last executing test programs: 2.916626256s ago: executing program 3 (id=4068): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000480b7060000ffffff908500000005000000bf0900000000000035090100000000009500000000000520bf9100000000000056070000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.690147929s ago: executing program 3 (id=4071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) gettid() sendmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x30, 0x20008000}, 0x4000080) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'veth0_to_team\x00', @random="000500000020"}) 2.46474084s ago: executing program 3 (id=4075): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0xfffffffffffffeec}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ffffff8d00"}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="690000000000000069105c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="690000000000000069105c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.101740613s ago: executing program 1 (id=4079): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x48040, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000003c0)=0x3) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000003c0)=0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) shutdown(r1, 0x1) 2.040020471s ago: executing program 4 (id=4081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001802c00040014000100020000007f"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f0000000400000008000000400000000000000024938db785ce6461d8c321ad528ac602a9acf604c5967dc92b3a6c036bbe3201875991fd348add6aff0626fc98472674e78eb21cb0e6f33774cb20fb477d41b6692db6c1c5fe047ccd51c21cefef644c9e5a8e12ec42bac5b583654e89426c07cfafdf2d083b9b5904341ac1b338f13c200bdce768d79ca5c624a07e03de726a7629c58f19dc51f7622cfcad48b6c7a041b382aa666b7f81298fdeab67135b6a8c382f59a2e1fb35e574bca1", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="1bc942bd74", 0x5}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}], 0x18, 0x40044}}], 0x1, 0x20008801) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r5, @ANYBLOB="0000e900080008"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 1.917979849s ago: executing program 4 (id=4082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000017c0)={{r0, 0x0, 0x4000, &(0x7f0000000100)={@align=0x1, {0x6, 0xd, 0x8}}, 0x1000, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)}, 0x0, &(0x7f00000016c0)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x5, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900180000fe880000000000000000000000000001fc0200000000000000000000000000005c020000000000000401000101", @ANYRES8], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000580)="4beac53d8760ad2dc5ec5ab4baf37089fa2da41adef1598ed7abfaaa17b28ab3d3c5330e18cea9cdd82e1b2babdb6b5abc009401fa25bb93f00bef23ea1a54b87452817e0b452120ff2ee125597b6ba75c1664f0ddcdfc84cd33b9220f7e6d5b121ae706826ab4f169a2d108274f7348a2132d443fafbf49347a3371c3407f6a13710c", 0x83) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x44042) socket$inet(0x2, 0x4, 0x1) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001e0001002cbd7000fedbdf25000000009c46a2ef2b6e6f8c9cfa143ca977e9c975f726c306d5272af20ad1ace15e028e18cce1b6301504f45a66dcc27d7a46f3266f562369d5fc3f33c7342a27b2d2bda03b03dd989ddd1707383f7efbb526c14b3c75599bb9618991054f31cbb4748108b85e6acf4820560546"], 0x14}, 0x1, 0x0, 0x0, 0x45844}, 0x0) setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000040)=0x401, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.917794245s ago: executing program 1 (id=4083): unshare(0x22020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r1, 0x84, 0x24, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="25b89ca38ffd48f3be52163448412ba88b3b3470fd067b86c90b6a0e128e759b06d7f61330b7331062fd2d06b8dfaa8d46c2599e964169e2af557f1d550351763c216e06ec4e27ec532e102ec91c67c933cd5ef7185e1240b610f702820050f1b3a7d400eb9c175a56fd7f7ada062e9ad621b78d231d0da00fc160ac4d7ab146661c1da82b69f56b117be37640ca5f8254f2c1e4e4e2c955be05673dcb9a8184f54a2002d1eefc2217d036a6574b7ca4cffd454ee3d634de3abf84f01e7696d522da0c757ab1b0b6c6c7b24a397771575169160a2ebda14db678b618abc82099cf0a80dca5c09c", 0xe7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3}], 0x1, 0x20044895) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}], 0x2}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f00000007c0)=""/3, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$tipc(0x1e, 0x2, 0x0) 1.797704913s ago: executing program 3 (id=4085): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x400, 0x6, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x64, 0x0, 0x68, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x7d, 0x1, 0x9, [{@rand_addr=0x64010101, 0x2}, {@multicast1, 0x80}, {@private=0xa010102, 0x68c2}, {@local, 0x8}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x6f2a}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}, {&(0x7f0000000540)="a492e9584c2b3f2bc70b72425db125af3ffd93dad703501bc83d44bfbfeea19907a2", 0x22}], 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, 0x5, 0x2, 0x1, 0x200, 0xfffffffffffffffb, 0x840062, r0}) 1.577957559s ago: executing program 2 (id=4087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) unshare(0x400) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x64b, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="a03f030100008005d25a806c8c6394f90324fc60100000000a0002", 0x1b}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1}, 0xfd}], 0x20) r7 = socket(0x10, 0x803, 0x0) getsockopt(r7, 0x1, 0x13, &(0x7f0000000140)=""/63, &(0x7f00000001c0)=0x3f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000726bd7000fedbdf250200000014000c00fe8000000000000000000000000000aa0c000300040000ddfffffffe04000d002b00050000000d002c0000000c000300040000000000000008000100", @ANYRES32=r6, @ANYBLOB="080002000000000005000d001e000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000804) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, 0x0, 0x0, 0x41) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000021000100000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000000000000000000000020000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004001100b3f2a39df91f42bc254bb7a4702bf430e6f55f1a8562e247c4ca4d9b31476caa86fa3ec02bf5fd3683545ba9e1b8b4b3df606d8aedb473804eb4923a3208b2a022a9f1404e5b1690d0e536f8571f4c71bda734ffc45490bf4cc6667f1d3de257dbbc0a4a69832585dfc4b392cdb30f5fd8972c3cf2245cfa6549f38f85cad422ae6fa1cab742e543cbe50764bc0abf14b6ae2bd20e74d89791e13cf5a9d63a7434f606fc906d4a5c798a7c66121e286bed0ee9eea44fa66cb4404b6ac6b19af979ae9a7c27b581ff259368adecc525c270e6448aecd90ff29cbda88446b97a76d7a7d31b6415c2d09f465d0d2b0ab9"], 0x54}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.514717588s ago: executing program 1 (id=4089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)="17", 0x1}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000d01000001000000876e3679fd89000018000000000000001001000000000000797e000000000000800000000002000019010000c2f8ffffa140f1106cbfcc1594b77894f3f8c3088dae8590f55c634f8110f4e5a4f17374fd7a7be8ecf6cf098bfb99921405e210c0046528abeed66ace94b23b3a9505320bfeafc7d4bb01c515cd597c6c05f9d5f51c44ff3586302cfb7f42ce54723faf9bad66b8454e5ae2db3d7084e90000008000000000000000ff000000990000001616b4c413517073512eb692583a39b4b799a7aaad3c180676618007808ce217393c9f9423cc865ae3308bdd77aa7f387874093c28cbcf5b1305afec40ebf605d1a59b3bc60308d603574f96f2b656ac4484d0864a92df556d9f0a922c0ceb79a481fe8fe677038c4b00000000000000c0000000000000000d010000000001003db0ccde20e4c2b5a25743d78659511d757b34da55bfad468e8ed29b4307f236e8a1754b7f765062069ed4bc11c155c6dd104c21a03d6b7931f063c1a54fb39671df5793b71d3d34e6eff46dd489ae8fa5a725344ec1401204a281688d7b584f02e16db4b9e8b2c5d322f0bb3cf619c59ce8d81097f3aeba90efdc3760f3274921264602406244eddc527ea089f06c1502b6ed90a6d5dda0bd080434dfdc2b535d75f15fd2828a97d765171917000000f0"], 0x2e0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001100)='0', 0x1}], 0x1, &(0x7f0000001280)=[{0xc, 0x1, 0xc1bc}], 0xc}}], 0x2, 0x4044040) 1.429632304s ago: executing program 4 (id=4090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b0000000000000000000000000000210001000a081c00"], 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b0000000000000000000000000000210001000a081c00"], 0x70}}, 0x0) (async) 1.405176017s ago: executing program 1 (id=4091): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8005, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x108}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000022000000000000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x3ffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r8, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.363397502s ago: executing program 2 (id=4092): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$can_j1939(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) 1.277496556s ago: executing program 2 (id=4094): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20008010) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x2, 0x7, 0x6, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000580)='GPL\x00', 0x8001, 0x0, &(0x7f00000005c0), 0x40f00, 0x3b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xb, 0x5, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0x1, 0xc}, {0x5, 0x2, 0x3, 0xb}, {0x2, 0x5, 0x1, 0xb}, {0x0, 0x5, 0x0, 0x4}, {0x1, 0x3, 0xf, 0xb}]}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000900)={r4, &(0x7f0000000800)='wg2\x00', 0x480301, &(0x7f0000000840)={@_ha_fsid={[0x0, 0x3]}, {0x2, 0xc, 0xa44, 0x3}}, 0x1000, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x99}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9467}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc8}], &(0x7f00000000c0)='GPL\x00', 0xfffffff8, 0x96, &(0x7f0000000240)=""/150, 0x41000, 0x24, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x80000001, 0x7}, 0x10, 0x217e7, r6, 0x8, &(0x7f0000000940)=[r7, r9, r10], &(0x7f0000000980)=[{0x0, 0x4, 0x5, 0x5}, {0x4, 0x5, 0xf, 0x5}, {0x2, 0x5, 0xb, 0xb}, {0x1, 0x5, 0x9, 0x6}, {0x4, 0x5, 0xa, 0x8}, {0x0, 0x2, 0x3, 0x7}, {0x2, 0x3, 0xb, 0x1}, {0x4, 0x5, 0x8, 0x9}], 0x10, 0x1ff}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) sendmsg$nl_route(r11, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fbdbdf2502000008"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) 1.137909945s ago: executing program 4 (id=4095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) shutdown(r0, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$inet(0x2, 0xa, 0x8) syz_init_net_socket$llc(0x1a, 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYBLOB="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", @ANYRESHEX=r1], 0x124}}, 0x0) 1.020743371s ago: executing program 0 (id=4096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f00000004c0)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0x1, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401]}}) (async) r1 = socket$netlink(0x10, 0x3, 0x2) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x5, 0x0, 0xa001}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000026c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002680)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/8560], 0x2170}, 0x1, 0x0, 0x0, 0x40001}, 0x40002) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b27, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xd4741000) 970.597959ms ago: executing program 2 (id=4097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) 944.357211ms ago: executing program 0 (id=4098): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)={0x360, 0x3e, 0x301, 0x0, 0x0, "", [@nested={0x34d, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @nested={0x256, 0xe6, 0x0, 0x1, [@nested={0x2c, 0x11b, 0x0, 0x1, [@typed={0x14, 0x51, 0x0, 0x0, @ipv6=@mcast2}, @generic, @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @nested={0x4, 0xfc}, @typed={0x8, 0x98, 0x0, 0x0, @uid}]}, @generic="beaf34711da237f36f734eb63f945aa88e3569e319881a90339f5127869cafd1b7000a65b0b0cbcb3ff758475eb29bd5d98f4f959045c50eae0e13269f54fcf9afea28c4a9455fc864c0b2ee67fecacea152f75cefef78a2a2c58c887229bc967ba5fa337a78da603add763b3d10b921884d983fdf8e64c462e8c3799e9349e84d5389384e29e55e58636e8a15ddb3c0d36babbb7e31d901ae4645a74f824e8ca023a68ff563f6513d9d3397a02455c7db6d4277a24456ee9e7ec125", @generic="c763c37e3aa08e039dd1273188557041c5b7a91d7f38afb424f29bd3bb053b46999193bd055966961c23644cac0d0749bf32de2afac603dc99748e5bc5c5924dadf52e49bf3a0a061385fe9df674f64dd28ac8b80e8519f8188f054be725b57b713900ee74212920bd964e74b3bd", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x9b, 0x151, 0x0, 0x1, [@typed={0x8, 0xc9, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xbc}, @generic="84c854ad0c4f738171ae1ad928061b80d2b256d8ecad41b06c8259a743cfef882835143b86fee55af1b290680d4d6ec6e0b3857c790f23c55c3d7550121f69fcea34873c3402612adf8a15b5c10d4918215ae70086cdd850f12f086dcddca72d6c4dcc", @nested={0x4, 0x9f}, @typed={0x8, 0x104, 0x0, 0x0, @fd}, @typed={0x7, 0xc6, 0x0, 0x0, @str='[*\x00'}, @typed={0x8, 0xa2, 0x0, 0x0, @fd}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x80000000}, @nested={0x4, 0xd6}]}, @nested={0x56, 0x2e, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0xdb}, @generic="74dae68f5db3db3c801f777d40d7fa8025b70dd5243e59a8fdf2f0504c11a7ed7252d44743a615df3b2d02cc8548b772f9587df4852ccc12fcba5bc0411caafa38de"]}]}]}]}, 0x360}], 0x1}, 0x0) 921.475138ms ago: executing program 3 (id=4099): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xffff, 0x7, 0x0, 0x2, {0xa, 0x4e20, 0x0, @loopback, 0x2}}}, 0x80, 0x0}, 0x24044051) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0xdae27cb1b3302389}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x9, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="eb73ffc1a96d5d8c3a9af437d98fbcde67a5c89ad3cee8a649c2bf1afd8cfbeb25125bebff2256218f2dba0cff7dacfc77eb57924a92683762c70f46a888c7cdff0596e351273a235206674bc0fb9b49ce36f2281af634e13f011375294363ae0c946096b1b6cbde8946962b9770f7ff0036fcea28ade5787a3da1afe9d2d070c399e7e670fb6d6adba18e446ff758577fb28ad1932dc9cbca7d228c76d1a034204b956b6f6a98ee8bba59595fcabda144e471c9ec38f98f50d82ff0a02d73f83b37474839438b2a8ab9fb209f23f16b276fd9a519682a8b75093e308c58d9a34f4e70cfd88327671e3a26f950077b0f58fc52e9aef9b03f3c49ef4089", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3fb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149e0eb7fb0cf55a7c33b44627d5f41cdb1", 0x61}], 0x7, &(0x7f0000000d40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd83}]}}}, @tclass={{0x14, 0x29, 0x43, 0x63}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x32, 0x5, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xa, [0x2]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @ra={0x5, 0x2, 0x64}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0xd0}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hoplimit_2292={{0x51, 0x29, 0x8, 0x6}}], 0xf8}}], 0x5, 0x0) 852.625995ms ago: executing program 0 (id=4100): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @loopback, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) getsockopt$MRT(r2, 0x0, 0xcf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 762.053479ms ago: executing program 2 (id=4101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)="17", 0x1}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x2e0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001100)='0', 0x1}], 0x1, &(0x7f0000001280)=[{0xc, 0x1, 0xc1bc}], 0xc}}], 0x2, 0x4044040) 674.544991ms ago: executing program 2 (id=4102): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70407000000000000000000c300000095", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r10, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) 584.216056ms ago: executing program 1 (id=4103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x2, 0x70ff, 0x4, 0x9, 0x5, 0x7ff, 0x7, 0x200, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x9, 0x10, 0xfffffffffffffc89, 0x2}, &(0x7f0000000480)=0x18) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0xe43}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="1b63b8b14cf47658dfc7a8956d9b4ad2ff66e928c2438f7690007b5c380a59b866e029eb6bd5709484bc51efee27a1fbb1637c678d398b27442b560cc21ee2edc9ec61af0d0cecb783efedebb455c9a59920a0088c22aaddba0d7b5485f552044ae216a456790150d4aa4dd008c65bc93ac4b40befa344935755beaff5b3dad608d76fced8676d17f2af42ae3b5e1d760cea435a10e25e077585407a592ed4f1695aece80a01b3e6947a4cda10a1765cecef9854163463c601b584278f5db698bcd98c4a765d7c6265660f74bedd0b59262c2641290a2b0f1752fa4cd3f52eab1b1a67720c75ea1a316cf8374e9d22231934accf7e36044f781b53e2bf8a", 0xfe}, {&(0x7f0000000240)="4bbbbdd98a4c3f3bb9ceb852498b929bb0175329737a9c63f05b73339da81d3fb4be0d6a173c0bc4a609e8f654213179ee83779972aeb8e41a9079ebfc615f0209fd974d410910c59cf7f5dd32adc57478626486267cc658fd79b99e2f3185a5429254dbf758faf1c6447117366c069d0973c131b27db358cb503f19572cbc4b3d63e5d17a4ebf7c0464f221ef537fca6106d58a2f482581b436013b0d00900cfbeec1d8637f97300293b2edd5ff1bd1511032c229bad4ec1870d58d149a1cc346b9", 0xc2}, {&(0x7f0000000340)="4f3c6bd77165e86052ba6b9be508e2c0940c55ffe1b8ea6f207bb4", 0x1b}], 0x3, &(0x7f00000004c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x3, 0x2, 0x1, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x7474, 0x1, 0x5, 0x4, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffff7}}, @sndrcv={0x30, 0x84, 0x1, {0x2c2, 0x5, 0x800a, 0x2, 0xffffffff, 0x2, 0x80000001, 0x1000, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x202, 0x5, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0xa, 0x800a, 0xff, 0x1, r2}}, @init={0x18, 0x84, 0x0, {0x6770, 0x3, 0x0, 0xb}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0xff, 0x5, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x130, 0x4000}, 0x4080) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) 496.96801ms ago: executing program 0 (id=4104): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$can_j1939(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) 393.831876ms ago: executing program 1 (id=4105): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 362.977767ms ago: executing program 0 (id=4106): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async, rerun: 32) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async, rerun: 32) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bind$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x2}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) sendmmsg$inet6(r5, &(0x7f0000000440), 0x0, 0x10) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x20000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9, 0xffe0}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) close(0x4) 168.879807ms ago: executing program 0 (id=4107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffff81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x5}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe15, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) 98.116365ms ago: executing program 4 (id=4108): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0xc, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0xffffffffffffffa7, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000007) pread64(r1, &(0x7f0000000700)=""/4096, 0x1000, 0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x18) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x80, 0x4) 19.78567ms ago: executing program 4 (id=4109): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="99af575134583b0c1b9005e3f797a3e568dd74efdaa4ed27"], 0x7c}}, 0x24044812) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000801}], 0x1, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r4, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @remote, 0x8}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 0s ago: executing program 3 (id=4110): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)={0x360, 0x3e, 0x301, 0x0, 0x0, "", [@nested={0x34d, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @nested={0x256, 0xe6, 0x0, 0x1, [@nested={0x2c, 0x11b, 0x0, 0x1, [@typed={0x14, 0x51, 0x0, 0x0, @ipv6=@mcast2}, @generic, @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @nested={0x4, 0xfc}, @typed={0x8, 0x98, 0x0, 0x0, @uid}]}, @generic="beaf34711da237f36f734eb63f945aa88e3569e319881a90339f5127869cafd1b7000a65b0b0cbcb3ff758475eb29bd5d98f4f959045c50eae0e13269f54fcf9afea28c4a9455fc864c0b2ee67fecacea152f75cefef78a2a2c58c887229bc967ba5fa337a78da603add763b3d10b921884d983fdf8e64c462e8c3799e9349e84d5389384e29e55e58636e8a15ddb3c0d36babbb7e31d901ae4645a74f824e8ca023a68ff563f6513d9d3397a02455c7db6d4277a24456ee9e7ec125", @generic="c763c37e3aa08e039dd1273188557041c5b7a91d7f38afb424f29bd3bb053b46999193bd055966961c23644cac0d0749bf32de2afac603dc99748e5bc5c5924dadf52e49bf3a0a061385fe9df674f64dd28ac8b80e8519f8188f054be725b57b713900ee74212920bd964e74b3bd", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x9b, 0x151, 0x0, 0x1, [@typed={0x8, 0xc9, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xbc}, @generic="84c854ad0c4f738171ae1ad928061b80d2b256d8ecad41b06c8259a743cfef882835143b86fee55af1b290680d4d6ec6e0b3857c790f23c55c3d7550121f69fcea34873c3402612adf8a15b5c10d4918215ae70086cdd850f12f086dcddca72d6c4dcc", @nested={0x4, 0x9f}, @typed={0x8, 0x104, 0x0, 0x0, @fd}, @typed={0x7, 0xc6, 0x0, 0x0, @str='[*\x00'}, @typed={0x8, 0xa2, 0x0, 0x0, @fd}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x80000000}, @nested={0x4, 0xd6}]}, @nested={0x56, 0x2e, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0xdb}, @generic="74dae68f5db3db3c801f777d40d7fa8025b70dd5243e59a8fdf2f0504c11a7ed7252d44743a615df3b2d02cc8548b772f9587df4852ccc12fcba5bc0411caafa38de"]}]}]}]}, 0x360}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4.458320][T16187] Use struct sctp_assoc_value instead [ 434.593910][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2764'. [ 434.693722][T16069] Set syz1 is full, maxelem 65536 reached [ 434.823755][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2764'. [ 435.108774][T16203] tipc: Can't bind to reserved service type 1 [ 435.319406][T16209] netlink: 'syz.1.2770': attribute type 49 has an invalid length. [ 435.735654][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 435.875433][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2777'. [ 436.386712][T16258] netlink: 'syz.3.2785': attribute type 49 has an invalid length. [ 436.946301][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 437.070088][T16280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 437.123672][T16280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 437.195902][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 437.262464][T16282] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2794'. [ 437.527248][T16291] syzkaller0: entered promiscuous mode [ 437.532991][T16291] syzkaller0: entered allmulticast mode [ 437.884825][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 438.099086][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2804'. [ 438.125837][T16313] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 438.200141][T16313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.330829][T16317] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 438.401770][T16313] bond10: entered promiscuous mode [ 438.428538][T16313] bond10: entered allmulticast mode [ 438.480068][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.489588][T16313] A link change request failed with some changes committed already. Interface bond10 may have been left with an inconsistent configuration, please check. [ 438.507217][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.512291][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.529566][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.541908][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.706087][T16322] macvlan2: entered promiscuous mode [ 438.721231][T16322] macvlan2: entered allmulticast mode [ 438.761179][T16322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.890790][T16333] syz.0.2809: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 438.952137][T16333] CPU: 1 UID: 0 PID: 16333 Comm: syz.0.2809 Not tainted syzkaller #0 PREEMPT(full) [ 438.952173][T16333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.952198][T16333] Call Trace: [ 438.952208][T16333] [ 438.952217][T16333] dump_stack_lvl+0xe8/0x150 [ 438.952254][T16333] warn_alloc+0x24c/0x270 [ 438.952294][T16333] ? stack_depot_save_flags+0x33/0x800 [ 438.952328][T16333] ? __pfx_warn_alloc+0x10/0x10 [ 438.952365][T16333] ? kasan_save_track+0x3e/0x80 [ 438.952385][T16333] ? __kasan_kmalloc+0x93/0xb0 [ 438.952409][T16333] ? xsk_setsockopt+0x52a/0x960 [ 438.952438][T16333] ? do_sock_setsockopt+0x17c/0x1b0 [ 438.952461][T16333] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 438.952483][T16333] ? do_syscall_64+0x174/0x580 [ 438.952503][T16333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.952538][T16333] __vmalloc_node_range_noprof+0x12c/0x1730 [ 438.952605][T16333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.952645][T16333] ? __kasan_kmalloc+0x93/0xb0 [ 438.952670][T16333] ? __kmalloc_cache_noprof+0x32d/0x660 [ 438.952706][T16333] ? __kmalloc_cache_noprof+0x150/0x660 [ 438.952744][T16333] vmalloc_user_noprof+0xad/0xe0 [ 438.952791][T16333] ? xskq_create+0xbf/0x170 [ 438.952828][T16333] xskq_create+0xbf/0x170 [ 438.952864][T16333] xsk_init_queue+0x8a/0xe0 [ 438.952898][T16333] xsk_setsockopt+0x52a/0x960 [ 438.952934][T16333] ? __fget_files+0x2a/0x420 [ 438.952959][T16333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.952989][T16333] ? __pfx_aa_sk_perm+0x10/0x10 [ 438.953019][T16333] ? aa_sock_opt_perm+0xff/0x1a0 [ 438.953050][T16333] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 438.953079][T16333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.953111][T16333] do_sock_setsockopt+0x17c/0x1b0 [ 438.953138][T16333] __x64_sys_setsockopt+0x13d/0x1b0 [ 438.953164][T16333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.953189][T16333] do_syscall_64+0x174/0x580 [ 438.953209][T16333] ? trace_irq_disable+0x3b/0x140 [ 438.953232][T16333] ? clear_bhb_loop+0x40/0x90 [ 438.953260][T16333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.953283][T16333] RIP: 0033:0x7f8cddb9ce59 [ 438.953304][T16333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.953325][T16333] RSP: 002b:00007f8cdeb33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.953349][T16333] RAX: ffffffffffffffda RBX: 00007f8cdde15fa0 RCX: 00007f8cddb9ce59 [ 438.953366][T16333] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 438.953381][T16333] RBP: 00007f8cddc32e6f R08: 0000000000000004 R09: 0000000000000000 [ 438.953395][T16333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.953408][T16333] R13: 00007f8cdde16038 R14: 00007f8cdde15fa0 R15: 00007ffc022b0dc8 [ 438.953444][T16333] [ 438.953511][T16333] Mem-Info: [ 439.365430][T16337] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 439.411193][T16333] active_anon:11084 inactive_anon:0 isolated_anon:0 [ 439.411193][T16333] active_file:0 inactive_file:43697 isolated_file:0 [ 439.411193][T16333] unevictable:768 dirty:180 writeback:0 [ 439.411193][T16333] slab_reclaimable:10783 slab_unreclaimable:119079 [ 439.411193][T16333] mapped:33089 shmem:3641 pagetables:1311 [ 439.411193][T16333] sec_pagetables:0 bounce:0 [ 439.411193][T16333] kernel_misc_reclaimable:0 [ 439.411193][T16333] free:1289943 free_pcp:9417 free_cma:0 [ 439.510344][T16333] Node 0 active_anon:45236kB inactive_anon:0kB active_file:0kB inactive_file:174592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133356kB dirty:720kB writeback:0kB shmem:13828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13788kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.645626][T16333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.683167][T16350] tipc: Enabling of bearer rejected, failed to enable media [ 439.719242][T16333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.762593][T16333] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 439.792422][T16333] Node 0 DMA32 free:1210712kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46836kB inactive_anon:0kB active_file:0kB inactive_file:174592kB unevictable:1536kB writepending:720kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:37468kB local_pcp:19708kB free_cma:0kB [ 439.873773][T16333] lowmem_reserve[]: 0 0 0 0 0 [ 439.891516][T16333] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 439.972881][T16333] lowmem_reserve[]: 0 0 0 0 0 [ 439.996889][T16333] Node 1 Normal free:3947604kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 440.035444][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.035530][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.060685][T16333] lowmem_reserve[]: 0 0 0 0 0 [ 440.065641][T16333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 440.098846][T16333] Node 0 DMA32: 193*4kB (UM) 31*8kB (ME) 251*16kB (UME) 744*32kB (UME) 922*64kB (UME) 377*128kB (UM) 94*256kB (UME) 10*512kB (UE) 4*1024kB (UE) 3*2048kB (UME) 253*4096kB (UM) = 1211820kB [ 440.155639][T16333] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 440.184625][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 440.195544][T16333] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947604kB [ 440.221781][T16333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.232197][T16333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 440.251001][T16333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.277339][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'. [ 440.295430][T16333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 440.326088][T16333] 45007 total pagecache pages [ 440.344269][T16333] 0 pages in swap cache [ 440.360561][T16333] Free swap = 124996kB [ 440.369976][T16333] Total swap = 124996kB [ 440.375998][T16333] 2097051 pages RAM [ 440.380301][T16333] 0 pages HighMem/MovableOnly [ 440.386359][T16333] 427419 pages reserved [ 440.408410][T16333] 0 pages cma reserved [ 440.660618][ T5629] Bluetooth: hci5: command tx timeout [ 440.728125][T16370] syzkaller0: entered promiscuous mode [ 440.736820][T16370] syzkaller0: entered allmulticast mode [ 440.768615][T16323] wlan0 speed is unknown, defaulting to 1000 [ 440.930767][T16381] netdevsim0: renamed from gre0 [ 440.946875][T16381] netdevsim0: entered promiscuous mode [ 440.976797][T16381] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 441.839167][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2824'. [ 441.853626][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2824'. [ 442.747756][ T5629] Bluetooth: hci5: command tx timeout [ 444.820642][ T5629] Bluetooth: hci5: command tx timeout [ 444.951539][T16436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2833'. [ 444.967495][T16436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2833'. [ 445.006184][T16436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2833'. [ 445.255856][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2836'. [ 445.396064][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.418712][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.439957][T16323] bridge_slave_0: entered allmulticast mode [ 445.469302][T16323] bridge_slave_0: entered promiscuous mode [ 445.505467][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.527708][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.539115][T16323] bridge_slave_1: entered allmulticast mode [ 445.554022][T16323] bridge_slave_1: entered promiscuous mode [ 445.625007][T16455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2838'. [ 445.717455][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2838'. [ 445.748249][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.844731][T16466] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 445.864443][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.990239][T16466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.047561][T16473] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2845'. [ 446.077409][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 446.091979][T16467] bond3: (slave veth0_to_bond): making interface the new active one [ 446.137026][T16467] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 446.245325][T16464] bond3: entered promiscuous mode [ 446.255403][T16464] veth0_to_bond: entered promiscuous mode [ 446.267342][T16464] bond3: entered allmulticast mode [ 446.277168][T16464] veth0_to_bond: entered allmulticast mode [ 446.302298][T16464] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 446.342342][T16323] team0: Port device team_slave_0 added [ 446.369603][T16323] team0: Port device team_slave_1 added [ 446.515211][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.532994][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.568488][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.594036][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.610697][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.651933][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.726301][T16490] macsec0: entered promiscuous mode [ 446.741891][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2853'. [ 446.763317][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 446.910780][ T5629] Bluetooth: hci5: command tx timeout [ 446.953879][T16498] veth1_macvtap: left promiscuous mode [ 446.995095][T16498] macsec0 (unregistering): left promiscuous mode [ 447.059381][T16323] hsr_slave_0: entered promiscuous mode [ 447.075754][T16323] hsr_slave_1: entered promiscuous mode [ 447.084611][T16323] debugfs: 'hsr0' already exists in 'hsr' [ 447.091237][T16323] Cannot create hsr debugfs directory [ 447.753585][T16323] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.784113][T16534] sctp: [Deprecated]: syz.0.2864 (pid 16534) Use of int in max_burst socket option deprecated. [ 447.784113][T16534] Use struct sctp_assoc_value instead [ 447.838539][T16540] vxcan1: tx drop: invalid da for name 0x0000008000000000 [ 447.893979][T16537] xt_hashlimit: size too large, truncated to 1048576 [ 448.257067][T16323] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.388888][T16323] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.646966][T16563] bond11: option mode: invalid value (254) [ 448.659082][T16563] bond11 (unregistering): Released all slaves [ 448.726339][T16323] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.075046][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a62bc00: rx timeout, send abort [ 449.084466][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a62bc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 449.265841][T16583] netlink: 'syz.3.2875': attribute type 6 has an invalid length. [ 449.318555][T16323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.348264][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.366123][T16323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.392883][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.416900][T16323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.454140][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.471617][T16323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.498769][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.658985][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.667587][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.676784][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.685884][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.783625][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.806830][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.823660][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.830939][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.898266][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.905505][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.772924][T16630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.813808][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.872855][T16630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.928550][T16630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.955631][T16323] veth0_vlan: entered promiscuous mode [ 451.005103][T16323] veth1_vlan: entered promiscuous mode [ 451.017174][T16631] netlink: 'syz.1.2885': attribute type 13 has an invalid length. [ 451.088129][T16323] veth0_macvtap: entered promiscuous mode [ 451.099637][T16323] veth1_macvtap: entered promiscuous mode [ 451.129414][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.152892][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.184194][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.206185][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.231982][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.243128][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.388825][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.404106][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.443405][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.452040][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.558548][T16642] __nla_validate_parse: 8 callbacks suppressed [ 451.558575][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 451.656040][T16644] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 452.135244][T16655] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 452.452626][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.464585][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.479003][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.489822][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'. [ 452.510733][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.519047][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.788878][T16673] macsec0: entered promiscuous mode [ 452.797117][T16673] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 452.811156][T16673] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 453.562878][T16660] wlan0 speed is unknown, defaulting to 1000 [ 453.857201][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2908'. [ 453.976620][T16731] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 453.980251][T16728] vxcan2: entered allmulticast mode [ 454.003223][T16731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2912'. [ 454.265342][T16748] geneve2: entered promiscuous mode [ 454.307614][T16748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.330138][T16748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.341980][T16748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.366213][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.397223][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.583243][ T5633] Bluetooth: hci0: command tx timeout [ 454.638754][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.652807][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.660067][T16660] bridge_slave_0: entered allmulticast mode [ 454.668388][T16660] bridge_slave_0: entered promiscuous mode [ 454.679584][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.688091][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.696118][T16660] bridge_slave_1: entered allmulticast mode [ 454.706091][T16660] bridge_slave_1: entered promiscuous mode [ 454.769158][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.799745][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.843226][T16660] team0: Port device team_slave_0 added [ 454.853640][T16660] team0: Port device team_slave_1 added [ 454.904066][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.912614][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.939423][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.967158][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.975029][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.016329][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.148633][T16660] hsr_slave_0: entered promiscuous mode [ 455.160313][T16660] hsr_slave_1: entered promiscuous mode [ 455.167170][T16660] debugfs: 'hsr0' already exists in 'hsr' [ 455.177246][T16660] Cannot create hsr debugfs directory [ 455.243239][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2929'. [ 455.314101][T16794] bridge_slave_1: left allmulticast mode [ 455.328448][T16794] bridge_slave_1: left promiscuous mode [ 455.334933][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.367888][T16794] bridge_slave_0: left allmulticast mode [ 455.375717][T16794] bridge_slave_0: left promiscuous mode [ 455.402160][T16794] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.573851][T16660] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.684725][T16660] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.016280][T16660] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.059983][T16660] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.660601][ T5633] Bluetooth: hci0: command tx timeout [ 457.562141][T16765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.605416][T16660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.672296][T16660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.702786][T16660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.746619][T16660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.766042][T16660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.781101][T16660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.812048][T16660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.834118][T16660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.186950][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.268073][T16660] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.315215][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.322543][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.376976][T16845] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 458.396754][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.404080][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.498551][T16845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.664490][T16856] bond4: (slave veth13): Enslaving as a backup interface with a down link [ 458.740943][ T5633] Bluetooth: hci0: command tx timeout [ 458.753124][T16845] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 458.823819][ T48] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 458.950607][ T5941] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 459.122802][T16882] netlink: 'syz.1.2955': attribute type 1 has an invalid length. [ 459.172553][T16882] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 459.851854][T16931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.938905][T16932] netlink: 'syz.1.2967': attribute type 2 has an invalid length. [ 460.377115][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.489066][T16660] veth0_vlan: entered promiscuous mode [ 460.514807][T16660] veth1_vlan: entered promiscuous mode [ 460.593980][T16660] veth0_macvtap: entered promiscuous mode [ 460.617186][T16660] veth1_macvtap: entered promiscuous mode [ 460.657634][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.694955][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.728444][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.738167][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.758534][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.792784][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.823390][ T5633] Bluetooth: hci0: command tx timeout [ 460.889972][T16960] netlink: 'syz.0.2976': attribute type 4 has an invalid length. [ 460.964316][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.980692][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.044601][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.056596][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.783605][T17002] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 461.880913][T17002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.924117][T17007] bond1: entered promiscuous mode [ 461.934940][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.950376][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.959067][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.966047][T17007] bond1: entered allmulticast mode [ 461.973413][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.989774][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.998700][T17000] bond1: (slave veth0_to_bond): making interface the new active one [ 462.006840][T17000] veth0_to_bond: entered promiscuous mode [ 462.013217][T17000] veth0_to_bond: entered allmulticast mode [ 462.043662][T17000] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 462.075529][T17002] macvlan2: entered promiscuous mode [ 462.085580][T17002] macvlan2: entered allmulticast mode [ 462.093679][T17002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.103634][T17002] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 462.844890][ T5941] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.891434][ T5941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.904596][T17043] netlink: 'syz.3.2997': attribute type 49 has an invalid length. [ 463.081921][ T5941] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.115376][ T5941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.270207][ T5941] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.307319][ T5941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.346166][T17014] __nla_validate_parse: 6 callbacks suppressed [ 463.346184][T17014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 463.388054][T17008] wlan0 speed is unknown, defaulting to 1000 [ 463.399549][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.445665][T17014] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 463.655486][ T5941] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.693605][ T5941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.975629][T17073] pim6reg1: tun_chr_ioctl cmd 21731 [ 464.100701][ T5633] Bluetooth: hci1: command tx timeout [ 464.112094][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 464.122554][T17083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3008'. [ 464.143593][T17083] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 464.193871][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 464.254456][T17089] netlink: 'syz.3.3009': attribute type 49 has an invalid length. [ 464.525798][ T5941] bridge_slave_1: left allmulticast mode [ 464.533109][ T5941] bridge_slave_1: left promiscuous mode [ 464.543118][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.558336][ T5941] bridge_slave_0: left allmulticast mode [ 464.564716][ T5941] bridge_slave_0: left promiscuous mode [ 464.570888][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.620412][ T5941] dvmrp8: left allmulticast mode [ 464.647960][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 464.737855][T17109] netlink: 'syz.3.3014': attribute type 2 has an invalid length. [ 464.776558][T17109] netlink: 'syz.3.3014': attribute type 2 has an invalid length. [ 464.785323][T17109] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3014'. [ 465.041584][ T5941] bond2 (unregistering): (slave gre1): Releasing backup interface [ 465.068789][ T5941] gre1 (unregistering): left promiscuous mode [ 465.140424][ T5941] geneve0 (unregistering): left promiscuous mode [ 465.253233][ T5941] bond4 (unregistering): (slave bridge4): Releasing active interface [ 465.262865][ T5941] bridge4 (unregistering): left promiscuous mode [ 465.269384][ T5941] bridge4 (unregistering): left allmulticast mode [ 465.313251][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.329085][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.345015][ T5941] bond0 (unregistering): Released all slaves [ 465.360353][ T5941] bond1 (unregistering): Released all slaves [ 465.387506][ T5941] bond2 (unregistering): Released all slaves [ 465.409134][ T5941] bond3 (unregistering): Released all slaves [ 465.433032][ T5941] bond4 (unregistering): Released all slaves [ 465.456908][ T5941] bond5 (unregistering): Released all slaves [ 465.494443][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 466.144632][T17145] netlink: 'syz.1.3019': attribute type 49 has an invalid length. [ 466.194192][ T5633] Bluetooth: hci1: command tx timeout [ 466.407999][T17150] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3021'. [ 466.455459][T17008] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.479237][T17008] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.504279][T17008] bridge_slave_0: entered allmulticast mode [ 466.526803][T17008] bridge_slave_0: entered promiscuous mode [ 466.582148][T17008] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.600160][T17008] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.622633][T17008] bridge_slave_1: entered allmulticast mode [ 466.647378][T17158] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 466.656432][T17008] bridge_slave_1: entered promiscuous mode [ 466.705424][ T5941] hsr_slave_0: left promiscuous mode [ 466.725524][ T5941] hsr_slave_1: left promiscuous mode [ 466.746820][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.755856][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.780795][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.802694][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.349892][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 467.627537][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 467.652989][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 467.846177][ T5941] team0 (unregistering): Port device dummy0 removed [ 467.932253][T17178] bond0: (slave ip6tnl0): refused to change device type [ 467.947042][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 468.080365][T17008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.123829][T17008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.260530][ T5633] Bluetooth: hci1: command tx timeout [ 468.320140][T17008] team0: Port device team_slave_0 added [ 468.344609][T17008] team0: Port device team_slave_1 added [ 468.363158][T17201] lo speed is unknown, defaulting to 1000 [ 468.389747][T17201] lo speed is unknown, defaulting to 1000 [ 468.449244][T17201] lo speed is unknown, defaulting to 1000 [ 468.457434][T17008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.482262][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.539425][T17201] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 468.584469][T17008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.604515][T17201] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 468.640392][T17008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.663596][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.712082][T17201] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 468.770487][T17008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.805747][T17202] syzkaller1: entered promiscuous mode [ 468.827959][T17202] syzkaller1: entered allmulticast mode [ 468.862447][T17201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 468.923390][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 469.111557][ T5941] IPVS: stop unused estimator thread 0... [ 469.120229][T17008] hsr_slave_0: entered promiscuous mode [ 469.158089][T17008] hsr_slave_1: entered promiscuous mode [ 469.185018][T17008] debugfs: 'hsr0' already exists in 'hsr' [ 469.203667][T17008] Cannot create hsr debugfs directory [ 469.228730][T17201] lo speed is unknown, defaulting to 1000 [ 469.263576][T17201] lo speed is unknown, defaulting to 1000 [ 469.397526][T17201] lo speed is unknown, defaulting to 1000 [ 469.459346][T17201] lo speed is unknown, defaulting to 1000 [ 469.491709][T17201] lo speed is unknown, defaulting to 1000 [ 469.501181][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'. [ 469.529168][T17201] lo speed is unknown, defaulting to 1000 [ 469.557450][T17201] lo speed is unknown, defaulting to 1000 [ 469.599460][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 469.740904][T17231] vlan3: entered promiscuous mode [ 469.781097][T17231] erspan0: entered promiscuous mode [ 469.788231][T17236] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3035'. [ 469.866495][T17236] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3035'. [ 469.983744][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 470.053125][T17244] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 470.195674][T17249] xt_l2tp: v2 doesn't support IP mode [ 470.239937][T17244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.351497][ T5633] Bluetooth: hci1: command tx timeout [ 470.369186][T17250] veth3: entered promiscuous mode [ 470.482989][T17248] veth5: entered promiscuous mode [ 470.552336][T17265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 470.615252][T17265] netlink: 'syz.1.3041': attribute type 1 has an invalid length. [ 470.641114][T17265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3041'. [ 471.145402][T17292] netlink: 'syz.2.3047': attribute type 49 has an invalid length. [ 471.491047][T17300] bond2 (unregistering): Released all slaves [ 471.837955][T17308] netlink: 'syz.2.3050': attribute type 1 has an invalid length. [ 471.926823][T17308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.958388][T17008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.971204][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.996768][T17008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.022640][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.030960][T17008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.047859][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.068199][T17008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.106677][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.386581][T17008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.461558][T17008] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.476870][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.484077][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.526752][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.533972][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.839987][T17346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3056'. [ 472.969056][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 473.014456][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 473.100150][T17354] netlink: 'syz.2.3058': attribute type 49 has an invalid length. [ 473.216035][T17363] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 473.282394][T17363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.911672][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.065663][T17008] veth0_vlan: entered promiscuous mode [ 474.096785][T17403] xt_socket: unknown flags 0x8 [ 474.111617][T17008] veth1_vlan: entered promiscuous mode [ 474.208085][T17008] veth0_macvtap: entered promiscuous mode [ 474.244775][T17008] veth1_macvtap: entered promiscuous mode [ 474.335328][T17008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.362097][T17413] FAULT_INJECTION: forcing a failure. [ 474.362097][T17413] name failslab, interval 1, probability 0, space 0, times 0 [ 474.386041][T17414] __nla_validate_parse: 1 callbacks suppressed [ 474.386058][T17414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3072'. [ 474.410555][T17413] CPU: 1 UID: 0 PID: 17413 Comm: syz.2.3071 Not tainted syzkaller #0 PREEMPT(full) [ 474.410598][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.410619][T17413] Call Trace: [ 474.410628][T17413] [ 474.410636][T17413] dump_stack_lvl+0xe8/0x150 [ 474.410753][T17413] should_fail_ex+0x40c/0x560 [ 474.410895][T17413] should_failslab+0xa8/0x100 [ 474.410945][T17413] __kmalloc_cache_node_noprof+0xaa/0x630 [ 474.410988][T17413] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 474.411012][T17413] ? __get_vm_area_node+0x136/0x300 [ 474.411038][T17413] ? __get_vm_area_node+0x136/0x300 [ 474.411073][T17413] __get_vm_area_node+0x136/0x300 [ 474.411102][T17413] ? bpf_ringbuf_alloc+0x322/0x5b0 [ 474.411154][T17413] vmap+0x162/0x310 [ 474.411181][T17413] ? bpf_ringbuf_alloc+0x322/0x5b0 [ 474.411214][T17413] bpf_ringbuf_alloc+0x322/0x5b0 [ 474.411249][T17413] ringbuf_map_alloc+0x1f1/0x330 [ 474.411280][T17413] map_create+0xf2a/0x1b90 [ 474.411327][T17413] ? __pfx_map_create+0x10/0x10 [ 474.411358][T17413] ? bpf_lsm_bpf+0x9/0x20 [ 474.411381][T17413] ? security_bpf+0x7e/0x2d0 [ 474.411470][T17413] __sys_bpf+0xaea/0xd90 [ 474.411508][T17413] ? __pfx___sys_bpf+0x10/0x10 [ 474.411541][T17413] ? __fget_files+0x2a/0x420 [ 474.411591][T17413] ? ksys_write+0x242/0x270 [ 474.411625][T17413] ? __pfx_ksys_write+0x10/0x10 [ 474.411656][T17413] __x64_sys_bpf+0xba/0xd0 [ 474.411687][T17413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.411740][T17413] do_syscall_64+0x174/0x580 [ 474.411836][T17413] ? trace_irq_disable+0x3b/0x140 [ 474.411855][T17413] ? clear_bhb_loop+0x40/0x90 [ 474.411880][T17413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.411900][T17413] RIP: 0033:0x7f884b19ce59 [ 474.411918][T17413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.411936][T17413] RSP: 002b:00007f884bfbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.411957][T17413] RAX: ffffffffffffffda RBX: 00007f884b415fa0 RCX: 00007f884b19ce59 [ 474.411972][T17413] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 474.411985][T17413] RBP: 00007f884bfbc090 R08: 0000000000000000 R09: 0000000000000000 [ 474.411998][T17413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.412010][T17413] R13: 00007f884b416038 R14: 00007f884b415fa0 R15: 00007ffe49b53118 [ 474.412042][T17413] [ 474.415500][T17008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.785016][ T5928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.795047][ T5928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.827383][ T5928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.946371][ T5928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.132053][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.157653][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.199615][T17433] FAULT_INJECTION: forcing a failure. [ 475.199615][T17433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.258487][T17433] CPU: 1 UID: 0 PID: 17433 Comm: syz.4.3078 Not tainted syzkaller #0 PREEMPT(full) [ 475.258515][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.258526][T17433] Call Trace: [ 475.258534][T17433] [ 475.258542][T17433] dump_stack_lvl+0xe8/0x150 [ 475.258572][T17433] should_fail_ex+0x40c/0x560 [ 475.258605][T17433] _copy_from_user+0x2d/0xb0 [ 475.258715][T17433] smc_setsockopt+0x3c0/0xb00 [ 475.258811][T17433] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.258839][T17433] ? aa_sock_opt_perm+0xff/0x1a0 [ 475.258895][T17433] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 475.258920][T17433] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.258952][T17433] do_sock_setsockopt+0x17c/0x1b0 [ 475.259036][T17433] __x64_sys_setsockopt+0x13d/0x1b0 [ 475.259059][T17433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.259082][T17433] do_syscall_64+0x174/0x580 [ 475.259099][T17433] ? trace_irq_disable+0x3b/0x140 [ 475.259118][T17433] ? clear_bhb_loop+0x40/0x90 [ 475.259142][T17433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.259161][T17433] RIP: 0033:0x7f7f2319ce59 [ 475.259179][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.259196][T17433] RSP: 002b:00007f7f23faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.259216][T17433] RAX: ffffffffffffffda RBX: 00007f7f23415fa0 RCX: 00007f7f2319ce59 [ 475.259231][T17433] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 475.259243][T17433] RBP: 00007f7f23faf090 R08: 000000000000309f R09: 0000000000000000 [ 475.259255][T17433] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 475.259268][T17433] R13: 00007f7f23416038 R14: 00007f7f23415fa0 R15: 00007fff9ce006e8 [ 475.259299][T17433] [ 475.492471][T17439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3080'. [ 475.501465][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.501487][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.655624][T17445] bridge1: entered promiscuous mode [ 475.668626][T17445] bridge1: entered allmulticast mode [ 475.695180][T17450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 475.728021][T17445] team0: Port device bridge1 added [ 476.209441][T17477] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3085'. [ 476.267175][T17484] netlink: 'syz.2.3090': attribute type 4 has an invalid length. [ 476.301349][T17485] netlink: 'syz.2.3090': attribute type 4 has an invalid length. [ 476.377946][T17469] nbd: must specify an index to disconnect [ 476.470924][T17492] netlink: 'syz.4.3091': attribute type 6 has an invalid length. [ 476.678048][T17459] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 476.691667][T17459] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 476.758215][ T5765] lo speed is unknown, defaulting to 1000 [ 476.810210][T17425] lo speed is unknown, defaulting to 1000 [ 476.832009][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 476.851292][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 476.911476][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 476.935046][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 476.982077][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 477.004167][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 477.321081][T17499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 477.383410][T17459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.401134][T17459] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 477.634156][T17459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.645143][T17459] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 477.679821][T17532] netlink: 'syz.1.3097': attribute type 49 has an invalid length. [ 477.921647][T17545] tipc: Enabled bearer , priority 0 [ 477.939688][T17540] tipc: Enabling of bearer rejected, already enabled [ 477.971221][T17550] syzkaller0: entered promiscuous mode [ 477.996834][T17550] syzkaller0: entered allmulticast mode [ 478.047669][T17540] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 478.086050][T17545] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 478.239419][T17550] tipc: Resetting bearer [ 478.247400][T17540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.343198][T17560] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 478.432676][T17564] netlink: 'syz.3.3106': attribute type 4 has an invalid length. [ 478.475376][T17564] netlink: 'syz.3.3106': attribute type 4 has an invalid length. [ 481.114569][T17571] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.122323][T17571] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.313849][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.332004][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.341905][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.349989][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.359707][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.379407][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.398488][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.406732][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.415784][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.431261][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.439899][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.454017][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.751411][T17539] tipc: Resetting bearer [ 481.793762][T17539] tipc: Disabling bearer [ 481.823570][ T1046] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.849014][T17593] __nla_validate_parse: 45 callbacks suppressed [ 481.849030][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 481.934554][ T5928] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.969202][ T5928] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.017800][ T5928] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.107339][T17607] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3117'. [ 482.145177][T17607] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 482.578914][T17580] wlan0 speed is unknown, defaulting to 1000 [ 482.619338][T17580] lo speed is unknown, defaulting to 1000 [ 483.169976][T17661] netlink: 'syz.3.3129': attribute type 39 has an invalid length. [ 483.461218][ T5633] Bluetooth: hci4: command tx timeout [ 483.467718][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.478442][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.486172][T17580] bridge_slave_0: entered allmulticast mode [ 483.494372][T17580] bridge_slave_0: entered promiscuous mode [ 483.504109][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.519883][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.555466][T17580] bridge_slave_1: entered allmulticast mode [ 483.614054][T17580] bridge_slave_1: entered promiscuous mode [ 483.637716][T17693] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3134'. [ 483.753365][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.781948][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.802021][T17702] xt_hashlimit: max too large, truncated to 1048576 [ 483.817097][T17702] No such timeout policy "syz1" [ 483.887490][T17580] team0: Port device team_slave_0 added [ 483.897973][T17580] team0: Port device team_slave_1 added [ 483.937424][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.945085][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.973088][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.986973][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.994393][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.021553][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.072450][T17580] hsr_slave_0: entered promiscuous mode [ 484.078897][T17580] hsr_slave_1: entered promiscuous mode [ 484.085926][T17580] debugfs: 'hsr0' already exists in 'hsr' [ 484.094000][T17580] Cannot create hsr debugfs directory [ 484.313603][T17580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.327332][T17580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 484.338017][T17580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.455833][T17580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.466614][T17580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 484.477569][T17580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.595836][T17580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.607882][T17580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 484.619087][T17580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.638223][T17721] syzkaller0: entered promiscuous mode [ 484.644155][T17721] syzkaller0: entered allmulticast mode [ 484.726884][T17580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.737877][T17580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 484.748920][T17580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.022393][T17732] tipc: Started in network mode [ 485.028028][T17732] tipc: Node identity 9ec97de9434a, cluster identity 4711 [ 485.035767][T17732] tipc: Enabled bearer , priority 0 [ 485.098716][T17735] syzkaller0: entered promiscuous mode [ 485.105069][T17735] syzkaller0: entered allmulticast mode [ 485.117154][T17732] tipc: Disabling bearer [ 485.286599][T17738] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 485.541298][ T5633] Bluetooth: hci4: command tx timeout [ 486.358516][T17770] ieee802154 phy0 wpan0: encryption failed: -126 [ 486.365405][T17770] ieee802154 phy0 wpan0: encryption failed: -126 [ 486.535586][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 487.621367][ T5633] Bluetooth: hci4: command tx timeout [ 487.673644][T17738] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 488.443330][T17742] bond1: (slave veth0_to_bond): Releasing active interface [ 488.466073][T17742] veth0_to_bond: left promiscuous mode [ 488.472979][T17742] veth0_to_bond: left allmulticast mode [ 488.487848][T17742] bond0: (slave bond_slave_0): Releasing backup interface [ 488.520028][T17742] bond0: (slave bond_slave_1): Releasing backup interface [ 488.561206][T17742] team0: Port device team_slave_0 removed [ 488.583075][T17742] team0: Port device team_slave_1 removed [ 488.625523][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.646960][T17742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.681045][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.707932][T17742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.774156][T17742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.797317][ T7550] lo speed is unknown, defaulting to 1000 [ 488.840540][ T7550] syz2: Port: 1 Link DOWN [ 488.877252][T17580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.896883][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.909271][T17782] wlan0 speed is unknown, defaulting to 1000 [ 488.913550][T17580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.960227][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.992065][T17580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.007150][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.025902][T17782] lo speed is unknown, defaulting to 1000 [ 489.037796][T17580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.053413][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.153160][T17815] syzkaller1: entered promiscuous mode [ 489.158796][T17815] syzkaller1: entered allmulticast mode [ 489.167272][T17818] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3170'. [ 489.230112][T17816] syzkaller0: entered promiscuous mode [ 489.242446][T17816] syzkaller0: entered allmulticast mode [ 489.259054][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 489.299754][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3168'. [ 489.352428][T17831] FAULT_INJECTION: forcing a failure. [ 489.352428][T17831] name failslab, interval 1, probability 0, space 0, times 0 [ 489.378507][T17831] CPU: 0 UID: 0 PID: 17831 Comm: syz.0.3172 Not tainted syzkaller #0 PREEMPT(full) [ 489.378529][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.378540][T17831] Call Trace: [ 489.378547][T17831] [ 489.378554][T17831] dump_stack_lvl+0xe8/0x150 [ 489.378581][T17831] should_fail_ex+0x40c/0x560 [ 489.378611][T17831] should_failslab+0xa8/0x100 [ 489.378634][T17831] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 489.378661][T17831] ? local_lock_release+0x9c/0x160 [ 489.378830][T17831] ? __alloc_skb+0x1d7/0x7a0 [ 489.378846][T17831] ? __alloc_skb+0x1d7/0x7a0 [ 489.378869][T17831] __alloc_skb+0x1d7/0x7a0 [ 489.378908][T17831] alloc_skb_with_frags+0xc6/0x760 [ 489.378961][T17831] ? __lock_acquire+0x683/0x2cf0 [ 489.379005][T17831] sock_alloc_send_pskb+0x878/0x990 [ 489.379048][T17831] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 489.379083][T17831] ? j1939_sk_sendmsg+0x5c5/0x12d0 [ 489.379164][T17831] ? __local_bh_enable_ip+0xd0/0x130 [ 489.379212][T17831] j1939_sk_sendmsg+0x6ac/0x12d0 [ 489.379257][T17831] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 489.379287][T17831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.379317][T17831] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 489.379344][T17831] sock_sendmsg_nosec+0x13a/0x180 [ 489.379374][T17831] ____sys_sendmsg+0x54e/0x850 [ 489.379402][T17831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.379433][T17831] ? import_iovec+0x73/0xa0 [ 489.379485][T17831] ___sys_sendmsg+0x2a5/0x360 [ 489.379505][T17831] ? __lock_acquire+0x683/0x2cf0 [ 489.379530][T17831] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.379557][T17831] ? kstrtouint+0x6e/0xe0 [ 489.379611][T17831] ? __fget_files+0x2a/0x420 [ 489.379629][T17831] ? __fget_files+0x3a2/0x420 [ 489.379659][T17831] __sys_sendmmsg+0x273/0x4d0 [ 489.379687][T17831] ? __pfx___sys_sendmmsg+0x10/0x10 [ 489.379718][T17831] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.379808][T17831] ? ksys_write+0x242/0x270 [ 489.379834][T17831] ? __pfx_ksys_write+0x10/0x10 [ 489.379864][T17831] __x64_sys_sendmmsg+0xa0/0xc0 [ 489.379886][T17831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.379907][T17831] do_syscall_64+0x174/0x580 [ 489.379924][T17831] ? trace_irq_disable+0x3b/0x140 [ 489.379943][T17831] ? clear_bhb_loop+0x40/0x90 [ 489.379967][T17831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.379987][T17831] RIP: 0033:0x7f2fa339ce59 [ 489.380005][T17831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.380022][T17831] RSP: 002b:00007f2fa41e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.380043][T17831] RAX: ffffffffffffffda RBX: 00007f2fa3615fa0 RCX: 00007f2fa339ce59 [ 489.380063][T17831] RDX: 0000000000000001 RSI: 0000200000004300 RDI: 0000000000000003 [ 489.380076][T17831] RBP: 00007f2fa41e5090 R08: 0000000000000000 R09: 0000000000000000 [ 489.380088][T17831] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 489.380100][T17831] R13: 00007f2fa3616038 R14: 00007f2fa3615fa0 R15: 00007ffe05c589a8 [ 489.380143][T17831] [ 489.700830][ T5633] Bluetooth: hci4: command tx timeout [ 489.754294][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.792561][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.815144][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.822406][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.848236][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.855437][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.949381][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 490.214010][T17854] macsec0: entered promiscuous mode [ 490.228275][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'. [ 490.257402][T17854] veth1_macvtap: left promiscuous mode [ 490.285368][T17854] macsec0 (unregistering): left promiscuous mode [ 490.369195][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 490.390741][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 490.443407][T17851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3178'. [ 490.524700][T17868] wlan0 speed is unknown, defaulting to 1000 [ 490.546638][T17868] lo speed is unknown, defaulting to 1000 [ 491.042590][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.080066][T17891] TC_ACT_REPEAT abuse ? [ 491.233908][T17580] veth0_vlan: entered promiscuous mode [ 491.292687][T17580] veth1_vlan: entered promiscuous mode [ 491.359593][T17580] veth0_macvtap: entered promiscuous mode [ 491.490243][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 491.524070][T17580] veth1_macvtap: entered promiscuous mode [ 491.525181][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 491.578132][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.589533][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.631335][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.640344][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.668541][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.703622][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.894857][T17917] vlan2: entered promiscuous mode [ 491.900139][T17917] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 491.912764][T17917] vlan2: entered allmulticast mode [ 491.917993][T17917] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 491.967092][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.003525][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.085092][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.109194][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.438006][T17942] netlink: 'syz.4.3203': attribute type 10 has an invalid length. [ 492.447707][T17941] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 492.479148][T17937] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 492.669486][T17948] bond3: option arp_interval: invalid value (18446744073709551615) [ 492.679025][T17948] bond3: option arp_interval: allowed values 0 - 2147483647 [ 492.694243][T17948] bond3 (unregistering): Released all slaves [ 492.739963][T17952] netlink: 'syz.1.3208': attribute type 1 has an invalid length. [ 493.152222][T17976] (: renamed from bridge_slave_0 [ 493.205453][T17974] netlink: 'syz.2.3218': attribute type 12 has an invalid length. [ 493.603841][T17993] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 493.645986][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.663878][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.673449][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.682429][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.707504][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.283093][T18017] __nla_validate_parse: 4 callbacks suppressed [ 494.283110][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'. [ 494.329774][T18020] vlan3: entered promiscuous mode [ 494.353497][T18020] bridge0: entered promiscuous mode [ 494.527498][T18021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.569190][T17995] wlan0 speed is unknown, defaulting to 1000 [ 494.577790][T17995] lo speed is unknown, defaulting to 1000 [ 494.644008][T18030] syzkaller0: entered promiscuous mode [ 494.649611][T18030] syzkaller0: entered allmulticast mode [ 494.703963][T18021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.920314][T18021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.055675][T18021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.297944][T18065] netlink: 'syz.0.3244': attribute type 3 has an invalid length. [ 495.395503][ T5932] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.503846][ T140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.624346][ T5932] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.701672][T17995] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.718434][T17995] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.734383][T17995] bridge_slave_0: entered allmulticast mode [ 495.734563][T18083] netlink: 'syz.0.3248': attribute type 8 has an invalid length. [ 495.749624][T17995] bridge_slave_0: entered promiscuous mode [ 495.762715][ T5932] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.782583][T17995] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.789719][ T5629] Bluetooth: hci3: command tx timeout [ 495.796387][T17995] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.811538][T17995] bridge_slave_1: entered allmulticast mode [ 495.827579][T17995] bridge_slave_1: entered promiscuous mode [ 495.904074][T17995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.926943][T17995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.974952][T17995] team0: Port device team_slave_0 added [ 495.999748][T18083] wlan0 speed is unknown, defaulting to 1000 [ 496.009318][T17995] team0: Port device team_slave_1 added [ 496.051535][T18083] lo speed is unknown, defaulting to 1000 [ 496.104284][T17995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.114188][T17995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.142152][T17995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.168903][T18092] tipc: Enabled bearer , priority 30 [ 496.177140][T17995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.187580][T17995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.215020][T17995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.235156][T18095] tipc: Enabling of bearer rejected, already enabled [ 496.418511][T17995] hsr_slave_0: entered promiscuous mode [ 496.433523][T17995] hsr_slave_1: entered promiscuous mode [ 496.449292][T17995] debugfs: 'hsr0' already exists in 'hsr' [ 496.456159][T17995] Cannot create hsr debugfs directory [ 496.570206][T18112] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 496.684934][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 496.778547][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 496.836310][T18138] xt_hashlimit: size too large, truncated to 1048576 [ 496.864765][T18140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'. [ 496.936688][T18140] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 496.948457][T18123] bond3: entered promiscuous mode [ 496.965387][T18123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.158079][T18150] vxcan1: tx drop: invalid da for name 0x0000008000000000 [ 497.289926][T17425] tipc: Node number set to 3716382185 [ 497.863995][ T5629] Bluetooth: hci3: command tx timeout [ 499.304164][T18212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3284'. [ 499.349875][T17995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.398246][T17995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.428873][T17995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.452156][T18212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.474343][T17995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.535936][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3286'. [ 499.551297][T17995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.587977][T17995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.618258][T17995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.632619][T17995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.705481][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 499.743170][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3290'. [ 499.822612][T18235] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 499.835760][T17995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.860324][T18235] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 499.893596][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.928823][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.936026][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.950624][ T5629] Bluetooth: hci3: command tx timeout [ 499.987946][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.995163][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.116992][T18255] nbd: couldn't find a device at index 0 [ 500.321086][T18264] netlink: 'syz.2.3295': attribute type 1 has an invalid length. [ 500.376077][T18264] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 500.601372][T18278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3298'. [ 500.806928][T18286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 501.045729][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3306'. [ 501.081320][T18301] unsupported nla_type 48896 [ 501.246157][T17995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.303574][T18314] gretap0: entered promiscuous mode [ 501.463652][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474455][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.964423][T17995] veth0_vlan: entered promiscuous mode [ 502.007008][T17995] veth1_vlan: entered promiscuous mode [ 502.020782][ T5629] Bluetooth: hci3: command tx timeout [ 502.113392][T17995] veth0_macvtap: entered promiscuous mode [ 502.157398][T18346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3318'. [ 502.173868][T17995] veth1_macvtap: entered promiscuous mode [ 502.232012][T17995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.264584][T17995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.299373][ T5926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.319198][ T5926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.154951][ T5926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.171775][ T5926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.191474][T18359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3319'. [ 503.204344][T18363] batadv_slave_1: entered promiscuous mode [ 503.238600][T18367] bond2: option mode: invalid value (18) [ 503.249970][T18367] bond2 (unregistering): Released all slaves [ 503.296758][T18363] batadv_slave_1: left promiscuous mode [ 503.543712][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 503.558208][T18381] netlink: 'syz.1.3326': attribute type 19 has an invalid length. [ 503.601698][T18381] netlink: 'syz.1.3326': attribute type 19 has an invalid length. [ 503.635185][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.667925][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.682236][ T808] IPVS: starting estimator thread 0... [ 503.695887][ T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.727655][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.727737][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.758862][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.781344][T18389] IPVS: using max 37 ests per chain, 88800 per kthread [ 503.833213][T18395] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 503.852825][T18395] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 503.878904][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.908780][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.237591][T18411] wlan0 speed is unknown, defaulting to 1000 [ 504.266188][T18411] lo speed is unknown, defaulting to 1000 [ 504.327304][ T5928] tipc: Subscription rejected, illegal request [ 504.340820][T18414] block nbd4: server does not support multiple connections per device. [ 504.363839][T18414] block nbd4: shutting down sockets [ 504.467500][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.492005][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.538981][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.559355][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.583841][T18427] __nla_validate_parse: 10 callbacks suppressed [ 504.583859][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3341'. [ 504.831836][T18441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'. [ 505.108740][T18453] tipc: Enabling of bearer rejected, failed to enable media [ 505.714582][T18480] tipc: Resetting bearer [ 505.767912][ T5765] lo speed is unknown, defaulting to 1000 [ 505.778747][T18484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3356'. [ 505.852609][T18489] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3358'. [ 505.906273][ T29] audit: type=1800 audit(1782448522.524:3): pid=18491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3359" name="memory.events" dev="tmpfs" ino=646 res=0 errno=0 [ 505.968834][T18491] Bluetooth: MGMT ver 1.23 [ 505.973988][T18491] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 505.984547][T18491] netlink: zone id is out of range [ 505.989756][T18491] netlink: zone id is out of range [ 506.190039][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 506.222536][T18499] wlan0 speed is unknown, defaulting to 1000 [ 506.258236][T18499] lo speed is unknown, defaulting to 1000 [ 506.341269][T18516] veth0_to_bond: entered promiscuous mode [ 506.360103][T18521] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 506.369985][T18516] veth0_to_bond: entered allmulticast mode [ 506.396266][T18516] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 507.419094][T18561] netlink: 'syz.4.3379': attribute type 3 has an invalid length. [ 507.619228][T18573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3382'. [ 507.708424][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 507.742607][T18578] veth0_to_hsr: entered promiscuous mode [ 507.748401][T18578] veth0_to_hsr: entered allmulticast mode [ 507.757550][T18573] netlink: get zone limit has 4 unknown bytes [ 507.766410][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 507.769702][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 507.789194][T18581] syzkaller0: entered promiscuous mode [ 507.796163][T18581] syzkaller0: entered allmulticast mode [ 507.808097][T18573] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 507.927751][T18590] ieee802154 phy0 wpan0: encryption failed: -126 [ 507.959163][T18586] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 507.979594][T18586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.138895][T18602] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3388'. [ 508.245225][T18609] nbd: nbd1 already in use [ 508.259802][T18609] xt_hashlimit: size too large, truncated to 1048576 [ 508.575149][ T1046] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.589948][ T1046] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.609714][ T1046] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.631399][ T1046] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.709402][T18675] geneve2: entered allmulticast mode [ 509.731706][T18675] __nla_validate_parse: 8 callbacks suppressed [ 509.731724][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'. [ 509.828070][T18677] tipc: Started in network mode [ 509.842928][T18677] tipc: Node identity , cluster identity 4711 [ 509.863339][T18677] tipc: Failed to obtain node identity [ 509.879906][T18677] tipc: Enabling of bearer rejected, failed to enable media [ 510.157926][T18694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3416'. [ 511.203371][T18756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3435'. [ 511.324728][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 511.396363][T18766] Bluetooth: MGMT ver 1.23 [ 511.422260][T18768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3439'. [ 511.664170][T18768] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 511.722795][T18783] netlink: 820 bytes leftover after parsing attributes in process `syz.1.3444'. [ 511.732876][T18783] netlink: 820 bytes leftover after parsing attributes in process `syz.1.3444'. [ 511.742713][T18768] bond4 (unregistering): Released all slaves [ 512.009531][T18796] FAULT_INJECTION: forcing a failure. [ 512.009531][T18796] name failslab, interval 1, probability 0, space 0, times 0 [ 512.037491][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3446'. [ 512.042782][T18796] CPU: 0 UID: 0 PID: 18796 Comm: syz.0.3448 Not tainted syzkaller #0 PREEMPT(full) [ 512.042851][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.042881][T18796] Call Trace: [ 512.042902][T18796] [ 512.042923][T18796] dump_stack_lvl+0xe8/0x150 [ 512.043003][T18796] should_fail_ex+0x40c/0x560 [ 512.043106][T18796] should_failslab+0xa8/0x100 [ 512.043170][T18796] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 512.043270][T18796] ? local_lock_release+0x9c/0x160 [ 512.043383][T18796] ? __alloc_skb+0x1d7/0x7a0 [ 512.043423][T18796] ? __alloc_skb+0x1d7/0x7a0 [ 512.043492][T18796] __alloc_skb+0x1d7/0x7a0 [ 512.043549][T18796] netlink_dump+0x1e7/0xee0 [ 512.043716][T18796] ? rcu_is_watching+0x15/0xb0 [ 512.043808][T18796] ? __pfx_netlink_dump+0x10/0x10 [ 512.043895][T18796] ? genl_start+0x497/0x6d0 [ 512.044014][T18796] __netlink_dump_start+0x589/0x7b0 [ 512.044096][T18796] genl_family_rcv_msg_dumpit+0x213/0x310 [ 512.044181][T18796] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 512.044250][T18796] ? genl_get_cmd+0x82f/0x960 [ 512.044324][T18796] ? __pfx___mutex_lock+0x10/0x10 [ 512.044376][T18796] ? __pfx_genl_start+0x10/0x10 [ 512.044442][T18796] ? __pfx_genl_dumpit+0x10/0x10 [ 512.044539][T18796] ? __pfx_genl_done+0x10/0x10 [ 512.044614][T18796] ? __dev_queue_xmit+0x29b/0x37f0 [ 512.044796][T18796] genl_rcv_msg+0x5e1/0x7a0 [ 512.044897][T18796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.044970][T18796] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 512.045075][T18796] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.045252][T18796] netlink_rcv_skb+0x226/0x4a0 [ 512.045323][T18796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.045407][T18796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.045519][T18796] ? down_read+0x2be/0x330 [ 512.045585][T18796] genl_rcv+0x28/0x40 [ 512.045657][T18796] netlink_unicast+0x7bb/0x940 [ 512.045759][T18796] netlink_sendmsg+0x813/0xb40 [ 512.045867][T18796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.045941][T18796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.046026][T18796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.046091][T18796] sock_sendmsg_nosec+0x13a/0x180 [ 512.046166][T18796] ____sys_sendmsg+0x54e/0x850 [ 512.046233][T18796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.046317][T18796] ? import_iovec+0x73/0xa0 [ 512.046384][T18796] ___sys_sendmsg+0x2a5/0x360 [ 512.046431][T18796] ? __lock_acquire+0x683/0x2cf0 [ 512.046496][T18796] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.046586][T18796] ? __fget_files+0x2a/0x420 [ 512.046607][T18796] ? __fget_files+0x3a2/0x420 [ 512.046637][T18796] __x64_sys_sendmsg+0x1b1/0x290 [ 512.046661][T18796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.046701][T18796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.046723][T18796] do_syscall_64+0x174/0x580 [ 512.046740][T18796] ? trace_irq_disable+0x3b/0x140 [ 512.046760][T18796] ? clear_bhb_loop+0x40/0x90 [ 512.046785][T18796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.046804][T18796] RIP: 0033:0x7f2fa339ce59 [ 512.046822][T18796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.046839][T18796] RSP: 002b:00007f2fa41e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.046860][T18796] RAX: ffffffffffffffda RBX: 00007f2fa3615fa0 RCX: 00007f2fa339ce59 [ 512.046874][T18796] RDX: 0000000000000010 RSI: 0000200000002340 RDI: 0000000000000003 [ 512.046887][T18796] RBP: 00007f2fa41e5090 R08: 0000000000000000 R09: 0000000000000000 [ 512.046899][T18796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.046911][T18796] R13: 00007f2fa3616038 R14: 00007f2fa3615fa0 R15: 00007ffe05c589a8 [ 512.046944][T18796] [ 512.453802][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3452'. [ 512.814132][T18822] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3457'. [ 512.956567][T18826] vxcan1: tx drop: invalid da for name 0x0000008000000000 [ 513.283595][T18839] wlan0 speed is unknown, defaulting to 1000 [ 513.289072][T18847] netlink: 'syz.4.3467': attribute type 25 has an invalid length. [ 513.349358][T18839] lo speed is unknown, defaulting to 1000 [ 514.081913][T18882] FAULT_INJECTION: forcing a failure. [ 514.081913][T18882] name failslab, interval 1, probability 0, space 0, times 0 [ 514.121181][T18882] CPU: 0 UID: 0 PID: 18882 Comm: syz.0.3479 Not tainted syzkaller #0 PREEMPT(full) [ 514.121208][T18882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.121221][T18882] Call Trace: [ 514.121229][T18882] [ 514.121237][T18882] dump_stack_lvl+0xe8/0x150 [ 514.121269][T18882] should_fail_ex+0x40c/0x560 [ 514.121316][T18882] should_failslab+0xa8/0x100 [ 514.121343][T18882] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 514.121375][T18882] ? skb_clone+0x212/0x3a0 [ 514.121398][T18882] ? skb_clone+0x212/0x3a0 [ 514.121428][T18882] skb_clone+0x212/0x3a0 [ 514.121455][T18882] __netlink_deliver_tap+0x413/0x860 [ 514.121493][T18882] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.121519][T18882] netlink_deliver_tap+0x19c/0x1b0 [ 514.121544][T18882] __netlink_sendskb+0x47/0x90 [ 514.121566][T18882] netlink_dump+0xa8c/0xee0 [ 514.121602][T18882] ? __pfx_netlink_dump+0x10/0x10 [ 514.121642][T18882] ? genl_start+0x497/0x6d0 [ 514.121680][T18882] __netlink_dump_start+0x589/0x7b0 [ 514.121711][T18882] genl_family_rcv_msg_dumpit+0x213/0x310 [ 514.121757][T18882] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 514.121784][T18882] ? genl_get_cmd+0x82f/0x960 [ 514.121813][T18882] ? __pfx___mutex_lock+0x10/0x10 [ 514.121835][T18882] ? __pfx_genl_start+0x10/0x10 [ 514.121859][T18882] ? __pfx_genl_dumpit+0x10/0x10 [ 514.121885][T18882] ? __pfx_genl_done+0x10/0x10 [ 514.121913][T18882] ? __dev_queue_xmit+0x29b/0x37f0 [ 514.121948][T18882] genl_rcv_msg+0x5e1/0x7a0 [ 514.121982][T18882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.122009][T18882] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 514.122031][T18882] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.122071][T18882] netlink_rcv_skb+0x226/0x4a0 [ 514.122094][T18882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.122124][T18882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.122163][T18882] ? down_read+0x2be/0x330 [ 514.122188][T18882] genl_rcv+0x28/0x40 [ 514.122212][T18882] netlink_unicast+0x7bb/0x940 [ 514.122244][T18882] netlink_sendmsg+0x813/0xb40 [ 514.122284][T18882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.122331][T18882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.122363][T18882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.122387][T18882] sock_sendmsg_nosec+0x13a/0x180 [ 514.122419][T18882] ____sys_sendmsg+0x54e/0x850 [ 514.122461][T18882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.122493][T18882] ? import_iovec+0x73/0xa0 [ 514.122537][T18882] ___sys_sendmsg+0x2a5/0x360 [ 514.122559][T18882] ? __lock_acquire+0x683/0x2cf0 [ 514.122587][T18882] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.122652][T18882] ? __fget_files+0x2a/0x420 [ 514.122684][T18882] ? __fget_files+0x3a2/0x420 [ 514.122715][T18882] __x64_sys_sendmsg+0x1b1/0x290 [ 514.122740][T18882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.122782][T18882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.122804][T18882] do_syscall_64+0x174/0x580 [ 514.122822][T18882] ? trace_irq_disable+0x3b/0x140 [ 514.122841][T18882] ? clear_bhb_loop+0x40/0x90 [ 514.122866][T18882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.122886][T18882] RIP: 0033:0x7f2fa339ce59 [ 514.122904][T18882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.122921][T18882] RSP: 002b:00007f2fa41e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.122941][T18882] RAX: ffffffffffffffda RBX: 00007f2fa3615fa0 RCX: 00007f2fa339ce59 [ 514.122956][T18882] RDX: 0000000000000010 RSI: 0000200000002340 RDI: 0000000000000003 [ 514.122969][T18882] RBP: 00007f2fa41e5090 R08: 0000000000000000 R09: 0000000000000000 [ 514.122981][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.122993][T18882] R13: 00007f2fa3616038 R14: 00007f2fa3615fa0 R15: 00007ffe05c589a8 [ 514.123026][T18882] [ 514.856445][T18896] tipc: Resetting bearer [ 514.878342][T17793] lo speed is unknown, defaulting to 1000 [ 514.959840][T18903] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 515.449452][T18928] __nla_validate_parse: 5 callbacks suppressed [ 515.449472][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3493'. [ 515.509780][T18928] erspan0: entered promiscuous mode [ 515.522187][T18928] batadv_slave_0: entered promiscuous mode [ 515.528281][T18928] batadv_slave_0: left promiscuous mode [ 515.576640][T18928] erspan0: left promiscuous mode [ 515.757739][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 516.027412][T18953] wlan0 speed is unknown, defaulting to 1000 [ 516.047376][T18959] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 516.061701][T18953] lo speed is unknown, defaulting to 1000 [ 516.192679][T18967] bond1: (slave bridge1): making interface the new active one [ 516.201828][T18967] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 516.240124][T18959] team0: entered promiscuous mode [ 516.268560][T18959] team_slave_0: entered promiscuous mode [ 516.301363][T18959] team_slave_1: entered promiscuous mode [ 516.331441][T18959] team0: entered allmulticast mode [ 516.342257][T18959] team_slave_0: entered allmulticast mode [ 516.356192][T18959] team_slave_1: entered allmulticast mode [ 516.405791][T18959] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.441618][T18959] bond1: (slave team0): Enslaving as an active interface with an up link [ 516.706103][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3510'. [ 516.726853][T18989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3510'. [ 516.744178][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3510'. [ 516.754137][T18989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3510'. [ 516.946852][T19000] netlink: 'syz.0.3515': attribute type 2 has an invalid length. [ 516.995080][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'. [ 517.836374][T19041] vlan2: entered allmulticast mode [ 517.847061][T19041] bond0: entered allmulticast mode [ 517.856475][T19041] bond_slave_0: entered allmulticast mode [ 517.868812][T19041] bond_slave_1: entered allmulticast mode [ 518.488179][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'. [ 518.708861][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 518.738300][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 518.771110][T19091] netlink: 'syz.1.3538': attribute type 13 has an invalid length. [ 519.021415][T19089] syzkaller0: entered allmulticast mode [ 519.457142][T19111] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 519.517507][T19111] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 519.618552][T19122] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 519.705215][T19122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.724435][T19124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.733590][T19124] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 519.745783][T19124] bond2: (slave gre2): Error -95 calling set_mac_address [ 519.763807][T19127] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 519.780267][T19122] gretap1: entered promiscuous mode [ 519.786396][T19127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 519.799207][T19122] bond2: (slave gretap1): making interface the new active one [ 519.807189][T19127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 519.819768][T19122] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 519.864468][T19124] macvlan3: entered promiscuous mode [ 519.870087][T19124] macvlan3: entered allmulticast mode [ 519.876844][T19124] bond2: entered promiscuous mode [ 519.884649][T19124] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 519.897112][T19124] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 519.910246][T19124] bond2: left promiscuous mode [ 519.944821][T19133] team0 (unregistering): Port device team_slave_0 removed [ 519.955975][T19133] team0 (unregistering): Port device team_slave_1 removed [ 520.508131][T19168] __nla_validate_parse: 2 callbacks suppressed [ 520.508150][T19168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3563'. [ 520.712413][T19171] netlink: 'syz.3.3566': attribute type 1 has an invalid length. [ 520.770210][T19171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.813419][T19175] bond4: (slave veth5): Enslaving as an active interface with a down link [ 520.852102][T19171] bond4: (slave dummy0): making interface the new active one [ 520.861895][T19171] dummy0: entered promiscuous mode [ 520.867470][T19171] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 521.555657][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'. [ 521.736254][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3574'. [ 522.033198][T19210] vcan0: tx drop: invalid sa for name 0x0000010000000000 [ 522.647025][T19229] "syz.0.3588" (19229) uses obsolete ecb(arc4) skcipher [ 522.755172][T19242] netlink: 'syz.2.3590': attribute type 1 has an invalid length. [ 522.773433][T19242] netlink: 'syz.2.3590': attribute type 2 has an invalid length. [ 522.862764][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'. [ 523.137338][T19249] syzkaller0: entered promiscuous mode [ 523.158028][T19249] syzkaller0: entered allmulticast mode [ 526.150111][T19308] netlink: 'syz.4.3608': attribute type 1 has an invalid length. [ 526.246333][T19308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.507128][T19307] bond1: (slave veth5): Enslaving as an active interface with a down link [ 526.586026][T19320] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3612'. [ 526.613401][T19326] macsec0: entered promiscuous mode [ 526.653890][T19326] macsec0: left promiscuous mode [ 527.036316][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3619'. [ 527.273002][T19343] bond3: entered promiscuous mode [ 527.298471][T19343] bond3: entered allmulticast mode [ 527.318331][T19343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.557288][T19362] Bluetooth: MGMT ver 1.23 [ 527.598607][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 527.613967][T19364] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3622'. [ 527.629939][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 527.655806][T19366] netlink: 'syz.3.3621': attribute type 30 has an invalid length. [ 527.674023][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 527.886175][T19370] bridge_slave_0: left allmulticast mode [ 527.906716][T19370] bridge_slave_0: left promiscuous mode [ 527.930177][T19370] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.961041][T19370] bridge_slave_1: left allmulticast mode [ 527.974949][T19370] bridge_slave_1: left promiscuous mode [ 527.994432][T19370] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.041426][T19370] bond0: (slave bond_slave_0): Releasing backup interface [ 528.078540][T19370] bond0: (slave bond_slave_1): Releasing backup interface [ 528.180059][T19370] team0: Port device team_slave_0 removed [ 528.232245][T19370] team0: Port device team_slave_1 removed [ 528.242358][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.254274][T19370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.289508][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.298066][T19370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.308276][T19370] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.365992][T19371] team0: Port device xfrm0 added [ 528.619171][T19395] netlink: 'syz.0.3633': attribute type 13 has an invalid length. [ 528.697259][T19395] netlink: 'syz.0.3633': attribute type 13 has an invalid length. [ 528.706052][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.727167][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.758086][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.799254][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.909550][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3638'. [ 528.942403][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3638'. [ 529.429711][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'. [ 529.464193][T19427] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 529.750215][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3648'. [ 529.807330][T19439] ip6gre1: entered promiscuous mode [ 529.826681][T19439] ip6gre1: entered allmulticast mode [ 529.844897][ T1170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.872583][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.887754][ T1170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.051680][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.121423][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.339605][T19509] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 531.432398][ T5629] block nbd4: Receive control failed (result -32) [ 531.546795][T19509] bond2: entered promiscuous mode [ 531.580311][T19509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.058097][ T48] dummy0: left promiscuous mode [ 532.088607][T19536] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 532.112847][T19534] __nla_validate_parse: 2 callbacks suppressed [ 532.112862][T19534] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3678'. [ 532.167722][T19534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.224546][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3681'. [ 532.418022][T19552] geneve1: entered promiscuous mode [ 532.585792][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 532.628326][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3686'. [ 533.651923][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3698'. [ 533.669279][T19602] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3698'. [ 533.671277][T17425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.681517][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3698'. [ 533.698181][T19602] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3698'. [ 533.713380][T19602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3698'. [ 533.764143][T19610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.773618][T19610] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.786587][T19610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.838820][T19610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.849244][T19610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.872584][T19610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.884966][T19610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.913099][T19610] veth1_vlan: left promiscuous mode [ 533.919921][T19610] veth0_vlan: left promiscuous mode [ 533.930821][T19610] veth0_vlan: entered promiscuous mode [ 533.939722][T19610] veth1_vlan: entered promiscuous mode [ 533.940740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.962587][T19610] veth1_macvtap: left promiscuous mode [ 533.972102][T19610] veth0_macvtap: left promiscuous mode [ 533.978479][T19610] veth0_macvtap: entered promiscuous mode [ 533.985282][T19610] veth1_macvtap: entered promiscuous mode [ 533.995437][T19610] geneve1: left promiscuous mode [ 534.005603][T19610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.014400][T19610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.024193][T19610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.034320][T19610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.046848][T19610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.054581][T19610] bridge1: left promiscuous mode [ 534.062325][T19610] vlan2: left promiscuous mode [ 534.067874][T19610] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 534.083189][T19610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.093442][T19610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.123378][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.130651][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.142329][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.149514][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.234864][T19626] sctp: [Deprecated]: syz.0.3703 (pid 19626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.234864][T19626] Use struct sctp_sack_info instead [ 534.252077][T17425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.262786][T19626] blkio.reset_stats is deprecated [ 534.275671][ T5932] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 534.299171][T19626] ip6erspan0: entered allmulticast mode [ 534.449229][T19634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3705'. [ 534.968362][T19661] nbd: nbd2 already in use [ 535.334690][T19675] netlink: 'syz.4.3720': attribute type 1 has an invalid length. [ 535.415848][T19675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.541404][ T5629] Bluetooth: hci3: command 0x0405 tx timeout [ 535.844490][T19691] netlink: 'syz.2.3724': attribute type 61 has an invalid length. [ 535.875923][T19691] syzkaller0: entered promiscuous mode [ 535.887343][T19691] syzkaller0: entered allmulticast mode [ 535.939904][T19701] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 536.229186][T19710] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 536.464087][T19730] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 2, id = 0 [ 536.744019][T19750] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 536.976002][T19755] syzkaller0: entered promiscuous mode [ 536.982393][T19755] syzkaller0: entered allmulticast mode [ 537.203224][T19767] __nla_validate_parse: 12 callbacks suppressed [ 537.203242][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 537.458536][T19782] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3754'. [ 537.497924][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 537.647793][T19789] netlink: 'syz.3.3755': attribute type 1 has an invalid length. [ 539.988859][T19809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3760'. [ 540.214785][ T5928] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 540.629932][T19853] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 540.787998][T19850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3771'. [ 540.925724][T19863] syzkaller0: entered promiscuous mode [ 540.933151][T19863] syzkaller0: entered allmulticast mode [ 542.420843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.027835][T19820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.230282][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3778'. [ 543.283421][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3778'. [ 543.306075][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3776'. [ 543.626996][T19902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3787'. [ 543.670087][T19905] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3788'. [ 543.742437][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3788'. [ 543.785364][T19911] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 543.817023][T19907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3789'. [ 543.833677][T19911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.859233][T19911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.871482][T19911] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 543.883608][T19911] bond4: (slave gre2): Error -95 calling set_mac_address [ 543.923216][T19914] macvlan3: entered promiscuous mode [ 543.928719][T19914] macvlan3: entered allmulticast mode [ 543.936009][T19914] bond4: entered promiscuous mode [ 543.949462][T19914] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 543.960690][T19914] bond4: left promiscuous mode [ 544.237966][T19924] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 544.278153][T19924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3795'. [ 544.288062][T19924] bond4: entered promiscuous mode [ 544.328767][T19924] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.336286][T19924] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.381340][T19924] bridge_slave_0: left allmulticast mode [ 544.387045][T19924] bridge_slave_0: left promiscuous mode [ 544.396152][T19924] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.430122][T19924] bridge_slave_1: left allmulticast mode [ 544.436742][T19924] bridge_slave_1: left promiscuous mode [ 544.442759][T19924] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.473727][T19924] bond0: (slave bond_slave_0): Releasing backup interface [ 544.484945][T19924] bond_slave_0: left allmulticast mode [ 544.499293][T19924] bond0: (slave bond_slave_1): Releasing backup interface [ 544.509738][T19924] bond_slave_1: left allmulticast mode [ 544.518987][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'. [ 544.544752][T19924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.557557][T19924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.573005][T19924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.585904][T19924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.605906][T19924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.633049][T19928] tunl0: Caught tx_queue_len zero misconfig [ 544.726962][T19923] bond4: left promiscuous mode [ 544.895778][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3801'. [ 545.123102][T19957] syzkaller0: entered promiscuous mode [ 545.136822][T19957] syzkaller0: entered allmulticast mode [ 545.162507][T19957] tipc: Started in network mode [ 545.174992][T19957] tipc: Node identity b614e666cb91, cluster identity 4711 [ 545.190049][T19957] tipc: Enabled bearer , priority 0 [ 545.207301][T19957] tipc: Resetting bearer [ 545.222993][T19956] tipc: Resetting bearer [ 545.285815][T19956] tipc: Disabling bearer [ 545.455494][T19973] vlan3: entered promiscuous mode [ 545.868090][T19992] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 546.077501][T20011] vlan2: entered promiscuous mode [ 546.113854][T20011] bridge0: entered promiscuous mode [ 546.515390][T20042] syzkaller0: entered promiscuous mode [ 546.521966][T20042] syzkaller0: entered allmulticast mode [ 546.697089][T20051] vlan2: entered promiscuous mode [ 546.703035][T20051] bridge0: entered promiscuous mode [ 546.857033][T17801] IPVS: starting estimator thread 0... [ 546.980782][T20058] IPVS: using max 29 ests per chain, 69600 per kthread [ 547.473932][T20086] syzkaller0: entered promiscuous mode [ 547.491863][T20086] syzkaller0: entered allmulticast mode [ 547.525803][T20086] netlink: 'syz.4.3846': attribute type 11 has an invalid length. [ 547.735404][T20095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.768507][T20095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.856855][T20104] netlink: 'syz.0.3849': attribute type 7 has an invalid length. [ 547.866144][T20104] netlink: 'syz.0.3849': attribute type 8 has an invalid length. [ 547.876933][T20095] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 547.908794][T20095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.931706][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.991257][T17425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.003883][T20104] erspan0: entered promiscuous mode [ 548.016403][T20104] erspan0: left promiscuous mode [ 548.060498][ T5941] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.092903][ T5941] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.332491][ T5941] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.333318][T20117] sctp: [Deprecated]: syz.2.3853 (pid 20117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.333318][T20117] Use struct sctp_sack_info instead [ 548.388397][ T5941] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.432040][ T5941] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 548.517726][ T5941] bond1: (slave veth5): making interface the new active one [ 548.532550][ T5941] bond1: active interface up! [ 548.554783][T20113] __nla_validate_parse: 10 callbacks suppressed [ 548.554802][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3855'. [ 548.573039][T20113] netlink: 'syz.0.3855': attribute type 30 has an invalid length. [ 548.599309][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 548.673104][T20135] IPVS: Error connecting to the multicast addr [ 549.425424][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3867'. [ 551.583218][T20138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.767694][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3871'. [ 551.799213][T20180] syzkaller1: entered promiscuous mode [ 551.823022][T20180] syzkaller1: entered allmulticast mode [ 551.877772][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 551.954485][ T5629] block nbd5: Receive control failed (result -32) [ 552.155800][T20197] wlan0 speed is unknown, defaulting to 1000 [ 552.167901][T20197] lo speed is unknown, defaulting to 1000 [ 552.209599][T20202] vlan2: entered promiscuous mode [ 552.215946][T20202] bridge0: entered promiscuous mode [ 552.650101][T20225] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3882'. [ 552.701750][T20225] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 553.170176][T20243] netlink: 'syz.4.3889': attribute type 11 has an invalid length. [ 553.211038][T20243] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3889'. [ 553.232038][T20246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3889'. [ 553.292453][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 553.487492][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3891'. [ 553.523894][T20257] netlink: 'syz.0.3894': attribute type 10 has an invalid length. [ 553.539072][T20258] netlink: 'syz.0.3894': attribute type 10 has an invalid length. [ 553.557055][T20257] dummy0: entered promiscuous mode [ 553.567847][T20258] __nla_validate_parse: 1 callbacks suppressed [ 553.567860][T20258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3894'. [ 553.603347][T20257] dummy0: entered allmulticast mode [ 553.617219][T20257] bridge0: port 1(dummy0) entered blocking state [ 553.628106][T20257] bridge0: port 1(dummy0) entered disabled state [ 553.638355][T20257] bridge0: port 1(dummy0) entered blocking state [ 553.644872][T20257] bridge0: port 1(dummy0) entered forwarding state [ 554.251390][T20277] tipc: Enabling of bearer rejected, failed to enable media [ 554.756429][T20300] wlan0 speed is unknown, defaulting to 1000 [ 554.765426][T20300] lo speed is unknown, defaulting to 1000 [ 555.203465][T20324] dummy0: Caught tx_queue_len zero misconfig [ 555.269179][T20325] syzkaller0: entered promiscuous mode [ 555.295012][T20325] syzkaller0: entered allmulticast mode [ 555.402562][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 555.529650][T20333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 555.666207][T20333] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3920'. [ 555.725145][T20340] syzkaller0: entered promiscuous mode [ 555.729739][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3920'. [ 555.745123][T20340] syzkaller0: entered allmulticast mode [ 555.922278][T20338] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 555.939514][T20340] tipc: Enabled bearer , priority 0 [ 555.973987][T20337] tipc: Resetting bearer [ 556.034653][T20337] tipc: Disabling bearer [ 556.448824][T20385] syzkaller0: entered promiscuous mode [ 556.455042][T20385] syzkaller0: entered allmulticast mode [ 559.275582][T20414] erspan0: entered promiscuous mode [ 559.295420][T20433] netlink: 'syz.4.3946': attribute type 6 has an invalid length. [ 559.307136][T20433] netlink: 'syz.4.3946': attribute type 7 has an invalid length. [ 559.315395][T20433] netlink: 'syz.4.3946': attribute type 8 has an invalid length. [ 559.643041][T20450] netlink: 'syz.3.3950': attribute type 83 has an invalid length. [ 559.701176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.796675][T20410] erspan0: left promiscuous mode [ 560.052630][ T5932] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.063964][ T5932] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.073836][ T5932] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.084691][ T5932] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.094533][T20450] tipc: Started in network mode [ 560.094869][T20464] netlink: zone id is out of range [ 560.099465][T20450] tipc: Node identity a6fe00b2c248, cluster identity 4711 [ 560.116874][T20450] tipc: Enabled bearer , priority 0 [ 560.124229][T20464] netlink: zone id is out of range [ 560.130164][T20464] netlink: zone id is out of range [ 560.143137][T20464] netlink: zone id is out of range [ 560.149325][T20464] netlink: zone id is out of range [ 560.157004][T20464] netlink: zone id is out of range [ 560.189318][T20452] syzkaller0: entered promiscuous mode [ 560.195797][T20452] syzkaller0: entered allmulticast mode [ 560.202716][T20452] tipc: Resetting bearer [ 560.266130][ T5932] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.284800][ T5932] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.315183][ T5932] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.335389][ T5932] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.387938][T20442] tipc: Resetting bearer [ 560.413376][T20465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3953'. [ 562.754243][T20442] tipc: Disabling bearer [ 562.765391][T20467] syzkaller0: entered promiscuous mode [ 562.771034][T20467] syzkaller0: entered allmulticast mode [ 562.786522][T20480] tipc: Enabling of bearer rejected, failed to enable media [ 562.875451][T17801] tipc: Node number set to 1689649330 [ 562.902998][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910242][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.055187][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.087259][T20513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.169260][T17425] IPVS: starting estimator thread 0... [ 563.271283][T20521] IPVS: using max 28 ests per chain, 67200 per kthread [ 563.368534][T20534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3961'. [ 563.614978][T20524] wlan0 speed is unknown, defaulting to 1000 [ 563.638632][T20545] geneve1: Caught tx_queue_len zero misconfig [ 563.648637][T20524] lo speed is unknown, defaulting to 1000 [ 563.729990][T20547] tipc: Failed to remove unknown binding: 66,1,1/3716382185:740715958/740715960 [ 563.918667][T20547] wlan0 speed is unknown, defaulting to 1000 [ 563.931570][T20547] lo speed is unknown, defaulting to 1000 [ 564.440045][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3982'. [ 564.507205][T20570] nbd: must specify at least one socket [ 564.549522][T20574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3982'. [ 564.618704][T20574] nbd: must specify at least one socket [ 564.730914][T20580] netlink: 'syz.3.3986': attribute type 4 has an invalid length. [ 564.788127][T20581] netlink: 'syz.3.3986': attribute type 4 has an invalid length. [ 564.817238][T20581] netlink: 'syz.3.3986': attribute type 4 has an invalid length. [ 564.869867][T20583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3987'. [ 566.007876][T20633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3999'. [ 566.634469][T20679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4011'. [ 566.755786][T20686] sctp: [Deprecated]: syz.3.4011 (pid 20686) Use of int in max_burst socket option. [ 566.755786][T20686] Use struct sctp_assoc_value instead [ 566.800761][T20678] netlink: 768 bytes leftover after parsing attributes in process `syz.4.4008'. [ 566.847782][T20673] tipc: Resetting bearer [ 567.483169][ T1170] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.505121][ T1170] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.534208][ T1170] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.555078][ T1170] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.781415][T20709] netlink: 'syz.4.4019': attribute type 30 has an invalid length. [ 567.854817][T20709] netlink: 'syz.4.4019': attribute type 8 has an invalid length. [ 567.885561][T20709] netlink: 'syz.4.4019': attribute type 9 has an invalid length. [ 567.904078][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4020'. [ 568.145699][T20729] netlink: 'syz.1.4025': attribute type 12 has an invalid length. [ 568.154351][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 568.165284][T20729] bond0: option primary_reselect: invalid value (4) [ 568.495330][T20742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4031'. [ 568.816515][T20754] IPv6: Can't replace route, no match found [ 568.861592][T20754] syzkaller1: entered promiscuous mode [ 568.883158][T20754] syzkaller1: entered allmulticast mode [ 568.908826][T20760] ieee802154 phy0 wpan0: encryption failed: -126 [ 569.025853][T20763] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4038'. [ 569.705874][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 569.969533][T20804] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4047'. [ 569.996657][T20810] Cannot find add_set index 0 as target [ 570.002534][T20803] Cannot find add_set index 0 as target [ 570.349435][T20821] netlink: 'syz.2.4054': attribute type 1 has an invalid length. [ 570.393182][T20821] bond5: entered promiscuous mode [ 570.411407][T20821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.513492][T20821] bond5: (slave veth11): making interface the new active one [ 570.522593][T20821] veth11: entered promiscuous mode [ 570.532328][T20821] bond5: (slave veth11): Enslaving as an active interface with an up link [ 570.631852][T20821] netlink: 'syz.2.4054': attribute type 10 has an invalid length. [ 570.648882][T20831] netlink: 'syz.3.4058': attribute type 9 has an invalid length. [ 570.664343][T20821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4054'. [ 570.697810][T20821] dummy0: entered promiscuous mode [ 570.704381][T20831] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 570.714786][T20821] dummy0: entered allmulticast mode [ 570.738280][T20821] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 570.881676][T20831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.181921][T20855] __nla_validate_parse: 1 callbacks suppressed [ 571.181940][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4063'. [ 571.214682][T20839] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4061'. [ 572.048815][T20899] xt_NFQUEUE: number of total queues is 0 [ 572.067578][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 572.154916][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 572.178741][T20902] wlan0 speed is unknown, defaulting to 1000 [ 572.254272][T20902] lo speed is unknown, defaulting to 1000 [ 572.260355][T20912] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4078'. [ 572.474884][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4080'. [ 572.496859][T20926] openvswitch: netlink: IP tunnel dst address not specified [ 572.635207][T20932] syzkaller0: entered promiscuous mode [ 572.656855][T20932] syzkaller0: entered allmulticast mode [ 572.744635][T17801] IPVS: starting estimator thread 0... [ 572.844919][T20939] IPVS: using max 32 ests per chain, 76800 per kthread [ 572.871685][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 572.995762][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 573.996194][T20991] nbd: nbd2 already in use [ 574.004061][T20991] block nbd2: NBD_DISCONNECT [ 574.009693][T20991] block nbd2: Send disconnect failed -32 [ 574.019755][T20991] block nbd2: shutting down sockets [ 574.108694][T20991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.117992][T20991] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.129770][T20991] dummy0: left promiscuous mode [ 574.152549][T20991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.299191][T20991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.332330][T20991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.393995][T20991] veth1_vlan: left promiscuous mode [ 574.403825][T20991] veth0_vlan: left promiscuous mode [ 574.417820][T20991] veth0_vlan: entered promiscuous mode [ 574.426545][T20991] tipc: Resetting bearer [ 574.435623][T20991] veth1_vlan: entered promiscuous mode [ 574.456127][T20991] veth0_macvtap: left promiscuous mode [ 574.466999][T20991] veth0_macvtap: entered promiscuous mode [ 574.489686][T20991] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 574.508956][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.528204][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.545111][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.553179][T21017] [ 574.555563][T21017] ====================================================== [ 574.562601][T21017] WARNING: possible circular locking dependency detected [ 574.569643][T21017] syzkaller #0 Not tainted [ 574.574065][T21017] ------------------------------------------------------ [ 574.581092][T21017] syz.4.4109/21017 is trying to acquire lock: [ 574.587168][T21017] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 574.596510][T21017] [ 574.596510][T21017] but task is already holding lock: [ 574.603879][T21017] ffff888046245060 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x144/0x810 [ 574.614616][T21017] [ 574.614616][T21017] which lock already depends on the new lock. [ 574.614616][T21017] [ 574.625036][T21017] [ 574.625036][T21017] the existing dependency chain (in reverse order) is: [ 574.634060][T21017] [ 574.634060][T21017] -> #8 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 574.642072][T21017] lock_sock_nested+0x41/0x100 [ 574.647383][T21017] mptcp_subflow_create_socket+0x144/0x810 [ 574.653742][T21017] __mptcp_subflow_connect+0x260/0x1ad0 [ 574.659846][T21017] mptcp_pm_create_subflow_or_signal_addr+0xbb5/0x1890 [ 574.667294][T21017] mptcp_pm_nl_add_addr_doit+0xa31/0x1400 [ 574.673597][T21017] genl_family_rcv_msg_doit+0x233/0x340 [ 574.679681][T21017] genl_rcv_msg+0x614/0x7a0 [ 574.684720][T21017] netlink_rcv_skb+0x226/0x4a0 [ 574.690015][T21017] genl_rcv+0x28/0x40 [ 574.694533][T21017] netlink_unicast+0x7bb/0x940 [ 574.699841][T21017] netlink_sendmsg+0x813/0xb40 [ 574.705136][T21017] sock_sendmsg_nosec+0x13a/0x180 [ 574.710695][T21017] ____sys_sendmsg+0x54e/0x850 [ 574.716000][T21017] ___sys_sendmsg+0x2a5/0x360 [ 574.721212][T21017] __x64_sys_sendmsg+0x1b1/0x290 [ 574.726694][T21017] do_syscall_64+0x174/0x580 [ 574.731820][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.738262][T21017] [ 574.738262][T21017] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 574.746009][T21017] lock_sock_nested+0x41/0x100 [ 574.751313][T21017] tls_sw_sendmsg+0x161/0x2860 [ 574.756729][T21017] sock_sendmsg_nosec+0x90/0x180 [ 574.762203][T21017] __sys_sendto+0x408/0x5a0 [ 574.767239][T21017] __x64_sys_sendto+0xde/0x100 [ 574.772530][T21017] do_syscall_64+0x174/0x580 [ 574.777654][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.784077][T21017] [ 574.784077][T21017] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 574.791591][T21017] __mutex_lock+0x19d/0x1550 [ 574.796722][T21017] tls_sw_sendmsg+0x13c/0x2860 [ 574.802048][T21017] sock_sendmsg_nosec+0x90/0x180 [ 574.807526][T21017] sock_sendmsg+0x1ca/0x2d0 [ 574.812590][T21017] __sock_xmit+0x245/0x4f0 [ 574.817615][T21017] nbd_disconnect+0x3ad/0x560 [ 574.822845][T21017] nbd_disconnect_and_put+0x32/0x280 [ 574.828667][T21017] nbd_genl_disconnect+0x4af/0x590 [ 574.834313][T21017] genl_family_rcv_msg_doit+0x233/0x340 [ 574.840490][T21017] genl_rcv_msg+0x614/0x7a0 [ 574.845556][T21017] netlink_rcv_skb+0x226/0x4a0 [ 574.850866][T21017] genl_rcv+0x28/0x40 [ 574.855388][T21017] netlink_unicast+0x7bb/0x940 [ 574.860678][T21017] netlink_sendmsg+0x813/0xb40 [ 574.865972][T21017] sock_sendmsg_nosec+0x13a/0x180 [ 574.871532][T21017] ____sys_sendmsg+0x54e/0x850 [ 574.876835][T21017] ___sys_sendmsg+0x2a5/0x360 [ 574.882079][T21017] __x64_sys_sendmsg+0x1b1/0x290 [ 574.887547][T21017] do_syscall_64+0x174/0x580 [ 574.892660][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.899082][T21017] [ 574.899082][T21017] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 574.906738][T21017] __mutex_lock+0x19d/0x1550 [ 574.911859][T21017] nbd_queue_rq+0x373/0x1150 [ 574.917001][T21017] blk_mq_dispatch_rq_list+0x499/0x1990 [ 574.923165][T21017] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 574.930055][T21017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 574.936571][T21017] blk_mq_run_work_fn+0x16c/0x300 [ 574.942131][T21017] process_scheduled_works+0xa8e/0x14e0 [ 574.948229][T21017] worker_thread+0xa47/0xfb0 [ 574.953377][T21017] kthread+0x388/0x470 [ 574.958002][T21017] ret_from_fork+0x514/0xb70 [ 574.963144][T21017] ret_from_fork_asm+0x1a/0x30 [ 574.968444][T21017] [ 574.968444][T21017] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 574.975684][T21017] __mutex_lock+0x19d/0x1550 [ 574.980818][T21017] nbd_queue_rq+0xc1/0x1150 [ 574.985865][T21017] blk_mq_dispatch_rq_list+0x499/0x1990 [ 574.992002][T21017] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 574.998870][T21017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 575.005428][T21017] blk_mq_run_work_fn+0x16c/0x300 [ 575.011077][T21017] process_scheduled_works+0xa8e/0x14e0 [ 575.017170][T21017] worker_thread+0xa47/0xfb0 [ 575.022292][T21017] kthread+0x388/0x470 [ 575.026884][T21017] ret_from_fork+0x514/0xb70 [ 575.032027][T21017] ret_from_fork_asm+0x1a/0x30 [ 575.037342][T21017] [ 575.037342][T21017] -> #3 (set->srcu){.+.+}-{0:0}: [ 575.044489][T21017] __synchronize_srcu+0xc9/0x2f0 [ 575.049975][T21017] elevator_switch+0x1e8/0x7b0 [ 575.055355][T21017] elevator_change+0x2fa/0x480 [ 575.060655][T21017] elevator_set_default+0x375/0x440 [ 575.066404][T21017] blk_register_queue+0x3f3/0x4e0 [ 575.072004][T21017] __add_disk+0x6cb/0xe30 [ 575.076896][T21017] add_disk_fwnode+0xfb/0x4b0 [ 575.082123][T21017] nbd_dev_add+0x733/0xb60 [ 575.087071][T21017] nbd_init+0x15f/0x1e0 [ 575.091887][T21017] do_one_initcall+0x250/0x870 [ 575.097197][T21017] do_initcall_level+0x10a/0x1a0 [ 575.102740][T21017] do_initcalls+0x59/0xa0 [ 575.107606][T21017] kernel_init_freeable+0x29d/0x3e0 [ 575.113338][T21017] kernel_init+0x1d/0x1d0 [ 575.118201][T21017] ret_from_fork+0x514/0xb70 [ 575.123323][T21017] ret_from_fork_asm+0x1a/0x30 [ 575.128627][T21017] [ 575.128627][T21017] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 575.136477][T21017] __mutex_lock+0x19d/0x1550 [ 575.141598][T21017] elevator_change+0x1af/0x480 [ 575.146926][T21017] elevator_set_none+0xb5/0x140 [ 575.152319][T21017] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 575.158670][T21017] nbd_start_device+0x189/0xb30 [ 575.164054][T21017] nbd_genl_connect+0x1597/0x1c10 [ 575.169612][T21017] genl_family_rcv_msg_doit+0x233/0x340 [ 575.175691][T21017] genl_rcv_msg+0x614/0x7a0 [ 575.180751][T21017] netlink_rcv_skb+0x226/0x4a0 [ 575.186079][T21017] genl_rcv+0x28/0x40 [ 575.190620][T21017] netlink_unicast+0x7bb/0x940 [ 575.195931][T21017] netlink_sendmsg+0x813/0xb40 [ 575.201259][T21017] sock_sendmsg_nosec+0x13a/0x180 [ 575.206826][T21017] ____sys_sendmsg+0x54e/0x850 [ 575.212121][T21017] ___sys_sendmsg+0x2a5/0x360 [ 575.217332][T21017] __x64_sys_sendmsg+0x1b1/0x290 [ 575.222796][T21017] do_syscall_64+0x174/0x580 [ 575.227932][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.234351][T21017] [ 575.234351][T21017] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 575.242988][T21017] blk_alloc_queue+0x544/0x690 [ 575.248300][T21017] __blk_mq_alloc_disk+0x194/0x390 [ 575.253967][T21017] nbd_dev_add+0x494/0xb60 [ 575.258934][T21017] nbd_init+0x15f/0x1e0 [ 575.263631][T21017] do_one_initcall+0x250/0x870 [ 575.268923][T21017] do_initcall_level+0x10a/0x1a0 [ 575.274391][T21017] do_initcalls+0x59/0xa0 [ 575.279274][T21017] kernel_init_freeable+0x29d/0x3e0 [ 575.285007][T21017] kernel_init+0x1d/0x1d0 [ 575.289884][T21017] ret_from_fork+0x514/0xb70 [ 575.295009][T21017] ret_from_fork_asm+0x1a/0x30 [ 575.300308][T21017] [ 575.300308][T21017] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 575.307542][T21017] __lock_acquire+0x1520/0x2cf0 [ 575.312937][T21017] lock_acquire+0x106/0x350 [ 575.317981][T21017] fs_reclaim_acquire+0x71/0x100 [ 575.323442][T21017] __kmalloc_cache_noprof+0x61/0x660 [ 575.329262][T21017] ref_tracker_alloc+0x15b/0x4b0 [ 575.334734][T21017] get_net_track+0x16e/0x230 [ 575.339897][T21017] sk_net_refcnt_upgrade+0xb2/0x130 [ 575.345628][T21017] mptcp_subflow_create_socket+0x32f/0x810 [ 575.351972][T21017] __mptcp_nmpc_sk+0x155/0x770 [ 575.357319][T21017] mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 575.363574][T21017] genl_family_rcv_msg_doit+0x233/0x340 [ 575.369671][T21017] genl_rcv_msg+0x614/0x7a0 [ 575.374707][T21017] netlink_rcv_skb+0x226/0x4a0 [ 575.380007][T21017] genl_rcv+0x28/0x40 [ 575.384524][T21017] netlink_unicast+0x7bb/0x940 [ 575.389816][T21017] netlink_sendmsg+0x813/0xb40 [ 575.395109][T21017] sock_sendmsg_nosec+0x13a/0x180 [ 575.400675][T21017] ____sys_sendmsg+0x54e/0x850 [ 575.405989][T21017] ___sys_sendmsg+0x2a5/0x360 [ 575.411201][T21017] __x64_sys_sendmsg+0x1b1/0x290 [ 575.416685][T21017] do_syscall_64+0x174/0x580 [ 575.421807][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.428225][T21017] [ 575.428225][T21017] other info that might help us debug this: [ 575.428225][T21017] [ 575.438459][T21017] Chain exists of: [ 575.438459][T21017] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET/1 [ 575.438459][T21017] [ 575.451512][T21017] Possible unsafe locking scenario: [ 575.451512][T21017] [ 575.458975][T21017] CPU0 CPU1 [ 575.464350][T21017] ---- ---- [ 575.469718][T21017] lock(k-sk_lock-AF_INET/1); [ 575.474506][T21017] lock(sk_lock-AF_INET6); [ 575.481550][T21017] lock(k-sk_lock-AF_INET/1); [ 575.488863][T21017] lock(fs_reclaim); [ 575.492867][T21017] [ 575.492867][T21017] *** DEADLOCK *** [ 575.492867][T21017] [ 575.501024][T21017] 4 locks held by syz.4.4109/21017: [ 575.506235][T21017] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.514447][T21017] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 575.523426][T21017] #2: ffff8880794a9ae0 (msk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdb4/0x1400 [ 575.534144][T21017] #3: ffff888046245060 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x144/0x810 [ 575.545210][T21017] [ 575.545210][T21017] stack backtrace: [ 575.551108][T21017] CPU: 1 UID: 0 PID: 21017 Comm: syz.4.4109 Not tainted syzkaller #0 PREEMPT(full) [ 575.551134][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.551148][T21017] Call Trace: [ 575.551156][T21017] [ 575.551164][T21017] dump_stack_lvl+0xe8/0x150 [ 575.551191][T21017] print_circular_bug+0x2e1/0x300 [ 575.551221][T21017] check_noncircular+0x12e/0x150 [ 575.551251][T21017] __lock_acquire+0x1520/0x2cf0 [ 575.551275][T21017] ? check_path+0x21/0x40 [ 575.551299][T21017] ? check_noncircular+0xda/0x150 [ 575.551328][T21017] ? lockdep_unlock+0x5d/0xd0 [ 575.551345][T21017] ? __lock_acquire+0x13e8/0x2cf0 [ 575.551368][T21017] ? __kmalloc_cache_noprof+0x61/0x660 [ 575.551401][T21017] lock_acquire+0x106/0x350 [ 575.551418][T21017] ? __kmalloc_cache_noprof+0x61/0x660 [ 575.551450][T21017] fs_reclaim_acquire+0x71/0x100 [ 575.551465][T21017] ? __kmalloc_cache_noprof+0x61/0x660 [ 575.551491][T21017] __kmalloc_cache_noprof+0x61/0x660 [ 575.551519][T21017] ? ref_tracker_alloc+0x15b/0x4b0 [ 575.551542][T21017] ? ref_tracker_alloc+0x15b/0x4b0 [ 575.551566][T21017] ? rcu_is_watching+0x15/0xb0 [ 575.551588][T21017] ref_tracker_alloc+0x15b/0x4b0 [ 575.551614][T21017] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 575.551637][T21017] ? ref_tracker_free+0x518/0x830 [ 575.551662][T21017] ? __pfx_ref_tracker_free+0x10/0x10 [ 575.551686][T21017] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 575.551704][T21017] ? mptcp_subflow_create_socket+0x32f/0x810 [ 575.551722][T21017] ? __mptcp_nmpc_sk+0x155/0x770 [ 575.551741][T21017] ? mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 575.551767][T21017] ? genl_family_rcv_msg_doit+0x233/0x340 [ 575.551793][T21017] ? net_passive_dec+0x177/0x250 [ 575.551817][T21017] ? __pfx_net_passive_dec+0x10/0x10 [ 575.551840][T21017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.551859][T21017] get_net_track+0x16e/0x230 [ 575.551884][T21017] sk_net_refcnt_upgrade+0xb2/0x130 [ 575.551903][T21017] mptcp_subflow_create_socket+0x32f/0x810 [ 575.551925][T21017] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 575.551946][T21017] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.551969][T21017] ? lock_sock_nested+0x6a/0x100 [ 575.551992][T21017] __mptcp_nmpc_sk+0x155/0x770 [ 575.552024][T21017] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 575.552041][T21017] ? mptcp_pm_nl_add_addr_doit+0xdb4/0x1400 [ 575.552067][T21017] ? __local_bh_enable_ip+0xd0/0x130 [ 575.552093][T21017] mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 575.552122][T21017] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 575.552160][T21017] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 575.552184][T21017] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 575.552211][T21017] genl_family_rcv_msg_doit+0x233/0x340 [ 575.552237][T21017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.552265][T21017] ? bpf_lsm_capable+0x9/0x20 [ 575.552280][T21017] ? security_capable+0x7e/0x2c0 [ 575.552372][T21017] genl_rcv_msg+0x614/0x7a0 [ 575.552397][T21017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.552418][T21017] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 575.552449][T21017] netlink_rcv_skb+0x226/0x4a0 [ 575.552466][T21017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.552488][T21017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.552511][T21017] ? down_read+0x2be/0x330 [ 575.552528][T21017] genl_rcv+0x28/0x40 [ 575.552548][T21017] netlink_unicast+0x7bb/0x940 [ 575.552568][T21017] netlink_sendmsg+0x813/0xb40 [ 575.552589][T21017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.552609][T21017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.552630][T21017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.552647][T21017] sock_sendmsg_nosec+0x13a/0x180 [ 575.552669][T21017] ____sys_sendmsg+0x54e/0x850 [ 575.552708][T21017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.552729][T21017] ? import_iovec+0x73/0xa0 [ 575.552747][T21017] ___sys_sendmsg+0x2a5/0x360 [ 575.552764][T21017] ? __lock_acquire+0x683/0x2cf0 [ 575.552783][T21017] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.552802][T21017] ? futex_wait+0x2a2/0x390 [ 575.552848][T21017] ? __fget_files+0x2a/0x420 [ 575.552869][T21017] ? __fget_files+0x3a2/0x420 [ 575.552889][T21017] __x64_sys_sendmsg+0x1b1/0x290 [ 575.552909][T21017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.552935][T21017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.552952][T21017] do_syscall_64+0x174/0x580 [ 575.552967][T21017] ? trace_irq_disable+0x3b/0x140 [ 575.552983][T21017] ? clear_bhb_loop+0x40/0x90 [ 575.553002][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.553019][T21017] RIP: 0033:0x7f1675b9ce59 [ 575.553034][T21017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.553050][T21017] RSP: 002b:00007f1676ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.553068][T21017] RAX: ffffffffffffffda RBX: 00007f1675e15fa0 RCX: 00007f1675b9ce59 [ 575.553081][T21017] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 575.553092][T21017] RBP: 00007f1675c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 575.553102][T21017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.553112][T21017] R13: 00007f1675e16038 R14: 00007f1675e15fa0 R15: 00007fff2e6c4ef8 [ 575.553132][T21017] [ 576.062892][T20991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.086651][T20991] bond1: left promiscuous mode [ 576.095758][T20991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.107190][T20991] veth3: left promiscuous mode [ 576.118683][T20991] veth5: left promiscuous mode [ 576.126714][T20991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.136409][T20991] bond3: left promiscuous mode [ 576.141729][T20991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.158032][T20991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.169326][T20991] bond5: left promiscuous mode [ 576.174913][T20991] veth11: left promiscuous mode [ 576.185688][T17793] lo speed is unknown, defaulting to 1000 [ 576.221080][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.229970][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.239346][T17793] syz2: Port: 1 Link ACTIVE [ 576.250140][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.261432][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.272251][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.291234][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.312715][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.322127][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0