last executing test programs: 3.243071227s ago: executing program 4 (id=3778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.270103234s ago: executing program 0 (id=3791): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffff30a, 0x5, 0x3ff}, &(0x7f0000000080)={0x1f, 0x0, 0x4000000000000000, 0x800000, 0x6, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) 2.212302066s ago: executing program 4 (id=3792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340)={0xfffc, 0x0, 0x800, 0xfffc}, 0x8) sendto$inet6(r3, &(0x7f0000000080)="705aad", 0x3, 0x20080, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000340)="fc11ff0f8e94f8f2595d88637ea55a45"}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x7fffffff, 0xa) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getpeername$inet6(r9, 0x0, 0x0) write$tun(r7, 0x0, 0xfffffffffffffe88) write$cgroup_int(r8, &(0x7f0000000380)=0x8, 0x12) 1.993173942s ago: executing program 0 (id=3793): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f5000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc02000000000000000000000000000000003c00000002000000ac1e000100000000000000000000000006000000040100"/178], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) 1.873164588s ago: executing program 0 (id=3795): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ae9880f825d3934487d4d14ac279e5ed5d03736db014fb20cb5604cad1c20d340660f32347d897b13c188dc6a4387d8a3c40ac7754935184e44ca040dbdb6cf51a96e4eb50e5694bb149e32d593f8668b36fbb69523abde550c2a26825cad2bc67416a910fef5512f2b5c3a35b2b88d89ff5f04d5bdc8bd36f4f635d7f2755e6b21dbbc469fd1b7a325fa914437a6c1d258d165dcb503373a1284a6ab1d2296acc583452988db4128a2010a8d40e02714b7ac16c1eded7a27b87c280e5", 0xbd) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a320000000009000100"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.721532955s ago: executing program 1 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008c80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xce7, 0x26}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 1.668326436s ago: executing program 1 (id=3798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (rerun: 32) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xf, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001b40)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={r1, &(0x7f0000000100)='skcipher\x00', 0x404200, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x6]}, {0x9, 0xfffa, 0x3, 0x7f}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x503c6bb1}) (async) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200068c0}], 0x1, 0x40c00c1) (async) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 1.273537865s ago: executing program 2 (id=3803): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) 1.26529267s ago: executing program 3 (id=3804): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001097dc2d7eafb900010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x1c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000"], 0x94}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x44, r6, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "014803afb700000008000000c3"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 1.185925873s ago: executing program 2 (id=3805): syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000180)=@random="a3f95af99831", 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000780)="0cbd148cd925", 0x6}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x6}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.113690767s ago: executing program 3 (id=3806): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0xfffffeae, 0x0, 0x0}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'none\x00', 0x20, 0x4d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x6, 0xd3, 0x2}}, 0x44) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x255fdbfb, {0xa, 0x80, 0x80}, [@RTA_UID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$packet(0x11, 0x3, 0x300) 968.330734ms ago: executing program 2 (id=3807): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 952.005597ms ago: executing program 4 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) (async) close(r3) write(r1, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r6, 0x0, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000180000006703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095000000000000006b7cb9df02c7a41b8ebaa9028afc086589988a26fbaeb59cf4c77e69b8f3d1f129e4c2bb2f7faea09b8f030b529318de568015e6341e54713af523"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044880) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x101, @remote, 0xb2}], 0x2c) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x11c}}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000000, 0x50, r12, 0x6936a000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r13) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 950.964669ms ago: executing program 3 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) (async) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x5, 0x5}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$tipc(r9, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x40) 861.519237ms ago: executing program 0 (id=3810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000740)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x2, 0x3, 0x0, 0x5, 0x0, 0x127}], &(0x7f0000000480)='GPL\x00', 0x1}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x80000000) listen(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e097566f5bec64466cf0925782dd", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000100)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x4, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x47}]}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000007c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000040000000800000010"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x58, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000001580)=ANY=[@ANYBLOB="00000074a2eed700"], 0x8) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000002060101dfff00000000000002000001050004000100000005000100070000000c000780080012400000000105000500020000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) 828.747426ms ago: executing program 2 (id=3811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$unix(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000002c0)="c7edb21818140b1f7134ddd4113e64daf71ae56cc2b00d34823e726422eedf2b58f2bee841", 0x25}, {&(0x7f00000036c0)="a9f2bea9b80cd8b7b77ceea2b0da8d1669eec3128df95acee1b6427b1d3f16", 0x1f}, {&(0x7f0000003840)="06cdcb9f96c071953ddf245776", 0xd}, {&(0x7f00000038c0)="c08398c5e991943d937fec5dc8822128acfc6787d4f85c61e2086c1079733269c1", 0x21}, {&(0x7f0000003980)="073b30cd25f51d7708abaebea50df6867d8bee9a5df01e73ff0b2aceaf5ed5f7340a0bb57131bdffbf22b6d229", 0x2d}], 0x5, 0x0, 0x0, 0x800}, 0x4040000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0xa1d}, 0xfd, 0x3f, 0x48, 0x7, 0x20, 'syz1\x00', "fb32603418d1311860be59b3c9d130a1db735cfc79038f76aba47fbb46f33b6c", "e6e0c30d769f71bd6d1c7ac8dc62da86a42743e722041e2c584ce0570817c04c", [{0x2, 0x2, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0x6}}, {0x2, 0x1000, {0x1, 0x10}}, {0x7, 0x2, {0x1, 0x4}}, {0x8, 0x4, {0x0, 0x2}}, {0x101, 0xf51, {0x2, 0x3}}, {0x40, 0x4502, {0x3, 0x1}}, {0xe, 0x5, {0x3, 0xfe}}, {0x5, 0x1, {0x3, 0x5}}, {0x6, 0x23bb, {0x2, 0x1}}, {0x0, 0x1829, {0x0, 0x3}}, {0xf59b, 0x81, {0x1, 0x489}}, {0x1, 0x4, {0x0, 0x5ad}}, {0xffff, 0x101, {0x2}}, {0x0, 0x6, {0x1, 0x8}}, {0xfffd, 0x0, {0x1, 0xa}}, {0x797, 0xc, {0x0, 0xbdc4}}, {0x2, 0x1000, {0x5e475e5ee8fc8797, 0xa03}}, {0x101, 0x1, {0x0, 0x4}}, {0x7ff, 0x80, {0x1, 0x6397}}, {0xb, 0x1, {0x2, 0x120000}}, {0x6, 0x9a3, {0x3, 0xe}}, {0x8, 0x6, {0x1, 0x9}}, {0x0, 0x81, {0x1, 0x80000000}}, {0x3, 0x74, {0x2, 0x7}}, {0x0, 0xf, {0x1, 0xfff}}, {0x3, 0x8, {0x3, 0x2}}, {0x9, 0x2, {0x2, 0x3}}, {0x6, 0xff01}, {0x2, 0x1000, {0x0, 0xffff}}, {0x2, 0xff, {0x0, 0x4bd9}}, {0x280, 0x9a23, {0x3, 0xf2}}, {0x8, 0x9, {0x1, 0x7f}}, {0x100, 0x2, {0x0, 0x10001}}, {0xe, 0x7, {0x2}}, {0x0, 0x9, {0x1, 0x4}}, {0xfb60, 0x198f, {0x0, 0x4}}, {0x100, 0x1, {0x3, 0x3}}, {0x82df, 0x1, {0x2, 0x5}}, {0x5, 0xadf, {0x1ea6d549037cf73c, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) 771.329463ms ago: executing program 4 (id=3812): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xcd, 0x18}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xd41c, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) 681.772654ms ago: executing program 1 (id=3813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) 679.35995ms ago: executing program 3 (id=3814): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in=@multicast2, @in=@empty, 0x0, 0xfd, 0x2, 0x7f, 0xa, 0x20, 0x10}, {0x8, 0x14, 0x100001002, 0x81, 0xfff, 0xffffffffffffb473, 0xfffffffffffffffb}, {0x1000000000, 0x2000000000000001, 0x2, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000007e18eaec9b403700000000000000000000000000000000000000000a007aa587000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020c00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x400}, 0x2c000010) (async) r1 = socket(0x2, 0x3, 0xff) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x1, 0x8000000, 0xfffffffd, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x7, 0x5, @private2}]}, {0x14, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x240400c0) (async) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff1fff3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000040)=[0x7], 0x7}}, 0x30) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a000100060000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c00000000010000000000006887e587167c92966a6b00000000020000040800084000000d9b14000d80080001006401010008000100ac1414bb18000480140001800500030007000000050003000200000008001540000000012c0016400000000456c7470d00000003000019310000b6b0fe260b2917e6e400090000000800000004000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x48080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 557.352633ms ago: executing program 1 (id=3815): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) 502.42541ms ago: executing program 3 (id=3816): r0 = epoll_create1(0x0) ppoll(&(0x7f0000000980)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x4}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x40800) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000000000000000000000000002000000000000000500000000000000000000000000000008000000000000000000000000000000fdffffffffffffdf900f00000000000000000000000000000000000000000000000000000000100000000000b86b6e0000010101000000007dfb171e6b7c91317b5ad6b996e88929c3"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x50) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async) recvmsg(r5, 0x0, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)="2915cc", 0x3}, {&(0x7f0000000380)="d935b92a56954049e7949559e0f014bc1b524a709e3b2ee336ec3cca84654a578a0624e2827f5b7fc90121939452f09ad6b58e398e6238d58b53f95d640297f685eee1250360ae8300ed3a171583f587ab758655012afff1aec55d6272aa8f1a3417240396e93aa9d8a265e79a391721ef278bdf4211c6af6e55fe6965ad0363e85863abc88c0a654f1fa4c8766b020b514b60ce9ff3fe1521072d02b3bd773d0ddafc4abd5ef9ec2303097442601e19f4f3eeca9af6d366735d615c14", 0xbd}, {&(0x7f0000000440)="80502cc9462af8685a044e2d703e06595d0920a70d92dd5b25c1cefff60f9f6d706fc431948f704557097c6c1282396854a658cfb737b1ba6e067369eaea67b824d60e5ead0032ee32a010789a965122a15ffbd8a441ac7f1b6b7eb1897d639642854a5e0e30aafc93a3b6ab7a9e7853c88b0b7057c6ddbba736736f42c28e639cda0444ca123c3b4b02990bffaca1328bbe36d4fe4cd8b8a285e1cf3a385f791f5666171791eda0e3c0265a6e32549ffc88ed6a7ae6e8e98a0d9fa306ad2b1e7338eaec688e3229d66d49b9377e2f59cd4fa9b8c442db1384b810921e31582e56", 0xe1}, {&(0x7f0000000540)="1dcef4bec24df2b56bcecda0c3bf", 0xe}, {&(0x7f0000000580)="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", 0xe32}], 0x5}, 0x8084) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r5) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0xa1}, 0x1c) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'sed\x00', 0x11, 0x10000004, 0x8}, 0x2c) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, &(0x7f00000009c0)=0x4c) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000014c0)={0x3, &(0x7f0000000000)=[{0x50, 0x6, 0x8}, {0x28, 0x80, 0x1a, 0xfffff038}, {0x6, 0x5, 0xf9, 0x207}]}, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 481.025377ms ago: executing program 0 (id=3817): syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000180)=@random="a3f95af99831", 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000780)="0cbd148cd925", 0x6}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x6}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 475.886032ms ago: executing program 2 (id=3818): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x0, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1010}, 0x408d031) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dd33200000000000fd80b600000400000018000180020001006574683a6d6163f745279be71927b416766c616e30000cec3890dcde23e5e6570e0248afe79e571e136973930a92ad5d472851a9ff84440b2a7ae246eba1289ab4092c044c412c695579379b60a04d047ef5cc97819ab15c3efc16c3f47d3321414aeaae266e2180453431029d0f0079905d78118e3454b5cab0c24c17"], 0x2c}}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r6, &(0x7f00000018c0)=""/4115, 0x1013) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x10894) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 369.300333ms ago: executing program 1 (id=3819): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xc6, "a52f6e2ed670055f7556c44ee248ee5d4fef275499684a561461e582cd918e3c728142b32561a3ec61ab540761274b316329152848995f226a06ec22a4e57326252e71833d7cba049bbae7a3096ba72f81026124b7a1b0d06728b5401aa0290472adaf3ea4f0f66e00a141cf49be2800f75b2efd4c87c2d838977de9cb4689ea12dcb15a71efec7daae555ed375b236f921dbd6a8fb31abbd9ae9c45ca5480ef0d528ea9fa622277b4d3e2c9f9e480933a9afd311b5fa4fa51b01ee180306a5a81058f82db60"}, &(0x7f0000000100)=0xce) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0xe, 0x6}, 0x8) getsockopt(r0, 0x1, 0x7ff, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x72d}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x6, 0x2, 0x2, 0x5, 0x8, 0xc52, 0x4, 0x50, r3}, &(0x7f00000003c0)=0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000400)=0x102c4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000480)=@can={0x1d, r5}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000500)="554b83e44df3ade687dd56176ff56415c02e34b67eeb5a72058f8829f369c686cd986d8f18870158eac25d35395daf93548ff8fb3f677def1124d00fde58619d9ca2dcfa140078081935fe77250afe33063d6d292f08cc538bd055db7b7bcd40e105a781f661e85cd68d822c61dee34011b70af9f60d414815675e55", 0x7c}, {&(0x7f0000000580)="208b9db1800af5aba06203950b89e470f3f85f1f09192e85742885767561296022c5b4ca1a595f2831309336bc0544b2fee53a3e4be9b34dfa478fe91393ef4cec2f45a87704e4b0", 0x48}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="6239d914a82e2e0ed1af09501fc99e25ae9d17e1b3768b457dab671238cc096c4194e844a8b4b113cf494cf39797dfa93001c15c239b9b8bb10cbaf1106afae07ee907929c5d7190f86e2e22bb1e192a306c67c1e42f5cada8a476fab5794ae916fc16f0592a80bee6baf5b798efa974a13a1f07d7e96970a88028cae3f97b2e38589301bad8eeeb41c1fcdb941e83a5cd5e7bc4d799839ae64664dd888eb097245175223d16ae53baf1633bb38121d008f3e513977d5f927ac81ed60dc7b15894a191e3a3d8466c7bfb30614a675c", 0xcf}, {&(0x7f0000001700)="3bc49c6eea584623846a1d9f3cbac2d4c1dcb820dc16ce5c498331dbb7645786dd7adec6aaa34bbcf45ca4b73ee6c57676da75169f920f2a789e6c5985d5a3321e8636c54242a10311da713952336bbd6707128a", 0x54}, {&(0x7f0000001780)="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", 0x1000}], 0x6, &(0x7f0000002800)=[{0x68, 0xff, 0xefb4, "1081db211a4d18b66c570cb7b1e448e6146fdbcd39484a69d2dbe2bf89677ea84d970df427344cb6f34c3b5099853f4bfcf5577e1aafb49cc91a62f8db172b39c71d02afcd85eefcc849fdd7750a114c27cb"}, {0x38, 0x1, 0x8, "850b8f68b5d471a443eefa46829302c0ed1b4c8f103fd527f069552714a8750f2b8eb1c06410e5e4"}], 0xa0}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000028c0)="642e1b286e23a31d9e07fed42066e2f7ad8b47a5aaf692018998774ab19c6c40baa5078d33b06a7780ee43a05c5f7780c389046affe161e44f0e1d1bf52ff30bfe5f940bfacc8de8d04e939903a923c19a0144d959d34fdfc9cf8404a937bf2c33299956f130a41792e04c2ec7ce1c9db3ea31b7df2a8ab996e58b3108b884e9989a811ccba4b7780a385f6788b149cd39fbfef1d6755120add3a7761100ae0f5286fe7c442f931c2eeb08ec9935c00d0f2c9feeacbefe781da2dca5809f9fc2101d1976b5cfd5d109de724e24d0309396f1759409aa9a3c6381b9f104eff3e28cd7cdab26fb8934c3143bf8b759dde43c027c6943299218156e7115b26478c682d86f8715db3716009aeef4c8ddd60908a092fdd526af3d1d9e1d9772df1157de26bb29a631f72d6c845ce4d49d30d691ee4620f2903d74d9e8b0f33ff5bcb2b5d6b1f2beb4c5d85523536056b5d450cbcf972972c8205de2f9610912cbe44b74f12504b35821587a379a9bd62dec8f17c601b9b69d2c29d40895d4151c32a016edde1f093cdf1b93dd2ea9e12f7c77beda790ed18fc8f3176ef7ae90714c9da0ff6a82763355237d2739b88d15db3b9d82fea8bc480939ff21a9d6c1efd0953c3a754b47957c38398d28bfcaa3045bd494d754c8c550b1f2242c8a0591273c4a47d6be7a1d1a76099dca035ad6cad5a2153e4b5374939629eb4987aeaba51935d687bcb4401fe9962f1d25b17b7edbbe5eef9bc1dcf839c5ce20ddf09027d4e17daaa34afcf19002782b3ea89c84d18063314b925c0568d1af73562b563032967f0993b002cf139bca52051b549d32c1e16563b323c4abbde306f8f7b126387ee7f8054c15e6bf65e0ce816ff5c292d6bb97cffa455aabf0f2814c37426da7341e5434692014ac1717a8f1338d9df5291a57de016b212f2ab0f923d8d43b7ad752e674da5f779841ab08fa58b333e79ee5d8c455c5121ff2022be3f04c410f6437d8efd9605f9b194b5070a5dd8d83806ef25575d14e131ec4be31774f8c9cf556b1a3f97f3e5be9528bb43b4e5f60384939ac34cb3ec749b113db0409e51d5ca191837be790c18231d8e3bc6fb8b546d4c4347ab2b83c8c73d59ec4513e8ff8d7d4a56a97ad0218371c45ad2123bec55711b44de5395512bb692f2d9b7f10a84d0f58461b90c97d0da82ab0093a6d3513e84dbc421ae4820ddf0469941b200b31687a3eea39c546acd8cfd6cebb2fd910e4cd2cfb53035d82774060804da1b892e53d00f273c7304cd655e96819ff957b3f47c4a795ee95c70ae8e7f03f52ccdb0d1693c64376537d114fd9ac24074a6f7b583cfbbc5a92a2b41ac63cffa7d8c3e98c1d771d8c568d9d0211dcdb58d666f08f8c058a34a3af1f668dd77ea3705e8efc9255ede2f14c6e9f60f3c64b766f658332c17256cae1011c2587ebff5fa2cbafdf89efbbef8369a1f0df44839f5a4a4ecc84218fe32b0899d38d05f4efbc1f0bcaf7ebf2c9b432a041c8ac1323cf2c9d6abb48a02745c221d6d45d6e059b158cd2685b42f2dcbfc405f8712226e79862ccd9b2b9b5c79457d655226f43bccf9d8ddb2cb113a0329080e86fd97ffacc29573724ff936689c85ffea29cac84b32fca1d8b567b89c120dce552cd04eadd779a065a4577a3a301ab1a9aaf7f9e0eef4a94ba30b8e8cd263c85230133323ec0395871015a5976090000e5a2ee4275c76e23bb213a6023241088ced5626f93e4d177220e7ed7dad5457f8410772a9a5ab0a1b2a24b4ca153f32acda7bec83d8f67b3841793ea7046749c6e9e9d5de440e2aa5ab401d2db59d0586e89e438662174f1a8e1be1b6759ee32eea9bb784a23af2b1f3bdb349cad7760118562e21194dc190b0ab688e5aaefce65a26ad573251ca91732f3b3fafd70353595b73e4849581030a5f406b8c3cdeb15cdc3b76b134a5c9b34eb8daa51c68e0b694407f04a504618b825e93ef7e2bf7767b1549f37c0053a3c37b0ab36ea83bc68f4be39011403739d11e5b8efbb5bf6fb1a134324932ad0d7521fce540ae687d0c268eccb3265783d3d97ed36ba57a62e329cac7dab721db8ad32284dd7bc2fbeb3d310a1c2c22618a4b2a184a55d29876848ad94d6453f525b552dc33d5e7f1a8cb7725f014590486a56358944327c9983cbded055ab2ad895a43a4af398a3b90d18b6213c9e04ed56b6eda295cfff474dcec48498927eff6f5c1d7936c98bc50fab08d7283960c3ebfb9a2984f50382e4f0dea3e9c9fbfc562428469db519dc11cf58a5e78fffe213f4cf1f855b35953883ee27d347cc1f295ea7a9a2126fb5280d0637976cec7f60f3277ddfcc82fb256313bb413c38e26d58897fbf8ed39b37def10af308a66182f9d1820b47f1c203094a0b6a6f46667ad0aabee82d7e1ce2b2760ffe46e4859fe777a4aa2d56ca8c920579a75f168cdd70286e1f29312529ffc604b5cf72b11e37fb884c7a58db436702dabf4e18a2a266d27e69f72a2e7245c0479a308ab6f6ff57d8ddd80efeb99ba7bcf3bc764830377c720e6734b0cbc18c1728c7ac85310cae3b4ad83b91fc82e02544f7c03e4d7adafd2a64a562b6e1b296fbbaa0fdd6493262f8bbda03f0aa06b979dadbab108c4e8d53519dc14a217f45566ee18ee7c76b9ce20c54b639f6103a50414300b4ef4d9f78f4e51ace9fa462197c298b3a91b795db91bb2b2e7231b563b7a8c7b3fca09edef051e5dd36f8efd44d46ef6b5202784d24303d70ab040eb40b3b99147cf642b841dda9014b53a31c9a153a6c329377aafefa41d44dc5c16b997bcf124a393d32b5969ad27ddc55c0bf183c751b670a2d9691e379c836860aef0ca962ca6ee50c08e24d9a7c6917de32ec2a885b568dda5ff24541b56954726a08ddd6c45362bf64a8d166a566d9216cf9b4e01e6d36c9b496664d783e378a467f59b85a5a86f77997ef640c24a3e76b1065f0effe7f5b54eb0dab647589dc3b0dfc53040d6fc178d567ba620907fe09234602451593c0d0eb208d29f1d5f08146763321115e3586c561cfef174cd9542e9ab6a291e36e783b33e993233df5987b98e7580aee5f6756cad6374a59efc37b93c24e262594e17335d6bcd9e1b9cf499d149499a02e6700420dc850eb9db3ed4e8de49c7c9dedd6162def7326eae9ba3e9814dc36891ab3234fda845d2d5819dbc33ac8180ab5b0bbfde6381e91f9a28594ff9b27980132c9c26bd32a8fb0518ea2344c792dfdcae556e588d386249867fb321a3ebb587cd5f7b8c4679a56efa8c44d69fd8f152f35636c1f0d3938f9d724098c8d60fbdabf66137df307fcf89e91b3e2a6005055da5667e6e3f1000db2ccc36d677786825d536cab10ba67f103fbaadcea48cf768e02611efdc47552547d7fb724fbf481b7e21a411a9d9d067882e15d5b367017c1e4af155b439a937c1491a0bc4714dbf2159b291ff7969552e219bb03a93a6a4674ddf0c334cb6f8c2011db797732a3be57560130509a5d31647f307cac821d3a381d03a12de1b4a23ddb8315718308a4b5d1528ca21374f5cf50a9b7c84545e296808fe814d51fccd863d9a6095b9b8df1f6d50c6bd8e90ed89677e94cc93ea274c6798735ca49660b997604ba0ba7cb31a988a46e9b5f059a8ea9c43cb6995022bd793001152602f2fd8b9bb226af02b33fc1dfcd51746ff28c13ba24f1df54879c9a87e314a65a68ff99efaee29def57c07ec516de2a950d225147c769cbc412bdc01d7bc344c8c84e0c9b4ff1a0dd33683b3f6abe293272ebb681d8915bcf2f2051cb611cf6bfd2dd6754d4ce5f7ccd0852fdc653ff846b1210fb10322187568b25065a0592e856ef897c7b7ea124a97ee4efcc571171d135a49c4a625331e7492bf2b29611915375dd650272e3ed2a4f69dcf55c7c6b44cebef28dacb7f137d90e47251eac5c4dd93f091f1e101c19e0da7eab9068e21bfe886d877c917149cbd88fdcb575fda27237a6504c0b4c6bc4b2173a2219d74aa71514f29121d4baa5d0728e29d9f81976c533dff0d9e92aa71ba7881af1e93cba16955162e1ade8ec5d53d96fd6096e8eb3acbb56bba1bf5bc72a3735a3488fb578c7ec79c8f4d4df9305e9af4525c727600c9f443ec37cd7245a746b6b0916314b9bb17f2704495275747763954e3bff78167db350c1e2ac1459c859bb8872b58367a529a8b5e4b4ec44fdd405cb47d97a8782939074f3029bdf6d4c088d9333dad24cf20da386c77ca9641fab8ef0895a9f91cc19354b2963c98fb80f9473b0d014d61a33c79c3fabad7689d890fce48a0507699fcc8d61f906ddba718f7509dce843896585f90aa30e491a1c89f3f77800a02b3be8c74bfb282a3ae6d97dd3eee3286e8744696e66dff9efc456b2cebc8697fa35d7a60d327386021ea948c32e8d7924d36f6aba8f2f7ca8e7c94d15601ff1ecf0d3a3bef8c92bc27dafa0e6780076faf82f6839e2fcf4819baee205ba33d29444fa9d5c8402a148b5dfb471ec9dc239946180f60826709b6d5d06a1ccfec16082da440b3242c5ecd388db4fb99c085d07d85e7c34f76d6eb424870ca4324a4319ff75627a0223286912ee982142f14d58a331b32016a3b214d0dc9fcf2ac3edcf400cc107e7678e511e79a60b3331ec9b49559df4c5e58677e271da05a5e2359701d0ef3c7100760d44a30de09b3828f0f657b267530c70a3c87eff855867e5ae0e03def970665b8beebe9893c262f35c2331f33eaebf3ccb3a4e5a39f0550c5bb194d34b5b3b755a092571c14a334eeb6db0b5545791335e6c8287cc4dac8941ed5044393bc0e58a02c7d683e89c825e3a9e7b4ed57ea0bf2021d78cc94c814664f41b501d1f0d58e656f719acc5f469ff9f6ecf122b7a40ce557aa5cb8e9b23bf099b9d91416184aa171c361e61a30e6ac6a25e0bb29cf542168ffc74f2c3ffc63325a66b2c11b744d900d491ab1237eedf096863b2684e313a4fa4c1863010d57b560e94820ebb2a01283b80a9eaf1199382367e4bfcdc8d1df1bc89e681ad7df669f6bd1ea10eea98f442aacf8beb7bb6bc333a450642551e1e95622fc89de3f8f292d5a015fe36fb59d1d24a758935d680875d8f12e97c781938248e7c28a84c95bdcd66ced03eea1f6f0f0a89d4f8f13f80c1e4140656edb076c8b4d31a78cea9bc321203c2d4755f7010d7120e3bf7f4538355dc6e7df93fd62314d76b26869aa4780f657a3cf30fbab537d4c6b0d35afa490de4640bb5127eb1a6facb0f0cd1e155144a24899184081ef0610b8d7a98cb1a39292ad1c0783c270a5277b129bf6b8acd304c95288e8f726febf2670016229bedc8bf99499334a626f00dd44a630c09ac674803a326ec67fa1b9291cb837d7e2ff06bc1ccce26fde12bc53524c5c5fb6b1e84b8ddd68dc5e6ed5a0bfa2a61642cd3c595f73c278dede98b61de30bf5762af1930ed3f6087b0876ccf9718093587b4e5dad6cb8394bf1ab595f7dd67eeece1306222834c69102ac67d45415aa354deb14219f0c55244a18aa4e72db18137f259a964ce4caff1a4c9712b36fdc8a2b5cb41d3fbb7d8f686211219f164badee1ca2d168d01391670fa9d19c44864b4db9fc9972c0010c193855a841eb536bf67ed8a7c775db2ff92677cc56129738873b6a6115ed1b4a7314f5bd1b3d48bffc32cf1a74460d8aa688d162d7794ea2a8c506d6cb557dcf4b64fe683503442a946af15916340f99b8ff0ac431a753784ed369e7d48f17b021eda9b2d6914bfdfb49a83de03ed87a1ef968b", 0x1000}, {&(0x7f00000038c0)="779860609b47d94b8088e5b48e31a1968e75e3179e96cbced2a025d76a6b469472c0b1e1537f9200e7b7c05ce726a5ad8c4342dfe702114c2d7fb13349172d5cb2ebc96f4e53df0c32ebbea8bce73bfe794463c949375c9a94dd301d41611b68f687794777c7f9307b788f88c264bd0b9ddda1ecc69aa4cd014d7fbbf793a14ff4ccc75d42464eb290b63f184632d792af33851989e8073b0b99968c779905df9a4bc5bedb3af34011861a0a362681933b764b472b06826fa8c7b66c464f253729686e4126307e6874b0158f13b0d2f0", 0xd0}, {&(0x7f00000039c0)="c9437d276a8fb0ba6623417e9a42260e5165281014e6f3669ffc7e24708a81a876c7228566e2dc0eab5434f8834de80a865bfb1b2bf8da18a1bf4a430d9da8e4f6882ad64cba6b7b4db4a5543d8357357d6132ca72f5c2adf921ce774f40d908b484796cf9fb024952286aa424dd7caf04acb6290f2d5844e6580edc29c7d06f814c24e1a5f32045caa2e749a02b4d09f8c1855ee9887d6992fb722072cba6a0aa35b628", 0xa4}, {&(0x7f0000003a80)="e45f1f", 0x3}, {&(0x7f0000003ac0)="9352c37bc2921d398c1b0314b2d4fa903bd6fd2a80c693b7c2bb7cbc5e888d7ae78ee4c73379ae5980ac243b73a54a86178da56f22a987a232b54f8c366c244a36f0418c1b26be5a652ee8c98638b4df160b339b57b332b77fe5abb3a9d8f936a57fee6d61707d372c233615eb41f7b45aa91498cddc85c314795be3645ea797f8fd384f8826f43a0e142b697d080884821114fb2e9f5bf3d561672ecf37df2d382af852633e82b24070bb62d005da96e7c9064a0ec472c30d84b25a3c3c43afd42d10a732cc6be7fc19dde57f917f6304921632e3afa4b0b01defcfbedcde54c128310bc82670612dd9d5d3fb447ed7160f", 0xf2}, {&(0x7f0000003bc0)="8d543089ad54d3fd420692337c87f429c8b70f38a160cc85c588fa36d532ab7ed4de4ab83d4f4c2ce030ad7b04454b7e60d3c5a3816339a49a8707be4a582dfe8f144336b1ca659c8f0d410d91d41c371cda021bc13e11f0f378c128d8dc0826c0f4bfa8e4eadf5c2787a9acde6976e2a565c36dbefef2e5806ba9692a99785668ab88d0c3afadaff02192001f68ef", 0x8f}, {&(0x7f0000003c80)="96492e849209e6f2e30e434564550a959c01c58172b8a23f32edf052", 0x1c}, {&(0x7f0000003cc0)="07d0a4ebf07bdfa127837cddf43ccf8aa91163fbd7dea34e9f1cbdf51b6c721fd959b77424afd861accd317ca4d8cab8334ec40ac531197714cc4b0e18722efeda9c8ac9beaf1a02e97cfca61eba359f722bcda92789795082012f4b8cc6da59ff49f336a776a27492476c3b300b6e95c2b21282f389372ae96676e5d9de62a7e30ba3fd24a85b0809f87eeb8592705f05c6e6e84b0620ed3ab254c7431ab35c789dc09f43c5d7bd02d8e8ae", 0xac}, {&(0x7f0000003d80)="5f9dbb0600205eec5fe60b14ec539e9a44f980dbacf99cb456b7c27fa908e93c755d287eea7b5c7a73fa52384df2ccf205c12c35f4fe2352fa76391fa58f8b995a644f4c98babafe2d3029d350d0608b1365facbea8e07aa6c82563d208ca9ee5f6387b54f9e9953d9d8cd026b4b55ac4dc1d5359910c2209b03fac5d18ee948f8e2edd21357880d80f9a5cb69cb2cfebef24262f074423a21fc97dd600a461189f1b0fdf2f78ee6f92f22a7f5f881f8b751b39c890cf78f53e669cb36959b8a4c1d0dcea590e4b3e52466757ce362d8d97dbe", 0xd3}, {&(0x7f0000003e80)="721ab68dedf88d18bd8d0658942992cde384395dcb20aff64eb8e0c133a0bbbc474a9ec550c1b96fd2a7078d024b15734007de5035546fa265d28a6fd65d66cca62375591ce04698d273788eb2be2bf9257ce40433c6c5f5864a103b00a9e1231ff6017bb89c91", 0x67}], 0xa, &(0x7f0000003fc0)=[{0x1010, 0x325, 0x89, "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"}, {0x100, 0x107, 0x8, "ce5442c890424b9716d527d6c437f3b0794b4cae323761544faa51f5cc8a49199e5d9ba08ae30501ec32db685943894899af1883255feeae36b599b85094fbaf6ced6cbe20963b6934cbff14de50b33db27860573499034f57bcdeb64baba2fa100b5a8bfefa6c536f2eabde5926fdd8f4940a53b3f55fadf45d30ca7bc637f8832fe0b73b8a95422a50f4abaf7b2fa5aedcdbce9106a57d522f98e2623c35f5f32958211a843fc2feac99e60e224cd63148a0656254929972013b2ec7706d951e28293dddb9493ce50b953967420830d4d9d9fdea08a3453624ebd43351ed0eeaec733b4e934793d3d04c4e4632"}], 0x1110}}], 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000005180), 0x3) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000051c0)={0x3}, 0x4) r8 = socket(0x25, 0x5, 0x3ff) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000005200)=""/203, &(0x7f0000005300)=0xcb) socket$inet(0x2, 0x2, 0x400) writev(r8, &(0x7f0000005400)=[{&(0x7f0000005340)="be75f54c6af99b0c5c9c6f68206fcf5e12e517dd523a8e66e50d4292224840bcc20eb40cfe019307c23ac765b630722a84900f34558c4ccde7ea3283aec3d02941751034ed15684c6b9a32307db261800d74c00b45ceeb3052405235d19da046fd4430f7cf398505ed79daa2bda2aaee842b9a5f16958295687c9687a7711feeb3d18f57c34ffc1418808bdffea35419fdfb80fc41", 0x95}], 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000005500)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)=@getqdisc={0x28, 0x26, 0x2a, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {0xffe0, 0x8}, {0x5, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000005540)={0x7f, 0x3ff, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f00000056c0)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005680)={&(0x7f0000005640)={0x34, r10, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x6) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r12, 0x0, &(0x7f0000005700)) 346.994785ms ago: executing program 4 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000240)={@empty, 0x0}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x4c}}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xffffffffffffff03}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd569ff4f22ad3557d00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4040, 0x820}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 273.099979ms ago: executing program 0 (id=3821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x10, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4, 0x4e22}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30040c50}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 177.126597ms ago: executing program 3 (id=3822): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008050) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000057bbbd113a2de8773b5302dcd161bd000000000000000000001c0000020000000000cdbaed53062789671f373aad802996352438db4c4a"], 0x48) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000040)={0x1ff, 0x4}) 165.764112ms ago: executing program 2 (id=3823): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_devices(r2, 0x0, 0xffdd) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x2f, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0xffff, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x4008000) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2bc}}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f00000000c0)={@any, 0xfffffffa, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) 58.952622ms ago: executing program 1 (id=3824): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a310000000058000480540001800b0201006e756d67656e000044000280080003400000000008000140000000100800034000000001080003400000000008000240000000090800034000000000080003400000000008000140"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x48000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x6, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x1, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000880], 0x0, &(0x7f0000000140), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0xc, 0xf6, 'nicvf0\x00', 'veth0_to_team\x00', 'erspan0\x00', 'veth1_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xabbda50c715dad43, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"9989493f1163846655c2ca28692d1ecee3fc99f971d11b23171af95098d5"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x400}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1ee) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000040)={0x2, 0x80, 0x33, &(0x7f0000000000)=""/51}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="f70001000000c1c088a14665001d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000044400028006000340000400002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x451164a7e25bf074}, 0x20000004) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x80000000001, 0x6, 0x1, 0x6, 0x424a244d]}, &(0x7f00000000c0)=0x78) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 4 (id=3825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d8b4c3f9f93c19ade43afd853633fe12385a452329132c3a7228f855b59e35bae1f3aafd3dbea1310469212577d98b392c8f4493", @ANYRES8=0x0, @ANYRES16=r0], 0x1ac}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2b, 0x1, 0x1) (async) r7 = socket(0x2b, 0x1, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f0000000200)='%pB \x00'}, 0x20) setsockopt$inet_tcp_int(r7, 0x6, 0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xae0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x2c, 0x5c, 0x1, 0x4, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@multicast2, 0x5485}, {@empty, 0x47}, {@multicast1, 0xb94}]}]}}}}}) socket$kcm(0x29, 0x2, 0x0) (async) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000d00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2d8abf0b20576762acc8ebb000000000000000000010500040001001d5c05000100070000000c00078008000600000000050500050002000000030200000900020073f80dfd3a"], 0x4c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x2c800) (async) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2d8abf0b20576762acc8ebb000000000000000000010500040001001d5c05000100070000000c00078008000600000000050500050002000000030200000900020073f80dfd3a"], 0x4c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x2c800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040818}, 0x20000802) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040818}, 0x20000802) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 27.0.0.1:20004 [ 333.807846][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.840297][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.860023][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.878282][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.897934][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.912004][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.927681][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.959817][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.976236][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 333.997570][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.007983][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.022535][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.041252][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.059330][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.073758][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.094741][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.118245][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.163127][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.193413][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.211625][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.221011][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.248748][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.267644][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.281705][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.311533][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.330255][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.361149][T15341] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 334.371258][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2435'. [ 334.589853][T15372] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2439'. [ 334.950165][T15388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.680570][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 335.703438][T15404] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.939922][T15412] geneve1: entered promiscuous mode [ 335.960037][T15412] geneve1: entered allmulticast mode [ 335.995084][T15412] macsec0: entered allmulticast mode [ 336.010276][T15412] veth1_macvtap: entered allmulticast mode [ 336.026794][T15412] macsec0: left allmulticast mode [ 336.035368][T15412] veth1_macvtap: left allmulticast mode [ 336.466885][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2456'. [ 336.700073][T15443] bond10: option arp_interval: invalid value (18446744073709551615) [ 336.712915][T15443] bond10: option arp_interval: allowed values 0 - 2147483647 [ 336.722598][T15443] bond10 (unregistering): Released all slaves [ 336.964604][T15451] netlink: 'syz.4.2459': attribute type 9 has an invalid length. [ 336.974238][T15451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2459'. [ 337.012348][T15451] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 337.038965][T15451] bond8 (unregistering): Released all slaves [ 337.438233][T15466] openvswitch: netlink: Duplicate or invalid key (type 0). [ 337.764307][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2467'. [ 337.811431][T15476] IPv6: sit4: Disabled Multicast RS [ 337.837125][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2468'. [ 338.236987][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 338.306321][T15489] 8021q: adding VLAN 0 to HW filter on device bond10 [ 338.759767][T15513] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 338.768494][T15513] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2478'. [ 339.332786][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2482'. [ 340.468552][T15573] ip_tables: iptables: counters copy to user failed while replacing table [ 340.481938][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 340.791130][T15579] bond11: option ad_user_port_key: invalid value (65535) [ 340.823152][T15579] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 340.939963][T15579] bond11 (unregistering): Released all slaves [ 341.131827][T15591] tc_dump_action: action bad kind [ 341.459061][T15602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'. [ 341.987282][T15625] netlink: 'syz.4.2500': attribute type 11 has an invalid length. [ 342.163842][T15624] netlink: 'syz.4.2500': attribute type 11 has an invalid length. [ 342.338826][T15636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.392638][ T7738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.402749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.413956][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.422454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.441097][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.450047][ T7738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.459445][ T7738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.467980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.481525][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.495288][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.559716][T15636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.593899][T15636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.637414][T15636] veth1_vlan: left promiscuous mode [ 342.651825][T15636] veth0_vlan: left promiscuous mode [ 342.667085][T15636] veth0_vlan: entered promiscuous mode [ 342.685088][T15636] veth1_vlan: entered promiscuous mode [ 342.718020][T15636] veth1_macvtap: left promiscuous mode [ 342.733198][T15636] veth0_macvtap: left promiscuous mode [ 342.748366][T15636] veth0_macvtap: entered promiscuous mode [ 342.768643][T15636] veth1_macvtap: entered promiscuous mode [ 342.805950][T15636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.832765][T15636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.857120][T15636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.877159][T15636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.991386][T15636] batman_adv: batadv0: Interface activated: veth3 [ 343.021800][T15636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.051390][T15636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.081511][T15636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.101218][T15636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.126823][T15636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.146215][T13865] lo speed is unknown, defaulting to 1000 [ 343.169595][T13865] syz2: Port: 1 Link ACTIVE [ 343.345060][ T119] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 343.387201][ T119] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 343.415946][ T119] bond4: (slave veth7): making interface the new active one [ 343.464980][ T119] bond4: active interface up! [ 343.546872][T15666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2508'. [ 343.949957][T15687] FAULT_INJECTION: forcing a failure. [ 343.949957][T15687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.023287][T15687] CPU: 1 UID: 0 PID: 15687 Comm: syz.4.2510 Not tainted syzkaller #0 PREEMPT(full) [ 344.023316][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.023329][T15687] Call Trace: [ 344.023336][T15687] [ 344.023345][T15687] dump_stack_lvl+0xe8/0x150 [ 344.023377][T15687] should_fail_ex+0x40c/0x560 [ 344.023403][T15687] _copy_to_user+0x31/0xb0 [ 344.023433][T15687] simple_read_from_buffer+0xe1/0x170 [ 344.023466][T15687] proc_fail_nth_read+0x1bb/0x230 [ 344.023496][T15687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.023527][T15687] ? rw_verify_area+0x24a/0x4c0 [ 344.023572][T15687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.023598][T15687] vfs_read+0x213/0xa80 [ 344.023631][T15687] ? __pfx___mutex_lock+0x10/0x10 [ 344.023662][T15687] ? __pfx_vfs_read+0x10/0x10 [ 344.023695][T15687] ? __fget_files+0x2a/0x420 [ 344.023726][T15687] ? __fget_files+0x3a2/0x420 [ 344.023751][T15687] ? __fget_files+0x2a/0x420 [ 344.023787][T15687] ksys_read+0x150/0x270 [ 344.023820][T15687] ? __pfx_ksys_read+0x10/0x10 [ 344.023860][T15687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.023884][T15687] do_syscall_64+0x174/0x580 [ 344.023912][T15687] ? trace_irq_disable+0x3b/0x140 [ 344.023937][T15687] ? clear_bhb_loop+0x70/0xc0 [ 344.023962][T15687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.023984][T15687] RIP: 0033:0x7f8ca975e90e [ 344.024004][T15687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.024022][T15687] RSP: 002b:00007f8caa680fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.024044][T15687] RAX: ffffffffffffffda RBX: 00007f8caa6816c0 RCX: 00007f8ca975e90e [ 344.024060][T15687] RDX: 000000000000000f RSI: 00007f8caa6810a0 RDI: 0000000000000005 [ 344.024073][T15687] RBP: 00007f8caa681090 R08: 0000000000000000 R09: 0000000000000000 [ 344.024086][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.024097][T15687] R13: 00007f8ca9a26038 R14: 00007f8ca9a25fa0 R15: 00007ffc442a0568 [ 344.024131][T15687] [ 344.342136][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 344.352696][T15699] netlink: 'syz.0.2513': attribute type 12 has an invalid length. [ 344.365077][T15699] netlink: 'syz.0.2513': attribute type 29 has an invalid length. [ 344.373447][T15699] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2513'. [ 344.382733][T15699] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 344.390609][T15699] netlink: 'syz.0.2513': attribute type 2 has an invalid length. [ 344.398438][T15699] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2513'. [ 344.560415][T15707] SET target dimension over the limit! [ 344.674432][T15713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2516'. [ 344.767183][T15711] netlink: 'syz.0.2516': attribute type 3 has an invalid length. [ 344.854618][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2516'. [ 344.878011][T15720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2519'. [ 344.900204][T15713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 344.942915][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2516'. [ 344.979302][T15713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 345.781710][T15761] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 346.292512][T15777] syzkaller1: entered promiscuous mode [ 346.308014][T15777] syzkaller1: entered allmulticast mode [ 346.697782][T15792] netlink: 'syz.4.2535': attribute type 3 has an invalid length. [ 347.202094][T15815] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 347.376549][T15815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 347.446169][T15815] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 347.466525][T15809] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.506486][T15809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.630689][T15809] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.669319][T15809] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.708010][T15809] net_ratelimit: 15 callbacks suppressed [ 347.708033][T15809] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 347.730177][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.888224][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.899142][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.909365][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.919894][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 30 seconds [ 347.934721][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 30 seconds [ 347.946003][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 30 seconds [ 347.957317][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 30 seconds [ 347.962940][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.978039][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.986155][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.994329][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.003213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.065819][T15817] bond11: (slave veth7): Enslaving as an active interface with a down link [ 348.114074][T15815] dummy0: left allmulticast mode [ 348.119735][T15815] bridge0: port 3(dummy0) entered disabled state [ 348.454923][T15842] netlink: 'syz.0.2543': attribute type 3 has an invalid length. [ 348.585761][T15843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.719728][T15844] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 348.764358][T15844] bond5 (unregistering): Released all slaves [ 348.856163][T15857] bond0: entered allmulticast mode [ 348.881679][T15857] ipip3: entered allmulticast mode [ 348.937602][T15861] __nla_validate_parse: 7 callbacks suppressed [ 348.937621][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 349.109182][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 349.211129][T15857] bond0: left allmulticast mode [ 349.237091][T15857] ipip3: left allmulticast mode [ 349.293351][T15864] : renamed from veth0_to_bond [ 349.545735][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 349.586194][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 349.921858][T15905] syzkaller0: entered promiscuous mode [ 349.949187][T15905] syzkaller0: entered allmulticast mode [ 350.171813][T15910] validate_nla: 1 callbacks suppressed [ 350.171833][T15910] netlink: 'syz.2.2561': attribute type 5 has an invalid length. [ 350.195331][T15910] bond0: Master is either lo or non-ether device [ 350.250452][T15914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2563'. [ 350.356044][T15914] xt_hashlimit: size too large, truncated to 1048576 [ 350.390256][T15924] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2563'. [ 350.460579][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 350.473572][T15924] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 350.567394][T15932] netlink: 'syz.0.2566': attribute type 62 has an invalid length. [ 350.642725][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2563'. [ 350.796661][T15935] netlink: 'syz.0.2566': attribute type 1 has an invalid length. [ 350.818077][T15935] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2566'. [ 350.883066][T15939] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 350.934416][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'. [ 350.962693][T15939] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.364536][T15966] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 351.371532][T15968] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 351.551662][T15965] bridge_slave_0: entered promiscuous mode [ 353.168460][ T5741] net_ratelimit: 11 callbacks suppressed [ 353.168480][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.343219][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.353868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.369837][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.378314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.398172][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.406604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.419299][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.427904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.438900][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.507856][T16059] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 354.101241][T16084] __nla_validate_parse: 10 callbacks suppressed [ 354.101264][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 354.200529][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2605'. [ 354.263751][T16088] gtp0: entered promiscuous mode [ 354.282199][T16088] gtp0: entered allmulticast mode [ 354.305425][T16088] team0: Device gtp0 is of different type [ 354.443272][T16100] syzkaller0: entered promiscuous mode [ 354.470269][T16100] syzkaller0: entered allmulticast mode [ 354.590752][T16112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2614'. [ 354.605584][T16106] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 354.630902][T16106] bond7 (unregistering): Released all slaves [ 354.692966][T16108] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 354.704698][T16108] bond7 (unregistering): Released all slaves [ 354.872141][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 355.128180][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.152826][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.224092][T16144] No such timeout policy "syz1" [ 355.325844][T16122] batman_adv: batadv0: Interface deactivated: veth3 [ 355.449947][T16122] batman_adv: batadv0: Interface deactivated: gretap1 [ 355.503980][ T10] lo speed is unknown, defaulting to 1000 [ 355.517172][ T10] syz2: Port: 1 Link DOWN [ 355.532069][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.563782][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.601847][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.648268][ T119] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.732893][T16153] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2623'. [ 355.755190][T16156] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 355.778535][T16156] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2624'. [ 355.806316][T16156] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 355.835460][T16156] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2624'. [ 356.555584][T16187] syzkaller0: entered promiscuous mode [ 356.580119][T16187] syzkaller0: entered allmulticast mode [ 356.599151][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 356.632714][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 356.706015][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 357.161805][T16228] ipip2: entered promiscuous mode [ 357.166933][T16225] netlink: 'syz.4.2642': attribute type 1 has an invalid length. [ 357.454458][T16240] netlink: 'syz.0.2645': attribute type 3 has an invalid length. [ 357.477119][T16240] netlink: 'syz.0.2645': attribute type 6 has an invalid length. [ 357.971092][T16268] tipc: Resetting bearer [ 358.002362][T16268] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 358.595974][T16314] tipc: Enabling of bearer rejected, already enabled [ 358.825452][T16326] netlink: 'syz.1.2671': attribute type 12 has an invalid length. [ 359.498047][T16355] __nla_validate_parse: 13 callbacks suppressed [ 359.498070][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 359.532467][T16345] bond5: invalid ARP target 0.0.0.0 specified for addition [ 359.579176][T16345] bond5: option arp_ip_target: invalid value (0) [ 359.603828][T16345] bond5 (unregistering): Released all slaves [ 359.662759][T16362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2679'. [ 359.709340][T16355] hsr_slave_0: left promiscuous mode [ 359.725634][T16355] hsr_slave_1: left promiscuous mode [ 359.767882][T16357] bridge0: port 3(syz_tun) entered blocking state [ 359.774875][T16357] bridge0: port 3(syz_tun) entered disabled state [ 359.783460][T16357] syz_tun: entered allmulticast mode [ 359.838445][T16375] gre4: entered promiscuous mode [ 359.861311][T16377] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 359.886640][T16377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2683'. [ 360.028400][T16379] batman_adv: batadv0: Adding interface: gretap2 [ 360.034990][T16379] batman_adv: batadv0: The MTU of interface gretap2 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 360.062592][T16379] batman_adv: batadv0: Interface activated: gretap2 [ 360.144251][T16392] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 360.177595][T16392] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2687'. [ 360.227978][T16392] NCSI netlink: No device for ifindex 0 [ 360.368948][T16410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2690'. [ 360.378631][T16410] unsupported nlmsg_type 40 [ 361.072596][T16418] netlink: 'syz.1.2693': attribute type 13 has an invalid length. [ 361.226003][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 361.260716][T16423] net_ratelimit: 2799 callbacks suppressed [ 361.260740][T16423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 361.301641][T16423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.553672][T16436] bond7 (unregistering): Released all slaves [ 362.081187][T16469] tipc: New replicast peer: 255.255.255.255 [ 362.105297][T16469] tipc: Enabled bearer , priority 26 [ 362.203242][T16469] bond0: Master is either lo or non-ether device [ 362.533391][T16493] sctp: [Deprecated]: syz.1.2708 (pid 16493) Use of int in maxseg socket option. [ 362.533391][T16493] Use struct sctp_assoc_value instead [ 362.581033][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 362.600566][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2710'. [ 362.620001][T16497] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 32 [ 362.633576][T16501] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2710'. [ 362.734589][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 362.742998][ T1091] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.773805][ T1091] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.809438][ T1091] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.857845][ T1091] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.062914][T16520] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 363.081500][T16520] netlink: 'syz.4.2714': attribute type 4 has an invalid length. [ 363.220400][ T10] tipc: Node number set to 387997185 [ 363.453061][T16532] syzkaller0: entered promiscuous mode [ 363.459228][T16532] syzkaller0: entered allmulticast mode [ 363.497813][T16533] ip6tnl2: entered promiscuous mode [ 364.172938][T16582] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 366.304807][T16574] __nla_validate_parse: 6 callbacks suppressed [ 366.304829][T16574] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2729'. [ 366.326276][T16581] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 366.347961][T16581] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 366.358984][T16582] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 366.369196][T16581] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 366.602675][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2737'. [ 366.778288][T16609] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2737'. [ 366.820483][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 366.834664][T16610] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.892080][T16595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.901437][T16606] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 366.908323][T16606] syzkaller1: linktype set to 769 [ 367.187620][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 367.386995][T16615] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2739'. [ 367.722754][T16646] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 367.873382][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2744'. [ 368.059560][T16657] syzkaller0: entered promiscuous mode [ 368.065253][T16657] syzkaller0: entered allmulticast mode [ 368.076607][T16665] pim6reg1: entered promiscuous mode [ 368.087997][T16665] pim6reg1: entered allmulticast mode [ 368.273868][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 368.803150][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 370.653956][T16682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2753'. [ 370.756194][T16684] x_tables: duplicate underflow at hook 4 [ 370.841640][T16692] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 371.590452][T16737] bond11: option resend_igmp: invalid value (2878) [ 371.622402][T16737] bond11: option resend_igmp: allowed values 0 - 255 [ 371.666851][T16737] bond11 (unregistering): Released all slaves [ 371.731620][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 371.793754][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2774'. [ 371.849780][T16756] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 371.865692][T16761] ip6tnl2: entered allmulticast mode [ 372.206176][T16789] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 372.324523][T16795] netlink: 'syz.2.2780': attribute type 23 has an invalid length. [ 372.490607][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'. [ 372.675140][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 374.838935][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 374.956247][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 374.965598][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 374.986231][T16836] syz_tun: left allmulticast mode [ 375.001928][T16836] syz_tun: left promiscuous mode [ 375.021606][T16836] bridge0: port 1(syz_tun) entered disabled state [ 375.030112][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 375.051135][T16836] team0: Port device dummy0 removed [ 375.059584][T16836] .`: (slave bond_slave_0): Releasing backup interface [ 375.069591][T16836] .`: (slave bond_slave_1): Releasing backup interface [ 375.082308][T16836] team0: Port device team_slave_0 removed [ 375.093600][T16836] team0: Port device team_slave_1 removed [ 375.100357][T16836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.109198][T16836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.117302][T16836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.340568][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 375.375894][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 376.219547][T16897] sctp: [Deprecated]: syz.1.2809 (pid 16897) Use of int in max_burst socket option. [ 376.219547][T16897] Use struct sctp_assoc_value instead [ 376.643039][T16923] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 376.712271][T16922] xfrm0 speed is unknown, defaulting to 1000 [ 377.018476][T16936] bond6: left allmulticast mode [ 377.039175][T16936] bond6: left promiscuous mode [ 377.056417][T16927] sock: sock_set_timeout: `syz.0.2816' (pid 16927) tries to set negative timeout [ 377.089645][T16938] __nla_validate_parse: 5 callbacks suppressed [ 377.089665][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 377.133474][T16940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2822'. [ 377.147733][ T9185] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.168161][ T9185] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.191855][ T9185] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.216149][ T9185] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 46057 - 0 [ 377.242323][ T9185] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.268987][ T9185] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.301710][ T9185] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.323079][ T9185] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 46057 - 0 [ 377.346487][ T9185] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.379755][ T9185] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.402378][ T9185] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.428909][ T9185] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 46057 - 0 [ 377.449257][T16922] lo speed is unknown, defaulting to 1000 [ 377.469524][ T9185] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.496236][ T9185] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.509830][ T9185] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.519188][ T9185] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 46057 - 0 [ 377.538561][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 377.593290][T16952] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.2825'. [ 377.606092][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2824'. [ 377.636514][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2824'. [ 377.898455][T16955] bridge0: entered allmulticast mode [ 377.914517][T16961] syz_tun: left allmulticast mode [ 377.930489][T16961] bridge0: port 3(syz_tun) entered disabled state [ 377.966455][T16961] bridge_slave_1: left allmulticast mode [ 377.974651][T16961] bridge_slave_1: left promiscuous mode [ 377.982695][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.992024][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 60 seconds [ 378.004134][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 60 seconds [ 378.015700][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 60 seconds [ 378.027973][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 60 seconds [ 378.042853][T16961] bridge_slave_0: left allmulticast mode [ 378.049323][T16961] bridge_slave_0: left promiscuous mode [ 378.055672][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.333462][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2831'. [ 378.388987][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 378.466837][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'. [ 378.602359][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2835'. [ 378.883924][T17007] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 378.974751][T17007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.027656][T17014] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 379.063143][T17014] bond7: (slave batadv2): making interface the new active one [ 379.087190][T17014] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 379.114650][T17011] : renamed from veth0_to_bond [ 379.162665][T17020] bond7 (unregistering): (slave batadv2): Releasing active interface [ 379.199074][T17020] bond7 (unregistering): Released all slaves [ 379.288642][T17015] xfrm0 speed is unknown, defaulting to 1000 [ 379.723536][T17032] netlink: 'syz.3.2845': attribute type 11 has an invalid length. [ 379.736850][T17029] netlink: 'syz.2.2841': attribute type 83 has an invalid length. [ 379.894998][T17015] lo speed is unknown, defaulting to 1000 [ 380.430128][T17052] xt_hashlimit: size too large, truncated to 1048576 [ 380.888214][T17059] smc: removing ib device syz0 [ 381.072112][T17059] smbdirect: ib_dev[syz0] removed [ 381.493179][T17081] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 381.715750][T17088] block nbd5: server does not support multiple connections per device. [ 381.768270][T17088] block nbd5: shutting down sockets [ 381.835078][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.859584][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.903757][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.005743][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.060735][T17079] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 382.206855][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.223188][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.231727][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.249035][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.256921][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.307268][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.334730][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.347246][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.372323][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.392380][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.459637][T17104] tipc: Enabling of bearer rejected, already enabled [ 382.560891][T17104] tipc: Resetting bearer [ 382.637307][ T7738] tipc: Resetting bearer [ 382.726411][T17114] __nla_validate_parse: 5 callbacks suppressed [ 382.726432][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2866'. [ 383.013752][T17120] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 383.200016][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2869'. [ 383.577987][T17099] lo speed is unknown, defaulting to 1000 [ 383.934123][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 384.331296][T17173] tipc: Resetting bearer [ 384.352519][T17171] tipc: Resetting bearer [ 384.448272][ T50] Bluetooth: hci5: command tx timeout [ 384.766079][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.782046][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.799907][T17099] bridge_slave_0: entered allmulticast mode [ 384.809805][T17099] bridge_slave_0: entered promiscuous mode [ 384.820300][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.827767][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.835031][T17099] bridge_slave_1: entered allmulticast mode [ 384.842889][T17099] bridge_slave_1: entered promiscuous mode [ 384.882439][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.895304][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.935630][T17099] team0: Port device team_slave_0 added [ 384.944787][T17099] team0: Port device team_slave_1 added [ 384.962541][T17189] tipc: Resetting bearer [ 385.001434][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.012009][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.038401][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.051012][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.058112][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.086919][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.275238][T17099] hsr_slave_0: entered promiscuous mode [ 385.282209][T17099] hsr_slave_1: entered promiscuous mode [ 385.289931][T17099] debugfs: 'hsr0' already exists in 'hsr' [ 385.295728][T17099] Cannot create hsr debugfs directory [ 386.527590][ T50] Bluetooth: hci5: command tx timeout [ 387.011050][T17155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.043502][T17099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.118560][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.153477][T17099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.217919][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.245179][T17099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.274611][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.286537][T17099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.306061][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.373843][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'. [ 387.491122][T17218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2890'. [ 387.571465][T17099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.631484][T17099] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.672434][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.679701][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.752042][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.759310][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.769076][T17225] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2893'. [ 387.791804][T17226] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2893'. [ 388.229404][T17245] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 388.251869][T17251] netlink: zone id is out of range [ 388.283870][T17251] netlink: zone id is out of range [ 388.327933][T17251] netlink: zone id is out of range [ 388.337837][T17251] netlink: zone id is out of range [ 388.349976][T17251] netlink: zone id is out of range [ 388.380838][T17251] netlink: zone id is out of range [ 388.404361][T17251] netlink: zone id is out of range [ 388.429041][T17251] netlink: zone id is out of range [ 388.446156][T17251] netlink: zone id is out of range [ 388.470319][T17251] netlink: zone id is out of range [ 388.486394][T17262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2901'. [ 388.610912][ T50] Bluetooth: hci5: command tx timeout [ 389.318621][T17301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2910'. [ 389.364755][T17307] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2912'. [ 389.386791][T17307] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2912'. [ 389.458889][T17099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.658339][T17099] veth0_vlan: entered promiscuous mode [ 389.704258][T17099] veth1_vlan: entered promiscuous mode [ 389.857064][T17099] veth0_macvtap: entered promiscuous mode [ 389.905203][T17099] veth1_macvtap: entered promiscuous mode [ 389.984768][T17099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.050150][T17099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.061745][T17327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2918'. [ 390.117683][ T7735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.148987][ T7735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.278629][ T7738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.336401][ T7738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.482245][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.507125][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.596299][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.621249][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.687665][ T50] Bluetooth: hci5: command tx timeout [ 391.003757][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 391.088594][T17354] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 391.088594][T17354] Please contact the netfilter-devel mailing list or update your nftables rules. [ 391.109255][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 391.143405][T17357] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 391.355438][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.370182][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.388277][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.396053][T17357] bond12: entered promiscuous mode [ 391.406099][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.418025][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.459152][T17357] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.511044][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 391.592557][T17362] bond12: (slave veth9): making interface the new active one [ 391.620109][T17362] veth9: entered promiscuous mode [ 391.653997][T17362] bond12: (slave veth9): Enslaving as an active interface with an up link [ 391.989370][T17390] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 392.096972][T17396] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 392.664343][T17428] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 392.731891][T17364] lo speed is unknown, defaulting to 1000 [ 392.984199][T17438] __nla_validate_parse: 2 callbacks suppressed [ 392.984222][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 393.092964][T17438] netlink: 'syz.2.2947': attribute type 10 has an invalid length. [ 393.117763][T17454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2949'. [ 393.173675][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2947'. [ 393.375428][T17438] geneve6: entered promiscuous mode [ 393.406916][T17438] geneve6: entered allmulticast mode [ 393.498125][ T50] Bluetooth: hci2: command tx timeout [ 394.046077][T17364] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.055274][T17364] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.063544][T17364] bridge_slave_0: entered allmulticast mode [ 394.075365][T17364] bridge_slave_0: entered promiscuous mode [ 394.085252][T17364] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.092697][T17364] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.109860][T17364] bridge_slave_1: entered allmulticast mode [ 394.139699][T17364] bridge_slave_1: entered promiscuous mode [ 394.245687][T17473] xt_hashlimit: size too large, truncated to 1048576 [ 394.286991][T17364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.307486][T17364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.515238][T17364] team0: Port device team_slave_0 added [ 394.548824][T17364] team0: Port device team_slave_1 added [ 394.715122][T17364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.743144][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.829972][T17364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.907988][T17364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.926376][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2956'. [ 394.949001][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.040779][T17364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.085601][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 395.114426][T17503] sctp: [Deprecated]: syz.0.2958 (pid 17503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.114426][T17503] Use struct sctp_sack_info instead [ 395.163336][T17502] sctp: [Deprecated]: syz.0.2958 (pid 17502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.163336][T17502] Use struct sctp_sack_info instead [ 395.192668][ T50] block nbd5: Receive control failed (result -1) [ 395.271294][T17364] hsr_slave_0: entered promiscuous mode [ 395.288194][T17364] hsr_slave_1: entered promiscuous mode [ 395.296237][T17364] debugfs: 'hsr0' already exists in 'hsr' [ 395.306662][T17364] Cannot create hsr debugfs directory [ 395.443937][T17513] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.2960'. [ 395.567988][ T50] Bluetooth: hci2: command tx timeout [ 395.854276][T17517] Bluetooth: MGMT ver 1.23 [ 396.114276][T17364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.147328][T17364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.434339][T17532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2964'. [ 396.484452][T17364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.505572][T17364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.585606][T17535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2965'. [ 396.663780][T17364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.697286][T17364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.749447][T17543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2969'. [ 396.865403][T17364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.876073][T17364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.049784][T17553] bond0: entered promiscuous mode [ 397.056142][T17553] bond_slave_0: entered promiscuous mode [ 397.067723][T17553] bond_slave_1: entered promiscuous mode [ 397.076303][T17553] batadv0: entered promiscuous mode [ 397.084354][T17553] debugfs: 'hsr1' already exists in 'hsr' [ 397.097707][T17553] Cannot create hsr debugfs directory [ 397.111118][T17553] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 397.134051][T17553] bond0: left promiscuous mode [ 397.153176][T17553] bond_slave_0: left promiscuous mode [ 397.164764][T17553] bond_slave_1: left promiscuous mode [ 397.195048][T17553] batadv0: left promiscuous mode [ 397.261529][T17556] netlink: 'syz.1.2971': attribute type 2 has an invalid length. [ 397.301454][T17556] bond0: entered promiscuous mode [ 397.306944][T17556] bond_slave_0: entered promiscuous mode [ 397.313509][T17556] bond_slave_1: entered promiscuous mode [ 397.323847][T17556] batadv0: entered promiscuous mode [ 397.331359][T17556] debugfs: 'hsr1' already exists in 'hsr' [ 397.337233][T17556] Cannot create hsr debugfs directory [ 397.343682][T17556] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 397.353047][T17556] bond0: left promiscuous mode [ 397.358013][T17556] bond_slave_0: left promiscuous mode [ 397.364578][T17556] bond_slave_1: left promiscuous mode [ 397.375157][T17556] batadv0: left promiscuous mode [ 397.464905][T17364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.490990][T17364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.509692][T17364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.524196][T17364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.534167][T17364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.571951][T17364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.590034][T17364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.619785][T17364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.647957][ T50] Bluetooth: hci2: command tx timeout [ 397.757952][T17364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.795666][T17364] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.820522][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.827756][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.916650][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.924226][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.244679][T17595] netlink: 'syz.4.2981': attribute type 1 has an invalid length. [ 398.321791][T17595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 398.332498][T17601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2981'. [ 398.695305][T17611] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.753273][T17611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.865721][T17611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.876294][T17611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.891095][T17611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.903843][T17611] tipc: Resetting bearer [ 398.909886][T17611] tipc: Resetting bearer [ 398.922699][T17611] veth1_vlan: left promiscuous mode [ 398.929826][T17611] veth0_vlan: left promiscuous mode [ 398.937104][T17611] veth0_vlan: entered promiscuous mode [ 398.946072][T17611] veth1_vlan: entered promiscuous mode [ 398.958705][T17611] veth0_macvtap: left promiscuous mode [ 398.965842][T17611] veth0_macvtap: entered promiscuous mode [ 398.981011][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.990026][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.000479][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.010330][T17611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.021083][T17611] batman_adv: batadv0: Interface activated: wlan0 [ 399.031587][T17611] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 399.042243][T17611] batman_adv: batadv0: Interface activated: macvtap1 [ 399.065144][T17611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.080101][T17611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.102782][T17611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.115969][T17611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.124691][T17611] net_ratelimit: 1353 callbacks suppressed [ 399.124712][T17611] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 399.150566][ T24] gretap1: entered promiscuous mode [ 399.187671][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.205945][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.213209][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.262852][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.270103][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.400744][ T7738] bridge0: port 4(team0) entered blocking state [ 399.407129][ T7738] bridge0: port 4(team0) entered forwarding state [ 399.444633][T17364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.528157][T17636] bond13: option lp_interval: invalid value (0) [ 399.546272][T17636] bond13: option lp_interval: allowed values 1 - 2147483647 [ 399.562077][T17636] bond13 (unregistering): Released all slaves [ 399.658656][ T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.668878][ T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.704665][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2991'. [ 399.739672][ T50] Bluetooth: hci2: command tx timeout [ 399.767581][ T7735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.873464][T17649] openvswitch: netlink: IPv4 tun info is not correct [ 399.914602][T17652] sctp: [Deprecated]: syz.2.2994 (pid 17652) Use of int in maxseg socket option. [ 399.914602][T17652] Use struct sctp_assoc_value instead [ 399.933224][T17364] veth0_vlan: entered promiscuous mode [ 399.992799][T17364] veth1_vlan: entered promiscuous mode [ 400.033997][T17659] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 400.152851][T17665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2997'. [ 400.187993][T17364] veth0_macvtap: entered promiscuous mode [ 400.230058][T17364] veth1_macvtap: entered promiscuous mode [ 400.285799][T17364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.324925][T17364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.362280][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 400.389867][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 400.499745][T17673] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 400.578985][ T168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.607318][ T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.728700][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.858193][T17692] bond10 (unregistering): Released all slaves [ 400.948019][T14995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.083682][T17701] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3007'. [ 401.115662][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.137247][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.161977][T17702] netlink: zone id is out of range [ 401.181674][T17702] netlink: zone id is out of range [ 401.184321][T17708] netlink: zone id is out of range [ 401.223426][T17702] netlink: zone id is out of range [ 401.244556][T17708] netlink: zone id is out of range [ 401.274628][T17702] netlink: zone id is out of range [ 401.347020][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.365567][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.814927][T17736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2927'. [ 402.125855][T17744] xt_hashlimit: size too large, truncated to 1048576 [ 402.126751][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.209356][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.346153][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.362633][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.375456][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.390248][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.403138][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.548985][T17767] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3022'. [ 403.133204][T17793] Bluetooth: MGMT ver 1.23 [ 403.275895][T17802] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 403.359326][T17794] __nla_validate_parse: 16 callbacks suppressed [ 403.359346][T17794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3026'. [ 403.431235][T17797] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3026'. [ 403.441614][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3027'. [ 403.486903][T17802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.512815][T17803] geneve0: entered promiscuous mode [ 403.521841][T17803] macvlan2: entered promiscuous mode [ 403.539361][T17794] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.546669][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.577318][T17797] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.584768][T17797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.595734][T17797] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.603020][T17797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.624087][T17797] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3026'. [ 403.742209][T17797] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.750778][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.909151][T17818] lo speed is unknown, defaulting to 1000 [ 404.176301][T17757] lo speed is unknown, defaulting to 1000 [ 404.398993][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 404.451337][ T5614] Bluetooth: hci0: command tx timeout [ 404.615294][T17847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3035'. [ 404.699568][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3036'. [ 404.750817][T17851] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3036'. [ 404.790026][T17851] veth0_to_bond: default FDB implementation only supports local addresses [ 404.992229][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 405.837376][T17908] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3041'. [ 405.912583][T17905] netlink: 'syz.0.3044': attribute type 2 has an invalid length. [ 406.193948][ T1152] batman_adv: batadv0: Removing interface: gretap1 [ 406.245909][ T1152] bond0 (unregistering): (slave ipip3): Releasing backup interface [ 406.262030][ T1152] ipip3 (unregistering): left promiscuous mode [ 406.382594][ T1152] bond1 (unregistering): Released all slaves [ 406.399706][ T1152] bond2 (unregistering): Released all slaves [ 406.417916][ T1152] bond3 (unregistering): Released all slaves [ 406.447058][ T1152] bond4 (unregistering): (slave veth7): Releasing active interface [ 406.457316][ T1152] bond4 (unregistering): (slave veth9): Releasing active interface [ 406.466421][ T1152] bond4 (unregistering): Released all slaves [ 406.490801][ T1152] bond5 (unregistering): Released all slaves [ 406.508244][ T1152] bond6 (unregistering): Released all slaves [ 406.527593][ T5614] Bluetooth: hci0: command tx timeout [ 406.541674][ T1152] bond7 (unregistering): (slave veth15): Releasing active interface [ 406.550704][ T1152] bond7 (unregistering): Released all slaves [ 406.568047][ T1152] bond0 (unregistering): Released all slaves [ 406.586801][ T1152] bond8 (unregistering): Released all slaves [ 406.610493][ T1152] bond9 (unregistering): Released all slaves [ 406.629581][ T1152] bond10 (unregistering): Released all slaves [ 406.659328][T17878] syzkaller1: entered promiscuous mode [ 406.664914][T17878] syzkaller1: entered allmulticast mode [ 406.942433][ T1152] tipc: Disabling bearer [ 406.969502][ T1152] tipc: Left network mode [ 407.222280][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.660951][T17942] lo speed is unknown, defaulting to 1000 [ 407.920891][T17757] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.935826][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.962246][T17757] bridge_slave_0: entered allmulticast mode [ 408.000346][T17757] bridge_slave_0: entered promiscuous mode [ 408.070129][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 90 seconds [ 408.081390][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 90 seconds [ 408.093421][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 90 seconds [ 408.104652][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 90 seconds [ 408.142784][T17757] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.179679][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.206808][T17757] bridge_slave_1: entered allmulticast mode [ 408.239206][T17757] bridge_slave_1: entered promiscuous mode [ 408.533295][T17757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.571791][T17757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.583032][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 408.617700][ T5614] Bluetooth: hci0: command tx timeout [ 408.716506][T17757] team0: Port device team_slave_0 added [ 408.734910][T17757] team0: Port device team_slave_1 added [ 408.871106][T17757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.900936][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.946410][T17757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.960978][T17757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.968435][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.995539][T17757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.271490][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.312196][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.334690][ T1152] batman_adv: batadv0: Removing interface: veth3 [ 410.354963][T17757] hsr_slave_0: entered promiscuous mode [ 410.366229][ T168] smbdirect: ib_dev[syz2] removed [ 410.372956][T17757] hsr_slave_1: entered promiscuous mode [ 410.384469][T17757] debugfs: 'hsr0' already exists in 'hsr' [ 410.390488][T17757] Cannot create hsr debugfs directory [ 410.452195][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 410.653643][T18035] __nla_validate_parse: 9 callbacks suppressed [ 410.653665][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'. [ 410.688397][ T5614] Bluetooth: hci0: command tx timeout [ 410.723907][T18045] netlink: 'syz.0.3072': attribute type 1 has an invalid length. [ 410.751602][T18040] xt_l2tp: missing protocol rule (udp|l2tpip) [ 410.805016][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3071'. [ 411.127665][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 411.167367][T18059] syzkaller0: entered promiscuous mode [ 411.181118][T18059] syzkaller0: entered allmulticast mode [ 411.368509][T18059] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 411.399603][T18065] sch_tbf: peakrate 904229271815911571 is lower than or equals to rate 6994358490402317489 ! [ 411.429834][ T1152] IPVS: stop unused estimator thread 0... [ 412.029359][T18074] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 412.057512][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'. [ 412.229042][T18100] netlink: 'syz.3.3082': attribute type 12 has an invalid length. [ 412.524566][T18115] pim6reg: entered allmulticast mode [ 412.780309][T18131] netlink: 'syz.4.3090': attribute type 1 has an invalid length. [ 412.935786][T18131] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.982412][T18137] veth3: entered allmulticast mode [ 413.001026][T18137] bond11: (slave veth3): Enslaving as an active interface with an up link [ 413.014720][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 413.022755][T18138] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3092'. [ 413.159023][T18131] bond11 (unregistering): (slave veth3): Releasing backup interface [ 413.211928][T18131] bond11 (unregistering): Released all slaves [ 413.355631][T18146] žÿ: renamed from team_slave_1 (while UP) [ 413.701054][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'. [ 413.724449][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3095'. [ 413.950147][T18181] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 414.035723][T18181] 8021q: adding VLAN 0 to HW filter on device bond13 [ 414.105576][T18183] bond13: (slave syz_tun): Enslaving as a backup interface with an up link [ 414.164537][T17757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.195051][T17757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.205180][T17757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.239032][T17757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.283626][T17757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.356062][T17757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.411096][T17757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.480316][T17757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.530809][ T7735] bond13: (slave syz_tun): link status definitely down, disabling slave [ 414.706554][T18223] ipt_rpfilter: unknown options [ 414.978430][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.045784][T17757] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.086723][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.093976][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.143201][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.150478][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.734287][T18252] netlink: 'syz.4.3109': attribute type 2 has an invalid length. [ 415.747381][T18243] sctp: [Deprecated]: syz.0.3108 (pid 18243) Use of int in max_burst socket option deprecated. [ 415.747381][T18243] Use struct sctp_assoc_value instead [ 415.995103][T18258] xt_addrtype: ipv6 does not support BROADCAST matching [ 416.375132][T18268] pimreg: entered allmulticast mode [ 416.415852][T18268] pimreg: left allmulticast mode [ 416.661148][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 416.695219][T18276] netlink: 'syz.4.3114': attribute type 10 has an invalid length. [ 416.723127][T17757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.737182][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 416.809115][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 416.887586][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 416.943097][T18276] geneve5: entered promiscuous mode [ 416.977751][T18276] geneve5: entered allmulticast mode [ 417.113684][T18287] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 417.146571][T18287] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 417.158052][T17757] veth0_vlan: entered promiscuous mode [ 417.202562][T18287] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 417.282225][T17757] veth1_vlan: entered promiscuous mode [ 417.346822][T17757] veth0_macvtap: entered promiscuous mode [ 417.396930][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3119'. [ 417.408563][T18287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 417.457274][T17757] veth1_macvtap: entered promiscuous mode [ 417.562039][T17757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.610489][T17757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.677903][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.720323][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.774535][T18309] netlink: 'syz.3.3121': attribute type 1 has an invalid length. [ 417.810109][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.957228][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 417.990229][T18309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.007549][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.022154][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 418.077737][T18310] macvlan3: entered promiscuous mode [ 418.099097][T18310] macvlan3: entered allmulticast mode [ 418.119081][T18310] bond1: entered promiscuous mode [ 418.143771][T18310] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 418.183038][T18310] bond1: left promiscuous mode [ 418.622544][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.655023][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.719428][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.743309][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.388834][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.404737][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.416713][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.429460][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.439061][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.443644][T18349] Cannot find set identified by id 0 to match [ 419.523270][T18352] netlink: 'syz.2.3131': attribute type 21 has an invalid length. [ 419.766325][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3133'. [ 419.988229][ T5604] bond13: (slave syz_tun): Releasing backup interface [ 420.171476][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 420.202634][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 420.487248][T18381] bond0: (slave team0): Releasing backup interface [ 420.559217][T18381] net_ratelimit: 2718 callbacks suppressed [ 420.559243][T18381] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 420.673787][T18391] tipc: Enabled bearer , priority 0 [ 421.195019][T18346] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.202818][T18346] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.210471][T18346] bridge_slave_0: entered allmulticast mode [ 421.221968][T18346] bridge_slave_0: entered promiscuous mode [ 421.232318][T18346] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.240125][T18346] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.248139][T18346] bridge_slave_1: entered allmulticast mode [ 421.256333][T18346] bridge_slave_1: entered promiscuous mode [ 421.307686][T18346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.329591][T18346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.391410][T18346] team0: Port device team_slave_0 added [ 421.401571][T18346] team0: Port device team_slave_1 added [ 421.484763][T18346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.492206][T18346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.505800][ T5614] Bluetooth: hci3: command tx timeout [ 421.532472][T18346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.546138][T18346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.558982][T18346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.589492][T18346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.718115][T18346] hsr_slave_0: entered promiscuous mode [ 421.726855][T18346] hsr_slave_1: entered promiscuous mode [ 421.735736][T18346] debugfs: 'hsr0' already exists in 'hsr' [ 421.742181][T18346] Cannot create hsr debugfs directory [ 422.388245][T18432] ip_tables: iptables: counters copy to user failed while replacing table [ 422.663641][T18447] __nla_validate_parse: 3 callbacks suppressed [ 422.663675][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 422.732721][T18346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.753814][T18346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.102847][T18346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.118523][T18346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.195982][T18464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.244158][T18346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.255172][T18346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.334666][T18346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.347193][T18346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.567624][ T5614] Bluetooth: hci3: command tx timeout [ 424.023049][T18470] IPVS: set_ctl: invalid protocol: 2048 10.1.1.2:20000 [ 424.023443][ T7735] IPVS: starting estimator thread 0... [ 424.147594][T18472] IPVS: using max 25 ests per chain, 60000 per kthread [ 425.647630][ T5614] Bluetooth: hci3: command tx timeout [ 425.666159][T18451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.694529][T18346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.737304][T18346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.753250][T18346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.835809][T18346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.867982][T18346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.902101][T18346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.925726][T18346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.964263][T18346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.304786][T18508] xt_l2tp: v2 doesn't support IP mode [ 426.311120][T18509] ipt_rpfilter: unknown options [ 426.345161][T18346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.427131][T18346] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.463466][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.470733][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.521288][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.528563][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.563834][T18522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3172'. [ 427.714915][T18574] netlink: 'syz.2.3178': attribute type 4 has an invalid length. [ 427.727838][ T5614] Bluetooth: hci3: command tx timeout [ 427.733345][T18574] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3178'. [ 427.843007][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 428.464811][T18604] IPVS: starting estimator thread 0... [ 428.577844][T18630] IPVS: using max 26 ests per chain, 62400 per kthread [ 428.916410][T18648] netlink: 'syz.1.3183': attribute type 23 has an invalid length. [ 429.242727][T18346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.502893][T18607] IPVS: stop unused estimator thread 0... [ 429.580104][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 429.646552][T18346] veth0_vlan: entered promiscuous mode [ 429.733617][T18346] veth1_vlan: entered promiscuous mode [ 429.850540][T18346] veth0_macvtap: entered promiscuous mode [ 429.877190][T18346] veth1_macvtap: entered promiscuous mode [ 429.941751][T18681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3189'. [ 429.952089][T18346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.014548][T18346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.122053][T18606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.148096][T18606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.249628][T18596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.303761][T18596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.386055][T18600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.412104][T18600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.494163][T18601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.516824][T18601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.668754][T18696] tipc: Enabling of bearer rejected, failed to enable media [ 430.855668][T18705] openvswitch: netlink: Key type 5152 is out of range max 32 [ 431.014575][T18709] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3198'. [ 431.056186][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3198'. [ 431.175208][T18712] netlink: 'syz.3.3200': attribute type 1 has an invalid length. [ 431.198520][T18712] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3200'. [ 431.246064][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.261679][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.270559][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.287067][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.296923][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.308081][T18703] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 431.371689][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 431.422060][T18720] macvtap1: entered allmulticast mode [ 431.475603][T18703] macvtap2: entered allmulticast mode [ 431.503144][T18721] tipc: Enabling of bearer rejected, failed to enable media [ 431.612960][T18721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 431.644865][ T30] audit: type=1800 audit(1786122400.674:6): pid=18727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3203" name="blkio.bfq.time_recursive" dev="tmpfs" ino=255 res=0 errno=0 [ 431.916165][T18738] netlink: 'syz.3.3206': attribute type 32 has an invalid length. [ 431.929911][T18736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.223257][T18744] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.325233][T18756] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3211'. [ 432.417973][T18762] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 432.605199][T18770] netlink: 'syz.1.3215': attribute type 9 has an invalid length. [ 432.626695][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 432.655364][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.846460][T18779] tipc: Started in network mode [ 432.856231][T18779] tipc: Node identity 0679c90ccf3e, cluster identity 4711 [ 432.864106][T18779] tipc: Enabled bearer , priority 0 [ 432.964884][T18783] tipc: Resetting bearer [ 433.039499][T18777] tipc: Disabling bearer [ 433.099801][T18793] x_tables: ip6_tables: TPROXY target: used from hooks INPUT, but only usable from PREROUTING [ 433.223817][T18798] sctp: [Deprecated]: syz.0.3222 (pid 18798) Use of int in maxseg socket option. [ 433.223817][T18798] Use struct sctp_assoc_value instead [ 433.409955][ T50] Bluetooth: hci1: command tx timeout [ 433.588329][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.596045][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.603825][T18715] bridge_slave_0: entered allmulticast mode [ 433.613717][T18715] bridge_slave_0: entered promiscuous mode [ 433.623251][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.630727][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.638579][T18715] bridge_slave_1: entered allmulticast mode [ 433.646852][T18715] bridge_slave_1: entered promiscuous mode [ 433.696503][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.710354][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.832897][T18826] bridge0: entered allmulticast mode [ 433.841769][T18824] syzkaller0: entered promiscuous mode [ 433.847935][T18824] syzkaller0: entered allmulticast mode [ 433.861685][T18715] team0: Port device team_slave_0 added [ 433.872561][T18715] team0: Port device team_slave_1 added [ 434.041661][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.069229][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.096038][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 434.129780][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.424340][T18859] netlink: 'syz.3.3231': attribute type 13 has an invalid length. [ 434.460198][T18859] netlink: 'syz.3.3231': attribute type 17 has an invalid length. [ 434.565769][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.603952][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.828219][T18839] geneve0: left promiscuous mode [ 434.843738][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.852165][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.879209][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.913650][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'. [ 434.951628][T18867] openvswitch: netlink: IPv4 tunnel dst address is zero [ 434.993580][T18859] bridge0: left allmulticast mode [ 435.004090][T18859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.013153][T18859] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.031612][T18859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.084604][T18859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.095564][T18859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.112840][T18859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.124034][T18859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.154045][T18859] veth1_vlan: left promiscuous mode [ 435.161440][T18859] veth0_vlan: left promiscuous mode [ 435.169239][T18859] veth0_vlan: entered promiscuous mode [ 435.181656][T18859] veth1_vlan: entered promiscuous mode [ 435.192418][T18859] veth1_macvtap: left promiscuous mode [ 435.201390][T18859] veth0_macvtap: left promiscuous mode [ 435.214120][T18859] veth0_macvtap: entered promiscuous mode [ 435.228934][T18859] veth1_macvtap: entered promiscuous mode [ 435.242090][T18859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.256139][T18859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.270218][T18859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.283132][T18859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.297061][T18859] geneve0: entered promiscuous mode [ 435.302849][T18859] macvlan2: left promiscuous mode [ 435.312393][T18859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.490554][ T50] Bluetooth: hci1: command tx timeout [ 435.574681][T18601] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.581918][T18601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.592696][T18601] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.599906][T18601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.676607][T18876] tipc: Failed to obtain node identity [ 435.686548][T18876] tipc: Enabling of bearer rejected, failed to enable media [ 435.716643][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3237'. [ 437.578544][ T50] Bluetooth: hci1: command tx timeout [ 438.134222][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 120 seconds [ 438.145394][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 120 seconds [ 438.156799][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 120 seconds [ 438.174799][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 120 seconds [ 438.653393][T18869] batman_adv: batadv0: Interface deactivated: wlan0 [ 438.792372][T18715] hsr_slave_0: entered promiscuous mode [ 438.812405][T18715] hsr_slave_1: entered promiscuous mode [ 438.830569][T18715] debugfs: 'hsr0' already exists in 'hsr' [ 438.836768][T18715] Cannot create hsr debugfs directory [ 439.019186][T18897] syzkaller0: entered promiscuous mode [ 439.030518][T18897] syzkaller0: entered allmulticast mode [ 439.651557][ T50] Bluetooth: hci1: command tx timeout [ 441.645742][T18904] kthread_run failed with err -4 [ 442.418610][T18948] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 442.438702][T18948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.920826][T18960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 443.481787][T18972] syzkaller0: entered promiscuous mode [ 443.507492][T18972] syzkaller0: entered allmulticast mode [ 443.893614][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 443.955382][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 444.059475][T18715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.076977][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.085537][T18715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 444.117052][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.138991][T18715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 444.166369][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.180245][T18994] ipvlan0: entered allmulticast mode [ 444.185784][T18994] veth0_vlan: entered allmulticast mode [ 444.193518][T18715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.204240][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 444.234038][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.245099][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 444.275587][T18994] netlink: 'syz.0.3264': attribute type 9 has an invalid length. [ 444.301048][T18994] netlink: 'syz.0.3264': attribute type 6 has an invalid length. [ 444.341123][T18993] ipvlan0: left allmulticast mode [ 444.353940][T18993] veth0_vlan: left allmulticast mode [ 444.476986][T19009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3267'. [ 444.494486][T18715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.588868][T18715] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.656760][T18604] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.664080][T18604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.749123][T18604] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.756409][T18604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.782926][T19019] syzkaller0: entered promiscuous mode [ 444.797743][T19019] syzkaller0: entered allmulticast mode [ 445.268729][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'. [ 445.296406][T19038] block nbd6: Unsupported socket: should be TCP or UNIX. [ 445.351232][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3276'. [ 445.381168][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 445.806808][T19047] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.814635][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.954884][T19056] SET target dimension over the limit! [ 446.160215][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.173834][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.296051][T19049] ip6gretap0: entered promiscuous mode [ 446.369486][T18596] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.454428][T18601] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.489879][ T1152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.530589][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3284'. [ 446.536177][ T1152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.748437][T19086] syzkaller0: entered promiscuous mode [ 446.760159][T19086] syzkaller0: entered allmulticast mode [ 447.024385][T18715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.802332][T18715] veth0_vlan: entered promiscuous mode [ 447.830514][T18715] veth1_vlan: entered promiscuous mode [ 447.912581][T18715] veth0_macvtap: entered promiscuous mode [ 447.940954][T18715] veth1_macvtap: entered promiscuous mode [ 447.986788][T18715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.036934][T18715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.087937][T18607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.121111][T18607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.309273][T19152] syzkaller0: entered promiscuous mode [ 448.317958][T19152] syzkaller0: entered allmulticast mode [ 448.414791][T18604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.423900][T18596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.441319][T18604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.451432][T18596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.552593][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.566395][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.582776][T19158] __nla_validate_parse: 6 callbacks suppressed [ 448.582795][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3301'. [ 448.643226][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3302'. [ 448.657159][T19160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3302'. [ 448.671148][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 448.914627][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 449.433234][T19187] dvmrp1: tun_chr_ioctl cmd 1076910123 [ 449.474166][T19187] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 449.481264][T19187] dvmrp1: linktype set to 776 [ 449.512183][T19187] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 449.528937][T19185] syzkaller0: entered promiscuous mode [ 449.538008][T19185] syzkaller0: entered allmulticast mode [ 449.552056][T18606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.581578][T19185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.610830][T19185] tipc: Enabling of bearer rejected, failed to enable media [ 449.736250][T19196] syzkaller0: entered promiscuous mode [ 449.750743][T19196] syzkaller0: entered allmulticast mode [ 449.759275][T19202] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3313'. [ 449.771383][T19199] --map-set only usable from mangle table [ 450.060515][T19208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.195191][T19211] vxcan2: entered allmulticast mode [ 450.356337][ T30] audit: type=1800 audit(1786122419.384:7): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3322" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=34 res=0 errno=0 [ 450.687059][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 450.700700][T19242] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3328'. [ 450.713186][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 450.722597][T19240] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3328'. [ 450.732912][T19239] netlink: 'syz.2.3327': attribute type 11 has an invalid length. [ 450.742006][T19239] netlink: 'syz.2.3327': attribute type 14 has an invalid length. [ 450.950315][T19247] syzkaller0: entered promiscuous mode [ 450.966091][T19247] syzkaller0: entered allmulticast mode [ 451.526983][T19275] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 452.812076][T19310] FAULT_INJECTION: forcing a failure. [ 452.812076][T19310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.827288][T19310] CPU: 1 UID: 0 PID: 19310 Comm: syz.4.3353 Not tainted syzkaller #0 PREEMPT(full) [ 452.827318][T19310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.827335][T19310] Call Trace: [ 452.827343][T19310] [ 452.827352][T19310] dump_stack_lvl+0xe8/0x150 [ 452.827465][T19310] should_fail_ex+0x40c/0x560 [ 452.827582][T19310] _copy_from_iter+0x1d3/0x1660 [ 452.827655][T19310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.827719][T19310] ? __pfx_policy_nodemask+0x10/0x10 [ 452.827749][T19310] ? unwind_next_frame+0x8f/0x2550 [ 452.827802][T19310] ? __pfx__copy_from_iter+0x10/0x10 [ 452.827831][T19310] ? alloc_pages_mpol+0x24a/0x380 [ 452.827871][T19310] copy_page_from_iter+0x219/0x2d0 [ 452.827901][T19310] tun_get_user+0x1bf1/0x4370 [ 452.828011][T19310] ? tun_get_user+0x6e7/0x4370 [ 452.828055][T19310] ? aa_file_perm+0x4ed/0x15f0 [ 452.828120][T19310] ? __pfx_tun_get_user+0x10/0x10 [ 452.828150][T19310] ? __lock_acquire+0x683/0x2cf0 [ 452.828207][T19310] ? ref_tracker_alloc+0x341/0x4b0 [ 452.828258][T19310] ? get_pid_task+0x20/0x1f0 [ 452.828293][T19310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 452.828318][T19310] ? tun_get+0x1c/0x2f0 [ 452.828345][T19310] ? tun_get+0x1c/0x2f0 [ 452.828378][T19310] ? tun_get+0x1c/0x2f0 [ 452.828405][T19310] ? tun_get+0x1c/0x2f0 [ 452.828437][T19310] tun_chr_write_iter+0x113/0x200 [ 452.828477][T19310] vfs_write+0x612/0xba0 [ 452.828524][T19310] ? __pfx_vfs_write+0x10/0x10 [ 452.828565][T19310] ? __fget_files+0x2a/0x420 [ 452.828617][T19310] ksys_write+0x150/0x270 [ 452.828651][T19310] ? __pfx_ksys_write+0x10/0x10 [ 452.828689][T19310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.828733][T19310] do_syscall_64+0x174/0x580 [ 452.828832][T19310] ? trace_irq_disable+0x3b/0x140 [ 452.828873][T19310] ? clear_bhb_loop+0x70/0xc0 [ 452.828900][T19310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.828925][T19310] RIP: 0033:0x7f6923d5e90e [ 452.828945][T19310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.828964][T19310] RSP: 002b:00007f6924bd2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.828985][T19310] RAX: ffffffffffffffda RBX: 00007f6924bd36c0 RCX: 00007f6923d5e90e [ 452.829000][T19310] RDX: 0000000000000046 RSI: 0000200000000100 RDI: 00000000000000c8 [ 452.829013][T19310] RBP: 00007f6924bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 452.829025][T19310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.829035][T19310] R13: 00007f6924026038 R14: 00007f6924025fa0 R15: 00007ffc3a023008 [ 452.829068][T19310] [ 454.175103][T19364] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 1, id = 0 [ 454.329622][T19372] __nla_validate_parse: 10 callbacks suppressed [ 454.329644][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 454.444652][T19381] openvswitch: netlink: IPv4 tun info is not correct [ 454.467020][T19382] netlink: 'syz.4.3374': attribute type 9 has an invalid length. [ 454.788014][T19390] block nbd6: server does not support multiple connections per device. [ 454.815690][T19390] block nbd6: shutting down sockets [ 454.925614][T19409] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3383'. [ 455.244097][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 455.263639][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3385'. [ 455.386909][T19428] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3386'. [ 455.473751][T19390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 455.486851][T19390] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 455.670347][T19390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.704439][T19390] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 455.718350][T19430] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3387'. [ 455.764859][T19390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.800557][T19390] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 455.880494][T19390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.906157][T19390] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 456.023460][T19390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.069198][T19390] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 456.296748][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 456.328843][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3394'. [ 456.341944][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 456.694358][T19471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3396'. [ 456.983986][T19475] tipc: Started in network mode [ 456.996992][T19475] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 457.030062][T19475] tipc: Enabled bearer , priority 0 [ 457.286487][T19500] hsr0: entered promiscuous mode [ 457.301911][T19500] hsr0: entered allmulticast mode [ 457.311984][T19500] hsr_slave_0: entered allmulticast mode [ 457.334011][T19500] hsr_slave_1: entered allmulticast mode [ 457.512546][T19506] IPVS: set_ctl: invalid protocol: 24 8.0.0.0:0 [ 457.858057][T19531] netlink: 'syz.2.3413': attribute type 6 has an invalid length. [ 457.902130][T18607] IPVS: starting estimator thread 0... [ 457.912217][T19531] netlink: 'syz.2.3413': attribute type 5 has an invalid length. [ 458.017602][T19535] IPVS: using max 25 ests per chain, 60000 per kthread [ 458.147590][T13855] tipc: Node number set to 11578026 [ 458.930383][T19555] pimreg: tun_chr_ioctl cmd 21731 [ 460.936080][T19561] __nla_validate_parse: 2 callbacks suppressed [ 460.936101][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'. [ 461.351118][T19590] syzkaller0: entered promiscuous mode [ 461.375395][T19590] syzkaller0: entered allmulticast mode [ 461.402221][T19584] tipc: Started in network mode [ 461.441120][T19584] tipc: Node identity 82da3256d92a, cluster identity 4711 [ 461.473339][T19584] tipc: Enabled bearer , priority 0 [ 461.545004][T19595] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 461.572114][T19584] tipc: Resetting bearer [ 461.641457][T19584] tipc: Disabling bearer [ 461.719824][T19599] gretap1: entered allmulticast mode [ 461.739894][T19599] bond3: (slave gretap1): making interface the new active one [ 461.753392][T19599] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 461.999698][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3439'. [ 462.540334][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3438'. [ 463.133284][T19664] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3453'. [ 463.195208][T19675] netlink: 'syz.1.3456': attribute type 12 has an invalid length. [ 463.421363][T19683] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3458'. [ 463.435380][T19677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.446470][T19683] tipc: Enabling of bearer rejected, media not registered [ 463.611094][T19693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3462'. [ 463.726113][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 463.766892][T19698] bridge1: entered promiscuous mode [ 463.780576][T19698] bridge1: entered allmulticast mode [ 463.923480][T19708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3467'. [ 463.923483][T19709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3467'. [ 463.955829][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 464.200551][T19726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.301830][T19720] geneve2: entered promiscuous mode [ 464.324462][T19720] geneve2: entered allmulticast mode [ 464.445202][T19735] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 464.752909][T19744] hsr_slave_0: left promiscuous mode [ 464.772662][T19744] hsr_slave_1: left promiscuous mode [ 464.941265][T19735] syzkaller0: entered promiscuous mode [ 464.960525][T19735] syzkaller0: entered allmulticast mode [ 468.208747][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 150 seconds [ 468.219707][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 150 seconds [ 468.231458][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 150 seconds [ 468.243144][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 150 seconds [ 468.263347][T19798] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 468.278633][T19798] __nla_validate_parse: 10 callbacks suppressed [ 468.278652][T19798] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3490'. [ 468.348698][T19798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3490'. [ 468.405666][T19804] lo: entered allmulticast mode [ 468.433611][T19804] lo: left allmulticast mode [ 469.483387][T19852] syzkaller0: entered promiscuous mode [ 469.491143][T19852] syzkaller0: entered allmulticast mode [ 469.684509][T19860] netlink: 'syz.4.3508': attribute type 33 has an invalid length. [ 469.694229][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 469.705128][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3507'. [ 469.853675][T19869] tipc: Resetting bearer [ 469.882132][T19869] tipc: Disabling bearer [ 469.935262][T19869] team0 (unregistering): Port device team_slave_0 removed [ 469.976170][T19869] team0 (unregistering): Port device team_slave_1 removed [ 470.236858][T19889] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 470.432156][T19897] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3515'. [ 470.465813][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 470.519689][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 470.685474][T19903] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 470.721926][T19903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.824272][T19908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3520'. [ 470.833665][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3520'. [ 470.881201][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3519'. [ 471.311633][T19921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.347067][T19921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.634611][T19930] FAULT_INJECTION: forcing a failure. [ 471.634611][T19930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.651699][T19930] CPU: 0 UID: 0 PID: 19930 Comm: syz.0.3528 Not tainted syzkaller #0 PREEMPT(full) [ 471.651731][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.651745][T19930] Call Trace: [ 471.651754][T19930] [ 471.651765][T19930] dump_stack_lvl+0xe8/0x150 [ 471.651804][T19930] should_fail_ex+0x40c/0x560 [ 471.651835][T19930] _copy_from_user+0x2d/0xb0 [ 471.651950][T19930] ___sys_sendmsg+0x1c6/0x360 [ 471.652059][T19930] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.652083][T19930] ? __lock_acquire+0x683/0x2cf0 [ 471.652175][T19930] __sys_sendmmsg+0x273/0x4d0 [ 471.652217][T19930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.652255][T19930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.652362][T19930] ? ksys_write+0x242/0x270 [ 471.652400][T19930] ? __pfx_ksys_write+0x10/0x10 [ 471.652443][T19930] __x64_sys_sendmmsg+0xa0/0xc0 [ 471.652470][T19930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.652495][T19930] do_syscall_64+0x174/0x580 [ 471.652527][T19930] ? trace_irq_disable+0x3b/0x140 [ 471.652556][T19930] ? clear_bhb_loop+0x70/0xc0 [ 471.652585][T19930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.652609][T19930] RIP: 0033:0x7f5e11b9e0d9 [ 471.652632][T19930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.652651][T19930] RSP: 002b:00007f5e12b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.652676][T19930] RAX: ffffffffffffffda RBX: 00007f5e11e25fa0 RCX: 00007f5e11b9e0d9 [ 471.652693][T19930] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 471.652709][T19930] RBP: 00007f5e12b44090 R08: 0000000000000000 R09: 0000000000000000 [ 471.652722][T19930] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 471.652736][T19930] R13: 00007f5e11e26038 R14: 00007f5e11e25fa0 R15: 00007fffae04b318 [ 471.652774][T19930] [ 472.215599][T19924] bridge1: entered promiscuous mode [ 472.228523][T19924] bridge1: entered allmulticast mode [ 473.564549][T19983] __nla_validate_parse: 3 callbacks suppressed [ 473.564570][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 473.599123][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3547'. [ 473.919608][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 473.975324][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 474.029707][T20004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3555'. [ 474.119099][T20004] bond2: entered promiscuous mode [ 474.316767][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 474.349100][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 474.631210][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3563'. [ 474.692164][T20027] vlan2: entered promiscuous mode [ 474.718655][T20027] ip6gretap0: entered promiscuous mode [ 474.878941][T20038] xt_hashlimit: size too large, truncated to 1048576 [ 475.311945][T20053] netlink: 'syz.2.3571': attribute type 13 has an invalid length. [ 475.332298][T20053] netlink: 'syz.2.3571': attribute type 17 has an invalid length. [ 475.396739][T20055] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3573'. [ 475.532315][T20053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.549135][T20053] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.571822][T20053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.642616][T20053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.658995][T20053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.678349][T20053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.700407][T20053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.741990][T20053] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 475.779950][T18607] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.787198][T18607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.832070][T18607] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.839315][T18607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.850284][T20064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.133242][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 476.472608][T20074] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 476.509433][T20079] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.517017][T20079] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.549606][T20084] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.556887][T20084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.564551][T20084] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.571811][T20084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.595515][T20087] netlink: 'syz.1.3580': attribute type 26 has an invalid length. [ 476.678392][T20084] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.685731][T20084] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.974943][T20098] netlink: get zone limit has 4 unknown bytes [ 477.003694][T20102] ipvlan2: entered promiscuous mode [ 477.020813][T20102] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.050430][T20102] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 477.068075][T20102] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 477.533217][T20125] netlink: 'syz.1.3590': attribute type 4 has an invalid length. [ 477.735635][T20128] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 478.641546][T20143] __nla_validate_parse: 5 callbacks suppressed [ 478.641567][T20143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 478.657833][T20143] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 479.029937][T20145] veth0_macvtap: entered allmulticast mode [ 479.065058][T20152] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3599'. [ 479.082417][T20145] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 479.438950][T20160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3602'. [ 479.483260][T20163] netlink: ct family unspecified [ 479.502003][T20163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.727130][T20175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 479.761135][T20178] syzkaller0: entered promiscuous mode [ 479.779327][T20178] syzkaller0: entered allmulticast mode [ 479.811090][T20178] IPv6: Can't replace route, no match found [ 479.855216][T20181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3610'. [ 479.896296][T20183] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3611'. [ 479.950969][T20183] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3611'. [ 479.979296][T20188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3611'. [ 479.999457][T20183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3611'. [ 480.088328][T20191] netlink: 'syz.2.3615': attribute type 1 has an invalid length. [ 480.155355][T20191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.175907][T20194] bond2: (slave gretap1): making interface the new active one [ 480.187357][T20194] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 480.239165][T20191] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 480.255773][T20194] netlink: 'syz.2.3615': attribute type 10 has an invalid length. [ 480.264259][T20194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3615'. [ 480.294502][T20194] dummy0: entered promiscuous mode [ 480.326695][T20194] bond2: (slave dummy0): Releasing active interface [ 480.519667][T20216] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 480.540571][T13855] syzkaller1: tun_net_xmit 90 [ 480.552592][T20216] syzkaller1: Linktype set failed because interface is up [ 480.599775][T20216] tipc: Enabling of bearer rejected, failed to enable media [ 480.609414][T13855] syzkaller1: tun_net_xmit 90 [ 480.663498][T20223] syzkaller1: tun_chr_ioctl cmd 35092 [ 481.041348][T20236] ip6gre1: entered promiscuous mode [ 481.047007][T20236] ip6gre1: entered allmulticast mode [ 481.635642][T20267] netlink: 'syz.1.3635': attribute type 11 has an invalid length. [ 481.780333][T20278] C: renamed from veth1_to_team (while UP) [ 481.804075][T20278] netlink: 'syz.0.3638': attribute type 2 has an invalid length. [ 481.819229][T20278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 482.420503][T20309] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.544526][T20312] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 483.626332][T20351] wg0: entered promiscuous mode [ 483.638757][T20351] wg0: entered allmulticast mode [ 483.674606][T20355] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 483.694324][T20355] __nla_validate_parse: 13 callbacks suppressed [ 483.694332][T20354] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 483.694343][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3657'. [ 483.694363][T20355] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 483.786972][ T5614] block nbd6: Receive control failed (result -32) [ 483.796328][ T50] block nbd6: Receive control failed (result -32) [ 483.946612][T20359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3661'. [ 484.243788][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3666'. [ 484.362275][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3667'. [ 484.386121][T20381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3668'. [ 484.581626][T20395] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3673'. [ 484.872796][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 485.165125][T20419] 0: reclassify loop, rule prio 0, protocol 03 [ 485.437354][T20432] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 485.464390][T20432] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 485.534283][T20433] syzkaller0: entered promiscuous mode [ 485.546810][T20433] syzkaller0: entered allmulticast mode [ 486.046194][T20446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.111071][T20446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3690'. [ 486.177132][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 487.520218][T20491] syzkaller0: entered promiscuous mode [ 487.537336][T20491] syzkaller0: entered allmulticast mode [ 487.989747][T20513] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 488.222013][T20525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3715'. [ 491.290053][ T4974] udevd[4974]: worker [5625] /devices/virtual/block/nbd2 is taking a long time [ 491.322616][T20525] bond0: entered promiscuous mode [ 491.327908][T20525] bond_slave_0: entered promiscuous mode [ 491.333817][T20525] bond_slave_1: entered promiscuous mode [ 491.342134][T20525] bond0: left promiscuous mode [ 491.346941][T20525] bond_slave_0: left promiscuous mode [ 491.354422][T20525] bond_slave_1: left promiscuous mode [ 491.531177][T20552] __nla_validate_parse: 1 callbacks suppressed [ 491.531210][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3724'. [ 491.594549][T20552] ip6gretap0: entered promiscuous mode [ 491.600726][T20552] macvtap1: entered promiscuous mode [ 491.609031][T20552] macvtap1: entered allmulticast mode [ 491.615383][T20552] ip6gretap0: entered allmulticast mode [ 491.626398][T20559] ip6gretap0: left allmulticast mode [ 491.632097][T20559] ip6gretap0: left promiscuous mode [ 491.644084][T20559] macvtap1: left promiscuous mode [ 491.649830][T20559] macvtap1: left allmulticast mode [ 491.736958][T20560] netlink: 'syz.0.3725': attribute type 10 has an invalid length. [ 492.075834][T20577] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3731'. [ 492.294198][T20592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3734'. [ 492.419681][T20598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3737'. [ 492.443230][T20598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.977322][T20616] syzkaller0: entered promiscuous mode [ 492.998595][T20616] syzkaller0: entered allmulticast mode [ 493.173762][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3742'. [ 493.291265][T20632] team0 (unregistering): Port device team_slave_0 removed [ 493.349338][T20632] team0 (unregistering): Port device team_slave_1 removed [ 493.683159][T20643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3748'. [ 493.758714][T20647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3748'. [ 493.777749][T20645] ipvlan2: entered promiscuous mode [ 493.796096][T20645] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 493.834995][T20645] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 493.863281][T20645] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 494.113069][T20653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3751'. [ 494.270674][T20661] syzkaller0: entered promiscuous mode [ 494.276503][T20661] syzkaller0: entered allmulticast mode [ 494.400855][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 494.413523][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 494.601835][T20671] block nbd3: NBD_DISCONNECT [ 494.631301][T20671] block nbd3: Send disconnect failed -104 [ 494.657766][T20671] block nbd3: shutting down sockets [ 494.995751][T20697] openvswitch: netlink: Missing key (keys=40, expected=100) [ 495.033603][T20700] openvswitch: netlink: Missing key (keys=40, expected=100) [ 495.854946][T20732] netlink: 'syz.2.3774': attribute type 3 has an invalid length. [ 495.901063][T20738] pimreg: entered allmulticast mode [ 495.911231][T20738] pimreg: left allmulticast mode [ 496.070830][T20732] syzkaller0: entered promiscuous mode [ 496.088140][T20732] syzkaller0: entered allmulticast mode [ 496.149914][T20744] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 496.235502][T20748] Cannot find map_set index 2 as target [ 496.450302][T20759] batadv_slave_1: entered promiscuous mode [ 496.498022][T20757] batadv_slave_1: left promiscuous mode [ 496.542403][T20761] openvswitch: netlink: IP tunnel dst address not specified [ 496.642096][T20765] vxcan3: entered promiscuous mode [ 496.658532][T20767] netlink: 'syz.2.3785': attribute type 1 has an invalid length. [ 496.723932][T20767] bond3: option mode: invalid value (8) [ 496.731946][T20767] bond3 (unregistering): Released all slaves [ 496.831848][T20767] netlink: 'syz.2.3785': attribute type 10 has an invalid length. [ 496.852768][T20767] __nla_validate_parse: 15 callbacks suppressed [ 496.852787][T20767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3785'. [ 496.874211][T20772] dummy0: left promiscuous mode [ 496.920475][T20767] dummy0: entered promiscuous mode [ 497.435818][T20799] syzkaller1: entered promiscuous mode [ 497.446821][T20799] syzkaller1: entered allmulticast mode [ 497.715280][T20813] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 497.723923][T20813] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 497.732882][T20813] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 497.932338][T20823] veth1_vlan: entered allmulticast mode [ 497.985089][T20825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.227223][T20835] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 498.241171][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'. [ 498.291511][ T1628] block nbd2: Possible stuck request ffff888026b9e000: control (read@0,1024B). Runtime 180 seconds [ 498.304227][ T1628] block nbd2: Possible stuck request ffff888026b9e1c0: control (read@1024,1024B). Runtime 180 seconds [ 498.315379][ T1628] block nbd2: Possible stuck request ffff888026b9e380: control (read@2048,1024B). Runtime 180 seconds [ 498.326489][ T1628] block nbd2: Possible stuck request ffff888026b9e540: control (read@3072,1024B). Runtime 180 seconds [ 498.683078][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 498.749564][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 498.982051][T18596] IPVS: starting estimator thread 0... [ 499.088446][T20874] IPVS: using max 25 ests per chain, 60000 per kthread [ 499.289610][T20891] [ 499.292012][T20891] ====================================================== [ 499.299058][T20891] WARNING: possible circular locking dependency detected [ 499.306118][T20891] syzkaller #0 Not tainted [ 499.310568][T20891] ------------------------------------------------------ [ 499.317628][T20891] syz.2.3823/20891 is trying to acquire lock: [ 499.323726][T20891] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 499.332953][T20891] [ 499.332953][T20891] but task is already holding lock: [ 499.340348][T20891] ffff88807d92f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 499.349876][T20891] [ 499.349876][T20891] which lock already depends on the new lock. [ 499.349876][T20891] [ 499.360324][T20891] [ 499.360324][T20891] the existing dependency chain (in reverse order) is: [ 499.369444][T20891] [ 499.369444][T20891] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 499.377024][T20891] __might_fault+0xcb/0x130 [ 499.382072][T20891] _copy_from_user+0x28/0xb0 [ 499.387218][T20891] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 499.393896][T20891] ip_generic_getfrag+0x149/0x2d0 [ 499.399540][T20891] __ip6_append_data+0x3b26/0x40c0 [ 499.405253][T20891] ip6_append_data+0x108/0x270 [ 499.410549][T20891] rawv6_sendmsg+0x1298/0x18c0 [ 499.415920][T20891] sock_sendmsg_nosec+0x10e/0x180 [ 499.421539][T20891] ____sys_sendmsg+0x54e/0x850 [ 499.426841][T20891] ___sys_sendmsg+0x2a5/0x360 [ 499.432081][T20891] __x64_sys_sendmsg+0x1b1/0x290 [ 499.437576][T20891] do_syscall_64+0x174/0x580 [ 499.442727][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.449155][T20891] [ 499.449155][T20891] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 499.457004][T20891] lock_sock_nested+0x41/0x100 [ 499.462375][T20891] tls_sw_sendmsg+0x15f/0x2b50 [ 499.467743][T20891] sock_sendmsg_nosec+0x90/0x180 [ 499.473225][T20891] ____sys_sendmsg+0x54e/0x850 [ 499.478538][T20891] ___sys_sendmsg+0x2a5/0x360 [ 499.483753][T20891] __x64_sys_sendmsg+0x1b1/0x290 [ 499.489224][T20891] do_syscall_64+0x174/0x580 [ 499.494387][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.500815][T20891] [ 499.500815][T20891] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 499.508303][T20891] __mutex_lock+0x19d/0x1550 [ 499.513438][T20891] tls_sw_sendmsg+0x13a/0x2b50 [ 499.518735][T20891] sock_sendmsg_nosec+0x90/0x180 [ 499.524215][T20891] sock_sendmsg+0x1ca/0x2d0 [ 499.529338][T20891] __sock_xmit+0x245/0x4f0 [ 499.534374][T20891] nbd_disconnect+0x3ad/0x560 [ 499.539621][T20891] nbd_disconnect_and_put+0x32/0x280 [ 499.545709][T20891] nbd_genl_disconnect+0x4af/0x590 [ 499.551361][T20891] genl_family_rcv_msg_doit+0x233/0x340 [ 499.557543][T20891] genl_rcv_msg+0x614/0x7a0 [ 499.562600][T20891] netlink_rcv_skb+0x226/0x4a0 [ 499.567906][T20891] genl_rcv+0x28/0x40 [ 499.572449][T20891] netlink_unicast+0x7bb/0x940 [ 499.577754][T20891] netlink_sendmsg+0x813/0xb40 [ 499.583066][T20891] sock_sendmsg_nosec+0x13a/0x180 [ 499.588631][T20891] ____sys_sendmsg+0x54e/0x850 [ 499.593934][T20891] ___sys_sendmsg+0x2a5/0x360 [ 499.599226][T20891] __x64_sys_sendmsg+0x1b1/0x290 [ 499.604701][T20891] do_syscall_64+0x174/0x580 [ 499.609833][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.616266][T20891] [ 499.616266][T20891] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 499.623927][T20891] __mutex_lock+0x19d/0x1550 [ 499.629063][T20891] nbd_queue_rq+0x373/0x1150 [ 499.634193][T20891] blk_mq_dispatch_rq_list+0x499/0x1990 [ 499.640417][T20891] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 499.647335][T20891] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 499.653895][T20891] blk_mq_run_work_fn+0x16c/0x300 [ 499.659462][T20891] process_scheduled_works+0xa8e/0x14e0 [ 499.665549][T20891] worker_thread+0xa47/0xfb0 [ 499.670766][T20891] kthread+0x388/0x470 [ 499.675389][T20891] ret_from_fork+0x514/0xb70 [ 499.680569][T20891] ret_from_fork_asm+0x1a/0x30 [ 499.685897][T20891] [ 499.685897][T20891] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 499.693218][T20891] __mutex_lock+0x19d/0x1550 [ 499.698361][T20891] nbd_queue_rq+0xc1/0x1150 [ 499.703413][T20891] blk_mq_dispatch_rq_list+0x499/0x1990 [ 499.709497][T20891] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 499.716360][T20891] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 499.722877][T20891] blk_mq_run_work_fn+0x16c/0x300 [ 499.728448][T20891] process_scheduled_works+0xa8e/0x14e0 [ 499.734529][T20891] worker_thread+0xa47/0xfb0 [ 499.739673][T20891] kthread+0x388/0x470 [ 499.744279][T20891] ret_from_fork+0x514/0xb70 [ 499.749413][T20891] ret_from_fork_asm+0x1a/0x30 [ 499.754720][T20891] [ 499.754720][T20891] -> #3 (set->srcu){.+.+}-{0:0}: [ 499.761862][T20891] __synchronize_srcu+0xc9/0x2f0 [ 499.767359][T20891] elevator_switch+0x1e8/0x7b0 [ 499.772717][T20891] elevator_change+0x2fa/0x480 [ 499.778021][T20891] elevator_set_default+0x375/0x440 [ 499.783777][T20891] blk_register_queue+0x3f3/0x4e0 [ 499.789402][T20891] __add_disk+0x6cb/0xe30 [ 499.794326][T20891] add_disk_fwnode+0x100/0x3a0 [ 499.799650][T20891] nbd_dev_add+0x733/0xb60 [ 499.804606][T20891] nbd_init+0x15f/0x1e0 [ 499.809485][T20891] do_one_initcall+0x250/0x870 [ 499.814804][T20891] do_initcall_level+0x10a/0x1a0 [ 499.820351][T20891] do_initcalls+0x59/0xa0 [ 499.825219][T20891] kernel_init_freeable+0x29d/0x3e0 [ 499.830954][T20891] kernel_init+0x1d/0x1d0 [ 499.835820][T20891] ret_from_fork+0x514/0xb70 [ 499.840951][T20891] ret_from_fork_asm+0x1a/0x30 [ 499.846261][T20891] [ 499.846261][T20891] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 499.854116][T20891] __mutex_lock+0x19d/0x1550 [ 499.859253][T20891] elevator_change+0x1af/0x480 [ 499.864550][T20891] elevator_set_none+0xb5/0x140 [ 499.869938][T20891] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 499.876312][T20891] nbd_start_device+0x189/0xb30 [ 499.881721][T20891] nbd_genl_connect+0x1597/0x1c10 [ 499.887297][T20891] genl_family_rcv_msg_doit+0x233/0x340 [ 499.893405][T20891] genl_rcv_msg+0x614/0x7a0 [ 499.898460][T20891] netlink_rcv_skb+0x226/0x4a0 [ 499.903762][T20891] genl_rcv+0x28/0x40 [ 499.908293][T20891] netlink_unicast+0x7bb/0x940 [ 499.913612][T20891] netlink_sendmsg+0x813/0xb40 [ 499.918912][T20891] sock_sendmsg_nosec+0x13a/0x180 [ 499.924473][T20891] ____sys_sendmsg+0x54e/0x850 [ 499.929768][T20891] ___sys_sendmsg+0x2a5/0x360 [ 499.934987][T20891] __x64_sys_sendmsg+0x1b1/0x290 [ 499.940476][T20891] do_syscall_64+0x174/0x580 [ 499.945634][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.952086][T20891] [ 499.952086][T20891] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 499.960735][T20891] blk_alloc_queue+0x544/0x690 [ 499.966056][T20891] __blk_mq_alloc_disk+0x194/0x390 [ 499.971723][T20891] nbd_dev_add+0x494/0xb60 [ 499.976697][T20891] nbd_init+0x15f/0x1e0 [ 499.981431][T20891] do_one_initcall+0x250/0x870 [ 499.986755][T20891] do_initcall_level+0x10a/0x1a0 [ 499.992260][T20891] do_initcalls+0x59/0xa0 [ 499.997140][T20891] kernel_init_freeable+0x29d/0x3e0 [ 500.002903][T20891] kernel_init+0x1d/0x1d0 [ 500.007801][T20891] ret_from_fork+0x514/0xb70 [ 500.012946][T20891] ret_from_fork_asm+0x1a/0x30 [ 500.018295][T20891] [ 500.018295][T20891] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 500.025560][T20891] __lock_acquire+0x1520/0x2cf0 [ 500.030965][T20891] lock_acquire+0x106/0x350 [ 500.036052][T20891] fs_reclaim_acquire+0x71/0x100 [ 500.041539][T20891] prepare_alloc_pages+0x15b/0x650 [ 500.047198][T20891] __alloc_frozen_pages_noprof+0x12f/0x380 [ 500.053583][T20891] alloc_pages_mpol+0x212/0x380 [ 500.059000][T20891] alloc_pages_noprof+0xac/0x2a0 [ 500.064588][T20891] pte_alloc_one+0x22/0x370 [ 500.069657][T20891] do_pte_missing+0x13c8/0x34b0 [ 500.075056][T20891] handle_mm_fault+0x1b36/0x3080 [ 500.080532][T20891] do_user_addr_fault+0x744/0x1340 [ 500.086189][T20891] exc_page_fault+0x6a/0xc0 [ 500.091233][T20891] asm_exc_page_fault+0x26/0x30 [ 500.096617][T20891] rep_movs_alternative+0xf/0xa0 [ 500.102445][T20891] _copy_from_user+0x7a/0xb0 [ 500.107577][T20891] rfcomm_sock_setsockopt+0x370/0x850 [ 500.113589][T20891] do_sock_setsockopt+0x17c/0x1b0 [ 500.119156][T20891] __x64_sys_setsockopt+0x13d/0x1b0 [ 500.124891][T20891] do_syscall_64+0x174/0x580 [ 500.130031][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.136465][T20891] [ 500.136465][T20891] other info that might help us debug this: [ 500.136465][T20891] [ 500.146699][T20891] Chain exists of: [ 500.146699][T20891] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 500.146699][T20891] [ 500.159321][T20891] Possible unsafe locking scenario: [ 500.159321][T20891] [ 500.166777][T20891] CPU0 CPU1 [ 500.172147][T20891] ---- ---- [ 500.177520][T20891] rlock(&mm->mmap_lock); [ 500.181953][T20891] lock(sk_lock-AF_INET6); [ 500.188987][T20891] lock(&mm->mmap_lock); [ 500.195853][T20891] lock(fs_reclaim); [ 500.199846][T20891] [ 500.199846][T20891] *** DEADLOCK *** [ 500.199846][T20891] [ 500.208002][T20891] 2 locks held by syz.2.3823/20891: [ 500.213208][T20891] #0: ffff88807a1f7260 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_setsockopt+0x1df/0x850 [ 500.225243][T20891] #1: ffff88807d92f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 500.235185][T20891] [ 500.235185][T20891] stack backtrace: [ 500.241085][T20891] CPU: 0 UID: 0 PID: 20891 Comm: syz.2.3823 Not tainted syzkaller #0 PREEMPT(full) [ 500.241106][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.241117][T20891] Call Trace: [ 500.241124][T20891] [ 500.241132][T20891] dump_stack_lvl+0xe8/0x150 [ 500.241162][T20891] print_circular_bug+0x2e1/0x300 [ 500.241190][T20891] check_noncircular+0x12e/0x150 [ 500.241217][T20891] __lock_acquire+0x1520/0x2cf0 [ 500.241241][T20891] ? __lock_acquire+0x683/0x2cf0 [ 500.241262][T20891] ? is_bpf_text_address+0x26/0x2b0 [ 500.241287][T20891] ? __lock_acquire+0x683/0x2cf0 [ 500.241308][T20891] ? prepare_alloc_pages+0x15b/0x650 [ 500.241327][T20891] lock_acquire+0x106/0x350 [ 500.241346][T20891] ? prepare_alloc_pages+0x15b/0x650 [ 500.241369][T20891] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.241387][T20891] fs_reclaim_acquire+0x71/0x100 [ 500.241406][T20891] ? prepare_alloc_pages+0x15b/0x650 [ 500.241425][T20891] prepare_alloc_pages+0x15b/0x650 [ 500.241448][T20891] __alloc_frozen_pages_noprof+0x12f/0x380 [ 500.241472][T20891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 500.241495][T20891] ? __pfx_policy_nodemask+0x10/0x10 [ 500.241517][T20891] ? finish_task_switch+0x412/0xc60 [ 500.241537][T20891] alloc_pages_mpol+0x212/0x380 [ 500.241562][T20891] alloc_pages_noprof+0xac/0x2a0 [ 500.241586][T20891] pte_alloc_one+0x22/0x370 [ 500.241602][T20891] do_pte_missing+0x13c8/0x34b0 [ 500.241624][T20891] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 500.241675][T20891] handle_mm_fault+0x1b36/0x3080 [ 500.241697][T20891] ? handle_mm_fault+0xec/0x3080 [ 500.241716][T20891] ? __pfx_handle_mm_fault+0x10/0x10 [ 500.241737][T20891] ? __lock_acquire+0x683/0x2cf0 [ 500.241759][T20891] ? lock_mm_and_find_vma+0xa7/0x340 [ 500.241779][T20891] do_user_addr_fault+0x744/0x1340 [ 500.241808][T20891] exc_page_fault+0x6a/0xc0 [ 500.241831][T20891] asm_exc_page_fault+0x26/0x30 [ 500.241848][T20891] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 500.241867][T20891] Code: c4 10 e9 c4 63 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 63 04 00 66 2e [ 500.241881][T20891] RSP: 0018:ffffc90006747d58 EFLAGS: 00050202 [ 500.241896][T20891] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 500.241907][T20891] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90006747dc0 [ 500.241918][T20891] RBP: ffffc90006747e48 R08: 0000000000000003 R09: 0000000000000004 [ 500.241928][T20891] R10: dffffc0000000000 R11: fffff52000ce8fb8 R12: 1ffff92000ce8fb4 [ 500.241941][T20891] R13: ffff88807a1f7000 R14: ffffc90006747dc0 R15: 0000200000000040 [ 500.241960][T20891] _copy_from_user+0x7a/0xb0 [ 500.241983][T20891] rfcomm_sock_setsockopt+0x370/0x850 [ 500.242007][T20891] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 500.242028][T20891] ? inode_set_ctime_current+0x220/0xb50 [ 500.242054][T20891] ? aa_sock_opt_perm+0xff/0x1a0 [ 500.242129][T20891] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 500.242179][T20891] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 500.242201][T20891] do_sock_setsockopt+0x17c/0x1b0 [ 500.242220][T20891] __x64_sys_setsockopt+0x13d/0x1b0 [ 500.242237][T20891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.242254][T20891] do_syscall_64+0x174/0x580 [ 500.242275][T20891] ? trace_irq_disable+0x3b/0x140 [ 500.242295][T20891] ? clear_bhb_loop+0x70/0xc0 [ 500.242313][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.242329][T20891] RIP: 0033:0x7f50b5b9e0d9 [ 500.242344][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.242357][T20891] RSP: 002b:00007f50b69d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.242373][T20891] RAX: ffffffffffffffda RBX: 00007f50b5e26090 RCX: 00007f50b5b9e0d9 [ 500.242385][T20891] RDX: 0000000000000003 RSI: 0000000000000012 RDI: 0000000000000005 [ 500.242394][T20891] RBP: 00007f50b5c35024 R08: 0000000000000004 R09: 0000000000000000 [ 500.242404][T20891] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 500.242414][T20891] R13: 00007f50b5e26128 R14: 00007f50b5e26090 R15: 00007ffec0eaea88 [ 500.242433][T20891] [ 500.667502][T20896] ip_tables: iptables: counters copy to user failed while replacing table [ 500.685471][T20897] FAULT_INJECTION: forcing a failure. [ 500.685471][T20897] name failslab, interval 1, probability 0, space 0, times 0 [ 500.698524][T20897] CPU: 1 UID: 0 PID: 20897 Comm: syz.0.3826 Not tainted syzkaller #0 PREEMPT(full) [ 500.698553][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.698567][T20897] Call Trace: [ 500.698575][T20897] [ 500.698583][T20897] dump_stack_lvl+0xe8/0x150 [ 500.698627][T20897] should_fail_ex+0x40c/0x560 [ 500.698650][T20897] should_failslab+0xa8/0x100 [ 500.698680][T20897] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 500.698702][T20897] ? rcu_is_watching+0x15/0xb0 [ 500.698732][T20897] ? __alloc_skb+0x1d7/0x7a0 [ 500.698762][T20897] ? __alloc_skb+0x1d7/0x7a0 [ 500.698794][T20897] __alloc_skb+0x1d7/0x7a0 [ 500.698825][T20897] alloc_skb_with_frags+0xc6/0x760 [ 500.698844][T20897] ? __pfx___css_rstat_updated+0x10/0x10 [ 500.698899][T20897] ? do_raw_spin_unlock+0xf5/0x210 [ 500.698923][T20897] sock_alloc_send_pskb+0x878/0x990 [ 500.698946][T20897] ? rcu_is_watching+0x15/0xb0 [ 500.698983][T20897] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 500.699012][T20897] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 500.699035][T20897] unix_dgram_sendmsg+0x4da/0x17b0 [ 500.699148][T20897] ? rcu_is_watching+0x15/0xb0 [ 500.699177][T20897] ? __up_read+0x29c/0x930 [ 500.699198][T20897] ? __pfx___up_read+0x10/0x10 [ 500.699215][T20897] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 500.699247][T20897] ? aa_sock_msg_perm+0xda/0x1b0 [ 500.699279][T20897] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 500.699308][T20897] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 500.699337][T20897] sock_sendmsg_nosec+0x13a/0x180 [ 500.699366][T20897] ____sys_sendmsg+0x54e/0x850 [ 500.699389][T20897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.699416][T20897] ? import_iovec+0x73/0xa0 [ 500.699443][T20897] ___sys_sendmsg+0x2a5/0x360 [ 500.699471][T20897] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.699511][T20897] ? rcu_is_watching+0x15/0xb0 [ 500.699540][T20897] ? lock_release+0x4b/0x3c0 [ 500.699564][T20897] ? __might_fault+0xcb/0x130 [ 500.699588][T20897] __sys_sendmmsg+0x273/0x4d0 [ 500.699621][T20897] ? __pfx___sys_sendmmsg+0x10/0x10 [ 500.699648][T20897] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.699686][T20897] ? ksys_write+0x242/0x270 [ 500.699717][T20897] ? __pfx_ksys_write+0x10/0x10 [ 500.699749][T20897] __x64_sys_sendmmsg+0xa0/0xc0 [ 500.699771][T20897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.699792][T20897] do_syscall_64+0x174/0x580 [ 500.699818][T20897] ? trace_irq_disable+0x3b/0x140 [ 500.699842][T20897] ? clear_bhb_loop+0x70/0xc0 [ 500.699864][T20897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.699884][T20897] RIP: 0033:0x7f5e11b9e0d9 [ 500.699903][T20897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.699920][T20897] RSP: 002b:00007f5e12b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 500.699941][T20897] RAX: ffffffffffffffda RBX: 00007f5e11e25fa0 RCX: 00007f5e11b9e0d9 [ 500.699957][T20897] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 500.699971][T20897] RBP: 00007f5e12b44090 R08: 0000000000000000 R09: 0000000000000000 [ 500.699984][T20897] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 500.699996][T20897] R13: 00007f5e11e26038 R14: 00007f5e11e25fa0 R15: 00007fffae04b318 [ 500.700020][T20897] [ 501.029206][ T1152] wlan1: Trigger new scan to find an IBSS to join [ 501.032730][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 501.037564][ T1152] wlan1: Trigger new scan to find an IBSS to join [ 501.044807][T20903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3824'. [ 504.128001][ T4974] udevd[4974]: worker [5625] /devices/virtual/block/nbd2 timeout; kill it [ 504.136708][ T4974] udevd[4974]: seq 19920 '/devices/virtual/block/nbd2' killed [ 505.889011][T18601] wlan1: Trigger new scan to find an IBSS to join [ 505.889011][T18607] wlan1: Trigger new scan to find an IBSS to join [ 506.778288][T18607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.778541][T18600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50