last executing test programs: 3.924056619s ago: executing program 0 (id=6663): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32, @ANYBLOB="080002"], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) sendmmsg(r0, &(0x7f0000000940), 0x4000000000001f2, 0xfc) 3.451769337s ago: executing program 0 (id=6669): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 3.227214286s ago: executing program 0 (id=6673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000200000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.911022602s ago: executing program 4 (id=6675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9418}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc008}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31c3ac7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}]}, 0xe0}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus640-generic)\x00'}, 0x58) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.91069848s ago: executing program 0 (id=6676): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x2, @short={0x2, 0x0, 0xffff}}, 0x14) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) close(r0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000240)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000001c0)}], 0x1}, 0x200000c1) r3 = socket(0x1, 0x800, 0xfffffffd) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000040)="3995f6e068", 0x5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="7eed22f437c37c8e07aca4956cd79be989e6ad12c703019e6e9b3a6a44a6f88d04e98e1b8750684d82b65fed1a4c3f5d00fa1814215341f492899b55c639a95d9be05f3f3c4098aeb9a6550843a6c97d88b13af5805ac7c0ae69b0eff014464ffe344b8e9a60ffaab475deb7d964b105775d953e071039c68e4cb94dfeba33390ab31d1801136c7ba2154ae1ca312e6322a13fa8d991a9da6182d9dcb8", @ANYRES16=r3, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="85002a0d3000000018120000", @ANYRES32=0x1, @ANYRES8=r5], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x41, &(0x7f00000003c0)=""/65, 0x40f00, 0x23, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x0, 0x4, 0x1, 0x5}, {0x3, 0x2, 0x1, 0xa}, {0x2, 0x5, 0xb, 0x1}], 0x10, 0x5}, 0x94) r7 = accept4$nfc_llcp(r3, 0x0, &(0x7f0000000700), 0x800) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000580)=r6, 0x4) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000740)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215ed000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x88f64c99f2844f9a) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000004000000000000"], 0x10}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000540)={'wlan1\x00', @random="cd511c1dabaa"}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2.543860465s ago: executing program 1 (id=6680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000001e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1, 0x8, &(0x7f00000020c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x3, 0x5, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="850000009e000000620a00ff000000007900081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000200)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) write$rfkill(r8, &(0x7f0000000340)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r10, 0x0, 0xd3, &(0x7f0000000380)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "de5f370ab8185b899b4c37bec8b207006e868d6b7bbe274974e620dba98cc48b", 0x0, 0x80000000, 0x8, 0x7}, 0x3c) write$rfkill(r8, &(0x7f00000003c0)={0x9, 0x0, 0x1, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x7e, &(0x7f0000000400)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x48, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff, [0x2be7, 0x1]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002140)={{r4}, &(0x7f0000002180), &(0x7f00000021c0)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x80) 2.206912249s ago: executing program 4 (id=6682): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000640), &(0x7f0000000680)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000800)}, 0x20) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000240)={0x20000008}) close(0x3) (async) close(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) poll(&(0x7f00000000c0), 0x20000000000000b5, 0x9) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) unshare(0x8040480) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x1, 0x220, [0x0, 0x200000000380, 0x2000000003b0, 0x2000000003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000086dd73797a6b616c6c6572300000000000006970766c616e310000000000000000007665746831000000000000000000000076657468315f746f5f7465616d000000aaaaaaaaaa1a0000000000ffffffffffffffff0000ff00ff00007000000060010000900100006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000090000000700010000000000228726a06f4e0b5976c9d552c169b781f267f9480489f1801ab0023bea69bb9d786fb46dc4b9923b76b8d5892580ff831e07fd46c95b9caff25bced5ae73828b000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000002000000300a010000000000ed4fc91f18acdb177f2bc81cc9709fc318a82fc0aeb23d10ccd62348531f591dc4b1908f8cdc115e261f6cd19d3a6cdebcf1871712a5042d8cee36aab1acb99c000000004155444954000000000000000000000000000000000000000000000000000000081ef1b43600"/544]}, 0x298) 1.945568299s ago: executing program 3 (id=6683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.834986707s ago: executing program 3 (id=6684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="00020000052e7377f0a1259493ca00c2d1b300"/29, @ANYRES32=0x0, @ANYBLOB="0040000040060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 1.523215229s ago: executing program 0 (id=6685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.441681601s ago: executing program 0 (id=6686): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) r2 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000016c0)=0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14b38d67b5d1d8c3f9000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x14, 0x3a, 0x301, 0x4070ad2d, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000400)=""/4076, &(0x7f0000001400)=0xfec) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000280)={0x2017be01}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@loopback, 0xd, r1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x50000) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80020000, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000001480)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x41) r9 = socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001580)={0x716b, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000015c0)={r10}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000014c0)=@assoc_value={0x0}, &(0x7f0000001500)=0x8) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)={0x578, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x567, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @generic="971ed308218750518325cac8c266a8c6efe4fbf992916db05a05ae089f966b16abb07a8f70b234f5fec1d34930936f49dfdd8557c4137d225914bb402fb719c9ab65dae93b236b", @nested={0x50d, 0x53, 0x0, 0x1, [@nested={0x341, 0xa1, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd}, @nested={0x4, 0x8}, @nested={0x18c, 0x159, 0x0, 0x1, [@nested={0x185, 0xbf, 0x0, 0x1, [@generic="201f1c4f9cbb5059e2af1cd475304dc44e575932d0f44e295b17ad64596912bb755ec1cff201a7ed6f6bcd509f103bf472db0f9e99571eeda30e59f253e18a7964cbe209365d12db948738b52a2bb79ce24cf84ac76a3a6635a1631755a776c572335a2ba969aa261943b04f599551c1abf473919794b9e84155191a0a6de820a2db0605b8b7651d36aa37a444d037d6e365e082fe02307c02f5de1b9aefafec1df6a0f3d488de0cdc32169706e7a17fd97d4af6cc984f2045e4514474f4761f90e0548e397985b8de87e39c871a61c5a5cdf48074259344c8efb011edcd93a155e29e8bee148cd3c3cbaa30e698351b", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x164}, @typed={0x2d, 0x8, 0x0, 0x0, @binary="553295681f915005eabd0a04846893601feb1a6b9a1948fc64208ba5269375fe27a9fa7c92ee8dbf26"}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0xfffffffffffffffe}, @nested={0x4, 0xd4}, @nested={0x4, 0x73}, @generic="d38d396b7e000bd7e4f853e80af53261abf09a3c06f88301ada63168cd6ab0f65d6514332803aa8a82e18cfe6a738f3e45260b7614"]}]}, @nested={0x4, 0x3a}, @generic="fc5043a0a36c5159202932748e8e035970d331a25cfd4652e385a1564becc72900cb58235836176154967f4a7f6f7cc63d64af918c4052fc5239e50509aed2deb4d9c73350c66bd3c12a9a620385ea406be654303fbb35d42162fb44017cf778067fddc1a7d830e9ebb844209f76256c1df734f92cfd5d4243b5af3416724157ee3dbb810e57ec533ed96737d9d9d9b81d498d77d4f070636a81e59c2b7879b80ec7a090349e649a3131ce3e81d4510bfa66dfcffcfb0378a5d1e8bb82c0c41f907a93c28ac2d56cbaef76bbb9e1e6f533bb12f4d021d874aed32dc19472249f", @generic="87fb6cb18d07965800db759099ce10a76f0e476e7efaf095c695faac8fba8a87b62df6ebab20c4dcc7531634ed7333ad1f80d7d1f896b4e01065bda2ccdc25dfb28e3232a152f02e65cd88a3911229bbfcbda8def59f4bf3f54393070a24566925761381dd9c3a4fa5c6c9d46bac197109d3e0dfbcd7d1c72dc66089ac881df477999a409a31cc4bf9b1cca7c9de40c804ea65358ac29afe9eede9523d893ee2c9a217201b1831ff3175d9ec47a8ce4d41", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x17}, @nested={0x4, 0xde}]}, @generic="d8a8f50b13e191de5f49eba9fb5063180a46a5fb943291af0a8c76fbe3b7a499ca5fa16861cd261aeadf6f79ad05197e06f69d6459", @typed={0xc, 0x61, 0x0, 0x0, @u64=0xffffffffffffedfa}, @nested={0x181, 0xb9, 0x0, 0x1, [@generic="3e317a10dc2ca9b5e9fd43759ba64dd1177ad912ffe80617b880c1c33d60419dce1cc496de634e7ed187b97e391d9cea220ef1f2fa181915c56fbab8cf6be63dfe66f0cdbb4da2775e31fff7a950b7135f029e3f232e94b53ee97a668181b38edf50cd6009dbf02f075b7c0e0a1c0941e847921b973cefac9a71a9e6e6b65b329bd398beaacbb4f76ef26a9a1a816964155c346d9eaa4c5ae970cd9761d68c1ab4a3ece6f3eda8fac6e5aded7fdf748beb3b389e81499d462e4e3cb0f0c2dd17225095e0564c688dbcec198d15e69c409a6dfb96295cde64280291585e6d", @typed={0x8, 0x81, 0x0, 0x0, @pid}, @generic="9d7b38729520c6bdcf9ec1564000bee62170f76e48c137c294c5eee4ff2833f0bcdd4acbd55b6b3105e348c8c1af5f554acb6ca907a746fd126638c3f07c004f19837c3dd5e25a90e0453482e459e5b65fbca7a0f774616cca66ee4d54638c598251f8a4c0c4e42da9952b2f248d982759ec1341302d97", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x6}, @generic="0216c77976a8f67cb427f0c553c2f81ce9bb0239"]}]}]}]}, 0x578}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000001540)={r11, 0x3}, 0x8) listen(r7, 0x2) unshare(0x40000000) 1.354772263s ago: executing program 2 (id=6687): r0 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept4$x25(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0x7fff, 0x400, 0xfff7, 0xc, 0x2, 0x80, 0xe, 0x1, 0xc7, 0xfffffff7, 0x1, 0x25e, 0x40, 0x7, 0x52e9, [0x40, 0x1]}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 1.303655166s ago: executing program 4 (id=6688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20}, 0x1c) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd400000000000000000000000000000000000000000000000ff02000000000000000000000000c5014e254e2000189078040000000500000009000000000000"], 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)=r1}, 0x20) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000d80)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x4, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000001080)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r6, r0, 0x0, 0x7d1d7457) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.303101176s ago: executing program 1 (id=6689): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x9) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000bc0)=0x2a0) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000400)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2111c2", 0x3}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008440) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000940), &(0x7f0000000980)=r7}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000b40)=r10, 0x4) 1.082969697s ago: executing program 2 (id=6690): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x64, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x42, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e840d05bc5c867495"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x160, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x9, 0x19, 'pim6reg1\x00', 'ip6erspan0\x00', 'team_slave_1\x00', 'veth0\x00', @random="f230984566b5", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x1d8) 1.002281505s ago: executing program 3 (id=6691): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x6, 0x4e24, 0x7, 0x2, 0x20, 0x80, 0x32, r1, r2}, {0xc, 0x2, 0x5, 0x1, 0x0, 0x2, 0xe, 0x8001}, {0x3, 0x2, 0x8000000000000001, 0x4}, 0x9, 0x6e6bbb, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x3505, 0x4, 0x3, 0x60, 0x5, 0xffffffff, 0x3}}, 0xe8) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr=0x64010102, @in6=@local, 0x4e24, 0xa, 0x4e21, 0x80, 0xa, 0xa0, 0x80, 0xbd, r1, r2}, {0xe, 0x100000000, 0xb42b, 0x2, 0x7, 0x100000001, 0x8001, 0x80}, {0x9, 0xd, 0x80000000, 0x7fff}, 0x2, 0x6e6bb9, 0x1, 0x1, 0x1, 0x77cbe10e1338381c}, {{@in6=@mcast2, 0x4d6, 0x32}, 0x2, @in6=@loopback, 0x3507, 0x0, 0x2, 0x5c, 0x8, 0x7fffffff, 0x3}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getneigh={0x14, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000440)=0xc5) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0xe, @mcast2, 0x6}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x138, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x2f, {0x1, 0x3, [{{}, @broadcast, 0x8, @void, 0x2e}, {{}, @device_a, 0x5, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x7fffffff, @value, 0x5}]}}, @random={0x8, 0xe4, "36e2953790d0bf63bd930db11946bcf8d2b3c6d0d1a8ca5a55535e4d019bdaf5d4852f6cc578f5199fe3d8bedcfdfb40b232200d113affff019c81e95854029fb00d3c7e50216299019fbb1ff66c0e0237e20e384603e30bc56c5ad550ba5c3f2c885b633fd498afb764b06577240ecc33d2a8554b94b01b5031bc481737a63e4feb96c11d0d4735d7f121174d9edbf2cc849989a1b327c4e04b4c2cf16f7e89e872315acbe7109ba984e3aeb245d9e13c32a6cf7d491ae9e768b9fa3083b1f881930245263b9244be01f4590fd1877debb3823e473bbbbf988459cacdd9c0735cdff000"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x196a}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000800}, 0x41) sendmsg$nl_generic(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x148, 0x3b, 0x10, 0x70bd2b, 0x25dfdbfc, {0x1}, [@generic="0bdf63a108ff2dbb2b2a0685aa8c0853cda8e8269d619e3f1550dd59351fc9c525557996b4edce82857fe7fe47399165996fb2c30a5a34a8", @nested={0xf8, 0x10d, 0x0, 0x1, [@nested={0x4, 0x12d}, @generic="6cbccdc3b76db80026541dcc7955bf5ae76e4e35c543d29847be50845b6a1feeb4d27d376533bed640f70867599f8f88ba3d1a1dec513cff426b8232d7edea07ee8cc6aee240d22c1d9e9b2b3f27ac20113fdc12588834f17678986b92914365ea9f43b85a3190b9b2dfed1a0f28cf18e6b6d15bd5105f673f29e2b468c73be373602143ebc6b97be0d4cc51b1b7713928499ed7d9c85a957b87a2afe74fbcd95625861085f2e423c0891262defd526c09298529be4f1ccf1a9b4263968271552a2f16d34dd8ea95654bfcea69433e9ab96c1464e1f951286f11bd1b37af887e16c6c1306f6b3a1d3a47fe75009e2a12"]}, @typed={0x4, 0x87}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x8081) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x26}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x60}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000d40)={r5, &(0x7f0000000c40)='\x00', 0x400400, &(0x7f0000000c80)={@align=0x9, {0x0, 0x3, 0xffffffff, 0xa}}, 0x2, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x7}) getsockname$l2tp(r8, &(0x7f0000000d80)={0x2, 0x0, @private}, &(0x7f0000000dc0)=0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={r8, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e80)=@generic={&(0x7f0000000e00)='./file0\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r5) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd66, 0x3d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xe4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40881}, 0x40011) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001100), r5) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r13, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0xc001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001200)={0x7, 'macvtap0\x00', {0x8}, 0x5}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r13, 0x6c21dd0a130b92da, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, r10, 0x507, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x20}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "582ec0f6a05932d0e000023c4cc515aa"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f2c73212f17350452cbac7e05f494698"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b3c580791bf9ffe73e8792a68bddd356"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1d7ec54dc59fa5b03535208fbe074483"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) 955.646159ms ago: executing program 4 (id=6692): unshare(0x2a060400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 954.479216ms ago: executing program 1 (id=6693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="21825c23"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x0, 0x5, {{0x3e, 0x4, 0x3, 0x1, 0xf8, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0xc, 0xe8, 0x0, 0x8, [0x3, 0x3]}, @timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0x1, [{@empty, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0xe2f2}, {@private=0xa010102, 0x100}]}, @cipso={0x86, 0x1a, 0x2, [{0x5, 0x8, "aaf9e0945477"}, {0x7, 0x3, "8e"}, {0x1, 0x9, "2a7cb7b5bcccf2"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe1, [@empty, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xda, 0x1, 0x5, [{@loopback, 0x9}, {@loopback, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x1}, {@remote, 0x5}, {@remote, 0x8}, {@broadcast, 0x4}]}, @noop, @noop, @cipso={0x86, 0x3f, 0x3, [{0x7, 0x7, "c9fd861521"}, {0x6, 0xf, "dc40eaa46210738d721e0e86dc"}, {0x2, 0x7, "020512c662"}, {0x6, 0x2}, {0x6, 0xa, "949b82c255f1092b"}, {0x0, 0x10, "99141f96d0235f9ab6de20eb8787"}]}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x1, [0x6, 0x3]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x822}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x1c, 0x400, r2, 0x6, '\x00', r1, r2, 0x1, 0x2, 0x5}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000008c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x68, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}]}]}, 0x68}}, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000240), &(0x7f0000000280)=""/3, 0x2}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000009000000000001000000852000004649030095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 890.012846ms ago: executing program 3 (id=6694): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) 857.799859ms ago: executing program 2 (id=6695): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 639.030225ms ago: executing program 1 (id=6696): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 595.010688ms ago: executing program 2 (id=6697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB='p'], 0x31) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000000000008001e00300b0000080001003f"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 594.603441ms ago: executing program 3 (id=6698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0100000a0001007770616e3000000006000a000100000006000800ffff0000050007000b000000050017000f000000050018000f000000050019000100000005001a000000000005001b"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404003c0012800b000100697036746e6c00002c00028014000200000000000000000000000000000000011400030000000000000000000700"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 430.232332ms ago: executing program 1 (id=6699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000440)={'veth0_virt_wifi\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@arena={0x21, 0x0, 0x0, 0xe, 0x40400, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f00000001c0)={r4, &(0x7f00000000c0)='\x00', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x80, 0x1000]}, {0x8, 0x5, 0x7, 0xba41}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3bf3}) 302.412957ms ago: executing program 2 (id=6700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x4000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x4, 0x9, 0x800}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000440), 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000be712e866d57e4f8c7c15cd96c4173b6244228365581c6c69b22db73644bf1a7a11690d47e8427124fbe7550b66f0e7a5855a75a3b9f8b0ec1d89bb813783387c3de6ba6895745a0b444df8bcd9fe5281ab0f6ba448a14ea7c55fb664b50ce12edca54f6e40522d9cab3fcc2bdc54b4392b6db56a149e96dcb4728c8d14df267bc060095547e601c74fbf9787629ab06e66f0d6d312e196905a3f349d08065bb65969384bf7c5d8aa4d33d0c379b68ffd845f4647b8d98", @ANYRES16=0x0, @ANYBLOB="210327bd7000fcdbdf25040000000c0001800800030001000000"], 0x20}}, 0x4000000) sendmsg$kcm(r5, 0x0, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) write(0xca, &(0x7f0000000700)="0434aefa7597f118e1", 0x9) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="40005200060010"], 0x24}}, 0x44112) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) sendto(r9, &(0x7f0000000080)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)) 301.763289ms ago: executing program 4 (id=6701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000540)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) 230.387168ms ago: executing program 1 (id=6702): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) (async) r3 = socket$inet(0x2, 0x2, 0x0) r4 = accept(r3, &(0x7f0000000280)=@l2={0x1f, 0x0, @none}, &(0x7f0000000300)=0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x194, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x60}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x12, 0x0, @random="2f1011aef608eac4303ffb217f15"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000001}]}, @NL80211_ATTR_IE={0x38, 0x2a, [@gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6}}, @mic={0x8c, 0x18, {0xa65, "22ac075f154d", @long="29e9662c285196e94fed59cd6ed6102d"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf0, 0x1}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x235c}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_IE={0x8e, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x10e, 0x3}}, @preq={0x82, 0x83, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x7, 0x96, 0x401, @device_b, 0x8, @value, 0x2, 0x43, 0x9, [{{0x0, 0x0, 0x1}, @device_b, 0x8}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffb}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x2}, {{}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0xd0}, {{0x1}, @broadcast, 0x6}]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008080}, 0x84) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000180)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) listen(r6, 0x5) (async) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580020008"], 0x4a) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 130.43405ms ago: executing program 3 (id=6703): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000100)='%[\x00', 0x2000, &(0x7f0000000140)={@_ha_fsid={[0x209, 0x400]}, {0x4, 0x9, 0xcb3e, 0xa0db}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0xb}, {[0xffff874a, 0xd, 0x7, 0x8]}, 0x80000001, 0xfd, &(0x7f0000000200)=""/253}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001e80)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001f80)=0xe8) sendmsg$netlink(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000004c0)={0x18, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x50, 0x0, 0x0, @uid=r2}]}, 0x18}, {&(0x7f0000000500)={0x2f4, 0x18, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1bb, 0x162, 0x0, 0x1, [@nested={0x4, 0xe0}, @nested={0x4, 0x78}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0xf91}, @nested={0x4, 0x120}, @generic="1e1f0bb7ea3d8670c50a218a1ce35a2372df78e15eb506874ac877787bb30df5c60172e4f1100f84122e004b8c05989e8393dcd88e3ac5a519c9936308fb972ad19ec7f2faaa5482dbf02c2bb62e3d78650725dcaf68c906d0e944e0ebc647e410c93b369049860cc64846c8e38ea2aaa36ddd9a22752a89e5832d1e840b2ce55186f55d09f317c4b3d367ae8c352863910c0ebb98d2e3dec727d1766615d5d96d8a9ed1d69af96dc8", @nested={0x4, 0x13b}, @generic="46d3cfae02cecc57d75cbb31236c8cf03ce4ce4fbf56761123195eec37f73acb94739860680f2c2f958c1ad78d16b4209d1d211ef8c2c076814739cb2ff73f7d6133a52449423ffd573163ca9d84baeeef011e36cf401777816dec776aacfc0ce46694a05a0f65d0069c51ab219b4ded7b43f2482e4b7903165922f1da168200493fe8da4202dcbbcc1c6428c347e14aef99880b4fb0d4e534c1543dd83ad51801db5494e2184d4cba2ea8153b663452234098a787774a878ae45853423f6a611987b469394fe51dcd3335da1eea8cae5194c341fb78f8f23b14ee834b1d3c83c9e52b39a46326bbcff4e7f5c3bc", @nested={0x4, 0x143}]}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="ed6e420e0e16dfa1d9a0a488d830249ea3c7d5561d983c75ea3e37a2a6a2dbb8f31a055b7a7b5d719e4c484eff6762cfdf", @generic="8b5d117e98d0cf2fa18f9e9eb7ece23bb8f1e6dcec8cdb220041d6065f5786634db57c887a1c1e5aaec7b1ffc19ca77aa6deaf24480812f527bc1d661829f403b0127f573c2ef69348704e7617adc373308dc9f762ad8adf4b6409210301ccb8d3e38f53e05ff4c3775b89c6e6761efffba76f2c0e20f6991c3ada6e080f1f022b587d51e6ca3734507ae52bb5b5b4c5547dbc50c712b3ad2452546a5e57a50473901c0cb2b67546c79105a4d557645b91633435fb0cd272256efc43025f4a43c9d140a71725b8a2bc25b2aa43e7f3ce4b1a441524af35309c81f734b41a8dc71a3bfb3027cffdae7beff4d8720a75"]}, 0x2f4}, {&(0x7f0000000800)={0x48, 0x3f, 0x620, 0x70bd29, 0x25dfdbff, "", [@generic="f968123c25a4551faefd7471ceda74b1", @generic="433b4a5f2aabd3aa3b6ac9fcd61ec716c4da3f8410ebb57a3259b8236b253510aaa3f49b60f0"]}, 0x48}, {&(0x7f00000008c0)={0x198, 0x1e, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x17c, 0x151, 0x0, 0x1, [@generic="375b980641b2a042c1e1ba349ab9ce06f8b79080219920788a5994f814ecdc75ad087ae9a852704a8af04b5fc86c5939b86fb2a74b92dd4a377206c548ae95eb89d695cb53b599fb5a652203d6ad67147d37d8ec184e7af04399c2dfee15bb76b09385ba5550eab373ec3a3144d42011166e9c1d5b3ae3c345b59fc6e7a29c0c37c71bc7089e3e4c0dafbdc5cdf37656a3fb8efea5fde066a69a1ef76c194fdd8fc9c9c571312842b298d19837dbc96c2b76cc96b0e6", @typed={0x8, 0x165, 0x0, 0x0, @uid=r3}, @generic="04ce0076138cb0f189f29ac6c4af495be07d9ba8f45863abba9d223286a540c67ede358f9aabddcb98e8a5bab8815c83b90ebb2c627f278dc8eb25e300a5fe96f5ab3a0caa8599eece3954292a8311d07cc96ce71d4a18fcce036aa4f90135efde4265db5d78fb32cf3e4e68a7e88f52d057b76a5a1778a1fe40d08f409fb6b7a50a8c01ee48a59c64338eb69ce902631cc8438b56a868158ca3f1be14335874131bb40616d66202a029b9b4cb36e9aa777672ffff529036ef95"]}, @typed={0xb, 0x5, 0x0, 0x0, @str='({+}%,\x00'}]}, 0x198}, {&(0x7f0000000bc0)={0x1290, 0x13, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x4, 0x7a}, @generic="15898e18c9d20618f933737f0ff5b35e6f9bf6a9441591d88580b1db1d6c0ccc5bd4427ba118e7646d3c03b6074954e3de8a0e4bbd1b9c02ecec82fb7dfb41934c80f91a176df6222678e2dd03c7f0306012403da72f808c5abf465153437abb77b94b6ff114f10ec7813182622e64d3c80f8e019cf0e762492219a4856a5d4714ace87cf2ce66a5e1b4b3727ae9582cf40de154007be644798b2f06b7a6daca9dd7954924ca2cf5f7ac188967", @nested={0xd1, 0xa1, 0x0, 0x1, [@nested={0x4, 0x71}, @generic="5494e1daa6ca89c921a0a87511f700cae32e7500", @generic="00b59925bf8a8864853d88123a085c1bec7f15b28204d9584d711d0fe883b7727f0c193517fd3a1c0139cd1426c0fc3332f8ad33904f4a68fb07439889b7c53cdd5a5cdd1a118d339b53be57a66b8aa24506b214ac6d7cbe608515e54ce87f60eb8bda1d66f2d213fc8f53dd968177f1b27a761acbdd4543567f6b7ae767fc76bbf137e6917bad8c94d6adfe796858654a0b4a8770caa697e2403ac534fd599b7a8eef1baf29", @generic="9d64219af11519", @typed={0x8, 0xda, 0x0, 0x0, @u32=0x7}, @generic]}, @typed={0x9, 0xa, 0x0, 0x0, @str='dctcp'}, @nested={0xe9, 0xee, 0x0, 0x1, [@nested={0x4, 0x93}, @nested={0x4, 0x49}, @nested={0x4, 0x95}, @nested={0x4, 0x24}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0xd}, @generic="6581f4b1a65fa95f3e7ed2b7eafbb1b6696df5c645b9ae7dd3bdbb4705fcfa4065d47ec30af04c3ef3ddea909c3226bbee2970c167f82972a2e4c903b306fe807e46822330556c5e0d288683741ada7b86b1a496", @generic="57d1a9688684f9193382b61717e2450d2238fb289e3371000fa2c3e2d3f9393721d92239670d87731196065e25dae8f0c1b5f9be33521cfc6de511069050f6bdf73db1859f631a0fbd4a11d8661f2c9bbb333e0d1f2ef9f483c11a2bee148f3fde94e89a7259721adda462a42e2c26e9fb"]}]}, 0x1290}, {&(0x7f0000001fc0)={0x1fc, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, "", [@generic="9b0aa2598ef9421f106159d77e999ba2c2ae72a38a577e770cc4c73f51f83dd7b7e43475062a6ac39e6074436df4d3cd08a2b26c0293b450cd1d33bb5cd0f54f6117e6bf7b8600c8e4489ab010edd31454a4a5c8075e87bfa1142aab70f8f0c4af3a31782b7a13727abd676650c1103b3957b8d6e28ebfa7e4600caa8f010ef10e9c", @generic="cbc4845f036da84ee07486b3d1eb9b7ce149c6cb4c34b02c00d0e98579258c0d212a021f2c47412074a59a4e93b85e1df7970bfe", @typed={0x8, 0x6, 0x0, 0x0, @fd=r0}, @nested={0x116, 0x112, 0x0, 0x1, [@nested={0x4, 0x62}, @nested={0x4, 0xee}, @nested={0x4, 0x3c}, @nested={0x4, 0x13}, @typed={0x9, 0x15a, 0x0, 0x0, @str='dctcp'}, @generic="6974da79f3fd08590ce88ee99cdce2a6b98aa1d280f6ff010ea581017bfc747d2d1e859aaa6cc0c76103f78e362791f948fd59749cd5a48cb587e7bfe86953bf8148712f1d260758882cef77a1a534eca4d60c3973728dd1420ea1e54a2f039fb26ddc21721bdafce53808ab0cecefc026cca8d378566134ca66d7060aeb4e0232b8f8d6b5d19ef64b93df7da7ac6fbf140b3e4841ef3eef187a30b3d7e705f76b0e30517f6e7e396fc8a4e8c075ca196903b34ec47d5554fc367134f820ee0211e0ac7c8d3ee9fd79240b38b31c973732f4852e144f0c8469b56117bcd780222c5a5bcaf41695796f812a8a6d230f844bb327c32c10"]}, @typed={0xc, 0x111, 0x0, 0x0, @u64=0x7ff}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r5}]}, 0x1fc}], 0x6}, 0xc801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r1) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4) (async) sendto$inet(r1, &(0x7f00000023c0)="f46312197e23e522a3cb3dd6e48a30d8df21172ea1fbf7c25b32258a00e3fd456242947f2836dca430dc91ac914b5a9991eb850732b4143d4bfa6083bdb169864a9d35fc0c2f4d845eea215dd79ae327c4d900db6ea1434a33c2af62f43b0586dc08c837f7fb0cdf848dd5", 0x6b, 0x810, &(0x7f0000002440)={0x2, 0x4e24, @private=0xa010100}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) ioctl$NILFS_IOCTL_RESIZE(r7, 0x40086e8b, &(0x7f0000002480)=0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000024c0)={0x2, 0x7a6}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002540)={r8, 0x8, 0x20}, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x48, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x8004) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000002940)={{&(0x7f00000026c0)=[{0x100000001, 0x1, 0x2, {0x0, 0xe}, 0x4, 0x7, 0x2}], 0x1, 0x40, 0x8000, 0x81}, {&(0x7f0000002700)=[{0xd}, {0x4, 0x6}, {0x7, 0xfffffffffffffffe}, {0x3, 0x6}], 0x4, 0x10, 0x0, 0x10001}, {&(0x7f0000002740)=[0xfffffffffffffffd, 0xd, 0x337b, 0x5, 0x7, 0x5, 0x2], 0x7, 0x8, 0x7c, 0x1}, {&(0x7f0000002780)=[{0x7, 0xfffffffffffff800, 0x40, 0x4}, {0x4, 0x1ff, 0x5, 0x0, 0x6}, {0x2, 0x1, 0x8000000000000001, 0x101, 0x9}, {0x2, 0x9, 0x800, 0x7, 0x8001}, {0x6, 0x654f1ebf, 0x6, 0x228, 0xe}, {0x3, 0x26, 0x9, 0x10001, 0x1ff}, {0x4, 0x3, 0xfffffffffffffffa, 0x3, 0x2}, {0x5a, 0xd, 0x4, 0xfff0000, 0x8}, {0x14df6a1f, 0xb, 0x3, 0x8, 0xfffffffd}], 0x9, 0x28, 0x8000, 0x10000}, {&(0x7f0000002900)=[0x6, 0xab23, 0xfffffffffffff800], 0x3, 0x8, 0x5, 0x10}}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003a80)={&(0x7f00000029c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x8, [@int={0x2, 0x0, 0x0, 0x1, 0x4, 0x42, 0x0, 0xe}, @struct={0x10, 0x9, 0x0, 0x4, 0x1, 0x3, [{0xb, 0x5, 0x101}, {0xf, 0x0, 0xd2}, {0x5, 0x3, 0x8}, {0x2, 0x2}, {0x7, 0x0, 0x7f}, {0x0, 0x5, 0x2747}, {0xa, 0x0, 0x200}, {0x7, 0x2, 0x9}, {0xf, 0x2, 0x200}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x2e, 0x61, 0x30, 0x5f, 0x2e]}}, &(0x7f0000002a80)=""/4096, 0xb4, 0x1000, 0x1, 0x9, 0x10000, @value=r1}, 0x28) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000003ac0), 0x8) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003b40), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003b80)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000003cc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1871f460a6f4646f}, 0xc, &(0x7f0000003c80)={&(0x7f0000003bc0)={0xa8, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xf, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) ioctl$FICLONE(r1, 0x40049409, r9) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003e00)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r10, 0x40285881, &(0x7f0000003e40)={r7, 0x0, 0x0, 0xa26, 0x7a, 0x1}) (async) socketpair(0x2b, 0x1, 0x3, &(0x7f0000003e80)) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003ec0)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000003fc0)=0xe8) 71.62955ms ago: executing program 4 (id=6704): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newnexthop={0x8c, 0x68, 0x300, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x1, 0x0, 0x8}, [@NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xcc8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xd}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xffffffff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3ff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 2 (id=6705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000e00000000300000006"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0xbf93, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000200), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000007000000ff00000007000000000000002fd1a5d1fa9d5d3eb87bd2e7e19e2b7302974d0c98d3631300a3c4930bf70600000000000000d374c657bf4f7d2f3bc3cf1350a51a8c294570335ff333e99519a9d26a8e843c15dde7be66ffba5db14b857d7523927976e4418ba4c9a52dc3f57d837ea877aa0555bd7218d801c47c73ba7c424c472fdf90e4", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000740)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) kernel console output (not intermixed with test programs): .124013][T29319] bridge6: left promiscuous mode [ 948.220483][T29330] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5589'. [ 948.247443][T29321] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5588'. [ 948.293892][T29314] macvlan3: entered promiscuous mode [ 948.293916][T29314] macvlan3: entered allmulticast mode [ 948.294641][T29314] bond8: entered promiscuous mode [ 948.294658][T29314] bridge5: entered promiscuous mode [ 948.326109][T29314] bridge6: entered promiscuous mode [ 948.343100][T29314] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 948.364669][T29314] bond8: left promiscuous mode [ 948.364695][T29314] bridge5: left promiscuous mode [ 948.364956][T29314] bridge6: left promiscuous mode [ 948.494155][T29333] syz_tun: entered promiscuous mode [ 948.971458][T29354] veth0: entered promiscuous mode [ 949.028489][T29350] veth0: left promiscuous mode [ 949.107064][T29357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.151392][T29360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5593'. [ 949.433359][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5596'. [ 949.817806][T29382] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6erspan0, syncid = 0, id = 0 [ 950.017642][T29386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5600'. [ 950.368670][T29387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5600'. [ 950.840790][T29412] team0 (unregistering): Port device team_slave_0 removed [ 950.866646][T29412] team0 (unregistering): Port device team_slave_1 removed [ 950.884802][T29412] team0 (unregistering): Port device bond4 removed [ 951.491495][T29404] ip_tables: iptables: counters copy to user failed while replacing table [ 955.002054][T29477] validate_nla: 13 callbacks suppressed [ 955.002117][T29477] netlink: 'syz.2.5627': attribute type 2 has an invalid length. [ 955.114293][T29477] !: entered promiscuous mode [ 955.236419][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5627'. [ 955.236515][T29477] !: left promiscuous mode [ 955.320839][T29482] netlink: 'syz.2.5627': attribute type 2 has an invalid length. [ 956.220840][T29494] pim6reg: entered allmulticast mode [ 956.251689][T29493] xt_nfacct: accounting object `syz0' does not exist [ 956.305024][T29482] !: entered promiscuous mode [ 956.312712][T29492] pim6reg: left allmulticast mode [ 956.912530][T29514] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5635'. [ 956.934053][T29514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5635'. [ 957.389427][T29521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5638'. [ 957.742684][T29532] tipc: Enabled bearer , priority 10 [ 957.754699][T29527] netlink: 'syz.2.5641': attribute type 9 has an invalid length. [ 960.683329][T10913] tipc: Node number set to 1515028159 [ 961.288807][T29580] tipc: Enabling of bearer rejected, already enabled [ 962.016779][T29603] syzkaller1: entered promiscuous mode [ 962.016817][T29603] syzkaller1: entered allmulticast mode [ 962.786228][T29622] netlink: 'syz.0.5662': attribute type 1 has an invalid length. [ 964.039845][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5668'. [ 964.539918][T29655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5670'. [ 964.539953][T29655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5670'. [ 964.635036][T29655] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 965.738046][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5676'. [ 965.809009][T29678] sctp: [Deprecated]: syz.3.5677 (pid 29678) Use of int in max_burst socket option. [ 965.809009][T29678] Use struct sctp_assoc_value instead [ 965.809071][T29679] sctp: [Deprecated]: syz.3.5677 (pid 29679) Use of int in max_burst socket option. [ 965.809071][T29679] Use struct sctp_assoc_value instead [ 967.011338][T29697] netlink: 'syz.2.5680': attribute type 10 has an invalid length. [ 967.573926][T29707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5684'. [ 968.046850][T29719] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5688'. [ 968.144297][T29724] netlink: 'syz.3.5688': attribute type 1 has an invalid length. [ 968.324695][T29724] 8021q: adding VLAN 0 to HW filter on device bond12 [ 968.474392][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5691'. [ 968.474449][T29733] nbd: must specify a size in bytes for the device [ 970.974034][T29730] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 970.981043][T29724] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 971.026056][T29735] bond12 (unregistering): Released all slaves [ 971.740158][T29763] SET target dimension over the limit! [ 971.889335][T29765] tap0: tun_chr_ioctl cmd 21731 [ 971.997526][T29773] syzkaller1: entered promiscuous mode [ 971.997552][T29773] syzkaller1: entered allmulticast mode [ 972.279228][T29775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'. [ 972.279271][T29775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5694'. [ 972.324706][T29774] ip_tables: iptables: counters copy to user failed while replacing table [ 972.732448][T29781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5698'. [ 972.772444][T29781] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 972.807030][T29781] bond12 (unregistering): Released all slaves [ 973.086722][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5702'. [ 973.086752][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5702'. [ 973.556796][T29800] netlink: 'syz.0.5703': attribute type 1 has an invalid length. [ 973.929782][T29815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5705'. [ 973.947507][T29800] bond10: entered promiscuous mode [ 973.949997][T29800] 8021q: adding VLAN 0 to HW filter on device bond10 [ 974.045685][T29803] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 974.045713][T29803] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 974.045732][T29803] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 974.449918][T29828] nbd: socks must be embedded in a SOCK_ITEM attr [ 974.922472][T29836] ip_tables: iptables: counters copy to user failed while replacing table [ 975.397192][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 975.397234][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5712'. [ 975.468839][T29853] ip_tables: iptables: counters copy to user failed while replacing table [ 975.844493][T29857] sctp: [Deprecated]: syz.0.5715 (pid 29857) Use of int in max_burst socket option deprecated. [ 975.844493][T29857] Use struct sctp_assoc_value instead [ 976.741158][T29883] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 976.851324][T29892] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 978.142164][T29895] xt_IDLETIMER: timeout value is too big [ 978.254882][T29911] FAULT_INJECTION: forcing a failure. [ 978.254882][T29911] name failslab, interval 1, probability 0, space 0, times 0 [ 978.254915][T29911] CPU: 0 UID: 0 PID: 29911 Comm: syz.4.5724 Not tainted syzkaller #0 PREEMPT(full) [ 978.254938][T29911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 978.254952][T29911] Call Trace: [ 978.254960][T29911] [ 978.254971][T29911] dump_stack_lvl+0xe8/0x150 [ 978.255011][T29911] should_fail_ex+0x3eb/0x540 [ 978.255045][T29911] should_failslab+0xa8/0x100 [ 978.255076][T29911] ? skb_clone+0x212/0x3a0 [ 978.255101][T29911] kmem_cache_alloc_noprof+0x9c/0x600 [ 978.255129][T29911] ? skb_clone+0x212/0x3a0 [ 978.255161][T29911] skb_clone+0x212/0x3a0 [ 978.255188][T29911] __netlink_deliver_tap+0x355/0x6e0 [ 978.255227][T29911] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.255257][T29911] netlink_deliver_tap+0x19c/0x1b0 [ 978.255293][T29911] netlink_unicast+0x8c1/0xa80 [ 978.255338][T29911] netlink_sendmsg+0x7f0/0xb20 [ 978.255372][T29911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.255405][T29911] ? aa_sock_msg_perm+0x144/0x210 [ 978.255432][T29911] ? apparmor_socket_sendmsg+0x98/0x360 [ 978.255465][T29911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.255493][T29911] sock_sendmsg_nosec+0x14e/0x190 [ 978.255523][T29911] __sys_sendto+0x408/0x5a0 [ 978.255554][T29911] ? ksys_write+0x1e6/0x270 [ 978.255585][T29911] ? __pfx___sys_sendto+0x10/0x10 [ 978.255613][T29911] ? __mutex_unlock_slowpath+0x731/0x900 [ 978.255653][T29911] ? fdget+0x1ac/0x250 [ 978.255693][T29911] ? __pfx_ksys_write+0x10/0x10 [ 978.255727][T29911] __x64_sys_sendto+0xde/0x100 [ 978.255762][T29911] do_syscall_64+0x166/0x520 [ 978.255785][T29911] ? trace_irq_disable+0x3b/0x140 [ 978.255813][T29911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.255836][T29911] ? clear_bhb_loop+0x70/0xc0 [ 978.255863][T29911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.255884][T29911] RIP: 0033:0x7fe01fd9fb19 [ 978.255905][T29911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.255924][T29911] RSP: 002b:00007fe020bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 978.255946][T29911] RAX: ffffffffffffffda RBX: 00007fe020025fa0 RCX: 00007fe01fd9fb19 [ 978.255962][T29911] RDX: 000000000000006c RSI: 00002000000002c0 RDI: 0000000000000003 [ 978.255981][T29911] RBP: 00007fe020bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 978.255995][T29911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.256009][T29911] R13: 00007fe020026038 R14: 00007fe020025fa0 R15: 00007ffe465e97d8 [ 978.256047][T29911] [ 978.941080][T29913] syz_tun: entered allmulticast mode [ 979.024137][T29913] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 979.156894][T29912] syz_tun: left allmulticast mode [ 979.264644][T29917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5726'. [ 979.819301][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 979.819342][T29944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5730'. [ 979.946718][T29944] ip_tables: iptables: counters copy to user failed while replacing table [ 980.343183][T29950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5735'. [ 980.482060][T29958] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5735'. [ 982.740224][T29989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5744'. [ 982.875873][T29992] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5745'. [ 982.878301][T29965] xt_IDLETIMER: timeout value is too big [ 983.427612][T29997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5747'. [ 984.117399][T30010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5750'. [ 984.117445][T30010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5750'. [ 984.164498][T30015] ip_tables: iptables: counters copy to user failed while replacing table [ 985.084625][T30029] netlink: 'syz.1.5753': attribute type 1 has an invalid length. [ 985.084651][T30029] __nla_validate_parse: 2 callbacks suppressed [ 985.084664][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5753'. [ 985.097452][T30029] netlink: 'syz.1.5753': attribute type 11 has an invalid length. [ 986.125619][T30053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5760'. [ 986.494809][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5762'. [ 987.216123][T30070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'. [ 987.314859][T30052] xt_IDLETIMER: timeout value is too big [ 987.325118][T30052] ip_tables: iptables: counters copy to user failed while replacing table [ 987.340811][T30078] netlink: 'syz.4.5767': attribute type 11 has an invalid length. [ 987.355586][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 987.355823][T30079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5766'. [ 987.454286][T30079] ip_tables: iptables: counters copy to user failed while replacing table [ 987.920805][T30083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5769'. [ 988.505795][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5770'. [ 988.642226][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'. [ 988.693825][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'. [ 989.421233][T30108] bond10: entered promiscuous mode [ 989.424425][T30108] 8021q: adding VLAN 0 to HW filter on device bond10 [ 990.383573][T30141] __nla_validate_parse: 6 callbacks suppressed [ 990.383595][T30141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5784'. [ 990.383613][T30141] netlink: 'syz.4.5784': attribute type 2 has an invalid length. [ 990.383627][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5784'. [ 990.872634][T30149] netlink: 'syz.3.5787': attribute type 21 has an invalid length. [ 990.872657][T30149] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5787'. [ 990.872895][T30149] netlink: 'syz.3.5787': attribute type 5 has an invalid length. [ 990.872909][T30149] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5787'. [ 990.877718][T30146] netlink: 'syz.1.5785': attribute type 39 has an invalid length. [ 991.390135][T30149] erspan0: entered promiscuous mode [ 992.448464][T30177] tipc: Enabling of bearer rejected, already enabled [ 992.686272][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 992.853441][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 992.971057][T30193] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5795'. [ 994.690853][T30226] tipc: Enabling of bearer rejected, failed to enable media [ 994.837368][T30201] ip_tables: iptables: counters copy to user failed while replacing table [ 995.187000][T30236] 8021q: adding VLAN 0 to HW filter on device bond12 [ 996.534184][T30276] gretap2: entered promiscuous mode [ 996.564811][T30281] x_tables: duplicate underflow at hook 1 [ 997.501239][T30294] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.5822'. [ 997.501528][T30294] 0ªX¹¦Dö»: renamed from gretap0 [ 997.529983][T30303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 997.532534][T30294] 0ªX¹¦Dö»: entered allmulticast mode [ 997.649000][T30306] syzkaller0: entered promiscuous mode [ 997.649023][T30306] syzkaller0: entered allmulticast mode [ 997.697127][T30313] hsr0: entered promiscuous mode [ 997.776448][T30315] hsr0: left promiscuous mode [ 997.866535][T30313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 997.960473][T30318] netlink: 'syz.4.5827': attribute type 10 has an invalid length. [ 997.960497][T30318] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5827'. [ 998.618720][T30315] hsr0: entered allmulticast mode [ 998.618759][T30315] hsr_slave_0: entered allmulticast mode [ 998.619843][T30313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 998.643709][T30313] hsr_slave_0: left promiscuous mode [ 998.724773][T30313] hsr0 (unregistering): left allmulticast mode [ 999.668544][T30353] Unsupported ieee802154 address type: 0 [ 999.673132][T30353] Unsupported ieee802154 address type: 0 [ 999.793043][T30353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1000.967839][T30376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1002.074164][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1002.074203][T30393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1002.074219][T30393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1002.203191][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1002.239302][T30353] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1002.351333][T30395] geneve4: entered promiscuous mode [ 1002.363738][T12974] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.364592][ T1098] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.364658][ T1098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.364693][ T1098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.760018][T30413] xt_l2tp: wrong L2TP version: 0 [ 1002.984105][T30373] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1003.226450][T30373] syzkaller0: entered promiscuous mode [ 1003.226474][T30373] syzkaller0: entered allmulticast mode [ 1003.328394][T30373] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 1003.328438][T30373] 0: reclassify loop, rule prio 0, protocol 800 [ 1004.268017][T30418] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 1004.848944][T30447] xt_IDLETIMER: timeout value is zero [ 1004.861791][T30438] __nla_validate_parse: 2 callbacks suppressed [ 1004.861814][T30438] netlink: 14016 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1004.861830][T30438] netlink: 436 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1005.037921][T30438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1005.230664][T30441] syzkaller0: entered promiscuous mode [ 1005.230689][T30441] syzkaller0: entered allmulticast mode [ 1005.377096][T30462] netlink: 'syz.4.5858': attribute type 6 has an invalid length. [ 1005.650126][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5857'. [ 1006.383922][T30479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.281851][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.283665][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.308597][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.342261][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.353803][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.472631][ T4950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.474998][ T4950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.536289][ T4950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.654776][ T4950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.673490][ T4950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.842321][ T4950] Bluetooth: hci1: command tx timeout [ 1012.900299][ T4950] Bluetooth: hci1: command tx timeout [ 1014.523843][T30471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.523978][T30471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.858439][T30471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1014.934730][T30471] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1014.961684][T30471] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1014.977309][ T4950] Bluetooth: hci1: command tx timeout [ 1014.983759][T30516] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5866'. [ 1014.983792][T30516] netlink: 'syz.2.5866': attribute type 3 has an invalid length. [ 1015.018272][T30471] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1015.024712][T30471] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1015.061763][T30471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1015.324616][T17808] syz_tun (unregistering): left allmulticast mode [ 1015.717454][T30526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1015.717479][T30526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1015.874590][ T1098] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.874628][ T1098] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.292164][ T1098] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.292203][ T1098] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.594647][ T1098] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.594685][ T1098] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.927854][ T1098] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.927894][ T1098] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.056466][ T4950] Bluetooth: hci1: command tx timeout [ 1017.056792][T30546] netlink: 'syz.0.5874': attribute type 6 has an invalid length. [ 1017.313339][T30548] erspan0: left promiscuous mode [ 1017.420938][T30552] Bluetooth: hci0: unsupported parameter 5135 [ 1017.420964][T30552] Bluetooth: hci0: unsupported parameter 8192 [ 1017.420993][T30552] Bluetooth: hci0: unsupported parameter 5135 [ 1017.421007][T30552] Bluetooth: hci0: unsupported parameter 8192 [ 1017.682380][T30548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.711978][T30548] batman_adv: batadv0: Interface activated: veth0 [ 1017.733273][T30561] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1017.748700][T30560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1018.484168][T30554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5877'. [ 1018.549270][T30548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.591433][T30548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1018.591462][T30548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1018.642277][T30548] veth1_vlan: left promiscuous mode [ 1018.644634][T30548] veth0_vlan: left promiscuous mode [ 1018.663084][T30548] veth0_vlan: entered promiscuous mode [ 1018.679144][T30548] veth1_vlan: entered promiscuous mode [ 1018.702276][T30548] veth1_macvtap: left promiscuous mode [ 1018.713813][T30548] veth0_macvtap: left promiscuous mode [ 1018.714976][T30548] veth0_macvtap: entered promiscuous mode [ 1018.739761][T30548] tipc: Resetting bearer [ 1018.740060][T30548] veth1_macvtap: entered promiscuous mode [ 1018.794943][T30548] erspan0: entered promiscuous mode [ 1018.832125][T30548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.847427][T30548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.848582][T30548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.853630][T30548] geneve0: entered promiscuous mode [ 1018.909209][T30548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1018.929632][T30548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1018.950117][T30548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1018.953458][T30548] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 1018.997349][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.997460][ T6573] bridge0: port 1(bridge_slave_0) entered listening state [ 1019.001563][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.001673][ T6573] bridge0: port 2(bridge_slave_1) entered listening state [ 1019.149609][ T5789] s`z1: Port: 1 Link ACTIVE [ 1019.179940][T30564] bond8: (slave veth0_to_bond): Releasing active interface [ 1019.223520][T12985] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.239108][T12985] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.239292][T12985] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.241792][T12985] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.581741][T30497] rxe_eth0 speed is unknown, defaulting to 1000 [ 1020.104053][T30598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1020.157529][T12968] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1020.609659][T30214] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1020.866606][T30214] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 1021.228040][ T12] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 1021.276328][T30616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5886'. [ 1021.544674][T30497] lo speed is unknown, defaulting to 1000 [ 1021.591095][T30497] wg2 speed is unknown, defaulting to 1000 [ 1021.897984][T30629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1022.026549][T30630] netlink: 'syz.3.5888': attribute type 11 has an invalid length. [ 1022.174140][T30635] x_tables: duplicate underflow at hook 3 [ 1022.208367][ T1098] tipc: Resetting bearer [ 1022.374315][T30643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5893'. [ 1022.781371][T30662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5893'. [ 1022.783304][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5893'. [ 1024.116528][ T1098] tipc: Disabling bearer [ 1024.162773][ T1098] bond0 (unregistering): Released all slaves [ 1024.194835][T12968] smbdirect: ib_dev[syz1] removed [ 1024.196097][ T1098] bond1 (unregistering): Released all slaves [ 1024.236625][ T1098] bond2 (unregistering): Released all slaves [ 1024.270406][ T1098] bond3 (unregistering): Released all slaves [ 1024.317646][ T1098] bond4 (unregistering): Released all slaves [ 1024.358726][ T1098] bond5 (unregistering): Released all slaves [ 1024.381462][ T1098] bond6 (unregistering): Released all slaves [ 1024.409262][ T1098] bond7 (unregistering): (slave veth5): Releasing active interface [ 1024.413066][ T1098] bond7 (unregistering): Released all slaves [ 1024.473638][ T1098] bond8 (unregistering): Released all slaves [ 1024.504570][ T1098] bond9 (unregistering): Released all slaves [ 1024.709518][T30646] syzkaller0: entered promiscuous mode [ 1024.709552][T30646] syzkaller0: entered allmulticast mode [ 1024.714688][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1025.274827][ T1098] tipc: Disabling bearer [ 1025.274975][ T1098] tipc: Left network mode [ 1025.829998][T30688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1026.121749][ T1098] IPVS: stopping master sync thread 28673 ... [ 1026.735450][T30688] syzkaller0: entered promiscuous mode [ 1026.735476][T30688] syzkaller0: entered allmulticast mode [ 1029.047823][T30497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.048009][T30497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.048193][T30497] bridge_slave_0: entered allmulticast mode [ 1029.108982][T30497] bridge_slave_0: entered promiscuous mode [ 1029.183490][T30497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.183672][T30497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.183867][T30497] bridge_slave_1: entered allmulticast mode [ 1029.247011][T30497] bridge_slave_1: entered promiscuous mode [ 1029.909181][T30497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.933517][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1029.970493][T30497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.380534][T30759] netlink: 'syz.0.5910': attribute type 1 has an invalid length. [ 1030.512692][T30497] team0: Port device team_slave_0 added [ 1030.721571][T30497] team0: Port device team_slave_1 added [ 1032.991412][T30782] ip_tables: iptables: counters copy to user failed while replacing table [ 1034.008549][T30811] netlink: 'syz.0.5920': attribute type 1 has an invalid length. [ 1034.097677][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1034.097958][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1034.196386][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1034.201368][T30497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.201387][T30497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.201416][T30497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.503878][T30811] bond11: entered promiscuous mode [ 1034.509081][T30811] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1034.714903][T30812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1034.734889][T30812] bond11: (slave gre2): The slave device specified does not support setting the MAC address [ 1034.734918][T30812] bond11: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1034.778087][T30812] bond11: (slave gre2): Opening slave failed [ 1034.824802][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1034.847840][T30821] netlink: 'syz.2.5922': attribute type 1 has an invalid length. [ 1034.847864][T30821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1034.879482][T30497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.879501][T30497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.879529][T30497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.348232][T30497] hsr_slave_0: entered promiscuous mode [ 1035.356331][T30497] hsr_slave_1: entered promiscuous mode [ 1035.371104][T30497] debugfs: 'hsr0' already exists in 'hsr' [ 1035.371147][T30497] Cannot create hsr debugfs directory [ 1035.759954][T30831] syzkaller0: entered promiscuous mode [ 1035.760178][T30831] syzkaller0: entered allmulticast mode [ 1036.189261][T30831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1036.448791][T30834] tipc: Enabled bearer , priority 0 [ 1036.514416][T30837] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1036.773851][T30830] tipc: Resetting bearer [ 1036.950734][T30830] tipc: Disabling bearer [ 1037.132485][ T1098] IPVS: stop unused estimator thread 0... [ 1037.596940][T30869] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5932'. [ 1037.601805][T30870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5932'. [ 1038.028399][T30497] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1038.352513][T30888] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1038.380444][T30883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5934'. [ 1038.792103][T30497] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1039.066847][T30909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1039.073756][T30497] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1039.429612][T30497] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1039.744254][T30929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5942'. [ 1041.785091][T30497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1041.893399][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.921443][T30497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1041.978244][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.995981][T30497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1042.057578][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.058705][T30497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1042.064945][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.320678][T30980] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5950'. [ 1042.391204][T30987] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5950'. [ 1042.798454][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1042.798478][T30994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1042.977566][T30992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1043.200673][T30497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.293714][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.293846][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.293963][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.294066][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.294224][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.294327][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1043.418138][T30497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.484736][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.484849][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.572056][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.572162][T12985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.443565][T30984] xt_IDLETIMER: timeout value is too big [ 1044.467823][T31020] lo: entered allmulticast mode [ 1044.471518][T30984] ip_tables: iptables: counters copy to user failed while replacing table [ 1044.892700][T31020] lo: left allmulticast mode [ 1046.729152][T31066] FAULT_INJECTION: forcing a failure. [ 1046.729152][T31066] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.729183][T31066] CPU: 0 UID: 0 PID: 31066 Comm: syz.0.5966 Not tainted syzkaller #0 PREEMPT(full) [ 1046.729207][T31066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1046.729223][T31066] Call Trace: [ 1046.729232][T31066] [ 1046.729241][T31066] dump_stack_lvl+0xe8/0x150 [ 1046.729279][T31066] should_fail_ex+0x3eb/0x540 [ 1046.729310][T31066] should_failslab+0xa8/0x100 [ 1046.729339][T31066] ? skb_clone+0x212/0x3a0 [ 1046.729364][T31066] kmem_cache_alloc_noprof+0x9c/0x600 [ 1046.729390][T31066] ? skb_clone+0x212/0x3a0 [ 1046.729420][T31066] skb_clone+0x212/0x3a0 [ 1046.729447][T31066] __netlink_deliver_tap+0x355/0x6e0 [ 1046.729488][T31066] ? netlink_deliver_tap+0x2e/0x1b0 [ 1046.729526][T31066] netlink_deliver_tap+0x19c/0x1b0 [ 1046.729557][T31066] netlink_unicast+0x8c1/0xa80 [ 1046.729603][T31066] netlink_sendmsg+0x7f0/0xb20 [ 1046.729639][T31066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.729672][T31066] ? aa_sock_msg_perm+0x144/0x210 [ 1046.729699][T31066] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1046.729730][T31066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.729757][T31066] sock_sendmsg_nosec+0x14e/0x190 [ 1046.729787][T31066] ____sys_sendmsg+0x54e/0x850 [ 1046.729816][T31066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.729848][T31066] ? import_iovec+0x73/0xa0 [ 1046.729878][T31066] ___sys_sendmsg+0x2a5/0x360 [ 1046.729897][T31066] ? __lock_acquire+0x747/0x2de0 [ 1046.729929][T31066] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.729992][T31066] ? __fget_files+0x3a2/0x420 [ 1046.730015][T31066] ? __fget_files+0x2a/0x420 [ 1046.730049][T31066] __x64_sys_sendmsg+0x1b1/0x290 [ 1046.730075][T31066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1046.730122][T31066] do_syscall_64+0x166/0x520 [ 1046.730145][T31066] ? trace_irq_disable+0x3b/0x140 [ 1046.730172][T31066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.730193][T31066] ? clear_bhb_loop+0x70/0xc0 [ 1046.730219][T31066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.730239][T31066] RIP: 0033:0x7f64dcb9fb19 [ 1046.730258][T31066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.730276][T31066] RSP: 002b:00007f64ddb2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.730298][T31066] RAX: ffffffffffffffda RBX: 00007f64dce25fa0 RCX: 00007f64dcb9fb19 [ 1046.730314][T31066] RDX: 0000000020004094 RSI: 0000200000000080 RDI: 0000000000000003 [ 1046.730328][T31066] RBP: 00007f64ddb2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.730341][T31066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.730353][T31066] R13: 00007f64dce26038 R14: 00007f64dce25fa0 R15: 00007ffc4abb7be8 [ 1046.730388][T31066] [ 1047.052121][T31066] netlink: 'syz.0.5966': attribute type 6 has an invalid length. [ 1047.332486][T31067] ip_tables: iptables: counters copy to user failed while replacing table [ 1047.762453][T31085] __nla_validate_parse: 35 callbacks suppressed [ 1047.762501][T31085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1048.004249][T31085] bond13: option lacp_active: invalid value (5) [ 1048.041124][T31085] bond13 (unregistering): Released all slaves [ 1048.428943][T30497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.734885][T31100] netlink: 'syz.1.5974': attribute type 362 has an invalid length. [ 1049.456205][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.456232][ C0] bridge0: topology change detected, propagating [ 1049.456483][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.456498][ C0] bridge0: topology change detected, propagating [ 1049.672462][T31120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1049.829276][T31124] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5978'. [ 1049.864018][T31124] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 1050.451750][T31092] xt_IDLETIMER: timeout value is too big [ 1050.486365][T31092] ip_tables: iptables: counters copy to user failed while replacing table [ 1050.972571][T30497] veth0_vlan: entered promiscuous mode [ 1051.059600][T30497] veth1_vlan: entered promiscuous mode [ 1051.475036][T30497] veth0_macvtap: entered promiscuous mode [ 1051.535947][T30497] veth1_macvtap: entered promiscuous mode [ 1051.732651][T30497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.780866][T30497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.784782][T31154] netlink: 'syz.3.5982': attribute type 4 has an invalid length. [ 1051.784805][T31154] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1052.276607][T12981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.278191][T30214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.278230][T30214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.278265][T30214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.682257][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.682280][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.795705][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.795731][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.846575][T31173] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1053.227288][T31146] ip_tables: iptables: counters copy to user failed while replacing table [ 1054.247946][T31202] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5991'. [ 1054.517982][T31207] xt_IDLETIMER: timeout value is too big [ 1054.559587][T31207] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.528386][T31224] tipc: Started in network mode [ 1055.528410][T31224] tipc: Node identity 1000001, cluster identity 4369 [ 1055.528425][T31224] tipc: Node number set to 16777217 [ 1055.588799][T31224] tipc: New replicast peer: 127.0.0.1 [ 1055.591802][T31224] tipc: Enabled bearer , priority 10 [ 1056.547609][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1056.572815][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1056.585473][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1056.591923][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1056.594116][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1056.844967][T31243] syzkaller0: entered promiscuous mode [ 1056.844992][T31243] syzkaller0: entered allmulticast mode [ 1057.119867][T31257] x_tables: duplicate underflow at hook 1 [ 1057.382691][T31252] wlan1: mtu less than device minimum [ 1057.760101][T18780] tipc: Resetting bearer [ 1058.129697][T18780] tipc: Disabling bearer [ 1058.174654][T12986] smbdirect: ib_dev[s`z1] removed [ 1058.290619][ T5623] infiniband s`z1: ib_query_port failed (-19) [ 1058.751843][T31286] netlink: 'syz.4.6005': attribute type 70 has an invalid length. [ 1058.816783][ T5648] Bluetooth: hci5: command tx timeout [ 1059.189794][T12986] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.189832][T12986] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.571303][T31313] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 1059.860613][T31297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.944725][T31320] ip_tables: iptables: counters copy to user failed while replacing table [ 1059.969396][T31321] netlink: 'syz.4.6008': attribute type 49 has an invalid length. [ 1060.019563][T31321] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1060.527754][T12986] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.527791][T12986] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.903768][ T5648] Bluetooth: hci5: command tx timeout [ 1060.905405][T31241] rxe_eth0 speed is unknown, defaulting to 1000 [ 1061.182950][T12986] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.182990][T12986] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.517244][T31340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6012'. [ 1061.553993][T12986] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.554031][T12986] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.694231][T31342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1062.223716][T31353] IPv6: NLM_F_CREATE should be specified when creating new route [ 1062.223813][T31353] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1062.348002][T25624] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1062.658062][T31348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.880135][T31241] lo speed is unknown, defaulting to 1000 [ 1062.896500][T12981] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1062.976679][ T5648] Bluetooth: hci5: command tx timeout [ 1063.006101][T12981] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 1063.117335][T31241] wg2 speed is unknown, defaulting to 1000 [ 1063.347507][T31348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.443918][T31380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1063.790279][T12986] bridge_slave_1: left allmulticast mode [ 1063.790308][T12986] bridge_slave_1: left promiscuous mode [ 1063.790541][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.834032][T12986] bridge_slave_0: left promiscuous mode [ 1063.834279][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.280261][T31401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1064.374316][T31401] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1064.917900][T12986] bond7 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 1064.958078][T12986] bond7 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1065.057772][ T5648] Bluetooth: hci5: command tx timeout [ 1065.058155][T12986] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 1065.122330][T31416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1065.254973][T31418] netlink: 'syz.4.6026': attribute type 10 has an invalid length. [ 1068.753748][T12986] bond1 (unregistering): Released all slaves [ 1068.823918][T12986] bond2 (unregistering): Released all slaves [ 1068.860826][T12986] bond3 (unregistering): Released all slaves [ 1068.904214][T12986] bond4 (unregistering): Released all slaves [ 1068.933577][T12986] bond5 (unregistering): Released all slaves [ 1068.960573][T12986] bond6 (unregistering): Released all slaves [ 1069.010144][T12986] bond7 (unregistering): Released all slaves [ 1069.045738][T12986] bond0 (unregistering): Released all slaves [ 1069.073236][T12986] bond8 (unregistering): Released all slaves [ 1069.106297][T12986] bond9 (unregistering): Released all slaves [ 1069.144338][T12986] bond10 (unregistering): Released all slaves [ 1069.179304][T25624] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 1069.264183][T31418] batman_adv: batadv0: Adding interface: vlan0 [ 1069.264203][T31418] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.264233][T31418] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1069.349326][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1069.474184][T31348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.619518][T12986] tipc: Disabling bearer [ 1069.650232][T12986] tipc: Disabling bearer [ 1069.654108][T12986] tipc: Left network mode [ 1069.738237][T31348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.847311][T12981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.588091][T12981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.658725][T31447] bridge0: port 2(ip6gretap0) entered blocking state [ 1071.658827][T31447] bridge0: port 2(ip6gretap0) entered disabled state [ 1071.659023][T31447] ip6gretap0: entered allmulticast mode [ 1071.690316][T31447] ip6gretap0: entered promiscuous mode [ 1072.189962][T12974] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.716379][T12974] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.137399][T31513] IPVS: Unknown mcast interface: veth1_vlan [ 1074.482240][T31241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.482424][T31241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.482603][T31241] bridge_slave_0: entered allmulticast mode [ 1074.528772][T31241] bridge_slave_0: entered promiscuous mode [ 1074.564792][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1074.579799][T31241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.579977][T31241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.580150][T31241] bridge_slave_1: entered allmulticast mode [ 1074.624159][T31241] bridge_slave_1: entered promiscuous mode [ 1074.633430][T31524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1075.028246][T31536] bridge0: port 1(batadv0) entered blocking state [ 1075.028393][T31536] bridge0: port 1(batadv0) entered forwarding state [ 1075.067101][T31524] bridge_slave_0: entered promiscuous mode [ 1075.393322][T31241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.409800][T31538] netlink: 'syz.2.6045': attribute type 39 has an invalid length. [ 1075.438123][T31241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.810169][T31241] team0: Port device team_slave_0 added [ 1075.810564][T31541] syzkaller1: entered promiscuous mode [ 1075.810580][T31541] syzkaller1: entered allmulticast mode [ 1075.898925][T31241] team0: Port device team_slave_1 added [ 1075.967757][T31547] netlink: 'syz.3.6047': attribute type 1 has an invalid length. [ 1075.967781][T31547] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1076.322058][T31241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.322077][T31241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.322103][T31241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.564898][T12986] hsr_slave_0: left promiscuous mode [ 1076.592996][T12986] hsr_slave_1: left promiscuous mode [ 1076.594144][T12986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.594165][T12986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.621655][T12986] batman_adv: batadv0: Interface deactivated: veth0 [ 1076.621679][T12986] batman_adv: batadv0: Removing interface: veth0 [ 1076.738439][T12986] veth1_macvtap: left promiscuous mode [ 1076.738477][T12986] veth0_macvtap: left promiscuous mode [ 1076.738596][T12986] veth1_vlan: left promiscuous mode [ 1076.738619][T12986] veth0_vlan: left promiscuous mode [ 1076.857293][T31568] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6051'. [ 1076.857322][T31568] nbd: must specify a device to reconfigure [ 1079.192025][T31241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.192044][T31241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.192072][T31241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.472353][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1079.828777][T31241] hsr_slave_0: entered promiscuous mode [ 1079.830033][T31241] hsr_slave_1: entered promiscuous mode [ 1079.850461][T31241] debugfs: 'hsr0' already exists in 'hsr' [ 1079.853250][T31241] Cannot create hsr debugfs directory [ 1080.428483][T12986] IPVS: stop unused estimator thread 0... [ 1080.731404][T31613] tipc: Enabled bearer , priority 0 [ 1080.767457][T31602] tipc: Disabling bearer [ 1081.581862][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1081.581905][T31646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1081.646579][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1081.646812][T31647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1081.893991][T31644] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.910717][T31640] ip_tables: iptables: counters copy to user failed while replacing table [ 1082.547166][T31241] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1083.668421][T31241] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1084.304857][T31241] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1084.529681][T31675] x_tables: duplicate underflow at hook 3 [ 1084.549005][T31669] ip6gre1: entered allmulticast mode [ 1084.775036][T31241] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1084.813926][T31678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1084.951311][T31687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6068'. [ 1085.907581][T31694] bond4: option mode: unable to set because the bond device is up [ 1086.126661][T31698] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1086.208910][T31698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1086.317291][T31698] bond4: (slave lo): making interface the new active one [ 1086.344100][T31698] bond4: (slave lo): Enslaving as an active interface with an up link [ 1086.374218][T31698] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1086.720347][T31241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1086.775707][T31241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.779877][T31241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1086.846792][T31241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.866158][T31241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1086.949172][T31241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.971573][T31241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1087.171291][T31241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.392498][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1088.119363][T31241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.285041][T31241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.358250][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.358369][T12985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.421255][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.421369][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.627703][T31748] sctp: [Deprecated]: syz.4.6077 (pid 31748) Use of int in max_burst socket option. [ 1088.627703][T31748] Use struct sctp_assoc_value instead [ 1088.723990][T31241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1089.031649][T31747] rxe_eth0 speed is unknown, defaulting to 1000 [ 1090.587602][T31781] bond13: Unable to set up delay as MII monitoring is disabled [ 1090.651911][T31781] bond13 (unregistering): Released all slaves [ 1091.401067][T31781] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1091.502233][T31747] lo speed is unknown, defaulting to 1000 [ 1091.560527][T31747] wg2 speed is unknown, defaulting to 1000 [ 1092.706626][T31816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6086'. [ 1093.101927][T31822] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1093.459062][T31826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1094.678498][T31241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.829982][T31842] netlink: 'syz.0.6091': attribute type 62 has an invalid length. [ 1095.090945][T31241] veth0_vlan: entered promiscuous mode [ 1095.152172][T31241] veth1_vlan: entered promiscuous mode [ 1095.338969][T31241] veth0_macvtap: entered promiscuous mode [ 1095.386275][T31241] veth1_macvtap: entered promiscuous mode [ 1095.479849][T31241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.549850][T31241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.625372][T12981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.629711][T12986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630074][T12986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630120][T12986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.869578][T31859] ip_tables: iptables: counters copy to user failed while replacing table [ 1097.343995][T31882] netlink: 'syz.4.6099': attribute type 1 has an invalid length. [ 1097.344020][T31882] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1097.384009][T31872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.394999][T31872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.446911][T31872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.574448][T31872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.610989][T31872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.682912][T31872] veth1_vlan: left promiscuous mode [ 1097.717595][T31872] veth0_vlan: left promiscuous mode [ 1097.734196][T31872] veth0_vlan: entered promiscuous mode [ 1097.756433][T31872] veth1_vlan: entered promiscuous mode [ 1097.832038][T31872] tipc: Resetting bearer [ 1097.832155][T31872] tipc: Resetting bearer [ 1097.832447][T31872] veth1_macvtap: left promiscuous mode [ 1097.860367][T31872] veth0_macvtap: left promiscuous mode [ 1097.871764][T31872] veth0_macvtap: entered promiscuous mode [ 1097.885099][T31872] veth1_macvtap: entered promiscuous mode [ 1098.203287][T31872] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1098.484643][T31898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1099.661038][T12974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.661063][T12974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.135061][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.135097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.208904][T31922] netlink: 'syz.2.6107': attribute type 10 has an invalid length. [ 1100.514847][T31922] team0 (unregistering): Port device team_slave_0 removed [ 1100.654151][T31922] team0 (unregistering): Port device team_slave_1 removed [ 1101.722365][T31946] tipc: Enabling of bearer rejected, failed to enable media [ 1103.113799][T31984] tipc: Enabled bearer , priority 10 [ 1103.172289][ T4950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1103.194392][ T4950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1103.209404][ T4950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1103.236460][ T4950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1103.259597][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.591440][T31972] syzkaller0: entered promiscuous mode [ 1103.591464][T31972] syzkaller0: entered allmulticast mode [ 1105.375445][ T5648] Bluetooth: hci2: command tx timeout [ 1105.572623][T32014] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.087788][T12981] IPVS: starting estimator thread 0... [ 1106.178604][T32045] IPVS: using max 28 ests per chain, 67200 per kthread [ 1106.465811][T32014] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.997901][T32059] netlink: 'syz.4.6127': attribute type 1 has an invalid length. [ 1107.002326][T32063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1107.070354][T32014] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.319397][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6128'. [ 1107.319482][T32075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6128'. [ 1107.456542][ T5648] Bluetooth: hci2: command tx timeout [ 1109.535468][ T5648] Bluetooth: hci2: command tx timeout [ 1109.981506][T32014] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.996661][T31987] rxe_eth0 speed is unknown, defaulting to 1000 [ 1110.077760][T32085] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1110.077846][T32085] syzkaller1: linktype set to 773 [ 1110.634464][T14072] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.737050][T12978] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.844838][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1110.988602][T32105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1110.988629][T32105] IPv6: NLM_F_CREATE should be specified when creating new route [ 1111.026782][T32105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1111.435866][ T1098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.435955][ T1098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.609228][T32105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1111.615832][ T5648] Bluetooth: hci2: command tx timeout [ 1111.627474][T32105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1111.648717][ T6573] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.654812][T14072] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.654865][T14072] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.654902][T14072] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.685625][T31987] lo speed is unknown, defaulting to 1000 [ 1111.687613][T31987] wg2 speed is unknown, defaulting to 1000 [ 1112.401268][T32121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.540447][ T12] bond4: (slave lo): link status definitely down, disabling slave [ 1112.567423][ T12] bond4: now running without any active interface! [ 1113.781193][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1113.781237][T32159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1113.824133][T32159] ip_tables: iptables: counters copy to user failed while replacing table [ 1114.083290][T31987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.083417][T31987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.083601][T31987] bridge_slave_0: entered allmulticast mode [ 1114.122958][T31987] bridge_slave_0: entered promiscuous mode [ 1114.153445][T31987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.162724][T31987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.162917][T31987] bridge_slave_1: entered allmulticast mode [ 1114.188305][T31987] bridge_slave_1: entered promiscuous mode [ 1114.389358][T31987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.409848][T31987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.503728][T31987] team0: Port device team_slave_0 added [ 1114.519764][T31987] team0: Port device team_slave_1 added [ 1114.639679][T31987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.639698][T31987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.639726][T31987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.948288][T31987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.948308][T31987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.948343][T31987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.108215][T32170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6145'. [ 1115.482389][T31987] hsr_slave_0: entered promiscuous mode [ 1115.497167][T31987] hsr_slave_1: entered promiscuous mode [ 1115.504716][T31987] debugfs: 'hsr0' already exists in 'hsr' [ 1115.504741][T31987] Cannot create hsr debugfs directory [ 1115.686398][T32180] xt_connbytes: Forcing CT accounting to be enabled [ 1116.471289][T32194] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1116.613984][T32194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1116.614012][T32194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1116.873771][T31987] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.873809][T31987] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.127867][T32207] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1117.988155][T31987] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.013311][T31987] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.050063][T32216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1118.094662][T32218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6152'. [ 1118.330933][T31987] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.330979][T31987] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.737471][T32226] netlink: 'syz.1.6154': attribute type 5 has an invalid length. [ 1119.069299][T32231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1119.069345][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1119.231241][T32231] ip_tables: iptables: counters copy to user failed while replacing table [ 1119.594805][T31987] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.594843][T31987] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.733385][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6157'. [ 1120.482788][T32264] netlink: 'syz.4.6159': attribute type 2 has an invalid length. [ 1120.483287][T32264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.138558][T32276] netlink: 'syz.1.6162': attribute type 1 has an invalid length. [ 1121.428924][T32290] netlink: 'syz.1.6162': attribute type 1 has an invalid length. [ 1121.501800][T32276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1121.957950][T32280] bond1: (slave gretap1): making interface the new active one [ 1121.978569][T32280] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1122.264837][T31987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1122.363228][T31987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.380695][T31987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1122.494454][T31987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.526178][T31987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1122.602266][T31987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.622689][T31987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1122.669280][T31987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.402255][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1123.551461][T32328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6168'. [ 1123.551486][T32328] nbd: must specify a size in bytes for the device [ 1123.579592][T32322] syzkaller1: entered promiscuous mode [ 1123.579615][T32322] syzkaller1: entered allmulticast mode [ 1123.580644][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1123.800723][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1123.884425][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1123.988780][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1124.454669][ T5295] veth0_macvtap: left promiscuous mode [ 1124.465051][T32342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1124.465076][T32342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1124.465091][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1124.674109][T31987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.806844][T31987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.960865][T12974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.960964][T12974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.996541][T12974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.996666][T12974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.491182][T32350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1125.612955][T32350] netlink: 'syz.2.6171': attribute type 61 has an invalid length. [ 1125.612982][T32350] netlink: 'syz.2.6171': attribute type 268 has an invalid length. [ 1126.366550][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1127.722709][T32394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6181'. [ 1127.914233][T32397] vlan1: entered promiscuous mode [ 1128.342413][T32405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1128.342451][T32405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1128.450345][T32405] erspan0: entered promiscuous mode [ 1128.466256][T32409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1128.466294][T32409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1128.499556][T32405] gretap0: entered promiscuous mode [ 1128.590046][T32408] netlink: 'syz.2.6185': attribute type 8 has an invalid length. [ 1129.221358][T31987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.275057][T32425] nbd: must specify a size in bytes for the device [ 1129.732862][T31987] veth0_vlan: entered promiscuous mode [ 1129.929911][T31987] veth1_vlan: entered promiscuous mode [ 1131.028547][T32421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.202579][T31987] veth0_macvtap: entered promiscuous mode [ 1131.343210][T31987] veth1_macvtap: entered promiscuous mode [ 1131.624369][T32421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.219016][T32421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.422836][T32465] __nla_validate_parse: 2 callbacks suppressed [ 1132.422860][T32465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6195'. [ 1132.488788][T31987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.677576][T32421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.743789][T31987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.887765][T12974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.888124][T12974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.888162][T12974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.888196][T12974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.460085][ T4950] Bluetooth: hci1: command 0x0406 tx timeout [ 1133.554672][T12985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.554695][T12985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.926693][T12974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.926793][T12974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.926841][T12974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.024305][T12968] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.041942][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.041964][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.182853][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1135.877253][T32514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1135.877282][T32514] nbd: must specify a size in bytes for the device [ 1136.525802][T32524] tipc: Started in network mode [ 1136.525835][T32524] tipc: Node identity 3e207d27e662, cluster identity 4711 [ 1136.533214][T32524] tipc: Enabled bearer , priority 20 [ 1136.737145][T32522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1136.869249][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1137.150390][T29892] IPVS: ip_vs_send_async error -101 [ 1137.525882][ T5623] tipc: Node number set to 3628236071 [ 1138.168367][T32556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6213'. [ 1138.382008][T32550] xt_ipvs: protocol family 7 not supported [ 1138.482311][T32562] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1138.483765][T32562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1138.954384][T32571] netlink: 'syz.1.6217': attribute type 3 has an invalid length. [ 1139.007354][T32567] netlink: 'syz.2.6215': attribute type 11 has an invalid length. [ 1139.007807][T32571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6217'. [ 1140.473034][T32593] netlink: 'syz.2.6221': attribute type 2 has an invalid length. [ 1141.523794][T32616] ebt_among: dst integrity fail: 301 [ 1141.601904][T32606] IPv6: sit2: Disabled Multicast RS [ 1142.032604][T32618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6225'. [ 1142.032634][T32618] nbd: must specify a size in bytes for the device [ 1142.267219][T32624] xfrm0: entered allmulticast mode [ 1142.382124][T32624] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1142.442320][T32624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1142.874795][T32634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6227'. [ 1143.733011][T32651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1145.557797][T32691] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1145.896451][T32688] xt_CT: No such helper "syz0" [ 1146.251219][T32725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6241'. [ 1146.276546][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6242'. [ 1146.276630][T32722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6242'. [ 1147.088285][T32738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1180.978319][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6247'. [ 1180.978347][T32749] nbd: must specify a size in bytes for the device [ 1181.153670][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1181.170045][T32762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1182.153997][ T313] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1182.829670][ T332] veth7: entered promiscuous mode [ 1182.829901][ T332] veth7: entered allmulticast mode [ 1183.272684][ T337] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1183.734041][ T341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1184.008891][ T343] ip_tables: iptables: counters copy to user failed while replacing table [ 1184.084667][ T346] netlink: 'syz.4.6260': attribute type 29 has an invalid length. [ 1184.386797][ T364] Cannot find add_set index 0 as target [ 1184.612172][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.643254][ T368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1185.032200][ T371] Bluetooth: MGMT ver 1.23 [ 1185.675645][ T377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1185.675673][ T377] nbd: must specify a size in bytes for the device [ 1185.968773][ T387] xt_SECMARK: invalid mode: 9 [ 1185.991988][ T387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1187.188443][ T400] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.214459][ T400] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1187.678207][ T408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6276'. [ 1187.699609][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6274'. [ 1187.717967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.896189][ T408] bridge1: port 1(erspan0) entered blocking state [ 1187.896310][ T408] bridge1: port 1(erspan0) entered disabled state [ 1187.896465][ T408] erspan0: entered allmulticast mode [ 1187.960982][ T408] erspan0: entered promiscuous mode [ 1187.963256][ T408] bridge1: port 1(erspan0) entered blocking state [ 1187.963389][ T408] bridge1: port 1(erspan0) entered forwarding state [ 1188.041638][ T404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6274'. [ 1188.553040][ T426] ip_tables: iptables: counters copy to user failed while replacing table [ 1189.452829][ T4950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1189.471182][ T4950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1189.589012][ T4950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1189.609114][ T4950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1189.609828][ T4950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1190.204778][T19816] syz_tun (unregistering): left allmulticast mode [ 1190.346905][ T452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1190.346933][ T452] nbd: must specify a size in bytes for the device [ 1191.004629][ T461] syzkaller0: entered promiscuous mode [ 1191.004655][ T461] syzkaller0: entered allmulticast mode [ 1191.099392][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1191.696514][ T5648] Bluetooth: hci3: command tx timeout [ 1192.330722][ T491] sctp: [Deprecated]: syz.2.6293 (pid 491) Use of int in max_burst socket option. [ 1192.330722][ T491] Use struct sctp_assoc_value instead [ 1192.617971][ T438] rxe_eth0 speed is unknown, defaulting to 1000 [ 1193.365164][ T438] lo speed is unknown, defaulting to 1000 [ 1193.374250][ T521] pim6reg1: entered promiscuous mode [ 1193.374275][ T521] pim6reg1: entered allmulticast mode [ 1193.401637][ T438] wg2 speed is unknown, defaulting to 1000 [ 1193.776822][ T5648] Bluetooth: hci3: command tx timeout [ 1194.585860][ T476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1195.428520][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.443606][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.443831][ T438] bridge_slave_0: entered allmulticast mode [ 1195.472961][ T438] bridge_slave_0: entered promiscuous mode [ 1195.510275][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.514933][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.544827][ T438] bridge_slave_1: entered allmulticast mode [ 1195.566851][ T438] bridge_slave_1: entered promiscuous mode [ 1195.672031][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1195.836510][ T438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.857399][ T5648] Bluetooth: hci3: command tx timeout [ 1196.027540][ T438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.254879][ T569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1196.254905][ T569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1196.312530][ T438] team0: Port device team_slave_0 added [ 1196.325720][ T438] team0: Port device team_slave_1 added [ 1196.372020][ T438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.372038][ T438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.372065][ T438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.425934][ T438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.425952][ T438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.425980][ T438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.846789][ T438] hsr_slave_0: entered promiscuous mode [ 1196.849688][ T438] hsr_slave_1: entered promiscuous mode [ 1196.854942][ T438] debugfs: 'hsr0' already exists in 'hsr' [ 1196.854967][ T438] Cannot create hsr debugfs directory [ 1197.671388][ T584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1197.704359][ T585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1197.944464][ T5648] Bluetooth: hci3: command tx timeout [ 1198.454820][ T438] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.477525][ T600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6316'. [ 1198.902050][ T438] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.193929][ T438] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.302307][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.302910][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.433235][ T438] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.592545][ T617] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 1199.811853][ T617] bond1: entered promiscuous mode [ 1199.812903][ T617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1199.833440][ T623] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 1199.925071][ T620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1199.938312][ T620] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1199.938338][ T620] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1199.978528][ T620] bond1: (slave ip6gre2): making interface the new active one [ 1199.978556][ T620] ip6gre2: entered promiscuous mode [ 1199.982264][ T620] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 1200.016107][T30499] Bluetooth: hci5: command 0x0406 tx timeout [ 1200.244477][ T630] syzkaller0: left promiscuous mode [ 1200.244503][ T630] syzkaller0: left allmulticast mode [ 1201.194783][ T656] netlink: 'syz.1.6325': attribute type 1 has an invalid length. [ 1201.262370][ T658] netlink: 'syz.4.6324': attribute type 1 has an invalid length. [ 1201.714019][ T658] bond2: option mode: invalid value (7) [ 1201.733474][ T658] bond2 (unregistering): Released all slaves [ 1202.224600][ T438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1202.291778][ T438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1202.310009][ T438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1202.357206][ T438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1202.408845][ T438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1202.441945][ T438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1202.461682][ T438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1202.491752][ T438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1202.769264][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6329'. [ 1203.232736][ T692] vlan2: entered promiscuous mode [ 1203.232761][ T692] macvlan0: entered promiscuous mode [ 1203.584043][ T438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.726491][ T438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.002550][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.002663][T14072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.083628][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.083740][T14072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.224261][ T708] veth0: entered promiscuous mode [ 1204.313598][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1204.393877][ T438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.159800][ T739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6340'. [ 1205.159830][ T739] nbd: must specify a size in bytes for the device [ 1206.201822][ T757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1207.234406][ T771] netlink: 'syz.2.6345': attribute type 11 has an invalid length. [ 1207.285492][ T772] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 1207.598871][ T438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.928353][ T438] veth0_vlan: entered promiscuous mode [ 1207.974485][ T438] veth1_vlan: entered promiscuous mode [ 1208.094505][ T438] veth0_macvtap: entered promiscuous mode [ 1208.124478][ T438] veth1_macvtap: entered promiscuous mode [ 1208.261922][ T438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.374076][ T438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.421322][ T786] netlink: 'syz.2.6348': attribute type 1 has an invalid length. [ 1208.568099][ T1015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.569991][ T1015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.570988][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.710409][ T786] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1208.784114][ T789] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1208.796733][ T789] bond1 (unregistering): Released all slaves [ 1208.920350][T12968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.281830][T12968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.281852][T12968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.338325][T14072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.338348][T14072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.840752][ T803] xt_IDLETIMER: timeout value is too big [ 1209.849024][ T803] ip_tables: iptables: counters copy to user failed while replacing table [ 1248.407054][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6354'. [ 1249.157984][T30499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1249.243431][T30499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1249.260507][T30499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1249.263006][T30499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1249.263770][T30499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1250.771057][ T850] batman_adv: batadv0: Adding interface: syz_tun [ 1250.771261][ T850] batman_adv: batadv0: Interface activated: syz_tun [ 1250.960546][T12981] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.375875][T30499] Bluetooth: hci4: command tx timeout [ 1251.919216][ T12] IPVS: starting estimator thread 0... [ 1251.952385][ T866] bond1 (unregistering): Released all slaves [ 1252.078732][ T880] IPVS: using max 31 ests per chain, 74400 per kthread [ 1252.307461][T12981] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.337869][ T888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1252.470587][T12981] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.544712][ T831] rxe_eth0 speed is unknown, defaulting to 1000 [ 1252.777444][T12981] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.873435][ T900] x_tables: duplicate underflow at hook 2 [ 1253.031451][ T905] x_tables: duplicate underflow at hook 2 [ 1253.358192][T12986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1253.457854][T30499] Bluetooth: hci4: command tx timeout [ 1253.479709][T12968] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 1253.486626][T12986] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1253.503233][ T831] lo speed is unknown, defaulting to 1000 [ 1253.571339][ T831] wg2 speed is unknown, defaulting to 1000 [ 1254.168090][ T949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1254.959792][T12981] bond6 (unregistering): (slave gre2): Releasing backup interface [ 1255.300810][T12981] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 1255.300836][T12981] bond8 (unregistering): (slave bridge5): the permanent HWaddr of slave - 26:66:66:3b:61:0b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1255.332883][T12981] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 1255.401918][T12981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.419271][T12981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.422160][T12981] bond0 (unregistering): Released all slaves [ 1255.439278][T12981] bond1 (unregistering): Released all slaves [ 1255.483163][T12981] bond2 (unregistering): Released all slaves [ 1255.521958][T12981] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1255.530282][T12981] bond3 (unregistering): Released all slaves [ 1255.546898][T30499] Bluetooth: hci4: command tx timeout [ 1255.572678][T12981] bond4 (unregistering): Released all slaves [ 1255.611481][T12981] bond5 (unregistering): Released all slaves [ 1255.656559][T12981] bond6 (unregistering): Released all slaves [ 1255.692483][T12981] bond7 (unregistering): Released all slaves [ 1255.750754][T12981] bond8 (unregistering): Released all slaves [ 1255.790877][T12981] bond9 (unregistering): Released all slaves [ 1255.851159][T12981] bond10 (unregistering): Released all slaves [ 1255.996717][T12986] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 1256.416116][T12981] !: left promiscuous mode [ 1256.752553][ T979] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1256.766465][T12981] tipc: Disabling bearer [ 1256.766588][T12981] tipc: Disabling bearer [ 1256.797519][T12981] tipc: Disabling bearer [ 1256.797665][T12981] tipc: Left network mode [ 1257.078927][ T998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6399'. [ 1257.078957][ T998] nbd: must specify a size in bytes for the device [ 1257.615930][T30499] Bluetooth: hci4: command tx timeout [ 1258.212425][T12981] IPVS: stopping backup sync thread 27423 ... [ 1258.431876][ T1037] tipc: Failed to remove unknown binding: 66,0,0/16777217:265522589/265522590 [ 1258.461889][ T1037] tipc: Failed to remove unknown binding: 66,0,0/16777217:265522589/265522590 [ 1258.539492][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1258.664235][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1258.987528][ T831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.987730][ T831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.987918][ T831] bridge_slave_0: entered allmulticast mode [ 1258.994406][ T831] bridge_slave_0: entered promiscuous mode [ 1259.174762][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.174875][ T831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.175024][ T831] bridge_slave_1: entered allmulticast mode [ 1259.179238][ T831] bridge_slave_1: entered promiscuous mode [ 1259.377969][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1259.549181][ T1058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6409'. [ 1259.757974][ T831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.839118][ T831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.163829][ T831] team0: Port device team_slave_0 added [ 1260.232634][ T831] team0: Port device team_slave_1 added [ 1260.678592][T12981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.678618][T12981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.684624][T12981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.684649][T12981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.794669][T12981] veth1_macvtap: left promiscuous mode [ 1260.794729][T12981] veth0_macvtap: left promiscuous mode [ 1260.794880][T12981] veth1_vlan: left promiscuous mode [ 1260.797857][T12981] veth0_vlan: left promiscuous mode [ 1262.134455][ T831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.134473][ T831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.134498][ T831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.179311][ T1087] vcan1: entered promiscuous mode [ 1262.179336][ T1087] vcan1: entered allmulticast mode [ 1262.270541][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1262.272158][ T831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.272174][ T831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.272201][ T831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.611104][ T831] hsr_slave_0: entered promiscuous mode [ 1262.615111][ T831] hsr_slave_1: entered promiscuous mode [ 1262.619466][ T831] debugfs: 'hsr0' already exists in 'hsr' [ 1262.619489][ T831] Cannot create hsr debugfs directory [ 1263.012005][T12981] IPVS: stop unused estimator thread 0... [ 1263.014364][ T1141] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6425'. [ 1263.014401][ T1141] netlink: 'syz.3.6425': attribute type 8 has an invalid length. [ 1263.055327][ T1138] syzkaller0: MTU not usable for tipc bearer [ 1263.055877][ T1138] tipc: Enabling of bearer rejected, failed to enable media [ 1263.112821][ T1141] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1263.112846][ T1141] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1263.200614][ T1138] syzkaller0: entered promiscuous mode [ 1263.200639][ T1138] syzkaller0: entered allmulticast mode [ 1263.334246][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6426'. [ 1263.431194][ T1153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1263.483448][ T831] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1263.484708][ T1153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6426'. [ 1263.563913][ T1163] ip_tables: iptables: counters copy to user failed while replacing table [ 1263.581831][ T1153] bond2: entered promiscuous mode [ 1263.581859][ T1153] bond2: entered allmulticast mode [ 1263.608643][ T1153] netlink: 'syz.4.6426': attribute type 10 has an invalid length. [ 1263.608667][ T1153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6426'. [ 1263.628648][ T1160] dummy0: entered promiscuous mode [ 1263.640093][ T1160] dummy0: entered allmulticast mode [ 1263.640905][ T1160] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1263.677312][ T1153] bond2: (slave dummy0): Releasing backup interface [ 1263.679491][ T1153] dummy0: left promiscuous mode [ 1263.692591][ T1153] dummy0: left allmulticast mode [ 1263.712538][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1263.790559][ T831] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1263.959252][ T831] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1263.995026][ T1177] bridge0: port 3(veth0) entered blocking state [ 1264.000840][ T1177] bridge0: port 3(veth0) entered disabled state [ 1264.001031][ T1177] veth0: entered allmulticast mode [ 1264.004642][ T1177] veth0: entered promiscuous mode [ 1264.246505][ T831] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1264.453455][ T1179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.453512][ T1179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.612834][ T1179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.612873][ T1179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.695150][ T30] audit: type=1800 audit(1793926832.810:161): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6440" name="blkio.bfq.time_recursive" dev="tmpfs" ino=166 res=0 errno=-22 [ 1264.816236][ T1179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.816274][ T1179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.841733][ T1219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.981046][ T1179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.981087][ T1179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.110165][ T831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1265.129834][ T831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.131125][ T831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1265.145678][ T831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.150437][ T831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1265.212092][ T831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.218030][ T831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1265.239570][ T831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.596603][T12986] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.596639][T12986] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.596727][T12986] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.596752][T12986] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.599127][T12986] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.599158][T12986] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.599288][T12986] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.599311][T12986] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.882146][ T1254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.892084][ T1254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.895366][ T831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.921271][ T1254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.961683][ T1254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.975787][ T1254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.978742][ T831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.029899][ T1265] ip6erspan0: entered allmulticast mode [ 1266.031906][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.032004][T14072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.060954][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.061085][T14072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.276792][ T1276] tipc: Started in network mode [ 1266.276823][ T1276] tipc: Node identity d6d5fdf0d9eb, cluster identity 4711 [ 1266.277048][ T1276] tipc: Enabled bearer , priority 0 [ 1266.293165][ T1276] syzkaller0: entered promiscuous mode [ 1266.293187][ T1276] syzkaller0: entered allmulticast mode [ 1266.576791][ T5648] Bluetooth: hci2: command 0x0405 tx timeout [ 1266.938809][ T1276] tipc: Resetting bearer [ 1266.972892][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1266.972917][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.103368][ T1276] tipc: Disabling bearer [ 1267.127965][ T1305] ip_tables: iptables: counters copy to user failed while replacing table [ 1267.153130][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.153152][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.155126][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.155145][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.200007][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.200029][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.202535][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.202554][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.232947][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.232970][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.248468][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.248491][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.291576][ T1298] netlink: 'syz.4.6453': attribute type 2 has an invalid length. [ 1267.291598][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.311993][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.333748][ T1298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1267.728063][ T1327] ip_tables: iptables: counters copy to user failed while replacing table [ 1268.264280][ T831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.433842][ T831] veth0_vlan: entered promiscuous mode [ 1268.479674][ T831] veth1_vlan: entered promiscuous mode [ 1268.557404][ T1358] validate_nla: 57 callbacks suppressed [ 1268.557429][ T1358] netlink: 'syz.0.6463': attribute type 1 has an invalid length. [ 1268.572066][ T1354] netlink: 'syz.4.6461': attribute type 1 has an invalid length. [ 1268.711372][ T831] veth0_macvtap: entered promiscuous mode [ 1268.951840][ T831] veth1_macvtap: entered promiscuous mode [ 1269.064022][ T1354] veth1: entered allmulticast mode [ 1269.103971][ T1354] bond3: (slave veth1): Enslaving as an active interface with a down link [ 1269.189227][ T1372] veth3: entered allmulticast mode [ 1269.208022][ T1372] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1269.209050][ T1376] syzkaller0: left promiscuous mode [ 1269.209070][ T1376] syzkaller0: left allmulticast mode [ 1269.370494][ T1364] bond3: (slave veth0_to_bond): making interface the new active one [ 1269.371668][ T1364] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1269.423626][ T1379] macvlan2: entered promiscuous mode [ 1269.423649][ T1379] macvlan2: entered allmulticast mode [ 1269.436576][ T1379] bond3: entered promiscuous mode [ 1269.436608][ T1379] veth0_to_bond: entered promiscuous mode [ 1269.438260][ T1379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1269.440782][ T1379] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1269.440875][ T1379] bond3: left promiscuous mode [ 1269.440890][ T1379] veth0_to_bond: left promiscuous mode [ 1269.527952][ T1370] syz_tun: entered allmulticast mode [ 1269.645138][ T831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.679714][ T831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.717932][T12986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.719604][T12968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.774654][T12968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.781279][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.874098][ T1404] x_tables: duplicate underflow at hook 1 [ 1270.010716][ T1411] tipc: Started in network mode [ 1270.010735][ T1411] tipc: Node identity , cluster identity 4711 [ 1270.010749][ T1411] tipc: Failed to obtain node identity [ 1270.010773][ T1411] tipc: Enabling of bearer rejected, failed to enable media [ 1270.020606][T12968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.020627][T12968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.192443][T12978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.192474][T12978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.763062][ T1434] syzkaller0: entered promiscuous mode [ 1270.763088][ T1434] syzkaller0: entered allmulticast mode [ 1271.201011][ T1453] hsr_slave_0: left promiscuous mode [ 1271.216327][ T1453] hsr_slave_1: left promiscuous mode [ 1271.948909][ T1475] bond1: option resend_igmp: invalid value (2878) [ 1271.948934][ T1475] bond1: option resend_igmp: allowed values 0 - 255 [ 1271.953478][ T1475] bond1 (unregistering): Released all slaves [ 1272.010847][ T1495] syzkaller0: entered promiscuous mode [ 1272.010872][ T1495] syzkaller0: entered allmulticast mode [ 1272.165960][ T1499] __nla_validate_parse: 63 callbacks suppressed [ 1272.165983][ T1499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1272.252370][ T1501] sctp: [Deprecated]: syz.1.6492 (pid 1501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1272.252370][ T1501] Use struct sctp_sack_info instead [ 1272.284477][ T1503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1272.446943][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1272.687069][ T1519] netlink: 'syz.2.6498': attribute type 1 has an invalid length. [ 1272.741308][ T1525] netlink: 'syz.2.6498': attribute type 1 has an invalid length. [ 1273.052448][ T1539] syzkaller0: entered promiscuous mode [ 1273.052472][ T1539] syzkaller0: entered allmulticast mode [ 1273.056880][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 1273.352785][ T1548] sctp: [Deprecated]: syz.1.6504 (pid 1548) Use of int in max_burst socket option. [ 1273.352785][ T1548] Use struct sctp_assoc_value instead [ 1273.609386][ T1566] Bluetooth: MGMT ver 1.23 [ 1273.751090][ T1568] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1273.977380][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6510'. [ 1273.981881][ T1578] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6510'. [ 1273.981907][ T1578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6510'. [ 1274.198242][ T1580] veth0_to_bridge: entered promiscuous mode [ 1274.200320][ T1580] macsec1: entered allmulticast mode [ 1274.200340][ T1580] veth0_to_bridge: entered allmulticast mode [ 1274.225409][ T1580] veth0_to_bridge: left allmulticast mode [ 1274.225438][ T1580] veth0_to_bridge: left promiscuous mode [ 1274.329471][ T1582] veth0_to_bridge: entered promiscuous mode [ 1274.329593][ T1582] macsec1: entered allmulticast mode [ 1274.329606][ T1582] veth0_to_bridge: entered allmulticast mode [ 1274.354057][ T1582] veth0_to_bridge: left allmulticast mode [ 1274.354087][ T1582] veth0_to_bridge: left promiscuous mode [ 1274.493020][ T1590] syzkaller0: entered promiscuous mode [ 1274.493043][ T1590] syzkaller0: entered allmulticast mode [ 1274.699303][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1274.707579][ T1601] block nbd0: reconnected socket [ 1274.712343][ T5648] block nbd0: Receive control failed (result -32) [ 1274.836301][ T1605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1274.869644][ T1605] bridge3: entered promiscuous mode [ 1274.869669][ T1605] bridge3: entered allmulticast mode [ 1275.109444][ T1624] netlink: 'syz.4.6528': attribute type 1 has an invalid length. [ 1275.135872][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 1275.199113][ T1630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1275.231323][ T1630] nbd0: detected capacity change from 63 to 4194303 [ 1275.252845][ T1980] block nbd0: Dead connection, failed to find a fallback [ 1275.252912][ T1980] block nbd0: shutting down sockets [ 1275.252951][ T1980] blk_print_req_error: 128 callbacks suppressed [ 1275.252973][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1275.253012][ T1980] buffer_io_error: 286 callbacks suppressed [ 1275.253024][ T1980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1275.254840][ T1980] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1275.254870][ T1980] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1275.254978][ T1980] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1275.255002][ T1980] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1275.255097][ T1980] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1275.255120][ T1980] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1275.255414][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1275.255440][ T1980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1275.255456][ T1980] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1275.255472][ T1980] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1275.255486][ T1980] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1275.268489][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1275.268521][ T1980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1275.268540][ T1980] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1275.269592][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1275.288475][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1275.295879][ T1628] macvlan2: entered promiscuous mode [ 1275.295899][ T1628] macvlan2: entered allmulticast mode [ 1275.297995][ T1628] bond4: entered promiscuous mode [ 1275.301182][ T1628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1275.314531][ T1980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1275.337258][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1275.337910][ T1631] ldm_validate_partition_table(): Disk read failed. [ 1275.342506][ T1631] Dev nbd0: unable to read RDB block 0 [ 1275.344314][ T1631] nbd0: unable to read partition table [ 1275.354822][ T1628] bond4: left promiscuous mode [ 1275.394056][ T1631] ldm_validate_partition_table(): Disk read failed. [ 1275.397153][ T1631] Dev nbd0: unable to read RDB block 0 [ 1275.399505][ T1631] nbd0: unable to read partition table [ 1275.575153][ T1636] syzkaller0: entered promiscuous mode [ 1275.577255][ T1636] syzkaller0: entered allmulticast mode [ 1277.120949][ T1668] batman_adv: batadv0: Interface deactivated: syz_tun [ 1277.134641][ T1699] xt_IDLETIMER: timeout value is too big [ 1277.148381][ T1699] ip_tables: iptables: counters copy to user failed while replacing table [ 1277.217242][ T1668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.218013][ T1668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.751236][ T1668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.817976][ T1668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.909560][ T1668] tipc: Resetting bearer [ 1277.909975][ T1668] tipc: Resetting bearer [ 1278.347317][T14072] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.347376][T14072] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.347409][T14072] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.347442][T14072] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.462220][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.462579][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.462898][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.463220][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.463511][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.483809][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.484125][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.484418][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.488245][ T1748] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.770462][ T1750] batman_adv: batadv0: Interface activated: syz_tun [ 1278.795078][ T1750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.825892][ T1750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.248305][ T1773] __nla_validate_parse: 6 callbacks suppressed [ 1279.248326][ T1773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6557'. [ 1279.548869][ T1750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.554108][ T1750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.579175][ T1750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1279.579202][ T1750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1279.580103][ T1750] tipc: Resetting bearer [ 1279.580369][ T1750] tipc: Resetting bearer [ 1279.584460][ T1750] veth1_vlan: left promiscuous mode [ 1279.627047][ T1750] veth0_vlan: left promiscuous mode [ 1279.628671][ T1750] veth0_vlan: entered promiscuous mode [ 1279.630791][ T1750] veth1_vlan: entered promiscuous mode [ 1279.653470][ T1750] veth1_macvtap: left promiscuous mode [ 1279.661527][ T1750] veth0_macvtap: entered promiscuous mode [ 1279.662704][ T1750] veth1_macvtap: entered promiscuous mode [ 1279.686213][ T1750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1279.691766][ T1750] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1279.693855][ T1750] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1279.718233][ T1750] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1279.720333][ T1750] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1279.721070][ T1750] syzkaller0: left promiscuous mode [ 1279.723410][ T1750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1279.758656][T12981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.759819][T12981] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.792650][ T1763] vlan2: entered allmulticast mode [ 1279.792937][ T1763] bridge0: port 3(vlan2) entered blocking state [ 1279.793140][ T1763] bridge0: port 3(vlan2) entered disabled state [ 1279.814784][ T1763] vlan2: entered promiscuous mode [ 1279.848390][ T1765] batman_adv: batadv0: Removing interface: vlan0 [ 1279.939470][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.939581][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.950983][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.951101][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.070167][ T1799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6558'. [ 1280.190349][ T1802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1280.307058][T12974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.308214][T12974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.789684][ T1826] syzkaller0: entered promiscuous mode [ 1280.789709][ T1826] syzkaller0: entered allmulticast mode [ 1281.090791][ T1809] xt_IDLETIMER: timeout value is too big [ 1281.160245][ T1840] netlink: 'syz.1.6568': attribute type 1 has an invalid length. [ 1281.511047][ T1859] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 3, id = 0 [ 1281.750119][ T1873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6575'. [ 1281.842172][ T1874] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6574'. [ 1282.557713][ T1890] netlink: 'syz.3.6578': attribute type 1 has an invalid length. [ 1282.557713][ T1889] netlink: 'syz.3.6578': attribute type 1 has an invalid length. [ 1283.082734][ T1891] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1283.115928][ T1893] veth5: entered promiscuous mode [ 1283.119266][ T1905] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1283.120003][ T1905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1283.127483][ T1893] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 1283.147422][ T1900] syzkaller0: entered promiscuous mode [ 1283.147445][ T1900] syzkaller0: entered allmulticast mode [ 1283.183992][ T1905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1283.184023][ T1905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1283.364866][ T1916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6587'. [ 1283.829312][ T1921] xt_IDLETIMER: timeout value is too big [ 1283.879830][ T1927] net_ratelimit: 59 callbacks suppressed [ 1283.879853][ T1927] ip_tables: iptables: counters copy to user failed while replacing table [ 1284.051809][ T1940] sctp: [Deprecated]: syz.3.6590 (pid 1940) Use of int in maxseg socket option. [ 1284.051809][ T1940] Use struct sctp_assoc_value instead [ 1285.416141][ T1939] syzkaller0: entered promiscuous mode [ 1285.416167][ T1939] syzkaller0: entered allmulticast mode [ 1285.608545][ T1946] __nla_validate_parse: 1 callbacks suppressed [ 1285.608567][ T1946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1285.900124][ T1966] sctp: [Deprecated]: syz.4.6594 (pid 1966) Use of int in max_burst socket option. [ 1285.900124][ T1966] Use struct sctp_assoc_value instead [ 1285.928525][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6596'. [ 1285.992217][ T1966] bond0: entered allmulticast mode [ 1285.992241][ T1966] bond_slave_0: entered allmulticast mode [ 1285.992260][ T1966] bond_slave_1: entered allmulticast mode [ 1286.114883][ T1976] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1286.135056][ T1976] syzkaller1: entered promiscuous mode [ 1286.135079][ T1976] syzkaller1: entered allmulticast mode [ 1286.153283][ T1976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1286.155035][ T1976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1286.155115][ T1976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1286.491349][ T1992] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6605'. [ 1286.562911][ T1951] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1286.689026][ T2001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1286.798773][ T2004] geneve2: entered promiscuous mode [ 1286.798798][ T2004] geneve2: entered allmulticast mode [ 1286.969550][ T2013] netlink: 'syz.4.6613': attribute type 3 has an invalid length. [ 1287.163374][ T2023] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6614'. [ 1287.247997][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6617'. [ 1287.696158][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 1287.699566][ T2056] netlink: 'syz.4.6629': attribute type 5 has an invalid length. [ 1287.881653][ T2061] netlink: 'syz.4.6629': attribute type 5 has an invalid length. [ 1287.900197][ T2058] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1287.947128][ T2058] bond3: (slave lo): Enslaving as an active interface with an up link [ 1287.966047][ T2058] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1288.343745][ T2084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1288.346057][ T2089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1288.552143][ T2095] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 1288.658125][ T2103] ip_tables: iptables: counters copy to user failed while replacing table [ 1289.190073][ T2133] bridge1: entered promiscuous mode [ 1289.190097][ T2133] bridge1: entered allmulticast mode [ 1289.194464][ T2133] team0: Port device bridge1 added [ 1289.199073][ T2133] bridge0: port 3(team0) entered blocking state [ 1289.199234][ T2133] bridge0: port 3(team0) entered disabled state [ 1289.199469][ T2133] team0: entered allmulticast mode [ 1289.199485][ T2133] team_slave_0: entered allmulticast mode [ 1289.199542][ T2133] team_slave_1: entered allmulticast mode [ 1289.205906][ T2133] team0: entered promiscuous mode [ 1289.205926][ T2133] team_slave_0: entered promiscuous mode [ 1289.206094][ T2133] team_slave_1: entered promiscuous mode [ 1289.207383][ T2133] bridge0: port 3(team0) entered blocking state [ 1289.207524][ T2133] bridge0: port 3(team0) entered forwarding state [ 1289.512461][ T2135] syzkaller1: entered promiscuous mode [ 1289.512485][ T2135] syzkaller1: entered allmulticast mode [ 1289.695762][T30499] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1289.698728][T30499] Bluetooth: hci3: command 0x0c1a tx timeout [ 1289.873756][ T2157] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 3, id = 0 [ 1290.228620][ T2176] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 1290.459839][ T2187] xt_LOG: level 128 >= 8 [ 1290.478718][ T2184] bond2 (unregistering): Released all slaves [ 1291.458748][ T2243] netlink: 'syz.4.6675': attribute type 1 has an invalid length. [ 1291.483759][ T2243] bond5: entered promiscuous mode [ 1291.484216][ T2243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1291.498147][ T2243] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1291.498171][ T2243] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1291.498188][ T2243] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1291.554354][ T2245] __nla_validate_parse: 13 callbacks suppressed [ 1291.554379][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1291.672279][ T2248] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1291.672308][ T2248] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1291.834942][ T2257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6679'. [ 1291.989152][ T2265] lo: entered allmulticast mode [ 1292.145703][ T2279] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6682'. [ 1292.440695][ T2294] netlink: 'syz.3.6684': attribute type 1 has an invalid length. [ 1292.624673][ T2296] bond4: (slave veth0_to_bond): making interface the new active one [ 1292.640472][ T2296] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1292.754157][ T2294] macvlan2: entered promiscuous mode [ 1292.754182][ T2294] macvlan2: entered allmulticast mode [ 1292.769611][ T2294] bond4: entered promiscuous mode [ 1292.769635][ T2294] veth0_to_bond: entered promiscuous mode [ 1292.770598][ T2294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1292.799343][ T2294] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1292.801532][ T2294] bond4: left promiscuous mode [ 1292.801567][ T2294] veth0_to_bond: left promiscuous mode [ 1292.844139][ T2305] netlink: 'syz.0.6686': attribute type 1 has an invalid length. [ 1292.844161][ T2305] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.6686'. [ 1292.912921][ T2305] rxe_eth0 speed is unknown, defaulting to 1000 [ 1293.341767][ T2329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1293.375073][ T2305] lo speed is unknown, defaulting to 1000 [ 1293.391009][ T2305] wg2 speed is unknown, defaulting to 1000 [ 1294.103566][ T2360] syzkaller0: left allmulticast mode [ 1294.182940][ T2360] [ 1294.185309][ T2360] ====================================================== [ 1294.192328][ T2360] WARNING: possible circular locking dependency detected [ 1294.199365][ T2360] syzkaller #0 Not tainted [ 1294.203782][ T2360] ------------------------------------------------------ [ 1294.210800][ T2360] syz.1.6702/2360 is trying to acquire lock: [ 1294.216773][ T2360] ffff8880343c1918 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 1294.225667][ T2360] [ 1294.225667][ T2360] but task is already holding lock: [ 1294.233028][ T2360] ffff8880293546b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1294.242442][ T2360] [ 1294.242442][ T2360] which lock already depends on the new lock. [ 1294.242442][ T2360] [ 1294.252846][ T2360] [ 1294.252846][ T2360] the existing dependency chain (in reverse order) is: [ 1294.261853][ T2360] [ 1294.261853][ T2360] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1294.269661][ T2360] __mutex_lock+0x197/0x15a0 [ 1294.274768][ T2360] elevator_change+0x1af/0x480 [ 1294.280138][ T2360] elevator_set_none+0xb5/0x140 [ 1294.285504][ T2360] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 1294.291825][ T2360] nbd_start_device+0x189/0xb30 [ 1294.297184][ T2360] nbd_genl_connect+0x167d/0x1cd0 [ 1294.302726][ T2360] genl_family_rcv_msg_doit+0x233/0x340 [ 1294.308791][ T2360] genl_rcv_msg+0x614/0x7a0 [ 1294.313807][ T2360] netlink_rcv_skb+0x226/0x4a0 [ 1294.319085][ T2360] genl_rcv+0x28/0x40 [ 1294.323575][ T2360] netlink_unicast+0x8ef/0xa80 [ 1294.328852][ T2360] netlink_sendmsg+0x7f0/0xb20 [ 1294.334130][ T2360] sock_sendmsg_nosec+0x14e/0x190 [ 1294.339665][ T2360] ____sys_sendmsg+0x54e/0x850 [ 1294.344940][ T2360] ___sys_sendmsg+0x2a5/0x360 [ 1294.350124][ T2360] __x64_sys_sendmsg+0x1b1/0x290 [ 1294.355567][ T2360] do_syscall_64+0x166/0x520 [ 1294.360664][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.367065][ T2360] [ 1294.367065][ T2360] -> #5 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 1294.375657][ T2360] blk_alloc_queue+0x544/0x690 [ 1294.380936][ T2360] __blk_mq_alloc_disk+0x194/0x390 [ 1294.386558][ T2360] nbd_dev_add+0x494/0xb60 [ 1294.391483][ T2360] nbd_genl_connect+0x96c/0x1cd0 [ 1294.396936][ T2360] genl_family_rcv_msg_doit+0x233/0x340 [ 1294.402993][ T2360] genl_rcv_msg+0x614/0x7a0 [ 1294.408009][ T2360] netlink_rcv_skb+0x226/0x4a0 [ 1294.413294][ T2360] genl_rcv+0x28/0x40 [ 1294.417788][ T2360] netlink_unicast+0x8ef/0xa80 [ 1294.423064][ T2360] netlink_sendmsg+0x7f0/0xb20 [ 1294.428341][ T2360] sock_sendmsg_nosec+0x14e/0x190 [ 1294.433875][ T2360] ____sys_sendmsg+0x54e/0x850 [ 1294.439148][ T2360] ___sys_sendmsg+0x2a5/0x360 [ 1294.444335][ T2360] __x64_sys_sendmsg+0x1b1/0x290 [ 1294.449788][ T2360] do_syscall_64+0x166/0x520 [ 1294.454889][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.461295][ T2360] [ 1294.461295][ T2360] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1294.468495][ T2360] fs_reclaim_acquire+0x71/0x100 [ 1294.473946][ T2360] __kmalloc_cache_node_noprof+0x66/0x620 [ 1294.480177][ T2360] create_worker+0x112/0x7c0 [ 1294.485280][ T2360] workqueue_prepare_cpu+0xe4/0x170 [ 1294.490990][ T2360] cpuhp_invoke_callback+0x434/0x810 [ 1294.496794][ T2360] _cpu_up+0x2ce/0x5b0 [ 1294.501464][ T2360] cpu_up+0x1d2/0x220 [ 1294.505960][ T2360] cpuhp_bringup_mask+0xb2/0x1a0 [ 1294.511499][ T2360] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1294.517819][ T2360] bringup_nonboot_cpus+0x17/0x30 [ 1294.523356][ T2360] smp_init+0x32/0x110 [ 1294.527941][ T2360] kernel_init_freeable+0x27f/0x3e0 [ 1294.533662][ T2360] kernel_init+0x22/0x1d0 [ 1294.538507][ T2360] ret_from_fork+0x514/0xb70 [ 1294.543609][ T2360] ret_from_fork_asm+0x1a/0x30 [ 1294.548886][ T2360] [ 1294.548886][ T2360] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1294.556604][ T2360] cpus_read_lock+0x3d/0x160 [ 1294.561712][ T2360] static_key_slow_inc+0x12/0x30 [ 1294.567158][ T2360] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1294.573387][ T2360] nbd_genl_foreach_sock+0x265/0x450 [ 1294.579179][ T2360] nbd_genl_reconfigure+0xbbb/0x1040 [ 1294.584986][ T2360] genl_family_rcv_msg_doit+0x233/0x340 [ 1294.591043][ T2360] genl_rcv_msg+0x614/0x7a0 [ 1294.596057][ T2360] netlink_rcv_skb+0x226/0x4a0 [ 1294.601335][ T2360] genl_rcv+0x28/0x40 [ 1294.605825][ T2360] netlink_unicast+0x8ef/0xa80 [ 1294.611103][ T2360] netlink_sendmsg+0x7f0/0xb20 [ 1294.616378][ T2360] sock_sendmsg_nosec+0x14e/0x190 [ 1294.621926][ T2360] ____sys_sendmsg+0x54e/0x850 [ 1294.627200][ T2360] ___sys_sendmsg+0x2a5/0x360 [ 1294.632392][ T2360] __x64_sys_sendmsg+0x1b1/0x290 [ 1294.637838][ T2360] do_syscall_64+0x166/0x520 [ 1294.642940][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.649340][ T2360] [ 1294.649340][ T2360] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1294.657001][ T2360] __mutex_lock+0x197/0x15a0 [ 1294.662105][ T2360] nbd_queue_rq+0x373/0xff0 [ 1294.667117][ T2360] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1294.673182][ T2360] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1294.680020][ T2360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1294.686506][ T2360] blk_mq_run_work_fn+0x167/0x2f0 [ 1294.692044][ T2360] process_scheduled_works+0xc3d/0x1630 [ 1294.698103][ T2360] worker_thread+0xa47/0xfb0 [ 1294.703215][ T2360] kthread+0x38b/0x480 [ 1294.707804][ T2360] ret_from_fork+0x514/0xb70 [ 1294.712908][ T2360] ret_from_fork_asm+0x1a/0x30 [ 1294.718182][ T2360] [ 1294.718182][ T2360] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1294.725388][ T2360] __mutex_lock+0x197/0x15a0 [ 1294.730492][ T2360] nbd_queue_rq+0xc1/0xff0 [ 1294.735415][ T2360] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1294.741486][ T2360] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1294.748325][ T2360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1294.754815][ T2360] blk_mq_run_work_fn+0x167/0x2f0 [ 1294.760350][ T2360] process_scheduled_works+0xc3d/0x1630 [ 1294.766415][ T2360] worker_thread+0xa47/0xfb0 [ 1294.771519][ T2360] kthread+0x38b/0x480 [ 1294.776103][ T2360] ret_from_fork+0x514/0xb70 [ 1294.781205][ T2360] ret_from_fork_asm+0x1a/0x30 [ 1294.786484][ T2360] [ 1294.786484][ T2360] -> #0 (set->srcu){.+.+}-{0:0}: [ 1294.793593][ T2360] __lock_acquire+0x164c/0x2de0 [ 1294.798957][ T2360] lock_sync+0xb3/0x130 [ 1294.803622][ T2360] __synchronize_srcu+0xca/0x2f0 [ 1294.809071][ T2360] elevator_switch+0x1e8/0x7b0 [ 1294.814350][ T2360] elevator_change+0x2fa/0x480 [ 1294.819628][ T2360] elevator_set_default+0x375/0x440 [ 1294.825344][ T2360] blk_register_queue+0x404/0x4f0 [ 1294.830877][ T2360] __add_disk+0x6b8/0xdb0 [ 1294.835713][ T2360] add_disk_fwnode+0x100/0x3a0 [ 1294.840988][ T2360] nbd_dev_add+0x733/0xb60 [ 1294.845920][ T2360] nbd_genl_connect+0x96c/0x1cd0 [ 1294.851372][ T2360] genl_family_rcv_msg_doit+0x233/0x340 [ 1294.857453][ T2360] genl_rcv_msg+0x614/0x7a0 [ 1294.862465][ T2360] netlink_rcv_skb+0x226/0x4a0 [ 1294.867744][ T2360] genl_rcv+0x28/0x40 [ 1294.872246][ T2360] netlink_unicast+0x8ef/0xa80 [ 1294.877518][ T2360] netlink_sendmsg+0x7f0/0xb20 [ 1294.882796][ T2360] sock_sendmsg_nosec+0x14e/0x190 [ 1294.888335][ T2360] ____sys_sendmsg+0x54e/0x850 [ 1294.893607][ T2360] ___sys_sendmsg+0x2a5/0x360 [ 1294.898794][ T2360] __x64_sys_sendmsg+0x1b1/0x290 [ 1294.904245][ T2360] do_syscall_64+0x166/0x520 [ 1294.909349][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.915760][ T2360] [ 1294.915760][ T2360] other info that might help us debug this: [ 1294.915760][ T2360] [ 1294.926147][ T2360] Chain exists of: [ 1294.926147][ T2360] set->srcu --> &q->q_usage_counter(io)#69 --> &q->elevator_lock [ 1294.926147][ T2360] [ 1294.939794][ T2360] Possible unsafe locking scenario: [ 1294.939794][ T2360] [ 1294.947230][ T2360] CPU0 CPU1 [ 1294.952582][ T2360] ---- ---- [ 1294.957930][ T2360] lock(&q->elevator_lock); [ 1294.962520][ T2360] lock(&q->q_usage_counter(io)#69); [ 1294.970405][ T2360] lock(&q->elevator_lock); [ 1294.977505][ T2360] sync(set->srcu); [ 1294.981389][ T2360] [ 1294.981389][ T2360] *** DEADLOCK *** [ 1294.981389][ T2360] [ 1294.989519][ T2360] locks held by syz.1.6702/2360: 6, last CPU#0: [ 1294.995785][ T2360] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1295.003988][ T2360] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1295.012945][ T2360] #2: ffff88807fb82178 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1295.023291][ T2360] #3: ffff888029354740 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 1295.033210][ T2360] #4: ffff8880293541c8 (&q->q_usage_counter(queue)#61){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1295.044090][ T2360] #5: ffff8880293546b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1295.053947][ T2360] [ 1295.053947][ T2360] stack backtrace: [ 1295.059831][ T2360] CPU: 0 UID: 0 PID: 2360 Comm: syz.1.6702 Not tainted syzkaller #0 PREEMPT(full) [ 1295.069112][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1295.079163][ T2360] Call Trace: [ 1295.082438][ T2360] [ 1295.085366][ T2360] dump_stack_lvl+0xe8/0x150 [ 1295.089961][ T2360] print_circular_bug+0x2e2/0x300 [ 1295.094986][ T2360] check_noncircular+0x12f/0x150 [ 1295.099952][ T2360] __lock_acquire+0x164c/0x2de0 [ 1295.104820][ T2360] ? lockdep_unlock+0x5c/0xd0 [ 1295.109574][ T2360] ? __lock_acquire+0x1511/0x2de0 [ 1295.114595][ T2360] lock_sync+0xb3/0x130 [ 1295.118743][ T2360] ? __synchronize_srcu+0xb6/0x2f0 [ 1295.123854][ T2360] ? __synchronize_srcu+0xb6/0x2f0 [ 1295.128963][ T2360] __synchronize_srcu+0xca/0x2f0 [ 1295.133896][ T2360] ? __pfx___synchronize_srcu+0x10/0x10 [ 1295.139434][ T2360] ? do_raw_spin_lock+0x12b/0x2f0 [ 1295.144454][ T2360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1295.150260][ T2360] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1295.155904][ T2360] ? synchronize_srcu+0x20c/0x270 [ 1295.160928][ T2360] elevator_switch+0x1e8/0x7b0 [ 1295.165689][ T2360] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1295.171149][ T2360] elevator_change+0x2fa/0x480 [ 1295.175917][ T2360] ? do_raw_spin_unlock+0xf5/0x200 [ 1295.181029][ T2360] elevator_set_default+0x375/0x440 [ 1295.186226][ T2360] ? __pfx_elevator_set_default+0x10/0x10 [ 1295.191953][ T2360] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1295.198978][ T2360] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1295.204958][ T2360] blk_register_queue+0x404/0x4f0 [ 1295.209979][ T2360] __add_disk+0x6b8/0xdb0 [ 1295.214307][ T2360] add_disk_fwnode+0x100/0x3a0 [ 1295.219077][ T2360] nbd_dev_add+0x733/0xb60 [ 1295.223495][ T2360] ? __pfx_nbd_dev_add+0x10/0x10 [ 1295.228466][ T2360] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1295.234262][ T2360] ? bpf_lsm_capable+0x9/0x20 [ 1295.238926][ T2360] ? security_capable+0x7e/0x2c0 [ 1295.243863][ T2360] nbd_genl_connect+0x96c/0x1cd0 [ 1295.248802][ T2360] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1295.254176][ T2360] ? rcu_is_watching+0x16/0xb0 [ 1295.258961][ T2360] ? trace_kmalloc+0x2a/0xf0 [ 1295.263546][ T2360] ? __kmalloc_noprof+0x387/0x710 [ 1295.268564][ T2360] ? __nla_parse+0x40/0x60 [ 1295.272976][ T2360] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1295.279314][ T2360] genl_family_rcv_msg_doit+0x233/0x340 [ 1295.284858][ T2360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1295.290925][ T2360] ? __lock_acquire+0x747/0x2de0 [ 1295.295864][ T2360] genl_rcv_msg+0x614/0x7a0 [ 1295.300363][ T2360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.305380][ T2360] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1295.310758][ T2360] netlink_rcv_skb+0x226/0x4a0 [ 1295.315518][ T2360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.320535][ T2360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1295.325829][ T2360] ? down_read+0x2b9/0x320 [ 1295.330242][ T2360] genl_rcv+0x28/0x40 [ 1295.334234][ T2360] netlink_unicast+0x8ef/0xa80 [ 1295.338997][ T2360] netlink_sendmsg+0x7f0/0xb20 [ 1295.343758][ T2360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.349039][ T2360] ? aa_sock_msg_perm+0x144/0x210 [ 1295.354056][ T2360] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1295.359686][ T2360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.364969][ T2360] sock_sendmsg_nosec+0x14e/0x190 [ 1295.369993][ T2360] ____sys_sendmsg+0x54e/0x850 [ 1295.374750][ T2360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.380029][ T2360] ? import_iovec+0x73/0xa0 [ 1295.384532][ T2360] ___sys_sendmsg+0x2a5/0x360 [ 1295.389202][ T2360] ? __lock_acquire+0x747/0x2de0 [ 1295.394139][ T2360] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.399339][ T2360] ? futex_wait+0x2a2/0x390 [ 1295.403849][ T2360] ? __fget_files+0x3a2/0x420 [ 1295.408520][ T2360] ? __fget_files+0x2a/0x420 [ 1295.413106][ T2360] __x64_sys_sendmsg+0x1b1/0x290 [ 1295.418057][ T2360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1295.423535][ T2360] do_syscall_64+0x166/0x520 [ 1295.428125][ T2360] ? trace_irq_disable+0x3b/0x140 [ 1295.433162][ T2360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.439221][ T2360] ? clear_bhb_loop+0x70/0xc0 [ 1295.443891][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.449774][ T2360] RIP: 0033:0x7f0f84b9fb19 [ 1295.454182][ T2360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.473787][ T2360] RSP: 002b:00007f0f859a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.482280][ T2360] RAX: ffffffffffffffda RBX: 00007f0f84e25fa0 RCX: 00007f0f84b9fb19 [ 1295.490247][ T2360] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 1295.498208][ T2360] RBP: 00007f0f84c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1295.506169][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.514131][ T2360] R13: 00007f0f84e26038 R14: 00007f0f84e25fa0 R15: 00007ffea8da92b8 [ 1295.522112][ T2360] [ 1295.617558][ T2377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6706'. [ 1295.617910][ T5623] bond_slave_0: entered promiscuous mode [ 1295.617940][ T5623] bond_slave_1: entered promiscuous mode [ 1295.618039][ T2377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6706'.