ T6839] netlink: 'syz.0.276': attribute type 29 has an invalid length. [ 108.978174][ T6859] netlink: 68 bytes leftover after parsing attributes in process `syz.1.280'. [ 109.277012][ T6886] tunl0: entered promiscuous mode [ 109.293249][ T6889] netlink: 'syz.3.287': attribute type 13 has an invalid length. [ 109.296939][ T6886] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 109.309181][ T6886] netlink: 9 bytes leftover after parsing attributes in process `syz.2.286'. [ 109.329394][ T6889] gretap0: refused to change device tx_queue_len [ 109.338029][ T6889] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.517755][ T6895] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 109.767037][ T6912] lo speed is unknown, defaulting to 1000 [ 109.779159][ T6912] lo speed is unknown, defaulting to 1000 [ 109.796003][ T6912] lo speed is unknown, defaulting to 1000 [ 110.130485][ T6923] ip6gretap1: entered promiscuous mode [ 110.152160][ T6923] ip6gretap1: entered allmulticast mode [ 110.195056][ T6923] bond3: (slave ip6gretap1): making interface the new active one [ 110.233099][ T6923] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.370015][ T6912] infiniband sz1: set active [ 110.376539][ T6912] infiniband sz1: added lo [ 110.406372][ T9] lo speed is unknown, defaulting to 1000 [ 110.464247][ T6912] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 110.483919][ T6938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.506713][ T6912] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 110.537290][ T6912] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 110.607681][ T6938] bond4: (slave ip6gretap2): making interface the new active one [ 110.618655][ T6938] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 110.720617][ T6912] RDS/IB: sz1: added [ 110.726871][ T6912] smc: adding ib device sz1 with port count 1 [ 110.735436][ T6912] smc: ib device sz1 port 1 has no pnetid [ 110.744433][ T5733] lo speed is unknown, defaulting to 1000 [ 110.812088][ T6912] lo speed is unknown, defaulting to 1000 [ 111.184348][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.210615][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.236344][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.250861][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.471059][ T6912] lo speed is unknown, defaulting to 1000 [ 111.824475][ T6994] bond1: entered promiscuous mode [ 111.854581][ T6994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.106913][ T7013] syzkaller0: entered promiscuous mode [ 112.117466][ T7013] syzkaller0: entered allmulticast mode [ 112.157868][ T7013] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 112.328732][ T6912] lo speed is unknown, defaulting to 1000 [ 112.585679][ T7028] __nla_validate_parse: 10 callbacks suppressed [ 112.585697][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 112.820134][ T6912] lo speed is unknown, defaulting to 1000 [ 112.915908][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 112.975608][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 112.997480][ T6563] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.011583][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 113.021255][ T6563] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.041492][ T6563] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.091629][ T7051] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 113.103724][ T6563] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.124069][ T7052] validate_nla: 10 callbacks suppressed [ 113.124085][ T7052] netlink: 'syz.4.335': attribute type 26 has an invalid length. [ 113.157635][ T7052] netlink: 'syz.4.335': attribute type 26 has an invalid length. [ 113.258756][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.337'. [ 113.298352][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 113.360906][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 113.409648][ T6912] lo speed is unknown, defaulting to 1000 [ 113.417676][ T7064] netlink: 212 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.427314][ T7065] netlink: 212 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.492597][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 113.529157][ T7063] syzkaller0: entered promiscuous mode [ 113.549193][ T7063] syzkaller0: entered allmulticast mode [ 115.480949][ T7101] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.689143][ T7118] ipvlan2: entered allmulticast mode [ 115.730187][ T7118] batadv_slave_1: entered allmulticast mode [ 115.754121][ T7118] batman_adv: batadv0: Adding interface: ipvlan2 [ 115.769601][ T7118] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.810825][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.831927][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.844334][ T7118] batman_adv: batadv0: Interface activated: ipvlan2 [ 115.878513][ T7122] bond1: option lp_interval: invalid value (0) [ 115.884970][ T7122] bond1: option lp_interval: allowed values 1 - 2147483647 [ 115.900580][ T7122] bond1 (unregistering): Released all slaves [ 116.072007][ T7140] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 116.283382][ T7154] sctp: [Deprecated]: syz.1.366 (pid 7154) Use of int in maxseg socket option. [ 116.283382][ T7154] Use struct sctp_assoc_value instead [ 116.287208][ T7147] syzkaller0: entered promiscuous mode [ 116.301383][ T7153] netlink: 'syz.4.367': attribute type 11 has an invalid length. [ 116.304140][ T7147] syzkaller0: entered allmulticast mode [ 116.372021][ T7150] lo speed is unknown, defaulting to 1000 [ 117.308649][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805789c400: rx timeout, send abort [ 117.317175][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805789c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.151168][ T7186] __nla_validate_parse: 2 callbacks suppressed [ 118.151183][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 118.389124][ T7201] netlink: 168 bytes leftover after parsing attributes in process `syz.0.375'. [ 118.464759][ T7201] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 118.714351][ T7201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.758693][ T7213] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.792950][ T7218] macvlan2: entered promiscuous mode [ 118.798819][ T7218] macvlan2: entered allmulticast mode [ 118.805539][ T7218] bond3: entered promiscuous mode [ 118.810629][ T7218] veth0_to_bond: entered promiscuous mode [ 118.818920][ T7218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.840360][ T7218] bond3: left promiscuous mode [ 118.850064][ T7218] veth0_to_bond: left promiscuous mode [ 118.880054][ T7226] netlink: 2 bytes leftover after parsing attributes in process `syz.3.384'. [ 118.991517][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.010552][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.025792][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 119.042695][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.502356][ T7258] Cannot find set identified by id 0 to match [ 119.541706][ T7258] netlink: 144 bytes leftover after parsing attributes in process `syz.0.395'. [ 119.821609][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a252c00: rx timeout, send abort [ 119.831612][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a252c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.090314][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 120.102447][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 120.228537][ T7294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 120.282624][ T7298] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 120.477531][ T7309] syzkaller1: entered promiscuous mode [ 120.502636][ T7309] syzkaller1: entered allmulticast mode [ 120.589229][ T7318] netlink: 'syz.0.407': attribute type 33 has an invalid length. [ 120.791494][ T7318] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 120.826852][ T7318] bond4 (unregistering): Released all slaves [ 120.883942][ T7317] macvlan0: entered promiscuous mode [ 121.039903][ T5641] block nbd0: Receive control failed (result -107) [ 121.110066][ T7345] netlink: 'syz.0.419': attribute type 64 has an invalid length. [ 121.218350][ T7348] team0: Device gtp0 is up. Set it down before adding it as a team port [ 121.663997][ T7380] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 121.743414][ T7382] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.987853][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bb90400: rx timeout, send abort [ 121.996368][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806bb90400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.115338][ T7410] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 122.199346][ T7412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.550279][ T7435] tipc: Enabled bearer , priority 10 [ 122.798627][ T7457] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20004 [ 123.285851][ T7485] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 123.293738][ T7485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.356194][ T7488] __nla_validate_parse: 12 callbacks suppressed [ 123.356209][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 123.368962][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 123.396048][ T7490] netlink: 'syz.4.458': attribute type 30 has an invalid length. [ 123.440288][ T7481] syz.2.456 (7481) used greatest stack depth: 15680 bytes left [ 123.449208][ T7492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.459'. [ 123.687970][ T5733] IPVS: starting estimator thread 0... [ 123.784773][ T7505] IPVS: using max 34 ests per chain, 81600 per kthread [ 123.988867][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 124.141032][ T7525] Bluetooth: MGMT ver 1.23 [ 124.142612][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057fbfc00: rx timeout, send abort [ 124.154248][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057fbfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.301149][ T7531] netlink: 'syz.3.475': attribute type 3 has an invalid length. [ 124.384019][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 126.193454][ T7568] syzkaller0: entered promiscuous mode [ 126.199465][ T7568] syzkaller0: entered allmulticast mode [ 126.208417][ T7581] tipc: Started in network mode [ 126.213531][ T7581] tipc: Node identity 8e52907306cd, cluster identity 4711 [ 126.220949][ T7581] tipc: Enabled bearer , priority 0 [ 126.234555][ T7582] gtp0: entered allmulticast mode [ 126.240676][ T7587] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 126.254509][ T7582] team0: Device gtp0 is of different type [ 126.340041][ T7586] tipc: Resetting bearer [ 126.444385][ T7586] tipc: Disabling bearer [ 126.451548][ T7595] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 126.475888][ T7594] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 126.521494][ T7601] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 126.559705][ T7595] bond2: entered promiscuous mode [ 126.565794][ T7595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.668673][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 126.709761][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 126.728048][ T7612] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.495'. [ 126.761754][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 126.778426][ T7612] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.495'. [ 126.803884][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 126.811983][ T7612] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.495'. [ 126.822476][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 126.833090][ T7612] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.495'. [ 126.848795][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 126.857221][ T7612] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 127.544537][ T7664] gretap1: entered promiscuous mode [ 127.553403][ T7664] batman_adv: batadv0: Adding interface: gretap1 [ 127.560313][ T7664] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.588606][ T7664] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 127.843608][ T7680] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 128.003275][ T7689] syzkaller1: entered promiscuous mode [ 128.009096][ T7689] syzkaller1: entered allmulticast mode [ 128.444193][ T7715] __nla_validate_parse: 70 callbacks suppressed [ 128.444211][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.462982][ T7715] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 128.580073][ T7721] netlink: 80 bytes leftover after parsing attributes in process `syz.4.527'. [ 128.832753][ T7732] syzkaller0: entered promiscuous mode [ 128.865062][ T7732] syzkaller0: entered allmulticast mode [ 129.173066][ T7752] netlink: 288 bytes leftover after parsing attributes in process `syz.4.536'. [ 129.338893][ T7762] trusted_key: syz.3.539 sent an empty control message without MSG_MORE. [ 129.480916][ T7771] bond0: entered promiscuous mode [ 129.490832][ T7771] bond_slave_0: entered promiscuous mode [ 129.506553][ T7771] bond_slave_1: entered promiscuous mode [ 129.735417][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.547'. [ 130.030563][ T7797] IPVS: length: 8 != 1152 [ 130.254726][ T7810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.556'. [ 130.321552][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.556'. [ 130.381125][ T7810] validate_nla: 61 callbacks suppressed [ 130.381142][ T7810] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 130.435732][ T7813] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 130.445132][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.562003][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 130.607478][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 130.661499][ T7827] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 130.689795][ T7827] syz_tun: entered promiscuous mode [ 130.761995][ T7830] netlink: 'syz.0.563': attribute type 4 has an invalid length. [ 130.790306][ T7831] lo: entered promiscuous mode [ 130.808514][ T7831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.840163][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.564'. [ 130.891101][ T5754] lo speed is unknown, defaulting to 1000 [ 130.908257][ T5754] sz1: Port: 1 Link DOWN [ 130.938696][ T5754] lo speed is unknown, defaulting to 1000 [ 131.344312][ T7860] netlink: 'syz.3.572': attribute type 4 has an invalid length. [ 131.396107][ T7860] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 131.422908][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'. [ 131.653352][ T7876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.661016][ T7876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 131.696554][ T7876] netlink: 'syz.1.579': attribute type 12 has an invalid length. [ 131.747550][ T7882] syzkaller0: entered promiscuous mode [ 131.753201][ T7882] syzkaller0: entered allmulticast mode [ 131.970283][ T7893] sctp: [Deprecated]: syz.4.584 (pid 7893) Use of int in max_burst socket option. [ 131.970283][ T7893] Use struct sctp_assoc_value instead [ 132.086036][ T7901] pim6reg: entered allmulticast mode [ 132.138429][ T7907] netlink: 'syz.4.588': attribute type 39 has an invalid length. [ 132.195376][ T7910] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 132.210027][ T7910] netlink: 'syz.1.590': attribute type 5 has an invalid length. [ 132.219498][ T7913] xt_HMARK: spi-set and port-set can't be combined [ 132.253054][ T7913] bond1: entered promiscuous mode [ 132.259130][ T7913] bond1: entered allmulticast mode [ 132.264911][ T7913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.450794][ T7927] veth0: entered promiscuous mode [ 132.460411][ T7923] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 132.466880][ T7923] syzkaller1: linktype set to 823 [ 132.519577][ T7928] veth0: left promiscuous mode [ 132.686977][ T7942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.833841][ T7952] 0·: renamed from hsr0 (while UP) [ 132.877839][ T7952] 0·: entered allmulticast mode [ 132.897724][ T7952] hsr_slave_0: entered allmulticast mode [ 132.916989][ T7952] hsr_slave_1: entered allmulticast mode [ 132.931363][ T7952] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 133.133727][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.618928][ T7991] syzkaller0: entered promiscuous mode [ 133.625130][ T7991] syzkaller0: entered allmulticast mode [ 133.940103][ T8019] __nla_validate_parse: 9 callbacks suppressed [ 133.940121][ T8019] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.617'. [ 134.040481][ T8009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.048593][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.618'. [ 134.059091][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 135.482273][ T8020] syzkaller1: entered promiscuous mode [ 135.488277][ T8020] syzkaller1: entered allmulticast mode [ 135.825385][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 135.973383][ T8047] bridge1: entered promiscuous mode [ 135.979618][ T8047] bridge1: entered allmulticast mode [ 136.131681][ T8064] netlink: 'syz.4.635': attribute type 11 has an invalid length. [ 136.140132][ T8064] netlink: 224 bytes leftover after parsing attributes in process `syz.4.635'. [ 136.153290][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 136.200839][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 136.210954][ T8060] syzkaller0: entered promiscuous mode [ 136.230047][ T8072] netlink: 'syz.4.635': attribute type 11 has an invalid length. [ 136.237804][ T8060] syzkaller0: entered allmulticast mode [ 136.321791][ T8072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.635'. [ 136.358102][ T8075] validate_nla: 3 callbacks suppressed [ 136.358118][ T8075] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 136.387098][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 136.396425][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 136.542120][ T8085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.656800][ T8096] Bluetooth: MGMT ver 1.23 [ 136.669995][ T8096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.724272][ T8100] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 136.725656][ T8099] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 136.738955][ T8100] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 136.749095][ T8101] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 137.069505][ T8116] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 137.153926][ T8118] No such timeout policy "syz1" [ 137.261288][ T8126] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 137.298719][ T8129] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 137.355698][ T8129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.383231][ T8134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.387640][ T8131] bond5: Unable to set up delay as MII monitoring is disabled [ 137.407640][ T8131] bond5 (unregistering): Released all slaves [ 137.542232][ T8140] sch_tbf: peakrate 1133640550432091011 is lower than or equals to rate 13766534561602061401 ! [ 137.669292][ T8143] netlink: 'syz.4.662': attribute type 62 has an invalid length. [ 137.867697][ T8157] nftables ruleset with unbound chain [ 138.006519][ T8165] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 138.042711][ T8165] x_tables: duplicate underflow at hook 3 [ 138.163810][ T8173] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 138.636343][ T8189] Cannot find set identified by id 0 to match [ 138.970013][ T8234] __nla_validate_parse: 6 callbacks suppressed [ 138.970029][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 138.983759][ T8225] bond4: entered promiscuous mode [ 138.997222][ T8225] bond4: entered allmulticast mode [ 139.003182][ T8225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.184265][ T8246] macvtap0: entered allmulticast mode [ 139.216169][ T8246] veth0_macvtap: entered allmulticast mode [ 139.288944][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 139.363875][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 139.386412][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.387457][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.406169][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 139.496362][ T8267] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.519606][ T8267] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.539630][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 139.735128][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 140.316254][ T8326] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 140.340273][ T8311] bond1 (unregistering): Released all slaves [ 140.481757][ T8326] netlink: 100 bytes leftover after parsing attributes in process `syz.3.710'. [ 140.948221][ T8364] netlink: 52 bytes leftover after parsing attributes in process `syz.3.719'. [ 140.982316][ T8349] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 141.060712][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.069765][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.129767][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.243992][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.720'. [ 141.264052][ T8376] FAULT_INJECTION: forcing a failure. [ 141.264052][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 141.277655][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.3.722 Not tainted syzkaller #0 PREEMPT(full) [ 141.277677][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.277686][ T8376] Call Trace: [ 141.277692][ T8376] [ 141.277699][ T8376] dump_stack_lvl+0xe8/0x150 [ 141.277732][ T8376] should_fail_ex+0x412/0x560 [ 141.277756][ T8376] should_failslab+0xa8/0x100 [ 141.277772][ T8376] ? radix_tree_node_alloc+0x7e/0x3a0 [ 141.277794][ T8376] kmem_cache_alloc_noprof+0x87/0x650 [ 141.277813][ T8376] ? radix_tree_node_alloc+0x7e/0x3a0 [ 141.277832][ T8376] ? is_vmalloc_or_module_addr+0x9f/0xd0 [ 141.277851][ T8376] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 141.277876][ T8376] radix_tree_node_alloc+0x7e/0x3a0 [ 141.277904][ T8376] idr_get_free+0x2b3/0xa70 [ 141.277937][ T8376] idr_alloc_u32+0x18d/0x320 [ 141.277951][ T8376] ? lock_acquire+0x106/0x350 [ 141.277973][ T8376] ? __pfx_idr_alloc_u32+0x10/0x10 [ 141.277992][ T8376] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.278019][ T8376] idr_alloc_cyclic+0x9b/0x1b0 [ 141.278059][ T8376] bpf_map_alloc_id+0x40/0xe0 [ 141.278077][ T8376] map_create+0x11f3/0x16a0 [ 141.278101][ T8376] ? security_bpf+0x7e/0x2d0 [ 141.278123][ T8376] __sys_bpf+0x6e1/0x950 [ 141.278146][ T8376] ? __pfx___sys_bpf+0x10/0x10 [ 141.278184][ T8376] ? ksys_write+0x242/0x270 [ 141.278208][ T8376] ? __pfx_ksys_write+0x10/0x10 [ 141.278232][ T8376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.278250][ T8376] __x64_sys_bpf+0x7c/0x90 [ 141.278271][ T8376] do_syscall_64+0x174/0x580 [ 141.278286][ T8376] ? trace_irq_disable+0x3b/0x140 [ 141.278306][ T8376] ? clear_bhb_loop+0x40/0x90 [ 141.278326][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.278341][ T8376] RIP: 0033:0x7f22aeb9ce59 [ 141.278366][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.278378][ T8376] RSP: 002b:00007f22afa11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.278395][ T8376] RAX: ffffffffffffffda RBX: 00007f22aee15fa0 RCX: 00007f22aeb9ce59 [ 141.278406][ T8376] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 141.278416][ T8376] RBP: 00007f22afa11090 R08: 0000000000000000 R09: 0000000000000000 [ 141.278425][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.278434][ T8376] R13: 00007f22aee16038 R14: 00007f22aee15fa0 R15: 00007ffde51ad038 [ 141.278467][ T8376] [ 141.670563][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 142.425812][ T8432] netlink: 'syz.4.739': attribute type 16 has an invalid length. [ 142.439336][ T8432] veth0_macvtap: entered allmulticast mode [ 142.538448][ T8436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.841117][ T8455] netlink: 'syz.0.746': attribute type 11 has an invalid length. [ 143.551007][ T8445] netlink: 'syz.3.743': attribute type 12 has an invalid length. [ 143.938426][ T8509] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 143.938426][ T8509] Please contact the netfilter-devel mailing list or update your nftables rules. [ 145.109582][ T8573] __nla_validate_parse: 9 callbacks suppressed [ 145.109599][ T8573] netlink: 216 bytes leftover after parsing attributes in process `syz.2.779'. [ 145.141798][ T8573] netlink: 'syz.2.779': attribute type 2 has an invalid length. [ 145.379686][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 145.457967][ T8586] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 145.490929][ T8586] netlink: 'syz.3.782': attribute type 2 has an invalid length. [ 146.011906][ T8624] netlink: 27 bytes leftover after parsing attributes in process `syz.3.794'. [ 146.222886][ T8639] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 146.364401][ T8639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.378358][ T8652] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 146.387716][ T8652] netlink: 224 bytes leftover after parsing attributes in process `syz.1.803'. [ 146.943580][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 146.990543][ T8675] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 147.040836][ T8682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.810'. [ 147.104393][ T8694] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 147.125827][ T8675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.137689][ T8696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.161134][ T8694] bond3: entered promiscuous mode [ 147.167318][ T8694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.365847][ T8708] netem: change failed [ 147.371122][ T8708] netlink: 'syz.0.821': attribute type 3 has an invalid length. [ 147.506328][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 147.643163][ T8722] sctp: [Deprecated]: syz.4.825 (pid 8722) Use of int in max_burst socket option deprecated. [ 147.643163][ T8722] Use struct sctp_assoc_value instead [ 147.663021][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 147.729611][ T8723] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.080953][ T8747] IPVS: length: 248 != 8 [ 148.100246][ T8742] can: request_module (can-proto-0) failed. [ 148.660632][ T8771] netlink: 52 bytes leftover after parsing attributes in process `syz.2.843'. [ 148.787396][ T8783] netlink: 'syz.1.846': attribute type 23 has an invalid length. [ 148.947274][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 148.970387][ T8794] netlink: 'syz.3.849': attribute type 3 has an invalid length. [ 149.178083][ T8805] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 149.219423][ T8807] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.250998][ T8802] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 149.284914][ T8802] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 149.293037][ T8802] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 149.303489][ T8809] bond4: (slave geneve3): making interface the new active one [ 149.313222][ T8809] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 149.329841][ T8805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.337705][ T3343] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.366554][ T3343] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.430941][ T3343] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.639440][ T8833] FAULT_INJECTION: forcing a failure. [ 149.639440][ T8833] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.682909][ T8828] geneve1: entered promiscuous mode [ 149.683244][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.4.861 Not tainted syzkaller #0 PREEMPT(full) [ 149.683262][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.683272][ T8833] Call Trace: [ 149.683278][ T8833] [ 149.683285][ T8833] dump_stack_lvl+0xe8/0x150 [ 149.683309][ T8833] should_fail_ex+0x412/0x560 [ 149.683332][ T8833] _copy_from_user+0x2d/0xb0 [ 149.683353][ T8833] kstrtouint_from_user+0xd6/0x180 [ 149.683371][ T8833] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 149.683401][ T8833] proc_fail_nth_write+0x8e/0x210 [ 149.683422][ T8833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.683446][ T8833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.683466][ T8833] vfs_write+0x29a/0xb90 [ 149.683496][ T8833] ? __pfx_vfs_write+0x10/0x10 [ 149.683518][ T8833] ? __fget_files+0x2a/0x420 [ 149.683540][ T8833] ? __fget_files+0x3a0/0x420 [ 149.683557][ T8833] ? __fget_files+0x2a/0x420 [ 149.683582][ T8833] ksys_write+0x150/0x270 [ 149.683605][ T8833] ? __pfx_ksys_write+0x10/0x10 [ 149.683634][ T8833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.683651][ T8833] do_syscall_64+0x174/0x580 [ 149.683667][ T8833] ? trace_irq_disable+0x3b/0x140 [ 149.683686][ T8833] ? clear_bhb_loop+0x40/0x90 [ 149.683706][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.683721][ T8833] RIP: 0033:0x7f051255d68e [ 149.683737][ T8833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.683749][ T8833] RSP: 002b:00007f0513452fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.683767][ T8833] RAX: ffffffffffffffda RBX: 00007f05134536c0 RCX: 00007f051255d68e [ 149.683777][ T8833] RDX: 0000000000000001 RSI: 00007f05134530a0 RDI: 0000000000000003 [ 149.683810][ T8833] RBP: 00007f0513453090 R08: 0000000000000000 R09: 0000000000000000 [ 149.683819][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.683828][ T8833] R13: 00007f0512816038 R14: 00007f0512815fa0 R15: 00007ffe8702c7e8 [ 149.683858][ T8833] [ 149.703996][ T8837] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 150.026475][ T8837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.285714][ T8866] __nla_validate_parse: 7 callbacks suppressed [ 150.285714][ T8868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.871'. [ 150.285729][ T8866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.871'. [ 150.365863][ T8873] syz_tun: refused to change device tx_queue_len [ 150.490382][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 150.570294][ T8884] netlink: 'syz.2.878': attribute type 9 has an invalid length. [ 150.733230][ T8896] xt_l2tp: invalid flags combination: 8 [ 150.904318][ T8906] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 150.951938][ T8906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.127958][ T8924] netlink: 248 bytes leftover after parsing attributes in process `syz.1.888'. [ 151.182312][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.888'. [ 151.378018][ T8941] bridge0: port 3(gretap0) entered blocking state [ 151.391149][ T8941] bridge0: port 3(gretap0) entered disabled state [ 151.398669][ T8941] gretap0: entered allmulticast mode [ 151.406541][ T8941] gretap0: entered promiscuous mode [ 151.552907][ T8952] netlink: 256 bytes leftover after parsing attributes in process `syz.0.894'. [ 151.717148][ T8962] syzkaller1: entered promiscuous mode [ 151.731356][ T8962] syzkaller1: entered allmulticast mode [ 151.969865][ T5293] veth0_macvtap: left promiscuous mode [ 152.107103][ T8981] 8021q: VLANs not supported on gre0 [ 152.140784][ T8983] netlink: 'syz.2.903': attribute type 2 has an invalid length. [ 152.196362][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 152.314903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.662374][ T9014] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 152.672893][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 152.708861][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 153.050846][ T9034] team0: Device xfrm0 is of different type [ 153.463570][ T9059] netlink: 156 bytes leftover after parsing attributes in process `syz.1.923'. [ 153.857968][ T9077] sctp: [Deprecated]: syz.4.931 (pid 9077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.857968][ T9077] Use struct sctp_sack_info instead [ 153.897104][ T9077] sctp: [Deprecated]: syz.4.931 (pid 9077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.897104][ T9077] Use struct sctp_sack_info instead [ 154.063628][ T9077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.073128][ T9077] bridge0: port 3(bond5) entered blocking state [ 154.083698][ T9077] bridge0: port 3(bond5) entered disabled state [ 154.090386][ T9077] bond5: entered allmulticast mode [ 154.098944][ T9077] bond5: entered promiscuous mode [ 154.105244][ T9077] bridge0: port 3(bond5) entered blocking state [ 154.111702][ T9077] bridge0: port 3(bond5) entered forwarding state [ 154.121686][ T3343] bridge0: port 3(bond5) entered disabled state [ 154.363862][ T9096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.426235][ T9102] syzkaller0: entered promiscuous mode [ 154.441467][ T9102] syzkaller0: entered allmulticast mode [ 154.480345][ T9107] validate_nla: 4 callbacks suppressed [ 154.480359][ T9107] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 155.419495][ T9156] sctp: [Deprecated]: syz.4.956 (pid 9156) Use of int in max_burst socket option deprecated. [ 155.419495][ T9156] Use struct sctp_assoc_value instead [ 155.579572][ T9165] netem: change failed [ 155.587624][ T9167] netem: change failed [ 155.602745][ T9167] __nla_validate_parse: 11 callbacks suppressed [ 155.602761][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.957'. [ 155.696960][ T9176] netlink: 80 bytes leftover after parsing attributes in process `syz.3.960'. [ 155.707222][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 155.912035][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 155.938817][ T9188] netlink: 'syz.1.962': attribute type 8 has an invalid length. [ 155.996999][ T9198] netlink: 216 bytes leftover after parsing attributes in process `syz.0.963'. [ 156.027759][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 156.318152][ T6565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.367097][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 156.409034][ T9212] netlink: 'syz.4.968': attribute type 15 has an invalid length. [ 156.432521][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 156.458839][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 156.486115][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 156.509672][ T9212] netlink: 'syz.4.968': attribute type 15 has an invalid length. [ 156.522442][ T9222] vlan0: entered promiscuous mode [ 157.181111][ T9262] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 157.285230][ T9262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.325075][ T9262] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 157.333688][ T9273] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 158.027515][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.079730][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.261716][ T9320] bridge_slave_0: left allmulticast mode [ 158.289324][ T9320] bridge_slave_0: left promiscuous mode [ 158.306794][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.341199][ T9320] bridge_slave_1: left allmulticast mode [ 158.349597][ T9320] bridge_slave_1: left promiscuous mode [ 158.358916][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.376164][ T9320] bond0: (slave bond_slave_0): Releasing backup interface [ 158.399117][ T9320] bond0: (slave bond_slave_1): Releasing backup interface [ 158.426086][ T9320] team0: Port device team_slave_0 removed [ 158.436677][ T9320] team0: Port device team_slave_1 removed [ 158.443263][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.452036][ T9320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.462442][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.470456][ T9320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.480836][ T9320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.497680][ T9327] netlink: 'syz.3.996': attribute type 3 has an invalid length. [ 158.506591][ T9327] netlink: 'syz.3.996': attribute type 3 has an invalid length. [ 158.892563][ T9355] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 159.152453][ T9355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.172941][ T9366] bond1: (slave veth0_to_bond): making interface the new active one [ 159.212563][ T9366] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 159.347396][ T9371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.391623][ T9371] bond1: (slave bond2): Enslaving as an active interface with a down link [ 159.602538][ T9395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.738613][ T9412] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 159.750994][ T9399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.781577][ T9399] bond3: (slave bond4): Enslaving as an active interface with an up link [ 159.876680][ T9395] bond3 (unregistering): (slave bond4): Releasing backup interface [ 159.890096][ T9395] bond3 (unregistering): Released all slaves [ 159.922181][ T9412] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 160.057162][ T9422] xt_CT: No such helper "snmp_trap" [ 160.539243][ T9460] syzkaller0: entered promiscuous mode [ 160.558278][ T9460] syzkaller0: entered allmulticast mode [ 160.795260][ T9470] __nla_validate_parse: 14 callbacks suppressed [ 160.795283][ T9470] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1036'. [ 160.906071][ T9479] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1039'. [ 160.912639][ T9482] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 161.026807][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 161.084926][ T9485] bond6: (slave geneve2): making interface the new active one [ 161.113874][ T9485] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 161.137124][ T9490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.144492][ T6565] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.155339][ T6565] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.167269][ T6565] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.178474][ T6565] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.305151][ T9489] nbd1: detected capacity change from 0 to 63 [ 161.366683][ T5629] block nbd1: Receive control failed (result -104) [ 161.375202][ T5641] block nbd1: Receive control failed (result -32) [ 161.527674][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 161.536984][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 161.657755][ T9510] tipc: Enabling of bearer rejected, failed to enable media [ 161.683345][ T9510] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1049'. [ 161.750936][ T5763] IPVS: starting estimator thread 0... [ 161.866395][ T9514] IPVS: using max 27 ests per chain, 64800 per kthread [ 162.111509][ T9524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1053'. [ 162.373931][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334ed000: rx timeout, send abort [ 162.382579][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880334ed000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.503373][ T9543] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1060'. [ 162.578453][ T9545] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1061'. [ 162.644420][ T9551] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 162.737554][ T6565] [ 162.739922][ T6565] ====================================================== [ 162.748594][ T6565] WARNING: possible circular locking dependency detected [ 162.755723][ T6565] syzkaller #0 Not tainted [ 162.760278][ T6565] ------------------------------------------------------ [ 162.767600][ T6565] kworker/u8:10/6565 is trying to acquire lock: [ 162.773856][ T6565] ffffffff8ea855c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 162.783694][ T6565] [ 162.783694][ T6565] but task is already holding lock: [ 162.791146][ T6565] ffff888077080260 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 162.800877][ T6565] [ 162.800877][ T6565] which lock already depends on the new lock. [ 162.800877][ T6565] [ 162.811427][ T6565] [ 162.811427][ T6565] the existing dependency chain (in reverse order) is: [ 162.820433][ T6565] [ 162.820433][ T6565] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 162.828243][ T6565] lock_sock_nested+0x41/0x100 [ 162.833537][ T6565] mptcp_sendmsg_fastopen+0x128/0x580 [ 162.839501][ T6565] mptcp_sendmsg+0x1b0c/0x1dc0 [ 162.844771][ T6565] ____sys_sendmsg+0x80a/0x9f0 [ 162.850040][ T6565] ___sys_sendmsg+0x2a5/0x360 [ 162.855227][ T6565] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.860673][ T6565] do_syscall_64+0x174/0x580 [ 162.865854][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.872252][ T6565] [ 162.872252][ T6565] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 162.880052][ T6565] lock_sock_nested+0x41/0x100 [ 162.885325][ T6565] inet_shutdown+0x6a/0x390 [ 162.890331][ T6565] nbd_mark_nsock_dead+0x2e9/0x560 [ 162.896006][ T6565] recv_work+0x1c2e/0x1d40 [ 162.900922][ T6565] process_scheduled_works+0xb5d/0x1860 [ 162.906969][ T6565] worker_thread+0xa53/0xfc0 [ 162.912178][ T6565] kthread+0x389/0x470 [ 162.916759][ T6565] ret_from_fork+0x514/0xb70 [ 162.921857][ T6565] ret_from_fork_asm+0x1a/0x30 [ 162.927215][ T6565] [ 162.927215][ T6565] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 162.934839][ T6565] __mutex_lock+0x1a3/0x1550 [ 162.939932][ T6565] nbd_queue_rq+0x37b/0x1100 [ 162.945029][ T6565] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 162.951079][ T6565] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 162.958086][ T6565] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 162.964571][ T6565] blk_mq_run_hw_queue+0x348/0x4f0 [ 162.970187][ T6565] blk_mq_dispatch_list+0xd16/0xe10 [ 162.975903][ T6565] blk_mq_flush_plug_list+0x48d/0x570 [ 162.981987][ T6565] __blk_flush_plug+0x3ed/0x4d0 [ 162.987448][ T6565] __submit_bio+0x28d/0x580 [ 162.992463][ T6565] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 162.998602][ T6565] block_read_full_folio+0x599/0x830 [ 163.004398][ T6565] filemap_read_folio+0x137/0x3b0 [ 163.009940][ T6565] do_read_cache_folio+0x358/0x590 [ 163.015843][ T6565] read_part_sector+0xb6/0x2b0 [ 163.021204][ T6565] adfspart_check_ICS+0xb1/0x960 [ 163.026649][ T6565] bdev_disk_changed+0x817/0x1770 [ 163.032174][ T6565] blkdev_get_whole+0x380/0x510 [ 163.037530][ T6565] bdev_open+0x31e/0xd30 [ 163.042283][ T6565] blkdev_open+0x470/0x610 [ 163.047294][ T6565] do_dentry_open+0x822/0x13a0 [ 163.052568][ T6565] vfs_open+0x3b/0x340 [ 163.057164][ T6565] path_openat+0x2e08/0x3860 [ 163.062257][ T6565] do_file_open+0x23e/0x4a0 [ 163.067270][ T6565] do_sys_openat2+0x113/0x200 [ 163.072639][ T6565] __x64_sys_openat+0x138/0x170 [ 163.078007][ T6565] do_syscall_64+0x174/0x580 [ 163.083198][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.089608][ T6565] [ 163.089608][ T6565] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 163.096806][ T6565] __mutex_lock+0x1a3/0x1550 [ 163.101914][ T6565] nbd_queue_rq+0xc6/0x1100 [ 163.106928][ T6565] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 163.113068][ T6565] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 163.119899][ T6565] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 163.126469][ T6565] blk_mq_run_hw_queue+0x348/0x4f0 [ 163.132086][ T6565] blk_mq_dispatch_list+0xd16/0xe10 [ 163.137793][ T6565] blk_mq_flush_plug_list+0x48d/0x570 [ 163.143676][ T6565] __blk_flush_plug+0x3ed/0x4d0 [ 163.149910][ T6565] __submit_bio+0x28d/0x580 [ 163.154937][ T6565] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 163.161213][ T6565] block_read_full_folio+0x599/0x830 [ 163.168207][ T6565] filemap_read_folio+0x137/0x3b0 [ 163.173846][ T6565] do_read_cache_folio+0x358/0x590 [ 163.179470][ T6565] read_part_sector+0xb6/0x2b0 [ 163.184744][ T6565] adfspart_check_ICS+0xb1/0x960 [ 163.190363][ T6565] bdev_disk_changed+0x817/0x1770 [ 163.195896][ T6565] blkdev_get_whole+0x380/0x510 [ 163.201257][ T6565] bdev_open+0x31e/0xd30 [ 163.206008][ T6565] blkdev_open+0x470/0x610 [ 163.210934][ T6565] do_dentry_open+0x822/0x13a0 [ 163.216295][ T6565] vfs_open+0x3b/0x340 [ 163.220900][ T6565] path_openat+0x2e08/0x3860 [ 163.226007][ T6565] do_file_open+0x23e/0x4a0 [ 163.231102][ T6565] do_sys_openat2+0x113/0x200 [ 163.236281][ T6565] __x64_sys_openat+0x138/0x170 [ 163.241633][ T6565] do_syscall_64+0x174/0x580 [ 163.246729][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.253136][ T6565] [ 163.253136][ T6565] -> #3 (set->srcu){.+.+}-{0:0}: [ 163.260416][ T6565] __synchronize_srcu+0xca/0x300 [ 163.265858][ T6565] elevator_switch+0x1e8/0x7a0 [ 163.271127][ T6565] elevator_change+0x2cc/0x450 [ 163.276401][ T6565] elevator_set_default+0x36c/0x430 [ 163.282206][ T6565] blk_register_queue+0x3e9/0x4e0 [ 163.287741][ T6565] __add_disk+0x677/0xd50 [ 163.292583][ T6565] add_disk_fwnode+0xfb/0x480 [ 163.297768][ T6565] nbd_dev_add+0x72c/0xb50 [ 163.302697][ T6565] nbd_init+0x168/0x1f0 [ 163.307358][ T6565] do_one_initcall+0x250/0x870 [ 163.312626][ T6565] do_initcall_level+0x104/0x190 [ 163.318070][ T6565] do_initcalls+0x59/0xa0 [ 163.322906][ T6565] kernel_init_freeable+0x2a6/0x3e0 [ 163.328605][ T6565] kernel_init+0x1d/0x1d0 [ 163.333440][ T6565] ret_from_fork+0x514/0xb70 [ 163.338534][ T6565] ret_from_fork_asm+0x1a/0x30 [ 163.343804][ T6565] [ 163.343804][ T6565] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 163.351609][ T6565] __mutex_lock+0x1a3/0x1550 [ 163.356710][ T6565] elevator_change+0x1b3/0x450 [ 163.361980][ T6565] elevator_set_none+0xb5/0x140 [ 163.367337][ T6565] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 163.373648][ T6565] nbd_start_device+0x17f/0xb10 [ 163.379008][ T6565] nbd_genl_connect+0x165b/0x1cf0 [ 163.384541][ T6565] genl_family_rcv_msg_doit+0x22a/0x330 [ 163.390597][ T6565] genl_rcv_msg+0x61c/0x7a0 [ 163.395690][ T6565] netlink_rcv_skb+0x232/0x4b0 [ 163.400962][ T6565] genl_rcv+0x28/0x40 [ 163.405513][ T6565] netlink_unicast+0x75c/0x8e0 [ 163.410783][ T6565] netlink_sendmsg+0x813/0xb40 [ 163.416080][ T6565] ____sys_sendmsg+0x972/0x9f0 [ 163.421517][ T6565] ___sys_sendmsg+0x2a5/0x360 [ 163.426694][ T6565] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.432133][ T6565] do_syscall_64+0x174/0x580 [ 163.437316][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.443724][ T6565] [ 163.443724][ T6565] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 163.452402][ T6565] blk_alloc_queue+0x546/0x680 [ 163.458018][ T6565] __blk_mq_alloc_disk+0x197/0x390 [ 163.463635][ T6565] nbd_dev_add+0x499/0xb50 [ 163.468646][ T6565] nbd_init+0x168/0x1f0 [ 163.473428][ T6565] do_one_initcall+0x250/0x870 [ 163.478699][ T6565] do_initcall_level+0x104/0x190 [ 163.484228][ T6565] do_initcalls+0x59/0xa0 [ 163.489061][ T6565] kernel_init_freeable+0x2a6/0x3e0 [ 163.494815][ T6565] kernel_init+0x1d/0x1d0 [ 163.499653][ T6565] ret_from_fork+0x514/0xb70 [ 163.504756][ T6565] ret_from_fork_asm+0x1a/0x30 [ 163.510188][ T6565] [ 163.510188][ T6565] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 163.517399][ T6565] __lock_acquire+0x15a5/0x2cf0 [ 163.522842][ T6565] lock_acquire+0x106/0x350 [ 163.527936][ T6565] fs_reclaim_acquire+0x71/0x100 [ 163.533380][ T6565] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 163.539787][ T6565] __alloc_skb+0x1d0/0x7d0 [ 163.544714][ T6565] tcp_stream_alloc_skb+0x3f/0x580 [ 163.550332][ T6565] tcp_connect+0x15a9/0x53a0 [ 163.555496][ T6565] tcp_v4_connect+0x10f7/0x19b0 [ 163.560937][ T6565] __inet_stream_connect+0x25a/0xdd0 [ 163.566724][ T6565] inet_stream_connect+0x66/0xa0 [ 163.572164][ T6565] kernel_connect+0x141/0x1c0 [ 163.577432][ T6565] rds_tcp_conn_path_connect+0x6f6/0x930 [ 163.583574][ T6565] rds_connect_worker+0x1d8/0x290 [ 163.589115][ T6565] process_scheduled_works+0xb5d/0x1860 [ 163.595166][ T6565] worker_thread+0xa53/0xfc0 [ 163.600280][ T6565] kthread+0x389/0x470 [ 163.604861][ T6565] ret_from_fork+0x514/0xb70 [ 163.609954][ T6565] ret_from_fork_asm+0x1a/0x30 [ 163.615218][ T6565] [ 163.615218][ T6565] other info that might help us debug this: [ 163.615218][ T6565] [ 163.625426][ T6565] Chain exists of: [ 163.625426][ T6565] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 163.625426][ T6565] [ 163.638188][ T6565] Possible unsafe locking scenario: [ 163.638188][ T6565] [ 163.645631][ T6565] CPU0 CPU1 [ 163.650995][ T6565] ---- ---- [ 163.656348][ T6565] lock(k-sk_lock-AF_INET); [ 163.660936][ T6565] lock(sk_lock-AF_INET); [ 163.667854][ T6565] lock(k-sk_lock-AF_INET); [ 163.675065][ T6565] lock(fs_reclaim); [ 163.679033][ T6565] [ 163.679033][ T6565] *** DEADLOCK *** [ 163.679033][ T6565] [ 163.687421][ T6565] 4 locks held by kworker/u8:10/6565: [ 163.692776][ T6565] #0: ffff88807caf3940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 163.704417][ T6565] #1: ffffc90002e07c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 163.717200][ T6565] #2: ffff88802b47b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 163.728359][ T6565] #3: ffff888077080260 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 163.738345][ T6565] [ 163.738345][ T6565] stack backtrace: [ 163.744221][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 163.744235][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.744244][ T6565] Workqueue: krds_cp_wq#4/0 rds_connect_worker [ 163.744260][ T6565] Call Trace: [ 163.744268][ T6565] [ 163.744274][ T6565] dump_stack_lvl+0xe8/0x150 [ 163.744298][ T6565] print_circular_bug+0x2e1/0x300 [ 163.744314][ T6565] check_noncircular+0x12e/0x150 [ 163.744330][ T6565] __lock_acquire+0x15a5/0x2cf0 [ 163.744346][ T6565] ? __lock_acquire+0x6b5/0x2cf0 [ 163.744359][ T6565] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 163.744374][ T6565] lock_acquire+0x106/0x350 [ 163.744384][ T6565] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 163.744399][ T6565] ? check_noncircular+0xda/0x150 [ 163.744415][ T6565] fs_reclaim_acquire+0x71/0x100 [ 163.744430][ T6565] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 163.744444][ T6565] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 163.744459][ T6565] ? __alloc_skb+0x1d0/0x7d0 [ 163.744474][ T6565] ? ipv4_default_advmss+0x20/0x340 [ 163.744489][ T6565] __alloc_skb+0x1d0/0x7d0 [ 163.744505][ T6565] tcp_stream_alloc_skb+0x3f/0x580 [ 163.744519][ T6565] ? __asan_memset+0x22/0x50 [ 163.744533][ T6565] tcp_connect+0x15a9/0x53a0 [ 163.744553][ T6565] ? get_random_u16+0x139/0x910 [ 163.744564][ T6565] ? __pfx_tcp_connect+0x10/0x10 [ 163.744581][ T6565] ? __asan_memset+0x22/0x50 [ 163.744595][ T6565] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 163.744612][ T6565] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 163.744632][ T6565] ? sk_setup_caps+0x9ef/0xc40 [ 163.744643][ T6565] ? sk_setup_caps+0x29/0xc40 [ 163.744653][ T6565] tcp_v4_connect+0x10f7/0x19b0 [ 163.744674][ T6565] ? __pfx_tcp_v4_connect+0x10/0x10 [ 163.744686][ T6565] ? inet_csk_get_port+0x1178/0x16d0 [ 163.744698][ T6565] ? __bfs+0x153/0x290 [ 163.744708][ T6565] ? __bfs+0x153/0x290 [ 163.744720][ T6565] ? __pfx_hlock_conflict+0x10/0x10 [ 163.744735][ T6565] __inet_stream_connect+0x25a/0xdd0 [ 163.744752][ T6565] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.744766][ T6565] ? lock_sock_nested+0x6a/0x100 [ 163.744779][ T6565] ? __pfx___inet_stream_connect+0x10/0x10 [ 163.744793][ T6565] ? inet_stream_connect+0x51/0xa0 [ 163.744805][ T6565] ? __local_bh_enable_ip+0xd0/0x130 [ 163.744817][ T6565] inet_stream_connect+0x66/0xa0 [ 163.744830][ T6565] kernel_connect+0x141/0x1c0 [ 163.744843][ T6565] ? __pfx_kernel_connect+0x10/0x10 [ 163.744858][ T6565] ? __local_bh_enable_ip+0xd0/0x130 [ 163.744870][ T6565] rds_tcp_conn_path_connect+0x6f6/0x930 [ 163.744891][ T6565] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 163.744906][ T6565] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.744921][ T6565] ? process_scheduled_works+0xa70/0x1860 [ 163.744933][ T6565] ? process_scheduled_works+0xa70/0x1860 [ 163.744946][ T6565] rds_connect_worker+0x1d8/0x290 [ 163.744958][ T6565] ? process_scheduled_works+0xa70/0x1860 [ 163.744969][ T6565] process_scheduled_works+0xb5d/0x1860 [ 163.744989][ T6565] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.745002][ T6565] ? assign_work+0x3d5/0x5e0 [ 163.745014][ T6565] worker_thread+0xa53/0xfc0 [ 163.745033][ T6565] kthread+0x389/0x470 [ 163.745047][ T6565] ? __pfx_worker_thread+0x10/0x10 [ 163.745057][ T6565] ? __pfx_kthread+0x10/0x10 [ 163.745071][ T6565] ret_from_fork+0x514/0xb70 [ 163.745083][ T6565] ? __pfx_ret_from_fork+0x10/0x10 [ 163.745094][ T6565] ? __switch_to+0xc79/0x1410 [ 163.745110][ T6565] ? __pfx_kthread+0x10/0x10 [ 163.745123][ T6565] ret_from_fork_asm+0x1a/0x30 [ 163.745141][ T6565] [ 164.160743][ T9551] 8021q: adding VLAN 0 to HW filter on device bond6