last executing test programs: 40.658655617s ago: executing program 1 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x9, 0x4) listen(r2, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1e, &(0x7f0000000280)={&(0x7f0000000040)=@RTM_NEWNSID={0x0, 0x58, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_NSID={0x0, 0x1, 0x3}, @NETNSA_PID={0x0, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x0, 0x1, 0x3}, @NETNSA_PID, @NETNSA_FD={0x0, 0x3, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040814}, 0x854) 39.460965796s ago: executing program 1 (id=3397): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000100)=@raw=[@generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x98}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r2, r3, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) (async, rerun: 64) r4 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r4, 0x80c3e000) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 5.644585754s ago: executing program 4 (id=3478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000280)="34000000070000000000000006", 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r3, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r5 = socket$kcm(0x21, 0x2, 0xa) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7edc, 0x55}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}}, 0x1) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed7"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r8, 0x0, 0x0, 0x12140, 0x0, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r6, 0x0, 0x26, 0x0, 0x8d) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000014000480b7060000ffffff908500000005000000bf0900000000000035090100000000009500000000000000bf9100000000000056070000010000008500000007000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 5.557270436s ago: executing program 1 (id=3401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="010003170000280012800b00010065727370616e0000180002800400120006000f0007000000060011004e2000000000"], 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 5.228384507s ago: executing program 2 (id=3479): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10) (async) accept(r1, &(0x7f00000000c0)=@l2, &(0x7f00000001c0)=0x80) (async) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="028320090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000004d600a000000200000000030005000020000002004e1d7fbe450000010000000000000000"], 0x50}}, 0x0) 4.901195682s ago: executing program 1 (id=3480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000002180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002380)={0xffffffffffffffff}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000023c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000002500)=0x3, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={&(0x7f0000002140), 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x90, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x63}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'syzkaller\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x53}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=@newsa={0xfc, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0x40}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x71}}]}, 0xfc}}, 0x0) recvmmsg(r12, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x1004}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000dc0)=""/134, 0x86}, {&(0x7f0000000e80)=""/234, 0xea}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/46, 0x2e}, {&(0x7f0000001fc0)=""/246, 0xf6}], 0x5}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000034bd9d009500000000000000a576c5a1644dfe1352e78f37ec47ed4db0f6d5a654526bf60d99c4d1fe200eab5aba43e8db572a52c29f2342e30c52985c145ad8cb5184aa6d5378e400d7d2f6fa08000000000000000260223e720c9d1d104c9aa10cb576ca907e29a7265904139550b57f0725cdeb8d79ba948b539afac6d1f88a77f8b24ebf3b65bf6b663af1e84181d6069a0b338c262ac8cc93e7a3976b4229a6a6efd9eeadd09421b4259bd19ea0944904281301bb9f18c736ed96ac8c567dcafbe98d0699a324f5b84380dd1454963d706897dcbba980950f6b80b41b492e5220ca097ae42929a6420135bfe517350573b0116c4c0566e93c42f0c1732da4844228a14a0eb4b7ff750883c6c9798601fda5a89045e04d7c74d4c1bf8ed582e42b3fe3fa973255d391e8f80cd1c382f53b8059d4f26906f294125ed5bc4149c7c520a795497c77cfc51ac0e51fc006611be0fb06bf4c790b555a98288ba9fce315f5f0564221b8503d4cd3b2a7317224f65d073b7db06efb9a67fe30fd870e0e4ed29a79e64a7bf938e2f40060bcb54465298a56a30af795e58482f28fdd2fb850b60bc02d1d644fa0"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c, 0x800) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000020c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bind$tipc(r14, &(0x7f0000002100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x3}}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000002980)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a00)={&(0x7f0000002a40)={{0x14}, [@NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x73, 0xc, "5ae6468e971bf669b5f6af6c6e7e2d6f12e7a1c06f2699764b5cd73ae9f9d8f682650e7f4a6c811a80ca1df5930d1c9e07ac31bfa022714ceb39d47fe9891232a1f9ac42a7bd0fc2432c600ff309a5d4e57de16374ec88da0e7b8c007d99291e1cfac44fd60cc39b6a00450c237f13"}]}, @NFT_MSG_DELCHAIN={0x100, 0x5, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x2, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f8cd7d8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffd}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0xe31a2506e804d0dd, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x290}, 0x1, 0x0, 0x0, 0x4840}, 0x40804) 4.679399806s ago: executing program 2 (id=3482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="7800000018002507b9409b14ffff00000204be04020506050e0204", 0x1b, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000235, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x9, 0x10}, &(0x7f0000000100)=0xc) 4.180602774s ago: executing program 3 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000080), 0x6f5, 0x2000000022, &(0x7f00000000c0)={0x77359400}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000001c0)={0x0, 0x0, @start={0x0, 0x1, "83edcec9f2ffbdaf61a8f96836d86074cb82773316fce4441cabf558643e5ca60b9a82c7f4edab133919e1956cbe1d627525b8276eb421aa907d45d3ec7a97057a4010061975b98a9bc6403ad7b2b1dcf10502b7a0ce4670f05f61abc3ba3db7854757cbd30115568a3dca26998ccf0bf0000ed211e468c32bb90881f2a5ddf0036e240157e69efc36da13b87755f692f580a3fc87f2e82ed865062f282a765bb9e7bb2f2704280978bf18e12dfb1c73a6ffdbc61c96e3fe8c9bdcbfed00b93171280c0841a0b214e336e0c455286823f6bb0bafd23f2c7e3a41b001854230f691c9e98deef5f300546dd1313e8fad9cb1dc89cf1c4d194326384e414fe437d4e03a210f12483b1d05b192b2a77598cbaee0019ae446356b4fb4569af0712013584a34da088b6c12591083ad8309d0e709c7a9cc43f2d9f4884a62266b493003813a2507fff8d0cc52b91d5e870168d353d46b9a3ace399ba2ae2887d5aa17919b9676af68eadacc46915419c6906badc3421d07d41004726855f3145154346fcd278aa3670b3a0cc275ce1d5bcd6279cd4e063d3d73f1ab571092e7f9877915ffd1fd8b85e921f974ab701bfe117eeafc818121e5233c9638de16981db76c26060325e754688d73ef7a5bb25702b44063c311e1bad5c89440e4a0eb3537cbe7a6fe972b8cdfae4763d755d2c98d4b8d624e2d1bb9b1ae8984ad5b0e82cfdf7e8f5ba740ac6f42acd0850272cfa2f0ad51decd8a4ff98b7ad35c156cad5688f966cb2930b65862ebe52356a58ad053b7df435dc8bd835eb9e0ff2da822ccd3280350e45cf502326a72ff73a5ab45979056184dadce078e07828e1baca541d6ebc1219d5d99f87e9a439b175e60361ee31312c98dab4c2ff6773be9b85823377748450a12f57f233d8b49ea5fd26eb7a995854ef95889b5cb8a0749bb97f3d3dcb9de5520b2f7fd8c72974b6a99aa636b1a01889e5acb5a1259d65733d53bc90431534c5423fa79c7d30204af25ecc25c2715d537ccbc2cb82cf8fb4d5735f3b7af87c469c858d2fe6e549d18402bc9c06749fb1e1d750d87ac6a067dfd3fe804741d7e5520e1ba26489d8e890a9f43857e6a22c4d68f6ecf47ad44ef7289d361d65ee70e2a010e6eb0b3216a94157a7fb5727afc70e3d69c2d9625dce7bbc6e481c8d04bbdb084b326b1316c38cf6985058d2001a90f4658a3c040c289e31a78cb782760f60a2494b91441c3213d0d85cbc2bc81a3cf64ce4f9a3507cf8049762d47ecd219185f8906fbe86dc1280a403ef1124d04cf74ac88ed6f56a9037238e4ba8d4df228560784a766d1bcffc726b125788fefec929f3b9a1f2114b13cfe0291b1f1893497a0a4adef1dc440e98c474f5b2165276ce11dc6175604595c9083b2b83d4206c9ee2efb15561bbaaec006b6c402dcb904290f013b96a0ba41c991", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400, 0x3]}) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000c40)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000001440), &(0x7f0000001480)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0xc, &(0x7f0000001200)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000001300)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000014c0)=0x1, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000001500)=0x80, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000001540)=0x1, 0x4) connect$inet(r10, &(0x7f0000001580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmmsg(r4, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=ANY=[], 0x1350}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a40)="8639ff72d5b7c2b766a3d2092a714ea6094c8bee6fc279ec9e25287ad364943697b6b31276e9c60f03e6a6093ec5d0a0f00fd645936b013225f6c41313fb7e5c2a1ebeee1a993a3fb4dafb0f215d1601078b8842b24b3ff2c3e313c92841b965ad401c23dd3fc3e2de097e1439214287f5c1e4697fba4a2d1c222189c31deb09", 0x80}], 0x1, &(0x7f0000002b40)=ANY=[], 0x240}}], 0x2, 0x20004000) 4.097263413s ago: executing program 2 (id=3484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xa48e}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getpeername$inet(r5, &(0x7f0000000400), &(0x7f0000000440)=0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000540)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}], 0x30}, 0xc4) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.637249133s ago: executing program 1 (id=3486): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000003c0)=0x1, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40), 0xc) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf2565000000040003808c0003800c00008008000300c50500007c0000807500020040485eb56fac0fd6de4612a5c230f9b45e718d62984ca4609c680107d00cae5411ae5c492ab3e3e5d42edeb04b386adbda7964368ba1826ea153052e11d288c99220bc243f74e65e7e17dadbfeb9ef15f7ee23c29fe0d328be119623a0d85ca165197d449778d7515ce149000000"], 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000a40)) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000a80)=0xffff0000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x66000080) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000840)=0xc) (async, rerun: 32) r9 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_int(r9, 0x1, 0x2a, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r8, 0x84, 0x7d, &(0x7f0000000940), &(0x7f0000000980)=0x8) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000400000001000000098b0000300003800800030000000000140002007663616e300000080001000200000006"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r10, &(0x7f00000009c0)=ANY=[], 0xfe33) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3ce500006f9082d05993eae422e615e6a88592e1381cc2e1188ae2046ee839fe41a3be000019010000000053e38cb0aa560a24d8d4bb000f4c753b430f11341e82d6ca59", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2507000000140003002001000000000000000000000000000114000200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async, rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4048044) (rerun: 64) 3.348875041s ago: executing program 3 (id=3487): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200)='GPL\x00', 0x84200, &(0x7f0000000280)={@align=0x2, {0x295a, 0x4, 0x5, 0x3}}, 0xad8d, &(0x7f00000002c0), &(0x7f0000000300)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000004c0)=0x1a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000580), &(0x7f00000005c0)=@tcp=r4, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.171446173s ago: executing program 4 (id=3488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "f63bf6822a8643ac5589bce25516b341b34a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1410, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 3.117880537s ago: executing program 2 (id=3489): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r1, 0x894a, &(0x7f0000000000)="f53a") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000005080)=ANY=[@ANYBLOB="0308000042000000001000000000000018312ec615fa37f73114eef3551682c288240d000000000000d5d254a8258830c424182b34d8e6", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000feffffff7b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000001c0)={'pimreg0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000fbff00002aa40e8bbb77302e0318164ecddcc7aabd7000fedbdf271d010000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) sendto$inet6(r6, &(0x7f0000000340)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000003c0)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0x8, 0x1, 0x1, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000400)=0x6, 0x4) shutdown(r6, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000800)={0x4, &(0x7f0000000cc0)=[{0x15, 0x0, 0x2, 0x24}, {0x1, 0x2, 0x29, 0xfffffff6}, {0x4, 0x10, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) r11 = socket$inet6(0xa, 0x5, 0x6) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) recvmmsg(r12, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/133, 0x85}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000001e80)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002ec0)=""/4103, 0x1007}, {&(0x7f0000003f00)=""/4092, 0xffc}, {&(0x7f0000004f00)=""/212, 0xd4}, {&(0x7f0000005000)=""/83, 0x53}], 0x4}, 0x900000}], 0x7, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000e80)={{r11}, "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"}) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r6, 0x0, 0x0, 0x121, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x3ff, 0x4) 2.905188707s ago: executing program 3 (id=3490): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) r1 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r2, &(0x7f0000000040)='\x00', 0x610200, &(0x7f00000001c0)={@_ha_fsid={[0x521, 0x100]}, {0xffff, 0x6, 0x0, 0x1}}, 0x69, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000480)=0x8}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$kcm(0x23, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000340)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) (async) close(0x3) 2.870195177s ago: executing program 4 (id=3491): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.52056869s ago: executing program 4 (id=3493): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000040000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900410000005700000008002600fd1600000800270003"], 0x60}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000cfeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc3"], 0x0}, 0x94) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r12, 0x1, 0x2a, &(0x7f0000000700)=0xfffe, 0x4) 2.520223732s ago: executing program 0 (id=3494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000400000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0], 0x0, 0x0}, 0x94) 2.346150617s ago: executing program 0 (id=3495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) shutdown(r1, 0x0) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c040000100001040000000048d0dd266a34e1e3", @ANYRES32=r0, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES8=0x0, @ANYBLOB="78db"], 0x40c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20048081) socket$inet6(0xa, 0xa, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0xffffffffffffff9b, 0x3, @val=0x9}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000680)=0xfffffffc, 0x4) sendmsg$nl_netfilter(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x82}]}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x2e}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001400010027bd7020fbdbdf252d070000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 1.937688682s ago: executing program 2 (id=3496): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="1535077099537d53c15bb7881d4f631b52f5f61a5d7c8a1c44a47b9ac099be0113b65cb6e97ae4b23f0803f4d28b3ef80f9d99fdb15863852e3a35e0c2fee2c7770ea954737713ee", 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'virt_wifi0\x00', @random}) 1.700696694s ago: executing program 1 (id=3497): r0 = socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002d00)={0x0, 0x1c, &(0x7f0000002d40)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000002d80)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002dc0)={r2, 0x0, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b129366fe8ac9c1291a08c84ed3776ca81ad429d1e191a9da28672a0c89918f82b3644e9a664401d7ec9e25042e90414c4f943f35b4c60700c72b70000000000000003505b51bb8eeb1449cf9d99e7b3adbe3558ce2d6936970000000000000033bb5d6df9ccad91e68ef25fc13090e1d4fc2762b409ab624c2226c25046ec660f62e30273f0f80710a31a7e77320f2f4a668a4d04c2660c33d55c1a614dc7f7b661388c206c2866c471a6c8041154dda81b53b0e76e36baf7291a4b3a4fbaa730a40c37ccfeb40bbf81ce072c2f4babe8b3d02bf7acf1bc1a895954b126b13c2de9a82827b16cd7113a09dc75a66e9ae1818fcb99c0cdeda4aa33885c6cb93acf9df129e8e9fa70b45e564aa876eba6ff8a5cfbe113bc6a36953e928ab7df3e8729f2d823ccd4926d416ee924fc230371f8931349a964a27ec40ffd703e08754d8f7ec57c3373de88"}, &(0x7f0000002f40)=0xfebd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000025c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x138, 0x138, 0x0, 0x368, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x32}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x62}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="657370379c656a89", 0x8) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002c00)={0x8, 0x9, 0x0, 0x0, 0x2, 0x5775d27c, 0x158, 0x7}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) recvmsg(r4, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x40002100) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) r6 = socket(0x8, 0x4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0x400261f3, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000100)=0xc) sendto(r7, &(0x7f0000000140)="9491e0d38e4646652d21c9f59380670ecac0b3d3b97c2fb1b0655de8fc9e722f8b86e8da91719fd234bbf4461279f352892fb3f6efb7b6b60df4f87636682c1bc76b6258d60e43b1ab74aef5886216c1ab837faabb15df24fb4da0e87771d81abdd82bea5a52f86f9171856b5e0bc4a653232637616fce62e819217cb181b4e66662daf39e5e8a024f7394159c93e3f2cdefe3fa4bc1064b013b3dda37a19b305376aaaedd8096e2445810f32492fa7d417d4559aec688f8f6980ca2c009d6a05f3b4b5e6dec18a0e22416722db8", 0xce, 0x4000044, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e23, 0x4, @private0, 0x10001}}}, 0x80) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) recvmsg(r8, &(0x7f0000002540)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000001500)=[{&(0x7f0000002f80)=""/4109, 0x100d}, {&(0x7f0000001480)=""/92, 0x5c}], 0x2, &(0x7f0000001540)=""/4096, 0x1000}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ac0)=@bpf_lsm={0xd, 0x5, &(0x7f0000002b80)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000002bc0)='GPL\x00'}, 0x80) 1.687950041s ago: executing program 3 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000280)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRESHEX=r0], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000040)) 1.490394029s ago: executing program 0 (id=3499): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_team\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x24, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xd, 0x1a, 0x0, 0x1, [@generic="e7", @typed={0x8, 0xfc, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c840) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000090000000300000006000093010000000100000003000200010000000200140007002ee0f9e511e10000010000000500000009009284738389000500000002000000030000000400000078000000000000000c0000000a00000002d30000002e61"], &(0x7f0000000a80)=""/237, 0x75, 0xed, 0x1}, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r2, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$nci(r5, 0x0, 0xfffffc55) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) readv(r4, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/157, 0x9d}], 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2000002, 0x3a, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x30}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff0000000d000000000000004a", @ANYRES32=0x0, @ANYBLOB="6544050000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x26000000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0xdeea4e6329bb15db, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r8) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="f6ff0000", @ANYRES16=r10, @ANYBLOB="000426bd7000fddbdf250700000006001c000000000006001a004e20000005000500010000000c001000090000000000000008000c00030000000c001000b928000000000000050012000200000008000900000000000500070003000000"], 0x64}, 0x1, 0x0, 0x0, 0x41081}, 0x24000002) 1.197123171s ago: executing program 3 (id=3500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a0001e5ff000000fbdbdf250a808000000000000000000006001d004e20008005001b003a000000"], 0x2c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400)='nr0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x4000000000001f2, 0x0) bind$can_raw(r4, &(0x7f00000004c0), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0xe501, 0x3, 0x238, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x1a0, 0x230, 0x230, 0x1a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x1, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000006c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000700)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000780)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000800)) unshare(0x22020600) poll(&(0x7f0000000840), 0x20000000000000b5, 0x9) 1.003490505s ago: executing program 4 (id=3501): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f51"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d"}], 0x198}, 0x4000c010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f6"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x800, r2}, 0x38) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000000400000080000000000000dced25c664", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001ac0)={&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000a00)="4d2953cea7eb8a7a08d701d202b1a27cf4dbc78d6725bc1272fef7410934b2d83cd25d7e4ab116e7e05c", 0x2a}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)}], 0x3, 0x0, 0x0, 0x40}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36a0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x100, 0x78, &(0x7f0000000280)=""/120, 0x41100, 0x41, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000000600)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r4, r2, r2, 0x1, r2], &(0x7f0000000880)=[{0x3, 0x2, 0xc, 0xa}, {0x0, 0x1, 0x5, 0x3}], 0x10, 0x5ac6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001b00), &(0x7f0000001b80)=0x60, 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000001bc0)=0x12b, 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4008010) 757.096406ms ago: executing program 2 (id=3502): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000016c0)={0x24, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0xffe}, 0x10) write(r4, &(0x7f0000000380)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newneigh={0x30, 0x1c, 0x1, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket(0x2, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x30, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x14, 0x0, 0x208, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20040884) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x1405, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000100)=""/168, &(0x7f00000001c0)=0xa8) 560.276495ms ago: executing program 3 (id=3503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="090400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008fe27a420000000000000000000000000000001fde8f3f00000000da0c5813038ba65190ee234089fe330e05399c2ebfa8e952db4db447991e915fef1f656f339e922bb25368ade2cf04516b1d24b996e59be1aa8f282a9c61a96df1fc74355da6a44f5900"/112], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="8614000000100001000000ffff000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002140000001000010000000000000000000084000a"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000001000"/26], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x5) r13 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r13, 0x1, 0xb, 0x0, &(0x7f00000074c0)) 407.194488ms ago: executing program 0 (id=3504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e600000000000000000000000000f7aed1ecb5a7d5ccb74c44a75e2f8cee9d2937a67f6543a33e0836381445f8bf883c0fe1ebaaa4ddbd0c1bd58d1c413a7bf855463181489650184b0f31542ab6423de240bb047ca80b3b935cff4ccdaa0c10f4385df2ecb0bb2b6fa37c10dccf8c5c85ca320a2fbe9ec0dfefe7fb6380378eb77843f0b3f4c053c6552d997d364a4afcce152b3b8f2f2e9ab7e988cccdbcffde8336616f47aa143008434a65dc8802b2f1821c03026ac669549163bae9002947da7b6002a681e8679fb39a2275e05afc91aa44f54c6f79bb1823d95c559c4422f88064ee835f36281b39", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000005c0)={{[0x3e9, 0x0, 0x4, 0x6]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x4, 0x2]}, {0xb57, 0x4e, 0x4, 0x6dcfc39d}}, 0xff, 0x0, '\x00'}, {{@align=0x8, {0xfff, 0x3, 0x7, 0x7}}, 0x67, 0x0, '!!\x00'}, {{@_ha_fsid={[0xb460, 0x5]}, {0x0, 0x2, 0xa, 0x9f}}, 0x1ff, 0x0, '\x00'}, {{@align=0x8, {0xe880, 0xf800, 0x73f, 0x7}}, 0x9f2d, 0x0, '\x00'}, {{@align=0x2, {0x1c59, 0x8001, 0xff, 0x7}}, 0x5, 0x0, '{$h$-+/$(\x98](\'#!##\x00'}, {{@align=0x3, {0x1000, 0x7f, 0x3, 0x7}}, 0x3, 0x0, '^!%[\x00'}, {{@align=0x8, {0x80, 0x8, 0x0, 0x7ff}}, 0x2, 0x0, 'GPL\x00'}]}) 161.912826ms ago: executing program 0 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000001000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0], 0x0, 0x0}, 0x94) 106.940557ms ago: executing program 4 (id=3506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000200000063113400000000008510000002000000850000002300000095000000000009009500a50500000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xcd, &(0x7f0000000dc0)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x5032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}, {&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x2) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001500010000e3fffffbffffff100000000800020008"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080) bpf$MAP_CREATE(0x0, &(0x7f0000003000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05", @ANYBLOB="694ca1b46a43eb8fbfaf39f7b6d2e94d94106c88f84a93e33264234565def784840ed22f95b9ac1eb2f848d5ba3ae5efcb485945a3c79cef7d50bb8144b5bc44b515275be2d25fb3aa434ca1534864ff66ab6ad9eb440a6ffe8b9c937e89dfd2293696f70c721484e293d29bc7f95471ffc900133da039468360587bcdb5ed9d0a451e528c7b1994af848bec605a7e8c7c0121840d5d909e77e1b3817ad5ef888357cf673075e881fe5cd09925312a4290ee27bf32dafbd9952ee5c78f5b72d03b3eae91f6ba67a3f1b896e18c4034fbe592af219462eea0e81f077bb1f53c9227441753762c2ceccd46c1ec8e7c2f906ef32d724c552b845a01bc5d7921e7a2b974cb062e466ec5acd66da41bebfc7e5d9e0ac10e9c0a9047fb30c8ddb444bf57b93ddf95a9a9d9a2fb83277da6b295867d45c9fe75936b65b84b0d199a5b0d3088d37d6fd5d8d491bf33dc3563992a01bf5af1ab992e802aa3a77f867a21fac742fad41445777bf882c3abca05a06d674e8818d074ef53c5af2399007c6a5e35436b0de674c7045c2dc27cc93dd48f464a0b231c8a31829adf39645c19223fa14d750fc58e84ee5ffd4badd96bb109df8d0e5b6b9648ad0bfdb8c24e10296517c0d82d2a844bbcc105f0ff41bf8a3c54a185d6bc9c523c70857709cf37800443a064137e730c3aa8e7dddc771ddb5c9c0a43f7c6d76152fc0cf71ac594d06ccf5affeb484b84b76636ff3efc961bc488a3bd8a845b3cd1dd23152f63b370c18f517ec35ca54ad7f7c9422056d020cf1a2eb53264c4b66bf26e094aaa97bd500aba9b01de20cccff6ecc14a7efb58f6cf3041165906512b7a2ed2b68ad2db0277a274c4349628ed30649a5d5170c8b50b34cbf21fa728aadf1cc82889c189247c397e1dd27c93a14c0d84ddd3e66c36a78f880fd48263445518af0732858289a56da5edf57b3edcc5e6818dadc01988ea0c266153cffe8379fc91c936b83dda4075851bce801a2b41dd987fbba382292f17d316cd64cace1c1a80beb52f5c948272f41252d63001c1fc71d8644ec3fc06652472710e12841c5c6957b167a55fb36b72746dae595fafcca51d4cf0d7605bf61932c544251ae54cfe8f9a6f6657033634b445ebff2e897305a27097ae56533e7313254a4532f7ff44f3169263481332812c5e90b084b2b45a97c6da282b43372ce7560aa427d0b24a3a6b659e126b9a37705dc8cbfe01e8d3eea2875039a0816482613f2770e8602c7712952f1f6f4914619bc880cba6624446cf3c560fa1c1037c9365e7f85a971a9d782ff49dbf7b0cf7e4ac57f50388f4e46acbb08349ff5e508623fb697f6d650807cfbbe1cbe5e13aa7cb4bf7063da75bcfd626a429c98d558fbdd4e0da647799fc2602b86d9b24b98a946927fcdf974afb89bfa2de8e96109c8359cbe1fb61cef1868e64497b74ea00f5fd7182670942c2627084edc1c7de0ab65c645d678ff42e7556ee20332344b61000e71fd64c3f4e24abbbf8880df15097286fb3017dd5d9f09cf2f6b851f1863285ee1ad4dbbc11f1eeff5257294703bfe3ac90a9cf202c9646f78543237533dac10b5ed0f046d1862a26b52825bbcc9a99a922171737a21248e08a1f44c028ab161f392b80834833644a4e257b782552347339afadefdd8c8c61ca3cc3e29c6035dde51be19998d125c3ce019265fe36d8d224d63f7eb646cd2726bdc393e7af102ccd19cab779cf84c61597d700e2d0762a13ce66311c59fba2dea7e660d2235f20ee5f424b80685daa47f6aaf83cedd9be40abe6c9d07d13640f847c8b8cdb601fb263880e8e0a0f797170ddc8bafe78766d13313ffa003db1f972dd965e25e19d42f6e74a98b09f8605f449f0a881df1c01a094016eaab82e2eed9a5fc88199ea6c25d9e1249ceda2571b2ac30098b7a14a832b8d23b651a26bc4cb96f65d1f927936c61b1004f6a1ee9f76e8ba58f5a7575c5f8bb538dd2d5deadd6aa7cbc8221d28b988cf51689c1efe32690b6ede0d1e7e1f9615ac7b787ccf51d909d5d7e627944773c906b7d099f72419ec408705902f554dff36e3915e0571f02dca34dabaf7c5e105077f6ea88a4025d20f1ff98cfa91dd4da9eff4102af873c9629b1c8d5814356e73689c64e2247ac5b91cb9b808fcbb7a74051c2553ee8fa593e3dd473490519480005d636ed403af8844df8c186b90dd49ecdb5e52aa849305f57eb4156e011621a5677a87c76d533205bc02b990e3719a680c212aaed48511a9dbfb98ea908b2e4c97bcc4fe37e3214c7ae5cdf3ca68b201361ecb052bb8fd0a390954c5eef0943a3e6433a2d64c53c17dfa092af49067f217d512e42cf9bb3f147da49cadaf61f3d6b56adc2d02d03b7b239bfd92786b435f5570f0b99c905cf8e1fa3b308804accdd0a6175599ed82678ff6b4740a10fe3d14bc6c57f3ae4ce6d6807626d4295d99ba83c13d8ac67457f1d22e68f44ee70a8eec4b68d1e82e59240c7dda10b2f33d198ba21dc6fdd5d5cb3a47f2c1fad533d927c4c0dafa9701d59aa2958ca037d31db8b9ecc57d6607b486b3479762a7271a2701bcb2bfb412f957cfe45f6210017236528c54092f094d1a478b5a11c3840e61e79990b353f41b4405104cce44b002cc22ebc15fd0e987e261ba0d9f925c1b384f8a124340fedd6edb82d5772b72a7fc93bf293174784c3b94c0ee2e4633b041c901fc2ef10373e154c2a530edf80c1e028caed8d840b412a60a57689021c34fc9a4af9bbba7a1fc7d212f660e9a7a7f33f0515332a77b0d875ee6d9a718929b3c0eb2b87ffc9e5612c57800b1ecdd8aa527afe955a442350b2c5eb156ba8497ee690852e8917faa5afdb95dea0608c15656d6aff54dd743a293878b2a700d6a65acf39ee3fd6a12ad11f979cb6f2afd40b101620027312be7a1cc703196d98ea8e6b7fa5720fe7968b94f17d050b15a4cd4cbd2b9400c8b351c8e4f56202b6aaa1ceff025bd62624fb6ffc3ae286632dbad53ac6d0bfd18ff7f8451ea6a04f05cc87ea43c171d1833f63a0efcf5caf03cff135722cc1648feb9ccc1538ac5528027c51fb0288dbb3caae19495c0ba78ae1d3402eaf3bd04c5c55d0e3d0f23baf2889e57b4d4d89fa23139a3004ce5c286adc5fc15a07495c7e5d4309d2d6680abeced5c8d3bfb41fc78f320170b4b3572896174367905c84ba22c6b1886fec1b69ee2eefdd348dee3bb8e52880b2460c5f03944ce0b2d7d3dd369fcbc3f77f87af3e732a7d74812742a983359fa1625c0fe99760672f41f86b721f7b7df2b9755345f4d48d6a8a752bbcb290aeb199acc32ad2b5248f22de25c0737215f3dfdc31dbcf92bdd4d8a6545ce818d6fabce877119c5c6f1f7a95511b0d5f688502bf3b5a7ebae43a59fad8c20bc240822bddd2145e5acf19ed05fcb58e235171dccaceebfc76a1c24e62d5e1bdcc3c5c018dfd531f529fe42d54796bca518a422a2123fd187f60637c2141194a2be3fdb46a5b4e86e403cb63a59b0d1cbff1b85354c99f005fbf30e50189d5d00a34429fa40d41e62d4da769002eaa63954c84c14366eb75278a95b5a8bf0d31a6424a5014e6577ba2fb2e5eee93a231e734c5bee04748cf4eb7008aa9f6c39789737bfaae9cc4619da23e4cf715a033f4bec96533372b71973a4c906e4feb8d2e49469d1be041db4f28a0cb4d4b16d22e48e830803d58495bdd2f34d2b9bb9f13d2a20935499cdb2460321ef1decd1f9f19ada117b7b0ffcc23004a5ba4e8a7c44208691dcf418a813df6e8d4179fd5252fd96cba4951c9d05aa6b068aafe22932e7716aa077c0780876a75903bbad72fdef2f6b34cec557b28b61928b47596bce7ed7fe4f66eb3e92f31e374299627f0dc330370e245924865e54ea3094becdc1ca0cc1345ff113d2113c0d0ae45fb08a6896a92105f4ce8a6295b33ae37f3bfa0f40fb326a70a24535ae201fe8fe102987de988aecbc2b8e0752872022de236a590ee29bca71a2956005cf90749dd7a5fdb76a97d728d355d564e048657b1b4a972108dc94e6ed93796c14a9116ad059e355206fa0f31b873a69ef6f6203f52d09ee48f83d1952a1eb50302195987631b4239a863ccc74898e16961ab5202bf407c09a0f15f1156fb74f8a5ddc46415b70b7dbc63b42607fbb87c0490da3073e6c9863fd51c16fe6f8d84d6291e6038870e535885d71ec5655010c9fd13d3ae2a9bdb7dc4d938b48a935b6a33c1c4ff31fa9cab4f7519a813893ccc36256878730800e5954090515242fb4b58877f4e4de97b9b0f4275b30f7f8696b26c122764b80757f53fa1dcdcd38dd49f78997e01db1533a03f267a97df7c331b48bbd5005cd844d725bfc684542ab37f1eede3ff08f5b7c8cd06c95a4b11e6dee74401bcef7f73fb539fdadcc6566cbee9fd0e397ac587794e75e97eed3f8047c2ccef5ffe5a485e65b22ce6d29532a9380774289f7f3bd853205c2a995f09c5b0d2fadf15f0c66cd55a6986e5e88f01ef46c178b5af30dc72e64b938be348916af2bd5c44175e0e4f034eb8b705b71b62f8796c1749b3881e77e41d94604e81c83242da80339cf5510b8f077451ef970cb2ed5bcba3933eb4a56bc4c4ef0052db8606f79b086bfcc9f647af0c6d445c0b4a8851efb24a376f10fb0812ab96497b1aadc56493831716c2fd2d750fb251898bf11a5b6b44444aaaca92e5fc324a2625716b71b00b92642845ac7b43a5c94339880813ddba9a797e25abc2f7240f6bfb0a94cb1c4bb6da0a27dd1b1bb02cc9efea9b27819fc3384c45f437fa04a4b2a99e02492dec3e8362d94450ef2e0028d5556d4976f904112ea2a20f54a7508b7ebd0506c93bd2e27c765c87926643932b32d655bf7e48fa1ab7cfd4fa7ed6c393f0339943788f4b5c1dd254c6746f4e6080e2be4b016d3ff786f547bdfbe75ac5d9085096dd852d4886a910a679a8093b4d951428a759cca9947060d5fd41a9bc0369557ca4e2400b90e0bd7accc4b6f13d0265576c2022c1f2001b00fe1e9c8f2141d81f87664e5d80889ce8d4a4a9b391ac18bd195a25dc284d3e4efcd63537a68cf5d9202d8d0f356dee4020040f25576c082cff70bc0c4bded93779cb31bbac8008f972fb2acad068a71e4fab7eba38e400562b8e2c9d099763b1ce1c4ee15492a28f86cf75151919721c898d4e20ab79177cde2b54fdfaa8c0940a76cc0dd5b2359e5e2ec3e7a2f6ccc2c3c64e6f7db60ace8208d9abc6b16e6e614d87a4e82255c9aac1d8c4f78e2641b958c3c1dd6af920bcb6f534db0b01d51e472c2dc07f3cf699772f6cee599a7a5733eecefe68878c6f20a579732ff81a7c2a8b040a5395da958cb436208a68efe7ec986b34b918964927d89b9f2cc4061c27b7744d8119c355ab23617ab905d22c610715eb388b9ba7a5de326b24e8eb6aacd6fc9e21efb5a26a55b4d3ac9f2de60989228372308907d4c2f8c40a5cee930b8a061cf2746419b97703bb483c2d938515ba0d8c325320d21c25d2e3143d57cac62c7f9d87836d324119ba7ea7161347a8300ba00df6c3d17a3fa7ff15b456bfa2cf8c1d29231f3243aa9a75fc666d4da04405e98ff028c79cf99375edf0d23fb148f438d246755c030188e1dd2e9b2b3d72300fb3f59ce30e1ec93f783af66bf261d41688d55f3029de793bfa3fe5471c818b09f6360aba95c20efdae31dad2b29bd3f521c36f519d2bd60ac26e5e0f55bdda601304138f977bf5f584d7c6bb80889eddfc91158473e67df3e348655a9848570bc", @ANYBLOB="02e3bdf5920c4fe54db8bcb628373d82481a24a870f7f03fa2544829c6f8fb58c8be8eed56b57d053d9817519a359fcc7188249d0843c8b7903c6493a3c3004470be59bc9b96f2f9cae7fcbf8d2017e67c8885a90ed931e7966f8cd93ec488f4eccf1892e1450d0bfad963f45c", @ANYRESDEC, @ANYRESOCT=r0, @ANYBLOB="d434c1108857fdab6b40b745d6a2642845034e2619ff88d7f6350b502aabca21fb846d5400d3fd5b1a3aed023fe3572907110d67fe837aa5bb4d10b98793b00a3cf7b6dfd97c460f67e5ab6ba3840a2ddce60627f12da8afeedb43eac1686a12edc89916f051994019abc1157322c1e92b7ef4c9f8afd36ca91f101313bf2648b156d615d79546a5d58c045e3f78806c12ecb4afd094fe3867841d195b9bc8c184a6dbc023f7932b4053e8d124d9b5c69cfd630c422c532432132d017ffac16035ede96d15e6233d3927c0ebb691d0d9399a53b79bfea3a8183240d15b72f4ca4b064c391ca2c879614415df863b82f9312812a9a2e6", @ANYRESHEX], 0x48) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)}, &(0x7f00000006c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000840)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4410000000000000003f865a8b60970b824c632d989e490698140983e74fafec67ca74dd84f20c6f672ee330a291295c46fc147aeddec7e03596aaf7532d998a825045030007000000b42162a3705597040a04", @ANYRES16=r7, @ANYBLOB="010027bd700000000000540000001d0001006e657464657673696d0000000f0002006e657464657673696d3000000800b80001000000"], 0x3c}}, 0xc084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRESDEC=r3, @ANYBLOB="10007d80", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000b00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20002cbd7000fbdbdf254100000008000300", @ANYRES32=r11, @ANYBLOB="05001801150000000800270003000000050018011f0000000800a100010400000800220107030000080026006c090000050018011400000025f12b2af9d0813a10ff30ea21c069e3f63e893603a8567691042929596628add441700098b5ea75b46513265425b6de809efc994ed1c45948b6a76a782e4390e7309efb45eccb871ce4fe01809e1151147a30537b1f93b7a1"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="200000006af128eaead27646cc1700000128bd70000001000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) 0s ago: executing program 0 (id=3507): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0xffffffffffffff2d, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f2, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x22}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000b40), 0x0, 0x200000000000}}, 0x40) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r4 = socket(0x10, 0x803, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000500)=0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="191f000004000200000000030000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000400)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0xfffffefa, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e640000000010000280050001000500000008000a00", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) kernel console output (not intermixed with test programs): evsim1: entered promiscuous mode [ 798.551066][T17948] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 798.627589][T17948] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 798.800436][T17965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2826'. [ 799.124636][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 799.186568][T17981] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2830'. [ 799.396911][T17983] veth1_to_bond: entered promiscuous mode [ 799.397123][T17983] veth1_to_bond: entered allmulticast mode [ 799.543802][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 799.650266][T17989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.692840][ T30] audit: type=1107 audit(1791992719.199:4): pid=17988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 799.844722][T17996] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20003 [ 800.121760][T18003] bridge0: port 1(vlan4) entered blocking state [ 800.125339][T18003] bridge0: port 1(vlan4) entered disabled state [ 800.126928][T18003] vlan4: entered allmulticast mode [ 800.126950][T18003] geneve0: entered allmulticast mode [ 800.170009][T18003] vlan4: entered promiscuous mode [ 800.170037][T18003] geneve0: entered promiscuous mode [ 801.015636][T18029] bond20: entered promiscuous mode [ 801.016051][T18029] 8021q: adding VLAN 0 to HW filter on device bond20 [ 801.017739][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 801.106054][T18026] 8021q: adding VLAN 0 to HW filter on device bond20 [ 801.109578][T18026] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address [ 801.109621][T18026] bond20: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 801.269319][T18026] bond20: (slave wireguard0): making interface the new active one [ 801.269348][T18026] wireguard0: entered promiscuous mode [ 801.305941][T18026] bond20: (slave wireguard0): Enslaving as an active interface with an up link [ 801.430036][T18036] bridge_slave_1: left allmulticast mode [ 801.492306][T18036] mac80211_hwsim hwsim10 ªªªªª»: left promiscuous mode [ 801.509421][T18036] bond1: left promiscuous mode [ 801.509990][T18036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.539101][T18036] vlan2: left promiscuous mode [ 801.549162][T18036] bridge1: left promiscuous mode [ 801.564190][T18036] veth2: left promiscuous mode [ 801.565832][T18036] veth3: left promiscuous mode [ 801.568839][T18036] bridge2: left promiscuous mode [ 801.591156][T18036] gtp0: left promiscuous mode [ 801.600123][T18036] gre1: left promiscuous mode [ 801.658749][T18036] veth4: left promiscuous mode [ 801.660502][T18036] veth5: left promiscuous mode [ 801.662278][T18036] veth6: left promiscuous mode [ 801.673586][T18036] veth7: left promiscuous mode [ 801.675645][T18036] bridge3: left promiscuous mode [ 801.691428][T18036] erspan0: entered promiscuous mode [ 801.691707][T18036] macsec1: left promiscuous mode [ 801.705937][T18036] netdevsim netdevsim3 eth0: left promiscuous mode [ 801.706496][T18036] 8021q: adding VLAN 0 to HW filter on device eth0 [ 801.709886][T18036] netdevsim netdevsim3 eth1: left promiscuous mode [ 801.710588][T18036] 8021q: adding VLAN 0 to HW filter on device eth1 [ 801.720637][T18036] netdevsim netdevsim3 eth2: left promiscuous mode [ 801.721433][T18036] 8021q: adding VLAN 0 to HW filter on device eth2 [ 801.780670][T18036] netdevsim netdevsim3 eth3: left promiscuous mode [ 801.781462][T18036] 8021q: adding VLAN 0 to HW filter on device eth3 [ 801.798549][T18036] bond2: left promiscuous mode [ 801.798578][T18036] bond2: left allmulticast mode [ 801.799176][T18036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.800765][T18036] erspan1: left promiscuous mode [ 801.800787][T18036] erspan1: left allmulticast mode [ 801.832836][T18036] bond3: left promiscuous mode [ 801.836952][T18036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.847013][T18036] ip6gre1: left promiscuous mode [ 801.851335][T18036] gretap1: left promiscuous mode [ 801.867138][T18036] ip6erspan0: left promiscuous mode [ 801.884580][T18036] vxlan0: left promiscuous mode [ 801.887055][T18036] erspan2: left promiscuous mode [ 801.890042][T18036] bond4: left promiscuous mode [ 801.890810][T18036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 801.918011][T18036] geneve2: left promiscuous mode [ 801.920438][T18036] ip6gretap1: left promiscuous mode [ 801.928367][T18036] mac80211_hwsim hwsim17 wlan2: left promiscuous mode [ 801.944647][T18036] bond5: left promiscuous mode [ 801.945443][T18036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.949919][T18036] bond6: left promiscuous mode [ 801.950413][T18036] 8021q: adding VLAN 0 to HW filter on device bond6 [ 801.952615][T18036] xfrm1: left promiscuous mode [ 801.991563][T18036] bond7: left promiscuous mode [ 801.995535][T18036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.007664][T18036] veth8: left promiscuous mode [ 802.009202][T18036] veth9: left promiscuous mode [ 802.012480][T18036] gtp1: left promiscuous mode [ 802.028937][T18036] bridge4: left promiscuous mode [ 802.030512][T18036] bridge5: left promiscuous mode [ 802.033096][T18036] batadv0: left promiscuous mode [ 802.042130][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.055173][T18036] bond8: left promiscuous mode [ 802.056469][T18036] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.079712][T18036] 8021q: adding VLAN 0 to HW filter on device bond10 [ 802.102579][T18036] geneve3: left allmulticast mode [ 802.105539][T18036] vlan1: left promiscuous mode [ 802.106095][T18036] bridge0: left promiscuous mode [ 802.106716][T18036] vlan4: left promiscuous mode [ 802.106751][T18036] geneve0: left promiscuous mode [ 802.120445][T18036] 8021q: adding VLAN 0 to HW filter on device bond11 [ 802.156792][T18036] syzkaller0: left promiscuous mode [ 802.156821][T18036] syzkaller0: left allmulticast mode [ 802.163116][T18036] veth14: left allmulticast mode [ 802.169446][T18036] bond14: left promiscuous mode [ 802.169514][T18036] bridge8: left promiscuous mode [ 802.187893][T18036] vlan3: left allmulticast mode [ 802.187959][T18036] bond14: left allmulticast mode [ 802.188002][T18036] bridge8: left allmulticast mode [ 802.220012][T18036] bridge0: port 1(vlan4) entered blocking state [ 802.220154][T18036] bridge0: port 1(vlan4) entered forwarding state [ 802.222011][T18036] geneve0: entered promiscuous mode [ 802.476355][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'. [ 802.858793][T18049] ip6_vti0: entered promiscuous mode [ 802.980119][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 803.335618][T18049] ip6tnl0: entered promiscuous mode [ 803.851801][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.901152][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.080748][T18049] tipc: Resetting bearer [ 804.275446][T18049] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 804.275742][T18049] sit2: entered promiscuous mode [ 804.275879][T18049] gtp1: entered promiscuous mode [ 804.276052][T18049] bond4: entered promiscuous mode [ 804.276202][T18049] bridge0: entered promiscuous mode [ 804.276376][T18049] bridge3: entered promiscuous mode [ 804.276512][T18049] bond5: entered promiscuous mode [ 804.279782][T18049] bond6: entered promiscuous mode [ 804.280190][T18049] vxcan3: entered promiscuous mode [ 804.280340][T18049] bond7: entered promiscuous mode [ 804.280685][T18049] veth2: entered promiscuous mode [ 804.280873][T18049] veth3: entered promiscuous mode [ 804.281035][T18049] gtp2: entered promiscuous mode [ 804.281204][T18049] geneve3: entered promiscuous mode [ 804.282990][T18049] bridge4: entered promiscuous mode [ 804.285055][T18049] veth4: entered promiscuous mode [ 804.285502][T18049] veth5: entered promiscuous mode [ 804.290395][T18049] macvtap1: entered promiscuous mode [ 804.290665][T18049] bridge5: entered promiscuous mode [ 804.291169][T18049] gtp3: entered promiscuous mode [ 804.293546][T18049] pim6reg: entered promiscuous mode [ 804.297112][T18049] gre2: entered promiscuous mode [ 804.297491][T18049] gre3: entered promiscuous mode [ 804.297784][T18049] ip6tnl2: entered promiscuous mode [ 804.298109][T18049] bridge6: entered promiscuous mode [ 804.307739][T18049] gretap1: entered promiscuous mode [ 804.308280][T18049] vlan2: entered promiscuous mode [ 804.309314][T18049] vti60: entered promiscuous mode [ 804.309466][T18049] ip6tnl3: entered promiscuous mode [ 804.311450][T18049] bond9: entered promiscuous mode [ 804.311900][T18049] macvlan11: entered promiscuous mode [ 804.312660][T18049] gtp4: entered promiscuous mode [ 804.313102][T18049] gtp5: entered promiscuous mode [ 804.319674][T18049] ipvlan2: entered promiscuous mode [ 804.332250][T18049] bond10: entered promiscuous mode [ 804.347723][T18049] bridge_slave_1.: entered promiscuous mode [ 804.459322][T18049] ip6gre2: entered promiscuous mode [ 804.495700][T18049] sit3: entered promiscuous mode [ 804.529908][T18049] bridge7: entered promiscuous mode [ 804.555070][T18049] veth6: entered promiscuous mode [ 804.557084][T18049] veth7: entered promiscuous mode [ 804.624781][ T37] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 804.831031][T18081] vlan3: entered allmulticast mode [ 804.831057][T18081] macsec0: entered allmulticast mode [ 804.933650][ T37] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 804.966116][T13708] bond7: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 804.990026][T13708] bond7: (slave veth9): making interface the new active one [ 805.001222][T13708] bond7: active interface up! [ 805.039200][ T37] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 805.063870][T18099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2857'. [ 805.063919][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2857'. [ 805.128787][ T37] bond13: (slave veth14): link status definitely up, 10000 Mbps full duplex [ 805.128889][ T37] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 805.187764][ T37] bond13: active interface up! [ 805.197323][T13708] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.249547][T13709] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.249610][T13709] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 805.249656][T13709] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.419719][T18094] syzkaller0: entered promiscuous mode [ 805.419750][T18094] syzkaller0: entered allmulticast mode [ 805.455830][T18104] gretap3: entered allmulticast mode [ 805.492292][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2860'. [ 805.911840][T18126] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2863'. [ 806.648810][T18137] validate_nla: 31 callbacks suppressed [ 806.648834][T18137] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 806.793114][T18139] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2866'. [ 810.737178][T18121] syzkaller0: entered promiscuous mode [ 810.737208][T18121] syzkaller0: entered allmulticast mode [ 810.738189][T18125] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 810.739037][T18108] syzkaller1: entered allmulticast mode [ 810.790479][T18137] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 811.127718][T18145] syzkaller1: entered promiscuous mode [ 811.127748][T18145] syzkaller1: entered allmulticast mode [ 811.163023][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 811.323670][T18149] syzkaller0: entered promiscuous mode [ 811.323702][T18149] syzkaller0: entered allmulticast mode [ 811.369165][T18159] netlink: Conntrack attr has 8 unknown bytes [ 811.369205][T18159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.205225][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2876'. [ 812.559174][T18200] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2881'. [ 812.584757][T18204] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 812.682326][T18208] netlink: 'syz.4.2885': attribute type 4 has an invalid length. [ 812.712978][T18208] netlink: 'syz.4.2885': attribute type 4 has an invalid length. [ 812.740413][T18208] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 812.949080][T18219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2883'. [ 812.949124][T18219] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2883'. [ 812.949144][T18219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2883'. [ 812.949159][T18219] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2883'. [ 812.949175][T18219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2883'. [ 814.070035][T18236] syzkaller0: entered promiscuous mode [ 814.070061][T18236] syzkaller0: entered allmulticast mode [ 814.203486][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2891'. [ 814.996899][T18257] SET target dimension over the limit! [ 815.292225][T18262] dvmrp0: entered allmulticast mode [ 815.382281][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 815.557014][T18205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.644866][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 817.263300][T18314] __nla_validate_parse: 1 callbacks suppressed [ 817.263324][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2909'. [ 817.266492][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 817.367250][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 817.367305][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 817.392365][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 817.578281][T18321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 817.843707][T18331] syzkaller0: left promiscuous mode [ 817.843733][T18331] syzkaller0: left allmulticast mode [ 818.081008][T18342] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2916'. [ 818.397379][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 818.401280][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 818.412351][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 818.441541][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 818.442235][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 818.477744][T18352] bridge0: left promiscuous mode [ 818.477931][T18352] bridge0: entered allmulticast mode [ 818.628709][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 819.910930][ T5627] team0: Port device syz_tun removed [ 820.078133][ T4935] block nbd2: Receive control failed (result -32) [ 820.093400][ T5628] block nbd2: Receive control failed (result -32) [ 820.535409][ T4935] Bluetooth: hci5: command tx timeout [ 820.639648][T18353] virt_wifi0 speed is unknown, defaulting to 1000 [ 820.806965][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2932'. [ 821.051765][T18412] veth0_to_bond: left allmulticast mode [ 821.070567][T18412] bond7: (slave veth0_to_bond): Releasing active interface [ 821.070602][T18412] veth0_to_bond: left promiscuous mode [ 821.532144][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 821.947440][T18444] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 822.614857][ T4935] Bluetooth: hci5: command tx timeout [ 822.638009][T13708] bridge0: port 1(vlan2) entered disabled state [ 822.870952][T18457] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 822.870983][T18457] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2943'. [ 822.899508][T18456] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 823.128389][T18465] openvswitch: netlink: Message has 8 unknown bytes. [ 823.532408][T18473] netlink: set zone limit has 4 unknown bytes [ 824.580969][T13708] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 824.693426][ T4935] Bluetooth: hci5: command tx timeout [ 824.852624][T13708] bond13 (unregistering): (slave bridge3): Releasing backup interface [ 824.910695][T13708] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.927593][T13708] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.929458][T13708] .` (unregistering): Released all slaves [ 824.959863][T13708] bond1 (unregistering): Released all slaves [ 824.987337][T13708] bond2 (unregistering): Released all slaves [ 825.033931][T13708] bond3 (unregistering): (slave bond4): Releasing backup interface [ 825.074134][T13708] bond3 (unregistering): Released all slaves [ 825.098935][T13708] bond4 (unregistering): Released all slaves [ 825.126116][T13708] bond5 (unregistering): Released all slaves [ 825.160175][T13708] bond7 (unregistering): Released all slaves [ 825.205147][T13708] bond8 (unregistering): Released all slaves [ 825.231504][T13708] bond9 (unregistering): Released all slaves [ 825.265891][T13708] bond10 (unregistering): Released all slaves [ 825.299090][T13708] bond11 (unregistering): Released all slaves [ 825.324210][T13708] bond6 (unregistering): (slave veth7): Releasing active interface [ 825.325346][T13708] bond6 (unregistering): Released all slaves [ 825.370150][T13708] bond12 (unregistering): (slave veth9): Releasing backup interface [ 825.371260][T13708] bond12 (unregistering): Released all slaves [ 825.413663][T13708] bond13 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 825.416875][T13708] bond13 (unregistering): Released all slaves [ 825.456930][T13708] bond14 (unregistering): Released all slaves [ 825.479591][T13708] bond0 (unregistering): Released all slaves [ 825.530984][T13708] bond15 (unregistering): Released all slaves [ 825.559476][T13708] bond16 (unregistering): Released all slaves [ 825.600996][T13708] bond17 (unregistering): Released all slaves [ 825.625070][T13708] bond18 (unregistering): Released all slaves [ 825.660979][T13708] bond19 (unregistering): Released all slaves [ 825.688228][T13708] bond20 (unregistering): (slave wireguard0): Releasing backup interface [ 825.688260][T13708] wireguard0: left promiscuous mode [ 825.690805][T13708] bond20 (unregistering): Released all slaves [ 825.768344][ T5751] bridge_slave_0: left promiscuous mode [ 825.863461][T18470] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 825.866351][T18473] sch_fq: defrate 4294967293 ignored. [ 826.020538][T18482] syzkaller0: entered promiscuous mode [ 826.020569][T18482] syzkaller0: entered allmulticast mode [ 826.110753][T18497] sit2: entered promiscuous mode [ 826.594644][T18512] netlink: 'syz.1.2955': attribute type 11 has an invalid length. [ 826.594674][T18512] netlink: 'syz.1.2955': attribute type 11 has an invalid length. [ 826.594690][T18512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2955'. [ 826.773715][ T4935] Bluetooth: hci5: command tx timeout [ 826.824659][T13708] : left promiscuous mode [ 827.281908][T18353] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.282039][T18353] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.282221][T18353] bridge_slave_0: entered allmulticast mode [ 827.309740][T18353] bridge_slave_0: entered promiscuous mode [ 827.339163][T18353] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.339415][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.339612][T18353] bridge_slave_1: entered allmulticast mode [ 827.377291][T18353] bridge_slave_1: entered promiscuous mode [ 827.520864][T13708] ovs-dp0: left promiscuous mode [ 827.547696][T18532] netlink: 'syz.0.2960': attribute type 8 has an invalid length. [ 827.914108][T18353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.939307][T18353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.127223][T18353] team0: Port device team_slave_0 added [ 828.148777][T18353] team0: Port device team_slave_1 added [ 828.528753][T18353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.528772][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.528798][T18353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.529236][T18543] virt_wifi0 speed is unknown, defaulting to 1000 [ 828.569650][T18353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.569714][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.569795][T18353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.828466][T13708] IPVS: stopping master sync thread 18204 ... [ 828.923986][T13708] IPVS: stopping backup sync thread 9389 ... [ 829.127101][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 829.518615][T18353] hsr_slave_0: entered promiscuous mode [ 829.520288][T18353] hsr_slave_1: entered promiscuous mode [ 829.528163][T18353] debugfs: 'hsr0' already exists in 'hsr' [ 829.528227][T18353] Cannot create hsr debugfs directory [ 829.707565][T18546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2964'. [ 830.295984][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 830.649768][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'. [ 831.719311][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 832.161311][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'. [ 832.196196][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2975'. [ 832.695334][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 832.696995][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 833.226438][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 833.476214][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 833.510150][T13708] hsr_slave_1: left promiscuous mode [ 833.536199][T18645] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 833.559659][T18648] netlink: 'syz.0.2980': attribute type 11 has an invalid length. [ 833.961131][T18661] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 834.884347][T15094] smbdirect: ib_dev[ÿ] removed [ 834.997810][T13708] team0 (unregistering): Port device team_slave_1 removed [ 835.028707][T13708] team0 (unregistering): Port device team_slave_0 removed [ 835.427148][T18642] ovs-dp0: entered promiscuous mode [ 835.440344][T18645] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 835.473417][T18668] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2986'. [ 835.480062][T18667] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2986'. [ 835.902436][T18678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2989'. [ 836.589626][T18711] xt_hashlimit: size too large, truncated to 1048576 [ 837.245792][T18678] hsr_slave_0: left promiscuous mode [ 837.324950][T18706] netlink: 964 bytes leftover after parsing attributes in process `syz.1.2991'. [ 837.994753][T13708] IPVS: stop unused estimator thread 0... [ 838.055777][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 838.086482][T18720] macsec1: entered promiscuous mode [ 838.152736][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 838.655569][T18754] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2999'. [ 838.825316][T18353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 838.848051][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.849537][T18353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 838.882865][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.894486][T18353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 838.948921][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.951014][T18353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.068645][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 839.218770][T18764] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 839.428762][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3002'. [ 839.887652][T18794] netlink: 'syz.3.3004': attribute type 1 has an invalid length. [ 839.944397][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 840.770330][T18353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.904609][T18353] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.981178][T13708] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.981329][T13708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.133766][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.133893][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.519221][T18834] tipc: Enabling of bearer rejected, already enabled [ 841.519825][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 841.680435][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 841.680468][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 841.719607][T18834] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 842.026954][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'. [ 842.256614][T18860] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 842.317683][T18855] xt_CONNSECMARK: invalid mode: 254 [ 843.692238][T18851] infiniband syz2: set down [ 843.692263][T18851] infiniband syz2: added bond_slave_0 [ 843.720525][T18851] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 843.735385][T18353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.740581][T18851] infiniband syz2: Couldn't open port 1 [ 843.740919][T18851] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 843.740954][T18851] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 843.741004][T18851] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 844.171136][T18851] RDS/IB: syz2: added [ 844.218722][T18851] smc: adding ib device syz2 with port count 1 [ 844.218911][T18851] smc: ib device syz2 port 1 has no pnetid [ 844.976630][T18879] netlink: 'syz.3.3019': attribute type 2 has an invalid length. [ 845.229053][T18353] veth0_vlan: entered promiscuous mode [ 845.260452][T18353] veth1_vlan: entered promiscuous mode [ 845.346545][T18353] veth0_macvtap: entered promiscuous mode [ 845.440290][T18353] veth1_macvtap: entered promiscuous mode [ 845.471354][T18353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.507766][T18353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.654653][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.724777][T15096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.736997][T13708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.752236][T15092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.318623][T15096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.318647][T15096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.443614][T15094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.443639][T15094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.970705][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 847.034641][T18931] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 848.292241][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 848.317910][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 848.320898][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 848.338496][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 848.346875][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 849.494610][T18977] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3038'. [ 849.728834][T18986] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 849.876488][T18986] 8021q: adding VLAN 0 to HW filter on device bond14 [ 849.931891][T18986] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 849.931921][T18986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3040'. [ 849.956538][T18989] bond14: (slave veth9): Enslaving as an active interface with a down link [ 850.080399][T18995] openvswitch: netlink: Duplicate or invalid key (type 0). [ 850.092274][T18995] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 850.337924][T18995] bond15: entered promiscuous mode [ 850.338592][T18995] 8021q: adding VLAN 0 to HW filter on device bond15 [ 850.454088][ T5628] Bluetooth: hci3: command tx timeout [ 850.462229][T19002] bond15: (slave bridge9): making interface the new active one [ 850.462259][T19002] bridge9: entered promiscuous mode [ 850.487426][T19002] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 850.529050][T19004] macvtap1: entered promiscuous mode [ 850.529076][T19004] batadv0: entered promiscuous mode [ 850.530488][T19004] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 850.554106][T19004] batadv0: left promiscuous mode [ 850.732481][T19008] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3045'. [ 850.732514][T19008] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3045'. [ 850.868237][T19014] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3046'. [ 851.546421][T19024] bond1: Unable to set up delay as MII monitoring is disabled [ 851.574560][T19024] bond1 (unregistering): Released all slaves [ 851.710661][T19022] siw: device registration error -23 [ 851.952761][T19024] bond1: Unable to set up delay as MII monitoring is disabled [ 851.979947][T19024] bond1 (unregistering): Released all slaves [ 852.294464][T19046] xt_ecn: cannot match TCP bits for non-tcp packets [ 852.534680][ T5628] Bluetooth: hci3: command tx timeout [ 853.497733][T15092] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.508790][T15092] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.134681][T19075] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3058'. [ 854.134713][T19075] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.511078][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 854.568236][T15092] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.568279][T15092] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.653316][ T5628] Bluetooth: hci3: command tx timeout [ 854.679834][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 854.718484][T19084] tipc: Started in network mode [ 854.718524][T19084] tipc: Node identity ac141441, cluster identity 4711 [ 854.768200][T19084] tipc: Enabled bearer , priority 10 [ 854.921838][T15092] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.921878][T15092] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.183550][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.184176][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.184590][T18957] bridge_slave_0: entered allmulticast mode [ 855.193285][T18957] bridge_slave_0: entered promiscuous mode [ 855.201826][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.202355][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.202726][T18957] bridge_slave_1: entered allmulticast mode [ 855.211870][T18957] bridge_slave_1: entered promiscuous mode [ 855.426830][T15092] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.426905][T15092] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.465675][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 855.847853][T18085] tipc: Node number set to 2886997057 [ 855.877284][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.933880][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.156386][T18957] team0: Port device team_slave_0 added [ 856.254733][T18957] team0: Port device team_slave_1 added [ 856.569166][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.569191][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.569235][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.689767][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.689789][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.689820][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.703748][ T5628] Bluetooth: hci3: command tx timeout [ 857.161045][T19146] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 857.368589][T18957] hsr_slave_0: entered promiscuous mode [ 857.371955][T18957] hsr_slave_1: entered promiscuous mode [ 857.555341][T15092] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 857.556082][T15092] tipc: Resetting bearer [ 858.051046][T15092] batman_adv: batadv0: Removing interface: ip6gretap1 [ 858.468794][T15092] batman_adv: batadv0: Removing interface: ip6gretap2 [ 859.241332][T15092] bond13 (unregistering): (slave geneve4): Releasing backup interface [ 859.356099][T15092] bond2 (unregistering): (slave geneve2): Releasing active interface [ 859.509735][T15092] tipc: Disabling bearer [ 859.532962][T15092] team0: Port device bridge1 removed [ 859.598944][T15092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.641475][ T37] smbdirect: ib_dev[syz1] removed [ 859.661435][T15092] bond0 (unregistering): (slave ’Íb{.³): Releasing backup interface [ 859.714405][T15092] bond0 (unregistering): (slave veth1_to_batadv): Releasing backup interface [ 859.785093][T15092] bond0 (unregistering): Released all slaves [ 859.791523][T15092] bond1 (unregistering): Released all slaves [ 859.832813][T15092] bond2 (unregistering): Released all slaves [ 859.859277][T15092] bond3 (unregistering): Released all slaves [ 859.887450][T15092] bond4 (unregistering): Released all slaves [ 859.915909][T15092] bond5 (unregistering): Released all slaves [ 859.951341][T15092] bond6 (unregistering): Released all slaves [ 859.974510][T15092] bond7 (unregistering): Released all slaves [ 860.009982][T15092] bond8 (unregistering): (slave bond9): Releasing active interface [ 860.011646][T15092] bond8 (unregistering): Released all slaves [ 860.042976][T15092] bond9 (unregistering): Released all slaves [ 860.069083][T15092] bond10 (unregistering): Released all slaves [ 860.094423][T15092] bond11 (unregistering): Released all slaves [ 860.131461][T15092] bond12 (unregistering): (slave veth9): Releasing backup interface [ 860.146416][T15092] bond12 (unregistering): Released all slaves [ 860.170856][T15092] bond13 (unregistering): Released all slaves [ 860.196102][T15092] bond14 (unregistering): Released all slaves [ 860.228433][T15092] bond15 (unregistering): Released all slaves [ 860.259085][T15092] bond16 (unregistering): Released all slaves [ 860.289494][T15092] bond17 (unregistering): Released all slaves [ 860.840125][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 860.991271][T15092] : left promiscuous mode [ 861.291787][T15092] tipc: Disabling bearer [ 861.299059][T15092] tipc: Left network mode [ 861.560556][T19223] xt_TCPMSS: Only works on TCP SYN packets [ 861.593020][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.595126][T15092] IPVS: stopping master sync thread 9856 ... [ 861.617694][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.618285][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.618870][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.621541][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.661135][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.661742][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.662364][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 861.694428][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 863.980454][T19267] syzkaller0: entered promiscuous mode [ 863.980485][T19267] syzkaller0: entered allmulticast mode [ 869.542022][T19302] ipvlan3: entered promiscuous mode [ 869.542165][T19302] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 869.542187][T19302] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 869.542340][T19302] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 869.650885][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 869.684522][T19313] __nla_validate_parse: 28 callbacks suppressed [ 869.684548][T19313] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3099'. [ 869.684729][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 869.898140][T15092] batman_adv: batadv0: Interface deactivated: macvlan5 [ 869.921994][T15092] batman_adv: batadv0: Removing interface: macvlan5 [ 870.442312][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 870.722943][T19328] syzkaller0: entered promiscuous mode [ 870.724269][T19328] syzkaller0: entered allmulticast mode [ 871.070032][T19356] xt_hashlimit: size too large, truncated to 1048576 [ 876.351201][T19335] erspan0: entered promiscuous mode [ 876.616358][T19375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 876.647800][T19375] Cannot find set identified by id 65535 to match [ 876.706057][T15092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.706088][T15092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.720833][T15092] batman_adv: batadv0: Removing interface: macvtap1 [ 877.947118][T15092] team0 (unregistering): Port device team_slave_1 removed [ 877.984822][T15092] team0 (unregistering): Port device team_slave_0 removed [ 878.893869][T19421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3120'. [ 879.313983][T19443] netlink: 'syz.3.3123': attribute type 6 has an invalid length. [ 879.314019][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 879.315574][T19443] netlink: 'syz.3.3123': attribute type 6 has an invalid length. [ 879.315592][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 879.365032][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 879.735066][T19429] syzkaller0: entered promiscuous mode [ 879.735282][T19429] syzkaller0: entered allmulticast mode [ 880.375424][T19463] netlink: 'syz.0.3125': attribute type 1 has an invalid length. [ 880.570982][T19475] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3127'. [ 881.126655][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 881.126682][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 884.928822][T19463] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 884.946151][T19479] syzkaller1: entered promiscuous mode [ 884.946183][T19479] syzkaller1: entered allmulticast mode [ 885.128743][T19488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3129'. [ 885.392776][T18957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.421453][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.422970][T18957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.439271][T15092] IPVS: stop unused estimator thread 0... [ 885.507641][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.538861][T18957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.578471][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.580289][T18957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.613903][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.844558][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3134'. [ 885.900225][T19510] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 885.979007][T19526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3135'. [ 886.748172][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.816199][T19550] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 886.831150][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.871334][T13709] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.871487][T13709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.015719][T13709] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.015851][T13709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.039520][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 887.080167][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 887.676837][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 887.787601][T19550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 887.842048][T19558] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 887.842463][T19558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 887.866053][T19558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 887.945095][T19574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.607579][T19640] tipc: Enabling of bearer rejected, failed to enable media [ 890.238974][T19676] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 891.011175][T19703] smc: net device lo applied user defined pnetid SYZ2 [ 891.078086][T19703] smc: net device lo erased user defined pnetid SYZ2 [ 891.164685][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.351378][T19715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3153'. [ 891.678497][T18957] veth0_vlan: entered promiscuous mode [ 891.729751][T18957] veth1_vlan: entered promiscuous mode [ 892.262169][T19730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 892.405168][T18957] veth0_macvtap: entered promiscuous mode [ 892.428735][T18957] veth1_macvtap: entered promiscuous mode [ 892.468124][T19738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3158'. [ 892.624337][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.684648][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.779220][T15092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.782570][T13709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.782625][T13709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.782670][T13709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.410818][T15092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.410843][T15092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.814971][T15096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.814996][T15096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.164054][T19777] netlink: 'syz.1.3166': attribute type 9 has an invalid length. [ 894.925507][T19767] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 894.961016][T19767] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 895.417569][T19769] syzkaller0: mtu less than device minimum [ 895.419380][T19806] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3169'. [ 895.698453][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 895.718890][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 895.720264][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 895.748378][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 895.758793][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 896.015399][T19799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 896.098815][ T5626] team0: Port device syz_tun removed [ 897.893298][ T5628] Bluetooth: hci0: command tx timeout [ 897.973965][T15096] bond0: (slave netdevsim1): Releasing backup interface [ 897.980789][T15096] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 898.545937][T19887] vcan1: entered promiscuous mode [ 898.545965][T19887] vcan1: entered allmulticast mode [ 899.002548][T19902] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 899.387969][T19906] gretap4: entered allmulticast mode [ 899.414268][T19906] bond16: (slave gretap4): making interface the new active one [ 899.435348][T19906] bond16: (slave gretap4): Enslaving as an active interface with an up link [ 899.974448][ T5628] Bluetooth: hci0: command tx timeout [ 900.081103][T19928] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3188'. [ 900.150170][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 900.253012][T15096] pim6reg: left allmulticast mode [ 900.361581][T15096] dvmrp0: left allmulticast mode [ 901.475378][T19756] udevd[19756]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 902.064982][ T5628] Bluetooth: hci0: command tx timeout [ 903.270146][T15096] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 903.304934][T15096] team0: Port device bridge2 removed [ 903.742939][T15096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.771699][T15096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.787632][T15096] bond0 (unregistering): Released all slaves [ 903.811057][T15096] bond1 (unregistering): Released all slaves [ 903.961935][T15096] bond2 (unregistering): Released all slaves [ 904.070628][T15096] bond3 (unregistering): Released all slaves [ 904.133246][ T5628] Bluetooth: hci0: command tx timeout [ 904.173937][T15096] bond4 (unregistering): Released all slaves [ 904.260560][T15096] bond5 (unregistering): Released all slaves [ 904.352914][T15096] bond6 (unregistering): Released all slaves [ 904.467179][T15096] bond7 (unregistering): (slave veth3): Releasing active interface [ 904.470398][T15096] bond7 (unregistering): Released all slaves [ 904.581942][T15096] bond8 (unregistering): Released all slaves [ 904.701944][T15096] team0: Port device macvlan2 removed [ 904.716918][T15096] team0: Port device macvlan3 removed [ 904.731059][T15096] team0: Port device macvlan4 removed [ 904.748874][T15096] team0: Port device macvlan5 removed [ 904.762985][T15096] team0: Port device macvlan6 removed [ 904.781505][T15096] team0: Port device macvlan7 removed [ 904.796721][T15096] team0: Port device macvlan8 removed [ 904.811568][T15096] team0: Port device macvlan9 removed [ 904.827484][T15096] team0: Port device macvlan10 removed [ 904.844980][T15096] bond9 (unregistering): Released all slaves [ 904.867092][T15096] bond10 (unregistering): Released all slaves [ 904.899619][T15096] bond11 (unregistering): Released all slaves [ 905.103308][T19999] netlink: 'syz.1.3195': attribute type 11 has an invalid length. [ 905.252266][T13708] IPVS: starting estimator thread 0... [ 905.252868][T20002] IPVS: nq: FWM 3 0x00000003 - no destination available [ 905.272444][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3196'. [ 905.353377][T20003] IPVS: using max 32 ests per chain, 76800 per kthread [ 905.545685][T15096] ovs-dp0: left promiscuous mode [ 905.569571][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3196'. [ 905.810260][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3197'. [ 905.847303][T20017] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 905.847337][T20017] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 906.856705][T15096] tipc: Disabling bearer [ 906.858621][T15096] tipc: Disabling bearer [ 906.858788][T15096] tipc: Left network mode [ 906.925558][T20036] netlink: 'syz.1.3202': attribute type 2 has an invalid length. [ 906.925582][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3202'. [ 906.926245][T20036] netlink: 'syz.1.3202': attribute type 2 has an invalid length. [ 906.926264][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3202'. [ 907.316194][T20043] openvswitch: netlink: Message has 8 unknown bytes. [ 907.826793][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3205'. [ 907.826826][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3205'. [ 908.206385][T20058] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 908.206412][T20058] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3204'. [ 908.304320][T20061] netlink: 'syz.1.3206': attribute type 1 has an invalid length. [ 908.338974][T20046] tipc: Enabling of bearer rejected, failed to enable media [ 909.712369][T20091] ip_tables: iptables: counters copy to user failed while replacing table [ 909.881078][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'. [ 910.021793][T20107] openvswitch: netlink: Duplicate key (type 3). [ 910.208011][T20102] can: request_module (can-proto-0) failed. [ 910.542921][T20091] syzkaller1: entered promiscuous mode [ 910.542948][T20091] syzkaller1: entered allmulticast mode [ 910.761107][T15096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.772393][T15096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.785649][T15096] batman_adv: batadv0: Removing interface: ipvlan2 [ 911.155334][T20133] xt_esp: unknown flags DD [ 911.820674][T15096] team0 (unregistering): Port device team_slave_1 removed [ 912.071897][ T12] smc: removing ib device syz2 [ 912.490668][T19815] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.490803][T19815] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.490997][T19815] bridge_slave_0: entered allmulticast mode [ 912.511325][T19815] bridge_slave_0: entered promiscuous mode [ 912.810630][T20152] macsec1: entered promiscuous mode [ 912.874426][T19815] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.874539][T19815] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.874725][T19815] bridge_slave_1: entered allmulticast mode [ 912.883017][T19815] bridge_slave_1: entered promiscuous mode [ 913.221647][ T12] smbdirect: ib_dev[syz2] removed [ 913.653715][T19815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.726531][T19815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.349801][T19815] team0: Port device team_slave_0 added [ 914.352677][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 914.550852][T19815] team0: Port device team_slave_1 added [ 914.709493][T20218] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 914.957628][T20218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.207837][T20222] bond1: entered promiscuous mode [ 915.207867][T20222] bond1: entered allmulticast mode [ 915.615080][T20225] bond3: Unable to set down delay as MII monitoring is disabled [ 915.691095][T20225] bond3 (unregistering): Released all slaves [ 915.905078][T20238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3239'. [ 916.114825][T19815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.114847][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.114882][T19815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.260688][T19815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.260710][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.260743][T19815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.734295][T19815] hsr_slave_0: entered promiscuous mode [ 917.739623][T19815] hsr_slave_1: entered promiscuous mode [ 917.784881][T19815] debugfs: 'hsr0' already exists in 'hsr' [ 917.784911][T19815] Cannot create hsr debugfs directory [ 918.055803][T20275] Bluetooth: MGMT ver 1.23 [ 918.650615][T15096] IPVS: stop unused estimator thread 0... [ 918.854116][T20299] sctp: [Deprecated]: syz.4.3252 (pid 20299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.854116][T20299] Use struct sctp_sack_info instead [ 919.205313][T20297] syzkaller1: entered promiscuous mode [ 919.205347][T20297] syzkaller1: entered allmulticast mode [ 920.516103][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 920.566045][T20334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3258'. [ 920.566139][T20334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3258'. [ 921.092633][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 922.409889][T20381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3265'. [ 923.410152][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3268'. [ 923.600518][T19815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 923.619254][T19815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 923.640529][T19815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 923.700048][T19815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 923.851179][T20410] syzkaller0: left promiscuous mode [ 923.851210][T20410] syzkaller0: left allmulticast mode [ 923.867989][T19815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 923.892701][T19815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 923.913868][T19815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 923.954633][T19815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.308412][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 924.431870][T20432] bond17: (slave team0): Device is not bonding slave [ 924.431908][T20432] bond17: option active_slave: invalid value (team0) [ 924.474055][T20432] bond17 (unregistering): Released all slaves [ 925.057553][T13711] IPVS: starting estimator thread 0... [ 925.131358][T19815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.143660][T20449] IPVS: using max 24 ests per chain, 57600 per kthread [ 925.253006][T19815] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.307740][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.307862][T15096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.396613][T15096] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.396755][T15096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.342509][T20491] IPVS: length: 153 != 24 [ 926.447677][T20491] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 926.447727][T20491] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 926.447778][T20491] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 926.523767][T20495] netlink: 'syz.4.3285': attribute type 1 has an invalid length. [ 926.523799][T20495] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3285'. [ 927.248391][T20515] ip_tables: iptables: counters copy to user failed while replacing table [ 927.932325][T19815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.196773][T19815] veth0_vlan: entered promiscuous mode [ 928.218154][T19815] veth1_vlan: entered promiscuous mode [ 928.388078][T19815] veth0_macvtap: entered promiscuous mode [ 928.416483][T19815] veth1_macvtap: entered promiscuous mode [ 928.548462][T19815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.572436][T19815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.723612][T13711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.783542][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.783600][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.783643][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.242633][T15096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.242663][T15096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.477523][T15096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.477550][T15096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.066735][T20582] FAULT_INJECTION: forcing a failure. [ 930.066735][T20582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.066780][T20582] CPU: 1 UID: 0 PID: 20582 Comm: syz.2.3300 Not tainted syzkaller #0 PREEMPT(full) [ 930.066810][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 930.066827][T20582] Call Trace: [ 930.066838][T20582] [ 930.066850][T20582] dump_stack_lvl+0xe8/0x150 [ 930.066906][T20582] should_fail_ex+0x410/0x560 [ 930.066950][T20582] _copy_from_user+0x2d/0xb0 [ 930.066991][T20582] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 930.067033][T20582] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 930.067080][T20582] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 930.067122][T20582] ? alloc_pages_mpol+0x256/0x390 [ 930.067164][T20582] ip_generic_getfrag+0x149/0x2d0 [ 930.067210][T20582] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 930.067250][T20582] ? skb_page_frag_refill+0x119/0x460 [ 930.067293][T20582] __ip6_append_data+0x2252/0x40c0 [ 930.067348][T20582] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 930.067417][T20582] ? __pfx___ip6_append_data+0x10/0x10 [ 930.067446][T20582] ? do_raw_spin_lock+0x12b/0x2f0 [ 930.067486][T20582] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 930.067526][T20582] ip6_append_data+0x108/0x270 [ 930.067559][T20582] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 930.067601][T20582] udpv6_sendmsg+0xd0d/0x2610 [ 930.067650][T20582] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 930.067711][T20582] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 930.067771][T20582] ? inet_send_prepare+0x5b/0x260 [ 930.067812][T20582] ? inet6_sendmsg+0xe4/0x120 [ 930.067850][T20582] ? __pfx_inet6_sendmsg+0x10/0x10 [ 930.067896][T20582] sock_sendmsg_nosec+0x90/0x190 [ 930.067933][T20582] __sys_sendto+0x408/0x5a0 [ 930.067971][T20582] ? ksys_write+0x1e6/0x270 [ 930.068000][T20582] ? __pfx___sys_sendto+0x10/0x10 [ 930.068035][T20582] ? __mutex_unlock_slowpath+0x731/0x900 [ 930.068107][T20582] ? __pfx_ksys_write+0x10/0x10 [ 930.068175][T20582] __x64_sys_sendto+0xde/0x100 [ 930.068219][T20582] do_syscall_64+0x166/0x520 [ 930.068275][T20582] ? trace_irq_disable+0x3b/0x140 [ 930.068302][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.068337][T20582] ? clear_bhb_loop+0x70/0xc0 [ 930.068368][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.068393][T20582] RIP: 0033:0x7fe2aab9e2d9 [ 930.068415][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.068438][T20582] RSP: 002b:00007fe2ab98a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 930.068466][T20582] RAX: ffffffffffffffda RBX: 00007fe2aae25fa0 RCX: 00007fe2aab9e2d9 [ 930.068485][T20582] RDX: 0000000000003000 RSI: 0000200000000e00 RDI: 0000000000000006 [ 930.068501][T20582] RBP: 00007fe2ab98a090 R08: 0000000000000000 R09: 0000000000000000 [ 930.068517][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.068533][T20582] R13: 00007fe2aae26038 R14: 00007fe2aae25fa0 R15: 00007ffea54c30b8 [ 930.068572][T20582] [ 930.930256][T20592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3304'. [ 930.995987][T20592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3304'. [ 931.157352][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 931.176588][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 931.191134][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 931.210466][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 931.240302][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 931.363406][T20592] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.367398][T20592] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.638685][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 932.776099][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'. [ 932.850634][T20635] vlan3: entered promiscuous mode [ 932.850663][T20635] veth1: entered promiscuous mode [ 933.129178][T20649] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3313'. [ 933.332032][T20651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3314'. [ 933.334410][ T5628] Bluetooth: hci1: command tx timeout [ 933.514066][T20658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3315'. [ 933.561196][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 933.745764][ T30] audit: type=1804 audit(1791992853.249:5): pid=20661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3317" name="/newroot/4/memory.events" dev="tmpfs" ino=39 res=1 errno=0 [ 933.800069][ T30] audit: type=1800 audit(1791992853.309:6): pid=20661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3317" name="memory.events" dev="tmpfs" ino=39 res=0 errno=0 [ 934.173607][T20679] syzkaller0: entered promiscuous mode [ 934.173840][T20679] syzkaller0: entered allmulticast mode [ 935.065061][T20596] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.066097][T20596] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.066280][T20596] bridge_slave_0: entered allmulticast mode [ 935.085013][T20596] bridge_slave_0: entered promiscuous mode [ 935.110764][T20596] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.112577][T20596] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.112776][T20596] bridge_slave_1: entered allmulticast mode [ 935.142083][T20596] bridge_slave_1: entered promiscuous mode [ 935.249755][T20721] netlink: 'syz.1.3328': attribute type 1 has an invalid length. [ 935.338705][T20720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 935.414100][ T5628] Bluetooth: hci1: command tx timeout [ 935.442861][T20721] 8021q: adding VLAN 0 to HW filter on device bond17 [ 935.471419][T20596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.500401][T20596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.557722][T20596] team0: Port device team_slave_0 added [ 935.561452][T20596] team0: Port device team_slave_1 added [ 935.691830][T20596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.691856][T20596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.733905][T20596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.736766][T20596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.736785][T20596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.736819][T20596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.160561][T20596] hsr_slave_0: entered promiscuous mode [ 936.173970][T20596] hsr_slave_1: entered promiscuous mode [ 936.178662][T20596] debugfs: 'hsr0' already exists in 'hsr' [ 936.178690][T20596] Cannot create hsr debugfs directory [ 936.353863][T20749] FAULT_INJECTION: forcing a failure. [ 936.353863][T20749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.353901][T20749] CPU: 0 UID: 0 PID: 20749 Comm: syz.4.3333 Not tainted syzkaller #0 PREEMPT(full) [ 936.353926][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 936.353940][T20749] Call Trace: [ 936.353949][T20749] [ 936.353960][T20749] dump_stack_lvl+0xe8/0x150 [ 936.353997][T20749] should_fail_ex+0x410/0x560 [ 936.354034][T20749] _copy_from_user+0x2d/0xb0 [ 936.354069][T20749] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 936.354117][T20749] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 936.354150][T20749] ? rcu_is_watching+0x16/0xb0 [ 936.354180][T20749] ? trace_kmalloc+0x2a/0xf0 [ 936.354211][T20749] ip_generic_getfrag+0x149/0x2d0 [ 936.354247][T20749] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 936.354277][T20749] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 936.354317][T20749] ? __alloc_skb+0x4d0/0x7a0 [ 936.354360][T20749] ? skb_put+0x112/0x210 [ 936.354386][T20749] __ip6_append_data+0x3354/0x40c0 [ 936.354436][T20749] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 936.354502][T20749] ? __pfx___ip6_append_data+0x10/0x10 [ 936.354527][T20749] ? do_raw_spin_lock+0x12b/0x2f0 [ 936.354563][T20749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 936.354600][T20749] ip6_append_data+0x108/0x270 [ 936.354630][T20749] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 936.354669][T20749] udpv6_sendmsg+0xd0d/0x2610 [ 936.354714][T20749] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 936.354772][T20749] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 936.354825][T20749] ? inet_send_prepare+0x5b/0x260 [ 936.354863][T20749] ? inet6_sendmsg+0xe4/0x120 [ 936.354898][T20749] ? __pfx_inet6_sendmsg+0x10/0x10 [ 936.354930][T20749] sock_sendmsg_nosec+0x90/0x190 [ 936.354964][T20749] __sys_sendto+0x408/0x5a0 [ 936.354998][T20749] ? ksys_write+0x1e6/0x270 [ 936.355025][T20749] ? __pfx___sys_sendto+0x10/0x10 [ 936.355056][T20749] ? __mutex_unlock_slowpath+0x731/0x900 [ 936.355121][T20749] ? __pfx_ksys_write+0x10/0x10 [ 936.355151][T20749] __x64_sys_sendto+0xde/0x100 [ 936.355189][T20749] do_syscall_64+0x166/0x520 [ 936.355219][T20749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.355242][T20749] ? clear_bhb_loop+0x70/0xc0 [ 936.355270][T20749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.355292][T20749] RIP: 0033:0x7f00ef39e2d9 [ 936.355314][T20749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.355347][T20749] RSP: 002b:00007f00f02d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 936.355371][T20749] RAX: ffffffffffffffda RBX: 00007f00ef625fa0 RCX: 00007f00ef39e2d9 [ 936.355389][T20749] RDX: 0000000000003000 RSI: 0000200000000e00 RDI: 0000000000000006 [ 936.355403][T20749] RBP: 00007f00f02d3090 R08: 0000000000000000 R09: 0000000000000000 [ 936.355417][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.355431][T20749] R13: 00007f00ef626038 R14: 00007f00ef625fa0 R15: 00007fffb6dc70e8 [ 936.355469][T20749] [ 937.237325][T20760] netlink: 'syz.1.3336': attribute type 11 has an invalid length. [ 937.237357][T20760] netlink: 'syz.1.3336': attribute type 9 has an invalid length. [ 937.237375][T20760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3336'. [ 937.493294][ T5628] Bluetooth: hci1: command tx timeout [ 937.686124][T20767] tipc: Started in network mode [ 937.686162][T20767] tipc: Node identity 5ebe7ea3d29, cluster identity 4711 [ 937.686536][T20767] tipc: Enabled bearer , priority 0 [ 937.954644][T20771] tipc: Resetting bearer [ 937.979260][T20767] syzkaller0: entered promiscuous mode [ 937.979290][T20767] syzkaller0: entered allmulticast mode [ 938.132162][T20763] tipc: Resetting bearer [ 938.257391][T20763] tipc: Disabling bearer [ 938.592511][T20797] FAULT_INJECTION: forcing a failure. [ 938.592511][T20797] name failslab, interval 1, probability 0, space 0, times 0 [ 938.592548][T20797] CPU: 1 UID: 0 PID: 20797 Comm: syz.2.3344 Not tainted syzkaller #0 PREEMPT(full) [ 938.592573][T20797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 938.592588][T20797] Call Trace: [ 938.592596][T20797] [ 938.592624][T20797] dump_stack_lvl+0xe8/0x150 [ 938.592661][T20797] should_fail_ex+0x410/0x560 [ 938.592696][T20797] ? __alloc_skb+0x1db/0x7a0 [ 938.592729][T20797] should_failslab+0xa8/0x100 [ 938.592761][T20797] ? __alloc_skb+0x1db/0x7a0 [ 938.592792][T20797] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 938.592826][T20797] ? __alloc_skb+0x18d/0x7a0 [ 938.592863][T20797] ? __alloc_skb+0x1db/0x7a0 [ 938.592903][T20797] __alloc_skb+0x1db/0x7a0 [ 938.592942][T20797] __ip6_append_data+0x2ec4/0x40c0 [ 938.592992][T20797] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 938.593058][T20797] ? __pfx___ip6_append_data+0x10/0x10 [ 938.593083][T20797] ? do_raw_spin_lock+0x12b/0x2f0 [ 938.593118][T20797] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 938.593151][T20797] ip6_append_data+0x108/0x270 [ 938.593179][T20797] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 938.593218][T20797] udpv6_sendmsg+0xd0d/0x2610 [ 938.593262][T20797] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 938.593314][T20797] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 938.593363][T20797] ? inet_send_prepare+0x5b/0x260 [ 938.593399][T20797] ? inet6_sendmsg+0xe4/0x120 [ 938.593432][T20797] ? __pfx_inet6_sendmsg+0x10/0x10 [ 938.593463][T20797] sock_sendmsg_nosec+0x90/0x190 [ 938.593495][T20797] __sys_sendto+0x408/0x5a0 [ 938.593527][T20797] ? ksys_write+0x1e6/0x270 [ 938.593553][T20797] ? __pfx___sys_sendto+0x10/0x10 [ 938.593584][T20797] ? __mutex_unlock_slowpath+0x731/0x900 [ 938.593646][T20797] ? __pfx_ksys_write+0x10/0x10 [ 938.593675][T20797] __x64_sys_sendto+0xde/0x100 [ 938.593712][T20797] do_syscall_64+0x166/0x520 [ 938.593740][T20797] ? trace_irq_disable+0x3b/0x140 [ 938.593762][T20797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.593785][T20797] ? clear_bhb_loop+0x70/0xc0 [ 938.593822][T20797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.593845][T20797] RIP: 0033:0x7fe2aab9e2d9 [ 938.593868][T20797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.593888][T20797] RSP: 002b:00007fe2ab98a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 938.593913][T20797] RAX: ffffffffffffffda RBX: 00007fe2aae25fa0 RCX: 00007fe2aab9e2d9 [ 938.593931][T20797] RDX: 0000000000003000 RSI: 0000200000000e00 RDI: 0000000000000006 [ 938.593946][T20797] RBP: 00007fe2ab98a090 R08: 0000000000000000 R09: 0000000000000000 [ 938.593960][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.593974][T20797] R13: 00007fe2aae26038 R14: 00007fe2aae25fa0 R15: 00007ffea54c30b8 [ 938.594011][T20797] [ 938.944196][T20806] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 939.017257][T20596] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.017304][T20596] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 939.017340][T20596] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.215081][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 939.410492][T20806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.573881][ T5628] Bluetooth: hci1: command tx timeout [ 939.701537][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3343'. [ 939.717144][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.717168][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.898551][T20832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3349'. [ 939.915884][T20596] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.915922][T20596] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 939.915951][T20596] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.100946][T20837] netlink: 804 bytes leftover after parsing attributes in process `syz.0.3348'. [ 940.100978][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3348'. [ 940.392241][T20596] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.392290][T20596] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 940.392324][T20596] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.507364][T20849] vlan2: entered promiscuous mode [ 940.507389][T20849] bridge0: entered promiscuous mode [ 940.669272][T20855] x_tables: duplicate underflow at hook 1 [ 940.689177][T20596] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.689218][T20596] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 940.689249][T20596] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.217588][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'. [ 942.135583][T20596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 942.171044][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.181764][T20596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 942.202582][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.212787][T20596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 942.232503][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.266727][T20596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 942.365364][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.391256][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 942.913774][T20596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.978107][T20596] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.995093][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.995210][T15096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.035904][T15096] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.036004][T15096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.045174][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 943.092936][T20921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 943.238502][T20921] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 946.041129][T20993] FAULT_INJECTION: forcing a failure. [ 946.041129][T20993] name failslab, interval 1, probability 0, space 0, times 0 [ 946.041173][T20993] CPU: 1 UID: 0 PID: 20993 Comm: syz.1.3376 Not tainted syzkaller #0 PREEMPT(full) [ 946.041202][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 946.041219][T20993] Call Trace: [ 946.041229][T20993] [ 946.041241][T20993] dump_stack_lvl+0xe8/0x150 [ 946.041284][T20993] should_fail_ex+0x410/0x560 [ 946.041326][T20993] should_failslab+0xa8/0x100 [ 946.041365][T20993] __kmalloc_cache_node_noprof+0xaa/0x620 [ 946.041399][T20993] ? __get_vm_area_node+0x155/0x2f0 [ 946.041437][T20993] ? __get_vm_area_node+0x155/0x2f0 [ 946.041483][T20993] __get_vm_area_node+0x155/0x2f0 [ 946.041529][T20993] __vmalloc_node_range_noprof+0x343/0x1540 [ 946.041558][T20993] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 946.041589][T20993] ? __lock_acquire+0x747/0x2de0 [ 946.041648][T20993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 946.041686][T20993] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 946.041714][T20993] __vmalloc_noprof+0xd2/0x120 [ 946.041739][T20993] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 946.041774][T20993] bpf_prog_alloc_no_stats+0x47/0x560 [ 946.041804][T20993] ? bpf_prog_alloc+0x2a/0x1a0 [ 946.041837][T20993] bpf_prog_alloc+0x3c/0x1a0 [ 946.041871][T20993] bpf_prog_load+0x7f8/0x1c20 [ 946.041918][T20993] ? __pfx_bpf_prog_load+0x10/0x10 [ 946.041981][T20993] __sys_bpf+0xd0d/0xd90 [ 946.042022][T20993] ? __pfx___sys_bpf+0x10/0x10 [ 946.042071][T20993] ? __fget_files+0x2a/0x420 [ 946.042140][T20993] ? ksys_write+0x242/0x270 [ 946.042169][T20993] ? __pfx_ksys_write+0x10/0x10 [ 946.042201][T20993] __x64_sys_bpf+0xba/0xd0 [ 946.042232][T20993] do_syscall_64+0x166/0x520 [ 946.042267][T20993] ? trace_irq_disable+0x3b/0x140 [ 946.042293][T20993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.042319][T20993] ? clear_bhb_loop+0x70/0xc0 [ 946.042350][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.042376][T20993] RIP: 0033:0x7f5d2cd9e2d9 [ 946.042399][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.042420][T20993] RSP: 002b:00007f5d2dce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 946.042448][T20993] RAX: ffffffffffffffda RBX: 00007f5d2d025fa0 RCX: 00007f5d2cd9e2d9 [ 946.042466][T20993] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 946.042483][T20993] RBP: 00007f5d2dce3090 R08: 0000000000000000 R09: 0000000000000000 [ 946.042499][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.042514][T20993] R13: 00007f5d2d026038 R14: 00007f5d2d025fa0 R15: 00007ffc6b778308 [ 946.042555][T20993] [ 946.285373][T20993] syz.1.3376: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 946.285640][T20993] CPU: 0 UID: 0 PID: 20993 Comm: syz.1.3376 Not tainted syzkaller #0 PREEMPT(full) [ 946.285712][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 946.285756][T20993] Call Trace: [ 946.285781][T20993] [ 946.285805][T20993] dump_stack_lvl+0xe8/0x150 [ 946.285926][T20993] warn_alloc+0x24d/0x270 [ 946.286141][T20993] ? __kasan_kmalloc+0x22/0xb0 [ 946.286268][T20993] ? __pfx_warn_alloc+0x10/0x10 [ 946.286340][T20993] ? __get_vm_area_node+0x155/0x2f0 [ 946.286448][T20993] ? __get_vm_area_node+0x2a9/0x2f0 [ 946.286572][T20993] __vmalloc_node_range_noprof+0x36b/0x1540 [ 946.286650][T20993] ? __lock_acquire+0x747/0x2de0 [ 946.286768][T20993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 946.286872][T20993] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 946.286973][T20993] __vmalloc_noprof+0xd2/0x120 [ 946.287062][T20993] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 946.287191][T20993] bpf_prog_alloc_no_stats+0x47/0x560 [ 946.287266][T20993] ? bpf_prog_alloc+0x2a/0x1a0 [ 946.287348][T20993] bpf_prog_alloc+0x3c/0x1a0 [ 946.287432][T20993] bpf_prog_load+0x7f8/0x1c20 [ 946.287543][T20993] ? __pfx_bpf_prog_load+0x10/0x10 [ 946.287698][T20993] __sys_bpf+0xd0d/0xd90 [ 946.287821][T20993] ? __pfx___sys_bpf+0x10/0x10 [ 946.287920][T20993] ? __fget_files+0x2a/0x420 [ 946.288066][T20993] ? ksys_write+0x242/0x270 [ 946.288149][T20993] ? __pfx_ksys_write+0x10/0x10 [ 946.288223][T20993] __x64_sys_bpf+0xba/0xd0 [ 946.288306][T20993] do_syscall_64+0x166/0x520 [ 946.288382][T20993] ? trace_irq_disable+0x3b/0x140 [ 946.288469][T20993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.288490][T20993] ? clear_bhb_loop+0x70/0xc0 [ 946.288515][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.288537][T20993] RIP: 0033:0x7f5d2cd9e2d9 [ 946.288558][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.288577][T20993] RSP: 002b:00007f5d2dce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 946.288600][T20993] RAX: ffffffffffffffda RBX: 00007f5d2d025fa0 RCX: 00007f5d2cd9e2d9 [ 946.288615][T20993] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 946.288629][T20993] RBP: 00007f5d2dce3090 R08: 0000000000000000 R09: 0000000000000000 [ 946.288642][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.288656][T20993] R13: 00007f5d2d026038 R14: 00007f5d2d025fa0 R15: 00007ffc6b778308 [ 946.288692][T20993] [ 946.414027][T20993] Mem-Info: [ 946.414094][T20993] active_anon:5659 inactive_anon:0 isolated_anon:0 [ 946.414094][T20993] active_file:0 inactive_file:43683 isolated_file:0 [ 946.414094][T20993] unevictable:0 dirty:111 writeback:0 [ 946.414094][T20993] slab_reclaimable:11719 slab_unreclaimable:107655 [ 946.414094][T20993] mapped:30581 shmem:532 pagetables:5680 [ 946.414094][T20993] sec_pagetables:0 bounce:0 [ 946.414094][T20993] kernel_misc_reclaimable:0 [ 946.414094][T20993] free:1267442 free_pcp:8530 free_cma:0 [ 946.414260][T20993] Node 0 active_anon:22636kB inactive_anon:0kB active_file:0kB inactive_file:174528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122324kB dirty:440kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13504kB pagetables:22596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 946.414445][T20993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 946.414615][T20993] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.414816][T20993] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 946.414967][T20993] Node 0 DMA32 free:1109208kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22636kB inactive_anon:0kB active_file:0kB inactive_file:174528kB unevictable:0kB writepending:440kB zspages:0kB present:3129332kB managed:2527704kB mlocked:0kB bounce:0kB free_pcp:34120kB local_pcp:13680kB free_cma:0kB [ 946.415171][T20993] lowmem_reserve[]: 0 0 0 0 0 [ 946.415290][T20993] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.415462][T20993] lowmem_reserve[]: 0 0 0 0 0 [ 946.415578][T20993] Node 1 Normal free:3945200kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.415772][T20993] lowmem_reserve[]: 0 0 0 0 0 [ 946.415897][T20993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 946.416306][T20993] Node 0 DMA32: 1962*4kB (UM) 934*8kB (UME) 900*16kB (UME) 1366*32kB (UME) 1274*64kB (UME) 951*128kB (UME) 520*256kB (UME) 180*512kB (UM) 37*1024kB (U) 4*2048kB (UME) 137*4096kB (UM) = 1109208kB [ 946.416862][T20993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 946.602216][T20993] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 6*32kB (UM) 6*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945200kB [ 946.602793][T20993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.602850][T20993] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 946.602905][T20993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.602954][T20993] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 946.603009][T20993] 44213 total pagecache pages [ 946.603054][T20993] 0 pages in swap cache [ 946.603078][T20993] Free swap = 124996kB [ 946.603641][T20993] Total swap = 124996kB [ 946.603669][T20993] 2097051 pages RAM [ 946.603678][T20993] 0 pages HighMem/MovableOnly [ 946.603687][T20993] 433509 pages reserved [ 946.603696][T20993] 0 pages cma reserved [ 947.235016][T21002] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 947.433066][T21008] bond18: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 947.469562][T21002] veth11: entered promiscuous mode [ 947.484784][T21002] bond18: (slave veth11): Enslaving as a backup interface with a down link [ 947.811541][T20596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.930705][T21025] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3384'. [ 947.962534][T21025] syzkaller1: entered promiscuous mode [ 947.962576][T21025] syzkaller1: entered allmulticast mode [ 948.137884][T21029] netlink: 'syz.2.3386': attribute type 4 has an invalid length. [ 948.137914][T21029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3386'. [ 948.201839][T21029] .`: renamed from bond0 (while UP) [ 948.429435][T21032] batadv0: entered promiscuous mode [ 948.449996][T21032] batadv0: left promiscuous mode [ 948.591788][T21042] block nbd4: not configured, cannot reconfigure [ 948.667259][T21045] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3387'. [ 948.857255][T21042] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 948.857284][T21042] netlink: 'syz.4.3387': attribute type 2 has an invalid length. [ 949.058993][T20596] veth0_vlan: entered promiscuous mode [ 949.115469][T20596] veth1_vlan: entered promiscuous mode [ 949.321222][T20596] veth0_macvtap: entered promiscuous mode [ 949.508081][T20596] veth1_macvtap: entered promiscuous mode [ 949.601255][T20596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.636406][T20596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.034474][T13710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.074468][T15095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.074521][T15095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.074559][T15095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.791387][T15095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.791413][T15095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.893744][T15094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.893770][T15094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.004569][T21092] netlink: 'syz.0.3396': attribute type 4 has an invalid length. [ 951.121347][T21100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3398'. [ 951.530344][T21111] FAULT_INJECTION: forcing a failure. [ 951.530344][T21111] name failslab, interval 1, probability 0, space 0, times 0 [ 951.530388][T21111] CPU: 1 UID: 0 PID: 21111 Comm: syz.2.3400 Not tainted syzkaller #0 PREEMPT(full) [ 951.530418][T21111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 951.530433][T21111] Call Trace: [ 951.530442][T21111] [ 951.530453][T21111] dump_stack_lvl+0xe8/0x150 [ 951.530495][T21111] should_fail_ex+0x410/0x560 [ 951.530534][T21111] ? __alloc_skb+0x1db/0x7a0 [ 951.530581][T21111] should_failslab+0xa8/0x100 [ 951.530615][T21111] ? __alloc_skb+0x1db/0x7a0 [ 951.530649][T21111] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 951.530676][T21111] ? lock_acquire+0x115/0x350 [ 951.530702][T21111] ? __alloc_skb+0x1db/0x7a0 [ 951.530762][T21111] __alloc_skb+0x1db/0x7a0 [ 951.530803][T21111] tcp_stream_alloc_skb+0x3f/0x580 [ 951.530829][T21111] ? __asan_memset+0x22/0x50 [ 951.530857][T21111] tcp_connect+0x1646/0x54e0 [ 951.530921][T21111] ? __lock_acquire+0x747/0x2de0 [ 951.530951][T21111] ? lock_acquire+0x115/0x350 [ 951.530978][T21111] ? __pfx_tcp_connect+0x10/0x10 [ 951.531035][T21111] ? __asan_memset+0x22/0x50 [ 951.531067][T21111] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 951.531096][T21111] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 951.531130][T21111] ? sk_setup_caps+0x94f/0xbc0 [ 951.531156][T21111] ? sk_setup_caps+0x29/0xbc0 [ 951.531183][T21111] tcp_v4_connect+0x1264/0x1b20 [ 951.531208][T21111] ? ___sys_sendmsg+0x2a5/0x360 [ 951.531231][T21111] ? __sys_sendmmsg+0x273/0x4d0 [ 951.531273][T21111] ? __pfx_tcp_v4_connect+0x10/0x10 [ 951.531313][T21111] __inet_stream_connect+0x258/0xe00 [ 951.531386][T21111] ? __pfx___inet_stream_connect+0x10/0x10 [ 951.531423][T21111] ? __kasan_kmalloc+0x93/0xb0 [ 951.531454][T21111] ? __kmalloc_cache_noprof+0x321/0x600 [ 951.531481][T21111] ? __kmalloc_cache_noprof+0x14d/0x600 [ 951.531505][T21111] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 951.531540][T21111] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 951.531572][T21111] tcp_sendmsg_locked+0x4a3b/0x5320 [ 951.531598][T21111] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 951.531644][T21111] ? register_lock_class+0x31/0x2e0 [ 951.531669][T21111] ? tcp_sendmsg_locked+0x351/0x5320 [ 951.531696][T21111] ? __lock_acquire+0x747/0x2de0 [ 951.531739][T21111] ? ktime_get+0x45/0x220 [ 951.531765][T21111] ? ktime_get+0x45/0x220 [ 951.531797][T21111] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 951.531832][T21111] ? tcp_sendmsg+0x21/0x50 [ 951.531860][T21111] ? __local_bh_enable_ip+0xd6/0x140 [ 951.531897][T21111] tcp_sendmsg+0x2f/0x50 [ 951.531922][T21111] ? __pfx_inet_sendmsg+0x10/0x10 [ 951.531955][T21111] sock_sendmsg_nosec+0x10f/0x190 [ 951.531989][T21111] ____sys_sendmsg+0x54e/0x850 [ 951.532020][T21111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.532057][T21111] ? import_iovec+0x73/0xa0 [ 951.532092][T21111] ___sys_sendmsg+0x2a5/0x360 [ 951.532124][T21111] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.532181][T21111] ? __fget_files+0x2a/0x420 [ 951.532213][T21111] ? __fget_files+0x3a2/0x420 [ 951.532258][T21111] __sys_sendmmsg+0x273/0x4d0 [ 951.532290][T21111] ? __pfx___sys_sendmmsg+0x10/0x10 [ 951.532333][T21111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.532393][T21111] ? rcu_is_watching+0x16/0xb0 [ 951.532433][T21111] __x64_sys_sendmmsg+0xa0/0xc0 [ 951.532460][T21111] do_syscall_64+0x166/0x520 [ 951.532491][T21111] ? trace_irq_disable+0x3b/0x140 [ 951.532515][T21111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.532545][T21111] ? clear_bhb_loop+0x70/0xc0 [ 951.532573][T21111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.532596][T21111] RIP: 0033:0x7fe2aab9e2d9 [ 951.532618][T21111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.532637][T21111] RSP: 002b:00007fe2ab98a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.532662][T21111] RAX: ffffffffffffffda RBX: 00007fe2aae25fa0 RCX: 00007fe2aab9e2d9 [ 951.532678][T21111] RDX: 0000000000000001 RSI: 0000200000002a00 RDI: 0000000000000003 [ 951.532693][T21111] RBP: 00007fe2ab98a090 R08: 0000000000000000 R09: 0000000000000000 [ 951.532707][T21111] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 951.532722][T21111] R13: 00007fe2aae26038 R14: 00007fe2aae25fa0 R15: 00007ffea54c30b8 [ 951.532759][T21111] [ 952.347627][T21115] Bluetooth: MGMT ver 1.23 [ 952.417422][T21087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3394'. [ 952.417454][T21087] openvswitch: netlink: Flow actions attr not present in new flow. [ 952.640972][T21087] syzkaller0: entered promiscuous mode [ 952.640999][T21087] syzkaller0: entered allmulticast mode [ 952.670675][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 952.685418][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 952.686338][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 952.689445][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 952.690166][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 952.817634][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.817661][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.817676][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.817691][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.819089][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.819112][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.819126][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.819139][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.820532][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.820549][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.820563][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.820576][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.823042][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.823064][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.824938][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.824986][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.869772][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.869841][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.869889][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.869935][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.963175][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.963203][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.963217][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.963231][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.964879][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.964899][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.964912][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.964925][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.966157][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.966177][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.966189][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.966202][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.999352][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.999407][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 952.999446][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 952.999479][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.117468][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.117499][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.117515][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.117530][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.119353][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.119377][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.119390][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.119403][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.120879][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.120896][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.120914][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.120926][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.122603][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.122623][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.122637][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.122649][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.263739][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.263769][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.263784][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.263797][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264023][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264037][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264050][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264064][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264328][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264345][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264359][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264373][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264636][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264673][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264688][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.264702][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.264993][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265009][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265024][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265039][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265290][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265307][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265321][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265336][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265581][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265598][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265612][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265627][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265869][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265884][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.265899][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.265913][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266166][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266182][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266196][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266211][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266460][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266476][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266491][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266506][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266756][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266773][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.266787][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.266802][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267053][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267069][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267083][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267098][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267368][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267385][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267400][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267414][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267803][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267826][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.267840][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.267853][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.268109][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.268132][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.268146][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.268159][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.268430][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.268447][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.268461][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.268474][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269078][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269102][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269118][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269132][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269533][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269567][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269587][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269652][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269927][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269944][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.269959][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.269974][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270223][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270240][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270254][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270269][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270512][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270529][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270544][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270560][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270794][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270813][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.270827][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.270841][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.271088][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.271219][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.271313][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.271331][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.271618][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.271634][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.271648][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.271662][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.272151][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.272170][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.272185][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.272200][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.272648][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.272672][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 953.272689][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 953.272704][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 954.002895][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 954.002926][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 954.002941][T21121] Bluetooth: hci0: unsupported parameter 5161 [ 954.002955][T21121] Bluetooth: hci0: unsupported parameter 8192 [ 954.098283][T21126] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 954.251142][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 954.341540][ T5625] syz_tun (unregistering): left allmulticast mode [ 954.406198][T15092] smbdirect: ib_dev[syz1] removed [ 954.429427][T21126] Cannot find set identified by id 0 to match [ 954.784103][ T4935] Bluetooth: hci4: command tx timeout [ 954.996379][T21154] FAULT_INJECTION: forcing a failure. [ 954.996379][T21154] name failslab, interval 1, probability 0, space 0, times 0 [ 954.996419][T21154] CPU: 1 UID: 0 PID: 21154 Comm: syz.3.3410 Not tainted syzkaller #0 PREEMPT(full) [ 954.996445][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 954.996474][T21154] Call Trace: [ 954.996484][T21154] [ 954.996495][T21154] dump_stack_lvl+0xe8/0x150 [ 954.996556][T21154] should_fail_ex+0x410/0x560 [ 954.996594][T21154] should_failslab+0xa8/0x100 [ 954.996630][T21154] __kmalloc_cache_noprof+0xa3/0x600 [ 954.996659][T21154] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 954.996688][T21154] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 954.996725][T21154] bpf_prog_alloc_no_stats+0xd8/0x560 [ 954.996753][T21154] ? bpf_prog_alloc+0x2a/0x1a0 [ 954.996785][T21154] bpf_prog_alloc+0x3c/0x1a0 [ 954.996817][T21154] bpf_prog_load+0x7f8/0x1c20 [ 954.996861][T21154] ? __pfx_bpf_prog_load+0x10/0x10 [ 954.996921][T21154] __sys_bpf+0xd0d/0xd90 [ 954.996957][T21154] ? __pfx___sys_bpf+0x10/0x10 [ 954.997099][T21154] ? __fget_files+0x2a/0x420 [ 954.997158][T21154] ? ksys_write+0x242/0x270 [ 954.997192][T21154] ? __pfx_ksys_write+0x10/0x10 [ 954.997224][T21154] __x64_sys_bpf+0xba/0xd0 [ 954.997255][T21154] do_syscall_64+0x166/0x520 [ 954.997288][T21154] ? trace_irq_disable+0x3b/0x140 [ 954.997313][T21154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.997339][T21154] ? clear_bhb_loop+0x70/0xc0 [ 954.997370][T21154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.997396][T21154] RIP: 0033:0x7f150639e2d9 [ 954.997420][T21154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.997442][T21154] RSP: 002b:00007f150719a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 954.997468][T21154] RAX: ffffffffffffffda RBX: 00007f1506625fa0 RCX: 00007f150639e2d9 [ 954.997484][T21154] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 954.997496][T21154] RBP: 00007f150719a090 R08: 0000000000000000 R09: 0000000000000000 [ 954.997510][T21154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.997522][T21154] R13: 00007f1506626038 R14: 00007f1506625fa0 R15: 00007ffcdac91a18 [ 954.997558][T21154] [ 955.745496][T21166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 956.131629][T21174] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 956.430791][T21185] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 956.430819][T21185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3416'. [ 956.767354][T21195] FAULT_INJECTION: forcing a failure. [ 956.767354][T21195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.767398][T21195] CPU: 0 UID: 0 PID: 21195 Comm: syz.3.3421 Not tainted syzkaller #0 PREEMPT(full) [ 956.767426][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 956.767555][T21195] Call Trace: [ 956.767566][T21195] [ 956.767578][T21195] dump_stack_lvl+0xe8/0x150 [ 956.767621][T21195] should_fail_ex+0x410/0x560 [ 956.767663][T21195] _copy_from_user+0x2d/0xb0 [ 956.767703][T21195] copy_from_bpfptr+0x5c/0x90 [ 956.767737][T21195] bpf_prog_load+0xcdb/0x1c20 [ 956.767785][T21195] ? __pfx_bpf_prog_load+0x10/0x10 [ 956.767850][T21195] __sys_bpf+0xd0d/0xd90 [ 956.767892][T21195] ? __pfx___sys_bpf+0x10/0x10 [ 956.767937][T21195] ? __fget_files+0x2a/0x420 [ 956.767999][T21195] ? ksys_write+0x242/0x270 [ 956.768029][T21195] ? __pfx_ksys_write+0x10/0x10 [ 956.768063][T21195] __x64_sys_bpf+0xba/0xd0 [ 956.768096][T21195] do_syscall_64+0x166/0x520 [ 956.768130][T21195] ? trace_irq_disable+0x3b/0x140 [ 956.768157][T21195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.768184][T21195] ? clear_bhb_loop+0x70/0xc0 [ 956.768222][T21195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.768249][T21195] RIP: 0033:0x7f150639e2d9 [ 956.768273][T21195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.768296][T21195] RSP: 002b:00007f150719a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.768331][T21195] RAX: ffffffffffffffda RBX: 00007f1506625fa0 RCX: 00007f150639e2d9 [ 956.768351][T21195] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 956.768368][T21195] RBP: 00007f150719a090 R08: 0000000000000000 R09: 0000000000000000 [ 956.768385][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.768401][T21195] R13: 00007f1506626038 R14: 00007f1506625fa0 R15: 00007ffcdac91a18 [ 956.768453][T21195] [ 956.857864][ T4935] Bluetooth: hci4: command tx timeout [ 957.446020][T21196] syzkaller0: entered promiscuous mode [ 957.446051][T21196] syzkaller0: entered allmulticast mode [ 957.665000][T21207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 958.944301][ T4935] Bluetooth: hci4: command tx timeout [ 961.022161][ T4935] Bluetooth: hci4: command tx timeout [ 964.264187][T21250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3429'. [ 964.715839][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.716385][T21118] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.716786][T21118] bridge_slave_0: entered allmulticast mode [ 964.719711][T21118] bridge_slave_0: entered promiscuous mode [ 964.740380][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.744930][T21118] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.745663][T21118] bridge_slave_1: entered allmulticast mode [ 964.751739][T21118] bridge_slave_1: entered promiscuous mode [ 964.808280][T21277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3432'. [ 964.884110][ T4935] Bluetooth: hci5: command 0x0406 tx timeout [ 964.959598][T21118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.973806][T21118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.097319][T21279] syzkaller0: entered promiscuous mode [ 965.097355][T21279] syzkaller0: entered allmulticast mode [ 965.306461][T21118] team0: Port device team_slave_0 added [ 965.512399][T21281] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.513149][T21281] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.660983][T21281] bridge_slave_0: left allmulticast mode [ 965.661010][T21281] bridge_slave_0: left promiscuous mode [ 965.661318][T21281] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.708631][T21281] bridge_slave_1: left allmulticast mode [ 965.708665][T21281] bridge_slave_1: left promiscuous mode [ 965.710140][T21281] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.887762][T21304] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 966.074131][T21281] bond0: (slave bond_slave_0): Releasing backup interface [ 966.217850][T21281] bond0: (slave bond_slave_1): Releasing backup interface [ 966.265027][T21281] team0: Port device team_slave_0 removed [ 966.296736][T21281] team0: Port device team_slave_1 removed [ 966.324173][T21281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.327491][T21281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.344125][T21281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.370728][T21281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.398540][T21281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 966.414309][T21118] team0: Port device team_slave_1 added [ 966.957766][T21118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.957789][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.957821][T21118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.019460][T21118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.019483][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.019516][T21118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.209896][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 967.209923][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 967.327162][T21336] netlink: 'syz.0.3440': attribute type 2 has an invalid length. [ 967.327187][T21336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3440'. [ 967.692556][T21332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.708729][T21332] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.729456][T21332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.806647][T21332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.811996][T21332] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 967.975364][T21336] : entered promiscuous mode [ 968.172866][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 968.239057][T21363] xt_hl: Unknown Hop Limit match mode: 4 [ 968.622376][T21118] hsr_slave_0: entered promiscuous mode [ 968.631076][T21118] hsr_slave_1: entered promiscuous mode [ 968.645635][T21118] debugfs: 'hsr0' already exists in 'hsr' [ 968.645662][T21118] Cannot create hsr debugfs directory [ 968.658709][T21375] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 969.414850][T21375] syzkaller0: entered promiscuous mode [ 969.414884][T21375] syzkaller0: entered allmulticast mode [ 969.418170][T21378] tipc: Started in network mode [ 969.418193][T21378] tipc: Node identity , cluster identity 4711 [ 969.418213][T21378] tipc: Failed to obtain node identity [ 969.418245][T21378] tipc: Enabling of bearer rejected, failed to enable media [ 969.746515][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 970.036173][T21412] ip_tables: iptables: counters copy to user failed while replacing table [ 970.758183][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 975.117728][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 975.717757][T21396] vcan0: entered allmulticast mode [ 975.740867][T21410] vcan0: left allmulticast mode [ 975.765630][T21417] erspan1: entered allmulticast mode [ 975.906503][T21428] erspan0: entered promiscuous mode [ 975.987308][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 976.070858][T21437] ip6gre1: entered allmulticast mode [ 976.157710][T13708] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 976.300759][T21443] tipc: Enabled bearer , priority 0 [ 976.310739][T21443] syzkaller0: entered promiscuous mode [ 976.310764][T21443] syzkaller0: entered allmulticast mode [ 976.340781][T21443] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 976.408188][T21452] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3457'. [ 976.432426][T21443] tipc: Resetting bearer [ 976.488170][T21442] tipc: Resetting bearer [ 976.521009][T21442] tipc: Disabling bearer [ 976.686951][T21118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.852752][T21118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.975705][T21118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.116411][T21118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.278884][T21447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.294546][T21458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3461'. [ 979.344196][T21118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 979.368901][T21118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.373041][T21118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 979.771398][T21118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.859803][T21471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3464'. [ 979.932731][T21118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 979.973166][T13711] IPVS: starting estimator thread 0... [ 979.980164][T21118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.981182][T21118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 980.012228][T21118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.154243][T21474] IPVS: using max 25 ests per chain, 60000 per kthread [ 980.174997][ T5628] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 980.180189][ T30] audit: type=1804 audit(1791992899.689:7): pid=21484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3466" name="/newroot/79/cgroup.controllers" dev="tmpfs" ino=422 res=1 errno=0 [ 980.180247][ T30] audit: type=1800 audit(1791992899.689:8): pid=21484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3466" name="cgroup.controllers" dev="tmpfs" ino=422 res=0 errno=0 [ 980.538745][T21118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.571748][T21118] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.591418][T13711] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.591548][T13711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.613272][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 980.640053][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.640184][T15092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.866747][T21496] tipc: Started in network mode [ 980.866787][T21496] tipc: Node identity ac14142f, cluster identity 4711 [ 980.867191][T21496] tipc: New replicast peer: 172.20.20.170 [ 980.867781][T21496] tipc: Enabled bearer , priority 10 [ 980.916868][T21497] tipc: New replicast peer: 0.0.0.0 [ 981.547480][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 981.578002][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3472'. [ 981.999758][ T5751] tipc: Node number set to 2886997039 [ 982.216090][T21118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.302381][T21118] veth0_vlan: entered promiscuous mode [ 982.321810][T21118] veth1_vlan: entered promiscuous mode [ 982.372247][T21118] veth0_macvtap: entered promiscuous mode [ 982.406743][T21118] veth1_macvtap: entered promiscuous mode [ 982.436775][T21118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.481297][T21118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.563772][ T1431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.563825][ T1431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.563886][ T1431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.563924][ T1431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.252273][T21511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.495020][T13708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.495046][T13708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.600402][T13708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.600430][T13708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.947939][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 985.042611][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 985.154729][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3401'. [ 985.319249][T21562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3478'. [ 985.319300][T21562] nbd: must specify a device to reconfigure [ 985.793777][T21580] nbd: nbd1 already in use [ 985.799156][T21580] block nbd1: NBD_DISCONNECT [ 985.799195][T21580] block nbd1: Send disconnect failed -32 [ 985.799218][T21580] block nbd1: Send disconnect failed -32 [ 985.799240][T21580] block nbd1: Send disconnect failed -32 [ 985.799274][T21580] block nbd1: shutting down sockets [ 986.340005][T21592] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3480'. [ 986.471312][T21603] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 986.657888][T21603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.778284][T21603] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 987.589331][T21638] netlink: 'syz.0.3492': attribute type 1 has an invalid length. [ 987.591619][T21638] xt_TPROXY: Can be used only with -p tcp or -p udp [ 988.086967][T21652] netlink: 964 bytes leftover after parsing attributes in process `syz.0.3495'. [ 988.122372][T21653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3493'. [ 988.172289][T21656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3495'. [ 988.189365][T21656] netlink: 'syz.0.3495': attribute type 2 has an invalid length. [ 989.014778][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.050434][T21670] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3499'. [ 989.050492][T21670] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3499'. [ 989.163801][T21670] xt_policy: output policy not valid in PREROUTING and INPUT [ 989.262684][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 989.419627][T21676] syz_tun: entered allmulticast mode [ 989.429542][T21676] Cannot find del_set index 0 as target [ 989.753707][T21681] bond0: (slave macvlan3): Opening slave failed [ 989.856425][T21685] syzkaller0: entered promiscuous mode [ 989.856453][T21685] syzkaller0: entered allmulticast mode [ 989.952429][T21664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 990.088045][T21664] netlink: Conntrack attr has 8 unknown bytes [ 990.088096][T21664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.170518][T21683] openvswitch: netlink: Message has 8 unknown bytes. [ 990.429860][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3507'. [ 990.444849][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3507'. [ 990.654211][ T5628] block nbd1: Receive control failed (result -107) [ 990.654336][ T5628] [ 990.663295][ T5628] ====================================================== [ 990.670518][ T5628] WARNING: possible circular locking dependency detected [ 990.677595][ T5628] syzkaller #0 Not tainted [ 990.682070][ T5628] ------------------------------------------------------ [ 990.689218][ T5628] kworker/u9:2/5628 is trying to acquire lock: [ 990.700395][ T5628] ffff88807aa6a960 (sk_lock-AF_INET-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 990.710165][ T5628] [ 990.710165][ T5628] but task is already holding lock: [ 990.717562][ T5628] ffff88807cb19068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 990.726855][ T5628] [ 990.726855][ T5628] which lock already depends on the new lock. [ 990.726855][ T5628] [ 990.737685][ T5628] [ 990.737685][ T5628] the existing dependency chain (in reverse order) is: [ 990.747124][ T5628] [ 990.747124][ T5628] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 990.754912][ T5628] __mutex_lock+0x19d/0x1550 [ 990.760207][ T5628] nbd_queue_rq+0x373/0xff0 [ 990.765288][ T5628] blk_mq_dispatch_rq_list+0x499/0x1990 [ 990.771411][ T5628] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 990.778313][ T5628] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 990.784873][ T5628] blk_mq_run_work_fn+0x16c/0x300 [ 990.790488][ T5628] process_scheduled_works+0xc3d/0x1630 [ 990.796613][ T5628] worker_thread+0xa47/0xfb0 [ 990.801786][ T5628] kthread+0x38b/0x480 [ 990.806432][ T5628] ret_from_fork+0x514/0xb70 [ 990.811625][ T5628] ret_from_fork_asm+0x1a/0x30 [ 990.816982][ T5628] [ 990.816982][ T5628] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 990.824248][ T5628] __mutex_lock+0x19d/0x1550 [ 990.829507][ T5628] nbd_queue_rq+0xc1/0xff0 [ 990.834949][ T5628] blk_mq_dispatch_rq_list+0x499/0x1990 [ 990.841085][ T5628] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 990.847997][ T5628] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 990.854633][ T5628] blk_mq_run_work_fn+0x16c/0x300 [ 990.860343][ T5628] process_scheduled_works+0xc3d/0x1630 [ 990.866500][ T5628] worker_thread+0xa47/0xfb0 [ 990.871684][ T5628] kthread+0x38b/0x480 [ 990.876355][ T5628] ret_from_fork+0x514/0xb70 [ 990.881542][ T5628] ret_from_fork_asm+0x1a/0x30 [ 990.886896][ T5628] [ 990.886896][ T5628] -> #4 (set->srcu){.+.+}-{0:0}: [ 990.894136][ T5628] __synchronize_srcu+0xc9/0x2f0 [ 990.899680][ T5628] elevator_switch+0x1e8/0x7b0 [ 990.905058][ T5628] elevator_change+0x2fa/0x480 [ 990.910444][ T5628] elevator_set_default+0x375/0x440 [ 990.916262][ T5628] blk_register_queue+0x3f3/0x4e0 [ 990.921875][ T5628] __add_disk+0x6b8/0xdb0 [ 990.926802][ T5628] add_disk_fwnode+0x100/0x3a0 [ 990.932155][ T5628] nbd_dev_add+0x733/0xb60 [ 990.937156][ T5628] nbd_init+0x168/0x1f0 [ 990.941956][ T5628] do_one_initcall+0x250/0x870 [ 990.947305][ T5628] do_initcall_level+0x10a/0x1a0 [ 990.952852][ T5628] do_initcalls+0x59/0xa0 [ 990.957939][ T5628] kernel_init_freeable+0x29d/0x3e0 [ 990.963703][ T5628] kernel_init+0x22/0x1d0 [ 990.968694][ T5628] ret_from_fork+0x514/0xb70 [ 990.973862][ T5628] ret_from_fork_asm+0x1a/0x30 [ 990.979381][ T5628] [ 990.979381][ T5628] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 990.987254][ T5628] __mutex_lock+0x19d/0x1550 [ 990.992539][ T5628] elevator_change+0x1af/0x480 [ 990.997979][ T5628] elevator_set_none+0xb5/0x140 [ 991.003600][ T5628] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 991.010608][ T5628] nbd_start_device+0x189/0xb30 [ 991.016131][ T5628] nbd_genl_connect+0x167d/0x1cd0 [ 991.022125][ T5628] genl_family_rcv_msg_doit+0x233/0x340 [ 991.028442][ T5628] genl_rcv_msg+0x614/0x7a0 [ 991.033538][ T5628] netlink_rcv_skb+0x226/0x4a0 [ 991.039328][ T5628] genl_rcv+0x28/0x40 [ 991.043886][ T5628] netlink_unicast+0x7bd/0x940 [ 991.049249][ T5628] netlink_sendmsg+0x813/0xb40 [ 991.054759][ T5628] sock_sendmsg_nosec+0x14e/0x190 [ 991.060481][ T5628] ____sys_sendmsg+0x54e/0x850 [ 991.065862][ T5628] ___sys_sendmsg+0x2a5/0x360 [ 991.071124][ T5628] __x64_sys_sendmsg+0x1b1/0x290 [ 991.076638][ T5628] do_syscall_64+0x166/0x520 [ 991.081824][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.088300][ T5628] [ 991.088300][ T5628] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 991.097091][ T5628] blk_alloc_queue+0x544/0x690 [ 991.102625][ T5628] __blk_mq_alloc_disk+0x194/0x390 [ 991.108324][ T5628] nbd_dev_add+0x494/0xb60 [ 991.113321][ T5628] nbd_init+0x168/0x1f0 [ 991.118196][ T5628] do_one_initcall+0x250/0x870 [ 991.123671][ T5628] do_initcall_level+0x10a/0x1a0 [ 991.129307][ T5628] do_initcalls+0x59/0xa0 [ 991.134239][ T5628] kernel_init_freeable+0x29d/0x3e0 [ 991.140556][ T5628] kernel_init+0x22/0x1d0 [ 991.145730][ T5628] ret_from_fork+0x514/0xb70 [ 991.151111][ T5628] ret_from_fork_asm+0x1a/0x30 [ 991.156574][ T5628] [ 991.156574][ T5628] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 991.163856][ T5628] fs_reclaim_acquire+0x71/0x100 [ 991.169673][ T5628] __kmalloc_cache_noprof+0x61/0x600 [ 991.176061][ T5628] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 991.182129][ T5628] tcp_sendmsg_locked+0x4a3b/0x5320 [ 991.188438][ T5628] tcp_sendmsg+0x2f/0x50 [ 991.193315][ T5628] sock_sendmsg_nosec+0x10f/0x190 [ 991.198909][ T5628] ____sys_sendmsg+0x54e/0x850 [ 991.204241][ T5628] ___sys_sendmsg+0x2a5/0x360 [ 991.209580][ T5628] __x64_sys_sendmsg+0x1b1/0x290 [ 991.215362][ T5628] do_syscall_64+0x166/0x520 [ 991.220719][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.227646][ T5628] [ 991.227646][ T5628] -> #0 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 991.236587][ T5628] __lock_acquire+0x164c/0x2de0 [ 991.242195][ T5628] lock_acquire+0x115/0x350 [ 991.247735][ T5628] lock_sock_nested+0x41/0x100 [ 991.253099][ T5628] inet_shutdown+0x6a/0x390 [ 991.258580][ T5628] nbd_mark_nsock_dead+0x2cb/0x550 [ 991.264562][ T5628] recv_work+0x1cee/0x1e10 [ 991.269763][ T5628] process_scheduled_works+0xc3d/0x1630 [ 991.275992][ T5628] worker_thread+0xa47/0xfb0 [ 991.281369][ T5628] kthread+0x38b/0x480 [ 991.286024][ T5628] ret_from_fork+0x514/0xb70 [ 991.291551][ T5628] ret_from_fork_asm+0x1a/0x30 [ 991.296899][ T5628] [ 991.296899][ T5628] other info that might help us debug this: [ 991.296899][ T5628] [ 991.307438][ T5628] Chain exists of: [ 991.307438][ T5628] sk_lock-AF_INET-NBD --> &cmd->lock --> &nsock->tx_lock [ 991.307438][ T5628] [ 991.322893][ T5628] Possible unsafe locking scenario: [ 991.322893][ T5628] [ 991.331140][ T5628] CPU0 CPU1 [ 991.336565][ T5628] ---- ---- [ 991.342973][ T5628] lock(&nsock->tx_lock); [ 991.347531][ T5628] lock(&cmd->lock); [ 991.354181][ T5628] lock(&nsock->tx_lock); [ 991.361376][ T5628] lock(sk_lock-AF_INET-NBD); [ 991.366359][ T5628] [ 991.366359][ T5628] *** DEADLOCK *** [ 991.366359][ T5628] [ 991.374591][ T5628] locks held by kworker/u9:2/5628: 3, last CPU#1: [ 991.381075][ T5628] #0: ffff88802718d140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 991.392439][ T5628] #1: ffffc90004397c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 991.404544][ T5628] #2: ffff88807cb19068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 991.414335][ T5628] [ 991.414335][ T5628] stack backtrace: [ 991.420788][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 991.430384][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 991.440855][ T5628] Workqueue: nbd1-recv recv_work [ 991.446594][ T5628] Call Trace: [ 991.450051][ T5628] [ 991.453115][ T5628] dump_stack_lvl+0xe8/0x150 [ 991.459008][ T5628] print_circular_bug+0x2e2/0x300 [ 991.464198][ T5628] check_noncircular+0x12f/0x150 [ 991.469199][ T5628] __lock_acquire+0x164c/0x2de0 [ 991.474280][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 991.479662][ T5628] lock_acquire+0x115/0x350 [ 991.484653][ T5628] ? inet_shutdown+0x6a/0x390 [ 991.489479][ T5628] ? __queue_work+0x201/0x10e0 [ 991.494579][ T5628] lock_sock_nested+0x41/0x100 [ 991.500021][ T5628] ? inet_shutdown+0x6a/0x390 [ 991.504773][ T5628] inet_shutdown+0x6a/0x390 [ 991.509886][ T5628] nbd_mark_nsock_dead+0x2cb/0x550 [ 991.515673][ T5628] recv_work+0x1cee/0x1e10 [ 991.520260][ T5628] ? __lock_acquire+0x747/0x2de0 [ 991.525518][ T5628] ? register_lock_class+0x31/0x2e0 [ 991.530882][ T5628] ? __lock_acquire+0x747/0x2de0 [ 991.536244][ T5628] ? trace_hrtimer_start+0x82/0x200 [ 991.541703][ T5628] ? __pfx_recv_work+0x10/0x10 [ 991.546543][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 991.551656][ T5628] ? rcu_is_watching+0x16/0xb0 [ 991.557549][ T5628] ? process_scheduled_works+0x97a/0x1630 [ 991.563784][ T5628] process_scheduled_works+0xc3d/0x1630 [ 991.569443][ T5628] ? __pfx_process_scheduled_works+0x10/0x10 [ 991.576458][ T5628] ? assign_work+0x3cf/0x5d0 [ 991.581140][ T5628] worker_thread+0xa47/0xfb0 [ 991.586084][ T5628] kthread+0x38b/0x480 [ 991.590536][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 991.596374][ T5628] ? __pfx_kthread+0x10/0x10 [ 991.601729][ T5628] ret_from_fork+0x514/0xb70 [ 991.607024][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 991.612481][ T5628] ? __switch_to+0xc89/0x1420 [ 991.617302][ T5628] ? __pfx_kthread+0x10/0x10 [ 991.621962][ T5628] ret_from_fork_asm+0x1a/0x30 [ 991.626964][ T5628] [ 991.788802][T21705] bond2 (unregistering): Released all slaves